# changelog

author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.12.1.el8_10]
changelog:
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44291] {CVE-2024-38538}
  - drivers/amd/pm: fix a use-after-free in kv_parse_power_table (Michel Dänzer) [RHEL-26893] {CVE-2023-52469}
  - SUNRPC: Fix a suspicious RCU usage warning (Scott Mayhew) [RHEL-30503] {CVE-2023-52623}
  - ice: Fix some null pointer dereference issues in ice_ptp.c (Petr Oros) [RHEL-26901] {CVE-2023-52471}
  - xfs: fix internal error from AGFL exhaustion (Pavel Reichl) [RHEL-45581]
  - sched/psi: Fix use-after-free in ep_remove_wait_queue() (Phil Auld) [RHEL-38117] {CVE-2023-52707}
  - wait: add wake_up_pollfree() (Phil Auld) [RHEL-38117]
  - net/ipv6: avoid possible UAF in ip6_route_mpath_notify() (Hangbin Liu) [RHEL-33269] {CVE-2024-26852}
  - net: bridge: switchdev: Skip MDB replays of deferred events on offload (Ivan Vecera) [RHEL-33117] {CVE-2024-26837}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() (Pavel Reichl) [RHEL-31700] {CVE-2024-26772}
  - ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() (Pavel Reichl) [RHEL-31688] {CVE-2024-26773}
  - ext4: fix double-free of blocks due to wrong extents moved_len (Pavel Reichl) [RHEL-31612] {CVE-2024-26704}
  - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault) [RHEL-31389]
  - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Guillaume Nault) [RHEL-31389]
  - vxlan: Pull inner IP header in vxlan_rcv(). (Guillaume Nault) [RHEL-31389]
  - geneve: fix header validation in geneve[6]_xmit_skb (Guillaume Nault) [RHEL-31389]
  - geneve: make sure to pull inner header in geneve_rx() (Guillaume Nault) [RHEL-31389]
  - net: geneve: modify IP header check in geneve6_xmit_skb and geneve_xmit_skb (Guillaume Nault) [RHEL-31389]
  - net: geneve: check skb is large enough for IPv4/IPv6 header (Guillaume Nault) [RHEL-31389]
  - net/smc: fix neighbour and rtable leak in smc_ib_find_route() (Tobias Huschle) [RHEL-39744] {CVE-2024-36945}
  - igb: Fix string truncation warnings in igb_set_fw_version (Corinna Vinschen) [RHEL-38452] {CVE-2024-36010}
  - bonding: stop the device in bond_setup_by_slave() (Hangbin Liu) [RHEL-38327] {CVE-2023-52784}
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-39702] {CVE-2024-36020}
  - powerpc/64: Fix the definition of the fixmap area (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018}
  - powerpc/mm/hash64: Add a variable to track the end of IO mapping (Mamatha Inamdar) [RHEL-27191] {CVE-2021-47018}
  - nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). (Xin Long) [RHEL-39770] {CVE-2024-36933}
  - net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (Xin Long) [RHEL-39770]
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-39779] {CVE-2024-36929}
  - tcp: properly terminate timers for kernel sockets (Guillaume Nault) [RHEL-37171] {CVE-2024-35910}
  - net: relax socket state check at accept time. (Florian Westphal) [RHEL-39831]
  - tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets (Florian Westphal) [RHEL-39831] {CVE-2024-36905}
  - tcp: remove redundant check on tskb (Florian Westphal) [RHEL-39831]
  - drm/ast: Fix soft lockup (cki-backport-bot) [RHEL-37438] {CVE-2024-35952}
  - null_blk: Fix return value of nullb_device_power_store() (Ming Lei) [RHEL-39341]
  - null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues' (Ming Lei) [RHEL-39341]
  - null_blk: fix return value from null_add_dev() (Ming Lei) [RHEL-39341]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.13.1.el8_10]
changelog:
  - redhat: remove handling of deleted rhdocs/ directory from genspec.sh (Denys Vlasenko)
  - x86/bugs: Fix BHI retpoline check (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Clarify that syscall hardening isn't a BHI mitigation (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Fix BHI handling of RRSBA (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr' (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Fix BHI documentation (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Fix return type of spectre_bhi_state() (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bhi: Mitigate KVM by default (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bhi: Add BHI mitigation knob (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bhi: Add support for clearing branch history at syscall entry (Waiman Long) [RHEL-28202] {CVE-2024-2201}
  - x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file (Waiman Long) [RHEL-28202]
  - perf/x86/amd/lbr: Use freeze based on availability (Waiman Long) [RHEL-28202]
  - Documentation/kernel-parameters: Add spec_rstack_overflow to mitigations=off (Waiman Long) [RHEL-28202]
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Waiman Long) [RHEL-28202]
  - x86/bugs: Reset speculation control settings on init (Waiman Long) [RHEL-28202]
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Waiman Long) [RHEL-28202]
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Waiman Long) [RHEL-28202]
  - mptcp: ensure snd_nxt is properly initialized on connect (Davide Caratti) [RHEL-39865] {CVE-2024-36889}
  - powerpc/pseries: Enforce hcall result buffer validity and size (Mamatha Inamdar) [RHEL-48291] {CVE-2024-40974}
  - wifi: mac80211: fix potential key use-after-free (Jose Ignacio Tornos Martinez) [RHEL-28007] {CVE-2023-52530}
  - cppc_cpufreq: Fix possible null pointer dereference (Mark Langsdorf) [RHEL-44137] {CVE-2024-38573}
  - net/sched: act_mirred: use the backlog for mirred ingress (Davide Caratti) [RHEL-31718] {CVE-2024-26740}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-31922] {CVE-2024-26810}
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Davide Caratti) [RHEL-43464] {CVE-2024-36978}
  - tcp: fix tcp_init_transfer() to not reset icsk_ca_initialized (Guillaume Nault) [RHEL-37850] {CVE-2021-47304}
  - pstore/ram: Fix crash when setting number of cpus to an odd number (Lenny Szubowicz) [RHEL-29471] {CVE-2023-52619}
  - drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node (Jocelyn Falempe) [RHEL-37101] {CVE-2023-52662}
  - drm/vmwgfx: Fix the lifetime of the bo cursor memory (Jocelyn Falempe) [RHEL-36962] {CVE-2024-35810}
  - drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed (Jocelyn Falempe) [RHEL-34987] {CVE-2024-26940}
  - drm/vmwgfx: Unmap the surface before resetting it on a plane state (Jocelyn Falempe) [RHEL-35217] {CVE-2023-52648}
  - drm/vmwgfx: Fix invalid reads in fence signaled events (Jocelyn Falempe) [RHEL-40010] {CVE-2024-36960}
  - block: Fix wrong offset in bio_truncate() (Ming Lei) [RHEL-43782] {CVE-2022-48747}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46913] {CVE-2024-39487}
  - net: fix __dst_negative_advice() race (Xin Long) [RHEL-41183] {CVE-2024-36971}
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-33264] {CVE-2024-26853}
  - mac802154: fix llsec key resources release in mac802154_llsec_key_del (Steve Best) [RHEL-34967] {CVE-2024-26961}
  - cpufreq: exit() callback is optional (Mark Langsdorf) [RHEL-43840] {CVE-2024-38615}
  - cifs: prevent infinite recursion in CIFSGetDFSRefer() (Paulo Alcantara) [RHEL-34672]
  - cifs: lock chan_lock outside match_session (Paulo Alcantara) [RHEL-34672]
  - smb3: workaround negprot bug in some Samba servers (Paulo Alcantara) [RHEL-34672]
  - smb3: use netname when available on secondary channels (Paulo Alcantara) [RHEL-34672]
  - smb3: fix empty netname context on secondary channels (Paulo Alcantara) [RHEL-34672]
  - cifs: populate empty hostnames for extra channels (Paulo Alcantara) [RHEL-34672]
  - cifs: always iterate smb sessions using primary channel (Paulo Alcantara) [RHEL-34672]
  - cifs: Fix connections leak when tlink setup failed (Paulo Alcantara) [RHEL-34672]
  - cifs: Fix memory leak when build ntlmssp negotiate blob failed (Paulo Alcantara) [RHEL-34672]
  - cifs: always initialize struct msghdr smb_msg completely (Paulo Alcantara) [RHEL-34672]
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Paulo Alcantara) [RHEL-34672]
  - cifs: revalidate mapping when doing direct writes (Paulo Alcantara) [RHEL-34672]
  - cifs: skip extra NULL byte in filenames (Paulo Alcantara) [RHEL-34672]
  - cifs: list_for_each() -> list_for_each_entry() (Paulo Alcantara) [RHEL-34672]
  - smb2: small refactor in smb2_check_message() (Paulo Alcantara) [RHEL-34672]
  - cifs: Fix crash on unload of cifs_arc4.ko (Paulo Alcantara) [RHEL-34672]
  - cifs: remove check of list iterator against head past the loop body (Paulo Alcantara) [RHEL-34672]
  - cifs: fix reconnect on smb3 mount types (Paulo Alcantara) [RHEL-34672]
  - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (Paulo Alcantara) [RHEL-34672]
  - cifs: skip trailing separators of prefix paths (Paulo Alcantara) [RHEL-34672]
  - cifs: fix ntlmssp on old servers (Paulo Alcantara) [RHEL-34672]
  - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [RHEL-34672]
  - cifs: do not skip link targets when an I/O fails (Paulo Alcantara) [RHEL-34672]
  - cifs: fix confusing unneeded warning message on smb2.1 and earlier (Paulo Alcantara) [RHEL-34672]
  - smb3: fix snapshot mount option (Paulo Alcantara) [RHEL-34672]
  - cifs: fix workstation_name for multiuser mounts (Paulo Alcantara) [RHEL-34672]
  - cifs: alloc_path_with_tree_prefix: do not append sep. if the path is empty (Paulo Alcantara) [RHEL-34672]
  - cifs: free ntlmsspblob allocated in negotiate (Paulo Alcantara) [RHEL-34672]
  - cifs: avoid use of dstaddr as key for fscache client cookie (Paulo Alcantara) [RHEL-34672]
  - cifs: add server conn_id to fscache client cookie (Paulo Alcantara) [RHEL-34672]
  - cifs: fix missed refcounting of ipc tcon (Paulo Alcantara) [RHEL-34672]
  - smb2: clarify rc initialization in smb2_reconnect (Paulo Alcantara) [RHEL-34672]
  - cifs: populate server_hostname for extra channels (Paulo Alcantara) [RHEL-34672]
  - cifs: nosharesock should be set on new server (Paulo Alcantara) [RHEL-34672]
  - cifs: introduce cifs_ses_mark_for_reconnect() helper (Paulo Alcantara) [RHEL-34672]
  - cifs: protect srv_count with cifs_tcp_ses_lock (Paulo Alcantara) [RHEL-34672]
  - cifs: move debug print out of spinlock (Paulo Alcantara) [RHEL-34672]
  - cifs: do not duplicate fscache cookie for secondary channels (Paulo Alcantara) [RHEL-34672]
  - cifs: connect individual channel servers to primary channel server (Paulo Alcantara) [RHEL-34672]
  - cifs: protect session channel fields with chan_lock (Paulo Alcantara) [RHEL-34672]
  - cifs: do not negotiate session if session already exists (Paulo Alcantara) [RHEL-34672]
  - smb3: do not setup the fscache_super_cookie until fsinfo initialized (Paulo Alcantara) [RHEL-34672]
  - cifs: fix potential use-after-free bugs (Paulo Alcantara) [RHEL-34672]
  - cifs: release lock earlier in dequeue_mid error case (Paulo Alcantara) [RHEL-34672]
  - smb3: remove trivial dfs compile warning (Paulo Alcantara) [RHEL-34672]
  - cifs: support nested dfs links over reconnect (Paulo Alcantara) [RHEL-34672]
  - cifs: for compound requests, use open handle if possible (Paulo Alcantara) [RHEL-34672]
  - cifs: split out dfs code from cifs_reconnect() (Paulo Alcantara) [RHEL-34672]
  - cifs: convert list_for_each to entry variant (Paulo Alcantara) [RHEL-34672]
  - cifs: introduce new helper for cifs_reconnect() (Paulo Alcantara) [RHEL-34672]
  - cifs: fix print of hdr_flags in dfscache_proc_show() (Paulo Alcantara) [RHEL-34672]
  - cifs: send workstation name during ntlmssp session setup (Paulo Alcantara) [RHEL-34672]
  - cifs: nosharesock should not share socket with future sessions (Paulo Alcantara) [RHEL-34672]
  - smb3: add dynamic trace points for socket connection (Paulo Alcantara) [RHEL-34672]
  - cifs: Move SMB2_Create definitions to the shared area (Paulo Alcantara) [RHEL-34672]
  - cifs: Move more definitions into the shared area (Paulo Alcantara) [RHEL-34672]
  - cifs: move NEGOTIATE_PROTOCOL definitions out into the common area (Paulo Alcantara) [RHEL-34672]
  - cifs: Create a new shared file holding smb2 pdu definitions (Paulo Alcantara) [RHEL-34672]
  - cifs: fix incorrect check for null pointer in header_assemble (Paulo Alcantara) [RHEL-34672]
  - smb3: correct server pointer dereferencing check to be more consistent (Paulo Alcantara) [RHEL-34672]
  - cifs: Deal with some warnings from W=1 (Paulo Alcantara) [RHEL-34672]
  - cifs: fix a sign extension bug (Paulo Alcantara) [RHEL-34672]
  - cifs: fix incorrect kernel doc comments (Paulo Alcantara) [RHEL-34672]
  - cifs: remove pathname for file from SPDX header (Paulo Alcantara) [RHEL-34672]
  - cifs: move SMB FSCTL definitions to common code (Paulo Alcantara) [RHEL-34672]
  - cifs: rename cifs_common to smbfs_common (Paulo Alcantara) [RHEL-34672]
  - cifs: update FSCTL definitions (Paulo Alcantara) [RHEL-34672]
  - cifs: cifs_md4 convert to SPDX identifier (Paulo Alcantara) [RHEL-34672]
  - cifs: create a MD4 module and switch cifs.ko to use it (Paulo Alcantara) [RHEL-34672]
  - cifs: fork arc4 and create a separate module for it for cifs and other users (Paulo Alcantara) [RHEL-34672]
  - smb3: fix posix extensions mount option (Paulo Alcantara) [RHEL-34672]
  - cifs: fix wrong release in sess_alloc_buffer() failed path (Paulo Alcantara) [RHEL-34672]
  - CIFS: Fix a potencially linear read overflow (Paulo Alcantara) [RHEL-34672]
  - cifs: use the correct max-length for dentry_path_raw() (Paulo Alcantara) [RHEL-34672]
  - cifs: create sd context must be a multiple of 8 (Paulo Alcantara) [RHEL-34672]
  - cifs: do not share tcp sessions of dfs connections (Paulo Alcantara) [RHEL-34672]
  - cifs: added WARN_ON for all the count decrements (Paulo Alcantara) [RHEL-34672]
  - cifs: fix missing null session check in mount (Paulo Alcantara) [RHEL-34672]
  - cifs: handle reconnect of tcon when there is no cached dfs referral (Paulo Alcantara) [RHEL-34672]
  - cifs: fix the out of range assignment to bit fields in parse_server_interfaces (Paulo Alcantara) [RHEL-34672]
  - smb3: fix typo in header file (Paulo Alcantara) [RHEL-34672]
  - SMB3.1.1: Add support for negotiating signing algorithm (Paulo Alcantara) [RHEL-34672]
  - cifs: prevent NULL deref in cifs_compose_mount_options() (Paulo Alcantara) [RHEL-34672]
  - cifs: fix NULL dereference in smb2_check_message() (Paulo Alcantara) [RHEL-34672]
  - smbdirect: missing rc checks while waiting for rdma events (Paulo Alcantara) [RHEL-34672]
  - cifs: Avoid field over-reading memcpy() (Paulo Alcantara) [RHEL-34672]
  - smb311: remove dead code for non compounded posix query info (Paulo Alcantara) [RHEL-34672]
  - cifs: fix SMB1 error path in cifs_get_file_info_unix (Paulo Alcantara) [RHEL-34672]
  - smb3: fix uninitialized value for port in witness protocol move (Paulo Alcantara) [RHEL-34672]
  - cifs: fix unneeded null check (Paulo Alcantara) [RHEL-34672]
  - cifs: use SPDX-Licence-Identifier (Paulo Alcantara) [RHEL-34672]
  - cifs: convert list_for_each to entry variant in cifs_debug.c (Paulo Alcantara) [RHEL-34672]
  - cifs: convert list_for_each to entry variant in smb2misc.c (Paulo Alcantara) [RHEL-34672]
  - cifs: missed ref-counting smb session in find (Paulo Alcantara) [RHEL-34672]
  - cifs: do not share tcp servers with dfs mounts (Paulo Alcantara) [RHEL-34672]
  - cifs: set a minimum of 2 minutes for refreshing dfs cache (Paulo Alcantara) [RHEL-34672]
  - cifs: Remove unused inline function is_sysvol_or_netlogon() (Paulo Alcantara) [RHEL-34672]
  - cifs: remove duplicated prototype (Paulo Alcantara) [RHEL-34672]
  - cifs: fix ipv6 formating in cifs_ses_add_channel (Paulo Alcantara) [RHEL-34672]
  - cifs: fix string declarations and assignments in tracepoints (Paulo Alcantara) [RHEL-34672]
  - cifs: fix memory leak in smb2_copychunk_range (Paulo Alcantara) [RHEL-34672]
  - SMB3: incorrect file id in requests compounded with open (Paulo Alcantara) [RHEL-34672]
  - smb3: if max_channels set to more than one channel request multichannel (Paulo Alcantara) [RHEL-34672]
  - smb3: do not attempt multichannel to server which does not support it (Paulo Alcantara) [RHEL-34672]
  - smb3: when mounting with multichannel include it in requested capabilities (Paulo Alcantara) [RHEL-34672]
  - cifs: simplify SWN code with dummy funcs instead of ifdefs (Paulo Alcantara) [RHEL-34672]
  - cifs: log mount errors using cifs_errorf() (Paulo Alcantara) [RHEL-34672]
  - cifs: switch build_path_from_dentry() to using dentry_path_raw() (Paulo Alcantara) [RHEL-34672]
  - cifs: fix out-of-bound memory access when calling smb3_notify() at mount point (Paulo Alcantara) [RHEL-34672]
  - cifs: allocate buffer in the caller of build_path_from_dentry() (Paulo Alcantara) [RHEL-34672]
  - cifs: make build_path_from_dentry() return const char * (Paulo Alcantara) [RHEL-34672]
  - cifs: remove old dead code (Paulo Alcantara) [RHEL-34672]
  - fs: cifs: Remove repeated struct declaration (Paulo Alcantara) [RHEL-34672]
  - cifs: have cifs_fattr_to_inode() refuse to change type on live inode (Paulo Alcantara) [RHEL-34672]
  - cifs: have ->mkdir() handle race with another client sanely (Paulo Alcantara) [RHEL-34672]
  - do_cifs_create(): don't set ->i_mode of something we had not created (Paulo Alcantara) [RHEL-34672]
  - cifs: Silently ignore unknown oplock break handle (Paulo Alcantara) [RHEL-34672]
  - cifs: change noisy error message to FYI (Paulo Alcantara) [RHEL-34672]
  - cifs: print MIDs in decimal notation (Paulo Alcantara) [RHEL-34672]
  - cifs: minor simplification to smb2_is_network_name_deleted (Paulo Alcantara) [RHEL-34672]
  - TCON Reconnect during STATUS_NETWORK_NAME_DELETED (Paulo Alcantara) [RHEL-34672]
  - cifs: clarify hostname vs ip address in /proc/fs/cifs/DebugData (Paulo Alcantara) [RHEL-34672]
  - cifs: change confusing field serverName (to ip_addr) (Paulo Alcantara) [RHEL-34672]
  - cifs: Reformat DebugData and index connections by conn_id. (Paulo Alcantara) [RHEL-34672]
  - cifs: Identify a connection by a conn_id. (Paulo Alcantara) [RHEL-34672]
  - smb3: negotiate current dialect (SMB3.1.1) when version 3 or greater requested (Paulo Alcantara) [RHEL-34672]
  - smb3: Fix out-of-bounds bug in SMB2_negotiate() (Paulo Alcantara) [RHEL-34672]
  - fs/cifs: Simplify bool comparison. (Paulo Alcantara) [RHEL-34672]
  - fs/cifs: Assign boolean values to a bool variable (Paulo Alcantara) [RHEL-34672]
  - cifs: Avoid error pointer dereference (Paulo Alcantara) [RHEL-34672]
  - cifs: Re-indent cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672]
  - cifs: Unlock on errors in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672]
  - cifs: Delete a stray unlock in cifs_swn_reconnect() (Paulo Alcantara) [RHEL-34672]
  - cifs: Tracepoints and logs for tracing credit changes. (Paulo Alcantara) [RHEL-34672]
  - cifs: Fix some error pointers handling detected by static checker (Paulo Alcantara) [RHEL-34672]
  - smb3: remind users that witness protocol is experimental (Paulo Alcantara) [RHEL-34672]
  - SMB3.1.1: do not log warning message if server doesn't populate salt (Paulo Alcantara) [RHEL-34672]
  - SMB3.1.1: update comments clarifying SPNEGO info in negprot response (Paulo Alcantara) [RHEL-34672]
  - SMB3.1.1: remove confusing mount warning when no SPNEGO info on negprot rsp (Paulo Alcantara) [RHEL-34672]
  - SMB3: avoid confusing warning message on mount to Azure (Paulo Alcantara) [RHEL-34672]
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46662] {CVE-2024-39476}
  - net: fix information leakage in /proc/net/ptype (Hangbin Liu) [RHEL-44000] {CVE-2022-48757}
  - usb: typec: ucsi: Limit read size on v1.2 (Desnes Nunes) [RHEL-37286] {CVE-2024-35924}
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (Desnes Nunes) [RHEL-37286]
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (Desnes Nunes) [RHEL-37286]
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (Desnes Nunes) [RHEL-37286]
  - minmax: add umin(a, b) and umax(a, b) (Desnes Nunes) [RHEL-37286]
  - minmax: fix header inclusions (Desnes Nunes) [RHEL-37286]
  - minmax: clamp more efficiently by avoiding extra comparison (Desnes Nunes) [RHEL-37286]
  - minmax: sanity check constant bounds when clamping (Desnes Nunes) [RHEL-37286]
  - tracing: Define the is_signed_type() macro once (Desnes Nunes) [RHEL-37286]
  - linux/bits.h: fix compilation error with GENMASK (Desnes Nunes) [RHEL-37286]
  - x86/apic: Mask IOAPIC entries when disabling the local APIC (Lenny Szubowicz) [RHEL-18077]
  - userfaultfd: fix a race between writeprotect and exit_mmap() (Rafael Aquini) [RHEL-38410] {CVE-2021-47461}
  - mm: khugepaged: skip huge page collapse for special files (Waiman Long) [RHEL-38446] {CVE-2021-47491}
  - cachefiles: fix memory leak in cachefiles_add_cache() (Andrey Albershteyn) [RHEL-33109] {CVE-2024-26840}
  - drm/amd/display: Implement bounds check for stream encoder creation in DCN301 (Michel Dänzer) [RHEL-31429] {CVE-2024-26660}
  - net/mlx5: Discard command completions in internal error (Kamal Heib) [RHEL-44231] {CVE-2024-38555}
  - drm: Don't unref the same fb many times by mistake due to deadlock handling (CKI Backport Bot) [RHEL-29011] {CVE-2023-52486}
  - md: fix resync softlockup when bitmap size is less than array size (Nigel Croxon) [RHEL-43942] {CVE-2024-38598}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (Davide Caratti) [RHEL-39712] {CVE-2024-36017}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Phil Sutter) [RHEL-37205] {CVE-2024-35897}
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Phil Sutter) [RHEL-37205]
  - scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() (Ewan D. Milne) [RHEL-40172] {CVE-2024-36924}
  - scsi: lpfc: Move NPIV's transport unregistration to after resource clean up (Ewan D. Milne) [RHEL-40172] {CVE-2024-36952}
  - netfilter: nf_tables: fix memleak in map from abort path (Phil Sutter) [RHEL-35052] {CVE-2024-27011}
  - netfilter: nf_tables: reject new basechain after table flag update (Phil Sutter) [RHEL-37193] {CVE-2024-35900}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Phil Sutter) [RHEL-37197] {CVE-2024-35899}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-37210]
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-37210] {CVE-2024-35896}
  - netfilter: tproxy: bail out if IP has been disabled on the device (Phil Sutter) [RHEL-44363] {CVE-2024-36270}
  - netfilter: nfnetlink_queue: acquire rcu_read_lock() in instance_destroy_rcu() (Phil Sutter) [RHEL-44532] {CVE-2024-36286}
  - netfilter: nf_tables: do not compare internal table flags on updates (Phil Sutter) [RHEL-35114] {CVE-2024-27065}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Phil Sutter) [RHEL-35028] {CVE-2024-27019}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Phil Sutter) [RHEL-35024] {CVE-2024-27020}
  - netfilter: nf_tables: __nft_expr_type_get() selects specific family type (Phil Sutter) [RHEL-35024]
  - netfilter: conntrack: serialize hash resizes and cleanups (Phil Sutter) [RHEL-37703] {CVE-2021-47408}
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Phil Sutter) [RHEL-34217] {CVE-2024-26925}
  - netfilter: nf_tables: release batch on table validation from abort path (Phil Sutter) [RHEL-34217]
  - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-38319] {CVE-2023-52796}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.14.1.el8_10]
changelog:
  - s390/qeth: Fix kernel panic after setting hsuid (Mete Durlu) [RHEL-49754]
  - perf/core: Protect event sibling list locking against interrupt inversion (Daniel Vacek) [RHEL-31798]
  - vt: fix unicode buffer corruption when deleting characters (Steve Best) [RHEL-36936] {CVE-2024-35823}
  - cifs: translate network errors on send to -ECONNABORTED (Paulo Alcantara) [RHEL-36754]
  - xfs: don't block in busy flushing when freeing extents (Brian Foster) [RHEL-7984]
  - xfs: allow extent free intents to be retried (Brian Foster) [RHEL-7984]
  - xfs: pass alloc flags through to xfs_extent_busy_flush() (Brian Foster) [RHEL-7984]
  - xfs: use deferred frees for btree block freeing (Brian Foster) [RHEL-7984]
  - xfs: fix bounds check in xfs_defer_agfl_block() (Brian Foster) [RHEL-7984]
  - xfs: validate block number being freed before adding to xefi (Brian Foster) [RHEL-7984]
  - xfs: rename xfs_bmap_add_free to xfs_free_extent_later (Brian Foster) [RHEL-7984]
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Desnes Nunes) [RHEL-36803] {CVE-2024-35790}
  - stm class: Fix a double free in stm_register_device() (Steve Best) [RHEL-44514] {CVE-2024-38627}
  - s390/qeth: Fix potential loss of L3-IP@ in case of network issues (Mete Durlu) [RHEL-49755]
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44471] {CVE-2024-36489}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Bill O'Donnell) [RHEL-46473] {CVE-2024-39472}
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Brian Foster) [RHEL-31562] {CVE-2024-26686}
  - fs/proc: do_task_stat: move thread_group_cputime_adjusted() outside of lock_task_sighand() (Brian Foster) [RHEL-31562] {CVE-2024-26686}
  - fs/proc: do_task_stat: use __for_each_thread() (Brian Foster) [RHEL-31562] {CVE-2024-26686}
  - exit: Use the correct exit_code in /proc/<pid>/stat (Brian Foster) [RHEL-31562] {CVE-2024-26686}
  - scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool (Ewan D. Milne) [RHEL-38283] {CVE-2023-52811}
  - scsi: qla2xxx: Fix double free of fcport (Ewan D. Milne) [RHEL-39549] {CVE-2024-26929}
  - scsi: qla2xxx: Fix double free of the ha->vp_map pointer (Ewan D. Milne) [RHEL-39549] {CVE-2024-26930}
  - scsi: qla2xxx: Fix command flush on cable pull (Ewan D. Milne) [RHEL-39549] {CVE-2024-26931}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.15.1.el8_10]
changelog:
  - Revert "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-44613]
  - ionic: fix use after netif_napi_del() (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502}
  - ionic: clean interrupt before enabling queue to avoid credit race (CKI Backport Bot) [RHEL-47624] {CVE-2024-39502}
  - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (CKI Backport Bot) [RHEL-49321] {CVE-2021-47624}
  - xhci: Handle TD clearing for multiple streams case (CKI Backport Bot) [RHEL-47882] {CVE-2024-40927}
  - net: openvswitch: Fix Use-After-Free in ovs_ct_exit (cki-backport-bot) [RHEL-36362] {CVE-2024-27395}
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979}
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Ivan Vecera) [RHEL-43721] {CVE-2024-36979}
  - net: bridge: mst: fix vlan use-after-free (cki-backport-bot) [RHEL-43721] {CVE-2024-36979}
  - irqchip/gic-v3-its: Prevent double free on error (Charles Mirabile) [RHEL-37022] {CVE-2024-35847}
  - irqchip/gic-v3-its: Fix potential VPE leak on error (Charles Mirabile) [RHEL-37744] {CVE-2021-47373}
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Charles Mirabile) [RHEL-34735] {CVE-2022-48632}
  - iommu/dma: fix zeroing of bounce buffer padding used by untrusted devices (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - swiotlb: remove alloc_size argument to swiotlb_tbl_map_single() (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - swiotlb: extend buffer pre-padding to alloc_align_mask if necessary (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - swiotlb: Fix alignment checks when both allocation and DMA masks are present (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - swiotlb: Fix double-allocation of slots due to broken alignment handling (Eder Zulian) [RHEL-36954] {CVE-2024-35814}
  - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (cki-backport-bot) [RHEL-44441] {CVE-2024-31076}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.16.1.el8_10]
changelog:
  - x86/bhi: Fix incorrect CLEAR_BRANCH_HISTORY position in entry_INT80_compat (Waiman Long) [RHEL-50648]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.17.1.el8_10]
changelog:
  - kyber: fix out of bounds access when preempted (Ming Lei) [RHEL-27258] {CVE-2021-46984}
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster) [RHEL-35874]
  - fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading (Brian Foster) [RHEL-35874]
  - fbmem: Do not delete the mode that is still in use (CKI Backport Bot) [RHEL-37796] {CVE-2021-47338}
  - netpoll: Fix race condition in netpoll_owner_active (CKI Backport Bot) [RHEL-49361] {CVE-2024-41005}
  - firmware: arm_scpi: Fix string overflow in SCPI genpd driver (Mark Salter) [RHEL-43702] {CVE-2021-47609}
  - ipv6: prevent possible NULL dereference in rt6_probe() (Guillaume Nault) [RHEL-48149] {CVE-2024-40960}
  - HID: i2c-hid-of: fix NULL-deref on failed power up (CKI Backport Bot) [RHEL-31598] {CVE-2024-26717}
  - cpufreq: amd-pstate: fix memory leak on CPU EPP exit (CKI Backport Bot) [RHEL-48489] {CVE-2024-40997}
  - x86/mm/pat: fix VM_PAT handling in COW mappings (Chris von Recklinghausen) [RHEL-37258] {CVE-2024-35877}
  - PCI/PM: Drain runtime-idle callbacks before driver removal (Myron Stowe) [RHEL-42937] {CVE-2024-35809}
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [RHEL-42937] {CVE-2024-35809}
  - drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (Mika Penttilä) [RHEL-26909] {CVE-2023-52470}
  - USB: core: Fix hang in usb_kill_urb by adding memory barriers (Desnes Nunes) [RHEL-43979] {CVE-2022-48760}
  - cifs: fix bad fids sent over wire (Paulo Alcantara) [RHEL-52517]
  - smb3: add additional null check in SMB311_posix_mkdir (Paulo Alcantara) [RHEL-52517]
  - smb3: add additional null check in SMB2_tcon (Paulo Alcantara) [RHEL-52517]
  - smb3: add additional null check in SMB2_open (Paulo Alcantara) [RHEL-52517]
  - smb3: add additional null check in SMB2_ioctl (Paulo Alcantara) [RHEL-52517]
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501}
  - drivers: core: synchronize really_probe() and dev_uevent() (Mark Langsdorf) [RHEL-47642] {CVE-2024-39501}
  - udp: do not accept non-tunnel GSO skbs landing in a tunnel (Xin Long) [RHEL-42997] {CVE-2024-35884}
  - filelock: Remove locks reliably when fcntl/close race is detected (Bill O'Donnell) [RHEL-50170] {CVE-2024-41012}
  - Input: add bounds checking to input_set_capability() (Benjamin Tissoires) [RHEL-21413] {CVE-2022-48619}
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (CKI Backport Bot) [RHEL-48130] {CVE-2024-40959}
  - blk-cgroup: fix list corruption from reorder of WRITE ->lqueued (Ming Lei) [RHEL-33695]
  - blk-cgroup: fix list corruption from resetting io stat (Ming Lei) [RHEL-33695]
  - net: do not leave a dangling sk pointer, when socket creation fails (CKI Backport Bot) [RHEL-48060] {CVE-2024-40954}
  - perf/x86/lbr: Filter vsyscall addresses (Michael Petlan) [RHEL-28991] {CVE-2023-52476}
  - vmci: prevent speculation leaks by sanitizing event in event_deliver() (CKI Backport Bot) [RHEL-47678] {CVE-2024-39499}
  - serial: core: fix transmit-buffer reset and memleak (Steve Best) [RHEL-38731] {CVE-2021-47527}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Mamatha Inamdar) [RHEL-51236] {CVE-2024-41065}
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Mamatha Inamdar) [RHEL-51220] {CVE-2024-41064}
  - x86: stop playing stack games in profile_pc() (Steve Best) [RHEL-51643] {CVE-2024-42096}
  - mptcp: ensure snd_una is properly initialized on connect (Florian Westphal) [RHEL-47933 RHEL-47934] {CVE-2024-40931}
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (CKI Backport Bot) [RHEL-47492] {CVE-2024-39506}
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50194] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50279] {CVE-2024-41090}
  - usb-storage: alauda: Check whether the media is initialized (Desnes Nunes) [RHEL-43708] {CVE-2024-38619}
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Desnes Nunes) [RHEL-43708] {CVE-2024-38619}
  - hwmon: (w83793) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37723] {CVE-2021-47384}
  - block: fix that util can be greater than 100% (Ming Lei) [RHEL-23074]
  - block: support to account io_ticks precisely (Ming Lei) [RHEL-23074]
  - watchdog: Fix possible use-after-free by calling del_timer_sync() (Steve Best) [RHEL-38795] {CVE-2021-47321}
  - hwmon: (w83792d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37719] {CVE-2021-47385}
  - mlxsw: spectrum: Protect driver from buggy firmware (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560}
  - mlxsw: Verify the accessed index doesn't exceed the array length (CKI Backport Bot) [RHEL-42245] {CVE-2021-47560}
  - dm: call the resume method on internal suspend (Benjamin Marzinski) [RHEL-41835] {CVE-2024-26880}
  - tty: Fix out-of-bound vmalloc access in imageblit (Steve Best) [RHEL-37727] {CVE-2021-47383}
  - hwmon: (w83791d) Fix NULL pointer dereference by removing unnecessary structure field (Steve Best) [RHEL-37715] {CVE-2021-47386}
  - hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs (Steve Best) [RHEL-37710] {CVE-2021-47393}
  - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells (Steve Best) [RHEL-38436] {CVE-2021-47497}
  - driver core: auxiliary bus: Fix memory leak when driver_register() fail (Steve Best) [RHEL-37901] {CVE-2021-47287}
  - phylib: fix potential use-after-free (cki-backport-bot) [RHEL-43764] {CVE-2022-48754}
  - ptp: Fix possible memory leak in ptp_clock_register() (Hangbin Liu) [RHEL-38424] {CVE-2021-47455}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-51315] {CVE-2024-41076}
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (CKI Backport Bot) [RHEL-51618] {CVE-2024-42090}
  - ftruncate: pass a signed offset (CKI Backport Bot) [RHEL-51598] {CVE-2024-42084}
  - af_unix: Fix garbage collector racing against connect() (Felix Maurer) [RHEL-34225] {CVE-2024-26923}
  - virtio-net: Add validation for used length (Laurent Vivier) [RHEL-42080] {CVE-2021-47352}
  - net: fix possible store tearing in neigh_periodic_work() (Antoine Tenart) [RHEL-42359] {CVE-2023-52522}
  - tunnels: fix out of bounds access when building IPv6 PMTU error (Antoine Tenart) [RHEL-41823] {CVE-2024-26665}
  - vt_ioctl: fix array_index_nospec in vt_setactivate (John W. Linville) [RHEL-49141] {CVE-2022-48804}
  - Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() (CKI Backport Bot) [RHEL-38302] {CVE-2023-52840}
  - netns: Make get_net_ns() handle zero refcount net (Antoine Tenart) [RHEL-48105] {CVE-2024-40958}
  - tracing: Ensure visibility when inserting an element into tracing_map (Michael Petlan) [RHEL-30457] {CVE-2024-26645}
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50072]
  - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (CKI Backport Bot) [RHEL-51144] {CVE-2024-41056}
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington) [RHEL-11843]
  - firmware: cs_dsp: Fix overflow checking of wmfw header (CKI Backport Bot) [RHEL-50999] {CVE-2024-41039}
  - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (CKI Backport Bot) [RHEL-50987] {CVE-2024-41038}
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (Xin Long) [RHEL-48471] {CVE-2024-40995}
  - net: fix out-of-bounds access in ops_init (Xin Long) [RHEL-43185] {CVE-2024-36883}
  - x86/mce/therm_throt: Undo thermal polling properly on CPU offline (Steve Best) [RHEL-45310]
  - x86/mce/therm_throt: Do not access uninitialized therm_work (Steve Best) [RHEL-45310]
  - x86/mce/therm_throt: Mark throttle_active_work() as __maybe_unused (Steve Best) [RHEL-45310]
  - x86/mce/therm_throt: Mask out read-only and reserved MSR bits (Steve Best) [RHEL-45310]
  - x86/mce/therm_throt: Optimize notifications of thermal throttle (Steve Best) [RHEL-45310]
  - jiffies: add utility function to calculate delta in ms (Steve Best) [RHEL-45310]
  - x86/mce: Lower throttling MCE messages' priority to warning (Steve Best) [RHEL-45310]
  - dmaengine: idxd: Fix oops during rmmod on single-CPU platforms (Eder Zulian) [RHEL-37361] {CVE-2024-35989}
  - xfs: don't walk off the end of a directory data block (CKI Backport Bot) [RHEL-50879] {CVE-2024-41013}
  - xfs: add bounds checking to xlog_recover_process_data (CKI Backport Bot) [RHEL-50856] {CVE-2024-41014}
  - dm-crypt: limit the size of encryption requests (Benjamin Marzinski) [RHEL-29330]
  - netfilter: flowtable: remove nf_ct_l4proto_find() call (Florian Westphal) [RHEL-49589]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.18.1.el8_10]
changelog:
  - scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (Ewan D. Milne) [RHEL-39805] {CVE-2024-36920}
  - tun: limit printing rate when illegal packet received by tun dev (Jon Maloy) [RHEL-35046] {CVE-2024-27013}
  - drm/amdgpu/debugfs: fix error code when smc register accessors are NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817}
  - drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL (Michel Dänzer) [RHEL-38210] {CVE-2023-52817}
  - drm/amdgpu/mes: fix use-after-free issue (Michel Dänzer) [RHEL-44043] {CVE-2024-38581}
  - drm/amdgpu: Fix the null pointer when load rlc firmware (Michel Dänzer) [RHEL-30603] {CVE-2024-26649}
  - drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' (Michel Dänzer) [RHEL-35160] {CVE-2024-27042}
  - net/sched: Fix UAF when resolving a clash (Xin Long) [RHEL-51014] {CVE-2024-41040}
  - tcp_metrics: validate source addr length (Guillaume Nault) [RHEL-52025] {CVE-2024-42154}
  - NFSv4/pnfs: Fix a use-after-free bug in open (Benjamin Coddington) [RHEL-35508]
  - NFSv4: Don't hold the layoutget locks across multiple RPC calls (Benjamin Coddington) [RHEL-35508]
  - scsi: qedf: Make qedf_execute_tmf() non-preemptible (John Meneghini) [RHEL-51799] {CVE-2024-42124}
  - Input: elantech - fix stack out of bound access in elantech_change_report_id() (CKI Backport Bot) [RHEL-41938] {CVE-2021-47097}
  - HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect (CKI Backport Bot) [RHEL-28982] {CVE-2023-52478}
  - drm/radeon: fix UBSAN warning in kv_dpm.c (CKI Backport Bot) [RHEL-48399] {CVE-2024-40988}
  - usb: core: Don't hold the device lock while sleeping in do_proc_control() (Desnes Nunes) [RHEL-43646] {CVE-2021-47582}
  - USB: core: Make do_proc_control() and do_proc_bulk() killable (Desnes Nunes) [RHEL-43646] {CVE-2021-47582}
  - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48327] {CVE-2024-40978}
  - wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (CKI Backport Bot) [RHEL-48309] {CVE-2024-40977}
  - net: tcp: accept old ack during closing (Jamie Bainbridge) [RHEL-52433]
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48016] {CVE-2024-40941}
  - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53988]
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47908] {CVE-2024-40929}
  - Input: aiptek - properly check endpoint type (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836}
  - Input: aiptek - use descriptors of current altsetting (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836}
  - Input: aiptek - fix endpoint sanity check (Benjamin Tissoires) [RHEL-48963] {CVE-2022-48836}
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (CKI Backport Bot) [RHEL-52373] {CVE-2024-42226}
  - wifi: mt76: replace skb_put with skb_put_zero (CKI Backport Bot) [RHEL-52366] {CVE-2024-42225}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47776] {CVE-2024-40912}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47758] {CVE-2024-40911}
  - VMCI: Use struct_size() in kmalloc() (Steve Best) [RHEL-37325] {CVE-2024-35944}
  - VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler() (Steve Best) [RHEL-37325] {CVE-2024-35944}
  - VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host() (Steve Best) [RHEL-37325] {CVE-2024-35944}
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Jose Ignacio Tornos Martinez) [RHEL-51761] {CVE-2024-42114}
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (CKI Backport Bot) [RHEL-51442] {CVE-2024-41097}
  - nfs: handle error of rpc_proc_register() in init_nfs_fs() (Scott Mayhew) [RHEL-39904] {CVE-2024-36939}
  - drm/radeon: check bo_va->bo is non-NULL before using it (CKI Backport Bot) [RHEL-51184] {CVE-2024-41060}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51027] {CVE-2024-41041}
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (CKI Backport Bot) [RHEL-50961] {CVE-2024-41035}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44408] {CVE-2024-37356}
  - tcp: avoid too many retransmit packets (Florian Westphal) [RHEL-48627] {CVE-2024-41007}
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Florian Westphal) [RHEL-48627]
  - net: tcp: fix unexcepted socket die when snd_wnd is 0 (Florian Westphal) [RHEL-48627]
  - tcp: refactor tcp_retransmit_timer() (Florian Westphal) [RHEL-48627]
  - tcp: exit if nothing to retransmit on RTO timeout (Florian Westphal) [RHEL-48627]
  - netfilter: nf_tables: Reject tables of unsupported family (Florian Westphal) [RHEL-21418] {CVE-2023-6040}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.19.1.el8_10]
changelog:
  - drm/i915/vma: Fix UAF on destroy against retire race (Mika Penttilä) [RHEL-35222] {CVE-2024-26939}
  - RHEL-48620 (Kenneth Yin) [RHEL-48620]
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (CKI Backport Bot) [RHEL-42721] {CVE-2024-26855}
  - net: usb: asix: do not force pause frames support (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: asix: fix "can't send until first packet is send" issue (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: asix: fix modprobe "sysfs: cannot create duplicate filename" (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: asix: add proper error handling of usb read errors (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - asix: fix wrong return value in asix_check_host_enable() (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - asix: fix uninit-value in asix_mdio_read() (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: fix boolconv.cocci warnings (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: do not call phy_disconnect() for ax88178 (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: move embedded PHY detection as early as possible (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: asix: fix uninit value bugs (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: add missing stop (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: suspend PHY on driver probe (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: manage PHY PM from MAC (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: Fix less than zero comparison of a u16 (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: add error handling for asix_mdio_* functions (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: ax88772: add phylib support (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - net: usb: asix: refactor asix_read_phy_addr() and handle errors on return (Ken Cox) [RHEL-28108] {CVE-2021-47101}
  - SUNRPC: always free ctxt when freeing deferred request (Jay Shin) [RHEL-40936]
  - SUNRPC: double free xprt_ctxt while still in use (Jay Shin) [RHEL-40936]
  - SUNRPC: Remove svc_rqst::rq_xprt_hlen (Jay Shin) [RHEL-40936]
  - SUNRPC: Remove dead code in svc_tcp_release_rqst() (Jay Shin) [RHEL-40936]
  - x86/bugs: Extend VMware Retbleed workaround to Nehalem & earlier CPUs (Waiman Long) [RHEL-48646]
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-39797] {CVE-2024-36922}
  - scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (John Meneghini) [RHEL-39908] {CVE-2024-36919}
  - nbd: always initialize struct msghdr completely (Ming Lei) [RHEL-29498] {CVE-2024-26638}
  - block: don't call rq_qos_ops->done_bio if the bio isn't tracked (Ming Lei) [RHEL-42151] {CVE-2021-47412}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (Maurizio Lombardi) [RHEL-52013] {CVE-2024-42152}
  - ipv6: prevent NULL dereference in ip6_output() (Sabrina Dubroca) [RHEL-39912] {CVE-2024-36901}
  - ppp: reject claimed-as-LCP but actually malformed packets (Guillaume Nault) [RHEL-51052] {CVE-2024-41044}
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (CKI Backport Bot) [RHEL-54834] {CVE-2024-43830}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44108] {CVE-2024-38579}
  - scsi: qedf: Ensure the copied buf is NUL terminated (John Meneghini) [RHEL-44195] {CVE-2024-38559}
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Waiman Long) [RHEL-53657] {CVE-2024-42240}
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (CKI Backport Bot) [RHEL-47529] {CVE-2024-40901}
  - ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (CKI Backport Bot) [RHEL-39843] {CVE-2024-36902}
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez) [RHEL-45167]
  - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez) [RHEL-45167]
  - net: usb: ax88179_178a: fix link status when link is set to down/up (Jose Ignacio Tornos Martinez) [RHEL-45167]
  - net: usb: ax88179_178a: avoid writing the mac address before first reading (Jose Ignacio Tornos Martinez) [RHEL-45167]
  - KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr() (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953}
  - KVM: arm64: vgic-v2: Use cpuid from userspace as vcpu_id (Shaoqin Huang) [RHEL-40837] {CVE-2024-36953}
  - media: cec: cec-api: add locking in cec_release() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: avoid confusing "transmit timed out" message (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: avoid recursive cec_claim_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: cec-adap: always cancel work in cec_transmit_msg_fh (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: remove length check of Timer Status (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: count low-drive, error and arb-lost conditions (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: add note about *_from_edid() function usage in drm (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: add adap_unconfigured() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: add adap_nb_transmit_canceled() callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: don't set last_initiator if tx in progress (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: disable adapter in cec_devnode_unregister (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: core: not all messages were passed on when monitoring (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: add support for Absolute Volume Control (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: log when claiming LA fails unexpectedly (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: drop activate_cnt, use state info instead (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: reconfigure if the PA changes during configuration (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: fix is_configuring state (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: stop trying LAs on CEC_TX_STATUS_TIMEOUT (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: don't unconfigure if already unconfigured (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: add optional adap_configured callback (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: add xfer_timeout_ms field (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: use call_op and check for !unregistered (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-pin: fix interrupt en/disable handling (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-pin: drop unused 'enabled' field from struct cec_pin (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-pin: fix off-by-one SFT check (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-pin: rename timer overrun variables (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: correctly pass on reply results (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: abort if the current transmit was canceled (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: call enable_adap on s_log_addrs (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: media/cec.h: document cec_adapter fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: fix a deadlock situation (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: safely unhook lists in cec_data (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: copy sequence field for the reply (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: fix trivial style warnings (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: add 'unregistered' checks (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec-adap.c: don't use flush_scheduled_work() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: Use fallthrough pseudo-keyword (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: remove unused waitq and phys_addrs fields (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: silence shift wrapping warning in __cec_s_log_addrs() (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - media: cec: move the core to a separate directory (Kate Hsuan) [RHEL-22559] {CVE-2024-23848}
  - net/iucv: Avoid explicit cpumask var allocation on stack (CKI Backport Bot) [RHEL-51631] {CVE-2024-42094}
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-40400]
  - KVM: selftests: Make hyperv_clock require TSC based system clocksource (Vitaly Kuznetsov) [RHEL-19027]
  - KVM: selftests: Run clocksource dependent tests with hyperv_clocksource_tsc_page too (Vitaly Kuznetsov) [RHEL-19027]
  - KVM: selftests: Use generic sys_clocksource_is_tsc() in vmx_nested_tsc_scaling_test (Vitaly Kuznetsov) [RHEL-19027]
  - KVM: selftests: Generalize check_clocksource() from kvm_clock_test (Vitaly Kuznetsov) [RHEL-19027]
  - firmware: cs_dsp: Return error if block header overflows file (CKI Backport Bot) [RHEL-53646] {CVE-2024-42238}
  - firmware: cs_dsp: Validate payload length before processing block (CKI Backport Bot) [RHEL-53638] {CVE-2024-42237}
  - mm, slub: fix potential memoryleak in kmem_cache_open() (Waiman Long) [RHEL-38404] {CVE-2021-47466}
  - slub: don't panic for memcg kmem cache creation failure (Waiman Long) [RHEL-38404] {CVE-2021-47466}
  - wifi: ath11k: fix htt pktlog locking (Jose Ignacio Tornos Martinez) [RHEL-38317] {CVE-2023-52800}
  - wifi: ath11k: fix dfs radar event locking (Jose Ignacio Tornos Martinez) [RHEL-38165] {CVE-2023-52798}
  - lib/generic-radix-tree.c: Don't overflow in peek() (Waiman Long) [RHEL-37737] {CVE-2021-47432}
  - include/linux/generic-radix-tree.h: replace kernel.h with the necessary inclusions (Waiman Long) [RHEL-37737] {CVE-2021-47432}
  - EDAC/i10nm: Skip the absent memory controllers (Aristeu Rozanski) [RHEL-43236]
  - scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() (John Meneghini) [RHEL-38197] {CVE-2023-52809}
  - gfs2: Fix potential glock use-after-free on unmount (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570}
  - gfs2: simplify gdlm_put_lock with out_free label (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570}
  - gfs2: Remove ill-placed consistency check (Andreas Gruenbacher) [RHEL-44149] {CVE-2024-38570}
  - nvme-fc: do not wait in vain when unloading module (Ewan D. Milne) [RHEL-33083] {CVE-2024-26846}
  - HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts (CKI Backport Bot) [RHEL-49698] {CVE-2022-48866}
  - scsi: qedf: Set qed_slowpath_params to zero before use (John Meneghini) [RHEL-9797]
  - scsi: qedf: Wait for stag work during unload (John Meneghini) [RHEL-9797]
  - scsi: qedf: Don't process stag work during unload and recovery (John Meneghini) [RHEL-9797]
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Audra Mitchell) [RHEL-42625] {CVE-2024-26720}
  - mm: avoid overflows in dirty throttling logic (Audra Mitchell) [RHEL-51840] {CVE-2024-42131}
  - mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again (Audra Mitchell) [RHEL-42625] {CVE-2024-26720}
  - ACPI: fix NULL pointer dereference (Mark Langsdorf) [RHEL-37897] {CVE-2021-47289}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.20.1.el8_10]
changelog:
  - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Shaoqin Huang) [RHEL-48417] {CVE-2024-40989}
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (CKI Backport Bot) [RHEL-55597] {CVE-2024-43871}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-26680] {CVE-2024-26600}
  - nvmet-fc: avoid deadlock on delete association path (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769}
  - nvmet-fc: release reference on target port (Maurizio Lombardi) [RHEL-31618] {CVE-2024-26769}
  - ACPI: LPIT: Avoid u32 multiplication overflow (Mark Langsdorf) [RHEL-37062] {CVE-2023-52683}
  - sched/deadline: Fix task_struct reference leak (Phil Auld) [RHEL-50904] {CVE-2024-41023}
  - nfsd: fix crash on LOCKT on reexported NFSv3 (Benjamin Coddington) [RHEL-31515]
  - mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path (CKI Backport Bot) [RHEL-26570] {CVE-2024-26595}
  - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ivan Vecera) [RHEL-26570] {CVE-2024-26595}
  - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-29110] {CVE-2023-52605}
  - ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit() (Mark Langsdorf) [RHEL-33198] {CVE-2024-26894}
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Audra Mitchell) [RHEL-51132] {CVE-2024-41055}
  - mm, kmsan: fix infinite recursion due to RCU critical section (Audra Mitchell) [RHEL-51132] {CVE-2024-41055}
  - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek) [RHEL-30904]
  - cipso: fix total option length computation (Ondrej Mosnacek) [RHEL-30904]
  - ext4: do not create EA inode under buffer lock (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}
  - ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}
  - ext4: check the return value of ext4_xattr_inode_dec_ref() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}
  - ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (Carlos Maiolino) [RHEL-48507] {CVE-2024-40998}
  - ext4: remove duplicate definition of ext4_xattr_ibody_inline_set() (Carlos Maiolino) [RHEL-48271] {CVE-2024-40972}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.21.1.el8_10]
changelog:
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55874]
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (CKI Backport Bot) [RHEL-55123] {CVE-2024-42265}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44207] {CVE-2024-38558}
  - mlxsw: thermal: Fix out-of-bounds memory accesses (CKI Backport Bot) [RHEL-38375] {CVE-2021-47441}
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (CKI Backport Bot) [RHEL-47552] {CVE-2024-40904}
  - ipvs: properly dereference pe in ip_vs_add_service (Phil Sutter) [RHEL-54903] {CVE-2024-42322}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (CKI Backport Bot) [RHEL-53702] {CVE-2024-42246}
  - drm/amdgpu: change vm->task_info handling (Michel Dänzer) [RHEL-49379] {CVE-2024-41008}
  - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (Michel Dänzer) [RHEL-45036] {CVE-2024-39471}
  - drm/amdgpu: add error handle to avoid out-of-bounds (Michel Dänzer) [RHEL-45036] {CVE-2024-39471}
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Michel Dänzer) [RHEL-52845] {CVE-2024-42228}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.22.1.el8_10]
changelog:
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Michal Schmidt) [RHEL-51278] {CVE-2024-41071}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.23.1.el8_10]
changelog:
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [RHEL-57002]
  - netfilter: nft_set_pipapo: do not free live element (Phil Sutter) [RHEL-34221] {CVE-2024-26924}
  - netfilter: nf_tables: missing iterator type in lookup walk (Phil Sutter) [RHEL-35033] {CVE-2024-27017}
  - netfilter: nft_set_pipapo: walk over current view on netlink dump (Phil Sutter) [RHEL-35033] {CVE-2024-27017}
  - netfilter: nftables: add helper function to flush set elements (Phil Sutter) [RHEL-35033] {CVE-2024-27017}
  - netfilter: nf_tables: prefer nft_chain_validate (Phil Sutter) [RHEL-51040] {CVE-2024-41042}
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Phil Sutter) [RHEL-51516] {CVE-2024-42070}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Phil Sutter) [RHEL-43003] {CVE-2024-35898}
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Phil Sutter) [RHEL-47606] {CVE-2024-39503}
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Phil Sutter) [RHEL-47606] {CVE-2024-39503}
  - netfilter: ipset: Add list flush to cancel_gc (Phil Sutter) [RHEL-47606] {CVE-2024-39503}
  - netfilter: nf_conntrack_h323: Add protection for bmp length out of range (Phil Sutter) [RHEL-42680] {CVE-2024-26851}
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - dev/parport: fix the array out-of-bounds risk (Steve Best) [RHEL-54985] {CVE-2024-42301}
  - KVM: Always flush async #PF workqueue when vCPU is being destroyed (Sean Christopherson) [RHEL-35100] {CVE-2024-26976}
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44279] {CVE-2024-38540}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55069] {CVE-2024-42284}
  - Bluetooth: Fix TOCTOU in HCI debugfs implementation (CKI Backport Bot) [RHEL-26831] {CVE-2024-24857}
  - drm/i915/dpt: Make DPT object unshrinkable (CKI Backport Bot) [RHEL-47856] {CVE-2024-40924}
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48363] {CVE-2024-40983}
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54763] {CVE-2024-43854}
  - gso: do not skip outer ip header in case of ipip and net_failover (CKI Backport Bot) [RHEL-55790] {CVE-2022-48936}
  - drm/amdgpu: avoid using null object of framebuffer (CKI Backport Bot) [RHEL-51405] {CVE-2024-41093}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Guillaume Nault) [RHEL-48170] {CVE-2024-40961}
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (CKI Backport Bot) [RHEL-55568] {CVE-2024-43880}
  - ibmvnic: Add tx check to prevent skb leak (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066}
  - ibmvnic: rename local variable index to bufidx (CKI Backport Bot) [RHEL-51249] {CVE-2024-41066}
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-37038 RHEL-37039] {CVE-2024-35839}
  - USB: serial: mos7840: fix crash on resume (CKI Backport Bot) [RHEL-53680] {CVE-2024-42244}
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (CKI Backport Bot) [RHEL-48381] {CVE-2024-40984}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.24.1.el8_10]
changelog:
  - cifs: do not set WorkstationName in NTLMSSP auth blob (Paulo Alcantara) [RHEL-56729]
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Steve Best) [RHEL-56162] {CVE-2024-43889}
  - i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR (CKI Backport Bot) [RHEL-57000]
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Xin Long) [RHEL-56234] {CVE-2024-44935}
  - net/mlx5e: Fix netif state handling (Michal Schmidt) [RHEL-43864] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Michal Schmidt) [RHEL-43864] {CVE-2024-38608}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (cki-backport-bot) [RHEL-44031] {CVE-2024-38586}
  - netfilter: flowtable: initialise extack before use (Florian Westphal) [RHEL-58542] {CVE-2024-45018}
  - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
  - memcontrol: ensure memcg acquired by id is properly set up (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
  - mm: memcontrol: fix cannot alloc the maximum memcg ID (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
  - mm/memcg: minor cleanup for MEM_CGROUP_ID_MAX (Rafael Aquini) [RHEL-56252] {CVE-2024-43892}
  - ice: Add netif_device_attach/detach into PF reset flow (CKI Backport Bot) [RHEL-23676]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.25.1.el8_10]
changelog:
  - cifs: modefromsids must add an ACE for authenticated users (Paulo Alcantara) [RHEL-56052]
  - cifs: do not use uninitialized data in the owner/group sid (Paulo Alcantara) [RHEL-56052]
  - cifs: fix set of group SID via NTSD xattrs (Paulo Alcantara) [RHEL-56052]
  - smb3: correct smb3 ACL security descriptor (Paulo Alcantara) [RHEL-56052]
  - smb3: fix possible access to uninitialized pointer to DACL (Paulo Alcantara) [RHEL-56052]
  - cifs: remove two cases where rc is set unnecessarily in sid_to_id (Paulo Alcantara) [RHEL-56052]
  - cifs: Fix chmod with modefromsid when an older ACE already exists. (Paulo Alcantara) [RHEL-56052]
  - cifs: update new ACE pointer after populate_new_aces. (Paulo Alcantara) [RHEL-56052]
  - cifs: If a corrupted DACL is returned by the server, bail out. (Paulo Alcantara) [RHEL-56052]
  - cifs: cleanup a few le16 vs. le32 uses in cifsacl.c (Paulo Alcantara) [RHEL-56052]
  - cifs: Change SIDs in ACEs while transferring file ownership. (Paulo Alcantara) [RHEL-56052]
  - cifs: Retain old ACEs when converting between mode bits and ACL. (Paulo Alcantara) [RHEL-56052]
  - cifs: Fix cifsacl ACE mask for group and others. (Paulo Alcantara) [RHEL-56052]
  - Add SMB 2 support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052]
  - SMB3: Add support for getting and setting SACLs (Paulo Alcantara) [RHEL-56052]
  - cifs: Enable sticky bit with cifsacl mount option. (Paulo Alcantara) [RHEL-56052]
  - cifs: Fix unix perm bits to cifsacl conversion for "other" bits. (Paulo Alcantara) [RHEL-56052]
  - drm/i915/gt: Fix potential UAF by revoke of fence registers (Mika Penttilä) [RHEL-53633] {CVE-2024-41092}
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-27224]
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Rafael Aquini) [RHEL-55000] {CVE-2024-42292}
  - gfs2: Fix NULL pointer dereference in gfs2_log_flush (Andrew Price) [RHEL-51553] {CVE-2024-42079}
  - of: module: add buffer overflow check in of_modalias() (Charles Mirabile) [RHEL-44267] {CVE-2024-38541}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.26.1.el8_10]
changelog:
  - nouveau: lock the client object tree. (Abdiel Janulgue) [RHEL-35118] {CVE-2024-27062}
  - cifs: fix deadlock between reconnect and lease break (Paulo Alcantara) [RHEL-58037]
  - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-56156]
  - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-35757]
  - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: Cease delete work during unmount (Bob Peterson) [RHEL-35757]
  - gfs2: Improve gfs2_upgrade_iopen_glock comment (Andreas Gruenbacher) [RHEL-35757]
  - gfs2: nit: gfs2_drop_inode shouldn't return bool (Bob Peterson) [RHEL-35757]
  - dmaengine: fix NULL pointer in channel unregistration function (Jerry Snitselaar) [RHEL-28867] {CVE-2023-52492}
  - dma-direct: Leak pages on dma_set_decrypted() failure (Jerry Snitselaar) [RHEL-37335] {CVE-2024-35939}
  - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (Olga Kornievskaia) [RHEL-41075]
  - NFSv4: Always ask for type with READDIR (Benjamin Coddington) [RHEL-39397]
  - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (Paulo Alcantara) [RHEL-60251]
  - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (Paulo Alcantara) [RHEL-60251]
  - cifs: Remove duplicated include in cifsglob.h (Paulo Alcantara) [RHEL-60251]
  - cifs: fix oops during encryption (Paulo Alcantara) [RHEL-60251]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.27.1.el8_10]
changelog:
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Waiman Long) [RHEL-62139] {CVE-2024-47668}
  - bonding: fix xfrm real_dev null pointer dereference (Hangbin Liu) [RHEL-57239] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Hangbin Liu) [RHEL-57233] {CVE-2024-44990}
  - bpf: Fix overrunning reservations in ringbuf (Viktor Malik) [RHEL-49414] {CVE-2024-41009}
  - xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create (CKI Backport Bot) [RHEL-49309] {CVE-2022-48773}
  - tty: tty_io: update timestamps on all device nodes (Aristeu Rozanski) [RHEL-55257]
  - tty: use 64-bit timstamp (Aristeu Rozanski) [RHEL-55257]
  - ELF: fix kernel.randomize_va_space double read (Rafael Aquini) [RHEL-60669] {CVE-2024-46826}
  - xfrm: set dst dev to blackhole_netdev instead of loopback_dev in ifdown (Xin Long) [RHEL-58100]
  - loopback: fix lockdep splat (Xin Long) [RHEL-58100]
  - blackhole_netdev: use blackhole_netdev to invalidate dst entries (Xin Long) [RHEL-58100]
  - loopback: create blackhole net device similar to loopack. (Xin Long) [RHEL-58100]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.28.1.el8_10]
changelog:
  - s390/mm: Add cond_resched() to cmm_alloc/free_pages() (Mete Durlu) [RHEL-61702]
  - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-61400]
  - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [RHEL-61400]
  - cifs: remove useless DeleteMidQEntry() (Paulo Alcantara) [RHEL-61400]
  - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-58991]
  - gitlab-ci: provide consistent kcidb_tree_name (Michael Hofmann)
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Nico Pache) [RHEL-26709]
  - audit: Send netlink ACK before setting connection in auditd_set (Richard Guy Briggs) [RHEL-14004]
  - KVM: selftests: x86: Fix test failure on arch lbr capable platforms (Maxim Levitsky) [RHEL-23999]
  - raid1: fix use-after-free for original bio in raid1_write_request() (Nigel Croxon) [RHEL-55263]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.29.1.el8_10]
changelog:
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (cki-backport-bot) [RHEL-36372] {CVE-2024-27399}
  - mptcp: pm: Fix uaf in __timer_delete_sync (Guillaume Nault) [RHEL-60614] {CVE-2024-46858}
  - cifs: fix dfs link failover in cifs_tree_connect() (Paulo Alcantara) [RHEL-8002]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.30.1.el8_10]
changelog:
  - media: edia: dvbdev: fix a use-after-free (Kate Hsuan) [RHEL-35763] {CVE-2024-27043}
  - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [RHEL-61200]
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov) [RHEL-52684]
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov) [RHEL-52684]
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov) [RHEL-52684]
  - smb: client: use actual path when queryfs (Paulo Alcantara) [RHEL-60363]
  - cifs: Fix uninitialized memory reads for oparms.mode (Paulo Alcantara) [RHEL-60363]
  - cifs: Fix uninitialized memory read for smb311 posix symlink create (Paulo Alcantara) [RHEL-60363]
  - cifs: convert the path to utf16 in smb2_query_info_compound (Paulo Alcantara) [RHEL-60363]
  - autofs: fix thinko in validate_dev_ioctl() (Ian Kent) [RHEL-62168]
  - autofs: add per dentry expire timeout (Ian Kent) [RHEL-62168]
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-44167] {CVE-2024-38564}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.31.1.el8_10]
changelog:
  - xfrm: fix one more kernel-infoleak in algo dumping (Sabrina Dubroca) [RHEL-65955] {CVE-2024-50110}
  - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6() (Florian Westphal) [RHEL-66862] {CVE-2024-50256}
  - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n (Florian Westphal) [RHEL-66862]
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (Florian Westphal) [RHEL-66862]
  - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (Paulo Alcantara) [RHEL-7988]
  - cifs: handle cache lookup errors different than -ENOENT (Paulo Alcantara) [RHEL-7988]
  - cifs: don't take exclusive lock for updating target hints (Paulo Alcantara) [RHEL-7988]
  - cifs: avoid re-lookups in dfs_cache_find() (Paulo Alcantara) [RHEL-7988]
  - cifs: fix potential deadlock in cache_refresh_path() (Paulo Alcantara) [RHEL-7988]
  - cifs: don't refresh cached referrals from unactive mounts (Paulo Alcantara) [RHEL-7988]
  - cifs: return ENOENT for DFS lookup_cache_entry() (Paulo Alcantara) [RHEL-7988]
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (Ondrej Mosnacek) [RHEL-66104] {CVE-2024-46695}
  - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-67823]
  - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-67823]
  - arm64: probes: Remove broken LDR (literal) uprobe support (Mark Salter) [RHEL-66042] {CVE-2024-50099}
  - net: avoid potential underflow in qdisc_pkt_len_init() with UFO (Davide Caratti) [RHEL-65399] {CVE-2024-49949}
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66457] {CVE-2024-50142}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.32.1.el8_10]
changelog:
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66965] {CVE-2024-50192}
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66965] {CVE-2024-50192}
  - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race (Ming Lei) [RHEL-65158] {CVE-2024-50082}
  - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-62869]
  - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Use list_move_tail instead of list_del/list_add_tail (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: finish_xmote cleanup (Andreas Gruenbacher) [RHEL-62869]
  - gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async (Andreas Gruenbacher) [RHEL-62869]
  - KVM: selftests: memslot_perf_test: increase guest sync timeout (Maxim Levitsky) [RHEL-19080]
  - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (Jon Maloy) [RHEL-68025] {CVE-2024-50264}
  - md/raid5: Wait sync io to finish before changing group cnt (Nigel Croxon) [RHEL-58585]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.33.1.el8_10]
changelog:
  - Revert "scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload" This patch is dependent on the mbox refactor patch that was not added to rh8. (Dick Kennedy) [RHEL-64073]
  - drm/i915: Fix HPD polling, reenabling the output poll work as needed (Lyude Paul) [RHEL-62796]
  - drm: Add an HPD poll helper to reschedule the poll work (Lyude Paul) [RHEL-62796]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.34.1.el8_10]
changelog:
  - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust (Davide Caratti) [RHEL-69667] {CVE-2024-53122}
  - NFS: nfs_async_write_reschedule_io must not recurse into the writeback code (Benjamin Coddington) [RHEL-68647]
  - xfs: fix sparse inode limits on runt AG (Pavel Reichl) [RHEL-62924]
  - KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration (Maxim Levitsky) [RHEL-67974]
  - x86/cpu/intel: Detect TME keyid bits before setting MTRR mask registers (Vitaly Kuznetsov) [RHEL-65362]
  - dlm: fix recovery of middle conversions (Alexander Aring) [RHEL-64860]
  - i40e: fix race condition by adding filter's intermediate sync state (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}
  - i40e: fix i40e_count_filters() to count only active/new filters (Michal Schmidt) [RHEL-68271] {CVE-2024-53088}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.35.1.el8_10]
changelog:
  - samples: pktgen: allow to specify destination port (Hangbin Liu) [RHEL-56480]
  - samples: pktgen: add some helper functions for port parsing (Hangbin Liu) [RHEL-56480]
  - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (Cathy Avery) [RHEL-71396]
  - scsi: storvsc: Handle additional SRB status values (Cathy Avery) [RHEL-71396]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.36.1.el8_10]
changelog:
  - cpufreq: intel_pstate: Support Emerald Rapids OOB mode (David Arcari) [RHEL-59649]
  - scsi: st: New session only when Unit Attention for new tape (John Meneghini) [RHEL-28790]
  - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (John Meneghini) [RHEL-28790]
  - scsi: st: Don't modify unknown block number in MTIOCGET (John Meneghini) [RHEL-28790]
  - Reapply "scsi: st: Add third party poweron reset handling" (John Meneghini) [RHEL-28790]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.37.1.el8_10]
changelog:
  - arm64/sve: Discard stale CPU state when handling SVE traps (Mark Salter) [RHEL-71535] {CVE-2024-50275}
  - scsi: core: Handle devices which return an unusually large VPD page count (Ewan D. Milne) [RHEL-34275]
  - scsi: core: Fix unremoved procfs host directory regression (Ewan D. Milne) [RHEL-34275]
  - scsi: core: Consult supported VPD page list prior to fetching page (Ewan D. Milne) [RHEL-34275]
  - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington) [RHEL-73889]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.38.1.el8_10]
changelog:
  - net: usb: lan78xx: add Allied Telesis AT29M2-AF (Jose Ignacio Tornos Martinez) [RHEL-70891]
  - s390/pci: Allow allocation of more than 1 MSI interrupt (Mete Durlu) [RHEL-74385]
  - s390/pci: Refactor arch_setup_msi_irqs() (Mete Durlu) [RHEL-74385]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-71451]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-71451]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-71451]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-71451]
  - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct() (Mete Durlu) [RHEL-74387]
  - s390/pci: Handle PCI error codes other than 0x3a (Mete Durlu) [RHEL-74383]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.40.1.el8_10]
changelog:
  - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format (Desnes Nunes) [RHEL-69571] {CVE-2024-53104}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.41.1.el8_10]
changelog:
  - virtio-net: correctly enable callback during start_xmit (Laurent Vivier) [RHEL-72886]
  - dm snapshot: fix lockup in dm_exception_table_exit (Benjamin Marzinski) [RHEL-76230 RHEL-34599]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.42.1.el8_10]
changelog:
  - net: skb: exclude the single page frag cache for too small alloc (Paolo Abeni) [RHEL-66261]
  - NFSD: Reset cb_seq_status after NFS4ERR_DELAY (Olga Kornievskaia) [RHEL-79458]
  - mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim() (Seiji Nishikawa) [RHEL-64950]
  - scsi: st: Don't set pos_unknown just after device recognition (John Meneghini) [RHEL-78415]
  - ovl: fix use inode directly in rcu-walk mode (Miklos Szeredi) [RHEL-76161]
  - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP (Kamal Heib) [RHEL-75826]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.43.1.el8_10]
changelog:
  - s390/module: fix loading modules with a lot of relocations (Mete Durlu) [RHEL-78999]
  - s390/module: Use s390_kernel_write() for late relocations (Mete Durlu) [RHEL-78999]
  - locking/atomic: Make test_and_*_bit() ordered on failure (Herton R. Krzesinski) [RHEL-69894]
  - pps: Fix a use-after-free (Michal Schmidt) [RHEL-77971]
  - KVM: s390: Change virtual to physical address access in diag 0x258 handler (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: gaccess: Check if guest address is in memslot (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: Fix SORTL and DFLTCC instruction format error in __insn32_query (Thomas Huth) [RHEL-68323 RHEL-65229]
  - s390/uv: Panic for set and remove shared access UVC errors (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for crypto control block (Thomas Huth) [RHEL-68323 RHEL-65229]
  - KVM: s390: vsie: Use virt_to_phys for facility control block (Thomas Huth) [RHEL-68323 RHEL-65229]
  - scsi: megaraid_sas: Fix for a potential deadlock (Tomas Henzl) [RHEL-21984] {CVE-2024-57807}
  - net/mlx5: Reload auxiliary devices in pci error handlers (Benjamin Poirier) [RHEL-78756]
  - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Benjamin Poirier) [RHEL-78756]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.44.1.el8_10]
changelog:
  - HID: core: zero-initialize the report buffer (CKI Backport Bot) [RHEL-81825] {CVE-2024-50302}
  - ALSA: usb-audio: Fix a DMA to stack memory bug (Jaroslav Kysela) [RHEL-81786]
  - ALSA: usb-audio: Fix for sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]
  - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (Jaroslav Kysela) [RHEL-81786] {CVE-2024-53197}
  - ALSA: usb-audio: Add sampling rates support for Mbox3 (Jaroslav Kysela) [RHEL-81786]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.45.1.el8_10]
changelog:
  - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup (Joshua Washington) [RHEL-73269]
  - gve: process XSK TX descriptors as part of RX NAPI (Joshua Washington) [RHEL-73269]
  - gve: guard XSK operations on the existence of queues (Joshua Washington) [RHEL-73269]
  - gve: Fix an edge case for TSO skb validity check (Joshua Washington) [RHEL-73269]
  - gve: Fix XDP TX completion handling when counters overflow (Joshua Washington) [RHEL-73269]
  - gve: Clear napi->skb before dev_kfree_skb_any() (Joshua Washington) [RHEL-73269] {CVE-2024-40937}
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [RHEL-73269]
  - can: bcm: Fix UAF in bcm_proc_show() (CKI Backport Bot) [RHEL-80733] {CVE-2023-52922}
  - gfs2: glock holder GL_NOPID fix (Andreas Gruenbacher) [RHEL-80694]
  - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher) [RHEL-80694]
  - net/smc: support ipv4 mapped ipv6 addr client for smc-r v2 (Mete Durlu) [RHEL-79810]
  - net: smc: fix spurious error message from __sock_release() (Mete Durlu) [RHEL-79812]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.46.1.el8_10]
changelog:
  - s390/pci: Fix handling of isolated VFs (Mete Durlu) [RHEL-81934]
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Mete Durlu) [RHEL-81934]
  - s390/pci: Fix SR-IOV for PFs initially in standby (Mete Durlu) [RHEL-81934]
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Herton R. Krzesinski) [RHEL-62832]
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (CKI Backport Bot) [RHEL-82720] {CVE-2025-21785}
  - nouveau/fence: handle cross device fences properly (Dave Airlie) [RHEL-80085]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.47.1.el8_10]
changelog:
  - nfs: don't invalidate dentries on transient errors (Scott Mayhew) [RHEL-78136]
  - ethtool: runtime-resume netdev parent before ethtool ioctl ops (John J Coleman) [RHEL-78156]
  - bpf: Use raw_spinlock_t in ringbuf (Viktor Malik) [RHEL-79911] {CVE-2024-50138}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-549.el8]
changelog:
  - dm-integrity: align the outgoing bio in integrity_recheck (Benjamin Marzinski) [RHEL-29678]
  - dm-integrity: fix a memory leak when rechecking the data (Benjamin Marzinski) [RHEL-29678]
  - RDMA/mana_ib: Add CQ interrupt support for RAW QP (Maxim Levitsky) [RHEL-23934]
  - RDMA/mana_ib: query device capabilities (Maxim Levitsky) [RHEL-23934]
  - RDMA/mana_ib: register RDMA device with GDMA (Maxim Levitsky) [RHEL-23934]
  - net: mana: add msix index sharing between EQs (Maxim Levitsky) [RHEL-23934]
  - net: mana: Fix spelling mistake "enforecement" -> "enforcement" (Maxim Levitsky) [RHEL-23934]
  - net :mana :Add remaining GDMA stats for MANA to ethtool (Maxim Levitsky) [RHEL-23934]
  - net: mana: Fix oversized sge0 for GSO packets (Maxim Levitsky) [RHEL-23934]
  - net: mana: Fix TX CQE error handling (Maxim Levitsky) [RHEL-23934]
  - net: mana: Add gdma stats to ethtool output for mana (Maxim Levitsky) [RHEL-23934]
  - net: mana: Fix MANA VF unload when hardware is unresponsive (Maxim Levitsky) [RHEL-23934]
  - net: mana: Configure hwc timeout from hardware (Maxim Levitsky) [RHEL-23934]
  - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Maxim Levitsky) [RHEL-23934]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-550.el8]
changelog:
  - mm/sparsemem: fix race in accessing memory_section->usage (Waiman Long) [RHEL-28875 RHEL-28876] {CVE-2023-52489}
  - mm: use __pfn_to_section() instead of open coding it (Waiman Long) [RHEL-28875] {CVE-2023-52489}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-551.el8]
changelog:
  - x86/sev: Harden #VC instruction emulation somewhat (Vitaly Kuznetsov) [RHEL-30040] {CVE-2024-25743 CVE-2024-25742}
  - i40e: Fix VF MAC filter removal (Ivan Vecera) [RHEL-22992]
  - i40e: Do not allow untrusted VF to remove administratively set MAC (Ivan Vecera) [RHEL-22992]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-552.el8]
changelog:
  - i40e: Enforce software interrupt during busy-poll exit (Ivan Vecera) [RHEL-26248]
  - i40e: Remove _t suffix from enum type names (Ivan Vecera) [RHEL-26248]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-552.1.1.el8_10]
changelog:
  - redhat: set DIST to el8_10 and ZSTREAM to yes for 8.10 (Denys Vlasenko)
  - tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc (Prarit Bhargava) [RHEL-32590] {CVE-2021-47185}
  - net: mana: Fix Rx DMA datasize and skb_over_panic (Cathy Avery) [RHEL-32579]
  - RDMA/srpt: Support specifying the srpt_service_guid parameter (Kamal Heib) [RHEL-31710] {CVE-2024-26744}
  - RDMA/qedr: Fix qedr_create_user_qp error flow (Kamal Heib) [RHEL-31714] {CVE-2024-26743}
  - hwmon: (coretemp) Fix out-of-bounds memory access (David Arcari) [RHEL-31305] {CVE-2024-26664}
  - RDMA/irdma: Fix KASAN issue with tasklet (Kamal Heib) [RHEL-15776]
  - net: bridge: use DEV_STATS_INC() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
  - net: Fix unwanted sign extension in netdev_stats_to_stats64() (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
  - net: add atomic_long_t to net_device_stats fields (Ivan Vecera) [RHEL-27989] {CVE-2023-52578}
  - net/sched: act_ct: fix skb leak and crash on ooo frags (Xin Long) [RHEL-29467] {CVE-2023-52610}
  - net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg (Jose Ignacio Tornos Martinez) [RHEL-28015] {CVE-2023-52528}
  - RDMA/core: Fix uninit-value access in ib_get_eth_speed() (Kamal Heib) [RHEL-30130]
  - RDMA/core: Get IB width and speed from netdev (Kamal Heib) [RHEL-30130]
  - cpufreq: intel_pstate: Add Emerald Rapids support in no-HWP mode (Prarit Bhargava) [RHEL-29444]
  - powerpc/mm: Fix null-pointer dereference in pgtable_cache_add (Mamatha Inamdar) [RHEL-29118] {CVE-2023-52607}
  - powerpc/lib: Validate size for vector operations (Mamatha Inamdar) [RHEL-29114] {CVE-2023-52606}
  - usb: hub: Guard against accesses to uninitialized BOS descriptors (Desnes Nunes) [RHEL-28986] {CVE-2023-52477}
  - media: uvcvideo: Fix OOB read (Desnes Nunes) [RHEL-27940] {CVE-2023-52565}
  - media: pvrusb2: fix use after free on context disconnection (Desnes Nunes) [RHEL-26498] {CVE-2023-52445}
  - i2c: i801: Fix block process call transactions (Prarit Bhargava) [RHEL-26478] {CVE-2024-26593}
  - overlay: disable EVM (Coiby Xu) [RHEL-19863]
  - evm: add support to disable EVM on unsupported filesystems (Coiby Xu) [RHEL-19863]
  - evm: don't copy up 'security.evm' xattr (Coiby Xu) [RHEL-19863]
  - net: ena: Remove ena_select_queue (Kamal Heib) [RHEL-14286]
  - media: dvbdev: Fix memory leak in dvb_media_device_free() (Prarit Bhargava) [RHEL-27254] {CVE-2020-36777}
  - gfs2: Fix invalid metadata access in punch_hole (Andrew Price) [RHEL-28784]
  - i2c: Fix a potential use after free (Prarit Bhargava) [RHEL-26849] {CVE-2019-25162}
  - i2c: validate user data in compat ioctl (Prarit Bhargava) [RHEL-27022] {CVE-2021-46934}
  - platform/x86: think-lmi: Fix reference leak (Prarit Bhargava) [RHEL-28030] {CVE-2023-52520}
  - vhost: use kzalloc() instead of kmalloc() followed by memset() (Jon Maloy) [RHEL-21505] {CVE-2024-0340}
  - RDMA/siw: Fix connection failure handling (Kamal Heib) [RHEL-28042] {CVE-2023-52513}
  - vt: fix memory overlapping when deleting chars in the buffer (Waiman Long) [RHEL-27778 RHEL-27779] {CVE-2022-48627}
  - x86/fpu: Stop relying on userspace for info to fault in xsave buffer (Steve Best) [RHEL-26669] {CVE-2024-26603}
  - mptcp: fix double-free on socket dismantle (Davide Caratti) [RHEL-22773] {CVE-2024-26782}
  - crypto: akcipher - Disable signing and decryption (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
  - crypto: akcipher - default implementations for request callbacks (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
  - crypto: testmgr - split akcipher tests by a key type (Herbert Xu) [RHEL-17114] {CVE-2023-6240}
  - workqueue: Warn when a rescuer could not be created (Waiman Long) [RHEL-22136]
  - RDMA/cma: Avoid GID lookups on iWARP devices (Benjamin Coddington) [RHEL-12456]
  - RDMA/cma: Deduplicate error flow in cma_validate_port() (Benjamin Coddington) [RHEL-12456]
  - RDMA/core: Set gid_attr.ndev for iWARP devices (Benjamin Coddington) [RHEL-12456]
  - RDMA/siw: Fabricate a GID on tun and loopback devices (Benjamin Coddington) [RHEL-12456]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-552.2.1.el8_10]
changelog:
  - s390/ptrace: handle setting of fpc register correctly (Tobias Huschle) [RHEL-29106] {CVE-2023-52598}
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Tobias Huschle) [RHEL-27746] {CVE-2024-26615}
  - wifi: mac80211: fix race condition on enabling fast-xmit (Jose Ignacio Tornos Martinez) [RHEL-31664] {CVE-2024-26779}
  - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (Mamatha Inamdar) [RHEL-24401]
  - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (Mamatha Inamdar) [RHEL-24401]
  - mtd: require write permissions for locking and badblock ioctls (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
  - mtd: properly check all write ioctls for permissions (Prarit Bhargava) [RHEL-27585] {CVE-2021-47055}
  - pid: take a reference when initializing `cad_pid` (Waiman Long) [RHEL-29420] {CVE-2021-47118}
  - i2c: i801: Don't generate an interrupt on bus reset (Prarit Bhargava) [RHEL-30325] {CVE-2021-47153}
  - RDMA/srpt: Do not register event handler until srpt device is fully setup (Kamal Heib) [RHEL-33224] {CVE-2024-26872}
  - ceph: switch to corrected encoding of max_xattr_size in mdsmap (Xiubo Li) [RHEL-26723]
  - ceph: switch to use cap_delay_lock for the unlink delay list (Xiubo Li) [RHEL-32870]
  - ceph: pass ino# instead of old_dentry if it's disconnected (Xiubo Li) [RHEL-32870]
  - fat: fix uninitialized field in nostale filehandles (Andrey Albershteyn) [RHEL-33186 RHEL-35108] {CVE-2024-26973}
  - do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak (Andrey Albershteyn) [RHEL-33186] {CVE-2024-26901}
  - idpf: limit the support to GCP only (Michal Schmidt) [RHEL-15652]
  - redhat/configs: enable CONFIG_IDPF (Michal Schmidt) [RHEL-15652]
  - idpf: remove the use of ETHTOOL_RING_USE_TCP_DATA_SPLIT (Michal Schmidt) [RHEL-15652]
  - idpf: workaround for unavailable skb page recycling (Michal Schmidt) [RHEL-15652]
  - idpf: always allocate a full page (Michal Schmidt) [RHEL-15652]
  - idpf: remove page pool stats code (Michal Schmidt) [RHEL-15652]
  - idpf: add minimal macros for __free(kfree) to work (Michal Schmidt) [RHEL-15652]
  - idpf: fixup include paths for RHEL 8 (Michal Schmidt) [RHEL-15652]
  - idpf: fix kernel panic on unknown packet types (Michal Schmidt) [RHEL-15652]
  - idpf: disable local BH when scheduling napi for marker packets (Michal Schmidt) [RHEL-15652]
  - idpf: remove dealloc vector msg err in idpf_intr_rel (Michal Schmidt) [RHEL-15652]
  - idpf: fix minor controlq issues (Michal Schmidt) [RHEL-15652]
  - idpf: prevent deinit uninitialized virtchnl core (Michal Schmidt) [RHEL-15652]
  - idpf: cleanup virtchnl cruft (Michal Schmidt) [RHEL-15652]
  - idpf: refactor idpf_recv_mb_msg (Michal Schmidt) [RHEL-15652]
  - idpf: add async_handler for MAC filter messages (Michal Schmidt) [RHEL-15652]
  - idpf: refactor remaining virtchnl messages (Michal Schmidt) [RHEL-15652]
  - idpf: refactor queue related virtchnl messages (Michal Schmidt) [RHEL-15652]
  - idpf: refactor vport virtchnl messages (Michal Schmidt) [RHEL-15652]
  - idpf: implement virtchnl transaction manager (Michal Schmidt) [RHEL-15652]
  - idpf: add idpf_virtchnl.h (Michal Schmidt) [RHEL-15652]
  - idpf: avoid compiler padding in virtchnl2_ptype struct (Michal Schmidt) [RHEL-15652]
  - idpf: distinguish vports by the dev_port attribute (Michal Schmidt) [RHEL-15652]
  - idpf: avoid compiler introduced padding in virtchnl2_rss_key struct (Michal Schmidt) [RHEL-15652]
  - idpf: fix corrupted frames and skb leaks in singleq mode (Michal Schmidt) [RHEL-15652]
  - idpf: refactor some missing field get/prep conversions (Michal Schmidt) [RHEL-15652]
  - idpf: add get/set for Ethtool's header split ringparam (Michal Schmidt) [RHEL-15652]
  - idpf: fix potential use-after-free in idpf_tso() (Michal Schmidt) [RHEL-15652]
  - idpf: cancel mailbox work in error path (Michal Schmidt) [RHEL-15652]
  - idpf: set scheduling mode for completion queue (Michal Schmidt) [RHEL-15652]
  - idpf: add SRIOV support and other ndo_ops (Michal Schmidt) [RHEL-15652]
  - idpf: add ethtool callbacks (Michal Schmidt) [RHEL-15652]
  - idpf: add singleq start_xmit and napi poll (Michal Schmidt) [RHEL-15652]
  - idpf: add RX splitq napi poll support (Michal Schmidt) [RHEL-15652]
  - idpf: add TX splitq napi poll support (Michal Schmidt) [RHEL-15652]
  - idpf: add splitq start_xmit (Michal Schmidt) [RHEL-15652]
  - idpf: initialize interrupts and enable vport (Michal Schmidt) [RHEL-15652]
  - idpf: configure resources for RX queues (Michal Schmidt) [RHEL-15652]
  - idpf: configure resources for TX queues (Michal Schmidt) [RHEL-15652]
  - idpf: add ptypes and MAC filter support (Michal Schmidt) [RHEL-15652]
  - idpf: add create vport and netdev configuration (Michal Schmidt) [RHEL-15652]
  - idpf: add core init and interrupt request (Michal Schmidt) [RHEL-15652]
  - idpf: add controlq init and reset checks (Michal Schmidt) [RHEL-15652]
  - idpf: add module register and probe functionality (Michal Schmidt) [RHEL-15652]
  - virtchnl: add virtchnl version 2 ops (Michal Schmidt) [RHEL-15652]
  - net: netdev_queue: netdev_txq_completed_mb(): fix wake condition (Michal Schmidt) [RHEL-15652]
  - net: piggy back on the memory barrier in bql when waking queues (Michal Schmidt) [RHEL-15652]
  - net: provide macros for commonly copied lockless queue stop/wake code (Michal Schmidt) [RHEL-15652]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-552.3.1.el8_10]
changelog:
  - netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (Phil Sutter) [RHEL-30076] {CVE-2024-26643}
  - netfilter: nf_tables: disallow anonymous set with timeout flag (Phil Sutter) [RHEL-30080] {CVE-2024-26642}
  - selftests/bpf: Fix pyperf180 compilation failure with clang18 (Artem Savkov) [RHEL-35576]
  - md/raid5: fix atomicity violation in raid5_cache_count (Nigel Croxon) [RHEL-27930] {CVE-2024-23307}
  - usb: ulpi: Fix debugfs directory leak (Desnes Nunes) [RHEL-33287] {CVE-2024-26919}
  - powerpc/pseries: Fix potential memleak in papr_get_attr() (Mamatha Inamdar) [RHEL-35213] {CVE-2022-48669}
  - USB: usb-storage: Prevent divide-by-0 error in isd200_ata_command (Desnes Nunes) [RHEL-35122] {CVE-2024-27059}
  - NFSv4: fairly test all delegations on a SEQ4_ revocation (Benjamin Coddington) [RHEL-34912]
  - USB: core: Fix deadlock in usb_deauthorize_interface() (Desnes Nunes) [RHEL-35002] {CVE-2024-26934}
  - usb: xhci: Add error handling in xhci_map_urb_for_dma (Desnes Nunes) [RHEL-34958] {CVE-2024-26964}
  - fs: sysfs: Fix reference leak in sysfs_break_active_protection() (Ewan D. Milne) [RHEL-35076] {CVE-2024-26993}
  - xhci: handle isoc Babble and Buffer Overrun events properly (Desnes Nunes) [RHEL-31297] {CVE-2024-26659}
  - xhci: process isoc TD properly when there was a transaction error mid TD. (Desnes Nunes) [RHEL-31297] {CVE-2024-26659}
  - USB: core: Fix deadlock in port "disable" sysfs attribute (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
  - USB: core: Add hub_get() and hub_put() routines (Desnes Nunes) [RHEL-35006] {CVE-2024-26933}
  - netfilter: ipset: Missing gc cancellations fixed (Phil Sutter) [RHEL-30521]
  - netfilter: ipset: fix performance regression in swap operation (Phil Sutter) [RHEL-30521]
  - netfilter: ipset: Fix "INFO: rcu detected stall in hash_xxx" reports (Phil Sutter) [RHEL-30521]
  - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test (Phil Sutter) [RHEL-30521]
  - x86/apic/x2apic: Fix a NULL pointer deref when handling a dying cpu (David Arcari) [RHEL-32516]
  - x86/coco: Disable 32-bit emulation by default on TDX and SEV (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
  - x86: Make IA32_EMULATION boot time configurable (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
  - x86/entry: Make IA32 syscalls' availability depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
  - x86/elf: Make loading of 32bit processes depend on ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
  - x86/entry: Rename ignore_sysret() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
  - x86/cpu: Don't write CSTAR MSR on Intel CPUs (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}
  - x86: Introduce ia32_enabled() (Vitaly Kuznetsov) [RHEL-25087] {CVE-2024-25744}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.4.1.el8_10]
changelog:
  - cpuhotplug: Fix kABI breakage caused by CPUHP_AP_HYPERV_ONLINE (Vitaly Kuznetsov) [RHEL-36117]
  - net/mlx5e: Prevent deadlock while disabling aRFS (Kamal Heib) [RHEL-35041] {CVE-2024-27014}
  - x86/tsc: Defer marking TSC unstable to a worker (Wander Lairson Costa) [RHEL-32676]
  - x86/smpboot: Make TSC synchronization function call based (Wander Lairson Costa) [RHEL-32676]
  - net: usb: fix possible use-after-free in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171}
  - net: usb: fix memory leak in smsc75xx_bind (Jose Ignacio Tornos Martinez) [RHEL-30311] {CVE-2021-47171}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.5.1.el8_10]
changelog:
  - tools/power/turbostat: Fix uncore frequency file string (David Arcari) [RHEL-29238]
  - tools/power turbostat: Expand probe_intel_uncore_frequency() (David Arcari) [RHEL-29238]
  - uio: Fix use-after-free in uio_open (Ricardo Robaina) [RHEL-26232] {CVE-2023-52439}
  - net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send (Ken Cox) [RHEL-27316] {CVE-2021-47013}
  - keys: Fix linking a duplicate key to a keyring's assoc_array (David Howells) [RHEL-30772]
  - keys: Hoist locking out of __key_link_begin() (David Howells) [RHEL-30772]
  - keys: Break bits out of key_unlink() (David Howells) [RHEL-30772]
  - keys: Change keyring_serialise_link_sem to a mutex (David Howells) [RHEL-30772]
  - wifi: brcm80211: handle pmk_op allocation failure (Jose Ignacio Tornos Martinez) [RHEL-35150] {CVE-2024-27048}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-35140] {CVE-2024-27052}
  - wifi: iwlwifi: mvm: ensure offloading TID queue exists (Jose Ignacio Tornos Martinez) [RHEL-35130] {CVE-2024-27056}
  - wifi: mt76: mt7921e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-34866] {CVE-2024-26892}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-34189] {CVE-2024-26897}
  - wifi: iwlwifi: mvm: fix a crash when we run out of stations (Jose Ignacio Tornos Martinez) [RHEL-31547] {CVE-2024-26693}
  - wifi: iwlwifi: fix double-free bug (Jose Ignacio Tornos Martinez) [RHEL-31543] {CVE-2024-26694}
  - wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() (Jose Ignacio Tornos Martinez) [RHEL-29089] {CVE-2023-52594}
  - wifi: rt2x00: restart beacon queue when hardware reset (Jose Ignacio Tornos Martinez) [RHEL-29093] {CVE-2023-52595}
  - wifi: iwlwifi: fix a memory corruption (Jose Ignacio Tornos Martinez) [RHEL-28903] {CVE-2024-26610}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.48.1.el8_10]
changelog:
  - rhel-8.10: gate kernel on kernel-qe tests results not cki ones (Bruno Goncalves)
  - gfs2: skip if we cannot defer delete (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: remove redundant warnings (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: minor evict fix (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Prevent inode creation race (2) (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Fix additional unlikely request cancelation race (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Fix request cancelation bug (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Remove more dead code in add_to_queue (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: remove dead code in add_to_queue (Su Hui) [RHEL-76208]
  - gfs2: Remove LM_FLAG_PRIORITY flag (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Remove and replace gfs2_glock_queue_work (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: do_xmote fixes (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Clear flags when withdraw prevents xmote (Bob Peterson) [RHEL-76208]
  - gfs2: fix a deadlock on withdraw-during-mount (Bob Peterson) [RHEL-76208]
  - gfs2: gfs2_evict_inode clarification (Andreas Gruenbacher) [RHEL-76208]
  - gfs2: Remove misleading comments in gfs2_evict_inode (Andreas Gruenbacher) [RHEL-76208]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.49.1.el8_10]
changelog:
  - net/mlx5: Fix error path in multi-packet WQE transmit (CKI Backport Bot) [RHEL-84244]
  - redhat: drop Y issues from changelog (Jan Stancek)
  - md/md-bitmap: fix writing non bitmap changes local to RHEL (Nigel Croxon) [RHEL-80673]
  - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-80673]
  - md-bitmap: use %pD to print the file name in md_bitmap_file_kick (Nigel Croxon) [RHEL-80673]
  - md-bitmap: initialize variables at declaration time in md_bitmap_file_unmap (Nigel Croxon) [RHEL-80673]
  - md-bitmap: set BITMAP_WRITE_ERROR in write_sb_page (Nigel Croxon) [RHEL-80673]
  - raid1: update discard granularity when adding new disk (Nigel Croxon) [RHEL-71499]
  - x86/xen: remove hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}
  - x86/xen: use new hypercall functions instead of hypercall page (Vitaly Kuznetsov) [RHEL-70666] {CVE-2024-53241}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.50.1.el8_10]
changelog:
  - perf debug: Set debug_peo_args and redirect_to_stderr variable to correct values in perf_quiet_option() (Michael Petlan) [RHEL-82119]
  - ALSA: usb-audio: Fix out of bounds reads when finding clock sources (Jarod Wilson) [RHEL-86737] {CVE-2024-53150}
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Cathy Avery) [RHEL-83052]
  - ice: fold ice_ptp_read_time into ice_ptp_gettimex64 (Michal Schmidt) [RHEL-85852]
  - ice: avoid the PTP hardware semaphore in gettimex64 path (Michal Schmidt) [RHEL-85852]
  - ice: add ice_adapter for shared data across PFs on the same NIC (Michal Schmidt) [RHEL-85852]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.51.1.el8_10]
changelog:
  - x86/xen: use the whole RCX when picking the right hypercall function (Vitaly Kuznetsov) [RHEL-87072]
  - Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB" (Desnes Nunes) [RHEL-87280]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.52.1.el8_10.gfd1b]
changelog:
  - netfilter: ipset: add missing range check in bitmap_ip_uadt (Florian Westphal) [RHEL-70268] {CVE-2024-53141}
  - NFS: Extend rdirplus mount option with "force|none" (Benjamin Coddington) [RHEL-16285]
  - idpf: trigger SW interrupt when exiting wb_on_itr mode (Michal Schmidt) [RHEL-73266]
  - idpf: add support for SW triggered interrupts (Michal Schmidt) [RHEL-73266]
  - idpf: fix VF dynamic interrupt ctl register initialization (Michal Schmidt) [RHEL-73266]
  - idpf: enable WB_ON_ITR (Michal Schmidt) [RHEL-73266]
  - redhat: require recent enough linux-firmware for qed (Denys Vlasenko) [RHEL-6342]
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher) [RHEL-7875]
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher) [RHEL-7875]
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher) [RHEL-7875]
  - gfs2: Don't reread inodes unnecessarily (Andreas Gruenbacher) [RHEL-7875]
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher) [RHEL-7875]
  - gfs2: No longer use 'extern' in function declarations (Andreas Gruenbacher) [RHEL-7875]
  - hwmon: (coretemp) fix pci device refcount leak in nv1a_ram_new() (CKI Backport Bot) [RHEL-63668] {CVE-2022-49011}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.53.1.el8_10]
changelog:
  - net/mlx5: Always stop health timer during driver removal (Michal Schmidt) [RHEL-47712] {CVE-2024-40906}
  - net/mlx5: Split function_setup() to enable and open functions (Michal Schmidt) [RHEL-47712]
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57117] {CVE-2024-44970}
  - net/mlx5e: SHAMPO, Fix incorrect page release (Michal Schmidt) [RHEL-57117] {CVE-2024-46717}
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-88819]
  - platform/x86: dell-wmi-sysman: Make init_bios_attributes() ACPI object parsing more robust (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Cleanup create_attributes_level_sysfs_files() (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Make sysman_init() return -ENODEV of the interfaces are not found (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Cleanup sysman_init() error-exit handling (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Fix release_attributes_data() getting called twice on init_bios_attributes() failure (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Make it safe to call exit_foo_attributes() multiple times (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Fix possible NULL pointer deref on exit (Jay Shin) [RHEL-88714]
  - platform/x86: dell-wmi-sysman: Fix crash caused by calling kset_unregister twice (Jay Shin) [RHEL-88714]
  - x86/kexec: Add EFI config table identity mapping for kexec kernel (Herton R. Krzesinski) [RHEL-71793]
  - vsock: Orphan socket after transport release (Jay Shin) [RHEL-89099] {CVE-2025-21756}
  - vsock: Keep the binding until socket destruction (Jay Shin) [RHEL-89099] {CVE-2025-21756}
  - bpf, vsock: Invoke proto::close on close() (Jay Shin) [RHEL-89099] {CVE-2025-21756}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.54.1.el8_10]
changelog:
  - ice: fix stats being updated by way too large values (CKI Backport Bot) [RHEL-70834]
  - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (CKI Backport Bot) [RHEL-54802] {CVE-2024-43842}
  - sched/rt: Fix race in push_rt_task (Phil Auld) [RHEL-84963]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.56.1.el8_10]
changelog:
  - tools/power/x86_energy_perf_policy: Read energy_perf_bias from sysfs (David Arcari) [RHEL-86963]
  - um: Fix out-of-bounds read in LDT setup (CKI Backport Bot) [RHEL-90261] {CVE-2022-49395}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.61.1.el8_10]
changelog:
  - s390: Add z17 elf platform (Christoph Schlameuss) [RHEL-100409]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-100375] {CVE-2025-37738}
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-100361] {CVE-2025-23150}
  - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93119] {CVE-2025-22004}
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (CKI Backport Bot) [RHEL-98980] {CVE-2025-21991}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.62.1.el8_10]
changelog:
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand) [RHEL-87557]
  - mm/slab: make __free(kfree) accept error pointers (Mark Langsdorf) [RHEL-84410]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-84410]
  - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-84410]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-84410]
  - cleanup: Add conditional guard helper (Mark Langsdorf) [RHEL-84410]
  - cleanup: Adjust scoped_guard() macros to avoid potential warning (Mark Langsdorf) [RHEL-84410]
  - cleanup: Remove address space of returned pointer (Mark Langsdorf) [RHEL-84410]
  - cleanup: Add usage and style documentation (Mark Langsdorf) [RHEL-84410]
  - file: add take_fd() cleanup helper (Mark Langsdorf) [RHEL-84410]
  - cleanup: Standardize the header guard define's name (Mark Langsdorf) [RHEL-84410]
  - cleanup: Add conditional guard support (Mark Langsdorf) [RHEL-84410]
  - cleanup: Make no_free_ptr() __must_check (Mark Langsdorf) [RHEL-84410]
  - locking: Introduce __cleanup() based infrastructure (Mark Langsdorf) [RHEL-84410]
  - misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() (CKI Backport Bot) [RHEL-100343] {CVE-2022-49788}
  - media: uvcvideo: Announce the user our deprecation intentions (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Allow changing noparam on the fly (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Invert default value for nodrop module param (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Propagate buf->error to userspace (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Flush the control cache when we get an event (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Annotate lock requirements for uvc_ctrl_set (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Remove dangling pointers (Desnes Nunes) [RHEL-98760] {CVE-2024-58002}
  - media: uvcvideo: Remove redundant NULL assignment (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Only save async fh if success (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Refactor iterators (Desnes Nunes) [RHEL-98760]
  - media: uvcvideo: Fix double free in error path (CKI Backport Bot) [RHEL-98788] {CVE-2024-57980}
  - cifs: potential buffer overflow in handling symlinks (Paulo Alcantara) [RHEL-97074] {CVE-2022-49058}
  - Race between reading mdstat and stopping an md device (Nigel Croxon) [RHEL-95723]
  - fs/dcache: Control # of dentries in list_lru_node (Waiman Long) [RHEL-8578]
  - fs/dcache: Add sysctl parameter dentry-fs-klimit to control # of dentries in filesystem (Waiman Long) [RHEL-8578]
  - mm/list_lru: Make list_lru_add() return # if items in affected list_lru_node (Waiman Long) [RHEL-8578]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.63.1.el8_10]
changelog:
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66324] {CVE-2024-50154}
  - net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101200] {CVE-2025-38086}
  - mm/swapfile: add cond_resched() in get_swap_pages() (Nico Pache) [RHEL-80401] {CVE-2023-52932}
  - dlm: fix possible lkb_resource null dereference (Alexander Aring) [RHEL-64452]
  - fs: dlm: handle -EINVAL as log_error() (Alexander Aring) [RHEL-64452]
  - redhat/configs: enable CONFIG_RH_KABI_STABLE_ASM_OFFSETS (Čestmír Kalina) [RHEL-90099]
  - kabi: freeze stablelist and stackprotector-related constants (Čestmír Kalina) [RHEL-90099]
  - kabi: add redhat/kabi/asm-offsets (Čestmír Kalina) [RHEL-90099]
  - kabi: add RH_KABI_ASSERT_EQ_CONST{,EXPR} (Čestmír Kalina) [RHEL-90099]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.64.1.el8_10]
changelog:
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (CKI Backport Bot) [RHEL-100387] {CVE-2025-21919}
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [RHEL-86256]
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (CKI Backport Bot) [RHEL-102133] {CVE-2022-49977}
  - wifi: iwlwifi: limit printed string from FW file (CKI Backport Bot) [RHEL-99367] {CVE-2025-21905}
  - workqueue: Disable printk_deferred_{enter,exit} in RT kernel (Waiman Long) [RHEL-80292]
  - workqueue: Make show_pwq() use run-length encoding (Waiman Long) [RHEL-80292]
  - workqueue: Introduce show_one_worker_pool and show_one_workqueue. (Waiman Long) [RHEL-80292]
  - workqueue: fix state-dump console deadlock (Waiman Long) [RHEL-80292]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.65.1.el8_10]
changelog:
  - x86/alternatives: avoid mapping FIX_TEXT_POKE1 page when it is not required (Rafael Aquini) [RHEL-95422]
  - ext4: avoid resizing to a partial cluster size (CKI Backport Bot) [RHEL-101423] {CVE-2022-50020}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.66.1.el8_10]
changelog:
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Xin Long) [RHEL-105415] {CVE-2025-38001}
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Xin Long) [RHEL-105415] {CVE-2025-38000}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (CKI Backport Bot) [RHEL-105415] {CVE-2025-37890}
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Xin Long) [RHEL-105415]
  - crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102223] {CVE-2025-38079}
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-100698] {CVE-2025-22077}
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-100698]
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-100698]
  - smb: client: fix TCP timers deadlock after rmmod (Paulo Alcantara) [RHEL-100698] {CVE-2024-54680}
  - smb: client: Fix use-after-free of network namespace. (Paulo Alcantara) [RHEL-100698] {CVE-2024-53095}
  - smb: client: fix warning in generic_ip_connect() (Paulo Alcantara) [RHEL-100698]
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103079]
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103079] {CVE-2025-38052}
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99013] {CVE-2025-22020}
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98837] {CVE-2025-21928}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.67.1.el8_10]
changelog:
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
  - mm/khugepaged: fix collapse_pte_mapped_thp() to allow anon_vma (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
  - mm/khugepaged: fix GUP-fast interaction by sending IPI (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
  - mm/khugepaged: take the right locks for page table retraction (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
  - mm/khugepaged: unify collapse pmd clear, flush and free (Rafael Aquini) [RHEL-101233] {CVE-2025-38085}
  - padata: fix UAF in padata_reorder (Waiman Long) [RHEL-101398] {CVE-2025-21727}
  - redhat: update BUILD_TARGET to rhel-8.10.0-z-test-pesign (Jan Stancek)
  - ftrace: Clean up hash direct_functions on register failures (Gregory Bell) [RHEL-103912]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.68.1.el8_10]
changelog:
  - ipv6: mcast: extend RCU protection in igmp6_send() (Hangbin Liu) [RHEL-102392] {CVE-2025-21759}
  - md/md-bitmap: move bitmap_{start, end}write to md upper layer (Nigel Croxon) [RHEL-57991]
  - md/raid5: implement pers->bitmap_sector() (Nigel Croxon) [RHEL-57991]
  - md: add a new callback pers->bitmap_sector() (Nigel Croxon) [RHEL-57991]
  - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite() (Nigel Croxon) [RHEL-57991]
  - md/md-bitmap: factor behind write counters out from bitmap_{start/end}write() (Nigel Croxon) [RHEL-57991]
  - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-57991]
  - md/md-linear: enable io accounting (Nigel Croxon) [RHEL-59928]
  - md/md-multipath: enable io accounting (Nigel Croxon) [RHEL-59928]
  - md/raid10: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928]
  - md/raid1: switch to use md_account_bio() for io accounting (Nigel Croxon) [RHEL-59928]
  - raid5: fix missing io accounting in raid5_align_endio() (Nigel Croxon) [RHEL-59928]
  - md: also clone new io if io accounting is disabled (Nigel Croxon) [RHEL-59928]
  - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
  - net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
  - sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
  - sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93376] {CVE-2025-38350}
  - can: peak_usb: fix use after free bugs (CKI Backport Bot) [RHEL-99447] {CVE-2021-47670}
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103141] {CVE-2025-38159}
  - net/ipv6: release expired exception dst cached in socket (Guillaume Nault) [RHEL-105794] {CVE-2024-56644}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.69.1.el8_10]
changelog:
  - Revert "sch_htb: make htb_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140]
  - Revert "sch_drr: make drr_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140]
  - Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140]
  - Revert "codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()" (Denys Vlasenko) [RHEL-108140]
  - Revert "sch_htb: make htb_deactivate() idempotent" (Denys Vlasenko) [RHEL-108140]
  - Revert "net/sched: Always pass notifications when child class becomes empty" (Denys Vlasenko) [RHEL-108140]
  - Revert "sch_cbq: make cbq_qlen_notify() idempotent" (Denys Vlasenko) [RHEL-108140]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.70.1.el8_10]
changelog:
  - i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106617] {CVE-2025-38380}
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (David Marlin) [RHEL-103246] {CVE-2025-38250}
  - net_sched: ets: Fix double list add in class with netem as child qdisc (Xin Long) [RHEL-104717] {CVE-2025-37914}
  - sch_ets: make est_qlen_notify() idempotent (Xin Long) [RHEL-104717]
  - drm/vkms: Fix use after free and double free on init error (CKI Backport Bot) [RHEL-99402] {CVE-2025-22097}
  - s390/pci: Do not try re-enabling load/store if device is disabled (Mete Durlu) [RHEL-105600]
  - s390/pci: Fix stale function handles in error handling (Mete Durlu) [RHEL-105600]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.71.1.el8_10]
changelog:
  - udp: Fix memory accounting leak. (Xin Long) [RHEL-104084] {CVE-2025-22058}
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106041] {CVE-2025-38200}
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price) [RHEL-88072]
  - gfs2: Remove unnecessary NULL check before free_percpu() (Andreas Gruenbacher) [RHEL-88072]
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher) [RHEL-88072]
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher) [RHEL-88072]
  - gfs2: No more self recovery (Andreas Gruenbacher) [RHEL-104232]
  - gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw (Andreas Gruenbacher) [RHEL-104232]
  - gfs2: Fix withdraw race (Andreas Gruenbacher) [RHEL-104232]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.72.1.el8_10]
changelog:
  - scsi: lpfc: Use memcpy() for BIOS version (Ewan D. Milne) [RHEL-105927] {CVE-2025-38332}
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (David Arcari) [RHEL-103371]
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Michal Schmidt) [RHEL-104260] {CVE-2025-38211}
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Michal Schmidt) [RHEL-104260] {CVE-2024-47696}
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Michal Schmidt) [RHEL-104260] {CVE-2024-42285}
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate (CKI Backport Bot) [RHEL-106312] {CVE-2025-38477}
  - cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-75976]
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107894]
  - aacraid: fix a buffer overflow (Tomas Henzl) [RHEL-62313]
  - filemap: remove use of wait bookmarks (Brian Foster) [RHEL-107181]
  - x86/efistub: Omit physical KASLR when memory reservations exist (Ricardo Robaina) [RHEL-82369]
  - efi/libstub: Check return value of efi_parse_options (Ricardo Robaina) [RHEL-82369]
  - efi/x86: Support builtin command line (Ricardo Robaina) [RHEL-82369]
  - tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106635] {CVE-2025-38464}
  - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-81758]
  - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-81758]
  - blk-mq: fix potential io hang by wrong 'wake_batch' (Ming Lei) [RHEL-81758]
  - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-81758]
  - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-81758]
  - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-81758]
  - sbitmap: fix batching wakeup (Ming Lei) [RHEL-81758]
  - sbitmap: correct wake_batch recalculation to avoid potential IO hung (Ming Lei) [RHEL-81758]
  - sbitmap: add sbitmap_find_bit to remove repeat code in __sbitmap_get/__sbitmap_get_shallow (Ming Lei) [RHEL-81758]
  - sbitmap: rewrite sbitmap_find_bit_in_index to reduce repeat code (Ming Lei) [RHEL-81758]
  - sbitmap: remove redundant check in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
  - sbitmap: remove unnecessary calculation of alloc_hint in __sbitmap_get_shallow (Ming Lei) [RHEL-81758]
  - sbitmap: Use atomic_long_try_cmpxchg in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
  - sbitmap: remove unnecessary code in __sbitmap_queue_get_batch (Ming Lei) [RHEL-81758]
  - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
  - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [RHEL-81758]
  - sbitmap: add __sbitmap_queue_get_batch() (Ming Lei) [RHEL-81758]
  - sbitmap: Try each queue to wake up at least one waiter (Ming Lei) [RHEL-81758]
  - wait: Return number of exclusive waiters awaken (Ming Lei) [RHEL-81758]
  - sched/wait: Deduplicate code with do-while (Ming Lei) [RHEL-81758]
  - sbitmap: Advance the queue index before waking up a queue (Ming Lei) [RHEL-81758]
  - sbitmap: Use single per-bitmap counting to wake up queued tags (Ming Lei) [RHEL-81758]
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [RHEL-81758]
  - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [RHEL-81758]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.73.1.el8_10]
changelog:
  - ACPI: resource: Honor MADT INT_SRC_OVR settings for IRQ1 on AMD Zen (Jay Shin) [RHEL-108360]
  - ACPI: resource: Always use MADT override IRQ settings for all legacy non i8042 IRQs (Jay Shin) [RHEL-108360]
  - s390/pci: Allow automatic recovery with minimal driver support (Mete Durlu) [RHEL-110234]
  - bpf: Don't use tnum_range on array range checking for poke descriptors (CKI Backport Bot) [RHEL-109298] {CVE-2022-49985}
  - s390/ism: fix concurrency management in ism_cmd() (Mete Durlu) [RHEL-110208]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.74.1.el8_10]
changelog:
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [RHEL-112775] {CVE-2025-38352}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.75.1.el8_10]
changelog:
  - Revert "module, async: async_synchronize_full() on module init iff async is used" (Herton R. Krzesinski) [RHEL-99812]
  - mm/page_alloc: make sure free_pcppages_bulk() bails when given count < 0 (Rafael Aquini) [RHEL-85453]
  - sch_cbq: make cbq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376]
  - net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
  - net_sched: sch_ets: implement lockless ets_dump() (Ivan Vecera) [RHEL-107541] {CVE-2025-38350}
  - net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
  - net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107541] {CVE-2025-38107}
  - sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37953}
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93376] {CVE-2025-37798}
  - sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
  - sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-38350}
  - sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93376] {CVE-2025-37932}
  - idpf: convert control queue mutex to a spinlock (CKI Backport Bot) [RHEL-106049] {CVE-2025-38392}
  - drm/framebuffer: Acquire internal references on GEM handles (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
  - drm/gem: Acquire references on GEM handles for framebuffers (Anusha Srivatsa) [RHEL-106684] {CVE-2025-38449}
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (partial) (Luis Claudio R. Goncalves) [RHEL-95713]
  - vmxnet3: disable rx data ring on dma allocation failure (Michal Schmidt) [RHEL-106160]
  - xfs: fix error returns from xfs_bmapi_write (Carlos Maiolino) [RHEL-93655]
  - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Carlos Maiolino) [RHEL-93655]
  - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
  - net: usb: smsc75xx: Limit packet length to skb->len (CKI Backport Bot) [RHEL-112239] {CVE-2023-53125}
  - PCI: Support BAR sizes up to 8TB (Myron Stowe) [RHEL-106671]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.76.1.el8_10]
changelog:
  - HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - HID: simplify snto32() (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - HID: core: fix shift-out-of-bounds in hid_report_raw_event (CKI Backport Bot) [RHEL-111027] {CVE-2025-38556}
  - use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-107299] {CVE-2025-38498}
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-107299] {CVE-2025-38498}
  - xfs: make sure sb_fdblocks is non-negative (Pavel Reichl) [RHEL-104193]
  - vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-105991] {CVE-2025-38461}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.77.1.el8_10]
changelog:
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-109847] {CVE-2025-37797}
  - net: openvswitch: Fix the dead loop of MPLS parse (Aaron Conole) [RHEL-95609]
  - sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113329] {CVE-2025-38718}
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Charles Mirabile) [RHEL-109394] {CVE-2022-50087}
  - nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-111639] {CVE-2025-22026}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.78.1.el8_10]
changelog:
  - mm/migrate: set swap entry values of THP tail pages properly. (Luiz Capitulino) [RHEL-101302]
  - smb: client: fix use-after-free in cifs_oplock_break (Paulo Alcantara) [RHEL-111190] {CVE-2025-38527}
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113603] {CVE-2025-39730}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.79.1.el8_10]
changelog:
  - Bluetooth: L2CAP: Fix use-after-free (CKI Backport Bot) [RHEL-116277] {CVE-2023-53305}
  - KVM: SVM: Don't BUG if userspace injects an interrupt with GIF=0 (CKI Backport Bot) [RHEL-109748] {CVE-2022-50228}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.6.1.el8_10]
changelog:
  - powerpc/powernv: Add a null pointer check in opal_event_init() (Mamatha Inamdar) [RHEL-37058] {CVE-2023-52686}
  - crypto: rsa - add a check for allocation failure (Vladis Dronov) [RHEL-35361]
  - crypto: rsa - allow only odd e and restrict value in FIPS mode (Vladis Dronov) [RHEL-35361]
  - KEYS: use kfree_sensitive with key (Vladis Dronov) [RHEL-35361]
  - lib/mpi: Extend the MPI library (only mpi_*_bit() part) (Vladis Dronov) [RHEL-35361]
  - net: ip_tunnel: prevent perpetual headroom growth (Felix Maurer) [RHEL-31814] {CVE-2024-26804}
  - s390/cpum_cf: make crypto counters upward compatible across machine types (Tobias Huschle) [RHEL-36048]
  - RDMA/mlx5: Fix fortify source warning while accessing Eth segment (Kamal Heib) [RHEL-33162] {CVE-2024-26907}
  - ovl: fix leaked dentry (Miklos Szeredi) [RHEL-27306] {CVE-2021-46972}
  - x86/mm: Disallow vsyscall page read for copy_from_kernel_nofault() (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - x86/mm: Move is_vsyscall_vaddr() into asm/vsyscall.h (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - x86/mm/vsyscall: Consider vsyscall page part of user address space (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - x86/mm: Add vsyscall address helper (Rafael Aquini) [RHEL-33166] {CVE-2024-26906}
  - mm/swap: fix race when skipping swapcache (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
  - swap: fix do_swap_page() race with swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
  - mm/swapfile: use percpu_ref to serialize against concurrent swapoff (Rafael Aquini) [RHEL-31644] {CVE-2024-26759}
  - mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() (Rafael Aquini) [RHEL-29294] {CVE-2023-52560}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-29783]
  - block: null_blk: Fix handling of fake timeout request (Ming Lei) [RHEL-8130]
  - null_blk: fix poll request timeout handling (Ming Lei) [RHEL-8130]
  - block: null_blk: end timed out poll request (Ming Lei) [RHEL-8130]
  - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [RHEL-8130]
  - null_blk: allow zero poll queues (Ming Lei) [RHEL-8130]
  - null_blk: Fix handling of submit_queues and poll_queues attributes (Ming Lei) [RHEL-8130]
  - null_blk: poll queue support (Ming Lei) [RHEL-8130]
  - null_blk: fix command timeout completion handling (Ming Lei) [RHEL-8130]
  - platform/x86: dell-smbios-wmi: Fix oops on rmmod dell_smbios (Prarit Bhargava) [RHEL-27790] {CVE-2021-47073}
  - Bluetooth: avoid memcmp() out of bounds warning (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: hci_event: Fix coding style (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: hci_event: Fix using memcmp when comparing keys (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: Reject connection with the device which has same BD_ADDR (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - Bluetooth: hci_event: Ignore NULL link key (David Marlin) [RHEL-3017] {CVE-2020-26555}
  - ppp_async: limit MRU to 64K (Guillaume Nault) [RHEL-31353] {CVE-2024-26675}
  - powerpc/imc-pmu: Add a null pointer check in update_events_in_group() (Mamatha Inamdar) [RHEL-37078] {CVE-2023-52675}
  - tcp: do not accept ACK of bytes we never sent (Xin Long) [RHEL-21952]


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.7.1.el8_10]
changelog:
  - net: qcom/emac: fix UAF in emac_remove (Ken Cox) [RHEL-37834] {CVE-2021-47311}
  - perf/core: Bail out early if the request AUX area is out of bound (Michael Petlan) [RHEL-38268] {CVE-2023-52835}
  - crypto: pcrypt - Fix hungtask for PADATA_RESET (Herbert Xu) [RHEL-38171] {CVE-2023-52813}
  - drm/amdgpu: fix use-after-free bug (Jocelyn Falempe) [RHEL-31240] {CVE-2024-26656}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash (Ivan Vecera) [RHEL-37008] {CVE-2024-35854}
  - mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update (Ivan Vecera) [RHEL-37004] {CVE-2024-35855}
  - mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (Ivan Vecera) [RHEL-37012] {CVE-2024-35853}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-37016] {CVE-2024-35852}
  - mlxsw: spectrum_acl_tcam: Fix warning during rehash (Ivan Vecera) [RHEL-37480] {CVE-2024-36007}
  - can: peak_pci: peak_pci_remove(): fix UAF (Jose Ignacio Tornos Martinez) [RHEL-38419] {CVE-2021-47456}
  - usbnet: fix error return code in usbnet_probe() (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495}
  - usbnet: sanity check for maxpacket (Jose Ignacio Tornos Martinez) [RHEL-38440] {CVE-2021-47495}
  - net/mlx5e: fix a double-free in arfs_create_groups (Kamal Heib) [RHEL-36920] {CVE-2024-35835}
  - can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds (Jose Ignacio Tornos Martinez) [RHEL-38220] {CVE-2023-52878}
  - net: cdc_eem: fix tx fixup skb leak (Jose Ignacio Tornos Martinez) [RHEL-38080] {CVE-2021-47236}
  - net/usb: kalmia: Don't pass act_len in usb_bulk_msg error path (Jose Ignacio Tornos Martinez) [RHEL-38113] {CVE-2023-52703}
  - usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() (Desnes Nunes) [RHEL-38248] {CVE-2023-52877}
  - usb: config: fix iteration issue in 'usb_get_bos_descriptor()' (Desnes Nunes) [RHEL-38240] {CVE-2023-52781}
  - gro: fix ownership transfer (Xin Long) [RHEL-37226] {CVE-2024-35890}
  - tipc: fix kernel warning when sending SYN message (Xin Long) [RHEL-38109] {CVE-2023-52700}
  - erspan: make sure erspan_base_hdr is present in skb->head (Xin Long) [RHEL-37230] {CVE-2024-35888}
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Bryan Gurney) [RHEL-17366]
  - scsi: mpi3mr: Sanitise num_phys (Bryan Gurney) [RHEL-17366]
  - netfilter: nf_tables: use timestamp to check for set element timeout (Phil Sutter) [RHEL-38023] {CVE-2024-27397}
  - net/ipv6: SKB symmetric hash should incorporate transport ports (Sabrina Dubroca) [RHEL-32061]
  - crypto: s390/aes - Fix buffer overread in CTR mode (Herbert Xu) [RHEL-37089] {CVE-2023-52669}
  - net: Save and restore msg_namelen in sock_sendmsg (Jamie Bainbridge) [RHEL-35893]
  - net: prevent address rewrite in kernel_bind() (Jamie Bainbridge) [RHEL-35893]
  - net: prevent rewrite of msg_name in sock_sendmsg() (Jamie Bainbridge) [RHEL-35893]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Jamie Bainbridge) [RHEL-35893]
  - net: Avoid address overwrite in kernel_connect (Jamie Bainbridge) [RHEL-35893]
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-37026] {CVE-2024-35845}
  - wifi: mac80211: fix potential sta-link leak (Jose Ignacio Tornos Martinez) [RHEL-36916] {CVE-2024-35838}
  - wifi: nl80211: reject iftype change with mesh ID change (Jose Ignacio Tornos Martinez) [RHEL-36884] {CVE-2024-27410}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-36807] {CVE-2024-35789}
  - Bluetooth: Avoid potential use-after-free in hci_error_reset (David Marlin) [RHEL-31826] {CVE-2024-26801}
  - tls: disable async encrypt/decrypt (Sabrina Dubroca) [RHEL-26362 RHEL-26409 RHEL-26420] {CVE-2024-26584 CVE-2024-26583 CVE-2024-26585}
  - Squashfs: check the inode number is not the invalid value of zero (Phillip Lougher) [RHEL-35096] {CVE-2024-26982}
  - ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
  - ipc/msg.c: update and document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
  - ipc/sem.c: document and update memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
  - ipc/mqueue.c: update/document memory barriers (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
  - ipc/mqueue.c: remove duplicated code (Rafael Aquini) [RHEL-27782] {CVE-2021-47069}
  - net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context (Kamal Heib) [RHEL-30582] {CVE-2023-52626}
  - Revert "ACPI: bus: Rework system-level device notification handling" (Prarit Bhargava) [RHEL-21486]
  - hwrng: core - Fix page fault dead lock on mmap-ed hwrng (Prarit Bhargava) [RHEL-29485] {CVE-2023-52615}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.80.1.el8_10]
changelog:
  - block: remove some blk_mq_hw_ctx debugfs entries (Ricardo Robaina) [RHEL-8816]
  - blk-mq: Remove the hctx 'run' debugfs attribute (Ricardo Robaina) [RHEL-8816]
  - block: remove debugfs blk_mq_ctx dispatched/merged/completed attributes (Ricardo Robaina) [RHEL-8816]
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114840] {CVE-2025-39751}
  - crypto: seqiv - Handle EBUSY correctly (CKI Backport Bot) [RHEL-117228] {CVE-2023-53373}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114681] {CVE-2025-38729}
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114681]
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Jaroslav Kysela) [RHEL-114681] {CVE-2025-39757}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.81.1.el8_10]
changelog:
  - Bluetooth: L2CAP: Fix user-after-free (CKI Backport Bot) [RHEL-117369] {CVE-2022-50386}
  - Bluetooth: Fix potential use-after-free when clear keys (CKI Backport Bot) [RHEL-117193] {CVE-2023-53386}
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-117924] {CVE-2025-39817}
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-117707] {CVE-2025-39841}
  - mm, meminit: recalculate pcpu batch and high limits after init completes (Audra Mitchell) [RHEL-108920]
  - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp (CKI Backport Bot) [RHEL-118478] {CVE-2023-53297}
  - net/mlx5: Stop waiting for PCI if pci channel is offline (CKI Backport Bot) [RHEL-114111]
  - mm/shmem: fix potential dead loop in shmem_unuse() (Rafael Aquini) [RHEL-104909]
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Rafael Aquini) [RHEL-104909]
  - mm: fix apply_to_existing_page_range() (Rafael Aquini) [RHEL-104909]
  - arm64: mm: Correct the update of max_pfn (Rafael Aquini) [RHEL-104909]
  - mm, percpu: do not consider sleepable allocations atomic (Rafael Aquini) [RHEL-104909]
  - mm/hugetlb: wait for hugetlb folios to be freed (Rafael Aquini) [RHEL-104909]
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Rafael Aquini) [RHEL-104909]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Rafael Aquini) [RHEL-104909]
  - arm64: Fix KASAN random tag seed initialization (Rafael Aquini) [RHEL-104909]
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Rafael Aquini) [RHEL-104909]
  - s390/mm: Fix clearing storage keys for huge pages (Rafael Aquini) [RHEL-104909]
  - s390/mm: Fix storage key clearing for guest huge pages (Rafael Aquini) [RHEL-104909]
  - mm/slub, kunit: Use inverted data to corrupt kmem cache (Rafael Aquini) [RHEL-104909]
  - mm: memcg: use larger batches for proactive reclaim (Rafael Aquini) [RHEL-104909]
  - mm: memcg: don't periodically flush stats when memcg is disabled (Rafael Aquini) [RHEL-104909]
  - mm: writeback: ratelimit stat flush from mem_cgroup_wb_stats (Rafael Aquini) [RHEL-104909]
  - mm: memcontrol: don't throttle dying tasks on memory.high (Rafael Aquini) [RHEL-104909]
  - arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify (Rafael Aquini) [RHEL-104909]
  - arm64/mm: Set only the PTE_DIRTY bit while preserving the HW dirty state (Rafael Aquini) [RHEL-104909]
  - base/node.c: initialize the accessor list before registering (Rafael Aquini) [RHEL-104909]
  - mm: hugetlb: eliminate memory-less nodes handling (Rafael Aquini) [RHEL-104909]
  - mm: hugetlb: simplify per-node sysfs creation and removal (Rafael Aquini) [RHEL-104909]
  - powerpc/pseries: fix potential memory leak in init_cpu_associativity() (Rafael Aquini) [RHEL-104909]
  - writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs (Rafael Aquini) [RHEL-104909]
  - vfs: fix readahead(2) on block devices (Rafael Aquini) [RHEL-104909]
  - mm/page_alloc: correct start page when guard page debug is enabled (Rafael Aquini) [RHEL-104909]
  - mm/memory_hotplug: use pfn math in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
  - mm/cma: use nth_page() in place of direct struct page manipulation (Rafael Aquini) [RHEL-104909]
  - slab: kmalloc_size_roundup() must not return 0 for non-zero size (Rafael Aquini) [RHEL-104909]
  - mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement (Rafael Aquini) [RHEL-104909]
  - mm/vmalloc: add a safer version of find_vm_area() for debug (Rafael Aquini) [RHEL-104909]
  - mm/vmalloc: extend __find_vmap_area() with one more argument (Rafael Aquini) [RHEL-104909]
  - mm: memory-failure: fix unexpected return value in soft_offline_page() (Rafael Aquini) [RHEL-104909]
  - mm: memory-failure: kill soft_offline_free_page() (Rafael Aquini) [RHEL-104909]
  - radix tree: remove unused variable (Rafael Aquini) [RHEL-104909]
  - mm: add a call to flush_cache_vmap() in vmap_pfn() (Rafael Aquini) [RHEL-104909]
  - tmpfs: verify {g,u}id mount options correctly (Rafael Aquini) [RHEL-104909]
  - powerpc/mm/altmap: Fix altmap boundary check (Rafael Aquini) [RHEL-104909]
  - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Rafael Aquini) [RHEL-104909]
  - writeback: fix dereferencing NULL mapping->host on writeback_page_template (Rafael Aquini) [RHEL-104909]
  - x86/mm: Avoid using set_pgd() outside of real PGD pages (Rafael Aquini) [RHEL-104909]
  - mm: vmalloc must set pte via arch code (Rafael Aquini) [RHEL-104909]
  - mm: zswap: shrink until can accept (Rafael Aquini) [RHEL-104909]
  - mm, compaction: finish pageblocks on complete migration failure (Rafael Aquini) [RHEL-104909]
  - mm, compaction: finish scanning the current pageblock if requested (Rafael Aquini) [RHEL-104909]
  - mm, compaction: check if a page has been captured before draining PCP pages (Rafael Aquini) [RHEL-104909]
  - mm, compaction: rename compact_control->rescan to finish_pageblock (Rafael Aquini) [RHEL-104909]
  - mm/compaction: move compaction_suitable's comment to right place (Rafael Aquini) [RHEL-104909]
  - mm/compaction: rename 'start_pfn' to 'iteration_start_pfn' in compact_zone() (Rafael Aquini) [RHEL-104909]
  - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (Rafael Aquini) [RHEL-104909]
  - Revert "mm/compaction: fix set skip in fast_find_migrateblock" (Rafael Aquini) [RHEL-104909]
  - mm/page_reporting: replace rcu_access_pointer() with rcu_dereference_protected() (Rafael Aquini) [RHEL-104909]
  - mm/compaction: fix set skip in fast_find_migrateblock (Rafael Aquini) [RHEL-104909]
  - memregion: Fix memregion_free() fallback definition (Rafael Aquini) [RHEL-104909]
  - s390/extable: fix exception table sorting (Rafael Aquini) [RHEL-104909]
  - shmem: shmem_writepage() split unlikely i915 THP (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: decide stat.st_blksize by shmem_is_huge() (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: shmem_is_huge(vma, inode, index) (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: SGP_NOALLOC to stop collapse_file() on race (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: move shmem_huge_enabled() upwards (Rafael Aquini) [RHEL-104909]
  - huge tmpfs: remove shrinklist addition from shmem_setattr() (Rafael Aquini) [RHEL-104909]
  - mm,shmem,thp: limit shmem THP allocations to requested zones (Rafael Aquini) [RHEL-104909]
  - mm,thp,shm: limit gfp mask to no more than specified (Rafael Aquini) [RHEL-104909]
  - mm,thp,shmem: limit shmem THP alloc gfp_mask (Rafael Aquini) [RHEL-104909]
  - mm/swap: optimise get_shadow_from_swap_cache (Rafael Aquini) [RHEL-104909]
  - mm/shmem: use pagevec_lookup in shmem_unlock_mapping (Rafael Aquini) [RHEL-104909]
  - mm: make pagecache tagged lookups return only head pages (Rafael Aquini) [RHEL-104909]
  - mm: fix madvise WILLNEED performance problem (Rafael Aquini) [RHEL-104909]
  - mm: pagemap.h: fix two kernel-doc markups (Rafael Aquini) [RHEL-104909]
  - mm: add find_lock_head (Rafael Aquini) [RHEL-104909]
  - mm/shmem: return head page from find_lock_entry (Rafael Aquini) [RHEL-104909]
  - mm: convert find_get_entry to return the head page (Rafael Aquini) [RHEL-104909]
  - i915: use find_lock_page instead of find_lock_entry (Rafael Aquini) [RHEL-104909]
  - proc: optimise smaps for shmem entries (Rafael Aquini) [RHEL-104909]
  - mm: optimise madvise WILLNEED (Rafael Aquini) [RHEL-104909]
  - mm: use find_get_incore_page in memcontrol (Rafael Aquini) [RHEL-104909]
  - mm: factor find_get_incore_page out of mincore_page (Rafael Aquini) [RHEL-104909]
  - mm/shmem: fix build without THP (Rafael Aquini) [RHEL-104909]
  - mm: huge tmpfs: try to split_huge_page() when punching hole (Rafael Aquini) [RHEL-104909]
  - mm/shmem.c: clean code by removing unnecessary assignment (Rafael Aquini) [RHEL-104909]
  - mm/shmem.c: distribute switch variables for initialization (Rafael Aquini) [RHEL-104909]
  - include/linux/pagemap.h: optimise find_subpage for !THP (Rafael Aquini) [RHEL-104909]
  - mm/filemap.c: unexport find_get_entry (Rafael Aquini) [RHEL-104909]
  - include/linux/pagemap.h: rename arguments to find_subpage (Rafael Aquini) [RHEL-104909]
  - powerpc/mm: drop #ifdef CONFIG_MMU in is_ioremap_addr() (Rafael Aquini) [RHEL-104909]
  - powerpc: remove the __kernel_io_end export (Rafael Aquini) [RHEL-104909]
  - mm/shmem: make find_get_pages_range() work for huge page (Rafael Aquini) [RHEL-104909]
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117577] {CVE-2025-39849}
  - dlm: move to rinfo for all middle conversion cases (Alexander Aring) [RHEL-110032]


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.82.1.el8_10]
changelog:
  - smb: client: fix missing timestamp updates after utime(2) (Paulo Alcantara) [RHEL-109431]
  - cifs: fix leak of iface for primary channel (Paulo Alcantara) [RHEL-109546]
  - cifs: reset iface weights when we cannot find a candidate (Paulo Alcantara) [RHEL-109546]
  - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-109546]
  - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-109546] {CVE-2024-35999}
  - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [RHEL-109546] {CVE-2025-38244}
  - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-109546]
  - smb: client: fix oops due to unset link speed (Paulo Alcantara) [RHEL-109546] {CVE-2025-21725}
  - smb: client: fix use-after-free of signing key (Paulo Alcantara) [RHEL-109546] {CVE-2024-53179}
  - smb: client: fix UAF in smb2_reconnect_server() (Paulo Alcantara) [RHEL-109546] {CVE-2024-35870}
  - cifs: failure to add channel on iface should bump up weight (Paulo Alcantara) [RHEL-109546]
  - cifs: update iface_last_update on each query-and-update (Paulo Alcantara) [RHEL-109546]
  - cifs: do not depend on release_iface for maintaining iface_list (Paulo Alcantara) [RHEL-109546]
  - cifs: cifs_chan_is_iface_active should be called with chan_lock held (Paulo Alcantara) [RHEL-109546]
  - cifs: account for primary channel in the interface list (Paulo Alcantara) [RHEL-109546]
  - cifs: distribute channels across interfaces based on speed (Paulo Alcantara) [RHEL-109546]
  - cifs: handle cases where a channel is closed (Paulo Alcantara) [RHEL-109546]
  - cifs: force interface update before a fresh session setup (Paulo Alcantara) [RHEL-109546]
  - cifs: do not reset chan_max if multichannel is not supported at mount (Paulo Alcantara) [RHEL-109546]
  - cifs: reconnect helper should set reconnect for the right channel (Paulo Alcantara) [RHEL-109546]
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara) [RHEL-109546] {CVE-2023-52752}
  - cifs: print last update time for interface list (Paulo Alcantara) [RHEL-109546]
  - cifs: fix session state transition to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546]
  - cifs: log session id when a matching ses is not found (Paulo Alcantara) [RHEL-109546]
  - cifs: fix session state check in smb2_find_smb_ses (Paulo Alcantara) [RHEL-109546]
  - cifs: fix session state check in reconnect to avoid use-after-free issue (Paulo Alcantara) [RHEL-109546]
  - cifs: do all necessary checks for credits within or before locking (Paulo Alcantara) [RHEL-109546]
  - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (Paulo Alcantara) [RHEL-109546]
  - cifs: print smb3_fs_context::source when mounting (Paulo Alcantara) [RHEL-109546]
  - cifs: protect session status check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: missing lock when updating session status (Paulo Alcantara) [RHEL-109546]
  - cifs: refcount only the selected iface during interface update (Paulo Alcantara) [RHEL-109546]
  - cifs: double lock in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546]
  - cifs: get rid of dead check in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid races in parallel reconnects in smb1 (Paulo Alcantara) [RHEL-109546]
  - cifs: fix missing unload_nls() in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid race conditions with parallel reconnects (Paulo Alcantara) [RHEL-109546]
  - cifs: empty interface list when server doesn't support query interfaces (Paulo Alcantara) [RHEL-109546]
  - cifs: do not poll server interfaces too regularly (Paulo Alcantara) [RHEL-109546]
  - cifs: generate signkey for the channel that's reconnecting (Paulo Alcantara) [RHEL-109546]
  - cifs: Move the in_send statistic to __smb_send_rqst() (Paulo Alcantara) [RHEL-109546]
  - cifs: prevent data race in cifs_reconnect_tcon() (Paulo Alcantara) [RHEL-109546]
  - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (Paulo Alcantara) [RHEL-109546]
  - cifs: match even the scope id for ipv6 addresses (Paulo Alcantara) [RHEL-109546]
  - cifs: update ip_addr for ses only for primary chan setup (Paulo Alcantara) [RHEL-109546]
  - cifs: use tcon allocation functions even for dummy tcon (Paulo Alcantara) [RHEL-109546]
  - cifs: use the least loaded channel for sending requests (Paulo Alcantara) [RHEL-109546]
  - cifs: get rid of dns resolve worker (Paulo Alcantara) [RHEL-109546]
  - cifs: prevent data race in smb2_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: do not query ifaces on smb1 mounts (Paulo Alcantara) [RHEL-109546]
  - cifs: fix interface count calculation during refresh (Paulo Alcantara) [RHEL-109546]
  - cifs: protect access of TCP_Server_Info::{dstaddr,hostname} (Paulo Alcantara) [RHEL-109546]
  - cifs: fix race in assemble_neg_contexts() (Paulo Alcantara) [RHEL-109546]
  - cifs: set correct status of tcon ipc when reconnecting (Paulo Alcantara) [RHEL-109546]
  - cifs: set correct ipc status after initial tree connect (Paulo Alcantara) [RHEL-109546]
  - cifs: set correct tcon status after initial tree connect (Paulo Alcantara) [RHEL-109546]
  - cifs: Use after free in debug code (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid unnecessary iteration of tcp sessions (Paulo Alcantara) [RHEL-109546]
  - smb3: interface count displayed incorrectly (Paulo Alcantara) [RHEL-109546]
  - cifs: Fix xid leak in cifs_ses_add_channel() (Paulo Alcantara) [RHEL-109546]
  - smb3: clarify multichannel warning (Paulo Alcantara) [RHEL-109546]
  - smb3: do not log confusing message when server returns no network interfaces (Paulo Alcantara) [RHEL-109546]
  - cifs: return correct error in ->calc_signature() (Paulo Alcantara) [RHEL-109546]
  - cifs: add missing spinlock around tcon refcount (Paulo Alcantara) [RHEL-109546]
  - cifs: fix small mempool leak in SMB2_negotiate() (Paulo Alcantara) [RHEL-109546] {CVE-2022-49938}
  - cifs: remove useless parameter 'is_fsctl' from SMB2_ioctl() (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unused server parameter from calc_smb_size() (Paulo Alcantara) [RHEL-109546]
  - smb3: limit noisy error (Paulo Alcantara) [RHEL-109546]
  - cifs: alloc_mid function should be marked as static (Paulo Alcantara) [RHEL-109546]
  - cifs: remove "cifs_" prefix from init/destroy mids functions (Paulo Alcantara) [RHEL-109546]
  - cifs: fix wrong unlock before return from cifs_tree_connect() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid use of global locks for high contention data (Paulo Alcantara) [RHEL-109546]
  - cifs: remove remaining build warnings (Paulo Alcantara) [RHEL-109546]
  - cifs: remove minor build warning (Paulo Alcantara) [RHEL-109546]
  - cifs: remove some camelCase and also some static build warnings (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unnecessary (void*) conversions. (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unnecessary type castings (Paulo Alcantara) [RHEL-109546]
  - cifs: remove redundant initialization to variable mnt_sign_enabled (Paulo Alcantara) [RHEL-109546]
  - smb3: check xattr value length earlier (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unnecessary locking of chan_lock while freeing session (Paulo Alcantara) [RHEL-109546]
  - cifs: fix race condition with delayed threads (Paulo Alcantara) [RHEL-109546]
  - cifs: update cifs_ses::ip_addr after failover (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid deadlocks while updating iface (Paulo Alcantara) [RHEL-109546]
  - cifs: periodically query network interfaces from server (Paulo Alcantara) [RHEL-109546]
  - cifs: during reconnect, update interface if necessary (Paulo Alcantara) [RHEL-109546]
  - cifs: change iface_list from array to sorted linked list (Paulo Alcantara) [RHEL-109546]
  - cifs: when a channel is not found for server, log its connection id (Paulo Alcantara) [RHEL-109546]
  - cifs: fix potential deadlock in direct reclaim (Paulo Alcantara) [RHEL-109546]
  - cifs: return errors during session setup during reconnects (Paulo Alcantara) [RHEL-109546]
  - cifs: remove repeated debug message on cifs_put_smb_ses() (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid parallel session setups on same channel (Paulo Alcantara) [RHEL-109546]
  - cifs: use new enum for ses_status (Paulo Alcantara) [RHEL-109546]
  - cifs: fix incorrect use of list iterator after the loop (Paulo Alcantara) [RHEL-109546]
  - cifs: do not use tcpStatus after negotiate completes (Paulo Alcantara) [RHEL-109546]
  - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [RHEL-109546]
  - cifs: Use kzalloc instead of kmalloc/memset (Paulo Alcantara) [RHEL-109546]
  - cifs: force new session setup and tcon for dfs (Paulo Alcantara) [RHEL-109546]
  - cifs: fix potential race with cifsd thread (Paulo Alcantara) [RHEL-109546]
  - smb3: cleanup and clarify status of tree connections (Paulo Alcantara) [RHEL-109546]
  - cifs: use a different reconnect helper for non-cifsd threads (Paulo Alcantara) [RHEL-109546]
  - smb3: fix incorrect session setup check for multiuser mounts (Paulo Alcantara) [RHEL-109546]
  - cifs: mark sessions for reconnection in helper function (Paulo Alcantara) [RHEL-109546]
  - cifs: call helper functions for marking channels for reconnect (Paulo Alcantara) [RHEL-109546]
  - cifs: call cifs_reconnect when a connection is marked (Paulo Alcantara) [RHEL-109546]
  - cifs: unlock chan_lock before calling cifs_put_tcp_session (Paulo Alcantara) [RHEL-109546]
  - cifs: cifs_ses_mark_for_reconnect should also update reconnect bits (Paulo Alcantara) [RHEL-109546]
  - cifs: update tcpStatus during negotiate and sess setup (Paulo Alcantara) [RHEL-109546]
  - cifs: make status checks in version independent callers (Paulo Alcantara) [RHEL-109546]
  - cifs: remove repeated state change in dfs tree connect (Paulo Alcantara) [RHEL-109546]
  - cifs: fix the cifs_reconnect path for DFS (Paulo Alcantara) [RHEL-109546]
  - cifs: remove unused variable ses_selected (Paulo Alcantara) [RHEL-109546]
  - cifs: protect all accesses to chan_* with chan_lock (Paulo Alcantara) [RHEL-109546]
  - cifs: fix the connection state transitions with multichannel (Paulo Alcantara) [RHEL-109546]
  - cifs: check reconnects for channels of active tcons too (Paulo Alcantara) [RHEL-109546]
  - cifs: avoid race during socket reconnect between send and recv (Paulo Alcantara) [RHEL-109546]
  - cifs: maintain a state machine for tcp/smb/tcon sessions (Paulo Alcantara) [RHEL-109546]
  - cifs: fix hang on cifs_get_next_mid() (Paulo Alcantara) [RHEL-109546]
  - cifs: take cifs_tcp_ses_lock for status checks (Paulo Alcantara) [RHEL-109546]
  - cifs: reconnect only the connection and not smb session where possible (Paulo Alcantara) [RHEL-109546]
  - cifs: add WARN_ON for when chan_count goes below minimum (Paulo Alcantara) [RHEL-109546]
  - cifs: adjust DebugData to use chans_need_reconnect for conn status (Paulo Alcantara) [RHEL-109546]
  - cifs: use the chans_need_reconnect bitmap for reconnect status (Paulo Alcantara) [RHEL-109546]
  - cifs: track individual channel status using chans_need_reconnect (Paulo Alcantara) [RHEL-109546]
  - cifs: Adjust key sizes and key generation routines for AES256 encryption (Paulo Alcantara) [RHEL-109546]
  - cifs: fix allocation size on newly created files (Paulo Alcantara) [RHEL-109546]
  - veth: try harder when allocating queue memory (Davide Caratti) [RHEL-92515]
  - net: enable memcg accounting for veth queues (Davide Caratti) [RHEL-92515]
  - gfs2: No more gfs2_find_jhead caching (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Clean up revokes on normal withdraws (Bob Peterson) [RHEL-92461]
  - gfs2: Get rid of duplicate log head lookup (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Improve gfs2_make_fs_rw error handling (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Simplify clean_journal (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Simplify gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461]
  - gfs2: Fix glock recursion in freeze_go_xmote_bh (Bob Peterson) [RHEL-92461]
  - gfs2: Move gfs2_log_pointers_init (Andreas Gruenbacher) [RHEL-92461]
  - mm: hugetlb: conditionally disable tlb_remove_table_sync_one() in huge_pmd_unshare() (Rafael Aquini) [RHEL-120391]
  - kernel: extend rh_waived to cope better with the CVE mitigations case (Rafael Aquini) [RHEL-120391]
  - Add support to rh_waived cmdline boot parameter (Rafael Aquini) [RHEL-120391]
  - wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-117792] {CVE-2025-39864}
  - ext4: prevent stale extent cache entries caused by concurrent I/O writeback (Brian Foster) [RHEL-50745]
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Brian Foster) [RHEL-50745]
  - ext4: check the extent status again before inserting delalloc block (Brian Foster) [RHEL-50745]
  - ext4: factor out a common helper to query extent map (Brian Foster) [RHEL-50745]
  - ext4: convert to exclusive lock while inserting delalloc extents (Brian Foster) [RHEL-50745]
  - ext4: refactor ext4_da_map_blocks() (Brian Foster) [RHEL-50745]
  - wifi: mac80211: check S1G action frame size (Jose Ignacio Tornos Martinez) [RHEL-116069] {CVE-2023-53257}
  - wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}
  - wifi: mwifiex: Fix missed return in oob checks failed path (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}
  - wifi: mwifiex: Fix OOB and integer underflow when rx packets (Jose Ignacio Tornos Martinez) [RHEL-115516] {CVE-2023-53226}


author: Denys Vlasenko <dvlasenk@redhat.com> [4.18.0-553.83.1.el8_10]
changelog:
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Abhi Das) [RHEL-116658] {CVE-2022-50367}
  - redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86_64 (Waiman Long) [RHEL-114285]
  - x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114285] {CVE-2025-40300}
  - i40e: fix Jumbo Frame support after iPXE boot (Mohammad Heib) [RHEL-121781]
  - i40e: Report MFS in decimal base instead of hex (Mohammad Heib) [RHEL-121781]
  - i40e: Fix unexpected MFS warning message (Mohammad Heib) [RHEL-121781]
  - bitfield: Add FIELD_MODIFY() helper (Mohammad Heib) [RHEL-121781]
  - bitops: Add non-atomic bitops for pointers (Mohammad Heib) [RHEL-121781]
  - qed/qede: Fix scheduling while atomic (CKI Backport Bot) [RHEL-9757]
  - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123215]
  - jiffies: Cast to unsigned long in secs_to_jiffies() conversion (Miklos Szeredi) [RHEL-123215]
  - jiffies: Define secs_to_jiffies() (Miklos Szeredi) [RHEL-123215]
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Mete Durlu) [RHEL-105611]
  - mm: zswap: fix missing folio cleanup in writeback race path (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}
  - mm: fix zswap writeback race condition (Aristeu Rozanski) [RHEL-116239] {CVE-2023-53178}


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.84.1.el8_10]
changelog:
  - cgroup: don't put ERR_PTR() into fc->root (CKI Backport Bot) [RHEL-123775]
  - vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114296] {CVE-2025-39718}
  - NFS: remove revoked delegation from server's delegation list (Benjamin Coddington) [RHEL-123005]


author: Alexandra Hájková <ahajkova@redhat.com> [4.18.0-553.85.1.el8_10]
changelog:
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123799]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123799] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123799] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123799] {CVE-2025-39970}
  - i40e: Fix filter input checks to prevent config with invalid values (Michal Schmidt) [RHEL-123799]
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123799] {CVE-2025-39971}
  - i40e: fix: remove needless retries of NVM update (Michal Schmidt) [RHEL-123799]
  - i40e: remove i40e_status (Michal Schmidt) [RHEL-123799]
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123799] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123799] {CVE-2025-39973}
  - i40e: increase max descriptors for XL710 (Michal Schmidt) [RHEL-123799]
  - drm/nouveau: Don't create connectors that aren't in disp.conn_mask (Lyude Paul) [RHEL-22122]
  - NFS: Fix a race when updating an existing write (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Olga Kornievskaia) [RHEL-113849] {CVE-2025-39697}
  - The rpminspect.yaml emptyrpm list needs to be expanded (Alexandra Hájková)


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.86.1.el8_10]
changelog:
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-118237] {CVE-2025-39825}
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-118237]
  - e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123105] {CVE-2025-39898}
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125595] {CVE-2025-38724}
  - nbd: fix incomplete validation of ioctl arg (CKI Backport Bot) [RHEL-122965] {CVE-2023-53513}
  - arch/powerpc: commandline option to enable P11 support (Mamatha Inamdar) [RHEL-107921]
  - perf/pmu-events/powerpc: Update json mapfile with Power11 PVR (Mamatha Inamdar) [RHEL-107921]
  - perf vendor events powerpc: Add PVN for HX-C2000 CPU with Power8 Architecture (Mamatha Inamdar) [RHEL-107921]
  - tools/perf/arch/powerpc: Fix the CPU ID const char* value by adding 0x prefix (Mamatha Inamdar) [RHEL-107921]
  - powerpc/perf: Power11 Performance Monitoring support (Mamatha Inamdar) [RHEL-107921]
  - powerpc/perf: Add __init attribute to eligible functions (Mamatha Inamdar) [RHEL-107921]
  - powerpc: Add Power11 architected and raw mode (Mamatha Inamdar) [RHEL-107921]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.87.1.el8_10]
changelog:
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120664]
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120664] {CVE-2025-39955}
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Audra Mitchell) [RHEL-117059] {CVE-2025-39883}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.88.1.el8_10]
changelog:
  - scsi: s390: zfcp: Ensure synchronous unit_add (Mete Durlu) [RHEL-129199]
  - RDMA/rxe: Fix incomplete state save in rxe_requester (Kamal Heib) [RHEL-124700] {CVE-2023-53539}
  - RDMA/rxe: Fix mr->map double free (CKI Backport Bot) [RHEL-123715] {CVE-2022-50543}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.89.1.el8_10]
changelog:
  - mm: memcg: use READ_ONCE()/WRITE_ONCE() to access stock->cached (Radostin Stoyanov) [RHEL-122774]
  - mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
  - mm/memcg: revert ("mm/memcg: optimize user context object stock access") (Radostin Stoyanov) [RHEL-122774] {CVE-2023-53401}
  - gfs2: Add proper lockspace locking (Andreas Gruenbacher) [RHEL-88660]
  - gfs2: do_xmote cleanup (Andreas Gruenbacher) [RHEL-88660]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [4.18.0-553.91.1.el8_10]
changelog:
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: simplify finish_xmote (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Retries missing in gfs2_{rename,exchange} (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: glock cancelation flag fix (Andreas Gruenbacher) [RHEL-135355]
  - gfs2: Minor do_xmote cancelation fix (Andreas Gruenbacher) [RHEL-135355]
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-133999] {CVE-2025-40240}
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - cifs: fix automount with passwords that contain commas (Paulo Alcantara) [RHEL-125963]
  - perf/x86/intel/ds: Fix the conversion from TSC to perf time (Anubhav Shelat) [RHEL-127171]
  - perf/x86/intel/pebs: Fix PEBS timestamps overwritten (Anubhav Shelat) [RHEL-127171]
  - ceph: fix client race condition where r_parent becomes stale before sending message (Alex Markuze) [RHEL-120226]
  - ceph: fix client race condition validating r_parent before applying state (Alex Markuze) [RHEL-120226]
  - blk-mq: setup queue ->tag_set before initializing hctx (Ming Lei) [RHEL-30744]
  - blk-mq: add helper for checking if one CPU is mapped to specified hctx (Ming Lei) [RHEL-30744]
  - blk-mq: don't schedule block kworker on isolated CPUs (Ming Lei) [RHEL-30744]
  - sched/isolation: add cpu_is_isolated() API (Ming Lei) [RHEL-30744]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-105.121.2.el8uek]
changelog:
  - LTS version: v5.15.121 (Jack Vogel)   
  - drm/atomic: Fix potential use-after-free in nonblocking commits (Daniel Vetter)   
  - net/sched: sch_qfq: reintroduce lmax bound check for MTU (Pedro Tammela)   
  - MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled (Thomas Bogendoerfer)   
  - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (Manish Rangankar)   
  - scsi: qla2xxx: Pointer may be dereferenced (Shreyas Deodhar)   
  - scsi: qla2xxx: Correct the index of array (Bikash Hazarika)   
  - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (Nilesh Javali)   
  - scsi: qla2xxx: Fix potential NULL pointer dereference (Bikash Hazarika)   
  - scsi: qla2xxx: Fix buffer overrun (Quinn Tran)   
  - scsi: qla2xxx: Avoid fcport pointer dereference (Nilesh Javali)   
  - scsi: qla2xxx: Array index may go out of bound (Nilesh Javali)   
  - scsi: qla2xxx: Wait for io return on terminate rport (Quinn Tran)   
  - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (Masami Hiramatsu (Google))   
  - tracing/probes: Fix not to count error code to total length (Masami Hiramatsu (Google))   
  - selftests: mptcp: depend on SYN_COOKIES (Matthieu Baerts)   
  - selftests: mptcp: sockopt: return error if wrong mark (Matthieu Baerts)   
  - tracing: Fix null pointer dereference in tracing_err_log_open() (Mateusz Stachyra)   
  - xtensa: ISS: fix call to split_if_spec (Max Filippov)   
  - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (Zheng Yejian)   
  - ring-buffer: Fix deadloop issue on reading trace_pipe (Zheng Yejian)   
  - net: ena: fix shift-out-of-bounds in exponential backoff (Krister Johansen)   
  - samples: ftrace: Save required argument registers in sample trampolines (Florent Revest)   
  - tracing: Fix memory leak of iter->temp when reading trace_pipe (Zheng Yejian)   
  - tracing/histograms: Add histograms to hist_vars if they have referenced variables (Mohamed Khalfella)   
  - s390/decompressor: fix misaligned symbol build error (Heiko Carstens)   
  - bus: ixp4xx: fix IXP4XX_EXP_T1_MASK (Jonas Gorski)   
  - Revert "8250: add support for ASIX devices with a FIFO bug" (Jiaqing Zhao)   
  - soundwire: qcom: fix storing port config out-of-bounds (Krzysztof Kozlowski)   
  - opp: Fix use-after-free in lazy_opp_tables after probe deferral (Stephan Gerhold)   
  - meson saradc: fix clock divider mask length (George Stark)   
  - xhci: Show ZHAOXIN xHCI root hub speed correctly (Weitao Wang)   
  - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (Weitao Wang)   
  - xhci: Fix resume issue of some ZHAOXIN hosts (Weitao Wang)   
  - ceph: don't let check_caps skip sending responses for revoke msgs (Xiubo Li)   
  - libceph: harden msgr2.1 frame segment length checks (Ilya Dryomov)   
  - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (Christophe JAILLET)   
  - tty: serial: imx: fix rs485 rx after tx (Martin Fuzzey)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (Christophe JAILLET)   
  - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (Christophe JAILLET)   
  - serial: atmel: don't enable IRQs prematurely (Dan Carpenter)   
  - drm/ttm: Don't leak a resource on swapout move error (Thomas Hellström)   
  - drm/amdgpu: avoid restore process run into dead loop. (gaba)   
  - drm/amd/display: Correct `DMUB_FW_VERSION` macro (Mario Limonciello)   
  - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (Samuel Pitoiset)   
  - drm/rockchip: vop: Leave vblank enabled in self-refresh (Brian Norris)   
  - drm/atomic: Allow vblank-enabled + self-refresh "disable" (Brian Norris)   
  - fs: dlm: return positive pid value for F_GETLK (Alexander Aring)   
  - dm init: add dm-mod.waitfor to wait for asynchronously probed block devices (Peter Korsgaard)   
  - md/raid0: add discard support for the 'original' layout (Jason Baron)   
  - mfd: pm8008: Fix module autoloading (Johan Hovold)   
  - misc: pci_endpoint_test: Re-init completion for every test (Damien Le Moal)   
  - misc: pci_endpoint_test: Free IRQs before removing the device (Damien Le Moal)   
  - PCI: rockchip: Set address alignment for endpoint mode (Damien Le Moal)   
  - PCI: rockchip: Use u32 variable to access 32-bit registers (Rick Wertenbroek)   
  - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (Rick Wertenbroek)   
  - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (Rick Wertenbroek)   
  - PCI: rockchip: Write PCI Device ID to correct register (Rick Wertenbroek)   
  - PCI: rockchip: Assert PCI Configuration Enable bit after probe (Rick Wertenbroek)   
  - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (Manivannan Sadhasivam)   
  - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (Robin Murphy)   
  - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (Ondrej Zary)   
  - dm integrity: reduce vmalloc space footprint on 32-bit architectures (Mikulas Patocka)   
  - hwrng: imx-rngc - fix the timeout for init and self check (Martin Kaiser)   
  - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (Siddh Raman Pant)   
  - ext4: only update i_reserved_data_blocks on successful block allocation (Baokun Li)   
  - ext4: turn quotas off if mount failed after enabling quotas (Baokun Li)   
  - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (Chao Yu)   
  - ext4: fix wrong unit use in ext4_mb_new_blocks (Kemeng Shi)   
  - ext4: get block from bh in ext4_free_blocks for fast commit replay (Kemeng Shi)   
  - ext4: fix wrong unit use in ext4_mb_clear_bb (Kemeng Shi)   
  - ext4: Fix reusing stale buffer heads from last failed mounting (Zhihao Cheng)   
  - MIPS: KVM: Fix NULL pointer dereference (Huacai Chen)   
  - MIPS: Loongson: Fix cpu_probe_loongson() again (Huacai Chen)   
  - erofs: fix compact 4B support for 16k block size (Gao Xiang)   
  - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (Michael Ellerman)   
  - misc: fastrpc: Create fastrpc scalar with correct buffer count (Ekansh Gupta)   
  - powerpc: Fail build if using recordmcount with binutils v2.37 (Naveen N Rao)   
  - mm/damon/ops-common: atomically test and clear young on ptes and pmds (Ryan Roberts)   
  - net: bcmgenet: Ensure MDIO unregistration has clocks enabled (Florian Fainelli)   
  - mtd: rawnand: meson: fix unaligned DMA buffers handling (Arseniy Krasnov)   
  - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (Jarkko Sakkinen)   
  - pinctrl: amd: Only use special debounce behavior for GPIO 0 (Mario Limonciello)   
  - pinctrl: amd: Detect and mask spurious interrupts (Kornel Dulęba)   
  - pinctrl: amd: Detect internal GPIO0 debounce handling (Mario Limonciello)   
  - pinctrl: amd: Fix mistake in handling clearing pins at startup (Mario Limonciello)   
  - f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() (Chao Yu)   
  - fs/ntfs3: Check fields while reading (Konstantin Komarov)   
  - nvme-pci: fix DMA direction of unmapping integrity data (Ming Lei)   
  - nvme-pci: remove nvme_queue from nvme_iod (Keith Busch)   
  - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (Pedro Tammela)   
  - net/sched: sch_qfq: refactor parsing of netlink parameters (Pedro Tammela)   
  - net/sched: make psched_mtu() RTNL-less safe (Pedro Tammela)   
  - netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() (Dan Carpenter)   
  - riscv: mm: fix truncation warning on RV32 (Jisheng Zhang)   
  - net/sched: flower: Ensure both minimum and maximum ports are specified (Ido Schimmel)   
  - bpf: cpumap: Fix memory leak in cpu_map_update_elem (Pu Lehui)   
  - wifi: airo: avoid uninitialized warning in airo_get_rate() (Randy Dunlap)   
  - erofs: fix fsdax unavailability for chunk-based regular files (Xin Yin)   
  - erofs: decouple basic mount options from fs_context (Gao Xiang)   
  - erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF (Chunhai Guo)   
  - octeontx2-pf: Add additional check for MCAM rules (Suman Ghosh)   
  - drm/i915: Fix one wrong caching mode enum usage (Tvrtko Ursulin)   
  - riscv, bpf: Fix inconsistent JIT image generation (Björn Töpel)   
  - bpf, riscv: Support riscv jit to provide bpf_line_info (Pu Lehui)   
  - igc: Fix inserting of empty frame for launchtime (Florian Kauer)   
  - igc: Fix launchtime before start of cycle (Florian Kauer)   
  - kernel/trace: Fix cleanup logic of enable_trace_eprobe (Tzvetomir Stoyanov (VMware))   
  - platform/x86: wmi: Break possible infinite loop when parsing GUID (Andy Shevchenko)   
  - platform/x86: wmi: move variables (Barnabás Pőcze)   
  - platform/x86: wmi: use guid_t and guid_equal() (Barnabás Pőcze)   
  - platform/x86: wmi: remove unnecessary argument (Barnabás Pőcze)   
  - ipv6/addrconf: fix a potential refcount underflow for idev (Ziyang Xuan)   
  - NTB: ntb_tool: Add check for devm_kcalloc (Jiasheng Jiang)   
  - NTB: ntb_transport: fix possible memory leak while device_register() fails (Yang Yingliang)   
  - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (Yuan Can)   
  - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (Yuan Can)   
  - ntb: idt: Fix error handling in idt_pci_driver_init() (Yuan Can)   
  - udp6: fix udp6_ehashfn() typo (Eric Dumazet)   
  - icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). (Kuniyuki Iwashima)   
  - net: prevent skb corruption on frag list segmentation (Paolo Abeni)   
  - net: bgmac: postpone turning IRQs off to avoid SoC hangs (Rafał Miłecki)   
  - ionic: remove WARN_ON to prevent panic_on_warn (Nitya Sunkad)   
  - gve: Set default duplex configuration to full (Junfeng Guo)   
  - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (M A Ramdhan)   
  - net: mvneta: fix txq_map in case of txq_number==1 (Klaus Kudielka)   
  - bpf: Fix max stack depth check for async callbacks (Kumar Kartikeya Dwivedi)   
  - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (Dan Carpenter)   
  - igc: Handle PPS start time programming for past time values (Aravindhan Gunasekaran)   
  - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (Prasad Koya)   
  - net/mlx5e: Check for NOT_READY flag state after locking (Vlad Buslov)   
  - net/mlx5e: fix memory leak in mlx5e_ptp_open (Zhengchao Shao)   
  - net/mlx5e: fix double free in mlx5e_destroy_flow_table (Zhengchao Shao)   
  - igc: Remove delay during TX ring configuration (Muhammad Husaini Zulkifli)   
  - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (Marek Vasut)   
  - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (Douglas Anderson)   
  - drm/panel: simple: Add connector_type for innolux_at043tn24 (Fabio Estevam)   
  - ksmbd: validate session id and tree id in the compound request (Namjae Jeon)   
  - ksmbd: fix out-of-bound read in smb2_write (Namjae Jeon)   
  - ksmbd: validate command payload size (Namjae Jeon)   
  - ksmbd: use ksmbd_req_buf_next() in ksmbd_smb2_check_message() (Ralph Boehme)   
  - workqueue: clean up WORK_* constant types, clarify masking (Linus Torvalds)   
  - net: lan743x: Don't sleep in atomic context (Moritz Fischer)   
  - io_uring: add reschedule point to handle_tw_list() (Jens Axboe)   
  - io_uring: Use io_schedule* in cqring wait (Andres Freund)   
  - block/partition: fix signedness issue for Amiga partitions (Michael Schmitz)   
  - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (Sherry Sun)   
  - wireguard: netlink: send staged packets when setting initial private key (Jason A. Donenfeld)   
  - wireguard: queueing: use saner cpu selection wrapping (Jason A. Donenfeld)   
  - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval (Thadeu Lima de Souza Cascardo)   
  - netfilter: nf_tables: do not ignore genmask when looking up chain by id (Thadeu Lima de Souza Cascardo)   
  - netfilter: conntrack: Avoid nf_ct_helper_hash uses after free (Florent Revest)   
  - netfilter: nf_tables: unbind non-anonymous set if rule construction fails (Pablo Neira Ayuso)   
  - fanotify: disallow mount/sb marks on kernel internal pseudo fs (Amir Goldstein)   
  - ovl: fix null pointer dereference in ovl_get_acl_rcu() (Zhihao Cheng)   
  - fs: no need to check source (Jan Kara)   
  - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (Christian Marangi)   
  - ARM: orion5x: fix d2net gpio initialization (Arnd Bergmann)   
  - ARM: dts: qcom: ipq4019: fix broken NAND controller properties override (Krzysztof Kozlowski)   
  - ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path (Ricardo Ribalda Delgado)   
  - ASoC: mediatek: mt8173: Fix irq error path (Ricardo Ribalda Delgado)   
  - btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() (Filipe Manana)   
  - btrfs: fix extent buffer leak after tree mod log failure at split_node() (Filipe Manana)   
  - btrfs: fix race when deleting quota root from the dirty cow roots list (Filipe Manana)   
  - btrfs: reinsert BGs failed to reclaim (Naohiro Aota)   
  - btrfs: bail out reclaim process if filesystem is read-only (Naohiro Aota)   
  - btrfs: delete unused BGs while reclaiming BGs (Naohiro Aota)   
  - btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile (Matt Corallo)   
  - fs: avoid empty option when generating legacy mount string (Thomas Weißschuh)   
  - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (Fabian Frederick)   
  - ipvs: increase ip_vs_conn_tab_bits range for 64BIT (Abhijeet Rastogi)   
  - fs: Lock moved directories (Jan Kara)   
  - fs: Establish locking order for unrelated directories (Jan Kara)   
  - Revert "f2fs: fix potential corruption when moving a directory" (Jan Kara)   
  - ext4: Remove ext4 locking of moved directory (Jan Kara)   
  - shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs (Roberto Sassu)   
  - autofs: use flexible array in ioctl structure (Arnd Bergmann)   
  - integrity: Fix possible multiple allocation in integrity_inode_get() (Tianjia Zhang)   
  - um: Use HOST_DIR for mrproper (Kees Cook)   
  - bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent (Zheng Wang)   
  - bcache: Remove unnecessary NULL point check in node allocations (Zheng Wang)   
  - bcache: fixup btree_cache_wait list damage (Mingzhe Zou)   
  - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. (Chevron Li)   
  - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (Ulf Hansson)   
  - mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M (Robert Marko)   
  - mmc: core: disable TRIM on Kingston EMMC04G-M627 (Robert Marko)   
  - io_uring: wait interruptibly for request completions on exit (Jens Axboe)   
  - NFSD: add encoding of op_recall flag for write delegation (Dai Ngo)   
  - i2c: qup: Add missing unwind goto in qup_i2c_probe() (Shuai Jiang)   
  - btrfs: do not BUG_ON() on tree mod log failure at balance_level() (Filipe Manana)   
  - extcon: usbc-tusb320: Convert to i2c's .probe_new() (Uwe Kleine-König)   
  - i2c: xiic: Don't try to handle more interrupt events after error (Robert Hancock)   
  - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (Marek Vasut)   
  - apparmor: fix missing error check for rhashtable_insert_fast (Danila Chernetsov)   
  - sh: dma: Fix DMA channel offset calculation (Artur Rojek)   
  - s390/qeth: Fix vipa deletion (Thorsten Winkler)   
  - octeontx-af: fix hardware timestamp configuration (Hariprasad Kelam)   
  - net: dsa: tag_sja1105: fix MAC DA patching from meta frames (Vladimir Oltean)   
  - pptp: Fix fib lookup calls. (Guillaume Nault)   
  - riscv: move memblock_allow_resize() after linear mapping is ready (Woody Zhang)   
  - net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX (Lin Ma)   
  - xsk: Honor SO_BINDTODEVICE on bind (Ilya Maximets)   
  - tcp: annotate data races in __tcp_oow_rate_limited() (Eric Dumazet)   
  - net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode (Vladimir Oltean)   
  - powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y (Randy Dunlap)   
  - ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() (Zeng Heng)   
  - octeontx2-af: Add validation before accessing cgx and lmac (Hariprasad Kelam)   
  - octeontx2-af: Fix mapping for NIX block from CGX connection (Hariprasad Kelam)   
  - f2fs: fix error path handling in truncate_dnode() (Chao Yu)   
  - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (Nishanth Menon)   
  - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (Jonas Gorski)   
  - net: dsa: vsc73xx: fix MTU configuration (Pawel Dembicki)   
  - ibmvnic: Do not reset dql stats on NON_FATAL err (Nick Child)   
  - Add MODULE_FIRMWARE() for FIRMWARE_TG357766. (Tobias Heider)   
  - net/sched: act_ipt: add sanity checks on table name and hook locations (Florian Westphal)   
  - sctp: fix potential deadlock on &net->sctp.addr_wq_lock (Chengfeng Ye)   
  - media: cec: i2c: ch7322: also select REGMAP (Randy Dunlap)   
  - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (Jouni Högander)   
  - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (Christophe JAILLET)   
  - md/raid10: fix the condition to call bio_end_io_acct() (Li Nan)   
  - pwm: mtk_disp: Fix the disable flow of disp_pwm (Shuijing Li)   
  - pwm: ab8500: Fix error code in probe() (Dan Carpenter)   
  - pwm: sysfs: Do not apply state to already disabled PWMs (Marek Vasut)   
  - pwm: imx-tpm: force 'real_period' to be zero in suspend (Fancy Fang)   
  - phy: tegra: xusb: check return value of devm_kzalloc() (Claudiu Beznea)   
  - mfd: stmpe: Only disable the regulators if they are enabled (Christophe JAILLET)   
  - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (Christian Borntraeger)   
  - KVM: s390: vsie: fix the length of APCB bitmap (Pierre Morel)   
  - mfd: stmfx: Nullify stmfx->vdd in case of error (Amelie Delaunay)   
  - mfd: stmfx: Fix error path in stmfx_chip_init (Amelie Delaunay)   
  - nvmem: rmem: Use NVMEM_DEVID_AUTO (Phil Elwell)   
  - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (Mirsad Goran Todorovac)   
  - serial: 8250_omap: Use force_suspend and resume for system suspend (Tony Lindgren)   
  - Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" (Greg Kroah-Hartman)   
  - mfd: intel-lpss: Add missing check for platform_get_resource (Jiasheng Jiang)   
  - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (Christophe JAILLET)   
  - usb: common: usb-conn-gpio: Set last role to unknown before initial detection (Prashanth K)   
  - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (Christophe JAILLET)   
  - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (Christophe JAILLET)   
  - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (Nico Boehr)   
  - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (Dan Carpenter)   
  - media: venus: helpers: Fix ALIGN() of non power of two (Rikard Falkeborn)   
  - mfd: rt5033: Drop rt5033-battery sub-device (Stephan Gerhold)   
  - coresight: Fix loss of connection info when a module is unloaded (James Clark)   
  - kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR (Muchun Song)   
  - serial: 8250: lock port for UART_IER access in omap8250_irq() (John Ogness)   
  - serial: 8250: lock port for stop_rx() in omap8250_irq() (John Ogness)   
  - usb: hide unused usbfs_notify_suspend/resume functions (Arnd Bergmann)   
  - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (Li Yang)   
  - extcon: Fix kernel doc of property capability fields to avoid warnings (Andy Shevchenko)   
  - extcon: Fix kernel doc of property fields to avoid warnings (Andy Shevchenko)   
  - usb: gadget: u_serial: Add null pointer check in gserial_suspend (Prashanth K)   
  - usb: dwc3: qcom: Fix potential memory leak (Vladislav Efanov)   
  - clk: qcom: ipq6018: fix networking resets (Robert Marko)   
  - clk: qcom: reset: support resetting multiple bits (Robert Marko)   
  - clk: qcom: reset: Allow specifying custom reset delay (Stephan Gerhold)   
  - media: i2c: Correct format propagation for st-mipid02 (Daniel Scally)   
  - media: usb: siano: Fix warning due to null work_func_t function pointer (Duoming Zhou)   
  - media: videodev2.h: Fix struct v4l2_input tuner index comment (Marek Vasut)   
  - media: usb: Check az6007_read() return value (Daniil Dulov)   
  - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (Mantas Pucka)   
  - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (Taniya Das)   
  - serial: 8250: omap: Fix freeing of resources on failed register (Tony Lindgren)   
  - usb: dwc2: Fix some error handling paths (Christophe JAILLET)   
  - usb: dwc2: platform: Improve error reporting for problems during .remove() (Uwe Kleine-König)   
  - sh: j2: Use ioremap() to translate device tree address into kernel memory (John Paul Adrian Glaubitz)   
  - w1: fix loop in w1_fini() (Dan Carpenter)   
  - w1: w1_therm: fix locking behavior in convert_t (Stefan Wahren)   
  - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (Ding Hui)   
  - block: increment diskseq on all media change events (Demi Marie Obenour)   
  - block: change all __u32 annotations to __be32 in affs_hardblocks.h (Michael Schmitz)   
  - block: add overflow checks for Amiga partition support (Michael Schmitz)   
  - block: fix signed int overflow in Amiga partition support (Michael Schmitz)   
  - ALSA: jack: Fix mutex call in snd_jack_report() (Takashi Iwai)   
  - ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (Werner Sembach)   
  - iio: accel: fxls8962af: fixup buffer scan element type (Sean Nyekjaer)   
  - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (Sean Nyekjaer)   
  - iio: adc: ad7192: Fix internal/external clock selection (Fabrizio Lamarque)   
  - iio: adc: ad7192: Fix null ad7192_state pointer access (Fabrizio Lamarque)   
  - phy: tegra: xusb: Clear the driver reference in usb-phy dev (EJ Hsu)   
  - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (Krishna Kurapati)   
  - USB: serial: option: add LARA-R6 01B PIDs (Davide Tronchin)   
  - io_uring: ensure IOPOLL locks around deferred work (Jens Axboe)   
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (Liu Shixin)   
  - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (Kiran K)   
  - ksmbd: avoid field overflow warning (Arnd Bergmann)   
  - efi/libstub: Disable PCI DMA before grabbing the EFI memory map (Ard Biesheuvel)   
  - kbuild: Disable GCOV for *.mod.o (Sami Tolvanen)   
  - hwrng: st - keep clock enabled while hwrng is registered (Martin Kaiser)   
  - dax/kmem: Pass valid argument to memory_group_register_static (Tarun Sahu)   
  - dax: Introduce alloc_dev_dax_id() (Dan Williams)   
  - dax: Fix dax_mapping_release() use after free (Dan Williams)   
  - SMB3: Do not send lease break acknowledgment if all file handles have been closed (Bharath SM)   
  - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (Olga Kornievskaia)   
  - crypto: qat - unmap buffers before free for RSA (Hareshx Sankar Raj)   
  - crypto: qat - unmap buffer before free for DH (Hareshx Sankar Raj)   
  - crypto: qat - Use helper to set reqsize (Herbert Xu)   
  - crypto: kpp - Add helper to set reqsize (Herbert Xu)   
  - crypto: qat - use reference to structure in dma_map_single() (Damian Muszynski)   
  - crypto: qat - replace get_current_node() with numa_node_id() (Andre Przywara)   
  - ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard (Masahiro Yamada)   
  - modpost: fix off by one in is_executable_section() (Dan Carpenter)   
  - crypto: marvell/cesa - Fix type mismatch warning (Arnd Bergmann)   
  - modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} (Masahiro Yamada)   
  - modpost: fix section mismatch message for R_ARM_ABS32 (Masahiro Yamada)   
  - crypto: nx - fix build warnings when DEBUG_FS is not enabled (Randy Dunlap)   
  - modpost: remove broken calculation of exception_table_entry size (Masahiro Yamada)   
  - hwrng: virtio - Fix race on data_avail and actual data (Herbert Xu)   
  - hwrng: virtio - always add a pending request (Laurent Vivier)   
  - hwrng: virtio - don't waste entropy (Laurent Vivier)   
  - hwrng: virtio - don't wait on cleanup (Laurent Vivier)   
  - hwrng: virtio - add an internal buffer (Laurent Vivier)   
  - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (Aneesh Kumar K.V)   
  - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (Aneesh Kumar K.V)   
  - riscv: uprobes: Restore thread.bad_cause (Tiezhu Yang)   
  - powerpc: update ppc_save_regs to save current r1 in pt_regs (Aditya Gupta)   
  - powerpc: simplify ppc_save_regs (Nicholas Piggin)   
  - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (Colin Ian King)   
  - pinctrl: at91-pio4: check return value of devm_kasprintf() (Claudiu Beznea)   
  - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (Claudiu Beznea)   
  - powerpc/64s: Fix VAS mm use after free (Nicholas Piggin)   
  - perf dwarf-aux: Fix off-by-one in die_get_varname() (Namhyung Kim)   
  - perf script: Fix allocation of evsel->priv related to per-event dump files (Arnaldo Carvalho de Melo)   
  - powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() (Christophe Leroy)   
  - powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() (Christophe Leroy)   
  - kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures (Christophe Leroy)   
  - pinctrl: cherryview: Return correct value if pin in push-pull mode (Andy Shevchenko)   
  - perf bench: Add missing setlocale() call to allow usage of %'d style formatting (Arnaldo Carvalho de Melo)   
  - perf bench: Use unbuffered output when pipe/tee'ing to a file (Sohaib Mohamed)   
  - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (Sui Jingfeng)   
  - PCI: ftpci100: Release the clock resources (Junyan Ye)   
  - PCI: pciehp: Cancel bringup sequence if card is not present (Rongguang Wei)   
  - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (Yuchen Yang)   
  - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (Ding Hui)   
  - pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors (Christophe JAILLET)   
  - scsi: qedf: Fix NULL dereference in error handling (Jinhong Zhu)   
  - PCI: vmd: Reset VMD config register between soft reboots (Nirmal Patel)   
  - PCI: cadence: Fix Gen2 Link Retraining process (Siddharth Vadapalli)   
  - clk: Fix memory leak in devm_clk_notifier_register() (Fei Shao)   
  - ASoC: imx-audmix: check return value of devm_kasprintf() (Claudiu Beznea)   
  - ovl: update of dentry revalidate flags after copy up (Amir Goldstein)   
  - drivers: meson: secure-pwrc: always enable DMA domain (Alexey Romanov)   
  - clk: ti: clkctrl: check return value of kasprintf() (Claudiu Beznea)   
  - clk: keystone: sci-clk: check return value of kasprintf() (Claudiu Beznea)   
  - clk: si5341: free unused memory on probe failure (Claudiu Beznea)   
  - clk: si5341: check return value of {devm_}kasprintf() (Claudiu Beznea)   
  - clk: si5341: return error if one synth clock registration fails (Claudiu Beznea)   
  - clk: cdce925: check return value of kasprintf() (Claudiu Beznea)   
  - clk: vc5: check memory returned by kasprintf() (Claudiu Beznea)   
  - drm/msm/dpu: correct MERGE_3D length (Dmitry Baryshkov)   
  - arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz (Nícolas F. R. A. Prado)   
  - arm64: dts: mediatek: Add cpufreq nodes for MT8192 (Allen-KH Cheng)   
  - drm/msm/dp: Free resources after unregistering them (Bjorn Andersson)   
  - drm/msm/dpu: do not enable color-management if DSPPs are not available (Dmitry Baryshkov)   
  - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (Su Hui)   
  - clk: tegra: tegra124-emc: Fix potential memory leak (Yuan Can)   
  - clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() (Dan Carpenter)   
  - arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k (Marijn Suijten)   
  - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (Yuxing Liu)   
  - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (Hao Luo)   
  - RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (Kashyap Desai)   
  - RDMA/bnxt_re: wraparound mbox producer index (Kashyap Desai)   
  - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (Dmitry Baryshkov)   
  - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (Chia-I Wu)   
  - drm/radeon: fix possible division-by-zero errors (Nikita Zhandarovich)   
  - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (Aurabindo Pillai)   
  - drm/amdkfd: Fix potential deallocation of previously deallocated memory. (Daniil Dulov)   
  - ARM: dts: BCM5301X: fix duplex-full => full-duplex (Christian Lamparter)   
  - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (Guenter Roeck)   
  - hwmon: (adm1275) Allow setting sample averaging (Potin Lai)   
  - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (Tim Harvey)   
  - ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx (Olivier Moysan)   
  - ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 (Marek Vasut)   
  - arm64: dts: ti: k3-j7200: Fix physical address of pin (Keerthy)   
  - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (Christophe JAILLET)   
  - arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 (Wolfram Sang)   
  - ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier (Geert Uytterhoeven)   
  - RDMA/hns: Fix hns_roce_table_get return value (Chengchang Tang)   
  - IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (Brendan Cunningham)   
  - IB/hfi1: Use bitmap_zalloc() when applicable (Christophe JAILLET)   
  - RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (Arnd Bergmann)   
  - soc/fsl/qe: fix usb.c build errors (Randy Dunlap)   
  - ARM: dts: meson8: correct uart_B and uart_C clock references (Martin Blumenstingl)   
  - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (Cristian Ciocaltea)   
  - ASoC: es8316: Increment max value for ALC Capture Target Volume control (Cristian Ciocaltea)   
  - memory: brcmstb_dpfe: fix testing array offset after use (Krzysztof Kozlowski)   
  - ARM: dts: stm32: Shorten the AV96 HDMI sound card name (Marek Vasut)   
  - arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui (Douglas Anderson)   
  - arm64: dts: qcom: apq8096: fix fixed regulator name property (Krzysztof Kozlowski)   
  - ARM: omap2: fix missing tick_broadcast() prototype (Arnd Bergmann)   
  - ARM: ep93xx: fix missing-prototype warnings (Arnd Bergmann)   
  - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (Dario Binacchi)   
  - arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion (Stephan Gerhold)   
  - arm64: dts: qcom: apq8016-sbc: Fix regulator constraints (Stephan Gerhold)   
  - arm64: dts: qcom: Drop unneeded extra device-specific includes (Stephan Gerhold)   
  - arm64: dts: qcom: apq8016-sbc: fix mpps state names (Dmitry Baryshkov)   
  - arm64: dts: qcom: apq8016-sbc: Clarify firmware-names (Stephan Gerhold)   
  - arm64: dts: qcom: apq8016-sbc: Update modem and WiFi firmware path (Bjorn Andersson)   
  - arm64: dts: qcom: db820c: Move blsp1_uart2 pin states to msm8996.dtsi (Yassine Oudjana)   
  - arm64: dts: qcom: sdm845: correct camss unit address (Krzysztof Kozlowski)   
  - arm64: dts: qcom: sdm630: correct camss unit address (Krzysztof Kozlowski)   
  - arm64: dts: qcom: msm8996: correct camss unit address (Krzysztof Kozlowski)   
  - arm64: dts: qcom: msm8994: correct SPMI unit address (Krzysztof Kozlowski)   
  - arm64: dts: qcom: msm8916: correct camss unit address (Krzysztof Kozlowski)   
  - ARM: dts: gta04: Move model property out of pinctrl node (Tony Lindgren)   
  - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (Konrad Dybcio)   
  - drm/msm/disp/dpu: get timing engine status from intf status register (Vinod Polimera)   
  - drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate (Dmitry Baryshkov)   
  - RDMA/bnxt_re: Fix to remove an unnecessary log (Kalesh AP)   
  - RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (Kalesh AP)   
  - RDMA/bnxt_re: Use unique names while registering interrupts (Kalesh AP)   
  - RDMA/bnxt_re: Fix to remove unnecessary return labels (Kalesh AP)   
  - RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (Selvin Xavier)   
  - clk: imx: scu: use _safe list iterator to avoid a use after free (Dan Carpenter)   
  - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (Robert Marko)   
  - bus: ti-sysc: Fix dispc quirk masking bool variables (Tony Lindgren)   
  - ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards (Marek Vasut)   
  - drm/panel: sharp-ls043t1le01: adjust mode settings (Dmitry Baryshkov)   
  - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (XuDong Liu)   
  - Input: adxl34x - do not hardcode interrupt trigger type (Marek Vasut)   
  - ARM: dts: meson8b: correct uart_B and uart_C clock references (hfdevel@gmx.net)   
  - ARM: dts: BCM5301X: Drop "clock-names" from the SPI node (Rafał Miłecki)   
  - drm/vram-helper: fix function names in vram helper doc (Luc Ma)   
  - drm/bridge: tc358768: fix THS_TRAILCNT computation (Francesco Dolcini)   
  - drm/bridge: tc358768: fix TXTAGOCNT computation (Francesco Dolcini)   
  - drm/bridge: tc358768: fix THS_ZEROCNT computation (Francesco Dolcini)   
  - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (Francesco Dolcini)   
  - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (Francesco Dolcini)   
  - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (Francesco Dolcini)   
  - drm/bridge: tc358768: fix PLL target frequency (Francesco Dolcini)   
  - drm/bridge: tc358768: fix PLL parameters computation (Francesco Dolcini)   
  - drm/bridge: tc358768: always enable HS video mode (Francesco Dolcini)   
  - Input: drv260x - sleep between polling GO bit (Luca Weiss)   
  - drm/amd/display: Explicitly specify update type per plane info change (Nicholas Kazlauskas)   
  - radeon: avoid double free in ci_dpm_init() (Nikita Zhandarovich)   
  - drm/amd/display: Add logging for display MALL refresh setting (Wesley Chalmers)   
  - netlink: Add __sock_i_ino() for __netlink_diag_dump(). (Kuniyuki Iwashima)   
  - ipvlan: Fix return value of ipvlan_queue_xmit() (Cambda Zhu)   
  - netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. (Ilia.Gavrilov)   
  - netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one (Florian Westphal)   
  - lib/ts_bm: reset initial match offset for every block of text (Jeremy Sowden)   
  - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (Lin Ma)   
  - nfc: llcp: simplify llcp_sock_connect() error paths (Krzysztof Kozlowski)   
  - sfc: fix crash when reading stats while NIC is resetting (Edward Cree)   
  - net: axienet: Move reset before 64-bit DMA detection (Maxim Kochetkov)   
  - gtp: Fix use-after-free in __gtp_encap_destroy(). (Kuniyuki Iwashima)   
  - selftests: rtnetlink: remove netdevsim device after ipsec offload test (Sabrina Dubroca)   
  - bonding: do not assume skb mac_header is set (Eric Dumazet)   
  - netlink: do not hard code device address lenth in fdb dumps (Eric Dumazet)   
  - netlink: fix potential deadlock in netlink_set_err() (Eric Dumazet)   
  - net: stmmac: fix double serdes powerdown (Bartosz Golaszewski)   
  - igc: Fix race condition in PTP tx code (Vinicius Costa Gomes)   
  - can: length: fix bitstuffing count (Vincent Mailhol)   
  - bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings (Gilad Sever)   
  - bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint (Gilad Sever)   
  - bpf: Factor out socket lookup functions for the TC hookpoint. (Gilad Sever)   
  - bpf: Omit superfluous address family check in __bpf_skc_lookup (Tobias Klauser)   
  - wifi: ath9k: convert msecs to jiffies where needed (Dmitry Antipov)   
  - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (Johannes Berg)   
  - wifi: cfg80211: rewrite merging of inherited elements (Benjamin Berg)   
  - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (Anjaneyulu)   
  - iwlwifi: don't dump_stack() when we get an unexpected interrupt (Emmanuel Grumbach)   
  - wifi: iwlwifi: pull from TXQs with softirqs disabled (Johannes Berg)   
  - rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO (Edwin Peer)   
  - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (Remi Pommarel)   
  - memstick r592: make memstick_debug_get_tpc_name() static (Arnd Bergmann)   
  - kexec: fix a memory leak in crash_shrink_memory() (Zhen Lei)   
  - watchdog/perf: more properly prevent false positives with turbo modes (Douglas Anderson)   
  - watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config (Douglas Anderson)   
  - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (Marek Vasut)   
  - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (Marek Vasut)   
  - selftests/bpf: Fix check_mtu using wrong variable type (Jesper Dangaard Brouer)   
  - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes (Fedor Pchelkin)   
  - wifi: ray_cs: Fix an error handling path in ray_probe() (Christophe JAILLET)   
  - wifi: ray_cs: Drop useless status variable in parse_addr() (Andy Shevchenko)   
  - wifi: ray_cs: Utilize strnlen() in parse_addr() (Andy Shevchenko)   
  - wifi: wl3501_cs: Fix an error handling path in wl3501_probe() (Christophe JAILLET)   
  - wl3501_cs: use eth_hw_addr_set() (Jakub Kicinski)   
  - wifi: atmel: Fix an error handling path in atmel_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (Christophe JAILLET)   
  - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (Christophe JAILLET)   
  - regulator: core: Streamline debugfs operations (Geert Uytterhoeven)   
  - regulator: core: Fix more error checking for debugfs_create_dir() (Geert Uytterhoeven)   
  - bpftool: JIT limited misreported as negative value on aarch64 (Alan Maguire)   
  - nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() (Krzysztof Kozlowski)   
  - spi: dw: Round of n_bytes to power of 2 (Joy Chakraborty)   
  - bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen (Stanislav Fomichev)   
  - libbpf: fix offsetof() and container_of() to work with CO-RE (Andrii Nakryiko)   
  - sctp: add bpf_bypass_getsockopt proto callback (Alexander Mikhalitsyn)   
  - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (Christophe JAILLET)   
  - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (Amisha Patel)   
  - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (Vijaya Krishna Nivarthi)   
  - samples/bpf: Fix buffer overflow in tcp_basertt (Pengcheng Yang)   
  - libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE (Martin KaFai Lau)   
  - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (Fedor Pchelkin)   
  - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (Peter Seiderer)   
  - igc: Enable and fix RX hash usage by netstack (Jesper Dangaard Brouer)   
  - pstore/ram: Add check for kstrdup (Jiasheng Jiang)   
  - ima: Fix build warnings (Roberto Sassu)   
  - evm: Fix build warnings (Roberto Sassu)   
  - evm: Complete description of evm_inode_setattr() (Roberto Sassu)   
  - locking/atomic: arm: fix sync ops (Mark Rutland)   
  - x86/mm: Fix __swp_entry_to_pte() for Xen PV guests (Juergen Gross)   
  - perf/ibs: Fix interface via core pmu events (Ravi Bangoria)   
  - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (Colin Ian King)   
  - rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale (Qiuxu Zhuo)   
  - rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() (Qiuxu Zhuo)   
  - rcuscale: Move shutdown from wait_event() to wait_event_idle() (Paul E. McKenney)   
  - rcuscale: Always log error message (Li Zhijian)   
  - rcutorture: Correct name of use_softirq module parameter (Paul E. McKenney)   
  - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (Christophe JAILLET)   
  - cpufreq: intel_pstate: Fix energy_performance_preference for passive (Tero Kristo)   
  - ARM: 9303/1: kprobes: avoid missing-declaration warnings (Arnd Bergmann)   
  - powercap: RAPL: Fix CONFIG_IOSF_MBI dependency (Zhang Rui)   
  - perf/arm-cmn: Fix DTC reset (Robin Murphy)   
  - PM: domains: fix integer overflow issues in genpd_parse_state() (Nikita Zhandarovich)   
  - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (Feng Mingxi)   
  - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). (Sebastian Andrzej Siewior)   
  - posix-timers: Prevent RT livelock in itimer_delete() (Thomas Gleixner)   
  - svcrdma: Prevent page release when nothing was received (Chuck Lever)   
  - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (John Paul Adrian Glaubitz)   
  - md/raid10: fix io loss while replacement replace rdev (Li Nan)   
  - md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request (Li Nan)   
  - md/raid10: fix wrong setting of max_corr_read_errors (Li Nan)   
  - md/raid10: fix overflow of md/safe_mode_delay (Li Nan)   
  - md/raid10: check slab-out-of-bounds in md_bitmap_get_counter (Li Nan)   
  - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (Li Nan)   
  - x86/resctrl: Only show tasks' pid in current pid namespace (Shawn Wang)   
  - fs: pipe: reveal missing function protoypes (Arnd Bergmann)   
  - netfilter: nf_tables: drop map element references from preparation phase (Pablo Neira Ayuso)   
  - LTS version: v5.15.120 (Jack Vogel)   
  - nubus: Partially revert proc_create_single_data() conversion (Finn Thain)   
  - parisc: Delete redundant register definitions in <asm/assembly.h> (Ben Hutchings)   
  - drm/amdgpu: Validate VM ioctl flags. (Bas Nieuwenhuizen)   
  - scripts/tags.sh: Resolve gtags empty index generation (Ahmed S. Darwish)   
  - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext (Krister Johansen)   
  - Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" (Ricardo Cañuelo)   
  - HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. (Mike Hommey)   
  - HID: wacom: Use ktime_t rather than int when dealing with timestamps (Jason Gerecke)   
  - bpf: ensure main program has an extable (Krister Johansen)   
  - can: isotp: isotp_sendmsg(): fix return error fix on TX path (Oliver Hartkopp)   
  - x86/smp: Use dedicated cache-line for mwait_play_dead() (Thomas Gleixner)   
  - mm, hwpoison: when copy-on-write hits poison, take page offline (Jane Chu)   
  - mm, hwpoison: try to recover from copy-on write faults (Tony Luck)   
  - mptcp: consolidate fallback and non fallback state machine (Paolo Abeni)   
  - mptcp: fix possible divide by zero in recvmsg() (Paolo Abeni)   
  - net/rds: Allow MSG_NOSIGNAL in sendmsg (Gerd Rausch)  [Orabug: 35640815]  
  - uek-rpm: Prevent cls_tcindex module to be loaded on demand (Sherry Yang)  [Orabug: 35590149]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-105.123.3.el8uek]
changelog:
  - ovl: Always reevaluate the file signature for IMA (Eric Snowberg)  [Orabug: 35646438]  
  - ocfs2: always read both high and low parts of dinode link count (Alexey Asemov)  [Orabug: 35643002]  
  - uek-rpm: aarch64: Enable direct booting with nvdimm (Liam Merwick)  [Orabug: 35630385]  
  - LTS version: v5.15.123 (Jack Vogel)   
  - Revert "drm/amd/display: edp do not add non-edid timings" (Hersen Wu)   
  - nixge: fix mac address error handling again (Arnd Bergmann)   
  - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (Mohamed Khalfella)   
  - jbd2: recheck chechpointing non-dirty buffer (Zhang Yi)   
  - net: phy: prevent stale pointer dereference in phy_init() (Vladimir Oltean)   
  - tcp: annotate data-races around fastopenq.max_qlen (Eric Dumazet)   
  - tcp: annotate data-races around icsk->icsk_user_timeout (Eric Dumazet)   
  - tcp: annotate data-races around tp->notsent_lowat (Eric Dumazet)   
  - tcp: annotate data-races around rskq_defer_accept (Eric Dumazet)   
  - tcp: annotate data-races around tp->linger2 (Eric Dumazet)   
  - tcp: annotate data-races around icsk->icsk_syn_retries (Eric Dumazet)   
  - tcp: annotate data-races around tp->keepalive_probes (Eric Dumazet)   
  - tcp: annotate data-races around tp->keepalive_intvl (Eric Dumazet)   
  - tcp: annotate data-races around tp->keepalive_time (Eric Dumazet)   
  - tcp: annotate data-races around tp->tcp_tx_delay (Eric Dumazet)   
  - netfilter: nf_tables: skip bound chain on rule flush (Pablo Neira Ayuso)   
  - netfilter: nf_tables: skip bound chain in netns release path (Pablo Neira Ayuso)   
  - netfilter: nft_set_pipapo: fix improper element removal (Florian Westphal)   
  - netfilter: nf_tables: fix spurious set element insertion failure (Florian Westphal)   
  - llc: Don't drop packet from non-root netns. (Kuniyuki Iwashima)   
  - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (Zhang Shurong)   
  - Revert "tcp: avoid the lookup process failing to get sk in ehash table" (Kuniyuki Iwashima)   
  - net:ipv6: check return value of pskb_trim() (Yuanjun Gong)   
  - net: ipv4: Use kfree_sensitive instead of kfree (Wang Ming)   
  - tcp: annotate data-races around tcp_rsk(req)->ts_recent (Eric Dumazet)   
  - igc: Prevent garbled TX queue with XDP ZEROCOPY (Florian Kauer)   
  - bpf: Fix subprog idx logic in check_max_stack_depth (Kumar Kartikeya Dwivedi)   
  - octeontx2-pf: Dont allocate BPIDs for LBK interfaces (Geetha sowjanya)   
  - security: keys: Modify mismatched function name (Jiapeng Chong)   
  - iavf: Fix out-of-bounds when setting channels on remove (Ding Hui)   
  - iavf: Fix use-after-free in free_netdev (Ding Hui)   
  - net: sched: cls_bpf: Undo tcf_bind_filter in case of an error (Victor Nogueira)   
  - net: ethernet: mtk_eth_soc: handle probe deferral (Daniel Golle)   
  - ethernet: use of_get_ethdev_address() (Jakub Kicinski)   
  - of: net: add a helper for loading netdev->dev_addr (Jakub Kicinski)   
  - bridge: Add extack warning when enabling STP in netns. (Kuniyuki Iwashima)   
  - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() (Tanmay Patil)   
  - pinctrl: amd: Use amd_pinconf_set() for all config options (Mario Limonciello)   
  - perf build: Fix library not found error when using CSLIBS (James Clark)   
  - fbdev: imxfb: warn about invalid left/right margin (Martin Kaiser)   
  - spi: bcm63xx: fix max prepend length (Jonas Gorski)   
  - FS: JFS: Check for read-only mounted filesystem in txBegin (Immad Mir)   
  - FS: JFS: Fix null-ptr-deref Read in txBegin (Immad Mir)   
  - MIPS: dec: prom: Address -Warray-bounds warning (Gustavo A. R. Silva)   
  - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (Yogesh)   
  - udf: Fix uninitialized array access for some pathnames (Jan Kara)   
  - quota: fix warning in dqgrab() (Ye Bin)   
  - quota: Properly disable quotas when add_dquot_ref() fails (Jan Kara)   
  - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (Oswald Buddenhagen)   
  - drm/radeon: Fix integer overflow in radeon_cs_parser_init (hackyzh002)   
  - ext4: correct inline offset when handling xattrs in inode body (Eric Whitney)   
  - ASoC: codecs: wcd938x: fix soundwire initialisation race (Johan Hovold)   
  - ASoC: codecs: wcd938x: fix codec initialisation race (Johan Hovold)   
  - ASoC: codecs: wcd934x: fix resource leaks on component remove (Johan Hovold)   
  - ASoC: codecs: wcd938x: fix missing mbhc init error handling (Johan Hovold)   
  - ASoC: codecs: wcd938x: fix resource leaks on component remove (Johan Hovold)   
  - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (Johan Hovold)   
  - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (Johan Hovold)   
  - ASoC: fsl_sai: Disable bit clock with transmitter (Matus Gajdos)   
  - drm/amd/display: Keep PHY active for DP displays on DCN31 (Nicholas Kazlauskas)   
  - drm/amd/display: Disable MPC split by default on special asic (Zhikai Zhai)   
  - drm/client: Fix memory leak in drm_client_modeset_probe (Jocelyn Falempe)   
  - drm/client: Fix memory leak in drm_client_target_cloned (Jocelyn Falempe)   
  - selftests: tc: add ConnTrack procfs kconfig (Matthieu Baerts)   
  - can: bcm: Fix UAF in bcm_proc_show() (YueHaibing)   
  - regmap: Account for register length in SMBus I/O limits (Mark Brown)   
  - regmap: Drop initial version of maximum transfer length fixes (Mark Brown)   
  - selftests: tc: add 'ct' action kconfig dep (Matthieu Baerts)   
  - selftests: tc: set timeout to 15 minutes (Matthieu Baerts)   
  - fuse: ioctl: translate ENOSYS in outarg (Miklos Szeredi)   
  - btrfs: zoned: fix memory leak after finding block group with super blocks (Filipe Manana)   
  - fuse: revalidate: don't invalidate if interrupted (Miklos Szeredi)   
  - btrfs: fix warning when putting transaction with qgroups enabled after abort (Filipe Manana)   
  - perf probe: Add test for regression introduced by switch to die_get_decl_file() (Georg Müller)   
  - keys: Fix linking a duplicate key to a keyring's assoc_array (Petr Pavlu)   
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (Luka Guzenko)   
  - ALSA: hda/realtek: Add quirk for Clevo NS70AU (Christoffer Sandberg)   
  - ALSA: hda/realtek - remove 3k pull low procedure (Kailang Yang)   
  - LTS version: v5.15.122 (Jack Vogel)   
  - x86/cpu/amd: Add a Zenbleed fix (Borislav Petkov (AMD))  [Orabug: 35641577]  
  - x86/cpu/amd: Move the errata checking functionality up (Borislav Petkov (AMD))  [Orabug: 35641577]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-105.125.4.el8uek]
changelog:
  - LTS version: v5.15.125 (Jack Vogel)   
  - Documentation/x86: Fix backwards on/off logic about YMM support (Dave Hansen)   
  - x86/mm: Initialize text poking earlier (Peter Zijlstra)   
  - mm: Move mm_cachep initialization to mm_init() (Peter Zijlstra)   
  - x86/mm: Use mm_alloc() in poking_init() (Peter Zijlstra)   
  - x86/mm: fix poking_init() for Xen PV guests (Juergen Gross)   
  - x86/xen: Fix secondary processors' FPU initialization (Juergen Gross)   
  - KVM: Add GDS_NO support to KVM (Daniel Sneddon)   
  - x86/speculation: Add Kconfig option for GDS (Daniel Sneddon)   
  - x86/speculation: Add force option to GDS mitigation (Daniel Sneddon)   
  - x86/speculation: Add Gather Data Sampling mitigation (Daniel Sneddon)   
  - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (Thomas Gleixner)   
  - x86/fpu: Mark init functions __init (Thomas Gleixner)   
  - x86/fpu: Remove cpuinfo argument from init functions (Thomas Gleixner)   
  - x86/init: Initialize signal frame size late (Thomas Gleixner)   
  - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (Thomas Gleixner)   
  - init: Invoke arch_cpu_finalize_init() earlier (Thomas Gleixner)   
  - init: Remove check_bugs() leftovers (Thomas Gleixner)   
  - um/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - sparc/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - sh/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - mips/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - m68k/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - ia64/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - ARM: cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - x86/cpu: Switch to arch_cpu_finalize_init() (Thomas Gleixner)   
  - init: Provide arch_cpu_finalize_init() (Thomas Gleixner)   
  - LTS version: v5.15.124 (Jack Vogel)   
  - selftests: mptcp: join: only check for ip6tables if needed (Matthieu Baerts)   
  - ASoC: cs42l51: fix driver to properly autoload with automatic module loading (Thomas Petazzoni)   
  - io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq (Jens Axboe)   
  - selftests: mptcp: sockopt: use 'iptables-legacy' if available (Matthieu Baerts)   
  - cpufreq: intel_pstate: Drop ACPI _PSS states table patching (Rafael J. Wysocki)   
  - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (Rafael J. Wysocki)   
  - ACPI: processor: perflib: Use the "no limit" frequency QoS (Rafael J. Wysocki)   
  - tracing: Fix trace_event_raw_event_synth() if else statement (Steven Rostedt (Google))   
  - rbd: retrieve and check lock owner twice before blocklisting (Ilya Dryomov)   
  - rbd: harden get_lock_owner_info() a bit (Ilya Dryomov)   
  - rbd: make get_lock_owner_info() return a single locker or NULL (Ilya Dryomov)   
  - dm cache policy smq: ensure IO doesn't prevent cleaner policy progress (Joe Thornber)   
  - ceph: never send metrics if disable_send_metrics is set (Xiubo Li)   
  - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (Mark Brown)   
  - s390/dasd: fix hanging device after quiesce/resume (Stefan Haberland)   
  - virtio-net: fix race between set queues and probe (Jason Wang)   
  - KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid (Sean Christopherson)   
  - locking/rtmutex: Fix task->pi_waiters integrity (Peter Zijlstra)   
  - irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation (Marc Zyngier)   
  - irq-bcm6345-l1: Do not assume a fixed block to cpu mapping (Jonas Gorski)   
  - tpm_tis: Explicitly check for error code (Alexander Steffen)   
  - nfsd: Remove incorrect check in nfsd4_validate_stateid (Trond Myklebust)   
  - file: always lock position for FMODE_ATOMIC_POS (Christian Brauner)   
  - btrfs: check for commit error at btrfs_attach_transaction_barrier() (Filipe Manana)   
  - btrfs: check if the transaction was aborted at btrfs_wait_for_commit() (Filipe Manana)   
  - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (Gilles Buloz)   
  - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (Baskaran Kannan)   
  - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (Luka Guzenko)   
  - Revert "xhci: add quirk for host controllers that don't update endpoint DCS" (Oliver Neukum)   
  - tty: n_gsm: fix UAF in gsm_cleanup_mux (Chaoyuan Peng)   
  - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (Zhang Shurong)   
  - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (Larry Finger)   
  - Documentation: security-bugs.rst: clarify CVE handling (Greg Kroah-Hartman)   
  - Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group (Greg Kroah-Hartman)   
  - Revert "usb: xhci: tegra: Fix error check" (Dan Carpenter)   
  - usb: xhci-mtk: set the dma max_seg_size (Ricardo Ribalda)   
  - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config (Frank Li)   
  - USB: quirks: add quirk for Focusrite Scarlett (Łukasz Bartosik)   
  - usb: ohci-at91: Fix the unhandle interrupt when resume (Guiting Shen)   
  - usb: dwc3: don't reset device side if dwc3 was configured as host-only (Jisheng Zhang)   
  - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (Gratian Crisan)   
  - Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" (Jakub Vanek)   
  - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (Marc Kleine-Budde)   
  - USB: serial: simple: sort driver entries (Johan Hovold)   
  - USB: serial: simple: add Kaufmann RKS+CAN VCP (Oliver Neukum)   
  - USB: serial: option: add Quectel EC200A module support (Mohsen Tahmasebi)   
  - USB: serial: option: support Quectel EM060K_128 (Jerry Meng)   
  - serial: sifive: Fix sifive_serial_console_setup() section (Samuel Holland)   
  - serial: 8250_dw: Preserve original value of DLF register (Ruihong Luo)   
  - serial: qcom-geni: drop bogus runtime pm state update (Johan Hovold)   
  - KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest (Sean Christopherson)   
  - KVM: Grab a reference to KVM for VM and vCPU stats file descriptors (Sean Christopherson)   
  - USB: gadget: Fix the memory leak in raw_gadget driver (Zqiang)   
  - usb: gadget: call usb_gadget_check_config() to verify UDC capability (Frank Li)   
  - Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" (Dan Carpenter)   
  - tracing: Fix warning in trace_buffered_event_disable() (Zheng Yejian)   
  - ring-buffer: Fix wrong stat of cpu_buffer->read (Zheng Yejian)   
  - ata: pata_ns87415: mark ns87560_tf_read static (Arnd Bergmann)   
  - RDMA/irdma: Report correct WC error (Sindhu Devale)   
  - drm/amd: Fix an error handling mistake in psp_sw_init() (Mario Limonciello)   
  - dm raid: protect md_stop() with 'reconfig_mutex' (Yu Kuai)   
  - dm raid: clean up four equivalent goto tags in raid_ctr() (Yu Kuai)   
  - dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths (Yu Kuai)   
  - block: Fix a source code comment in include/uapi/linux/blkzoned.h (Bart Van Assche)   
  - ASoC: fsl_spdif: Silence output on stop (Matus Gajdos)   
  - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (Gaosheng Cui)   
  - RDMA/bnxt_re: Prevent handling any completions after qp destroy (Kashyap Desai)   
  - RDMA/mthca: Fix crash when polling CQ for shared QPs (Thomas Bogendoerfer)   
  - RDMA/irdma: Fix data race on CQP request done (Shiraz Saleem)   
  - RDMA/irdma: Fix data race on CQP completion stats (Shiraz Saleem)   
  - RDMA/irdma: Add missing read barriers (Shiraz Saleem)   
  - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (Rob Clark)   
  - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (Dmitry Baryshkov)   
  - RDMA/mlx4: Make check for invalid flags stricter (Dan Carpenter)   
  - tipc: stop tipc crypto on failure in tipc_node_create (Fedor Pchelkin)   
  - tipc: check return value of pskb_trim() (Yuanjun Gong)   
  - benet: fix return value check in be_lancer_xmit_workarounds() (Yuanjun Gong)   
  - net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 (Lin Ma)   
  - net/sched: mqprio: add extack to mqprio_parse_nlattr() (Vladimir Oltean)   
  - net/sched: mqprio: refactor nlattr parsing to a separate function (Vladimir Oltean)   
  - netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID (Pablo Neira Ayuso)   
  - netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR (Pablo Neira Ayuso)   
  - netfilter: nft_set_rbtree: fix overlap expiration walk (Florian Westphal)   
  - igc: Fix Kernel Panic during ndo_tx_timeout callback (Muhammad Husaini Zulkifli)   
  - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (Maxim Mikityanskiy)   
  - net: stmmac: Apply redundant write work around on 4.xx too (Vincent Whitchurch)   
  - team: reset team's flags when down link is P2P device (Hangbin Liu)   
  - bonding: reset bond's flags when down link is P2P device (Hangbin Liu)   
  - ice: Fix memory management in ice_ethtool_fdir.c (Jedrzej Jagielski)   
  - tcp: Reduce chance of collisions in inet6_hashfn(). (Stewart Smith)   
  - ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address (Maciej Żenczykowski)   
  - ethernet: atheros: fix return value check in atl1e_tso_csum() (Yuanjun Gong)   
  - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (Harshit Mogalapalli)   
  - vxlan: calculate correct header length for GPE (Jiri Benc)   
  - vxlan: move to its own directory (Roopa Prabhu)   
  - net: hns3: fix wrong bw weight of disabled tc issue (Jijie Shao)   
  - net: hns3: fix wrong tc bandwidth weight data issue (Jijie Shao)   
  - net: phy: marvell10g: fix 88x3310 power up (Jiawen Wu)   
  - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (Jacob Keller)   
  - iavf: fix potential deadlock on allocation failure (Jacob Keller)   
  - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (Wang Ming)   
  - media: staging: atomisp: select V4L2_FWNODE (Sakari Ailus)   
  - soundwire: qcom: update status correctly with mask (Srinivas Kandagatla)   
  - phy: qcom-snps-femto-v2: properly enable ref clock (Adrien Thierry)   
  - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (Adrien Thierry)   
  - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (Krzysztof Kozlowski)   
  - phy: qcom-snps: Use dev_err_probe() to simplify code (Yuan Can)   
  - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (Guchun Chen)   
  - drm/amdgpu: fix vkms crtc settings (Flora Cui)   
  - scsi: qla2xxx: Fix hang in task management (Quinn Tran)   
  - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (Quinn Tran)   
  - scsi: qla2xxx: Fix task management cmd failure (Quinn Tran)   
  - scsi: qla2xxx: Multi-que support for TMF (Quinn Tran)   
  - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (Masami Hiramatsu (Google))   
  - Revert "tracing: Add "(fault)" name injection to kernel probes" (Masami Hiramatsu (Google))   
  - tracing: Allow synthetic events to pass around stacktraces (Steven Rostedt (Google))   
  - tracing/probes: Fix to avoid double count of the string length on the array (Masami Hiramatsu (Google))   
  - tracing/probes: Add symstr type for dynamic events (Masami Hiramatsu (Google))   
  - pwm: meson: fix handling of period/duty if greater than UINT_MAX (Heiner Kallweit)   
  - pwm: meson: Simplify duplicated per-channel tracking (Uwe Kleine-König)   
  - cifs: if deferred close is disabled then close files immediately (Bharath SM)   
  - ksmbd: remove internal.h include (Namjae Jeon)   
  - cifs: use fs_context for automounts (Paulo Alcantara)   
  - cifs: missing directory in MAINTAINERS file (Steve French)   
  - drm/ttm: never consider pinned BOs for eviction&swap (Christian König)   
  - tty: fix hang on tty device with no_room set (Hui Li)   
  - n_tty: Rename tail to old_tail in n_tty_read() (Ilpo Järvinen)   
  - drm/ttm: Don't leak a resource on eviction error (Thomas Hellström)   
  - drm/ttm: Don't print error message if eviction was interrupted (Thomas Hellström)   
  - fs: dlm: interrupt posix locks only when process is killed (Alexander Aring)   
  - dlm: rearrange async condition return (Alexander Aring)   
  - dlm: cleanup plock_op vs plock_xop (Alexander Aring)   
  - PCI: rockchip: Don't advertise MSI-X in PCIe capabilities (Rick Wertenbroek)   
  - PCI: rockchip: Fix window mapping and address translation for endpoint (Rick Wertenbroek)   
  - PCI: rockchip: Remove writes to unused registers (Rick Wertenbroek)   
  - PCI/ASPM: Avoid link retraining race (Ilpo Järvinen)   
  - PCI/ASPM: Factor out pcie_wait_for_retrain() (Ilpo Järvinen)   
  - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (Bjorn Helgaas)   
  - i2c: nomadik: Remove a useless call in the remove function (Christophe JAILLET)   
  - i2c: nomadik: Use devm_clk_get_enabled() (Andi Shyti)   
  - i2c: nomadik: Remove unnecessary goto label (Andi Shyti)   
  - i2c: Improve size determinations (Markus Elfring)   
  - i2c: Delete error messages for failed memory allocations (Markus Elfring)   
  - btrfs: fix race between quota disable and relocation (Filipe Manana)   
  - gpio: mvebu: fix irq domain leak (Bartosz Golaszewski)   
  - gpio: mvebu: Make use of devm_pwmchip_add (Uwe Kleine-König)   
  - pwm: Add a stub for devm_pwmchip_add() (Andy Shevchenko)   
  - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (Hans de Goede)   
  - io_uring: don't audit the capability check in io_uring_create() (Ondrej Mosnacek)   
  - KVM: s390: pv: fix index value of replaced ASCE (Claudio Imbrenda)   
  - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (Zhihao Cheng)   
  - uek-rpm: move sch_fq_codel module to be built-in (Samasth Norway Ananda)  [Orabug: 35659936]  
  - uek-rpm: Update kernel's linux-firmware dependency. (Somasundaram Krishnasamy)  [Orabug: 35678651]  
  - uek-rpm: Disable cls_tcindex in file tcindex-disable.conf (Sherry Yang)  [Orabug: 35678686]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-105.125.5.el8uek]
changelog:
  - sysctl: fix proc_dobool() usability (Ondrej Mosnacek)  [Orabug: 35146200]  
  - x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (Chang S. Bae)  [Orabug: 35490456]  
  - x86/fpu: Emulate XRSTOR's behavior if the xfeatures PKRU bit is not set (Kyle Huey)  [Orabug: 35490456]  
  - x86/fpu: Allow PKRU to be (once again) written by ptrace. (Kyle Huey)  [Orabug: 35490456]  
  - x86/fpu/xstate: Fix XSTATE_WARN_ON() to emit relevant diagnostics (Andrew Cooper)  [Orabug: 35490456]  
  - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Chang S. Bae)  [Orabug: 35490456]  
  - x86/fpu: Exclude dynamic states from init_fpstate (Chang S. Bae)  [Orabug: 35490456]  
  - x86/fpu: Fix the init_fpstate size check with the actual size (Chang S. Bae)  [Orabug: 35490456]  
  - x86/fpu: Configure init_fpstate attributes orderly (Chang S. Bae)  [Orabug: 35490456]  
  - x86/prctl: Remove pointless task argument (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu: Cleanup variable shadowing (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu/xsave: Support XSAVEC in the kernel (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu/xstate: Consolidate size calculations (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu/xstate: Handle supervisor states in XSTATE permissions (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu: Cache xfeature flags from CPUID (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu/xsave: Initialize offset/size cache early (Thomas Gleixner)  [Orabug: 35490456]  
  - x86/fpu: Remove unused supervisor only offsets (Thomas Gleixner)  [Orabug: 35490456]  
  - nvme: handle effects after freeing the request (Alan Adamson)  [Orabug: 35673772]  
  - nbd: make sure request completion won't concurrent (Yu Kuai)  [Orabug: 35709416]  
  - nbd: don't handle response without a corresponding request message (Yu Kuai)  [Orabug: 35709416]  
  - uek-rpm: Enforce linux firmware version 26 (Jack Vogel)  [Orabug: 35722340]  
  - LTS update - v5.15.125 Inception support added (Jack Vogel)   
  - x86: fix backwards merge of GDS/SRSO bit (Greg Kroah-Hartman)   
  - xen/netback: Fix buffer overrun triggered by unusual packet (Ross Lagerwall)   
  - x86/srso: Tie SBPB bit setting to microcode patch detection (Borislav Petkov (AMD))   
  - x86/srso: Fix return thunks in generated code (Josh Poimboeuf)   
  - x86/srso: Add IBPB on VMEXIT (Borislav Petkov (AMD))   
  - x86/srso: Add IBPB (Borislav Petkov (AMD))   
  - x86/srso: Add SRSO_NO support (Borislav Petkov (AMD))   
  - x86/srso: Add IBPB_BRTYPE support (Borislav Petkov (AMD))   
  - x86/srso: Add a Speculative RAS Overflow mitigation (Borislav Petkov (AMD))   
  - x86/cpu, kvm: Add support for CPUID_80000021_EAX (Kim Phillips)


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-105.125.6.el8uek]
changelog:
  - uek-rpm: Enable Hyper-V for OL8 and OL9 ARM (Harshvardhan Jha)  [Orabug: 35069663]  
  - PCI: hv: Avoid the retarget interrupt hypercall in irq_unmask() on ARM64 (Boqun Feng)  [Orabug: 35069663]  
  - PCI: hv: Add arm64 Hyper-V vPCI support (Sunil Muthuswamy)  [Orabug: 35069663]  
  - PCI: hv: Make the code arch neutral by adding arch specific interfaces (Sunil Muthuswamy)  [Orabug: 35069663]  
  - crypto: tcrypt - disable ffdhe tests for key sizes (Saeed Mirzamohammadi)  [Orabug: 35734478]  
  - io_uring: add support for registering ring file descriptors (Jens Axboe)  [Orabug: 35742743]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-106.125.1.el8uek]
changelog:
  - smp: Reduce NMI traffic from CSD waiters to CSD destination (Imran Khan)  [Orabug: 35752500]  
  - smp: Reduce logging due to dump_stack of CSD waiters (Imran Khan)  [Orabug: 35752500]  
  - block: Sysfs option to change ioticks granularity (Gulam Mohamed)  [Orabug: 34977356]  
  - uek: kabi: update x86_64 kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 35501675]  
  - uek: kabi: update aarch64 kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 35553840]  
  - rpmbuild: fixed missing _kernel_cc macros to allow alternate compilers (Mark Nicholson)  [Orabug: 35729326]  
  - scsi: megaraid_sas: Driver version update to 07.725.01.00-rc1 (Chandrakanth Patil)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Add crash dump mode capability bit in MFI capabilities (Chandrakanth Patil)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Add flexible array member for SGLs (Kees Cook)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Fix some spelling mistakes in comment (Yu Zhe)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Move megasas_dbg_lvl init to megasas_init() (Guixin Liu)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Remove unnecessary memset() (Guixin Liu)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Simplify megasas_update_device_list (Guixin Liu)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Correct an error message (Guixin Liu)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Correct value passed to scsi_device_lookup() (Guixin Liu)  [Orabug: 35729651]  
  - scsi: megaraid: Convert sysfs snprintf() to sysfs_emit() (Xuezhi Zhang)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Use struct_size() in code related to struct MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Use struct_size() in code related to struct MR_FW_RAID_MAP (Gustavo A. R. Silva)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_PD_CFG_SEQ_NUM_SYNC (Gustavo A. R. Silva)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_DRV_RAID_MAP (Gustavo A. R. Silva)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP_DYNAMIC (Gustavo A. R. Silva)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Replace one-element array with flexible-array member in MR_FW_RAID_MAP (Gustavo A. R. Silva)  [Orabug: 35729651]  
  - scsi: megaraid: Remove redundant assignment to variable mfiStatus (Colin Ian King)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Remove unnecessary kfree() (Guixin Liu)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Remove redundant variable cmd_type (Colin Ian King)  [Orabug: 35729651]  
  - scsi: megaraid: Remove the static variable initialisation (Jason Wang)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Clean up some inconsistent indenting (Jiapeng Chong)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Remove redundant memset() statement (Harshit Mogalapalli)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Remove unnecessary memset (Wan Jiabing)  [Orabug: 35729651]  
  - scsi: megasas: Clean up some inconsistent indenting (Yang Li)  [Orabug: 35729651]  
  - scsi: megasas: Stop using the SCSI pointer (Bart Van Assche)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Use irq_set_affinity_and_hint() (Nitesh Narayan Lal)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Driver version update to 07.719.03.00-rc1 (Sumit Saxena)  [Orabug: 35729651]  
  - scsi: megaraid_sas: Add helper functions for irq_context (Sumit Saxena)  [Orabug: 35729651]  
  - scsi: mpt3sas: Fix an issue when driver is being removed (Tomas Henzl)  [Orabug: 35729658]  
  - scsi: mpt3sas: Remove HBA BIOS version in the kernel log (Ranjan Kumar)  [Orabug: 35729658]  
  - scsi: mpt3sas: Drop redundant pci_enable_pcie_error_reporting() (Bjorn Helgaas)  [Orabug: 35729658]  
  - scsi: mpt3sas: Demote log level for trace buffer allocation to info (Paul Menzel)  [Orabug: 35729658]  
  - scsi: mpt3sas: Update driver version to 43.100.00.00 (Sreekanth Reddy)  [Orabug: 35729658]  
  - scsi: mpt3sas: Increase cmd_per_lun to 128 (Sreekanth Reddy)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix trace buffer registration failed (Sreekanth Reddy)  [Orabug: 35729658]  
  - scsi: mpt3sas: Disable MPI2_FUNCTION_FW_DOWNLOAD for ATTO devices (Bradley Grove)  [Orabug: 35729658]  
  - scsi: mpt3sas: Add support for ATTO ExpressSAS H12xx GT devices (Bradley Grove)  [Orabug: 35729658]  
  - scsi: mpt3sas: Remove flush_scheduled_work() call (Tetsuo Handa)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix whitespace and spelling mistake (Zhang Jiaming)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix typo in comment (Ren Yu)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix junk chars displayed while printing ChipName (Sreekanth Reddy)  [Orabug: 35729658]  
  - scsi: mpt3sas: Use cached ATA Information VPD page (Martin K. Petersen)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix adapter replyPostRegisterIndex declaration (Damien Le Moal)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix event callback log_code value handling (Damien Le Moal)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix _ctl_set_task_mid() TaskMID check (Damien Le Moal)  [Orabug: 35729658]  
  - scsi: mpt3sas: Fix mpt3sas_check_same_4gb_region() kdoc comment (Damien Le Moal)  [Orabug: 35729658]  
  - scsi: mpt3sas: Convert to flexible arrays (Kees Cook)  [Orabug: 35729658]  
  - scsi: mpt3sas: Update persistent trigger pages from sysfs interface (Suganath Prabu S)  [Orabug: 35729658]  
  - KVM: selftests: vmx_pmu_msrs_test: Drop tests mangling guest visible CPUIDs (Vitaly Kuznetsov)  [Orabug: 35730650]  
  - rds: Remove gratuitous include of time.h from rds.h (Mark Haywood)  [Orabug: 35742760]  
  - uek-rpm: Removing pre scriptlet to not allow firmware downgrade (Samasth Norway Ananda)  [Orabug: 35756462]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-106.130.2.el8uek]
changelog:
  - LTS version: v5.15.130 (Jack Vogel)   
  - rcu-tasks: Add trc_inspect_reader() checks for exiting critical section (Paul E. McKenney)   
  - rcu-tasks: Wait for trc_read_check_handler() IPIs (Paul E. McKenney)   
  - rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader (Neeraj Upadhyay)   
  - rcu: Prevent expedited GP from enabling tick on offline CPU (Paul E. McKenney)   
  - ARM: module: Use module_init_layout_section() to spot init sections (James Morse)   
  - arm64: module: Use module_init_layout_section() to spot init sections (James Morse)   
  - arm64: module-plts: inline linux/moduleloader.h (Arnd Bergmann)   
  - module: Expose module_init_layout_section() (James Morse)   
  - ACPI: thermal: Drop nocrt parameter (Mario Limonciello)   
  - LTS version: v5.15.129 (Jack Vogel)   
  - mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer (Rik van Riel)   
  - mm: memory-failure: fix unexpected return value in soft_offline_page() (Miaohe Lin)   
  - mm: memory-failure: kill soft_offline_free_page() (Kefeng Wang)   
  - dma-buf/sw_sync: Avoid recursive lock during fence signal (Rob Clark)   
  - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (Biju Das)   
  - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (Biju Das)   
  - scsi: core: raid_class: Remove raid_component_add() (Zhu Wang)   
  - scsi: snic: Fix double free in snic_tgt_create() (Zhu Wang)   
  - can: raw: add missing refcount for memory leak fix (Oliver Hartkopp)   
  - drm/i915: Fix premature release of request's reusable memory (Janusz Krzysztofik)   
  - cgroup/cpuset: Free DL BW in case can_attach() fails (Dietmar Eggemann)   
  - sched/deadline: Create DL BW alloc, free & check overflow interface (Dietmar Eggemann)   
  - cgroup/cpuset: Iterate only if DEADLINE tasks are present (Juri Lelli)   
  - sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets (Juri Lelli)   
  - sched/cpuset: Bring back cpuset_mutex (Juri Lelli)   
  - cgroup/cpuset: Rename functions dealing with DEADLINE accounting (Juri Lelli)   
  - torture: Fix hang during kthread shutdown phase (Joel Fernandes (Google))   
  - nfsd: use vfs setgid helper (Christian Brauner)   
  - nfs: use vfs setgid helper (Christian Brauner)   
  - x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 (Feng Tang)   
  - x86/fpu: Invalidate FPU state correctly on exec() (Rick Edgecombe)   
  - drm/display/dp: Fix the DP DSC Receiver cap size (Ankit Nautiyal)   
  - drm/vmwgfx: Fix shader stage validation (Zack Rusin)   
  - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (Igor Mammedov)   
  - media: vcodec: Fix potential array out-of-bounds in encoder queue_setup (Wei Chen)   
  - of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock (Rob Herring)   
  - of: unittest: Fix EXPECT for parse_phandle_with_args_map() test (Rob Herring)   
  - radix tree: remove unused variable (Arnd Bergmann)   
  - lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels (Helge Deller)   
  - batman-adv: Hold rtnl lock during MTU update via netlink (Sven Eckelmann)   
  - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (Remi Pommarel)   
  - batman-adv: Fix TT global entry leak when client roamed back (Remi Pommarel)   
  - batman-adv: Do not get eth header before batadv_check_management_packet (Remi Pommarel)   
  - batman-adv: Don't increase MTU when set by user (Sven Eckelmann)   
  - batman-adv: Trigger events for auto adjusted MTU (Sven Eckelmann)   
  - selinux: set next pointer before attaching to list (Christian Göttsche)   
  - nfsd: Fix race to FREE_STATEID and cl_revoked (Benjamin Coddington)   
  - NFS: Fix a use after free in nfs_direct_join_group() (Trond Myklebust)   
  - mm: add a call to flush_cache_vmap() in vmap_pfn() (Alexandre Ghiti)   
  - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (Takashi Iwai)   
  - clk: Fix slab-out-of-bounds error in devm_clk_release() (Andrey Skvortsov)   
  - NFSv4: Fix dropped lock for racing OPEN and delegation return (Benjamin Coddington)   
  - ibmveth: Use dcbf rather than dcbfl (Michael Ellerman)   
  - Revert "KVM: x86: enable TDP MMU by default" (Sean Christopherson)   
  - net/ncsi: change from ndo_set_mac_address to dev_set_mac_address (Ivan Mikhaylov)   
  - net/ncsi: make one oem_gma function for all mfr id (Ivan Mikhaylov)   
  - bonding: fix macvlan over alb bond support (Hangbin Liu)   
  - net: remove bond_slave_has_mac_rcu() (Jakub Kicinski)   
  - rtnetlink: Reject negative ifindexes in RTM_NEWLINK (Ido Schimmel)   
  - rtnetlink: return ENODEV when ifname does not exist and group is given (Florent Fourcot)   
  - netfilter: nf_tables: fix out of memory error handling (Florian Westphal)   
  - netfilter: nf_tables: flush pending destroy work before netlink notifier (Pablo Neira Ayuso)   
  - net/sched: fix a qdisc modification with ambiguous command request (Jamal Hadi Salim)   
  - igc: Fix the typo in the PTM Control macro (Sasha Neftin)   
  - igb: Avoid starting unnecessary workqueues (Alessio Igor Bogani)   
  - ice: fix receive buffer size miscalculation (Jesse Brandeburg)   
  - net: validate veth and vxcan peer ifindexes (Jakub Kicinski)   
  - net: bcmgenet: Fix return value check for fixed_phy_register() (Ruan Jinjie)   
  - net: bgmac: Fix return value check for fixed_phy_register() (Ruan Jinjie)   
  - ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() (Lu Wei)   
  - dccp: annotate data-races in dccp_poll() (Eric Dumazet)   
  - sock: annotate data-races around prot->memory_pressure (Eric Dumazet)   
  - octeontx2-af: SDP: fix receive link config (Hariprasad Kelam)   
  - tracing: Fix memleak due to race between current_tracer and trace (Zheng Yejian)   
  - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (Zheng Yejian)   
  - can: raw: fix lockdep issue in raw_release() (Eric Dumazet)   
  - drm/amd/display: check TG is non-null before checking if enabled (Taimur Hassan)   
  - drm/amd/display: do not wait for mpc idle if tg is disabled (Josip Pavic)   
  - can: raw: fix receiver memory leak (Ziyang Xuan)   
  - jbd2: fix a race when checking checkpoint buffer busy (Zhang Yi)   
  - jbd2: remove journal_clean_one_cp_list() (Zhang Yi)   
  - jbd2: remove t_checkpoint_io_list (Zhang Yi)   
  - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (Takashi Iwai)   
  - fbdev: fix potential OOB read in fast_imageblit() (Zhang Shurong)   
  - fbdev: Fix sys_imageblit() for arbitrary image widths (Thomas Zimmermann)   
  - fbdev: Improve performance of sys_imageblit() (Thomas Zimmermann)   
  - MIPS: cpu-features: Use boot_cpu_type for CPU type based features (Jiaxun Yang)   
  - MIPS: cpu-features: Enable octeon_cache by cpu_type (Jiaxun Yang)   
  - fs: dlm: fix mismatch of plock results from userspace (Alexander Aring)   
  - fs: dlm: use dlm_plock_info for do_unlock_close (Alexander Aring)   
  - fs: dlm: change plock interrupted message to debug again (Alexander Aring)   
  - fs: dlm: add pid to debug log (Alexander Aring)   
  - dlm: replace usage of found with dedicated list iterator variable (Jakob Koschel)   
  - dlm: improve plock logging if interrupted (Alexander Aring)   
  - PCI: acpiphp: Reassign resources on bridge if necessary (Igor Mammedov)   
  - xprtrdma: Remap Receive buffers after a reconnect (Chuck Lever)   
  - NFSv4: fix out path in __nfs4_get_acl_uncached (Fedor Pchelkin)   
  - NFSv4.2: fix error handling in nfs42_proc_getxattr (Fedor Pchelkin)   
  - objtool/x86: Fix SRSO mess (Peter Zijlstra)   
  - LTS version: v5.15.128 (Jack Vogel)   
  - x86/srso: Correct the mitigation status when SMT is disabled (Borislav Petkov (AMD))   
  - objtool/x86: Fixup frame-pointer vs rethunk (Peter Zijlstra)   
  - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (Petr Pavlu)   
  - x86/srso: Disable the mitigation on unaffected configurations (Borislav Petkov (AMD))   
  - x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() (Sean Christopherson)   
  - x86/static_call: Fix __static_call_fixup() (Peter Zijlstra)   
  - x86/srso: Explain the untraining sequences a bit more (Borislav Petkov (AMD))   
  - x86/cpu: Cleanup the untrain mess (Peter Zijlstra)   
  - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (Peter Zijlstra)   
  - x86/cpu: Rename original retbleed methods (Peter Zijlstra)   
  - x86/cpu: Clean up SRSO return thunk mess (Peter Zijlstra)   
  - x86/ibt: Add ANNOTATE_NOENDBR (Peter Zijlstra)   
  - objtool: Add frame-pointer-specific function ignore (Josh Poimboeuf)   
  - x86/alternative: Make custom return thunk unconditional (Peter Zijlstra)   
  - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (Peter Zijlstra)   
  - x86/cpu: Fix __x86_return_thunk symbol type (Peter Zijlstra)   
  - mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove (Yangtao Li)   
  - net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled (Jason Xing)   
  - virtio-net: set queues after driver_ok (Jason Wang)   
  - af_unix: Fix null-ptr-deref in unix_stream_sendpage(). (Kuniyuki Iwashima)   
  - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (Christopher Obbard)   
  - exfat: check if filename entries exceeds max filename length (Namjae Jeon)   
  - netfilter: set default timeout to 3 secs for sctp shutdown send and recv state (Xin Long)   
  - drm/amd: flush any delayed gfxoff on suspend entry (Mario Limonciello)   
  - drm/qxl: fix UAF on handle creation (Wander Lairson Costa)   
  - mmc: block: Fix in_flight[issue_type] value error (Yibin Ding)   
  - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (Yang Yingliang)   
  - cifs: Release folio lock on fscache read hit. (Russell Harmon via samba-technical)   
  - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. (dengxiang)   
  - serial: 8250: Fix oops for port->pm on uart_change_pm() (Tony Lindgren)   
  - riscv: uaccess: Return the number of bytes effectively not copied (Alexandre Ghiti)   
  - ALSA: hda/realtek - Remodified 3k pull low procedure (Kailang Yang)   
  - soc: aspeed: socinfo: Add kfree for kstrdup (Jiasheng Jiang)   
  - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (Jerome Brunet)   
  - ASoC: rt5665: add missed regulator_bulk_disable (Zhang Shurong)   
  - ARM: dts: imx: Set default tuning step for imx6sx usdhc (Xiaolei Wang)   
  - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (Dmitry Baryshkov)   
  - bus: ti-sysc: Flush posted write on enable before reset (Tony Lindgren)   
  - net: do not allow gso_size to be set to GSO_BY_FRAGS (Eric Dumazet)   
  - sock: Fix misuse of sk_under_memory_pressure() (Abel Wu)   
  - net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset (Alfred Lee)   
  - i40e: fix misleading debug logs (Andrii Staikov)   
  - iavf: fix FDIR rule fields masks validation (Piotr Gardocki)   
  - team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - net: phy: broadcom: stub c45 read/write for 54810 (Justin Chen)   
  - netfilter: nft_dynset: disallow object maps (Pablo Neira Ayuso)   
  - ipvs: fix racy memcpy in proc_do_sync_threshold (Sishuai Gong)   
  - netfilter: nf_tables: deactivate catchall elements in next generation (Florian Westphal)   
  - netfilter: nf_tables: fix false-positive lockdep splat (Florian Westphal)   
  - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (Luca Ceresoli)   
  - selftests: mirror_gre_changes: Tighten up the TTL test match (Petr Machata)   
  - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (Russell King (Oracle))   
  - xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH (Lin Ma)   
  - xfrm: add NULL check in xfrm_update_ae_params (Lin Ma)   
  - ip_vti: fix potential slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - ip6_vti: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - xfrm: fix slab-use-after-free in decode_session6 (Zhengchao Shao)   
  - net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure (Lin Ma)   
  - net: af_key: fix sadb_x_filter validation (Lin Ma)   
  - net: xfrm: Fix xfrm_address_filter OOB read (Lin Ma)   
  - i2c: designware: Handle invalid SMBus block data response length value (Tam Nguyen)   
  - i2c: designware: Correct length byte validation logic (Quan Nguyen)   
  - btrfs: fix BUG_ON condition in btrfs_cancel_balance (xiaoshoukui)   
  - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (Sherry Sun)   
  - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (Yi Yang)   
  - powerpc/rtas_flash: allow user copy to flash block cache objects (Nathan Lynch)   
  - fbdev: mmp: fix value check in mmphw_probe() (Yuanjun Gong)   
  - i2c: hisi: Only handle the interrupt of the driver's transfer (Yicong Yang)   
  - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (Chengfeng Ye)   
  - cifs: fix potential oops in cifs_oplock_break (Steve French)   
  - vduse: Use proper spinlock for IRQ injection (Maxime Coquelin)   
  - virtio-mmio: don't break lifecycle of vm_dev (Wolfram Sang)   
  - btrfs: move out now unused BG from the reclaim list (Naohiro Aota)   
  - ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node (Xu Yang)   
  - ARM: dts: imx6sll: fixup of operating points (Andreas Kemnade)   
  - mmc: sunxi: fix deferred probing (Sergey Shtylyov)   
  - mmc: bcm2835: fix deferred probing (Sergey Shtylyov)   
  - USB: dwc3: fix use-after-free on core driver unbind (Johan Hovold)   
  - USB: dwc3: qcom: fix NULL-deref on suspend (Johan Hovold)   
  - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (Robert Hodaszi)   
  - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (Sherry Sun)   
  - tty: serial: fsl_lpuart: Add i.MXRT1050 support (Jesse Taube)   
  - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (Roger Quadros)   
  - USB: dwc3: gadget: drop dead hibernation code (Johan Hovold)   
  - usb: dwc3: Fix typos in gadget.c (Kushagra Verma)   
  - usb: dwc3: Remove DWC3 locking during gadget suspend/resume (Wesley Cheng)   
  - usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect (Wesley Cheng)   
  - drm/amd/display: fix access hdcp_workqueue assert (Hersen Wu)   
  - drm/amd/display: phase3 mst hdcp for multiple displays (hersen wu)   
  - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (hersen wu)   
  - ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks (Zev Weiss)   
  - igc: read before write to SRRCTL register (Song Yoong Siang)   
  - iio: addac: stx104: Fix race condition when converting analog-to-digital (William Breathitt Gray)   
  - iio: addac: stx104: Fix race condition for stx104_write_raw() (William Breathitt Gray)   
  - iio: stx104: Move to addac subdirectory (William Breathitt Gray)   
  - iio: adc: stx104: Implement and utilize register structures (William Breathitt Gray)   
  - iio: adc: stx104: Utilize iomap interface (William Breathitt Gray)   
  - iio: add addac subdirectory (Cosmin Tanislav)   
  - ring-buffer: Do not swap cpu_buffer during resize process (Chen Lin)   
  - powerpc/kasan: Disable KCOV in KASAN code (Benjamin Gray)   
  - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (Tuo Li)   
  - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (dengxiang)   
  - fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted (Konstantin Komarov)   
  - fs: ntfs3: Fix possible null-pointer dereferences in mi_read() (Jia-Ju Bai)   
  - fs/ntfs3: Enhance sanity check while generating attr_list (Edward Lo)   
  - drm/amdgpu: Fix potential fence use-after-free v2 (shanzhulig)   
  - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (Matthew Anderson)   
  - Bluetooth: L2CAP: Fix use-after-free (Zhengping Jiang)   
  - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (Yuechao Zhao)   
  - firewire: net: fix use after free in fwnet_finish_incoming_packet() (Zhang Shurong)   
  - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (Armin Wolf)   
  - gfs2: Fix possible data races in gfs2_show_options() (Tuo Li)   
  - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (Xu Yang)   
  - usb: chipidea: imx: don't request QoS for imx8ulp (Xu Yang)   
  - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (Mika Westerberg)   
  - media: platform: mediatek: vpu: fix NULL ptr dereference (Hans Verkuil)   
  - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (Prashanth K)   
  - media: v4l2-mem2mem: add lock to protect parameter num_rdy (Yunfei Dong)   
  - smb: client: fix warning in cifs_smb3_do_mount() (Paulo Alcantara)   
  - ovl: check type and offset of struct vfsmount in ovl_entry (Christian Brauner)   
  - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (Patrisious Haddad)   
  - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (Marco Morandini)   
  - drm/amdgpu: install stub fence into potential unused fence pointers (Lang Yu)   
  - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (stuarthayhurst)   
  - dma-remap: use kvmalloc_array/kvfree for larger dma memory remap (gaoxu)   
  - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (Pierre-Louis Bossart)   
  - iopoll: Call cpu_relax() in busy loops (Geert Uytterhoeven)   
  - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (Oleksij Rempel)   
  - PCI: tegra194: Fix possible array out of bounds access (Sumit Gupta)   
  - net: tls: avoid discarding data on record close (Jakub Kicinski)   
  - net/tls: Multi-threaded calls to TX tls_dev_del (Tariq Toukan)   
  - net/tls: Perform immediate device ctx cleanup when possible (Tariq Toukan)   
  - macsec: use DEV_STATS_INC() (Eric Dumazet)   
  - macsec: Fix traffic counters/statistics (Clayton Yager)   
  - selftests: forwarding: tc_actions: Use ncat instead of nc (Ido Schimmel)   
  - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (Davide Caratti)   
  - mmc: sdhci-f-sdh30: Replace with sdhci_pltfm (Kunihiko Hayashi)   
  - LTS version: v5.15.127 (Jack Vogel)   
  - timers/nohz: Last resort update jiffies on nohz_full IRQ entry (Frederic Weisbecker)   
  - timers/nohz: Switch to ONESHOT_STOPPED in the low-res handler when the tick is stopped (Nicholas Piggin)   
  - tick: Detect and fix jiffies update stall (Frederic Weisbecker)   
  - sch_netem: fix issues in netem_change() vs get_dist_table() (Eric Dumazet)   
  - alpha: remove __init annotation from exported page_is_ram() (Masahiro Yamada)   
  - scsi: qedf: Fix firmware halt over suspend and resume (Nilesh Javali)   
  - scsi: qedi: Fix firmware halt over suspend and resume (Nilesh Javali)   
  - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (Karan Tilak Kumar)   
  - scsi: core: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: snic: Fix possible memory leak if device_add() fails (Zhu Wang)   
  - scsi: 53c700: Check that command slot is not NULL (Alexandra Diupina)   
  - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (Michael Kelley)   
  - scsi: core: Fix legacy /proc parsing buffer overflow (Tony Battersby)   
  - netfilter: nf_tables: report use refcount overflow (Pablo Neira Ayuso)   
  - nvme-rdma: fix potential unbalanced freeze & unfreeze (Ming Lei)   
  - nvme-tcp: fix potential unbalanced freeze & unfreeze (Ming Lei)   
  - btrfs: set cache_block_group_error if we find an error (Josef Bacik)   
  - btrfs: reject invalid reloc tree root keys with stack dump (Qu Wenruo)   
  - btrfs: exit gracefully if reloc roots don't match (Qu Wenruo)   
  - btrfs: don't stop integrity writeback too early (Christoph Hellwig)   
  - ibmvnic: Handle DMA unmapping of login buffs in release functions (Nick Child)   
  - ibmvnic: Unmap DMA login rsp buffer on send login fail (Nick Child)   
  - ibmvnic: Enforce stronger sanity checks on login response (Nick Child)   
  - net/mlx5: Skip clock update work when device is in error state (Moshe Shemesh)   
  - net/mlx5: Allow 0 for total host VFs (Daniel Jurgens)   
  - dmaengine: mcf-edma: Fix a potential un-allocated memory access (Christophe JAILLET)   
  - nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID (Ido Schimmel)   
  - nexthop: Make nexthop bucket dump more efficient (Ido Schimmel)   
  - nexthop: Fix infinite nexthop dump when using maximum nexthop ID (Ido Schimmel)   
  - net: hns3: add wait until mac link down (Jie Wang)   
  - net: hns3: refactor hclge_mac_link_status_wait for interface reuse (Jie Wang)   
  - net: phy: at803x: remove set/get wol callbacks for AR8032 (Li Yang)   
  - RDMA/umem: Set iova in ODP flow (Michael Guralnik)   
  - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (Felix Fietkau)   
  - drm/rockchip: Don't spam logs in atomic check (Daniel Stone)   
  - IB/hfi1: Fix possible panic during hotplug remove (Douglas Miller)   
  - iavf: fix potential races for FDIR filters (Piotr Gardocki)   
  - drivers: net: prevent tun_build_skb() to exceed the packet size limit (Andrew Kanner)   
  - dccp: fix data-race around dp->dccps_mss_cache (Eric Dumazet)   
  - bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves (Ziyang Xuan)   
  - xsk: fix refcount underflow in error path (Magnus Karlsson)   
  - tunnels: fix kasan splat when generating ipv4 pmtu error (Florian Westphal)   
  - net/packet: annotate data-races around tp->status (Eric Dumazet)   
  - mISDN: Update parameter type of dsp_cmx_send() (Nathan Chancellor)   
  - bpf, sockmap: Fix bug that strp_done cannot be called (Xu Kuohai)   
  - bpf, sockmap: Fix map type error in sock_map_del_link (Xu Kuohai)   
  - net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() (Andrew Kanner)   
  - selftests: forwarding: tc_flower: Relax success criterion (Ido Schimmel)   
  - selftests: forwarding: Switch off timeout (Ido Schimmel)   
  - selftests: forwarding: Skip test when no interfaces are specified (Ido Schimmel)   
  - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (Ido Schimmel)   
  - selftests: forwarding: ethtool: Skip when using veth pairs (Ido Schimmel)   
  - selftests: forwarding: Add a helper to skip test when using veth pairs (Ido Schimmel)   
  - selftests/rseq: Fix build with undefined __weak (Mark Brown)   
  - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (Karol Herbst)   
  - x86: Move gds_ucode_mitigated() declaration to header (Arnd Bergmann)   
  - x86/speculation: Add cpu_show_gds() prototype (Arnd Bergmann)   
  - x86/mm: Fix VDSO and VVAR placement on 5-level paging machines (Kirill A. Shutemov)   
  - x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (Cristian Ciocaltea)   
  - x86/srso: Fix build breakage with the LLVM linker (Nick Desaulniers)   
  - usb: typec: tcpm: Fix response to vsafe0V event (Badhri Jagan Sridharan)   
  - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (Prashanth K)   
  - usb: dwc3: Properly handle processing of pending events (Elson Roy Serrao)   
  - usb-storage: alauda: Fix uninit-value in alauda_check_media() (Alan Stern)   
  - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (Ricky WU)   
  - binder: fix memory leak in binder_init() (Qi Zheng)   
  - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (Alvin Šipraga)   
  - iio: cros_ec: Fix the allocation size for cros_ec_command (Yiyuan Guo)   
  - io_uring: correct check for O_TMPFILE (Aleksa Sarai)   
  - selftests/bpf: Fix sk_assign on s390x (Ilya Leoshkevich)   
  - selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code (Yonghong Song)   
  - selftests/bpf: make test_align selftest more robust (Andrii Nakryiko)   
  - bpf: aggressively forget precise markings during state checkpointing (Andrii Nakryiko)   
  - bpf: stop setting precise in current state (Andrii Nakryiko)   
  - bpf: allow precision tracking for programs with subprogs (Andrii Nakryiko)   
  - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (Ryusuke Konishi)   
  - radix tree test suite: fix incorrect allocation size for pthreads (Colin Ian King)   
  - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (Tao Ren)   
  - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (Melissa Wen)   
  - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (Boris Brezillon)   
  - drm/nouveau/gr: enable memory loads on helper invocation on all channels (Karol Herbst)   
  - riscv,mmio: Fix readX()-to-delay() ordering (Andrea Parri)   
  - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (Ilpo Järvinen)   
  - ipv6: adjust ndisc_is_useropt() to also return true for PIO (Maciej Żenczykowski)   
  - mmc: moxart: read scr register without changing byte order (Sergei Antonov)   
  - wireguard: allowedips: expand maximum node depth (Jason A. Donenfeld)   
  - ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() (Namjae Jeon)   
  - ksmbd: validate command request size (Long Li)   
  - LTS version v5.15.126 (Jack Vogel)   
  - PM: sleep: wakeirq: fix wake irq arming (Johan Hovold)   
  - PM / wakeirq: support enabling wake-up irq after runtime_suspend called (Chunfeng Yun)   
  - soundwire: fix enumeration completion (Johan Hovold)   
  - soundwire: bus: pm_runtime_request_resume on peripheral attachment (Pierre-Louis Bossart)   
  - selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ (Sean Christopherson)   
  - selftests/rseq: check if libc rseq support is registered (Michael Jeanson)   
  - drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning (Alexander Stein)   
  - powerpc/mm/altmap: Fix altmap boundary check (Aneesh Kumar K.V)   
  - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (Christophe JAILLET)   
  - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (Johan Jonker)   
  - mtd: rawnand: rockchip: fix oobfree offset and description (Johan Jonker)   
  - mtd: rawnand: omap_elm: Fix incorrect type in assignment (Roger Quadros)   
  - ext2: Drop fragment support (Jan Kara)   
  - fs: Protect reconfiguration of sb read-write from racing writes (Jan Kara)   
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Alan Stern)   
  - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (Sungwoo Kim)   
  - fs/sysv: Null check to prevent null-ptr-deref bug (Prince Kumar Maurya)   
  - fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() (Tetsuo Handa)   
  - file: reinstate f_pos locking optimization for regular files (Linus Torvalds)   
  - bpf, cpumap: Make sure kthread is running before map update returns (Hou Tao)   
  - drm/ttm: check null pointer before accessing when swapping (Guchun Chen)   
  - open: make RESOLVE_CACHED correctly test for O_TMPFILE (Aleksa Sarai)   
  - bpf: Disable preemption in bpf_event_output (Jiri Olsa)   
  - rbd: prevent busy loop when requesting exclusive lock (Ilya Dryomov)   
  - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (Paul Fertser)   
  - net: tap_open(): set sk_uid from current_fsuid() (Laszlo Ersek)   
  - net: tun_chr_open(): set sk_uid from current_fsuid() (Laszlo Ersek)   
  - arm64: dts: stratix10: fix incorrect I2C property for SCL signal (Dinh Nguyen)   
  - mtd: rawnand: meson: fix OOB available bytes for ECC (Arseniy Krasnov)   
  - mtd: spinand: toshiba: Fix ecc_get_status (Olivier Maignial)   
  - exfat: release s_lock before calling dir_emit() (Sungjong Seo)   
  - exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree (gaoming)   
  - firmware: arm_scmi: Drop OF node reference in the transport channel setup (Krzysztof Kozlowski)   
  - ceph: defer stopping mdsc delayed_work (Xiubo Li)   
  - USB: zaurus: Add ID for A-300/B-500/C-700 (Ross Maynard)   
  - libceph: fix potential hang in ceph_osdc_notify() (Ilya Dryomov)   
  - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (Michael Kelley)   
  - scsi: zfcp: Defer fc_rport blocking until after ADISC response (Steffen Maier)   
  - tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_net (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_vals[] (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_lock (Eric Dumazet)   
  - tcp_metrics: annotate data-races around tm->tcpm_stamp (Eric Dumazet)   
  - tcp_metrics: fix addr_same() helper (Eric Dumazet)   
  - prestera: fix fallback to previous version on same major version (Jonas Gorski)   
  - net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio (Jianbo Liu)   
  - net/mlx5: fs_core: Make find_closest_ft more generic (Jianbo Liu)   
  - vxlan: Fix nexthop hash size (Benjamin Poirier)   
  - ip6mr: Fix skb_under_panic in ip6mr_cache_report() (Yue Haibing)   
  - s390/qeth: Don't call dev_close/dev_open (DOWN/UP) (Alexandra Winter)   
  - net: dcb: choose correct policy to parse DCB_ATTR_BCN (Lin Ma)   
  - net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode (Mark Brown)   
  - net: korina: handle clk prepare error in korina_probe() (Yuanjun Gong)   
  - net: ll_temac: fix error checking of irq_of_parse_and_map() (Dan Carpenter)   
  - net: ll_temac: Switch to use dev_err_probe() helper (Yang Yingliang)   
  - bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire (Tomas Glozar)   
  - net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free (valis)   
  - bpf, cpumap: Handle skb as well when clean up ptr_ring (Hou Tao)   
  - net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. (Kuniyuki Iwashima)   
  - net: add missing data-race annotation for sk_ll_usec (Eric Dumazet)   
  - net: add missing data-race annotations around sk->sk_peek_off (Eric Dumazet)   
  - net: add missing READ_ONCE(sk->sk_rcvbuf) annotation (Eric Dumazet)   
  - net: add missing READ_ONCE(sk->sk_sndbuf) annotation (Eric Dumazet)   
  - net: add missing READ_ONCE(sk->sk_rcvlowat) annotation (Eric Dumazet)   
  - net: annotate data-races around sk->sk_max_pacing_rate (Eric Dumazet)   
  - qed: Fix scheduling in a tasklet while getting stats (Konstantin Khorenko)   
  - mISDN: hfcpci: Fix potential deadlock on &hc->lock (Chengfeng Ye)   
  - net: sched: cls_u32: Fix match key mis-addressing (Jamal Hadi Salim)   
  - perf test uprobe_from_different_cu: Skip if there is no gcc (Georg Müller)   
  - net: dsa: fix value check in bcm_sf2_sw_probe() (Yuanjun Gong)   
  - rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length (Lin Ma)   
  - bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing (Lin Ma)   
  - net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() (Yuanjun Gong)   
  - net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx (Zhengchao Shao)   
  - wifi: cfg80211: Fix return value in scan logic (Ilan Peer)   
  - KVM: s390: fix sthyi error handling (Heiko Carstens)   
  - word-at-a-time: use the same return type for has_zero regardless of endianness (ndesaulniers@google.com)   
  - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (Hugo Villeneuve)   
  - iommu/arm-smmu-v3: Document nesting-related errata (Robin Murphy)   
  - iommu/arm-smmu-v3: Add explicit feature for nesting (Robin Murphy)   
  - iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 (Robin Murphy)   
  - iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 (Robin Murphy)   
  - net/mlx5: Free irqs only on shutdown callback (Shay Drory)   
  - perf: Fix function pointer case (Peter Zijlstra)   
  - io_uring: gate iowait schedule on having pending requests (Jens Axboe)   
  - net: mana: Use the correct WQE count for ringing RQ doorbell (Long Li)  [Orabug: 35555552]  
  - net: mana: Batch ringing RX queue doorbell on receiving packets (Long Li)  [Orabug: 35555552]  
  - devlink: report devlink_port_type_warn source device (Petr Oros)  [Orabug: 35727899]  
  - scsi: mpi3mr: Update driver version to 8.5.0.0.0 (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Enhance handling of devices removed after controller reset (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: WRITE SAME implementation (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Add support for more than 1MB I/O (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Update MPI Headers to version 3.00.28 (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Invoke soft reset upon TSU or event ack time out (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O (Sathya Prakash)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix the type used for pointers to bitmap (Christophe JAILLET)  [Orabug: 35729632]  
  - scsi: mpi3mr: Use -ENOMEM instead of -1 in mpi3mr_expander_add() (Harshit Mogalapalli)  [Orabug: 35729632]  
  - scsi: mpi3mr: Use IRQ save variants of spinlock to protect chain frame allocation (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Handle soft reset in progress fault code (0xF002) (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Update copyright year (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix W=1 compilation warnings (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Update MPI Headers to revision 27 (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Modify MUR timeout value to 120 seconds (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix admin queue memory leak upon soft reset (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Successive VD delete and add causes FW fault (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix expander node leak in mpi3mr_remove() (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix memory leaks in mpi3mr_init_ioc() (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix sas_hba.phy memory leak in mpi3mr_remove() (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix mpi3mr_hba_port memory leak in mpi3mr_remove() (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix config page DMA memory leak (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix throttle_groups memory leak (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Bad drive in topology results kernel crash (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: NVMe command size greater than 8K fails (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Return proper values for failures in firmware init path (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Wait for diagnostic save during controller init (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: ioctl timeout when disabling/enabling interrupt (Ranjan Kumar)  [Orabug: 35729632]  
  - scsi: mpi3mr: Remove unneeded version.h include (Jesper Juhl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (Shin'ichiro Kawasaki)  [Orabug: 35729632]  
  - scsi: mpi3mr: Use number of bits to manage bitmap sizes (Shin'ichiro Kawasaki)  [Orabug: 35729632]  
  - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (Shin'ichiro Kawasaki)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (Shin'ichiro Kawasaki)  [Orabug: 35729632]  
  - scsi: mpi3mr: Fix an issue found by KASAN (Tomas Henzl)  [Orabug: 35729632]  
  - scsi: mpi3mr: Remove usage of dma_get_required_mask() API (Sreekanth Reddy)  [Orabug: 35729632]  
  - scsi: mpi3mr: Suppress command reply debug prints (Shin'ichiro Kawasaki)  [Orabug: 35729632]  
  - scsi: mpi3mr: Select CONFIG_SCSI_SAS_ATTRS (Michal Kubecek)  [Orabug: 35729632]  
  - vhost-scsi: Fix alignment handling with windows (Mike Christie)  [Orabug: 35769316]  
  - selftests/bpf: fix static assert compilation issue for test_cls_*.c (Alan Maguire)  [Orabug: 35773339]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-106.130.3.el8uek]
changelog:
  - KVM: arm64: Skip instruction after emulating write to TCR_EL1 (Oliver Upton)  [Orabug: 35677037]  
  - uek-rpm: aarch64: enable ACPI_AGDI (Mihai Carabas)  [Orabug: 35761254]  
  - arm64: sdei: abort running SDEI handlers during crash (D Scott Phillips)  [Orabug: 35761254]  
  - ACPI: AGDI: Fix missing prototype warning for acpi_agdi_init() (Ilkka Koskinen)  [Orabug: 35761254]  
  - ACPI: AGDI: Add driver for Arm Generic Diagnostic Dump and Reset device (Ilkka Koskinen)  [Orabug: 35761254]  
  - ACPI: tables: Add AGDI to the list of known table signatures (Ilkka Koskinen)  [Orabug: 35761254]  
  - ACPICA: iASL: Add suppport for AGDI table (Ilkka Koskinen)  [Orabug: 35761254]  
  - net/rds: Avoid unpin_user_pages_dirty_lock() in tasklets (Gerd Rausch)  [Orabug: 35765163]  
  - x86/CPU/AMD: Fix the DIV(0) initial fix attempt (Borislav Petkov (AMD))  [Orabug: 35776935]  {CVE-2023-20588} 
  - x86/CPU/AMD: Do not leak quotient data after a division by 0 (Borislav Petkov (AMD))  [Orabug: 35776935]  {CVE-2023-20588} 
  - x86: change default to spec_store_bypass_disable=prctl spectre_v2_user=prctl (Andrea Arcangeli)  [Orabug: 35778852]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-106.131.4.el8uek]
changelog:
  - jbd2: check 'jh->b_transaction' before removing it from checkpoint (Zhihao Cheng)   
  - jbd2: fix checkpoint cleanup performance regression (Zhang Yi)   
  - scsi: qla2xxx: Fix TMF leak through (Quinn Tran)   
  - scsi: qla2xxx: Fix command flush during TMF (Quinn Tran)   
  - scsi: qla2xxx: Limit TMF to 8 per function (Quinn Tran)   
  - Revert "drm/amdgpu: install stub fence into potential unused fence pointers" (Greg Kroah-Hartman)   
  - dlm: fix plock lookup when using multiple lockspaces (Alexander Aring)   
  - Revert "scsi: qla2xxx: Fix buffer overrun" (Nilesh Javali)   
  - media: dvb: symbol fixup for dvb_attach() (Greg Kroah-Hartman)   
  - PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address (Rick Wertenbroek)   
  - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (Dave Hansen)   
  - clk: qcom: reset: Use the correct type of sleep/delay based on length (Konrad Dybcio)   
  - ALSA: ac97: Fix possible error value of *rac97 (Su Hui)   
  - md/raid0: Fix performance regression for large sequential writes (Jan Kara)   
  - md/raid0: Factor out helper for mapping and submitting a bio (Jan Kara)   
  - md: add error_handlers for raid0 and linear (Mariusz Tkaczyk)   
  - md: Set MD_BROKEN for RAID1 and RAID10 (Mariusz Tkaczyk)   
  - LTS version: v5.15.131 (Jack Vogel)   
  - usb: typec: tcpci: clear the fault status bit (Marco Felsch)   
  - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (Xin Ji)   
  - pinctrl: amd: Don't show `Invalid config param` errors (Mario Limonciello)   
  - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (Ryusuke Konishi)   
  - nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() (Ryusuke Konishi)   
  - tcpm: Avoid soft reset when partner does not support get_status (Badhri Jagan Sridharan)   
  - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (Juerg Haefliger)   
  - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (Wang Ming)   
  - serial: sc16is7xx: fix bug when first setting GPIO direction (Hugo Villeneuve)   
  - serial: sc16is7xx: fix broken port 0 uart init (Hugo Villeneuve)   
  - serial: qcom-geni: fix opp vote on shutdown (Johan Hovold)   
  - wifi: mt76: mt7921: do not support one stream on secondary antenna only (Deren Wu)   
  - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (Zheng Wang)   
  - staging: rtl8712: fix race condition (Nam Cao)   
  - HID: wacom: remove the battery when the EKR is off (Aaron Armstrong Skomra)   
  - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (Xu Yang)   
  - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (Luke Lu)   
  - ALSA: usb-audio: Fix init call orders for UAC1 (Takashi Iwai)   
  - USB: serial: option: add FOXCONN T99W368/T99W373 product (Slark Xiao)   
  - USB: serial: option: add Quectel EM05G variant (0x030e) (Martin Kohn)   
  - modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules (Christoph Hellwig)   
  - rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff (Christoph Hellwig)   
  - net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index (Christoph Hellwig)   
  - mmc: au1xmmc: force non-modular build and remove symbol_get usage (Christoph Hellwig)   
  - ARM: pxa: remove use of symbol_get() (Arnd Bergmann)   
  - ksmbd: replace one-element array with flex-array member in struct smb2_ea_info (Namjae Jeon)   
  - ksmbd: fix wrong DataOffset validation of create context (Namjae Jeon)   
  - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)   
  - netfilter: nfnetlink_osf: avoid OOB read (Wander Lairson Costa)  [Orabug: 35824286]  
  - netfilter: nftables: exthdr: fix 4-byte stack OOB write (Florian Westphal)  [Orabug: 35824286]  
  - netfilter: xt_sctp: validate the flag_info count (Wander Lairson Costa)  [Orabug: 35824286]  
  - netfilter: xt_u32: validate user space input (Wander Lairson Costa)  [Orabug: 35824286]  
  - netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c (Kyle Zeng)  [Orabug: 35824286]  {CVE-2023-42753} 
  - rds: Fix lack of reentrancy for connection reset with dst addr zero (Håkon Bugge)  [Orabug: 35655833]  {CVE-2023-22024} 
  - attr: use consistent sgid stripping checks (Christian Brauner)  [Orabug: 35520042]  
  - Revert "perf build-ids: Fall back to debuginfod query if debuginfo not found" (Samasth Norway Ananda)  [Orabug: 35617848]  
  - KEYS: use kfree_sensitive with key (Saeed Mirzamohammadi)  [Orabug: 35746757]  
  - kernfs: fix missing kernfs_iattr_rwsem locking (Ian Kent)  [Orabug: 35796770]  
  - scsi: megaraid_sas: Fix deadlock on firmware crashdump (Junxiao Bi)  [Orabug: 35819592]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-200.131.27.el8uek]
changelog:
  - net/mlx5: E-Switch, Protect unloading driver while adding rules (Chris Mi)  [Orabug: 35806544]  
  - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (Nilesh Javali)  [Orabug: 35847181]  
  - scsi: qla2xxx: Correct endianness for rqstlen and rsplen (Nilesh Javali)  [Orabug: 35847181]  
  - scsi: qla2xxx: Add Unsolicited LS Request and Response Support for NVMe (Manish Rangankar)  [Orabug: 35847181]  
  - RDMA/mlx5: Fix UMR cleanup on error flow of driver init (Maor Gottlieb)  [Orabug: 35290200]  
  - mlx5/core: E-Switch, Allocate ECPF vport if it's an eswitch manager (Bodong Wang)  [Orabug: 35290200]  
  - net/mlx5: E-Switch, Remove redundant dev arg from mlx5_esw_vport_alloc() (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: enable the kernel build options to support new features (Qing Huang)  [Orabug: 35290200]  
  - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (Ze Gao)  [Orabug: 35290200]  
  - devlink: Fix crash with CONFIG_NET_NS=n (Ido Schimmel)  [Orabug: 35290200]  
  - devlink: change per-devlink netdev notifier to static one (Jiri Pirko)  [Orabug: 35290200]  
  - net/sched: cls_api: Initialize miss_cookie_node when action miss is not used (Ivan Vecera)  [Orabug: 35290200]  
  - net/sched: clear actions pointer in miss cookie init fail (Pedro Tammela)  [Orabug: 35290200]  
  - net/sched: cls_api: Move call to tcf_exts_miss_cookie_base_destroy() (Nathan Chancellor)  [Orabug: 35290200]  
  - devlink: allow to call devl_param_driverinit_value_get() without holding instance lock (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: Fix memleak in health diagnose callback (Moshe Shemesh)  [Orabug: 35290200]  
  - net/sched: fix retpoline wrapper compilation on configs without tc filters (Pedro Tammela)  [Orabug: 35290200]  
  - bpf: Resolve fext program type when checking map compatibility (Toke Høiland-Jørgensen)  [Orabug: 35290200]  
  - genetlink: fix single op policy dump when do is present (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: correctly begin the iteration over policies (Jakub Kicinski)  [Orabug: 35290200]  
  - rethook: fix a potential memleak in rethook_alloc() (Yi Yang)  [Orabug: 35290200]  
  - tracing/fprobe: Fix to check whether fprobe is registered correctly (Masami Hiramatsu (Google))  [Orabug: 35290200]  
  - fprobe: Check rethook_alloc() return in rethook initialization (Rafael Mendonca)  [Orabug: 35290200]  
  - net: openvswitch: add missing .resv_start_op (Jakub Kicinski)  [Orabug: 35290200]  
  - net: ieee802154: Fix compilation error when CONFIG_IEEE802154_NL802154_EXPERIMENTAL is disabled (Gal Pressman)  [Orabug: 35290200]  
  - netdevsim: Fix hwstats debugfs file permissions (Ido Schimmel)  [Orabug: 35290200]  
  - rethook: Reject getting a rethook if RCU is not watching (Masami Hiramatsu (Google))  [Orabug: 35290200]  
  - xsk: add usage of XDP features flags (Marek Majtyka)  [Orabug: 35290200]  
  - drivers: net: turn on XDP features (Marek Majtyka)  [Orabug: 35290200]  
  - netdev-genl: fix repeated typo oflloading -> offloading (Tariq Toukan)  [Orabug: 35290200]  
  - net, xdp: Add missing xdp_features description (Lorenzo Bianconi)  [Orabug: 35290200]  
  - netdev-genl: create a simple family for netdev stuff (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: convert control family to split ops (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: allow families to use split ops directly (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: inline old iteration helpers (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: use iterator in the op to policy map dumping (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: add iterator for walking family ops (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: inline genl_get_cmd() (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: support split policies in ctrl_dumppolicy_put_op() (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: add policies for both doit and dumpit in ctrl_dumppolicy_start() (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: check for callback type at op load time (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: load policy based on validation flags (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: move the private fields in struct genl_family (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: refactor the cmd <> policy mapping dump (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: limit the use of validation workarounds to old ops (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: piggy back on resv_op to default to a reject policy (Jakub Kicinski)  [Orabug: 35290200]  
  - netlink: add helpers for extack attr presence checking (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: start to validate reserved header bytes (Jakub Kicinski)  [Orabug: 35290200]  
  - docs: netlink: basic introduction to Netlink (Jakub Kicinski)  [Orabug: 35290200]  
  - netlink: factor out extack composition (Jakub Kicinski)  [Orabug: 35290200]  
  - bpf, xdp, docs: Correct some English grammar and spelling (Kev Jackson)  [Orabug: 35290200]  
  - Revert "net/mlx5: Enable management PF initialization" (Jakub Kicinski)  [Orabug: 35290200]  
  - mlx4: bpf_xdp_metadata_rx_hash add xdp rss hash type (Jesper Dangaard Brouer)  [Orabug: 35290200]  
  - mlx5: bpf_xdp_metadata_rx_hash add xdp rss hash type (Jesper Dangaard Brouer)  [Orabug: 35290200]  
  - xdp: rss hash types representation (Jesper Dangaard Brouer)  [Orabug: 35290200]  
  - xdp: bpf_xdp_metadata use EOPNOTSUPP for no driver support (Jesper Dangaard Brouer)  [Orabug: 35290200]  
  - mlxsw: spectrum_fid: Fix incorrect local port type (Ido Schimmel)  [Orabug: 35290200]  
  - net/mlx5e: Overcome slow response for first macsec ASO WQE (Emeel Hakim)  [Orabug: 35290200]  
  - net/mlx5e: Initialize link speed to zero (Roy Novich)  [Orabug: 35290200]  
  - net/mlx5e: Block entering switchdev mode with ns inconsistency (Gavin Li)  [Orabug: 35290200]  
  - mlxsw: core_thermal: Fix fan speed in maximum cooling state (Ido Schimmel)  [Orabug: 35290200]  
  - net/mlx5e: TC, Remove error message log print (Oz Shlomo)  [Orabug: 35290200]  
  - net/mlx5e: TC, fix cloned flow attribute (Oz Shlomo)  [Orabug: 35290200]  
  - net/mlx5e: TC, fix missing error code (Oz Shlomo)  [Orabug: 35290200]  
  - net/sched: TC, fix raw counter initialization (Oz Shlomo)  [Orabug: 35290200]  
  - net/mlx5e: Lower maximum allowed MTU in XSK to match XDP prerequisites (Adham Faris)  [Orabug: 35290200]  
  - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (Shay Drory)  [Orabug: 35290200]  
  - net/mlx5e: kTLS, Fix missing error unwind on unsupported cipher type (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5e: Fix cleanup null-ptr deref on encap lock (Paul Blakey)  [Orabug: 35290200]  
  - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (Maor Dickman)  [Orabug: 35290200]  
  - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (Maor Dickman)  [Orabug: 35290200]  
  - net/mlx5: Disable eswitch before waiting for VF pages (Daniel Jurgens)  [Orabug: 35290200]  
  - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (Parav Pandit)  [Orabug: 35290200]  
  - net/mlx5e: Don't cache tunnel offloads capability (Parav Pandit)  [Orabug: 35290200]  
  - net/mlx5e: Fix macsec ASO context alignment (Emeel Hakim)  [Orabug: 35290200]  
  - mlxsw: spectrum: Fix incorrect parsing depth after reload (Ido Schimmel)  [Orabug: 35290200]  
  - platform: mellanox: mlx-platform: Initialize shift variable to 0 (Hans de Goede)  [Orabug: 35290200]  
  - platform: mellanox: select REGMAP instead of depending on it (Randy Dunlap)  [Orabug: 35290200]  
  - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (Maher Sanalla)  [Orabug: 35290200]  
  - mlx5: fix possible ptp queue fifo use-after-free (Vadim Fedorenko)  [Orabug: 35290200]  
  - mlx5: fix skb leak while fifo resync and push (Vadim Fedorenko)  [Orabug: 35290200]  
  - net/mlx5e: TC, fix return value check in mlx5e_tc_act_stats_create() (Yang Yingliang)  [Orabug: 35290200]  
  - net/mlx5: Remove NULL check before dev_{put, hold} (Yang Li)  [Orabug: 35290200]  
  - net/mlx5e: Remove hairpin write debugfs files (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5: Fix memory leak in IPsec RoCE creation (Patrisious Haddad)  [Orabug: 35290200]  
  - net/mlx5e: Align IPsec ASO result memory to be as required by hardware (Leon Romanovsky)  [Orabug: 35290200]  
  - net/mlx5e: TC, Set CT miss to the specific ct action instance (Paul Blakey)  [Orabug: 35290200]  
  - net/mlx5e: Rename CHAIN_TO_REG to MAPPED_OBJ_TO_REG (Paul Blakey)  [Orabug: 35290200]  
  - net/mlx5: Refactor tc miss handling to a single function (Paul Blakey)  [Orabug: 35290200]  
  - net/mlx5: Kconfig: Make tc offload depend on tc skb extension (Paul Blakey)  [Orabug: 35290200]  
  - net/mlx4_en: Introduce flexible array to silence overflow warning (Kees Cook)  [Orabug: 35290200]  
  - net/sched: cls_api: Support hardware miss to tc action (Paul Blakey)  [Orabug: 35290200]  
  - net/sched: Rename user cookie and act cookie (Paul Blakey)  [Orabug: 35290200]  
  - IB/mlx5: Extend debug control for CC parameters (Edward Srouji)  [Orabug: 35290200]  
  - net/mlx5e: RX, Remove doubtful unlikely call (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5e: Fix outdated TLS comment (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5e: Remove unused function mlx5e_sq_xmit_simple (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5e: Allow offloading of ct 'new' match (Vlad Buslov)  [Orabug: 35290200]  
  - net/mlx5e: Implement CT entry update (Vlad Buslov)  [Orabug: 35290200]  
  - net/mlx5: Simplify eq list traversal (Parav Pandit)  [Orabug: 35290200]  
  - net/mlx5e: Remove redundant page argument in mlx5e_xdp_handle() (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5e: Remove redundant page argument in mlx5e_xmit_xdp_buff() (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5e: Switch to using napi_build_skb() (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5e: Use query_special_contexts for mkeys (Or Har-Toov)  [Orabug: 35290200]  
  - net/mlx5: Change define name for 0x100 lkey value (Or Har-Toov)  [Orabug: 35290200]  
  - net/mlx5: Expose bits for querying special mkeys (Or Har-Toov)  [Orabug: 35290200]  
  - net/mlx5: Configure IPsec steering for egress RoCEv2 traffic (Mark Zhang)  [Orabug: 35290200]  
  - net/mlx5: Configure IPsec steering for ingress RoCEv2 traffic (Mark Zhang)  [Orabug: 35290200]  
  - net/mlx5: Add IPSec priorities in RDMA namespaces (Mark Zhang)  [Orabug: 35290200]  
  - net/mlx5: Implement new destination type TABLE_TYPE (Mark Zhang)  [Orabug: 35290200]  
  - net/mlx5: Introduce new destination type TABLE_TYPE (Patrisious Haddad)  [Orabug: 35290200]  
  - net/mlx5: Suspend auxiliary devices only in case of PCI device suspend (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5: Remove "recovery" arg from mlx5_load_one() function (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Create auxdev devlink instance in the same ns as parent devlink (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Move devlink port registration to be done before netdev alloc (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Move dl_port to struct mlx5e_dev (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Replace usage of mlx5e_devlink_get_dl_port() by netdev->devlink_port (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Pass mdev to mlx5e_devlink_port_register() (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5: Remove outdated comment (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: TC, Remove redundant parse_attr argument (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: Use a simpler comparison for uplink rep (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: Lag, Add single RDMA device in multiport mode (Mark Bloch)  [Orabug: 35290200]  
  - net/mlx5: Lag, set different uplink vport metadata in multiport eswitch mode (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: E-Switch, rename bond update function to be reused (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: TC, Add peer flow in mpesw mode (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: Lag, Control MultiPort E-Switch single FDB mode (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: TC, support per action stats (Oz Shlomo)  [Orabug: 35290200]  
  - net/mlx5e: TC, map tc action cookie to a hw counter (Oz Shlomo)  [Orabug: 35290200]  
  - net/mlx5e: TC, store tc action cookies per attr (Oz Shlomo)  [Orabug: 35290200]  
  - net/mlx5e: TC, add hw counter to branching actions (Oz Shlomo)  [Orabug: 35290200]  
  - net/sched: avoid indirect classify functions on retpoline kernels (Pedro Tammela)  [Orabug: 35290200]  
  - net/sched: add retpoline wrapper for tc (Pedro Tammela)  [Orabug: 35290200]  
  - net/sched: Enable tc skb ext allocation on chain miss only when needed (Paul Blakey)  [Orabug: 35290200]  
  - net: sched: do not allocate a tracker in tcf_exts_init() (Eric Dumazet)  [Orabug: 35290200]  
  - net: sched: add netns refcount tracker to struct tcf_exts (Eric Dumazet)  [Orabug: 35290200]  
  - net/sched: support per action hw stats (Oz Shlomo)  [Orabug: 35290200]  
  - net/sched: pass flow_stats instead of multiple stats args (Oz Shlomo)  [Orabug: 35290200]  
  - flow_offload: rename exts stats update functions with hw (Baowen Zheng)  [Orabug: 35290200]  
  - net/sched: act_pedit, setup offload action for action stats query (Oz Shlomo)  [Orabug: 35290200]  
  - net/sched: optimize action stats api calls (Oz Shlomo)  [Orabug: 35290200]  
  - net/sched: move struct tc_mqprio_qopt_offload from pkt_cls.h to pkt_sched.h (Vladimir Oltean)  [Orabug: 35290200]  
  - platform: mellanox: mlx-platform: Move bus shift assignment out of the loop (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: mlx-platform: Add mux selection register to regmap (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/mellanox: mlxreg-hotplug: Allow more flexible hotplug events configuration (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Extend all systems with I2C notification callback (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Split logic in init and exit flow (Vadim Pasternak)  [Orabug: 35290200]  
  - Documentation: isdn: correct spelling (Randy Dunlap)  [Orabug: 35290200]  
  - platform: mellanox: Split initialization procedure (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Introduce support of new Nvidia L1 switch (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Introduce support for next-generation 800GB/s switch (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Cosmetic changes - rename to more common name (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Change "reset_pwr_converter_fail" attribute (Vadim Pasternak)  [Orabug: 35290200]  
  - platform: mellanox: Introduce support for rack manager switch (Vadim Pasternak)  [Orabug: 35290200]  
  - RDMA/mlx5: Track netdev to avoid deadlock during netdev notifier unregister (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Propagate an internal event in case uplink netdev changes (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Fix trap event handling (Jiri Pirko)  [Orabug: 35290200]  
  - mlxsw: core: Register devlink instance before sub-objects (Ido Schimmel)  [Orabug: 35290200]  
  - mlxsw: spectrum_acl_tcam: Move devlink param to TCAM code (Ido Schimmel)  [Orabug: 35290200]  
  - mlxsw: spectrum_acl_tcam: Reorder functions to avoid forward declarations (Ido Schimmel)  [Orabug: 35290200]  
  - mlxsw: spectrum_acl_tcam: Make fini symmetric to init (Ido Schimmel)  [Orabug: 35290200]  
  - mlxsw: spectrum_acl_tcam: Add missing mutex_destroy() (Ido Schimmel)  [Orabug: 35290200]  
  - mlxsw: spectrum: Remove pointless call to devlink_param_driverinit_value_set() (Danielle Ratson)  [Orabug: 35290200]  
  - net/mlx5: fw_tracer, Add support for unrecognized string (Shay Drory)  [Orabug: 35290200]  
  - net/mlx5: fw_tracer, Add support for strings DB update event (Shay Drory)  [Orabug: 35290200]  
  - net/mlx5: fw_tracer, allow 0 size string DBs (Shay Drory)  [Orabug: 35290200]  
  - net/mlx5: fs, Remove redundant assignment of size (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: fs_core, Remove redundant variable err (Maor Dickman)  [Orabug: 35290200]  
  - net/mlx5e: Remove incorrect debugfs_create_dir NULL check in TLS (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5e: Remove incorrect debugfs_create_dir NULL check in hairpin (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5: fs, Remove redundant vport_number assignment (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: Remove redundant code for handling vlan actions (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: Don't listen to remove flows event (Leon Romanovsky)  [Orabug: 35290200]  
  - net/mlx5: fw reset: Skip device ID check if PCI link up failed (Moshe Shemesh)  [Orabug: 35290200]  
  - net/mlx5: Remove redundant health work lock (Shay Drory)  [Orabug: 35290200]  
  - mlx5: reduce stack usage in mlx5_setup_tc (Arnd Bergmann)  [Orabug: 35290200]  
  - net/mlx5e: Trigger NAPI after activating an SQ (Maxim Mikityanskiy)  [Orabug: 35290200]  
  - net/mlx5e: IPsec, support upper protocol selector field offload (Raed Salem)  [Orabug: 35290200]  
  - net/mlx5e: IPoIB, Add support for XDR speed (Dragos Tatulea)  [Orabug: 35290200]  
  - net/mlx5: Add firmware support for MTUTC scaled_ppm frequency adjustments (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Document support for RoCE HCA disablement capability (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Add counter information to mlx5 driver documentation (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Document previously implemented mlx5 tracepoints (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Update Kconfig parameter documentation (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Separate mlx5 driver documentation into multiple pages (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Lag, Move mpesw related definitions to mpesw.h (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: Lag, Use flag to check for shared FDB mode (Mark Bloch)  [Orabug: 35290200]  
  - net/mlx5: Lag, Remove redundant bool allocation on the stack (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: Lag, Use mlx5_lag_dev() instead of derefering pointers (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: Lag, Update multiport eswitch check to log an error (Roi Dayan)  [Orabug: 35290200]  
  - devlink: Move devlink dev reload code to dev (Moshe Shemesh)  [Orabug: 35290200]  
  - devlink: Split out dev get and dump code (Moshe Shemesh)  [Orabug: 35290200]  
  - net: flow_offload: provision conntrack info in ct_metadata (Vlad Buslov)  [Orabug: 35290200]  
  - devlink: rename and reorder instances of struct devlink_cmd (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove "gen" from struct devlink_gen_cmd name (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: rename devlink_nl_instance_iter_dump() to "dumpit" (Jiri Pirko)  [Orabug: 35290200]  
  - selftests: mlxsw: qos_defprio: Convert from lldptool to dcb (Petr Machata)  [Orabug: 35290200]  
  - selftests: mlxsw: qos_dscp_router: Convert from lldptool to dcb (Petr Machata)  [Orabug: 35290200]  
  - selftests: mlxsw: qos_dscp_bridge: Convert from lldptool to dcb (Petr Machata)  [Orabug: 35290200]  
  - docs: ftrace: always use canonical ftrace path (Ross Zwisler)  [Orabug: 35290200]  
  - net/mlx5e: kTLS, Improve connection rate by using fast update encryption key (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Keep only one bulk of full available DEKs (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add async garbage collector for DEK bulk (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Reuse DEKs after executing SYNC_CRYPTO command (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Use bulk allocation for fast update encryption key (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add bulk allocation and modify_dek operation (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add support SYNC_CRYPTO command (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add new APIs for fast update encryption key (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Refactor the encryption key creation (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add const to the key pointer of encryption key creation (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Prepare for fast crypto key update if hardware supports it (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Change key type to key purpose (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add IFC bits and enums for crypto key (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Add IFC bits for general obj create param (Jianbo Liu)  [Orabug: 35290200]  
  - net/mlx5: Header file for crypto (Tariq Toukan)  [Orabug: 35290200]  
  - RDMA/mlx5: Remove implicit ODP cache entry (Aharon Landau)  [Orabug: 35290200]  
  - RDMA/mlx5: Don't keep umrable 'page_shift' in cache entries (Aharon Landau)  [Orabug: 35290200]  
  - net/mlx5: Move eswitch port metadata devlink param to flow eswitch code (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5: Move flow steering devlink param to flow steering code (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5: Move fw reset devlink param to fw reset code (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: protect devlink param list by instance lock (Jiri Pirko)  [Orabug: 35290200]  
  - qed: remove pointless call to devlink_param_driverinit_value_set() (Jiri Pirko)  [Orabug: 35290200]  
  - ice: remove pointless calls to devlink_param_driverinit_value_set() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove devlink features (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: send objects notifications during devlink reload (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: move devlink reload notifications back in between _down() and _up() calls (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: put couple of WARN_ONs in devlink_param_driverinit_value_get() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: make devlink_param_driverinit_value_set() return void (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: don't work with possible NULL pointer in devlink_param_unregister() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: make devlink_param_register/unregister static (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5: Covert devlink params registration to use devlink_params_register/unregister() (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5: Change devlink param register/unregister function names (Jiri Pirko)  [Orabug: 35290200]  
  - netdevsim: Fill IPsec state validation failure reason (Leon Romanovsky)  [Orabug: 35290200]  
  - net/mlx5e: Fill IPsec state validation failure reason (Leon Romanovsky)  [Orabug: 35290200]  
  - xfrm: extend add state callback to set failure reason (Leon Romanovsky)  [Orabug: 35290200]  
  - net/mlx5e: Fill IPsec policy validation failure reason (Leon Romanovsky)  [Orabug: 35290200]  
  - xfrm: extend add policy callback to set failure reason (Leon Romanovsky)  [Orabug: 35290200]  
  - Documentation: kprobetrace: Fix some typos (Yoann Congal)  [Orabug: 35290200]  
  - net/mlx5e: Support RX XDP metadata (Toke Høiland-Jørgensen)  [Orabug: 35290200]  
  - net/mlx5e: Introduce wrapper for xdp_buff (Toke Høiland-Jørgensen)  [Orabug: 35290200]  
  - xsk: Add cb area to struct xdp_buff_xsk (Toke Høiland-Jørgensen)  [Orabug: 35290200]  
  - net/mlx4_en: Support RX XDP metadata (Stanislav Fomichev)  [Orabug: 35290200]  
  - net/mlx4_en: Introduce wrapper for xdp_buff (Stanislav Fomichev)  [Orabug: 35290200]  
  - mlxsw: Add support of latency TLV (Amit Cohen)  [Orabug: 35290200]  
  - mlxsw: core: Define latency TLV fields (Amit Cohen)  [Orabug: 35290200]  
  - mlxsw: emad: Add support for latency TLV (Amit Cohen)  [Orabug: 35290200]  
  - mlxsw: core: Do not worry about changing 'enable_string_tlv' while sending EMADs (Amit Cohen)  [Orabug: 35290200]  
  - mlxsw: Enable string TLV usage according to MGIR output (Amit Cohen)  [Orabug: 35290200]  
  - mlxsw: reg: Add TLV related fields to MGIR register (Amit Cohen)  [Orabug: 35290200]  
  - net: Remove C45 check in C22 only MDIO bus drivers (Andrew Lunn)  [Orabug: 35290200]  
  - net/mlx5: Remove MLX5E_LOCKED_FLOW flag (Jiri Pirko)  [Orabug: 35290200]  
  - net/mlx5e: Create separate devlink instance for ethernet auxiliary device (Jiri Pirko)  [Orabug: 35290200]  
  - bitfield: add FIELD_PREP_CONST() (Johannes Berg)  [Orabug: 35290200]  
  - net/mlx5e: Use read lock for eswitch get callbacks (Leon Romanovsky)  [Orabug: 35290200]  
  - net/mlx5e: Remove redundant allocation of spec in create indirect fwd group (Maor Dickman)  [Orabug: 35290200]  
  - net/mlx5e: Support Geneve and GRE with VF tunnel offload (Maor Dickman)  [Orabug: 35290200]  
  - net/mlx5: E-Switch, Fix typo for egress (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: Warn when destroying mod hdr hash table that is not empty (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: TC, Use common function allocating flow mod hdr or encap mod hdr (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: TC, Add tc prefix to attach/detach hdr functions (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: TC, Pass flow attr to attach/detach mod hdr functions (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5e: Add warning when log WQE size is smaller than log stride size (Adham Faris)  [Orabug: 35290200]  
  - net/mlx5e: Fail with messages when params are not valid for XSK (Adham Faris)  [Orabug: 35290200]  
  - net/mlx5: E-switch, Remove redundant comment about meta rules (Roi Dayan)  [Orabug: 35290200]  
  - net/mlx5: Add hardware extended range support for PTP adjtime and adjphase (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Add adjphase function to support hardware-only offset control (Rahul Rameshbabu)  [Orabug: 35290200]  
  - net/mlx5: Suppress error logging on UCTX creation (Yishai Hadas)  [Orabug: 35290200]  
  - net/mlx5e: Suppress Send WQEBB room warning for PAGE_SIZE >= 16KB (Rahul Rameshbabu)  [Orabug: 35290200]  
  - RDMA/mlx: Calling qp event handler in workqueue context (Mark Zhang)  [Orabug: 35290200]  
  - net/mlx5: Introduce CQE error syndrome (Patrisious Haddad)  [Orabug: 35290200]  
  - net/mlx5e: Use kzalloc() in mlx5e_accel_fs_tcp_create() (YueHaibing)  [Orabug: 35290200]  
  - net/mlx5: remove redundant ret variable (zhang songyi)  [Orabug: 35290200]  
  - net/mlx5e: Replace 0-length array with flexible array (Kees Cook)  [Orabug: 35290200]  
  - net/mlx5e: Replace zero-length array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 35290200]  
  - net/mlx5: Prevent high-rate FW commands from populating all slots (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5: Introduce and use opcode getter in command interface (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5: Enable management PF initialization (Shay Drory)  [Orabug: 35290200]  
  - net/mlx5e: Add hairpin debugfs files (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5e: Add flow steering debugfs directory (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5e: Add hairpin params structure (Gal Pressman)  [Orabug: 35290200]  
  - net/mlx5e: kTLS, Add debugfs (Tariq Toukan)  [Orabug: 35290200]  
  - net/mlx5e: Add Ethernet driver debugfs (Gal Pressman)  [Orabug: 35290200]  
  - thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function (Daniel Lezcano)  [Orabug: 35290200]  
  - netdevsim: Fix memory leak of nsim_dev->fa_cookie (Wang Yufen)  [Orabug: 35290200]  
  - platform/x86: use PLATFORM_DEVID_NONE instead of -1 (Barnabás Pőcze)  [Orabug: 35290200]  
  - netdevsim: remove redundant variable ret (Jinpeng Cui)  [Orabug: 35290200]  
  - thermal/core: Add missing EXPORT_SYMBOL_GPL (Daniel Lezcano)  [Orabug: 35290200]  
  - thermal/core: Add thermal_trip in thermal_zone (Daniel Lezcano)  [Orabug: 35290200]  
  - thermal/of: Move thermal_trip structure to thermal.h (Daniel Lezcano)  [Orabug: 35290200]  
  - thermal/of: Remove the device node pointer for thermal_trip (Daniel Lezcano)  [Orabug: 35290200]  
  - thermal/of: Replace device node match with device node search (Daniel Lezcano)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add COME board revision register (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add support for new system XH3000 (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Introduce support for COMe NVSwitch management module for Vulcan chassis (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add support for systems equipped with two ASICs (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add cosmetic changes for alignment (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Make activation of some drivers conditional (Vadim Pasternak)  [Orabug: 35290200]  
  - Revert "workqueue: remove unused cancel_work()" (Andrey Grodzovsky)  [Orabug: 35290200]  
  - RDMA/mlx4: Avoid flush_scheduled_work() usage (Tetsuo Handa)  [Orabug: 35290200]  
  - netdevsim: Introduce support for L3 offload xstats (Petr Machata)  [Orabug: 35290200]  
  - parisc: Drop ifdef __KERNEL__ from non-uapi kernel headers (Helge Deller)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add support for new system SGN2410 (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add BIOS attributes for CoffeeLake COMEx based systems (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Extend FAN and LED configuration to support new MQM97xx systems (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add support for multiply cooling devices (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Configure notifier callbacks for modular system (Vadim Pasternak)  [Orabug: 35290200]  
  - platform/x86: mlx-platform: Add initial support for new modular system (Vadim Pasternak)  [Orabug: 35290200]  
  - bpf: Add __bpf_kfunc tag for marking kernel functions as kfuncs (David Vernet)  [Orabug: 35290200]  
  - xdp: bpf_xdp_metadata use EOPNOTSUPP for no driver support (Jesper Dangaard Brouer)  [Orabug: 35290200]  
  - bpf: XDP metadata RX kfuncs (Stanislav Fomichev)  [Orabug: 35290200]  
  - bpf: Populate kfunc BTF ID sets in struct btf (Kumar Kartikeya Dwivedi)  [Orabug: 35290200]  
  - bpf: Introduce btf_tracing_ids (Song Liu)  [Orabug: 35290200]  
  - bpf: Extend BTF_ID_LIST_GLOBAL with parameter for number of IDs (Song Liu)  [Orabug: 35290200]  
  - tools/resolve_btfids: Add support for 8-byte BTF sets (Kumar Kartikeya Dwivedi)  [Orabug: 35290200]  
  - tools/resolve_btfids: Skip unresolved symbol warning for empty BTF sets (Kumar Kartikeya Dwivedi)  [Orabug: 35290200]  
  - bpf: Introduce 8-byte BTF set (Kumar Kartikeya Dwivedi)  [Orabug: 35290200]  
  - compiler_types.h: Add unified __diag_ignore_all for GCC/LLVM (Kumar Kartikeya Dwivedi)  [Orabug: 35290200]  
  - bpf: generalise tail call map compatibility check (Toke Hoiland-Jorgensen)  [Orabug: 35290200]  
  - bpf: Introduce helper bpf_find_vma (Song Liu)  [Orabug: 35290200]  
  - bpf: Replace callers of BPF_CAST_CALL with proper function typedef (Kees Cook)  [Orabug: 35290200]  
  - bpf: btf: Introduce helpers for dynamic BTF set registration (Kumar Kartikeya Dwivedi)  [Orabug: 35290200]  
  - bpf: Replace "want address" users of BPF_CAST_CALL with BPF_CALL_IMM (Kees Cook)  [Orabug: 35290200]  
  - selftests/bpf: Update expected test_offload.py messages (Stanislav Fomichev)  [Orabug: 35290200]  
  - bpf: Introduce device-bound XDP programs (Stanislav Fomichev)  [Orabug: 35290200]  
  - bpf: Reshuffle some parts of bpf/offload.c (Stanislav Fomichev)  [Orabug: 35290200]  
  - bpf: Move offload initialization into late_initcall (Stanislav Fomichev)  [Orabug: 35290200]  
  - bpf: Rename bpf_{prog,map}_is_dev_bound to is_offloaded (Stanislav Fomichev)  [Orabug: 35290200]  
  - bpf: Document XDP RX metadata (Stanislav Fomichev)  [Orabug: 35290200]  
  - kallsyms: Skip the name search for empty string (Jiri Olsa)  [Orabug: 35290200]  
  - lib/sort: Add priv pointer to swap function (Jiri Olsa)  [Orabug: 35290200]  
  - fprobe: Add a selftest for fprobe (Masami Hiramatsu)  [Orabug: 35290200]  
  - docs: fprobe: Add fprobe description to ftrace-use.rst (Masami Hiramatsu)  [Orabug: 35290200]  
  - fprobe: Introduce FPROBE_FL_KPROBE_SHARED flag for fprobe (Masami Hiramatsu)  [Orabug: 35290200]  
  - fprobe: Add sample program for fprobe (Masami Hiramatsu)  [Orabug: 35290200]  
  - fprobe: Add exit_handler support (Masami Hiramatsu)  [Orabug: 35290200]  
  - ARM: rethook: Add rethook arm implementation (Masami Hiramatsu)  [Orabug: 35290200]  
  - powerpc: Add rethook support (Masami Hiramatsu)  [Orabug: 35290200]  
  - rethook: x86: Add rethook x86 implementation (Masami Hiramatsu)  [Orabug: 35290200]  
  - rethook: Add a generic return hook (Masami Hiramatsu)  [Orabug: 35290200]  
  - fprobe: Add ftrace based probe APIs (Masami Hiramatsu)  [Orabug: 35290200]  
  - ftrace: Add ftrace_set_filter_ips function (Jiri Olsa)  [Orabug: 35290200]  
  - ARM: Recover kretprobe modified return address in stacktrace (Masami Hiramatsu)  [Orabug: 35290200]  
  - ARM: kprobes: Make a frame pointer on __kretprobe_trampoline (Masami Hiramatsu)  [Orabug: 35290200]  
  - arm64: Recover kretprobe modified return address in stacktrace (Masami Hiramatsu)  [Orabug: 35290200]  
  - arm64: kprobes: Make a frame pointer on __kretprobe_trampoline (Masami Hiramatsu)  [Orabug: 35290200]  
  - arm64: kprobes: Record frame pointer with kretprobe instance (Masami Hiramatsu)  [Orabug: 35290200]  
  - x86/unwind: Compile kretprobe fixup code only if CONFIG_KRETPROBES=y (Masami Hiramatsu)  [Orabug: 35290200]  
  - sched: Move kprobes cleanup out of finish_task_switch() (Thomas Gleixner)  [Orabug: 35290200]  
  - x86/kprobes: Fixup return address in generic trampoline handler (Masami Hiramatsu)  [Orabug: 35290200]  
  - tracing: Show kretprobe unknown indicator only for kretprobe_trampoline (Masami Hiramatsu)  [Orabug: 35290200]  
  - x86/unwind: Recover kretprobe trampoline entry (Masami Hiramatsu)  [Orabug: 35290200]  
  - x86/kprobes: Push a fake return address at kretprobe_trampoline (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: Enable stacktrace from pt_regs in kretprobe handler (Masami Hiramatsu)  [Orabug: 35290200]  
  - arm: kprobes: Make space for instruction pointer on stack (Masami Hiramatsu)  [Orabug: 35290200]  
  - ia64: Add instruction_pointer_set() API (Masami Hiramatsu)  [Orabug: 35290200]  
  - ARC: Add instruction_pointer_set() API (Masami Hiramatsu)  [Orabug: 35290200]  
  - x86/kprobes: Add UNWIND_HINT_FUNC on kretprobe_trampoline() (Josh Poimboeuf)  [Orabug: 35290200]  
  - objtool: Ignore unwind hints for ignored functions (Josh Poimboeuf)  [Orabug: 35290200]  
  - kprobes: Add kretprobe_find_ret_addr() for searching return address (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: treewide: Make it harder to refer kretprobe_trampoline directly (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: treewide: Remove trampoline_address from kretprobe_trampoline_handler() (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: treewide: Replace arch_deref_entry_point() with dereference_symbol_descriptor() (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: Use bool type for functions which returns boolean value (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: treewide: Use 'kprobe_opcode_t *' for the code address in get_optimized_kprobe() (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: Add assertions for required lock (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: Use IS_ENABLED() instead of kprobes_built_in() (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: Fix coding style issues (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: treewide: Cleanup the error messages for kprobes (Masami Hiramatsu)  [Orabug: 35290200]  
  - kprobes: Make arch_check_ftrace_location static (Punit Agrawal)  [Orabug: 35290200]  
  - csky: ftrace: Drop duplicate implementation of arch_check_ftrace_location() (Punit Agrawal)  [Orabug: 35290200]  
  - kprobe: Simplify prepare_kprobe() by dropping redundant version (Punit Agrawal)  [Orabug: 35290200]  
  - kprobes: Use helper to parse boolean input from userspace (Punit Agrawal)  [Orabug: 35290200]  
  - devlink: remove a dubious assumption in fmsg dumping (Jakub Kicinski)  [Orabug: 35290200]  
  - netlink: fix spelling mistake in dump size assert (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: add instance lock assertion in devl_is_registered() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove devlink_dump_for_each_instance_get() helper (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: convert reporters dump to devlink_nl_instance_iter_dump() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: convert linecards dump to devlink_nl_instance_iter_dump() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove reporter reference counting (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove devl*_port_health_reporter_destroy() (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove reporters_lock (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: protect health reporter operation with instance lock (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove linecard reference counting (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove linecards lock (Jiri Pirko)  [Orabug: 35290200]  
  - devlink: remove some unnecessary code (Dan Carpenter)  [Orabug: 35290200]  
  - devlink: keep the instance mutex alive until references are gone (Jakub Kicinski)  [Orabug: 35290200]  
  - netdevsim: move devlink registration under the instance lock (Jakub Kicinski)  [Orabug: 35290200]  
  - netdevsim: rename a label (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: allow registering parameters after the instance (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: don't require setting features before registration (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: remove the registration guarantee of references (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: always check if the devlink instance is registered (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: protect devlink->dev by the instance lock (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: update the code in netns move to latest helpers (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: bump the instance index directly when iterating (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: convert remaining dumps to the by-instance scheme (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: add by-instance dump infra (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: uniformly take the devlink instance lock in the dump loop (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: restart dump based on devlink instance ids (function) (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: restart dump based on devlink instance ids (nested) (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: restart dump based on devlink instance ids (simple) (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: health: combine loops in dump (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: drop the filter argument from devlinks_xa_find_get (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: remove start variables from dumps (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: use an explicit structure for dump context (Jakub Kicinski)  [Orabug: 35290200]  
  - netlink: add macro for checking dump ctx size (Jakub Kicinski)  [Orabug: 35290200]  
  - netfilter: ctnetlink: use dump structure instead of raw args (Florian Westphal)  [Orabug: 35290200]  
  - devlink: split out netlink code (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: split out core code (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: rename devlink_netdevice_event -> devlink_port_netdevice_event (Jakub Kicinski)  [Orabug: 35290200]  
  - devlink: move code to a dedicated directory (Jakub Kicinski)  [Orabug: 35290200]  
  - net: devlink: convert port_list into xarray (Jiri Pirko)  [Orabug: 35290200]  
  - genetlink: introduce split op representation (Jakub Kicinski)  [Orabug: 35290200]  
  - genetlink: fix kdoc warnings (Jakub Kicinski)  [Orabug: 35290200]  
  - net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types (Ahmed S. Darwish)  [Orabug: 35290200]  
  - net: sched: Use _bstats_update/set() instead of raw writes (Ahmed S. Darwish)  [Orabug: 35290200]  
  - net: sched: Protect Qdisc::bstats with u64_stats (Ahmed S. Darwish)  [Orabug: 35290200]  
  - net/sched: sch_ets: properly init all active DRR list handles (Davide Caratti)  [Orabug: 35290200]  
  - u64_stats: Introduce u64_stats_set() (Ahmed S. Darwish)  [Orabug: 35290200]  
  - gen_stats: Move remaining users to gnet_stats_add_queue(). (Sebastian Andrzej Siewior)  [Orabug: 35290200]  
  - mq, mqprio: Use gnet_stats_add_queue(). (Sebastian Andrzej Siewior)  [Orabug: 35290200]  
  - gen_stats: Add gnet_stats_add_queue(). (Sebastian Andrzej Siewior)  [Orabug: 35290200]  
  - gen_stats: Add instead Set the value in __gnet_stats_copy_basic(). (Sebastian Andrzej Siewior)  [Orabug: 35290200]  
  - net/mlx5: Free IRQ rmap and notifier on kernel shutdown (Saeed Mahameed)   
  - Revert "net/rds: Change c_net field to possible_net_t" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Add basic support for network namespaces" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Use per-namespace bind hash tables" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Use per-namespace connection hash tables" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Monitor socket congestion per network namespace" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Track "rds" module statistics per network namespace" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Track "rds_tcp" module statistics per network namespace" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Use per-namespace connection lists in "rds_tcp"" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Use per-namespace loopback connection lists" (Greg Jumper)  [Orabug: 35811165]  
  - Revert "net/rds: Restrict use of RDS/IB to the initial network namespace" (Greg Jumper)  [Orabug: 35811165]  
  - Disallow file map THP creation at fault time if transparent_hugepage is 'never' (Prakash Sangappa)  [Orabug: 35810398]  
  - platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications (Shih-Yi Chen)  [Orabug: 35782760]  
  - platform/mellanox: fix potential race in mlxbf-tmfifo driver (Liming Sun)  [Orabug: 35782760]  
  - uek-rpm: Bluefield 3: Disable CONFIG_NUMA (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "platform/mellanox: Updates to mlxbf-pmc" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf_pmc: Fix references to sprintf" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-pmc: Fix error when reading unprogrammed events" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-pmc: Support for BlueField-3 performance counters" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-pmc: Bug fix for BlueField-3 counter offsets" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-ptm: power and thermal management debugfs driver" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-ptm: update license" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-ptm: use 0444 instead of S_IRUGO" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-ptm: add atx debugfs nodes" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-ptm: update module version" (Dave Kleikamp)  [Orabug: 35782760]  
  - uek-rpm: Bluefield 3: Remove mlxbf-pmc driver (Dave Kleikamp)  [Orabug: 35782760]  
  - mlxbf-bootctl: Support sysfs entries for MFG fields (David Thompson)  [Orabug: 35782760]  
  - mlxbf-bootctl: Support setting the ARM boot state to "OS up" (Asmaa Mnebhi)  [Orabug: 35782760]  
  - mlxbf-bootctl: Support the large icmc write/read (Asmaa Mnebhi)  [Orabug: 35782760]  
  - mlxbf-bootctl: Add sysfs file for BlueField boot log (Liming Sun)  [Orabug: 35782760]  
  - mlxbf-bootctl: Add sysfs file for BlueField boot fifo (Liming Sun)  [Orabug: 35782760]  
  - platform/mellanox: add firmware reset support (Khalil Blaiech)  [Orabug: 35782760]  
  - Revert "platform/mellanox: Updates to mlxbf-bootctl" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlx-bootctl: support icm carveout eeprom region read/write" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-bootctl: support SMC call for setting ARM boot state" (Dave Kleikamp)  [Orabug: 35782760]  
  - Revert "mlxbf-bootctl: Fix kernel panic due to buffer overflow" (Dave Kleikamp)  [Orabug: 35782760]  
  - mmc: sdhci-of-dwcmshc: Add runtime PM operations (Liming Sun)  [Orabug: 35782760]  
  - mmc: sdhci-of-dwcmshc: Add error handling in dwcmshc_resume (Liming Sun)  [Orabug: 35782760]  
  - mmc: sdhci-of-dwcmshc: Update DLL and pre-change delay for rockchip platform (Shawn Lin)  [Orabug: 35782760]  
  - mmc: sdhci-of-dwcmshc: add support for rk3588 (Yifeng Zhao)  [Orabug: 35782760]  
  - Revert "mmc: sdhci-of-dwcmshc: Add runtime PM operations for BlueField-3" (Dave Kleikamp)  [Orabug: 35782760]  
  - net: mana: use vmalloc_array and vcalloc (Julia Lawall)  [Orabug: 35664334]  
  - RDMA/mana_ib: Use v2 version of cfg_rx_steer_req to enable RX coalescing (Long Li)  [Orabug: 35664334]  
  - RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (Long Li)  [Orabug: 35664334]  
  - RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (Dan Carpenter)  [Orabug: 35664334]  
  - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Check if netdev/napi_alloc_frag returns single page (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Rename mana_refill_rxoob and remove some empty lines (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Add support for jumbo frame (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Enable RX path to handle various MTU sizes (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Refactor RX buffer allocation code to prepare for various MTU (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Use napi_build_skb in RX path (Haiyang Zhang)  [Orabug: 35664334]  
  - net: mana: Remove redundant pci_clear_master (Cai Huoqing)  [Orabug: 35664334]  
  - net: mana: Add new MANA VF performance counters for easier troubleshooting (Shradha Gupta)  [Orabug: 35664334]  
  - RDMA/mana: Remove redefinition of basic u64 type (Leon Romanovsky)  [Orabug: 35664334]  
  - net: mana: Define data structures for allocating doorbell page from GDMA (Long Li)  [Orabug: 35664334]  
  - RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (Long Li)  [Orabug: 35664334]  
  - net: mana: Fix return type of mana_start_xmit() (Nathan Huckleberry)  [Orabug: 35664334]  
  - net: mana: Define data structures for protection domain and memory registration (Ajay Sharma)  [Orabug: 35664334]  
  - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (Ajay Sharma)  [Orabug: 35664334]  
  - net: mana: Define max values for SGL entries (Long Li)  [Orabug: 35664334]  
  - net: mana: Move header files to a common location (Long Li)  [Orabug: 35664334]  
  - net: mana: Record port number in netdev (Long Li)  [Orabug: 35664334]  
  - net: mana: Export Work Queue functions for use by RDMA driver (Long Li)  [Orabug: 35664334]  
  - net: mana: Set the DMA device max segment size (Ajay Sharma)  [Orabug: 35664334]  
  - net: mana: Handle vport sharing between devices (Long Li)  [Orabug: 35664334]  
  - net: mana: Record the physical address for doorbell page region (Long Li)  [Orabug: 35664334]  
  - net: mana: Add support for auxiliary device (Long Li)  [Orabug: 35664334]  
  - scsi: qla2xxx: Update version to 10.02.09.100-k (Nilesh Javali)  [Orabug: 35733157]  
  - scsi: qla2xxx: Allow 32-byte CDBs (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Move resource to allow code reuse (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (Nilesh Javali)  [Orabug: 35733157]  
  - scsi: qla2xxx: Remove unsupported ql2xenabledif option (Manish Rangankar)  [Orabug: 35733157]  
  - scsi: qla2xxx: Error code did not return to upper layer (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Add logs for SFP temperature monitoring (Bikash Hazarika)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix firmware resource tracking (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Flush mailbox commands on chip reset (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Update version to 10.02.08.500-k (Nilesh Javali)  [Orabug: 35733157]  
  - scsi: qla2xxx: fix inconsistent TMF timeout (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Turn off noisy message log (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix session hang in gnl (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix erroneous link up failure (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Adjust IOCB resource on qpair create (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix deletion race condition (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Update version to 10.02.08.400-k (Nilesh Javali)  [Orabug: 35733157]  
  - scsi: qla2xxx: Drop useless LIST_HEAD (Christophe JAILLET)  [Orabug: 35733157]  
  - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (Gustavo A. R. Silva)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix end of loop test (Dan Carpenter)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix NULL pointer dereference in target mode (Gleb Chesnokov)  [Orabug: 35733157]  
  - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh)  [Orabug: 35733157]  
  - scsi: qla2xxx: Update version to 10.02.08.300-k (Nilesh Javali)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix mem access after free (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Remove default fabric ops callouts (Dmitry Bogdanov)  [Orabug: 35733157]  
  - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (Bjorn Helgaas)  [Orabug: 35733157]  
  - scsi: qla2xxx: Add option to disable FC2 Target support (Daniel Wagner)  [Orabug: 35733157]  
  - scsi: qla2xxx: Remove the unused variable wwn (Jiapeng Chong)  [Orabug: 35733157]  
  - scsi: qla2xxx: Simplify if condition evaluation (Deepak R Varma)  [Orabug: 35733157]  
  - scsi: qla2xxx: Use a variable for repeated mem_size computation (Deepak R Varma)  [Orabug: 35733157]  
  - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (Tom Rix)  [Orabug: 35733157]  
  - scsi: qla2xxx: Fix printk() format string (Arnd Bergmann)  [Orabug: 35733157]  
  - scsi: qla2xxx: Update version to 10.02.08.200-k (Nilesh Javali)  [Orabug: 35733157]  
  - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (Shreyas Deodhar)  [Orabug: 35733157]  
  - scsi: qla2xxx: edif: Fix clang warning (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: edif: Reduce memory usage during low I/O (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: edif: Fix stall session after app start (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: edif: Fix performance dip due to lock contention (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Relocate/rename vp map (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Remove dead code (GNN ID) (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Remove dead code (GPNID) (Quinn Tran)  [Orabug: 35733157]  
  - scsi: qla2xxx: Remove dead code (Quinn Tran)  [Orabug: 35733157]  
  - net: mana: Add support for vlan tagging (Haiyang Zhang)  [Orabug: 35496502]  
  - wifi: brcmfmac: support brcm,ccode-map-trivial DT property (Alvin Šipraga)  [Orabug: 35435347]  
  - wifi: brcmfmac: Use ISO3166 country code and rev 0 as fallback on 43430 (Hans de Goede)  [Orabug: 35435347]  
  - brcmfmac: use ISO3166 country code and 0 rev as fallback on some devices (Hans de Goede)  [Orabug: 35435347]  
  - uek-rpm/aarch64: Enable CONFIG_I2C_MUX_PINCTRL for RPi (Vijay Kumar)  [Orabug: 35609812]  
  - cpufreq: amd-pstate: Enable amd-pstate (Henry Willard)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add a kernel config option to set default mode (Mario Limonciello)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (Mario Limonciello)  [Orabug: 35617133]  
  - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (Mario Limonciello)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Write CPPC enable bit per-socket (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add ->fast_switch() callback (Gautham R. Shenoy)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Make varaiable mode_state_machine static (Tom Rix)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add guided mode control support via sysfs (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add guided autonomous mode (Wyes Karny)  [Orabug: 35617133]  
  - ACPI: CPPC: Add auto select register read/write support (Wyes Karny)  [Orabug: 35617133]  
  - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (Wyes Karny)  [Orabug: 35617133]  
  - Documentation: introduce amd pstate active mode kernel command line options (Perry Yuan)  [Orabug: 35617133]  
  - Documentation: add amd-pstate kernel command line options (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (Nick Alcock)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Let user know amd-pstate is disabled (Kai-Heng Feng)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: avoid uninitialized variable use (Arnd Bergmann)  [Orabug: 35617133]  
  - cpufreq: Make cpufreq_unregister_driver() return void (Uwe Kleine-König)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: add driver working mode switch support (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: implement suspend and resume callbacks (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (Perry Yuan)  [Orabug: 35617133]  
  - ACPI: CPPC: Add AMD pstate energy performance preference cppc control (Perry Yuan)  [Orabug: 35617133]  
  - x86/msr: Add AMD CPPC MSR definitions (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add test module for amd-pstate driver (Meng Li)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (Wyes Karny)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Expose struct amd_cpudata (Meng Li)  [Orabug: 35617133]  
  - tools/power/x86/amd_pstate_tracer: Add tracer tool for AMD P-state (Jinzhou Su)  [Orabug: 35617133]  
  - MAINTAINERS: Add AMD P-State driver maintainer entry (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Fix initial highest_perf value (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: update pstate frequency transition delay time (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd_pstate: fix wrong lowest perf fetch (Perry Yuan)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: simplify cpudata pointer assignment (Perry Yuan)  [Orabug: 35617133]  
  - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (Perry Yuan)  [Orabug: 35617133]  
  - arch_topology: obtain cpu capacity using information from CPPC (Ionela Voinescu)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add resume and suspend callbacks (Jinzhou Su)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (Jinzhou Su)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (Yang Li)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add AMD P-State performance attributes (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add boost mode support for AMD P-State (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add trace for AMD P-State module (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Add fast switch function for AMD P-State (Huang Rui)  [Orabug: 35617133]  
  - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (Huang Rui)  [Orabug: 35617133]  
  - x86/cpufeatures: Add AMD Collaborative Processor Performance Control feature flag (Huang Rui)  [Orabug: 35617133]  
  - ACPI: CPPC: Add CPPC enable register function (Jinzhou Su)  [Orabug: 35617133]  
  - rds: lb: Initialize t_type for loop-back transport to avoid ambiguity (Håkon Bugge)  [Orabug: 35703698]  
  - nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices (Christoph Hellwig)  [Orabug: 35683572]  
  - uek-rpm: Build embedded kernel for Bluefield 3 smartnic (Dave Kleikamp)  [Orabug: 35653899]  
  - mlxbf-bootctl: Fix kernel panic due to buffer overflow (David Thompson)  [Orabug: 35653899]  
  - mlxbf-bootctl: support SMC call for setting ARM boot state (Asmaa Mnebhi)  [Orabug: 35653899]  
  - mlxbf-ptm: update module version (Jitendra Lanka)  [Orabug: 35653899]  
  - mlxbf-ptm: add atx debugfs nodes (Jitendra Lanka)  [Orabug: 35653899]  
  - mlxbf-ptm: use 0444 instead of S_IRUGO (Jitendra Lanka)  [Orabug: 35653899]  
  - mlxbf-ptm: update license (Jitendra Lanka)  [Orabug: 35653899]  
  - mmc: sdhci-of-dwcmshc: Add runtime PM operations for BlueField-3 (David Thompson)  [Orabug: 35653899]  
  - mlxbf-ptm: power and thermal management debugfs driver (David Thompson)  [Orabug: 35653899]  
  - mlxbf-pmc: Bug fix for BlueField-3 counter offsets (David Thompson)  [Orabug: 35653899]  
  - mlxbf-pmc: Support for BlueField-3 performance counters (David Thompson)  [Orabug: 35653899]  
  - mlxbf-pmc: Fix error when reading unprogrammed events (David Thompson)  [Orabug: 35653899]  
  - mlxbf_pmc: Fix references to sprintf (David Thompson)  [Orabug: 35653899]  
  - platform/mellanox: Updates to mlxbf-pmc (David Thompson)  [Orabug: 35653899]  
  - mlx-bootctl: support icm carveout eeprom region read/write (David Thompson)  [Orabug: 35653899]  
  - platform/mellanox: Updates to mlxbf-bootctl (David Thompson)  [Orabug: 35653899]  
  - gpio: mmio: handle "ngpios" properly in bgpio_init() (Asmaa Mnebhi)  [Orabug: 35653899]  
  - gpio: mlxbf3: Add gpio driver support (Asmaa Mnebhi)  [Orabug: 35653899]  
  - pinctrl: mlxbf3: set varaiable mlxbf3_pmx_funcs storage-class-specifier to static (Tom Rix)  [Orabug: 35653899]  
  - pinctrl: mlxbf3: Add pinctrl driver support (Asmaa Mnebhi)  [Orabug: 35653899]  
  - mmc: sdhci-of-dwcmshc: add the missing device table IDs for acpi (Liming Sun)  [Orabug: 35653899]  
  - mmc: sdhci-of-dwcmshc: enable host V4 support for BlueField-3 SoC (Liming Sun)  [Orabug: 35653899]  
  - mlxbf_gige: fix white space in mlxbf_gige_eth_ioctl (David Thompson)  [Orabug: 35653899]  
  - mlxbf_gige: add "set_link_ksettings" ethtool callback (David Thompson)  [Orabug: 35653899]  
  - mlxbf_gige: support 10M/100M/1G speeds on BlueField-3 (David Thompson)  [Orabug: 35653899]  
  - mlxbf_gige: add MDIO support for BlueField-3 (David Thompson)  [Orabug: 35653899]  
  - pinctrl: Introduce struct pinfunction and PINCTRL_PINFUNCTION() macro (Andy Shevchenko)  [Orabug: 35653899]  
  - net/sched: introduce flow_offload action cookie (Oz Shlomo)  [Orabug: 35653899]  
  - net/sched: cls_api: Fix flow action initialization (Oz Shlomo)  [Orabug: 35653899]  
  - tick/rcu: Fix bogus ratelimit condition (Wen Yang)  [Orabug: 35653899]  
  - tick/rcu: Stop allowing RCU_SOFTIRQ in idle (Frederic Weisbecker)  [Orabug: 35653899]  
  - uek-rpm: Enable CONFIG_NVME_AUTH and CONFIG_NVME_TARGET_AUTH (Alan Adamson)  [Orabug: 35449881]  
  - rds: ib: Tune ring_mid_permille on BM machines (Håkon Bugge)  [Orabug: 35349756]  
  - uek-misc: Add uek_runs_in_kvm (Håkon Bugge)  [Orabug: 35349756]  
  - rds: ib: Make ring_{low,mid} parametrizable (Håkon Bugge)  [Orabug: 35349756]  
  - rds: ib: Attempt to refill recv when send lock is busy (Håkon Bugge)  [Orabug: 35349756]  
  - net/rds: Add rds_ib_ring_mid() (Ankur Arora)  [Orabug: 35349756]  
  - rds: Avoid priority inversion whilst queuing recv worker (Håkon Bugge)  [Orabug: 35349756]  
  - Attempt to create THP page for mapped executable text at fault time. (Prakash Sangappa)  [Orabug: 35207805]  
  - nvmet: fix a memory leak in nvmet_auth_set_key (Sagi Grimberg)  [Orabug: 35450713]  
  - nvme: quiet user passthrough command errors (Keith Busch)  [Orabug: 35450713]  
  - nvme-multipath: set queue dma alignment to 3 (Keith Busch)  [Orabug: 35450713]  
  - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (Sagi Grimberg)  [Orabug: 35450713]  
  - nvme-tcp: replace sg_init_marker() with sg_init_table() (Nam Cao)  [Orabug: 35450713]  
  - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (Daniel Wagner)  [Orabug: 35450713]  
  - nvme-apple: don't limit DMA segement size (Russell King (Oracle))  [Orabug: 35450713]  
  - nvme-tcp: fix possible hang caused during ctrl deletion (Sagi Grimberg)  [Orabug: 35450713]  
  - nvme-rdma: fix possible hang caused during ctrl deletion (Sagi Grimberg)  [Orabug: 35450713]  
  - nvmet: add helpers to set the result field for connect commands (Christoph Hellwig)  [Orabug: 35450713]  
  - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (Christoph Hellwig)  [Orabug: 35450713]  
  - nvmet-auth: don't try to cancel a non-initialized work_struct (Christoph Hellwig)  [Orabug: 35450713]  
  - nvmet-tcp: remove nvmet_tcp_finish_cmd (zhenwei pi)  [Orabug: 35450713]  
  - nvmet-tcp: handle ICReq PDU received in NVMET_TCP_Q_LIVE state (Varun Prakash)  [Orabug: 35450713]  
  - nvmet-tcp: fix NULL pointer dereference during release (zhenwei pi)  [Orabug: 35450713]  
  - nvmet-tcp: don't map pages which can't come from HIGHMEM (Fabio M. De Francesco)  [Orabug: 35450713]  
  - nvme-pci: report the actual number of tagset maps (Keith Busch)  [Orabug: 35450713]  
  - nvme: send a rediscover uevent when a persistent discovery controller reconnects (Sagi Grimberg)  [Orabug: 35450713]  
  - nvme: enumerate controller flags (Sagi Grimberg)  [Orabug: 35450713]  
  - nvme-tcp: print actual source IP address through sysfs "address" attr (Martin Belanger)  [Orabug: 35450713]  
  - nvme: consider also host_iface when checking ip options (Daniel Wagner)  [Orabug: 35450713]  
  - nvme-rdma: handle number of queue changes (Daniel Wagner)  [Orabug: 35450713]  
  - nvme-tcp: handle number of queue changes (Daniel Wagner)  [Orabug: 35450713]  
  - nvmet: expose max queues to configfs (Daniel Wagner)  [Orabug: 35450713]  
  - nvmet-auth: remove redundant parameters req (Genjian Zhang)  [Orabug: 35450713]  
  - nvmet-auth: clean up with done_kfree (Jackie Liu)  [Orabug: 35450713]  
  - nvme-auth: remove the redundant req->cqe->result.u16 assignment operation (Jackie Liu)  [Orabug: 35450713]  
  - nvme: move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 35450713]  
  - nvme: add comment for unaligned "fake" nqn (Linjun Bao)  [Orabug: 35450713]  
  - net/rds: dont expose kernel address to usercopy (Devesh Sharma)  [Orabug: 35596878]  
  - net/rds: Perform pre-rdma_accept address sanity checks (Gerd Rausch)  [Orabug: 35663497]  
  - nvme-pci: disable Write Zeroes on Phison E3C/E4C (Tina Hsu)  [Orabug: 35450705]  
  - nvme: requeue aen after firmware activation (Keith Busch)  [Orabug: 35450705]  
  - nvmet-auth: add missing goto in nvmet_setup_auth() (Hannes Reinecke)  [Orabug: 35450705]  
  - nvme-tcp: check if the queue is allocated before stopping it (Maurizio Lombardi)  [Orabug: 35450705]  
  - nvme-fabrics: Fix a typo in an error message (Christophe JAILLET)  [Orabug: 35450705]  
  - nvme-fabrics: parse nvme connect Linux error codes (Amit Engel)  [Orabug: 35450705]  
  - nvmet-auth: use kmemdup instead of kmalloc + memcpy (Zhang Xiaoxu)  [Orabug: 35450705]  
  - nvme-fc: fix the fc_appid_store return value (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-fc: restart admin queue if the caller needs to restart queue (Ming Lei)  [Orabug: 35450705]  
  - nvme: enable generic interface (/dev/ngXnY) for unknown command sets (Joel Granados)  [Orabug: 35450705]  
  - nvme: factor out a nvme_ns_is_readonly helper (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme: refactor namespace probing (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme: generalize the nvme_multi_css check in nvme_scan_ns (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (Christoph Hellwig)  [Orabug: 35450705]  
  - nvmet-auth: select the intended CRYPTO_DH_RFC7919_GROUPS (Lukas Bulwahn)  [Orabug: 35450705]  
  - nvmet-auth: fix return value check in auth receive (Chaitanya Kulkarni)  [Orabug: 35450705]  
  - nvmet-auth: fix return value check in auth send (Chaitanya Kulkarni)  [Orabug: 35450705]  
  - nvmet-auth: fix a couple of spelling mistakes (Colin Ian King)  [Orabug: 35450705]  
  - nvmet: fix a format specifier in nvmet_auth_ctrl_exponential (Christoph Hellwig)  [Orabug: 35450705]  
  - nvmet: don't check for NULL pointer before kfree in nvmet_host_release (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-apple: stop casting function pointer signatures (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-tcp: split nvme_tcp_alloc_tagset (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-rdma: split nvme_rdma_alloc_tagset (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-pci: split nvme_dev_add (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-pci: split nvme_alloc_admin_tags (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-pci: print the command name of aborted commands (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-pci: remove useless assignment in nvme_pci_setup_prps (Liu Song)  [Orabug: 35450705]  
  - nvme-auth: uninitialized variable in nvme_auth_transform_key() (Dan Carpenter)  [Orabug: 35450705]  
  - nvme-auth: fix off by one checks (Dan Carpenter)  [Orabug: 35450705]  
  - nvme: don't always build constants.o (Christoph Hellwig)  [Orabug: 35450705]  
  - nvme-multipath: refactor nvme_mpath_add_disk (Joel Granados)  [Orabug: 35450705]  
  - nvme-apple: use nvme core helper to cancel requests in tagset (Guixin Liu)  [Orabug: 35450705]  
  - nvme-pci: use nvme core helper to cancel requests in tagset (Guixin Liu)  [Orabug: 35450705]  
  - nvme-tcp: use in-capsule data for I/O connect (Caleb Sander)  [Orabug: 35450705]  
  - nvme-rdma: remove timeout for getting RDMA-CM established event (Israel Rukshin)  [Orabug: 35450705]  
  - nvmet-auth: expire authentication sessions (Hannes Reinecke)  [Orabug: 35450705]  
  - nvmet-auth: Diffie-Hellman key exchange support (Hannes Reinecke)  [Orabug: 35450705]  
  - nvmet: implement basic In-Band Authentication (Hannes Reinecke)  [Orabug: 35450705]  
  - nvmet: parse fabrics commands on io queues (Hannes Reinecke)  [Orabug: 35450705]  
  - nvme-auth: Diffie-Hellman key exchange support (Hannes Reinecke)  [Orabug: 35450705]  
  - nvme: implement In-Band authentication (Hannes Reinecke)  [Orabug: 35450705]  
  - nvme: expose cntrltype and dctype through sysfs (Martin Belanger)  [Orabug: 35450705]  
  - nvme-fabrics: decode 'authentication required' connect error (Hannes Reinecke)  [Orabug: 35450705]  
  - nvme: add definitions for NVMe In-Band authentication (Hannes Reinecke)  [Orabug: 35450705]  
  - lib/base64: RFC4648-compliant base64 encoding (Hannes Reinecke)  [Orabug: 35450705]  
  - crypto: add crypto_has_kpp() (Hannes Reinecke)  [Orabug: 35450705]  
  - crypto: add crypto_has_shash() (Hannes Reinecke)  [Orabug: 35450705]  
  - nvme-loop: use nvme core helpers to cancel all requests in a tagset (Sagi Grimberg)  [Orabug: 35450705]  
  - nvme: fix qid param blk_mq_alloc_request_hctx (Chaitanya Kulkarni)  [Orabug: 35450705]  
  - nvme: remove unused timeout parameter (Chaitanya Kulkarni)  [Orabug: 35450705]  
  - nvme: remove a double word in a comment (Xiang wangx)  [Orabug: 35450705]  
  - nvme: add bug report info for global duplicate id (Keith Busch)  [Orabug: 35450705]  
  - nvme: check that EUI/GUID/UUID are globally unique (Christoph Hellwig)  [Orabug: 35450705]  
  - net/rds: Restrict use of RDS/IB to the initial network namespace (Greg Jumper)  [Orabug: 34319530]  
  - net/rds: Use per-namespace loopback connection lists (Greg Jumper)  [Orabug: 34319530]  
  - net/rds: Use per-namespace connection lists in "rds_tcp" (Ka-Cheong Poon)  [Orabug: 34319530]  
  - net/rds: Track "rds_tcp" module statistics per network namespace (Mark Haywood)  [Orabug: 34319530]  
  - net/rds: Track "rds" module statistics per network namespace (Rao Shoaib)  [Orabug: 34319530]  
  - net/rds: Monitor socket congestion per network namespace (Mark Haywood)  [Orabug: 34319530]  
  - net/rds: Use per-namespace connection hash tables (Mark Haywood)  [Orabug: 34319530]  
  - net/rds: Use per-namespace bind hash tables (Mark Haywood)  [Orabug: 34319530]  
  - net/rds: Add basic support for network namespaces (Mark Haywood)  [Orabug: 34319530]  
  - net/rds: Change c_net field to possible_net_t (Mark Haywood)  [Orabug: 34319530]  
  - xfrm: add missed call to delete offloaded policies (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: Fix leak of dev tracker (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: Fix spelling mistake "oflload" -> "offload" (Colin Ian King)  [Orabug: 35290196]  
  - xfrm: release all offloaded policy memory (Leon Romanovsky)  [Orabug: 35290196]  
  - net: skb_partial_csum_set() fix against transport header magic value (Eric Dumazet)  [Orabug: 35290196]  
  - bridge: Fix flushing of dynamic FDB entries (Ido Schimmel)  [Orabug: 35290196]  
  - i2c: mlxbf: depend on ACPI; clean away ifdeffage (Adam Borowski)  [Orabug: 35290196]  
  - tcp: md5: fix IPv4-mapped support (Eric Dumazet)  [Orabug: 35290196]  
  - r8152: fix accessing unset transport header (Hayes Wang)  [Orabug: 35290196]  
  - tcp_ipv6: set the drop_reason in the right place (Jakub Kicinski)  [Orabug: 35290196]  
  - net: tcp: reset 'drop_reason' to NOT_SPCIFIED in tcp_v{4,6}_rcv() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: use kfree_skb_reason() for tcp_v{4,6}_do_rcv() (Menglong Dong)  [Orabug: 35290196]  
  - tcp: fix signed/unsigned comparison (Eric Dumazet)  [Orabug: 35290196]  
  - net: disable preemption in dev_core_stats_XXX_inc() helpers (Eric Dumazet)  [Orabug: 35290196]  
  - net: tcp: fix shim definition of tcp_inbound_md5_hash (Vladimir Oltean)  [Orabug: 35290196]  
  - net/mlx5: Expose SF firmware pages counter (Maher Sanalla)  [Orabug: 35290196]  
  - net/mlx5: Store page counters in a single array (Maher Sanalla)  [Orabug: 35290196]  
  - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (Amir Tzin)  [Orabug: 35290196]  
  - net/mlx5: DR, Fix potential race in dr_rule_create_rule_nic (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: E-switch, Fix switchdev mode after devlink reload (Chris Mi)  [Orabug: 35290196]  
  - net/mlx5e: Protect global IPsec ASO (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Remove optimization which prevented update of ESN state (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Set decap action based on attr for sample (Chris Mi)  [Orabug: 35290196]  
  - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (Maor Dickman)  [Orabug: 35290196]  
  - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (Adham Faris)  [Orabug: 35290196]  
  - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (Vlad Buslov)  [Orabug: 35290196]  
  - net: fix call location in kfree_skb_list_reason (Jesper Dangaard Brouer)  [Orabug: 35290196]  
  - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (Emeel Hakim)  [Orabug: 35290196]  
  - net/mlx5e: Fix macsec ssci attribute handling in offload path (Emeel Hakim)  [Orabug: 35290196]  
  - net/mlx5: E-switch, Coverity: overlapping copy (Shay Drory)  [Orabug: 35290196]  
  - net/mlx5e: Fix memory leak on updating vport counters (Aya Levin)  [Orabug: 35290196]  
  - net/mlx5e: TC, Restore pkt rate policing support (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, ignore match level for post meter rules (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (Dragos Tatulea)  [Orabug: 35290196]  
  - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (Dragos Tatulea)  [Orabug: 35290196]  
  - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (Dragos Tatulea)  [Orabug: 35290196]  
  - net/mlx5e: Verify dev is present for fix features ndo (Roy Novich)  [Orabug: 35290196]  
  - net/mlx5: Fix command stats access after free (Moshe Shemesh)  [Orabug: 35290196]  
  - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (Ariel Levkovich)  [Orabug: 35290196]  
  - net/mlx5: check attr pointer validity before dereferencing it (Ariel Levkovich)  [Orabug: 35290196]  
  - net/mlx5: DR, Fix 'stack frame size exceeds limit' error in dr_rule (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - mlxsw: spectrum_router: Replace 0-length array with flexible array (Kees Cook)  [Orabug: 35290196]  
  - net/mlx5: Lag, fix failure to cancel delayed bond work (Eli Cohen)  [Orabug: 35290196]  
  - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (Maor Dickman)  [Orabug: 35290196]  
  - net/mlx5e: CT: Fix ct debugfs folder name (Chris Mi)  [Orabug: 35290196]  
  - net/mlx5e: Fix RX reporter for XSK RQs (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5: Fix RoCE setting at HCA level (Shay Drory)  [Orabug: 35290196]  
  - net/mlx5: Fix io_eq_size and event_eq_size params validation (Shay Drory)  [Orabug: 35290196]  
  - selftests: mlxsw: Move IPv6 decap_error test to shared directory (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_ipip: Add Spectrum-1 ip6gre support (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_ipip: Rename Spectrum-2 ip6gre operations (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_router: Add support for double entry RIFs (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_router: Parametrize RIF allocation size (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_router: Use gen_pool for RIF index allocation (Ido Schimmel)  [Orabug: 35290196]  
  - net/mlx5: Expose steering dropped packets counter (Michael Guralnik)  [Orabug: 35290196]  
  - net/mlx5: Refactor and expand rep vport stat group (Or Har-Toov)  [Orabug: 35290196]  
  - net/mlx5e: multipath, support routes with more than 2 nexthops (Maor Dickman)  [Orabug: 35290196]  
  - net/mlx5e: TC, add support for meter mtu offload (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: meter, add mtu post meter tables (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: meter, refactor to allow multiple post meter tables (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5: DR, Add support for range match action (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Add function that tells if STE miss addr has been initialized (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Some refactoring of miss address handling (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Manage definers with refcounts (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Handle FT action in a separate function (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Rework is_fw_table function (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Add functions to create/destroy MATCH_DEFINER general object (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: fs, add match on ranges API (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: mlx5_ifc updates for MATCH_DEFINER general object (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx4: small optimization in mlx4_en_xmit() (Eric Dumazet)  [Orabug: 35290196]  
  - net/mlx4: MLX4_TX_BOUNCE_BUFFER_SIZE depends on MAX_SKB_FRAGS (Eric Dumazet)  [Orabug: 35290196]  
  - net/mlx4: rename two constants (Eric Dumazet)  [Orabug: 35290196]  
  - net/mlx5e: TC, allow meter jump control action (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, init post meter rules with branching attributes (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, rename post_meter actions (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, initialize branching action with target attr (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, initialize branch flow attributes (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, set control params for branching actions (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, validate action list per attribute (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, add terminating actions (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: TC, reuse flow attribute post parser processing (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5: fs, assert null dest pointer when dest_num is 0 (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: E-Switch, handle flow attribute with no destinations (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: Open mlx5 driver to accept IPsec packet offload (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Handle ESN update events (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Handle hardware IPsec limits events (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Update IPsec soft and hard limits (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Store all XFRM SAs in Xarray (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Provide intermediate pointer to access IPsec struct (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Skip IPsec encryption for TX path without matching policy (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Add statistics for Rx/Tx IPsec offloaded flows (Raed Salem)  [Orabug: 35290196]  
  - net/mlx5e: Improve IPsec flow steering autogroup (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Configure IPsec packet offload flow steering (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Use same coding pattern for Rx and Tx flows (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Add XFRM policy offload logic (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Create IPsec policy offload tables (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5: E-Switch, Implement devlink port function cmds to control migratable (Shay Drory)  [Orabug: 35290196]  
  - net/mlx5: E-Switch, Implement devlink port function cmds to control RoCE (Yishai Hadas)  [Orabug: 35290196]  
  - net/mlx5: Add generic getters for other functions caps (Shay Drory)  [Orabug: 35290196]  
  - net/mlx5e: Generalize creation of default IPsec miss group and rule (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Group IPsec miss handles into separate struct (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Make clear what IPsec rx_err does (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Flatten the IPsec RX add rule path (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Refactor FTE setup code to be more clear (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Move IPsec flow table creation to separate function (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Create hardware IPsec packet offload objects (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Create Advanced Steering Operation object for IPsec (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Remove accesses to priv for low level IPsec FS code (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Use mlx5 print routines for low level IPsec code (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Create symmetric IPsec RX and TX flow steering structs (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Remove extra layers of defines (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Store replay window in XFRM attributes (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Advertise IPsec packet offload support (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5: Add HW definitions for IPsec packet offload (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5: Return ready to use ASO WQE (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: document IPsec packet offload mode (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: add support to HW update soft and hard limits (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: speed-up lookup of HW policies (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: add RX datapath protection for IPsec packet offload mode (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: add TX datapath support for IPsec packet offload mode (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: add an interface to offload policy (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: allow state packet offload mode (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: add new packet offload flag (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Support devlink reload of IPsec core (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: TC, Add offload support for trap with additional actions (Maor Dickman)  [Orabug: 35290196]  
  - net/mlx5e: Do early return when setup vports dests for slow path flow (Roi Dayan)  [Orabug: 35290196]  
  - net/mlx5: Remove redundant check (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Delete always true DMA check (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Don't access directly DMA device pointer (Leon Romanovsky)  [Orabug: 35290196]  
  - net/mlx5e: Don't use termination table when redundant (Roi Dayan)  [Orabug: 35290196]  
  - net/mlx5: Use generic definition for UMR KLM alignment (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5: Generalize name of UMR alignment definition (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5: Remove unused UMR MTT definitions (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5e: Add padding when needed in UMR WQEs (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5: Remove unused ctx variables (Petr Pavlu)  [Orabug: 35290196]  
  - net/mlx5e: Replace zero-length arrays with DECLARE_FLEX_ARRAY() helper (Gustavo A. R. Silva)  [Orabug: 35290196]  
  - net/mlx5e: Remove unneeded io-mapping.h #include (Christophe JAILLET)  [Orabug: 35290196]  
  - net/mlxsw: Convert to i2c's .probe_new() (Uwe Kleine-König)  [Orabug: 35290196]  
  - devlink: Allow to set up parent in devl_rate_leaf_create() (Michal Wilczynski)  [Orabug: 35290196]  
  - devlink: Enable creation of the devlink-rate nodes from the driver (Michal Wilczynski)  [Orabug: 35290196]  
  - mlxsw: update adjfine to use adjust_by_scaled_ppm (Jacob Keller)  [Orabug: 35290196]  
  - platform/mellanox: Add BlueField-3 support in the tmfifo driver (Liming Sun)  [Orabug: 35290196]  
  - i2c: core: Introduce i2c_client_get_device_id helper function (Angel Iglesias)  [Orabug: 35290196]  
  - net/mlx5e: ethtool: get_link_ext_stats for PHY down events (Saeed Mahameed)  [Orabug: 35290196]  
  - net/mlx5e: CT, optimize pre_ct table lookup (Oz Shlomo)  [Orabug: 35290196]  
  - net/mlx5e: kTLS, Use a single async context object per a callback bulk (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5e: kTLS, Remove unnecessary per-callback completion (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5e: kTLS, Remove unused work field (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5e: TC, Remove redundant WARN_ON() (Roi Dayan)  [Orabug: 35290196]  
  - net/mlx5e: Add error flow when failing update_rx (Guy Truzman)  [Orabug: 35290196]  
  - net/mlx5e: Move params kernel log print to probe function (Tariq Toukan)  [Orabug: 35290196]  
  - net/mlx5e: Support enhanced CQE compression (Ofer Levi)  [Orabug: 35290196]  
  - net/mlx5e: Use clamp operation instead of open coding it (Gal Pressman)  [Orabug: 35290196]  
  - net/mlx5e: remove unused list in arfs (Anisse Astier)  [Orabug: 35290196]  
  - net/mlx5: Expose vhca_id to debugfs (Eli Cohen)  [Orabug: 35290196]  
  - net/mlx5: Unregister traps on driver unload flow (Moshe Shemesh)  [Orabug: 35290196]  
  - net/mlx5: Fix spelling mistake "destoy" -> "destroy" (Colin Ian King)  [Orabug: 35290196]  
  - net/mlx5: Bridge, Use debug instead of warn if entry doesn't exists (Roi Dayan)  [Orabug: 35290196]  
  - selftests: mlxsw: Add a test for invalid locked bridge port configurations (Ido Schimmel)  [Orabug: 35290196]  
  - selftests: mlxsw: Add a test for locked port trap (Ido Schimmel)  [Orabug: 35290196]  
  - selftests: mlxsw: Add a test for EAPOL trap (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_switchdev: Use extack in bridge port flag validation (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum: Add an API to configure security checks (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: reg: Add Switch Port FDB Security Register (Ido Schimmel)  [Orabug: 35290196]  
  - mlxsw: spectrum_trap: Register 802.1X packet traps with devlink (Ido Schimmel)  [Orabug: 35290196]  
  - ethtool: linkstate: add a statistic for PHY down events (Jakub Kicinski)  [Orabug: 35290196]  
  - net: dropreason: propagate drop_reason to skb_release_data() (Eric Dumazet)  [Orabug: 35290196]  
  - net: dropreason: add SKB_CONSUMED reason (Eric Dumazet)  [Orabug: 35290196]  
  - ptp: mlx5: convert to .adjfine and adjust_by_scaled_ppm (Jacob Keller)  [Orabug: 35290196]  
  - ptp: mlx4: convert to .adjfine and adjust_by_scaled_ppm (Jacob Keller)  [Orabug: 35290196]  
  - ptp: introduce helpers to adjust by scaled parts per million (Jacob Keller)  [Orabug: 35290196]  
  - net/mlx5: DR, Remove the buddy used_list (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Keep track of hot ICM chunks in an array instead of list (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Lower sync threshold for ICM hot memory (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Allocate htbl from its own slab allocator (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Allocate icm_chunks from their own slab allocator (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Manage STE send info objects in pool (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, In rehash write the line in the entry immediately (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Handle domain memory resources init/uninit separately (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Initialize chunk's ste_arrays at chunk creation (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, For short chains of STEs, avoid allocating ste_arr dynamically (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Remove unneeded argument from dr_icm_chunk_destroy (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Check device state when polling CQ (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, Fix the SMFS sync_steering for fast teardown (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net/mlx5: DR, In destroy flow, free resources even if FW command failed (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - xfrm: Remove not-used total variable (Leon Romanovsky)  [Orabug: 35290196]  
  - mlxsw: Add support for 800Gbps link modes (Amit Cohen)  [Orabug: 35290196]  
  - ethtool: Add support for 800Gbps link modes (Amit Cohen)  [Orabug: 35290196]  
  - i2c: fix spelling typos in comments (Jiangshan Yi)  [Orabug: 35290196]  
  - i2c: mlxbf: remove device tree support (Asmaa Mnebhi)  [Orabug: 35290196]  
  - i2c: mlxbf: support BlueField-3 SoC (Asmaa Mnebhi)  [Orabug: 35290196]  
  - i2c: mlxbf: add multi slave functionality (Asmaa Mnebhi)  [Orabug: 35290196]  
  - xfrm: add extack support to xfrm_dev_state_add (Sabrina Dubroca)  [Orabug: 35290196]  
  - i2c: mlxbf: remove IRQF_ONESHOT (Asmaa Mnebhi)  [Orabug: 35290196]  
  - net: skb: export skb drop reaons to user by TRACE_DEFINE_ENUM (Menglong Dong)  [Orabug: 35290196]  
  - xfrm: add extack to verify_policy_type (Sabrina Dubroca)  [Orabug: 35290196]  
  - xfrm: add extack to verify_policy_dir (Sabrina Dubroca)  [Orabug: 35290196]  
  - xfrm: add extack support to verify_newpolicy_info (Sabrina Dubroca)  [Orabug: 35290196]  
  - xfrm: propagate extack to all netlink doit handlers (Sabrina Dubroca)  [Orabug: 35290196]  
  - net: skb: prevent the split of kfree_skb_reason() by gcc (Menglong Dong)  [Orabug: 35290196]  
  - igb: convert .adjfreq to .adjfine (Jacob Keller)  [Orabug: 35290196]  
  - ixgbe: convert .adjfreq to .adjfine (Jacob Keller)  [Orabug: 35290196]  
  - i40e: convert .adjfreq to .adjfine (Jacob Keller)  [Orabug: 35290196]  
  - i40e: use mul_u64_u64_div_u64 for PTP frequency calculation (Jacob Keller)  [Orabug: 35290196]  
  - e1000e: convert .adjfreq to .adjfine (Jacob Keller)  [Orabug: 35290196]  
  - e1000e: remove unnecessary range check in e1000e_phc_adjfreq (Jacob Keller)  [Orabug: 35290196]  
  - i2c: mlxcpld: Add callback to notify probing completion (Vadim Pasternak)  [Orabug: 35290196]  
  - power: reset: pwr-mlxbf: change rst_pwr_hid and low_pwr_hid from global to local variables (Tom Rix)  [Orabug: 35290196]  
  - power: reset: pwr-mlxbf: add missing include (Asmaa Mnebhi)  [Orabug: 35290196]  
  - power: reset: pwr-mlxbf: add BlueField SoC power control driver (Asmaa Mnebhi)  [Orabug: 35290196]  
  - RDMA/mlx5: Support handling of modify-header pattern ICM area (Yevgeny Kliteynik)  [Orabug: 35290196]  
  - net: dropreason: reformat the comment fo skb drop reasons (Menglong Dong)  [Orabug: 35290196]  
  - net: skb: use auto-generation to convert skb drop reason to string (Menglong Dong)  [Orabug: 35290196]  
  - net: skb: move enum skb_drop_reason to standalone header file (Menglong Dong)  [Orabug: 35290196]  
  - net: skb: change the definition SKB_DR_SET() (Menglong Dong)  [Orabug: 35290196]  
  - net: skb: check the boundrary of drop reason in kfree_skb_reason() (Menglong Dong)  [Orabug: 35290196]  
  - net: warn if transport header was not set (Eric Dumazet)  [Orabug: 35290196]  
  - net: add CONFIG_DEBUG_NET (Eric Dumazet)  [Orabug: 35290196]  
  - net: add include/net/net_debug.h (Eric Dumazet)  [Orabug: 35290196]  
  - skbuff: render the checksum comment to documentation (Jakub Kicinski)  [Orabug: 35290196]  
  - skbuff: rewrite the doc for data-only skbs (Jakub Kicinski)  [Orabug: 35290196]  
  - skbuff: add a basic intro doc (Jakub Kicinski)  [Orabug: 35290196]  
  - xfrm: drop not needed flags variable in XFRM offload struct (Leon Romanovsky)  [Orabug: 35290196]  
  - netdevsim: rely on XFRM state direction instead of flags (Leon Romanovsky)  [Orabug: 35290196]  
  - xfrm: rename xfrm_state_offload struct to allow reuse (Leon Romanovsky)  [Orabug: 35290196]  
  - ethtool: Add 10base-T1L link mode entry (Alexandru Tachici)  [Orabug: 35290196]  
  - tcp: add drop reason support to tcp_ofo_queue() (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: add drop reasons to tcp_rcv_synsent_state_process() (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: make tcp_rcv_synsent_state_process() drop monitor friend (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: add drop reason support to tcp_prune_ofo_queue() (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: add two drop reasons for tcp_ack() (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: add drop reasons to tcp_rcv_state_process() (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: make tcp_rcv_state_process() drop monitor friendly (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: add drop reason support to tcp_validate_incoming() (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: get rid of rst_seq_match (Eric Dumazet)  [Orabug: 35290196]  
  - tcp: consume incoming skb leading to a reset (Eric Dumazet)  [Orabug: 35290196]  
  - net: ip: add skb drop reasons to ip forwarding (Menglong Dong)  [Orabug: 35290196]  
  - net: ipv4: add skb drop reasons to ip_error() (Menglong Dong)  [Orabug: 35290196]  
  - skb: add some helpers for skb drop reasons (Menglong Dong)  [Orabug: 35290196]  
  - net: bridge: fdb: add support for fine-grained flushing (Nikolay Aleksandrov)  [Orabug: 35290196]  
  - net: bridge: fdb: add ndo_fdb_del_bulk (Nikolay Aleksandrov)  [Orabug: 35290196]  
  - net: add ndo_fdb_del_bulk (Nikolay Aleksandrov)  [Orabug: 35290196]  
  - net: icmp: add skb drop reasons to icmp protocol (Menglong Dong)  [Orabug: 35290196]  
  - net: icmp: introduce __ping_queue_rcv_skb() to report drop reasons (Menglong Dong)  [Orabug: 35290196]  
  - net: skb: rename SKB_DROP_REASON_PTYPE_ABSENT (Menglong Dong)  [Orabug: 35290196]  
  - net: sock: introduce sock_queue_rcv_skb_reason() (Menglong Dong)  [Orabug: 35290196]  
  - net: add per-cpu storage and net->core_stats (Eric Dumazet)  [Orabug: 35290196]  
  - skb: make drop reason booleanable (Jakub Kicinski)  [Orabug: 35290196]  
  - net: tun: track dropped skb via kfree_skb_reason() (Dongli Zhang)  [Orabug: 35290196]  
  - net: tap: track dropped skb via kfree_skb_reason() (Dongli Zhang)  [Orabug: 35290196]  
  - net: dev: use kfree_skb_reason() for __netif_receive_skb_core() (Menglong Dong)  [Orabug: 35290196]  
  - net: dev: use kfree_skb_reason() for sch_handle_ingress() (Menglong Dong)  [Orabug: 35290196]  
  - net: dev: use kfree_skb_reason() for do_xdp_generic() (Menglong Dong)  [Orabug: 35290196]  
  - net: dev: use kfree_skb_reason() for enqueue_to_backlog() (Menglong Dong)  [Orabug: 35290196]  
  - net: dev: add skb drop reasons to __dev_xmit_skb() (Menglong Dong)  [Orabug: 35290196]  
  - net: skb: introduce the function kfree_skb_list_reason() (Menglong Dong)  [Orabug: 35290196]  
  - net: dev: use kfree_skb_reason() for sch_handle_egress() (Menglong Dong)  [Orabug: 35290196]  
  - net: neigh: use kfree_skb_reason() for __neigh_event_send() (Menglong Dong)  [Orabug: 35290196]  
  - net: ip: add skb drop reasons for ip egress path (Menglong Dong)  [Orabug: 35290196]  
  - net/tcp: Merge TCP-MD5 inbound callbacks (Dmitry Safonov)  [Orabug: 35290196]  
  - net: bridge: Add support for bridge port in locked mode (Hans Schultz)  [Orabug: 35290196]  
  - net: tcp: use tcp_drop_reason() for tcp_data_queue_ofo() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: use tcp_drop_reason() for tcp_data_queue() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: use tcp_drop_reason() for tcp_rcv_established() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: add skb drop reasons to tcp_add_backlog() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: add skb drop reasons to tcp_v{4,6}_inbound_md5_hash() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: use kfree_skb_reason() for tcp_v6_rcv() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: add skb drop reasons to tcp_v4_rcv() (Menglong Dong)  [Orabug: 35290196]  
  - net: tcp: introduce tcp_drop_reason() (Menglong Dong)  [Orabug: 35290196]  
  - net: dev: Make rps_lock() disable interrupts. (Sebastian Andrzej Siewior)  [Orabug: 35290196]  
  - net: drop_monitor: support drop reason (Menglong Dong)  [Orabug: 35290196]  
  - net: udp: use kfree_skb_reason() in __udp_queue_rcv_skb() (Menglong Dong)  [Orabug: 35290196]  
  - net: ipv4: use kfree_skb_reason() in ip_protocol_deliver_rcu() (Menglong Dong)  [Orabug: 35290196]  
  - nfp: only use kdoc style comments for kdoc (Simon Horman)  [Orabug: 35290196]  
  - tcp: tcp_send_challenge_ack delete useless param `skb` (Benjamin Yim)  [Orabug: 35290196]  
  - RDMA/mlx5: Add support to multiple priorities for FDB rules (Maor Gottlieb)  [Orabug: 35290196]  
  - net: phylink: add 1000base-KX to phylink_caps_to_linkmodes() (Russell King (Oracle))  [Orabug: 35290196]  
  - net: use .data.once section in netdev_level_once() (Eric Dumazet)  [Orabug: 35290196]  
  - net: phylink: add generic validate implementation (Russell King (Oracle))  [Orabug: 35290196]  
  - bnxt_en: refactor printing of device info (Edwin Peer)  [Orabug: 35290196]  
  - net: bridge: create a common function for populating switchdev FDB entries (Vladimir Oltean)  [Orabug: 35290196]  
  - net: bridge: move br_fdb_replay inside br_switchdev.c (Vladimir Oltean)  [Orabug: 35290196]  
  - net: phylink: use supported_interfaces for phylink validation (Russell King (Oracle))  [Orabug: 35290196]  
  - net: phylink: add MAC phy_interface_t bitmap (Russell King)  [Orabug: 35290196]  
  - net: phy: add phy_interface_t bitmap support (Russell King (Oracle))  [Orabug: 35290196]  
  - i2c: mlxcpld: Allow flexible polling time setting for I2C transactions (Vadim Pasternak)  [Orabug: 35290196]  
  - selftests: mlxsw: devlink_trap_tunnel_ipip6: Add test case for IPv6 decap_error (Amit Cohen)  [Orabug: 35290196]  
  - i2c: mlxcpld: Reduce polling time for performance improvement (Vadim Pasternak)  [Orabug: 35290196]  
  - tcp: remove sk_{tr}x_skb_cache (Eric Dumazet)  [Orabug: 35290196]  
  - devlink: Fix netdev notifier chain corruption (Ido Schimmel)  [Orabug: 35290196]  
  - devlink: change port event netdev notifier from per-net to global (Jiri Pirko)  [Orabug: 35290196]  
  - devlink: protect devlink dump by the instance lock (Jakub Kicinski)  [Orabug: 35290196]  
  - selftests: devlink: add a warning for interfaces coming up (Jakub Kicinski)  [Orabug: 35290196]  
  - devlink: hold region lock when flushing snapshots (Jakub Kicinski)  [Orabug: 35290196]  
  - net: devlink: Add missing error check to devlink_resource_put() (Gavrilov Ilia)  [Orabug: 35290196]  
  - devlink: Expose port function commands to control migratable (Shay Drory)  [Orabug: 35290196]  
  - devlink: Expose port function commands to control RoCE (Shay Drory)  [Orabug: 35290196]  
  - devlink: Move devlink port function hw_addr attr documentation (Shay Drory)  [Orabug: 35290196]  
  - net/mlx5: Fix orthography errors in documentation (Rahul Rameshbabu)  [Orabug: 35290196]  
  - Documentation: devlink: Add blank line padding on numbered lists in Devlink Port documentation (Bagas Sanjaya)  [Orabug: 35290196]  
  - Documentation: Add documentation for new devlink-rate attributes (Michal Wilczynski)  [Orabug: 35290196]  
  - devlink: Validate port function request (Shay Drory)  [Orabug: 35290196]  
  - net: devlink: clean-up empty devlink_ops::info_get() (Vincent Mailhol)  [Orabug: 35290196]  
  - net: devlink: make the devlink_ops::info_get() callback optional (Vincent Mailhol)  [Orabug: 35290196]  
  - net: devlink: let the core report the driver name instead of the drivers (Vincent Mailhol)  [Orabug: 35290196]  
  - devlink: support directly reading from region memory (Jacob Keller)  [Orabug: 35290196]  
  - devlink: refactor region_read_snapshot_fill to use a callback function (Jacob Keller)  [Orabug: 35290196]  
  - devlink: remove unnecessary parameter from chunk_fill function (Jacob Keller)  [Orabug: 35290196]  
  - devlink: find snapshot in devlink_nl_cmd_region_read_dumpit (Jacob Keller)  [Orabug: 35290196]  
  - devlink: report extended error message in region_read_dumpit() (Jacob Keller)  [Orabug: 35290196]  
  - devlink: use min_t to calculate data_size (Jacob Keller)  [Orabug: 35290196]  
  - net: devlink: add WARN_ON_ONCE to check return value of unregister_netdevice_notifier_net() call (Jiri Pirko)  [Orabug: 35290196]  
  - ice: move devlink port creation/deletion (Paul M Stillwell Jr)  [Orabug: 35290196]  
  - bnxt_en: fix devlink port registration to netdev (Vikas Gupta)  [Orabug: 35290196]  
  - devlink: remove redundant health state set to error (Moshe Shemesh)  [Orabug: 35290196]  
  - devlink: Fix warning when unregistering a port (Ido Schimmel)  [Orabug: 35290196]  
  - devlink: Add packet traps for 802.1X operation (Ido Schimmel)  [Orabug: 35290196]  
  - net: devlink: move netdev notifier block to dest namespace during reload (Jiri Pirko)  [Orabug: 35290196]  
  - net: introduce a helper to move notifier block to different namespace (Jiri Pirko)  [Orabug: 35290196]  
  - net: expose devlink port over rtnetlink (Jiri Pirko)  [Orabug: 35290196]  
  - net: remove unused ndo_get_devlink_port (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: use devlink_port pointer instead of ndo_get_devlink_port (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: add not cleared type warning to port unregister (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: store copy netdevice ifindex and ifname to allow port_fill() without RTNL held (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: remove net namespace check from devlink_nl_port_fill() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: remove netdev arg from devlink_port_type_eth_set() (Jiri Pirko)  [Orabug: 35290196]  
  - net: make drivers to use SET_NETDEV_DEVLINK_PORT to set devlink_port (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: track netdev with devlink_port assigned (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: take RTNL in port_fill() function only if it is not held (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: move port_type_netdev_checks() call to __devlink_port_type_set() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: move port_type_warn_schedule() call to __devlink_port_type_set() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: convert devlink port type-specific pointers to union (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: add port_init/fini() helpers to allow pre-register/post-unregister functions (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: introduce a flag to indicate devlink port being registered (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: introduce port registered assert helper and use it (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: stub port params cmds for they are unused internally (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: limit flash component name to match version returned by info_get() (Jiri Pirko)  [Orabug: 35290196]  
  - netdevsim: add version fw.mgmt info info_get() and mark as a component (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: extend info_get() version put to indicate a flash component (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: Fix missing mutex_unlock() call (Ammar Faizi)  [Orabug: 35290196]  
  - Documentation: devlink: add add devlink-selftests to the table of contents (Bagas Sanjaya)  [Orabug: 35290196]  
  - net: devlink: enable parallel ops on netlink interface (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: remove devlink_mutex (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: introduce "unregistering" mark and use it during devlinks iteration (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: remove region snapshots list dependency on devlink->lock (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: remove region snapshot ID tracking dependency on devlink->lock (Jiri Pirko)  [Orabug: 35290196]  
  - devlink: introduce framework for selftests (Vikas Gupta)  [Orabug: 35290196]  
  - net: devlink: remove redundant net_eq() check from sb_pool_get_dumpit() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: move net check into devlinks_xa_for_each_registered_get() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: make sure that devlink_try_get() works with valid pointer during xarray iteration (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: move unlocked function prototypes alongside the locked ones (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: fix return statement in devlink_port_new_notify() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: fix a typo in function name devlink_port_new_notifiy() (Jiri Pirko)  [Orabug: 35290196]  
  - net: devlink: fix unlocked vs locked functions descriptions (Jiri Pirko)  [Orabug: 35290196]  
  - devlink: Remove unused functions devlink_rate_leaf_create/destroy (Moshe Shemesh)  [Orabug: 35290196]  
  - devlink: Remove unused function devlink_rate_nodes_destroy (Moshe Shemesh)  [Orabug: 35290196]  
  - devlink: adopt u64_stats_t (Eric Dumazet)  [Orabug: 35290196]  
  - mptcp: adjust to use netns refcount tracker (Eric Dumazet)  [Orabug: 35290196]  
  - nvme-pci: fix freeze accounting for error handling (Keith Busch)  [Orabug: 35450692]  
  - nvme: use struct group for generic command dwords (Keith Busch)  [Orabug: 35450692]  
  - nvmet: add a clear_ids attribute for passthru targets (Alan Adamson)  [Orabug: 35450692]  
  - nvmet-tcp: fix regression in data_digest calculation (Sagi Grimberg)  [Orabug: 35450692]  
  - nvme-pci: disable write zeros support on UMIC and Samsung SSDs (rasheed.hsueh)  [Orabug: 35450692]  
  - nvme-pci: sk hynix p31 has bogus namespace ids (Keith Busch)  [Orabug: 35450692]  
  - nvme-pci: smi has bogus namespace ids (Keith Busch)  [Orabug: 35450692]  
  - nvme-pci: phison e12 has bogus namespace ids (Keith Busch)  [Orabug: 35450692]  
  - nvmet: fix typo in comment (Julia Lawall)  [Orabug: 35450692]  
  - nvme: set controller enable bit in a separate write (Niklas Cassel)  [Orabug: 35450692]  
  - nvme: add support for TP4084 - Time-to-Ready Enhancements (Christoph Hellwig)  [Orabug: 35450692]  
  - nvme: split the enum used for various register constants (Christoph Hellwig)  [Orabug: 35450692]  
  - nvme-fabrics: add a request timeout helper (Chaitanya Kulkarni)  [Orabug: 35450692]  
  - nvme-pci: harden drive presence detect in nvme_dev_disable() (Stefan Roese)  [Orabug: 35450692]  
  - nvme: mark internal passthru request RQF_QUIET (Chaitanya Kulkarni)  [Orabug: 35450692]  
  - nvme: remove unneeded include from constants file (Max Gurtovoy)  [Orabug: 35450692]  
  - nvme: add missing status values to verbose logging (Max Gurtovoy)  [Orabug: 35450692]  
  - nvme: fix interpretation of DMRSL (Tom Yan)  [Orabug: 35450692]  
  - nvme-apple: fix sparse endianess warnings (Arnd Bergmann)  [Orabug: 35450692]  
  - nvme-apple: Add initial Apple SoC NVMe driver (Sven Peter)  [Orabug: 35450692]  
  - perf vendor events arm64: Add AmpereOne core PMU events (Ilkka Koskinen)  [Orabug: 35475064]  
  - perf vendors events arm64: Arm Cortex-A34 (Nick Forrington)  [Orabug: 35475064]  
  - perf vendor events: For the Arm Neoverse N2 (Andrew Kilroy)  [Orabug: 35475064]  
  - perf vendor events arm64: Add new armv8 pmu events (Andrew Kilroy)  [Orabug: 35475064]  
  - Revert "bnxt_en: set missing reload flag in devlink features" (Harshit Mogalapalli)  [Orabug: 35578118]  
  - bnxt: make sure we return pages to the pool (Jakub Kicinski)  [Orabug: 35431038]  
  - bnxt_en: Fix HDS and jumbo thresholds for RX packets (Michael Chan)  [Orabug: 35431038]  
  - bnxt_en: Fix first buffer size calculations for XDP multi-buffer (Michael Chan)  [Orabug: 35431038]  
  - bnxt_en: Fix XDP RX path (Michael Chan)  [Orabug: 35431038]  
  - bnxt_en: Simplify bnxt_xdp_buff_init() (Michael Chan)  [Orabug: 35431038]  
  - bnxt_en: Add a non-real time mode to access NIC clock (Pavan Chebbi)  [Orabug: 35431038]  
  - bnxt_en: update RSS config using difference algorithm (Edwin Peer)  [Orabug: 35431038]  
  - bnxt_en: refactor VNIC RSS update functions (Edwin Peer)  [Orabug: 35431038]  
  - bnxt_en: check and resize NVRAM UPDATE entry before flashing (Vikas Gupta)  [Orabug: 35431038]  
  - bnxt_en: add .get_module_eeprom_by_page() support (Vikas Gupta)  [Orabug: 35431038]  
  - bnxt_en: Update firmware interface to 1.10.2.118 (Michael Chan)  [Orabug: 35431038]  
  - treewide: use get_random_bytes() when possible (Jason A. Donenfeld)  [Orabug: 35431038]  
  - bnxt_en: replace reset with config timestamps (Vadim Fedorenko)  [Orabug: 35431038]  
  - bnxt_en: fix flags to check for supported fw version (Vadim Fedorenko)  [Orabug: 35431038]  
  - bnxt_en: fix LRO/GRO_HW features in ndo_fix_features callback (Vikas Gupta)  [Orabug: 35431038]  
  - bnxt_en: set missing reload flag in devlink features (Vikas Gupta)  [Orabug: 35431038]  
  - bnxt_en: Use PAGE_SIZE to init buffer when multi buffer XDP is not in use (Pavan Chebbi)  [Orabug: 35431038]  
  - bnxt_en: Fix and simplify XDP transmit path (Michael Chan)  [Orabug: 35431038]  
  - bnxt: Use the bitmap API to allocate bitmaps (Christophe JAILLET)  [Orabug: 35431038]  
  - bnxt: Fix typo in comments (Jiang Jian)  [Orabug: 35431038]  
  - bnxt_en: parse and report result field when NVRAM package install fails (Kalesh AP)  [Orabug: 35431038]  
  - bnxt: XDP multibuffer enablement (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: support transmit and free of aggregation buffers (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: adding bnxt_xdp_build_skb to build skb from multibuffer xdp_buff (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: add page_pool support for aggregation ring when using xdp (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: change receive ring space parameters (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: set xdp_buff pfmemalloc flag if needed (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: adding bnxt_rx_agg_pages_xdp for aggregated xdp (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: rename bnxt_rx_pages to bnxt_rx_agg_pages_skb (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: refactor bnxt_rx_pages operate on skb_shared_info (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: add flag to denote that an xdp program is currently attached (Andy Gospodarek)  [Orabug: 35431038]  
  - bnxt: refactor bnxt_rx_xdp to separate xdp_init_buff/xdp_prepare_buff (Andy Gospodarek)  [Orabug: 35431038]  
  - scsi: lpfc: Use struct_size() helper (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Copyright updates for 14.2.0.13 patches (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.13 (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Enhance congestion statistics collection (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Use struct_group to isolate cast to larger object (Kees Cook)  [Orabug: 35543716]  
  - scsi: lpfc: Use struct_group() to initialize struct lpfc_cgn_info (Kees Cook)  [Orabug: 35543716]  
  - scsi: lpfc: Clean up SLI-4 CQE status handling (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Account for fabric domain ctlr device loss recovery (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port() (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (Azeem Shaikh)  [Orabug: 35543716]  
  - scsi: lpfc: Replace one-element array with flexible-array member (Gustavo A. R. Silva)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.12 (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Add new RCQE status for handling DMA failures (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Update congestion warning notification period (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Silence an incorrect device output (Jun Chen)  [Orabug: 35543716]  
  - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (Bjorn Helgaas)  [Orabug: 35543716]  
  - scsi: lpfc: Copyright updates for 14.2.0.11 patches (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.11 (Justin Tee)  [Orabug: 35543716]  
  - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (Muneendra)  [Orabug: 35543716]  
  - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Record LOGO state with discovery engine even if aborted (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix double word in comments (Bo Liu)  [Orabug: 35543716]  
  - scsi: lpfc: Copyright updates for 14.2.0.10 patches (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.10 (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Remove redundant clean up code in disable_vport() (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Replace outdated strncpy() with strscpy() (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Remove linux/msi.h include (Thomas Gleixner)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.9 (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix crash involving race between FLOGI timeout and devloss handler (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix MI capability display in cmf_info sysfs attribute (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Correct bandwidth logging during receipt of congestion sync WCQE (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix WQ|CQ|EQ resource check (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Use memset_startat() helper (Xiu Jianfeng)  [Orabug: 35543716]  
  - scsi: lpfc: Remove redundant pointer 'lp' (Colin Ian King)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.8 (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Create a sysfs entry called lpfc_xcvr_data for transceiver info (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Log when congestion management limits are in effect (Justin Tee)  [Orabug: 35543716]  
  - treewide: use get_random_{u8,u16}() when possible, part 1 (Jason A. Donenfeld)  [Orabug: 35543716]  
  - random: add 8-bit and 16-bit batches (Jason A. Donenfeld)  [Orabug: 35543716]  
  - scsi: lpfc: Set sli4_param's cmf option to zero when CMF is turned off (Justin Tee)  [Orabug: 35543716]  
  - scsi: lpfc: Fix spelling mistake "unsolicted" -> "unsolicited" (Colin Ian King)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.7 (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix various issues reported by tools (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Add reporting capability for Link Degrade Signaling (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Rework FDMI attribute registration for unintential padding (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Rework lpfc_fdmi_cmd() routine for cleanup and consistency (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Rename mp/bmp dma buffers to rq/rsp in lpfc_fdmi_cmd (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Update congestion mode logging for Emulex SAN Manager application (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Move scsi_host_template outside dynamically allocated/freed phba (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix multiple NVMe remoteport registration calls for the same NPort ID (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Add missing free iocb and nlp kref put for early return VMID cases (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix mbuf pool resource detected as busy at driver unload (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix FLOGI ACC with wrong SID in PT2PT topology (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix prli_fc4_req checks in PRLI handling (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Remove unneeded result variable (ye xingchen)  [Orabug: 35543716]  
  - scsi: lpfc: Remove the unneeded result variable (ye xingchen)  [Orabug: 35543716]  
  - scsi: lpfc: Copyright updates for 14.2.0.6 patches (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Update lpfc version to 14.2.0.6 (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Remove SANDiags related code (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Add warning notification period to CMF_SYNC_WQE (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix null ndlp ptr dereference in abnormal exit path for GFT_ID (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Fix unsolicited FLOGI receive handling during PT2PT discovery (James Smart)  [Orabug: 35543716]  
  - scsi: lpfc: Check the return value of alloc_workqueue() (William Dean)  [Orabug: 35543716]  
  - zonefs: Do not propagate iomap_dio_rw() ENOTBLK error to user space (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Always invalidate last cached page on append write (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Fix error message in zonefs_file_dio_append() (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Prevent uninitialized symbol 'size' warning (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Cache zone group directory inodes (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Dynamically create file inodes when needed (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Separate zone information from inode information (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Reduce struct zonefs_inode_info size (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Simplify IO error handling (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Reorganize code (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Fix active zone accounting (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Fix race between modprobe and mount (Zhang Xiaoxu)  [Orabug: 35351356]  
  - zonefs: Remove to_attr() helper function (Damien Le Moal)  [Orabug: 35351356]  
  - fs/zonefs: Use the enum req_op type for tracing request operations (Bart Van Assche)  [Orabug: 35351356]  
  - zonefs: remove ->writepage (Christoph Hellwig)  [Orabug: 35351356]  
  - treewide: Rename enum req_opf into enum req_op (Bart Van Assche)  [Orabug: 35351356]  
  - zonefs: Call page_address() on page acquired with GFP_KERNEL flag (Fabio M. De Francesco)  [Orabug: 35351356]  
  - block: replace blkdev_nr_zones with bdev_nr_zones (Christoph Hellwig)  [Orabug: 35351356]  
  - zonefs: Do not ignore explicit_open with active zone limit (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Fix zonefs_init_file_inode() return value (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Add active seq file accounting (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Export open zone resource information through sysfs (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Always do seq file write open accounting (Damien Le Moal)  [Orabug: 35351356]  
  - zonefs: Rename super block information fields (Damien Le Moal)  [Orabug: 35351356]  
  - mlx5: update kernel config options (Qing Huang)  [Orabug: 35230582]  
  - net/mlx5: Lag, Fix for loop when checking lag (Chris Mi)  [Orabug: 35230582]  
  - Revert "net/mlx5e: MACsec, remove replay window size limitation in offload path" (Saeed Mahameed)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, block offload requests with encrypt off (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, fix Tx SA active field update (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, remove replay window size limitation in offload path (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, fix add Rx security association (SA) rule memory leak (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, fix mlx5e_macsec_update_rxsa bail condition and functionality (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, fix update Rx secure channel active field (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, fix memory leak when MACsec device is deleted (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: MACsec, fix RX data path 16 RX security channel limit (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: Use kvfree() in mlx5e_accel_fs_tcp_create() (YueHaibing)  [Orabug: 35230582]  
  - net/mlx5e: Fix a couple error codes (Dan Carpenter)  [Orabug: 35230582]  
  - net/mlx5: E-switch, Fix duplicate lag creation (Chris Mi)  [Orabug: 35230582]  
  - net/mlx5: E-switch, Destroy legacy fdb table when needed (Chris Mi)  [Orabug: 35230582]  
  - net/mlx5e: Fix possible race condition in macsec extended packet number update routine (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Fix MACsec update SecY (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Fix MACsec SA initialization routine (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Remove leftovers from old XSK queues enumeration (Tariq Toukan)  [Orabug: 35230582]  
  - net/mlx5e: Offload rule only when all encaps are valid (Chris Mi)  [Orabug: 35230582]  
  - net/mlx5e: Fix missing alignment in size of MTT/KLM entries (Tariq Toukan)  [Orabug: 35230582]  
  - net/mlx5: Fix sync reset event handler error flow (Moshe Shemesh)  [Orabug: 35230582]  
  - net/mlx5: E-Switch, Set correctly vport destination (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5: Lag, avoid lockdep warnings (Eli Cohen)  [Orabug: 35230582]  
  - net/mlx5: cmdif, Print info on any firmware cmd failure to tracepoint (Moshe Shemesh)  [Orabug: 35230582]  
  - net/mlx5: SF: Fix probing active SFs during driver probe phase (Shay Drory)  [Orabug: 35230582]  
  - mlxsw: Avoid warnings when not offloaded FDB entry with IPv6 is removed (Amit Cohen)  [Orabug: 35230582]  
  - net/mlx5e: TC, Fix slab-out-of-bounds in parse_tc_actions (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5e: TC, Fix wrong rejection of packet-per-second policing (Jianbo Liu)  [Orabug: 35230582]  
  - net/mlx5e: Fix tc acts array not to be dependent on enum order (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5e: Fix usage of DMA sync API (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Add missing sanity checks for max TX WQE size (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5: fw_reset: Don't try to load device in case PCI isn't working (Shay Drory)  [Orabug: 35230582]  
  - net/mlx5: E-switch, Set to legacy mode if failed to change switchdev mode (Chris Mi)  [Orabug: 35230582]  
  - net/mlx5e: Fix macsec sci endianness at rx sa update (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: Fix wrong bitwise comparison usage in macsec_fs_rx_add_rule function (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: Fix macsec rx security association (SA) update/delete (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: Fix macsec coverity issue at rx sa update (Raed Salem)  [Orabug: 35230582]  
  - net/mlx5e: TC, Fix cloned flow attr instance dests are not zeroed (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5e: TC, Reject forwarding from internal port to internal port (Ariel Levkovich)  [Orabug: 35230582]  
  - net/mlx5: ASO, Create the ASO SQ with the correct timestamp format (Saeed Mahameed)  [Orabug: 35230582]  
  - net/mlx5e: Update restore chain id for slow path packets (Paul Blakey)  [Orabug: 35230582]  
  - net/mlx5: DR, Fix matcher disconnect error flow (Rongwei Liu)  [Orabug: 35230582]  
  - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (Moshe Shemesh)  [Orabug: 35230582]  
  - net/mlx5e: Cleanup MACsec uninitialization routine (Leon Romanovsky)  [Orabug: 35230582]  
  - net/mlx5: Make ASO poll CQ usable in atomic context (Leon Romanovsky)  [Orabug: 35230582]  
  - net/mlx5: E-Switch, Return EBUSY if can't get mode lock (Jianbo Liu)  [Orabug: 35230582]  
  - net/mlx5: E-switch, Don't update group if qos is not enabled (Chris Mi)  [Orabug: 35230582]  
  - net/mlx5: E-Switch, Allow offloading fwd dest flow table with vport (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5: Set default grace period based on function type (Maher Sanalla)  [Orabug: 35230582]  
  - net/mlx5: Start health poll at earlier stage of driver load (Moshe Shemesh)  [Orabug: 35230582]  
  - net/mlx5e: Expose rx_oversize_pkts_buffer counter (Gal Pressman)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Optimize for unaligned mode with 3072-byte frames (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Print a warning in slow configurations (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use KLM to protect frame overrun in unaligned mode (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Improve MTT/KSM alignment (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use umr_mode to calculate striding RQ parameters (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Improve need_wakeup logic (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Include XSK skb_from_cqe callbacks in INDIRECT_CALL (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Set napi_id to support busy polling (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Flush RQ on XSK activation to save memory (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use queue indices starting from 0 for XSK queues (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Support XDP metadata on XSK RQs (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Optimize RQ page deallocation (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Call mlx5e_page_release_dynamic directly where possible (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Use non-XSK page allocator in SHAMPO (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use xsk_buff_alloc_batch on striding RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use xsk_buff_alloc_batch on legacy RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Split out WQE allocation for legacy XSK RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Remove the outer loop when allocating legacy RQ WQEs (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use partial batches in legacy RQ with XSK (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Use partial batches in legacy RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Make the wqe_index_mask calculation more exact (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Introduce wqe_index_mask for legacy RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Drop the check for XSK state in mlx5e_xsk_wakeup (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use mlx5e_trigger_napi_icosq for XSK wakeup (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Clean up and fix error flows in mlx5e_alloc_rq (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Split out channel (de)activation in rx_res (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Remove mlx5e_xsk_page_alloc_pool (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Convert struct mlx5e_alloc_unit to a union (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Remove DMA address from mlx5e_alloc_unit (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Rename mlx5e_dma_info to prepare for removal of DMA address (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Optimize the page cache reducing its size 2x (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Fix calculations for ICOSQ size (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use KSM for unaligned XSK (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5: Add MLX5_FLEXIBLE_INLEN to safely calculate cmd inlen (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Keep a separate MKey for striding RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Use XSK frame size as striding RQ page size (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Use runtime page_shift for striding RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - xsk: Expose min chunk size to drivers (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5: Fix spelling mistake "syndrom" -> "syndrome" (Colin Ian King)  [Orabug: 35230582]  
  - net/mlx5e: Use runtime values of striding RQ parameters in datapath (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Make dma_info array dynamic in struct mlx5e_mpw_info (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Improve the MTU change shortcut (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Fix SKB headroom calculation in validation (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: xsk: Remove dead code in validation (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Simplify stride size calculation for linear RQ (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: kTLS, Check ICOSQ WQE size in advance (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Use the aligned max TX MPWQE size (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Fix a typo in mlx5e_xdp_mpwqe_is_full (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Use mlx5e_stop_room_for_max_wqe where appropriate (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Let mlx5e_get_sw_max_sq_mpw_wqebbs accept mdev (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Validate striding RQ before enabling XDP (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Make mlx5e_verify_rx_mpwqe_strides static (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Remove unused fields from datapath structs (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - net/mlx5e: Convert mlx5e_get_max_sq_wqebbs to u8 (Maxim Mikityanskiy)  [Orabug: 35230582]  
  - mlxsw: core_acl_flex_actions: Split memcpy() of struct flow_action_cookie flexible array (Kees Cook)  [Orabug: 35230582]  
  - net/mlx5: Remove from FPGA IFC file not-needed definitions (Leon Romanovsky)  [Orabug: 35230582]  
  - net/mlx5: Remove unused structs (Gal Pressman)  [Orabug: 35230582]  
  - net/mlx5: Remove unused functions (Gal Pressman)  [Orabug: 35230582]  
  - net/mlx5: detect and enable bypass port select flow table (Liu, Changcheng)  [Orabug: 35230582]  
  - net/mlx5: Lag, enable hash mode by default for all NICs (Liu, Changcheng)  [Orabug: 35230582]  
  - net/mlx5: Lag, set active ports if support bypass port select flow table (Liu, Changcheng)  [Orabug: 35230582]  
  - RDMA/mlx5: Don't set tx affinity when lag is in hash mode (Liu, Changcheng)  [Orabug: 35230582]  
  - net/mlx5: add IFC bits for bypassing port select flow table (Liu, Changcheng)  [Orabug: 35230582]  
  - net/mlx5: Add support for NPPS with real time mode (Aya Levin)  [Orabug: 35230582]  
  - net/mlx5: Expose NPPS related registers (Aya Levin)  [Orabug: 35230582]  
  - net/mlx5: Add IFC bits for mkey ATS (Jason Gunthorpe)  [Orabug: 35230582]  
  - mlxsw: reg: Remove deprecated code about SFTR-V2 Register (Gaosheng Cui)  [Orabug: 35230582]  
  - macsec: don't free NULL metadata_dst (Sabrina Dubroca)  [Orabug: 35230582]  
  - net/mlx5e: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 35230582]  
  - net/mlx5e: Support MACsec offload replay window (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Support MACsec offload extended packet number (EPN) (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Move MACsec initialization from profile init stage to profile enable stage (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Create advanced steering operation (ASO) object for MACsec (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Expose memory key creation (mkey) function (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5: Add ifc bits for MACsec extended packet number (EPN) and replay protection (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Fix MACsec initial packet number (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Fix MACsec initialization error path (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5: Fix fields name prefix in MACsec (Emeel Hakim)  [Orabug: 35230582]  
  - net: macsec: Expose extended packet number (EPN) properties to macsec offload (Emeel Hakim)  [Orabug: 35230582]  
  - net/mlx5e: Support 256 bit keys with kTLS device offload (Gal Pressman)  [Orabug: 35230582]  
  - tcp: Access &tcp_hashinfo via net. (Kuniyuki Iwashima)  [Orabug: 35230582]  
  - tcp: Don't allocate tcp_death_row outside of struct netns_ipv4. (Kuniyuki Iwashima)  [Orabug: 35230582]  
  - tcp: Clean up some functions. (Kuniyuki Iwashima)  [Orabug: 35230582]  
  - net/mlx5e: Ensure macsec_rule is always initiailized in macsec_fs_{r,t}x_add_rule() (Nathan Chancellor)  [Orabug: 35230582]  
  - selftests: mlxsw: Remove qos_burst test (Amit Cohen)  [Orabug: 35230582]  
  - selftests: mlxsw: Add QOS test for maximum use of descriptors (Amit Cohen)  [Orabug: 35230582]  
  - selftests: mlxsw: Use shapers in QOS RED tests instead of forcing speed (Amit Cohen)  [Orabug: 35230582]  
  - selftests: mlxsw: Use shapers in QOS tests instead of forcing speed (Amit Cohen)  [Orabug: 35230582]  
  - net/mlx5e: Switch to kmemdup() when allocate dev_addr (Yang Yingliang)  [Orabug: 35230582]  
  - net/mlx5e: add missing error code in error path (Yang Yingliang)  [Orabug: 35230582]  
  - ACPI: utils: Add acpi_dev_uid_to_integer() helper to get _UID as integer (Andy Shevchenko)  [Orabug: 35230582]  
  - mellanox/mlxsw: fix repeated words in comments (wangjianli)  [Orabug: 35230582]  
  - platform/mellanox: mlxreg-lc: Make error handling flow consistent (Vadim Pasternak)  [Orabug: 35230582]  
  - net/mlx5e: Add support to configure more than one macsec offload device (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Add MACsec stats support for Rx/Tx flows (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Add MACsec offload SecY support (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Implement MACsec Rx data path using MACsec skb_metadata_dst (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Add MACsec RX steering rules (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5: Add MACsec Rx tables support to fs_core (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Add MACsec offload Rx command support (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Implement MACsec Tx data path using MACsec skb_metadata_dst (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5e: Add MACsec TX steering rules (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5: Add MACsec Tx tables support to fs_core (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5: Add MACsec offload Tx command support (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5: Introduce MACsec Connect-X offload hardware bits and structures (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5: Generalize Flow Context for new crypto fields (Lior Nahmanson)  [Orabug: 35230582]  
  - net/mlx5: Removed esp_id from struct mlx5_flow_act (Lior Nahmanson)  [Orabug: 35230582]  
  - net/macsec: Move some code for sharing with various drivers that implements offload (Lior Nahmanson)  [Orabug: 35230582]  
  - net/macsec: Add MACsec skb_metadata_dst Rx Data path support (Lior Nahmanson)  [Orabug: 35230582]  
  - net/macsec: Add MACsec skb_metadata_dst Tx Data path support (Lior Nahmanson)  [Orabug: 35230582]  
  - RDMA/mlx5: Move function mlx5_core_query_ib_ppcnt() to mlx5_ib (Chris Mi)  [Orabug: 35230582]  
  - net: ethernet: move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 35230582]  
  - mlxsw: spectrum: Add a copy of 'struct mlxsw_config_profile' for Spectrum-4 (Amit Cohen)  [Orabug: 35230582]  
  - mlxsw: Add a helper function for getting maximum LAG ID (Amit Cohen)  [Orabug: 35230582]  
  - mlxsw: Support configuring 'max_lag' via CONFIG_PROFILE (Amit Cohen)  [Orabug: 35230582]  
  - mlxsw: cmd: Edit the comment of 'max_lag' field in CONFIG_PROFILE (Amit Cohen)  [Orabug: 35230582]  
  - mlxsw: minimal: Return -ENOMEM on allocation failure (Dan Carpenter)  [Orabug: 35230582]  
  - net/mlx5e: Do not use err uninitialized in mlx5e_rep_add_meta_tunnel_rule() (Nathan Chancellor)  [Orabug: 35230582]  
  - net/mlx4: Fix error check for dma_map_sg (Jack Wang)  [Orabug: 35230582]  
  - mlx4: Do type_clear() for devlink ports when type_set() was called previously (Jiri Pirko)  [Orabug: 35230582]  
  - mlxsw: Remove unused mlxsw_core_port_type_get() (Jiri Pirko)  [Orabug: 35230582]  
  - mlxsw: Remove unused port_type_set devlink op (Jiri Pirko)  [Orabug: 35230582]  
  - mlxsw: Remove unused IB stuff (Jiri Pirko)  [Orabug: 35230582]  
  - mlxsw: minimal: Extend to support line card dynamic operations (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: minimal: Extend module to port mapping with slot index (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: minimal: Move ports allocation to separate routine (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: minimal: Extend APIs with slot index for modular system support (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: i2c: Add support for system interrupt handling (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: core_linecards: Register a system event handler (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: core: Add registration APIs for system event handler (Vadim Pasternak)  [Orabug: 35230582]  
  - mlxsw: core_linecards: Separate line card init and fini flow (Vadim Pasternak)  [Orabug: 35230582]  
  - net/mlx5: TC, Add support for SF tunnel offload (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5: E-Switch, Move send to vport meta rule creation (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5: E-Switch, Split creating fdb tables into smaller chunks (Roi Dayan)  [Orabug: 35230582]  
  - net/mlx5: E-Switch, Add default drop rule for unmatched packets (Jianbo Liu)  [Orabug: 35230582]  
  - net/mlx5e: Completely eliminate priv from fs.h (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Make all ttc functions of en_fs get fs struct as argument (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Make flow steering arfs independent of priv (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Introduce flow steering debug macros (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Separate ethtool_steering from fs.h and make private (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Directly get flow_steering struct as input when init/cleanup ethtool steering (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Convert ethtool_steering member of flow_steering struct to pointer (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Drop priv argument of ptp function in en_fs (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Decouple fs_tcp from en.h (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Decouple fs_tt_redirect from en.h (Lama Kayal)  [Orabug: 35230582]  
  - net/mlx5e: Introduce flow steering API (Lama Kayal)  [Orabug: 35230582]  
  - selftests: mlxsw: Add egress VID classification test (Amit Cohen)  [Orabug: 35230582]  
  - selftests: mlxsw: Add ingress RIF configuration test for VXLAN (Amit Cohen)  [Orabug: 35230582]  
  - selftests: mlxsw: Add ingress RIF configuration test for 802.1Q bridge (Amit Cohen)  [Orabug: 35230582]  
  - selftests: mlxsw: Add ingress RIF configuration test for 802.1D bridge (Amit Cohen)  [Orabug: 35230582]  
  - net: macsec: Expose MACSEC_SALT_LEN definition to user space (Emeel Hakim)  [Orabug: 35230582]  
  - Revert "mlxsw: core: Add the hottest thermal zone detection" (Daniel Lezcano)  [Orabug: 35230582]  
  - sfc: Change BUG_ON to WARN_ON and recovery code. (Jonathan Cooper)  [Orabug: 35230582]  
  - sfc: Remove netdev init from efx_init_struct (Jonathan Cooper)  [Orabug: 35230582]  
  - net: inet: Retire port only listening_hash (Martin KaFai Lau)  [Orabug: 35230582]  
  - net: inet: Open code inet_hash2 and inet_unhash2 (Martin KaFai Lau)  [Orabug: 35230582]  
  - net: inet: Remove count from inet_listen_hashbucket (Martin KaFai Lau)  [Orabug: 35230582]  
  - selftests: mlxsw: Add a test for soaking up a burst of traffic (Petr Machata)  [Orabug: 35230582]  
  - mptcp: listen diag dump support (Florian Westphal)  [Orabug: 35230582]  
  - mptcp: diag: switch to context structure (Florian Westphal)  [Orabug: 35230582]  
  - bpf: Treat bpf_sk_lookup remote_port as a 2-byte field (Jakub Sitnicki)  [Orabug: 35230582]  
  - tcp: allocate tcp_death_row outside of struct netns_ipv4 (Eric Dumazet)  [Orabug: 35230582]  
  - tcp/dccp: no longer use twsk_net(tw) from tw_timer_handler() (Eric Dumazet)  [Orabug: 35230582]  
  - net: add netns refcount tracker to struct sock (Eric Dumazet)  [Orabug: 35230582]  
  - stmmac: remove ethtool driver version info (Heiner Kallweit)  [Orabug: 35230582]  
  - bpf: Add ingress_ifindex to bpf_sk_lookup (Mark Pashmfouroush)  [Orabug: 35230582]  
  - net: drivers: get ready for const netdev->dev_addr (Jakub Kicinski)  [Orabug: 35230582]  
  - nfp: use dev_driver_string() instead of pci_dev->driver->name (Uwe Kleine-König)  [Orabug: 35230582]  
  - KVM: SVM: vNMI pending bit is V_NMI_PENDING_MASK not V_NMI_BLOCKING_MASK (Maciej S. Szmigiero)  [Orabug: 35400606]  
  - KVM: nSVM: Implement support for nested VNMI (Santosh Shukla)  [Orabug: 35400606]  
  - KVM: x86: Add support for SVM's Virtual NMI (Santosh Shukla)  [Orabug: 35400606]  
  - KVM: x86: Route pending NMIs from userspace through process_nmi() (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: SVM: Add definitions for new bits in VMCB::int_ctrl related to vNMI (Santosh Shukla)  [Orabug: 35400606]  
  - x86/cpufeatures: Redefine synthetic virtual NMI bit as AMD's "real" vNMI (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: x86: Save/restore all NMIs when multiple NMIs are pending (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: x86: Tweak the code and comment related to handling concurrent NMIs (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: x86: Raise an event request when processing NMIs if an NMI is pending (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: SVM: add wrappers to enable/disable IRET interception (Maxim Levitsky)  [Orabug: 35400606]  
  - KVM: nSVM: Raise event on nested VM exit if L1 doesn't intercept IRQs (Maxim Levitsky)  [Orabug: 35400606]  
  - KVM: nSVM: Disable intercept of VINTR if saved L1 host RFLAGS.IF is 0 (Santosh Shukla)  [Orabug: 35400606]  
  - KVM: nSVM: Don't sync vmcb02 V_IRQ back to vmcb12 if KVM (L0) is intercepting VINTR (Santosh Shukla)  [Orabug: 35400606]  
  - KVM: x86: Move HF_NMI_MASK and HF_IRET_MASK into "struct vcpu_svm" (Maxim Levitsky)  [Orabug: 35400606]  
  - KVM: SVM: remove redundant ret variable (zhang songyi)  [Orabug: 35400606]  
  - KVM: x86: Move HF_GIF_MASK into "struct vcpu_svm" as "guest_gif" (Maxim Levitsky)  [Orabug: 35400606]  
  - KVM: nSVM: clarify recalc_intercepts() wrt CR8 (Paolo Bonzini)  [Orabug: 35400606]  
  - KVM: x86: Rename kvm_x86_ops.queue_exception to inject_exception (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: x86: nSVM: implement nested vGIF (Maxim Levitsky)  [Orabug: 35400606]  
  - KVM: x86: SVM: remove vgif_enabled() (Maxim Levitsky)  [Orabug: 35400606]  
  - KVM: x86: Fix pointer mistmatch warning when patching RET0 static calls (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: x86: allow defining return-0 static calls (Paolo Bonzini)  [Orabug: 35400606]  
  - KVM: x86: warn on incorrectly NULL members of kvm_x86_ops (Paolo Bonzini)  [Orabug: 35400606]  
  - KVM: x86: remove KVM_X86_OP_NULL and mark optional kvm_x86_ops (Paolo Bonzini)  [Orabug: 35400606]  
  - KVM: x86: Use static_call() for .vcpu_deliver_sipi_vector() (Sean Christopherson)  [Orabug: 35400606]  
  - KVM: nSVM: split out __nested_vmcb_check_controls (Paolo Bonzini)  [Orabug: 35400606]  
  - nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB (Krish Sadhukhan)  [Orabug: 35400606]  
  - ethtool: extend ringparam setting/getting API with rx_buf_len (in sfc) (Sherry Yang)  [Orabug: 35397820]  
  - sfc: fix ef100 RX prefix macro (Edward Cree)  [Orabug: 35397820]  
  - sfc/siena: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet)  [Orabug: 35397820]  
  - sfc/siena: fix TX channel offset when using legacy interrupts (Íñigo Huguet)  [Orabug: 35397820]  
  - sfc/siena: fix repeated words in comments (wangjianli)  [Orabug: 35397820]  
  - sfc/falcon: fix repeated words in comments (wangjianli)  [Orabug: 35397820]  
  - sfc:falcon: fix repeated words in comments (Jilin Yuan)  [Orabug: 35397820]  
  - sfc: fix repeated words in comments (Jilin Yuan)  [Orabug: 35397820]  
  - sfc: siena: fix repeated words in comments (Jilin Yuan)  [Orabug: 35397820]  
  - sfc/siena: Fix typo in comment (Xiang wangx)  [Orabug: 35397820]  
  - sfc: Fix typo in comment (Xiang wangx)  [Orabug: 35397820]  
  - sfc/siena: fix wrong tx channel offset with efx_separate_tx_channels (Íñigo Huguet)  [Orabug: 35397820]  
  - sfc/siena: fix considering that all channels have TX queues (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Remove duplicate check on segments (Martin Habets)  [Orabug: 35397820]  
  - sfc: siena: Have a unique wrapper ifndef for efx channels header (Saeed Mahameed)  [Orabug: 35397820]  
  - eth: sfc: remove remnants of the out-of-tree napi_weight module param (Jakub Kicinski)  [Orabug: 35397820]  
  - sfc: siena: Fix Kconfig dependencies (Ren Zhijie)  [Orabug: 35397820]  
  - sfc/siena: Reinstate SRIOV init/fini function calls (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Make PTP and reset support specific for Siena (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Make MCDI logging support specific for Siena (Martin Habets)  [Orabug: 35397820]  
  - siena: Make HWMON support specific for Siena (Martin Habets)  [Orabug: 35397820]  
  - siena: Make SRIOV support specific for Siena (Martin Habets)  [Orabug: 35397820]  
  - siena: Make MTD support specific for Siena (Martin Habets)  [Orabug: 35397820]  
  - sfc: Add a basic Siena module (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Inline functions in sriov.h to avoid conflicts with sfc (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Rename functions in nic_common.h to avoid conflicts with sfc (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Rename functions in mcdi headers to avoid conflicts with sfc (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Rename peripheral functions to avoid conflicts with sfc (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Rename RX/TX functions to avoid conflicts with sfc (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Rename functions in efx headers to avoid conflicts with sfc (Martin Habets)  [Orabug: 35397820]  
  - sfc/siena: Remove build references to missing functionality (Martin Habets)  [Orabug: 35397820]  
  - sfc: Copy shared files needed for Siena (part 2) (Martin Habets)  [Orabug: 35397820]  
  - sfc: Copy shared files needed for Siena (part 1) (Martin Habets)  [Orabug: 35397820]  
  - sfc: Move Siena specific files (Martin Habets)  [Orabug: 35397820]  
  - eth: switch to netif_napi_add_weight() (Jakub Kicinski)  [Orabug: 35397820]  
  - sfc: Copy a subset of mcdi_pcol.h to siena (Martin Habets)  [Orabug: 35397820]  
  - sfc: Disable Siena support (Martin Habets)  [Orabug: 35397820]  
  - sfc: add EF100 VF support via a write to sriov_numvfs (Pieter Jansen van Vuuren)  [Orabug: 35397820]  
  - sfc: Remove global definition of efx_reset_type_names (Martin Habets)  [Orabug: 35397820]  
  - sfc: Remove duplicate definition of efx_xmit_done (Martin Habets)  [Orabug: 35397820]  
  - sfc: efx_default_channel_type APIs can be static (Sherry Yang)  [Orabug: 35397820]  
  - sfc: Fix spelling mistake "writting" -> "writing" (Lv Ruyi)  [Orabug: 35397820]  
  - sfc: use hardware tx timestamps for more than PTP (Bert Kenward)  [Orabug: 35397820]  
  - sfc: Stop using iommu_present() (Robin Murphy)  [Orabug: 35397820]  
  - sfc: Avoid NULL pointer dereference on systems without numa awareness (Martin Habets)  [Orabug: 35397820]  
  - sfc: set affinity hints in local NUMA node only (Íñigo Huguet)  [Orabug: 35397820]  
  - sfc: default config to 1 channel/core in local NUMA node only (Íñigo Huguet)  [Orabug: 35397820]  
  - sfc: The size of the RX recycle ring should be more flexible (Martin Habets)  [Orabug: 35397820]  
  - ethernet/sfc: remove redundant rc variable (Minghao Chi)  [Orabug: 35397820]  
  - sfc: use swap() to make code cleaner (Yang Guang)  [Orabug: 35397820]  
  - ice: fix handling of burst Tx timestamps (Jacob Keller)  [Orabug: 35365171]  
  - ice: Fix spurious interrupt during removal of trusted VF (Norbert Zulinski)  [Orabug: 35365171]  
  - ice: Add support for VLAN priority filters in switchdev (Martyna Szapar-Mudlaw)  [Orabug: 35365171]  
  - ice: support features on new E810T variants (Arkadiusz Kubalewski)  [Orabug: 35365171]  
  - ice: Merge pin initialization of E810 and E810T adapters (Arkadiusz Kubalewski)  [Orabug: 35365171]  
  - ice: reorder PF/representor devlink port register/unregister flows (Jiri Pirko)  [Orabug: 35365171]  
  - ice: Add low latency Tx timestamp read (Karol Kolacinski)  [Orabug: 35365171]  
  - ice: Add L2TPv3 hardware offload support (Marcin Szycik)  [Orabug: 35365171]  
  - flow_offload: Introduce flow_match_l2tpv3 (Wojciech Drewek)  [Orabug: 35365171]  
  - flow_dissector: Add L2TPv3 dissectors (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: Simplify memory allocation in ice_sched_init_port() (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: switch: Simplify memory allocation (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: add helper function to check FW API version (Paul Greenwalt)  [Orabug: 35365171]  
  - ice: Check if reset in progress while waiting for offsets (Michal Michalik)  [Orabug: 35365171]  
  - ice: Allow operation with reduced device MSI-X (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Print human-friendly PHY types (Anirudh Venkataramanan)  [Orabug: 35365171]  
  - ice: Implement devlink port split operations (Anatolii Gerasymenko)  [Orabug: 35365171]  
  - ice: Add additional flags to ice_nvm_write_activate (Jacob Keller)  [Orabug: 35365171]  
  - ice: Add port option admin queue commands (Anatolii Gerasymenko)  [Orabug: 35365171]  
  - ice: Add support for ip TTL & ToS offload (Marcin Szycik)  [Orabug: 35365171]  
  - ice: remove non-inclusive language (Mikael Barsehyan)  [Orabug: 35365171]  
  - ice: Remove ucast_shared (Sylwester Dziedziuch)  [Orabug: 35365171]  
  - ice: Allow 100M speeds for some devices (Anirudh Venkataramanan)  [Orabug: 35365171]  
  - ice: Implement FCS/CRC and VLAN stripping co-existence policy (Anatolii Gerasymenko)  [Orabug: 35365171]  
  - ice: Implement control of FCS/CRC stripping (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: introduce ice_ptp_reset_cached_phctime function (Jacob Keller)  [Orabug: 35365171]  
  - ice: re-arrange some static functions in ice_ptp.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: track and warn when PHC update is late (Jacob Keller)  [Orabug: 35365171]  
  - ice: track Tx timestamp stats similar to other Intel drivers (Jacob Keller)  [Orabug: 35365171]  
  - ice: initialize cached_phctime when creating Rx rings (Jacob Keller)  [Orabug: 35365171]  
  - ice: xsk: change batched Tx descriptor cleaning (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (Larysa Zaremba)  [Orabug: 35365171]  
  - ice: Fix interface being down after reset with link-down-on-close flag on (Mateusz Palczewski)  [Orabug: 35365171]  
  - ice: config netdev tc before setting queues number (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: Fix crash by keep old cfg when update TCs more than queues (Ding Hui)  [Orabug: 35365171]  
  - ice: Fix DMA mappings leak (Przemyslaw Patynowski)  [Orabug: 35365171]  
  - ice: Fix VF not able to send tagged traffic with no VLAN filters (Sylwester Dziedziuch)  [Orabug: 35365171]  
  - ice: Ignore error message when setting same promiscuous mode (Benjamin Mikailenko)  [Orabug: 35365171]  
  - ice: Fix clearing of promisc mode with bridge over bond (Grzegorz Siwik)  [Orabug: 35365171]  
  - ice: Fix double VLAN error when entering promisc mode (Grzegorz Siwik)  [Orabug: 35365171]  
  - ice: Fix call trace with null VSI during VF reset (Michal Jaron)  [Orabug: 35365171]  
  - ice: Fix VSI rebuild WARN_ON check for VF (Benjamin Mikailenko)  [Orabug: 35365171]  
  - net: ice: fix error NETIF_F_HW_VLAN_CTAG_FILTER check in ice_vsi_sync_fltr() (Jian Shen)  [Orabug: 35365171]  
  - ice: allow toggling loopback mode via ndo_set_features callback (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: compress branches in ice_set_features() (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Fix promiscuous mode not turning off (Michal Wilczynski)  [Orabug: 35365171]  
  - ice: Introduce enabling promiscuous mode on multiple VF's (Michal Wilczynski)  [Orabug: 35365171]  
  - ice: implement adjfine with mul_u64_u64_div_u64 (Jacob Keller)  [Orabug: 35365171]  
  - ice: Add support for PPPoE hardware offload (Marcin Szycik)  [Orabug: 35365171] [Orabug: 35365171]  
  - flow_offload: Introduce flow_match_pppoe (Wojciech Drewek)  [Orabug: 35365171] [Orabug: 35365171]  
  - flow_dissector: Add PPPoE dissectors (Wojciech Drewek)  [Orabug: 35365171]  
  - net: extract port range fields from fl_flow_key (Maksym Glubokiy)  [Orabug: 35365171]  
  - ice: add write functionality for GNSS TTY (Karol Kolacinski)  [Orabug: 35365171]  
  - ice: add i2c write command (Karol Kolacinski)  [Orabug: 35365171]  
  - ice: Remove pci_aer_clear_nonfatal_status() call (Zhuo Chen)  [Orabug: 35365171]  
  - ice: Add EXTTS feature to the feature bitmap (Anirudh Venkataramanan)  [Orabug: 35365171]  
  - ice: Remove unnecessary NULL check before dev_put (Ziyang Xuan)  [Orabug: 35365171]  
  - ice: use eth_broadcast_addr() to set broadcast address (Lu Wei)  [Orabug: 35365171]  
  - ice: switch: dynamically add VLAN headers to dummy packets (Martyna Szapar-Mudlaw)  [Orabug: 35365171]  
  - ice: Add support for VLAN TPID filters in switchdev (Martyna Szapar-Mudlaw)  [Orabug: 35365171]  
  - ice: Add support for double VLAN in switchdev (Martyna Szapar-Mudlaw)  [Orabug: 35365171]  
  - ice: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: remove u16 arithmetic in ice_gnss (Karol Kolacinski)  [Orabug: 35365171]  
  - ice: remove VLAN representor specific ops (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: don't set VF VLAN caps in switchdev (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: xsk: drop power of 2 ring size restriction for AF_XDP (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Fix VSIs unable to share unicast MAC (Anirudh Venkataramanan)  [Orabug: 35365171]  
  - ice: Fix tunnel checksum offload with fragmented traffic (Przemyslaw Patynowski)  [Orabug: 35365171]  
  - ice: Fix max VLANs available for VF (Przemyslaw Patynowski)  [Orabug: 35365171]  
  - ice: change devlink code to read NVM in blocks (Paul M Stillwell Jr)  [Orabug: 35365171]  
  - ice: handle E822 generic device ID in PLDM header (Paul M Stillwell Jr)  [Orabug: 35365171]  
  - ice: ethtool: Prohibit improper channel config for DCB (Anatolii Gerasymenko)  [Orabug: 35365171]  
  - ice: Fix switchdev rules book keeping (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: ignore protocol field in GTP offload (Marcin Szycik)  [Orabug: 35365171]  
  - ice: Fix memory corruption in VF driver (Przemyslaw Patynowski)  [Orabug: 35365171]  
  - ice: Fix queue config fail handling (Przemyslaw Patynowski)  [Orabug: 35365171]  
  - ice: Sync VLAN filtering features for DVM (Roman Storozhenko)  [Orabug: 35365171]  
  - ice: Fix PTP TX timestamp offset calculation (Michal Michalik)  [Orabug: 35365171]  
  - ice: fix access-beyond-end in the switch code (Alexander Lobakin)  [Orabug: 35365171]  
  - eth: ice: silence the GCC 12 array-bounds warning (Jakub Kicinski)  [Orabug: 35365171]  
  - ice: Expose RSS indirection tables for queue groups via ethtool (Sridhar Samudrala)  [Orabug: 35365171]  
  - ice: link representors to PCI device (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: remove period on argument description in ice_for_each_vf (Jacob Keller)  [Orabug: 35365171]  
  - ice: add a function comment for ice_cfg_mac_antispoof (Jacob Keller)  [Orabug: 35365171]  
  - ice: fix wording in comment for ice_reset_vf (Jacob Keller)  [Orabug: 35365171]  
  - ice: remove return value comment for ice_reset_all_vfs (Jacob Keller)  [Orabug: 35365171]  
  - ice: always check VF VSI pointer values (Jacob Keller)  [Orabug: 35365171]  
  - ice: add newline to dev_dbg in ice_vf_fdir_dump_info (Jacob Keller)  [Orabug: 35365171]  
  - ice: get switch id on switchdev devices (Michal Swiatkowski)  [Orabug: 35365171]  
  - net/ice: Remove unused enum (Shiraz Saleem)  [Orabug: 35365171]  
  - net/ice: Fix boolean assignment (Shiraz Saleem)  [Orabug: 35365171]  
  - net/ice: Add support for enable_iwarp and enable_roce devlink param (Shiraz Saleem)  [Orabug: 35365171]  
  - ice: return ENOSPC when exceeding ICE_MAX_CHAIN_WORDS (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: introduce common helper for retrieving VSI by vsi_num (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: use min_t() to make code cleaner in ice_gnss (Wan Jiabing)  [Orabug: 35365171]  
  - ice: Add mpls+tso support (Joe Damato)  [Orabug: 35365171]  
  - ice: switch: convert packet template match code to rodata (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: switch: use convenience macros to declare dummy pkt templates (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: switch: use a struct to pass packet template params (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: switch: unobscurify bitops loop in ice_fill_adv_dummy_packet() (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: switch: add and use u16[] aliases to ice_adv_lkup_elem::{h, m}_u (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: clear stale Tx queue settings before configuring (Anatolii Gerasymenko)  [Orabug: 35365171]  
  - ice: fix use-after-free when deinitializing mailbox snapshot (Jacob Keller)  [Orabug: 35365171]  
  - ice: wait 5 s for EMP reset after firmware flash (Petr Oros)  [Orabug: 35365171]  
  - ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Ivan Vecera)  [Orabug: 35365171]  
  - ice: Fix incorrect locking in ice_vc_process_vf_msg() (Ivan Vecera)  [Orabug: 35365171]  
  - ice: Fix memory leak in ice_get_orom_civd_data() (Jianglei Nie)  [Orabug: 35365171]  
  - ice: fix crash in switchdev mode (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: check if Rx ring was filled up to the end (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: clear cmd_type_offset_bsz for TX rings (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Anatolii Gerasymenko)  [Orabug: 35365171]  
  - ice: Fix broken IFF_ALLMULTI handling (Ivan Vecera)  [Orabug: 35365171]  
  - ice: Fix MAC address setting (Ivan Vecera)  [Orabug: 35365171]  
  - ice: xsk: Fix indexing in ice_tx_xsk_pool() (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: Stop Rx processing when ntc catches ntu (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: Eliminate unnecessary loop iteration (Magnus Karlsson)  [Orabug: 35365171]  
  - ice: add trace events for tx timestamps (Jacob Keller)  [Orabug: 35365171]  
  - ice: fix return value check in ice_gnss.c (Yang Yingliang)  [Orabug: 35365171]  
  - ice: Fix inconsistent indenting in ice_switch (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: remove PF pointer from ice_check_vf_init (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Jacob Keller)  [Orabug: 35365171]  
  - gtp: Add support for checking GTP device type (Wojciech Drewek)  [Orabug: 35365171]  
  - net/sched: Allow flower to match on GTP options (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: cleanup long lines in ice_sriov.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce ICE_VF_RESET_LOCK flag (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Jacob Keller)  [Orabug: 35365171]  
  - ice: convert ice_reset_vf to take flags (Jacob Keller)  [Orabug: 35365171]  
  - ice: convert ice_reset_vf to standard error codes (Jacob Keller)  [Orabug: 35365171]  
  - ice: make ice_reset_all_vfs void (Jacob Keller)  [Orabug: 35365171]  
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Jacob Keller)  [Orabug: 35365171]  
  - ice: move reset functionality into ice_vf_lib.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: fix a long line warning in ice_reset_vf (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce VF operations structure for reset flows (Jacob Keller)  [Orabug: 35365171]  
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Jacob Keller)  [Orabug: 35365171]  
  - ice: use ice_is_vf_trusted helper function (Jacob Keller)  [Orabug: 35365171]  
  - ice: log an error message when eswitch fails to configure (Jacob Keller)  [Orabug: 35365171]  
  - ice: cleanup error logging for ice_ena_vfs (Jacob Keller)  [Orabug: 35365171]  
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Jacob Keller)  [Orabug: 35365171]  
  - ice: refactor spoofchk control code in ice_sriov.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Jacob Keller)  [Orabug: 35365171]  
  - ice: remove unused definitions from ice_sriov.h (Jacob Keller)  [Orabug: 35365171]  
  - ice: convert vf->vc_ops to a const pointer (Jacob Keller)  [Orabug: 35365171]  
  - ice: remove circular header dependencies on ice.h (Jacob Keller)  [Orabug: 35365171]  
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: Support GTP-U and GTP-C offload in switchdev (Marcin Szycik)  [Orabug: 35365171]  
  - ice: Fix FV offset searching (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: Add support for outer dest MAC for ADQ tunnels (Amritha Nambiar)  [Orabug: 35365171]  
  - ice: avoid XDP checks in ice_clean_tx_irq() (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: change "can't set link" message to dbg level (Jonathan Toppins)  [Orabug: 35365171]  
  - ice: Add slow path offload stats on port representor in switchdev (Marcin Szycik)  [Orabug: 35365171]  
  - ice: Add support for inner etype in switchdev (Martyna Szapar-Mudlaw)  [Orabug: 35365171]  
  - ice: xsk: fix GCC version checking against pragma unroll presence (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: convert VF storage to hash table with krefs and RCU (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce VF accessor functions (Jacob Keller)  [Orabug: 35365171]  
  - ice: factor VF variables to separate structure (Jacob Keller)  [Orabug: 35365171]  
  - ice: convert ice_for_each_vf to include VF entry iterator (Jacob Keller)  [Orabug: 35365171]  
  - ice: use ice_for_each_vf for iteration during removal (Jacob Keller)  [Orabug: 35365171]  
  - ice: remove checks in ice_vc_send_msg_to_vf (Jacob Keller)  [Orabug: 35365171]  
  - ice: move VFLR acknowledge during ice_free_vfs (Jacob Keller)  [Orabug: 35365171]  
  - ice: move clear_malvf call in ice_free_vfs (Jacob Keller)  [Orabug: 35365171]  
  - ice: pass num_vfs to ice_set_per_vf_res() (Jacob Keller)  [Orabug: 35365171]  
  - ice: store VF pointer instead of VF ID (Jacob Keller)  [Orabug: 35365171]  
  - ice: refactor unwind cleanup in eswitch mode (Jacob Keller)  [Orabug: 35365171]  
  - ice: add TTY for GNSS module for E810T device (Karol Kolacinski)  [Orabug: 35365171]  
  - iavf: Fix adopting new combined setting (Michal Maloszewski)  [Orabug: 35365171]  
  - iavf: Remove non-inclusive language (Mateusz Palczewski)  [Orabug: 35365171]  
  - iavf: Fix incorrect use of assigning iavf_status to int (Mateusz Palczewski)  [Orabug: 35365171]  
  - iavf: stop leaking iavf_status as "errno" values (Mateusz Palczewski)  [Orabug: 35365171]  
  - iavf: Add usage of new virtchnl format to set default MAC (Mateusz Palczewski)  [Orabug: 35365171]  
  - iavf: refactor processing of VLAN V2 capability message (Mateusz Palczewski)  [Orabug: 35365171]  
  - iavf: Add support for 50G/100G in AIM algorithm (Mateusz Palczewski)  [Orabug: 35365171]  
  - iavf: Remove useless DMA-32 fallback configuration (Christophe JAILLET)  [Orabug: 35365171]  
  - iavf: remove an unneeded variable (Jason Wang)  [Orabug: 35365171]  
  - iavf: switch to napi_build_skb() (Alexander Lobakin)  [Orabug: 35365171]  
  - iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Brett Creeley)  [Orabug: 35365171]  
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Brett Creeley)  [Orabug: 35365171]  
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Brett Creeley)  [Orabug: 35365171]  
  - iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Brett Creeley)  [Orabug: 35365171]  
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Brett Creeley)  [Orabug: 35365171]  
  - virtchnl: Add support for new VLAN capabilities (Brett Creeley)  [Orabug: 35365171]  
  - virtchnl: Use the BIT() macro for capability/offload flags (Brett Creeley)  [Orabug: 35365171]  
  - virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define (Brett Creeley)  [Orabug: 35365171]  
  - iavf: Use irq_update_affinity_hint() (Nitesh Narayan Lal)  [Orabug: 35365171]  
  - iavf: Fix displaying queue statistics shown by ethtool (Jedrzej Jagielski)  [Orabug: 35365171]  
  - iavf: Refactor string format to avoid static analysis warnings (Karen Sornek)  [Orabug: 35365171]  
  - iavf: Refactor text of informational message (Karen Sornek)  [Orabug: 35365171]  
  - iavf: Fix static code analysis warning (Karen Sornek)  [Orabug: 35365171]  
  - iavf: Refactor iavf_mac_filter struct memory usage (Jedrzej Jagielski)  [Orabug: 35365171]  
  - iavf: Enable setting RSS hash key (Tony Nguyen)  [Orabug: 35365171]  
  - iavf: Log info when VF is entering and leaving Allmulti mode (Grzegorz Szczurek)  [Orabug: 35365171]  
  - iavf: Add change MTU message (Patryk Małek)  [Orabug: 35365171]  
  - iavf: Fix deadlock occurrence during resetting VF interface (Jedrzej Jagielski)  [Orabug: 35365171]  
  - ice: Simplify tracking status of RDMA support (Dave Ertman)  [Orabug: 35365171]  
  - ice: Add ability for PF admin to enable VF VLAN pruning (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add support for 802.1ad port VLANs VF (Brett Creeley)  [Orabug: 35365171]  
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Brett Creeley)  [Orabug: 35365171]  
  - ice: Support configuring the device to Double VLAN Mode (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Brett Creeley)  [Orabug: 35365171]  
  - ice: Adjust naming for inner VLAN operations (Brett Creeley)  [Orabug: 35365171]  
  - ice: Use the proto argument for VLAN ops (Brett Creeley)  [Orabug: 35365171]  
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Brett Creeley)  [Orabug: 35365171]  
  - ice: Introduce ice_vlan struct (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add new VSI VLAN ops (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add helper function for adding VLAN 0 (Brett Creeley)  [Orabug: 35365171]  
  - ice: Refactor spoofcheck configuration functions (Brett Creeley)  [Orabug: 35365171]  
  - ice: add support for DSCP QoS for IDC (Dave Ertman)  [Orabug: 35365171]  
  - ice: respect metadata on XSK Rx to skb (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: Remove useless DMA-32 fallback configuration (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: xsk: Borrow xdp_tx_active logic from i40e (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: Improve AF_XDP ZC Tx and use batching API (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: Avoid potential dead AF_XDP Tx processing (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Make Tx threshold dependent on ring length (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: Handle SW XDP ring wrap and bump tail more often (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Remove likely for napi_complete_done (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: destroy flow director filter mutex after releasing VSIs (Sudheer Mogilappagari)  [Orabug: 35365171]  
  - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: fix setting l4 port flag when adding filter (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: Match on all profiles in slow-path (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: Use bitmap_free() to free bitmap (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: Optimize a few bitmap operations (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: Slightly simply ice_find_free_recp_res_idx (Christophe JAILLET)  [Orabug: 35365171]  
  - ice: improve switchdev's slow-path (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: replay advanced rules after reset (Victor Raj)  [Orabug: 35365171]  
  - ice: Add flow director support for channel mode (Kiran Patil)  [Orabug: 35365171]  
  - ice: switch to napi_build_skb() (Alexander Lobakin)  [Orabug: 35365171]  
  - ice: trivial: fix odd indenting (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: support crosstimestamping on E822 devices if supported (Jacob Keller)  [Orabug: 35365171]  
  - ice: exit bypass mode once hardware finishes timestamp calibration (Jacob Keller)  [Orabug: 35365171]  
  - ice: ensure the hardware Clock Generation Unit is configured (Jacob Keller)  [Orabug: 35365171]  
  - ice: implement basic E822 PTP support (Jacob Keller)  [Orabug: 35365171]  
  - ice: convert clk_freq capability into time_ref (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce ice_ptp_init_phc function (Jacob Keller)  [Orabug: 35365171]  
  - ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Jacob Keller)  [Orabug: 35365171]  
  - ice: PTP: move setting of tstamp_config (Jacob Keller)  [Orabug: 35365171]  
  - ice: introduce ice_base_incval function (Jacob Keller)  [Orabug: 35365171]  
  - ice: Fix E810 PTP reset flow (Karol Kolacinski)  [Orabug: 35365171]  
  - ice: use modern kernel API for kick (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: tighter control over VSI_DOWN state (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: use prefetch methods (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: update to newer kernel API (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: support immediate firmware activation via devlink reload (Jacob Keller)  [Orabug: 35365171]  
  - ice: reduce time to read Option ROM CIVD data (Jacob Keller)  [Orabug: 35365171]  
  - ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Jacob Keller)  [Orabug: 35365171]  
  - ice: move and rename ice_check_for_pending_update (Jacob Keller)  [Orabug: 35365171]  
  - ice: devlink: add shadow-ram region to snapshot Shadow RAM (Jacob Keller)  [Orabug: 35365171]  
  - ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Remove unnecessary casts (Dan Carpenter)  [Orabug: 35365171]  
  - ice: Propagate error codes (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Remove excess error variables (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Cleanup after ice_status removal (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Remove enum ice_status (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Use int for ice_status (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Remove string printing for ice_status (Tony Nguyen)  [Orabug: 35365171]  
  - ice: Refactor status flow for DDP load (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: Refactor promiscuous functions (Brett Creeley)  [Orabug: 35365171]  
  - ice: refactor PTYPE validating (Jeff Guo)  [Orabug: 35365171]  
  - ice: Add package PTYPE enable information (Haiyue Wang)  [Orabug: 35365171]  
  - ice: xsk: fix cleaned_count setting (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: allow empty Rx descriptors on XSK ZC data path (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: xsk: allocate separate memory for XDP SW ring (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: safer stats processing (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: fix adding different tunnels (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: fix choosing UDP header type (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: Fix problems with DSCP QoS implementation (Dave Ertman)  [Orabug: 35365171]  
  - ice: rearm other interrupt cause register after enabling VFs (Paul Greenwalt)  [Orabug: 35365171]  
  - ice: Remove toggling of antispoof for VF trusted promiscuous mode (Brett Creeley)  [Orabug: 35365171]  
  - ice: Hide bus-info in ethtool for PRs in switchdev mode (Marcin Szycik)  [Orabug: 35365171]  
  - ice: Clear synchronized addrs when adding VFs in switchdev mode (Marcin Szycik)  [Orabug: 35365171]  
  - ice: Remove boolean vlan_promisc flag from function (Brett Creeley)  [Orabug: 35365171]  
  - ice: fix error return code in ice_get_recp_frm_fw() (Wang Hai)  [Orabug: 35365171]  
  - ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Nathan Chancellor)  [Orabug: 35365171]  
  - ice: Add support to print error on PHY FW load failure (Brett Creeley)  [Orabug: 35365171]  
  - ice: Add support for changing MTU on PR in switchdev mode (Marcin Szycik)  [Orabug: 35365171]  
  - ice: send correct vc status in switchdev (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: support for GRE in eswitch (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: low level support for tunnels (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: VXLAN and Geneve TC support (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: support for indirect notification (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: Add tc-flower filter support for channel (Kiran Patil)  [Orabug: 35365171]  
  - ice: enable ndo_setup_tc support for mqprio_qdisc (Kiran Patil)  [Orabug: 35365171]  
  - ice: Add infrastructure for mqprio support via ndo_setup_tc (Kiran Patil)  [Orabug: 35365171]  
  - ice: fix an error code in ice_ena_vfs() (Dan Carpenter)  [Orabug: 35365171]  
  - ice: use devm_kcalloc() instead of devm_kzalloc() (Gustavo A. R. Silva)  [Orabug: 35365171]  
  - ice: Make use of the helper function devm_add_action_or_reset() (Cai Huoqing)  [Orabug: 35365171]  
  - ice: Refactor PR ethtool ops (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: Manage act flags for switchdev offloads (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: Forbid trusted VFs in switchdev mode (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: fix software generating extra interrupts (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: fix rate limit update after coalesce change (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: update dim usage and moderation (Jesse Brandeburg)  [Orabug: 35365171]  
  - ice: Add support for VF rate limiting (Brett Creeley)  [Orabug: 35365171]  
  - ice: make use of ice_for_each_* macros (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: introduce XDP_TX fallback path (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: optimize XDP_TX workloads (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: propagate xdp_ring onto rx_ring (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: do not create xdp_frame on XDP_TX (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: unify xdp_rings accesses (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: split ice_ring onto Tx/Rx separate structs (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: remove ring_active from ice_ring (Maciej Fijalkowski)  [Orabug: 35365171]  
  - ice: Implement support for SMA and U.FL on E810-T (Maciej Machnikowski)  [Orabug: 35365171]  
  - ice: Add support for SMA control multiplexer (Maciej Machnikowski)  [Orabug: 35365171]  
  - ice: Implement functions for reading and setting GPIO pins (Maciej Machnikowski)  [Orabug: 35365171]  
  - ice: Refactor ice_aqc_link_topo_addr (Maciej Machnikowski)  [Orabug: 35365171]  
  - ice: ndo_setup_tc implementation for PR (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: ndo_setup_tc implementation for PF (Kiran Patil)  [Orabug: 35365171]  
  - ice: Allow changing lan_en and lb_en on all kinds of filters (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: cleanup rules info (Victor Raj)  [Orabug: 35365171]  
  - ice: allow deleting advanced rules (Shivanshu Shukla)  [Orabug: 35365171]  
  - ice: allow adding advanced rules (Grishma Kotecha)  [Orabug: 35365171]  
  - ice: create advanced switch recipe (Dan Nowlin)  [Orabug: 35365171]  
  - ice: manage profiles and field vectors (Dan Nowlin)  [Orabug: 35365171]  
  - ice: implement low level recipes functions (Grishma Kotecha)  [Orabug: 35365171]  
  - ice: add port representor ethtool ops and stats (Wojciech Drewek)  [Orabug: 35365171]  
  - ice: switchdev slow path (Grzegorz Nitka)  [Orabug: 35365171]  
  - ice: rebuild switchdev when resetting all VFs (Grzegorz Nitka)  [Orabug: 35365171]  
  - ice: enable/disable switchdev when managing VFs (Grzegorz Nitka)  [Orabug: 35365171]  
  - ice: introduce new type of VSI for switchdev (Grzegorz Nitka)  [Orabug: 35365171]  
  - ice: set and release switchdev environment (Grzegorz Nitka)  [Orabug: 35365171]  
  - ice: allow changing lan_en and lb_en on dflt rules (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: manage VSI antispoof and destination override (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: allow process VF opcodes in different ways (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: introduce VF port representor (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: support basic E-Switch mode control (Michal Swiatkowski)  [Orabug: 35365171]  
  - ice: Prefer kcalloc over open coded arithmetic (Len Baker)  [Orabug: 35365171]  
  - ice: Fix macro name for IPv4 fragment flag (Jeff Guo)  [Orabug: 35365171]  
  - ice: refactor devlink getter/fallback functions to void (Jacob Keller)  [Orabug: 35365171]  
  - ice: Fix link mode handling (Anirudh Venkataramanan)  [Orabug: 35365171]  
  - ice: Add feature bitmap, helpers and a check for DSCP (Anirudh Venkataramanan)  [Orabug: 35365171]  
  - ice: Add DSCP support (Dave Ertman)  [Orabug: 35365171]  
  - ice: Use the xsk batched rx allocation interface (Magnus Karlsson)  [Orabug: 35365171]  
  - ice: Open devlink when device is ready (Leon Romanovsky)  [Orabug: 35365171]  
  - RDS/RDMA: No need to set rdma permissions on fastreg QP (Devesh Sharma)  [Orabug: 34912404]  
  - perf session: Show branch speculation info in raw dump (Sandipan Das)  [Orabug: 35117390]  
  - perf script: Show branch speculation info (Sandipan Das)  [Orabug: 35117390]  
  - perf branch: Fix interpretation of branch records (James Clark)  [Orabug: 35117390]  
  - perf test: Replace brstack test workload (Namhyung Kim)  [Orabug: 35117390]  
  - perf test: Fix skipping branch stack sampling test (James Clark)  [Orabug: 35117390]  
  - tools headers UAPI: Sync linux/perf_event.h with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 35117390]  
  - tools headers cpufeatures: Sync with the kernel sources (Arnaldo Carvalho de Melo)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Adjust LBR regardless of filtering (Stephane Eranian)  [Orabug: 35117390]  
  - perf/x86/utils: Fix uninitialized var in get_branch_type() (Stephane Eranian)  [Orabug: 35117390]  
  - perf branch: Add PERF_BR_NEW_ARCH_[N] map for BRBE on arm64 platform (Anshuman Khandual)  [Orabug: 35117390]  
  - perf branch: Add branch privilege information request flag (Anshuman Khandual)  [Orabug: 35117390]  
  - perf tests powerpc: Fix branch stack sampling test to include sanity check for branch filter (Athira Rajeev)  [Orabug: 35117390]  
  - perf branch: Extend branch type classification (Anshuman Khandual)  [Orabug: 35117390]  
  - perf branch: Add system error and not in transaction branch types (Anshuman Khandual)  [Orabug: 35117390]  
  - perf docs: Update the documentation for the save_type filter (Kan Liang)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Add LbrExtV2 branch speculation info support (Sandipan Das)  [Orabug: 35117390]  
  - perf/core: Add speculation info to branch entries (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Use fusion-aware branch classifier (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86: Make branch classifier fusion-aware (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Add LbrExtV2 software branch filter support (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86: Move branch classifier (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Add LbrExtV2 hardware branch filter support (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Add LbrExtV2 branch record support (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/lbr: Detect LbrExtV2 support (Sandipan Das)  [Orabug: 35117390]  
  - x86/cpufeatures: Add LbrExtV2 feature bit (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/core: Add generic branch record interfaces (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/core: Refactor branch attributes (Sandipan Das)  [Orabug: 35117390]  
  - perf/x86/amd/brs: Move feature-specific functions (Sandipan Das)  [Orabug: 35117390]  
  - perf test: Fix test case 95 ("Check branch stack sampling") on s390 and use same event (Thomas Richter)  [Orabug: 35117390]  
  - perf test: Add test for branch stack sampling (German Gomez)  [Orabug: 35117390]  
  - perf script: Output branch sample type (James Clark)  [Orabug: 35117390]  
  - perf script: Refactor branch stack printing (James Clark)  [Orabug: 35117390]  
  - perf session: Print branch stack entry type in --dump-raw-trace (James Clark)  [Orabug: 35117390]  
  - perf evsel: Add error message for unsupported branch stack cases (James Clark)  [Orabug: 35117390]  
  - perf: Add irq and exception return branch types (Anshuman Khandual)  [Orabug: 35117390]  
  - perf tools: Add missing branch_sample_type to perf_event_attr__fprintf() (Anshuman Khandual)  [Orabug: 35117390]  
  - perf test sample-parsing: Fix branch_stack entry endianness check (Thomas Richter)  [Orabug: 35117390]  
  - perf test sample-parsing: Add endian test for struct branch_flags (Madhavan Srinivasan)  [Orabug: 35117390]  
  - perf evsel: Add bitfield_swap() to handle branch_stack endian issue (Madhavan Srinivasan)  [Orabug: 35117390]  
  - net/rds: Introduce RDS-INQ feature to RDS protocol (Devesh Sharma)  [Orabug: 35316632]  
  - bpf: Relax the requirement to use preallocated hash maps in tracing progs. (Alexei Starovoitov)  [Orabug: 35411243]  
  - uapi perf_event.h: Fixes perf compilation error (Thomas Tai)  [Orabug: 35275813]  
  - tcp: Fix build break when CONFIG_IPV6=n (Saeed Mahameed)  [Orabug: 35361256]  
  - tcp: Add listening address to SYN flood message (Jamie Bainbridge)  [Orabug: 35361256]  
  - net/tls: Use RCU API to access tls_ctx->netdev (Maxim Mikityanskiy)  [Orabug: 35074598]  
  - selftests: tls: handful of memrnd() and length checks (Jakub Kicinski)  [Orabug: 35074598]  
  - net: devlink: remove unused locked functions (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: convert reload command to take implicit devlink->lock (Jiri Pirko)  [Orabug: 35074598]  
  - netdevsim: convert driver to use unlocked devlink API during init/fini (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: avoid false DEADLOCK warning reported by lockdep (Moshe Shemesh)  [Orabug: 35074598]  
  - RDMA/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (Maher Sanalla)  [Orabug: 35074598]  
  - platform/mellanox: Remove redundant 'NULL' check (Vadim Pasternak)  [Orabug: 35074598]  
  - platform/mellanox: Remove unnecessary code (Vadim Pasternak)  [Orabug: 35074598]  
  - platform/mellanox: mlxreg-lc: Fix locking issue (Vadim Pasternak)  [Orabug: 35074598]  
  - platform/mellanox: mlxreg-lc: Fix coverity warning (Vadim Pasternak)  [Orabug: 35074598]  
  - net/mlx5: Unlock on error in mlx5_sriov_enable() (Dan Carpenter)  [Orabug: 35074598]  
  - net/mlx5e: Fix use after free in mlx5e_fs_init() (Dan Carpenter)  [Orabug: 35074598]  
  - net/mlx5e: kTLS, Use _safe() iterator in mlx5e_tls_priv_tx_list_cleanup() (Dan Carpenter)  [Orabug: 35074598]  
  - net/mlx5: unlock on error path in esw_vfs_changed_event_handler() (Dan Carpenter)  [Orabug: 35074598]  
  - net/mlx5e: TC, Add missing policer validation (Roi Dayan)  [Orabug: 35074598]  
  - net/mlx5: Fix cmd error logging for manage pages cmd (Roy Novich)  [Orabug: 35074598]  
  - net/mlx5: Eswitch, Fix forwarding decision to uplink (Eli Cohen)  [Orabug: 35074598]  
  - net/mlx5: LAG, fix logic over MLX5_LAG_FLAG_NDEVS_READY (Eli Cohen)  [Orabug: 35074598]  
  - ip_tunnel: Respect tunnel key's "flow_flags" in IP tunnels (Eyal Birger)  [Orabug: 35074598]  
  - net/mlx5e: Allocate flow steering storage during uplink initialization (Leon Romanovsky)  [Orabug: 35074598]  
  - virtio: Revert "virtio: find_vqs() add arg sizes" (Michael S. Tsirkin)  [Orabug: 35074598]  
  - xsk: Fix corrupted packets for XDP_SHARED_UMEM (Magnus Karlsson)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Forbid PTP enablement only in RX or in TX (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Protect PTP configuration with a mutex (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Fix compilation warnings (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: minimal: Fix deadlock in ports creation (Vadim Pasternak)  [Orabug: 35074598]  
  - virtio: find_vqs() add arg sizes (Xuan Zhuo)  [Orabug: 35074598]  
  - virtio: record the maximum queue num supported by the device. (Xuan Zhuo)  [Orabug: 35074598]  
  - remoteproc: rename len of rpoc_vring to num (Xuan Zhuo)  [Orabug: 35074598]  
  - net/mlx5e: xsk: Discard unaligned XSK frames on striding RQ (Maxim Mikityanskiy)  [Orabug: 35074598]  
  - mlxsw: spectrum: Support ethtool 'get_ts_info' callback in Spectrum-2 (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Support SIOCGHWTSTAMP, SIOCSHWTSTAMP ioctls (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: spectrum: Support time stamping on Spectrum-2 (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: Send PTP packets as data packets to overcome a limitation (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Add implementation for physical hardware clock operations (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: Query UTC sec and nsec PCI offsets and values (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Add PTP initialization / finalization for Spectrum-2 (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: Support CQEv2 for SDQ in Spectrum-2 and newer ASICs (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Add helper functions to configure PTP traps (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: core_linecards: Remove duplicated include in core_linecard_dev.c (Yang Li)  [Orabug: 35074598]  
  - devlink: Hold the instance lock in health callbacks (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Lock mlx5 devlink health recovery callback (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx4: Lock mlx4 devlink reload callback (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx4: Use devl_ API for devlink port register / unregister (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx4: Use devl_ API for devlink region create / destroy (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Lock mlx5 devlink reload callbacks (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Move fw reset unload to mlx5_fw_reset_complete_reload (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5e: kTLS, Dynamically re-size TX recycling pool (Tariq Toukan)  [Orabug: 35074598]  
  - net/mlx5e: kTLS, Recycle objects of device-offloaded TLS TX connections (Tariq Toukan)  [Orabug: 35074598]  
  - net/mlx5e: kTLS, Take stats out of OOO handler (Tariq Toukan)  [Orabug: 35074598]  
  - net/mlx5e: kTLS, Introduce TLS-specific create TIS (Tariq Toukan)  [Orabug: 35074598]  
  - net/mlx5e: Move mlx5e_init_l2_addr to en_main (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Split en_fs ndo's and move to en_main (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Separate mlx5e_set_rx_mode_work and move caller to en_main (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Add mdev to flow_steering struct (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Report flow steering errors with mdev err report API (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Convert mlx5e_flow_steering member of mlx5e_priv to pointer (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Allocate VLAN and TC for featured profiles only (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Make mlx5e_tc_table private (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: Convert mlx5e_tc_table member of mlx5e_flow_steering to pointer (Lama Kayal)  [Orabug: 35074598]  
  - net/mlx5e: TC, Support tc action api for police (Roi Dayan)  [Orabug: 35074598]  
  - net/mlx5e: TC, Separate get/update/replace meter functions (Roi Dayan)  [Orabug: 35074598]  
  - net/mlx5e: Add red and green counters for metering (Roi Dayan)  [Orabug: 35074598]  
  - net/mlx5e: TC, Allocate post meter ft per rule (Roi Dayan)  [Orabug: 35074598]  
  - net/mlx5: DR, Add support for flow metering ASO (Yevgeny Kliteynik)  [Orabug: 35074598]  
  - net/mlx5e: Fix wrong use of skb_tcp_all_headers() with encapsulation (Gal Pressman)  [Orabug: 35074598]  
  - net/mlx5: Fix driver use of uninitialized timeout (Shay Drory)  [Orabug: 35074598]  
  - net/mlx5: DR, Fix SMFS steering info dump format (Yevgeny Kliteynik)  [Orabug: 35074598]  
  - net/mlx5e: Modify slow path rules to go to slow fdb (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5e: Fix calculations related to max MPWQE size (Maxim Mikityanskiy)  [Orabug: 35074598]  
  - net/mlx5e: xsk: Account for XSK RQ UMRs when calculating ICOSQ size (Maxim Mikityanskiy)  [Orabug: 35074598]  
  - net/mlx5e: TC, Fix post_act to not match on in_port metadata (Maor Dickman)  [Orabug: 35074598]  
  - platform/mellanox: mlxreg-lc: Fix error flow and extend verbosity (Vadim Pasternak)  [Orabug: 35074598]  
  - RDMA/mlx5: Rename the mkey cache variables and functions (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Store in the cache mkeys instead of mrs (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Store the number of in_use cache mkeys instead of total_mrs (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Replace cache list with Xarray (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Replace ent->lock with xa_lock (Aharon Landau)  [Orabug: 35074598]  
  - selftests: mlxsw: Check line card info on activated line card (Jiri Pirko)  [Orabug: 35074598]  
  - selftests: mlxsw: Check line card info on provisioned line card (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: core_linecards: Implement line card device flashing (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: core_linecards: Expose device PSID over device info (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: reg: Add Management DownStream Device Tunneling Register (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: core_linecards: Probe active line cards for devices and expose FW version (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: reg: Extend MDDQ by device_info (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: core_linecards: Expose HW revision and INI version (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: core_linecards: Introduce per line card auxiliary device (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: introduce nested devlink entity for line card (Jiri Pirko)  [Orabug: 35074598]  
  - ip_tunnels: Add new flow flags field to ip_tunnel_key (Paul Chaignon)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Rename mlxsw_sp1_ptp_phc_adjfreq() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Rename mlxsw_sp_ptp_get_message_types() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Use 'struct mlxsw_sp_ptp_clock' per ASIC (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Use 'struct mlxsw_sp_ptp_state' per ASIC (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: pci: Simplify FRC clock reading (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_ptp: Initialize the clock to zero as part of initialization (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Rename 'read_frc_capable' bit to 'read_clock_capable' (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: resources: Add resource identifier for maximum number of FIDs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum: Fix the shift of FID field in TX header (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: Set time stamp type as part of config profile (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: cmd: Add UTC related fields to query firmware command (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: pci_hw: Add 'time_stamp' and 'time_stamp_type' fields to CQEv2 (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: reg: Add Monitoring Time Precision Correction Port Configuration Register (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: reg: Add MTUTC register's fields for supporting PTP in Spectrum-2 (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: Rename mlxsw_reg_mtptptp_pack() to mlxsw_reg_mtptpt_pack() (Danielle Ratson)  [Orabug: 35074598]  
  - mlxsw: core: Fix use-after-free calling devl_unlock() in mlxsw_core_bus_device_unregister() (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: use netif_is_any_bridge_port() instead of open code (Juhee Kang)  [Orabug: 35074598]  
  - net/mlx5: CT: Remove warning of ignore_flow_level support for non PF (Roi Dayan)  [Orabug: 35074598]  
  - net/mlx5e: Add resiliency for PTP TX port timestamp (Aya Levin)  [Orabug: 35074598]  
  - net/mlx5: Expose ts_cqe_metadata_size2wqe_counter (Aya Levin)  [Orabug: 35074598]  
  - net/mlx5e: HTB, move htb functions to a new file (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: HTB, change functions name to follow convention (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: HTB, remove priv from htb function calls (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: HTB, hide and dynamically allocate mlx5e_htb structure (Saeed Mahameed)  [Orabug: 35074598]  
  - net/mlx5e: HTB, move stats and max_sqs to priv (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: HTB, move section comment to the right place (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: HTB, move ids to selq_params struct (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: HTB, reduce visibility of htb functions (Saeed Mahameed)  [Orabug: 35074598]  
  - net/mlx5e: Fix mqprio_rl handling on devlink reload (Moshe Tal)  [Orabug: 35074598]  
  - net/mlx5e: Report header-data split state through ethtool (Gal Pressman)  [Orabug: 35074598]  
  - net: devlink: add unlocked variants of devlink_region_create/destroy() functions (Jiri Pirko)  [Orabug: 35074598]  
  - mlxsw: convert driver to use unlocked devlink API during init/fini (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: add unlocked variants of devlink_dpipe*() functions (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: add unlocked variants of devlink_sb*() functions (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: add unlocked variants of devlink_resource*() functions (Jiri Pirko)  [Orabug: 35074598]  
  - net: devlink: add unlocked variants of devling_trap*() functions (Jiri Pirko)  [Orabug: 35074598]  
  - net/mlx5: fs, allow flow table creation with a UID (Mark Bloch)  [Orabug: 35074598]  
  - net/mlx5: fs, expose flow table ID to users (Mark Bloch)  [Orabug: 35074598]  
  - net/mlx5: Expose the ability to point to any UID from shared UID (Mark Bloch)  [Orabug: 35074598]  
  - lib/bitmap: change type of bitmap_weight to unsigned long (Yury Norov)  [Orabug: 35074598]  
  - net: devlink: make devlink_dpipe_headers_register() return void (Jiri Pirko)  [Orabug: 35074598]  
  - lib/bitmap: change return types to bool where appropriate (Yury Norov)  [Orabug: 35074598]  
  - platform/mellanox: mlxreg-io: Add locking for io operations (Vadim Pasternak)  [Orabug: 35074598]  
  - net/mlx5e: Remove the duplicating check for striding RQ when enabling LRO (Maxim Mikityanskiy)  [Orabug: 35074598]  
  - net/mlx5e: Move the LRO-XSK check to mlx5e_fix_features (Maxim Mikityanskiy)  [Orabug: 35074598]  
  - net/mlx5e: Extend flower police validation (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5e: configure meter in flow action (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Removed useless code in function (Rustam Subkhankulov)  [Orabug: 35074598]  
  - net/mlx5: Bridge, implement QinQ support (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5: Bridge, implement infrastructure for VLAN protocol change (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5: Bridge, extract VLAN push/pop actions creation (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5: Bridge, rename filter fg to vlan_filter (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5: Bridge, refactor groups sizes and indices (Vlad Buslov)  [Orabug: 35074598]  
  - net/mlx5: debugfs, Add num of in-use FW command interface slots (Tariq Toukan)  [Orabug: 35074598]  
  - net/mlx5: Expose vnic diagnostic counters for eswitch managed vports (Michael Guralnik)  [Orabug: 35074598]  
  - net/mlx5: Use the bitmap API to allocate bitmaps (Christophe JAILLET)  [Orabug: 35074598]  
  - net: devlink: use helpers to work with devlink->lock mutex (Jiri Pirko)  [Orabug: 35074598]  
  - devlink: Hold the instance lock in port_new / port_del callbacks (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Remove devl_unlock from mlx5_devlink_eswitch_mode_set (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Use devl_ API in mlx5e_devlink_port_register (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Use devl_ API in mlx5_esw_devlink_sf_port_register (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Use devl_ API in mlx5_esw_offloads_devlink_port_register (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Use devl_ API for rate nodes destroy (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: Remove devl_unlock from mlx5_eswtich_mode_callback_enter (Moshe Shemesh)  [Orabug: 35074598]  
  - net/mlx5: fix 32bit build (Paolo Abeni)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Remove '_ub_' indication from structures and defines (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Remove flood_index() from FID operation structure (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Enable unified bridge model (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add ubridge to config profile (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add support for 802.1Q FID family (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add new FID families for unified bridge model (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add support for VLAN RIFs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Configure egress FID classification after routing (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_router: Do not configure VID for sub-port RIFs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Configure layer 3 egress VID classification (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Configure ingress RIF classification (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Configure VNI to FID classification (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Configure egress VID for unicast FDB entries (Amit Cohen)  [Orabug: 35074598]  
  - net/mlx5e: TC, Support offloading police action (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Add flow_action to parse state (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Add post meter table for flow metering (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Add generic macros to use metadata register mapping (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Get or put meter by the index of tc police action (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Add support to modify hardware flow meter parameters (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5e: Prepare for flow meter offload if hardware supports it (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5: Implement interfaces to control ASO SQ and CQ (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5: Add support to create SQ and CQ for ASO (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5: E-switch: Change eswitch mode only via devlink command (Chris Mi)  [Orabug: 35074598]  
  - net/mlx5: E-switch, Remove dependency between sriov and eswitch mode (Chris Mi)  [Orabug: 35074598]  
  - net/mlx5: E-switch, Introduce flag to indicate if fdb table is created (Chris Mi)  [Orabug: 35074598]  
  - net/mlx5: E-switch, Introduce flag to indicate if vport acl namespace is created (Chris Mi)  [Orabug: 35074598]  
  - net/mlx5: delete dead code in mlx5_esw_unlock() (Dan Carpenter)  [Orabug: 35074598]  
  - net/mlx5: Delete ipsec_fs header file as not used (Leon Romanovsky)  [Orabug: 35074598]  
  - net: add skb_[inner_]tcp_all_headers helpers (Eric Dumazet)  [Orabug: 35074598]  
  - mellanox/mlxsw: fix repeated words in comments (Jilin Yuan)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Convert MDB code to use PGT APIs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Flush port from MDB entries according to FID index (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Add support for getting and putting MDB entry (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Implement mlxsw_sp_mc_mdb_entry_{init, fini}() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Add support for maintaining list of ports per MDB entry (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Add support for maintaining hash table of MDB entries (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Save MAC and FID as a key in 'struct mlxsw_sp_mdb_entry' (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Rename MIDs list (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Rename MID structure (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Align PGT index to legacy bridge model (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Configure flooding entries using PGT APIs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Set 'mid_base' as part of flood tables initialization (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum: Initialize PGT table (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Extend PGT APIs to support maintaining list of ports per entry (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add a dedicated structure for bitmap of ports (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add an indication of SMPE index validity for PGT table (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add an initial PGT table support (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Configure egress VID classification for multicast (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Set flood bridge type for FIDs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Store 'bridge_type' as part of FID family (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Prepare 'bridge_type' field for SFMR usage (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Configure flooding table type for rFID (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum: Add a temporary variable to indicate bridge model (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum: Change mlxsw_sp_rif_vlan_fid_op() to be dedicated for FID RIFs (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum: Rename MLXSW_SP_RIF_TYPE_VLAN (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum: Use different arrays of FID families per-ASIC type (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Pass FID structure to __mlxsw_sp_fid_port_vid_map() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Pass FID structure to mlxsw_sp_fid_op() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Rename mlxsw_sp_fid_vni_op() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Update FID structure prior to device configuration (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Maintain {port, VID}->FID mappings (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Implement missing operations for rFID and dummy FID (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Use 'fid->fid_offset' when setting VNI (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_fid: Save 'fid_offset' as part of FID structure (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: pci: Query resources before and after issuing 'CONFIG_PROFILE' command (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: cmd: Increase 'config_profile.flood_mode' length (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add enumerator for 'config_profile.flood_mode' (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Handle error in mlxsw_sp_bridge_mdb_mc_enable_sync() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Convert mlxsw_sp_mc_write_mdb_entry() to return int (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Add error path in mlxsw_sp_port_mc_disabled_set() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Simplify mlxsw_sp_port_mc_disabled_set() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Do not set 'multicast_enabled' twice (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: spectrum_switchdev: Pass 'struct mlxsw_sp' to mlxsw_sp_bridge_mdb_mc_enable_sync() (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Remove lag_vid_valid indication (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add support for VLAN RIF as part of RITR register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add support for egress FID classification after decapsulation (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add egress FID field to RITR register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add Router Egress Interface to VID Register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Replace MID related fields in SFGC register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add flood related field to SFMR register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add VID related fields to SFD register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add SMPE related fields to SFMR register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: Add SMPE related fields to SMID2 register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add Switch Multicast Port to Egress VID Register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add ingress RIF related fields to SVFA register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add ingress RIF related fields to SFMR register (Amit Cohen)  [Orabug: 35074598]  
  - mlxsw: reg: Add 'flood_rsp' field to SFMR register (Amit Cohen)  [Orabug: 35074598]  
  - selftests: spectrum-2: tc_flower_scale: Dynamically set scale target (Ido Schimmel)  [Orabug: 35074598]  
  - selftests: mlxsw: Add a RIF counter scale test (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: tc_flower_scale: Add a traffic test (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: resource_scale: Pass target count to cleanup (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: resource_scale: Allow skipping a test (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: resource_scale: Introduce traffic tests (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: resource_scale: Update scale target after test setup (Ido Schimmel)  [Orabug: 35074598]  
  - mlxsw: Add a resource describing number of RIFs (Petr Machata)  [Orabug: 35074598]  
  - mlxsw: Keep track of number of allocated RIFs (Petr Machata)  [Orabug: 35074598]  
  - mlxsw: Trap ARP packets at layer 3 instead of layer 2 (Amit Cohen)  [Orabug: 35074598]  
  - mlxbf_gige: remove own module name define and use KBUILD_MODNAME instead (David Thompson)  [Orabug: 35074598]  
  - mlxsw: Revert "Prepare for XM implementation - LPM trees" (Petr Machata)  [Orabug: 35074598]  
  - mlxsw: Revert "Prepare for XM implementation - prefix insertion and removal" (Petr Machata)  [Orabug: 35074598]  
  - mlxsw: Revert "Introduce initial XM router support" (Petr Machata)  [Orabug: 35074598]  
  - net/mlx5: Add bits and fields to support enhanced CQE compression (Ofer Levi)  [Orabug: 35074598]  
  - net/mlx5: Remove not used MLX5_CAP_BITS_RW_MASK (Shay Drory)  [Orabug: 35074598]  
  - net/mlx5: group fdb cleanup to single function (Shay Drory)  [Orabug: 35074598]  
  - net/mlx5: Add support EXECUTE_ASO action for flow entry (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5: Add HW definitions of vport debug counters (Saeed Mahameed)  [Orabug: 35074598]  
  - net/mlx5: Add IFC bits and enums for flow meter (Jianbo Liu)  [Orabug: 35074598]  
  - net/mlx5: Manage ICM of type modify-header pattern (Yevgeny Kliteynik)  [Orabug: 35074598]  
  - net/mlx5: Introduce header-modify-pattern ICM properties (Yevgeny Kliteynik)  [Orabug: 35074598]  
  - RDMA/mlx5: Add a umr recovery flow (Aharon Landau)  [Orabug: 35074598]  
  - bitmap: Fix return values to be unsigned (Kees Cook)  [Orabug: 35074598]  
  - lib: add bitmap_{from,to}_arr64 (Yury Norov)  [Orabug: 35074598]  
  - virtio: introduce config op to synchronize vring callbacks (Jason Wang)  [Orabug: 35074598]  
  - virtio: Replace unsigned with unsigned int (Solomon Tan)  [Orabug: 35074598]  
  - RDMA/mlx5: Clean UMR QP type flow from mlx5_ib_post_send() (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Use mlx5_umr_post_send_wait() to update xlt (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Use mlx5_umr_post_send_wait() to update MR pas (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Move creation and free of translation tables to umr.c (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Use mlx5_umr_post_send_wait() to rereg pd access (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Use mlx5_umr_post_send_wait() to revoke MRs (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Introduce mlx5_umr_post_send_wait() (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Expose wqe posting helpers outside of wr.c (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Simplify get_umr_update_access_mask() (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Move mkey ctrl segment logic to umr.c (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Move umr checks to umr.h (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Move init and cleanup of UMR to umr.c (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Store ndescs instead of the translation table size (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Merge similar flows of allocating MR from the cache (Aharon Landau)  [Orabug: 35074598]  
  - RDMA/mlx5: Remove redundant work in struct mlx5_cache_ent (Aharon Landau)  [Orabug: 35074598]  
  - ethtool: add header/data split indication (Jakub Kicinski)  [Orabug: 35074598]  
  - RDMA/mlx5: Use memset_after() to zero struct mlx5_ib_mr (Kees Cook)  [Orabug: 35074598]  
  - ethtool: extend ringparam setting/getting API with rx_buf_len (Hao Chen)  [Orabug: 35074598]  
  - ethtool: add support to set/get rx buf len via ethtool (Hao Chen)  [Orabug: 35074598]  
  - selftests: mlxsw: Add a scale test for RIF MAC profiles (Danielle Ratson)  [Orabug: 35074598]  
  - selftests: mlxsw: Add helpers for skipping selftests (Petr Machata)  [Orabug: 35074598]  
  - RDMA/mlx5: Attach ndescs to mlx5_ib_mkey (Aharon Landau)  [Orabug: 35074598]  
  - string.h: Introduce memset_startat() for wiping trailing members and padding (Kees Cook)  [Orabug: 35074598]  
  - string.h: Introduce memset_after() for wiping trailing members/padding (Kees Cook)  [Orabug: 35074598]  
  - lib: Introduce CONFIG_MEMCPY_KUNIT_TEST (Kees Cook)  [Orabug: 35074598]  
  - selftests: mlxsw: RED: Test per-TC ECN counters (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: RED: Add selftests for the mark qevent (Petr Machata)  [Orabug: 35074598]  
  - selftests: mlxsw: sch_red_core: Drop two unused variables (Petr Machata)  [Orabug: 35074598]  
  - xsk: Fix clang build error in __xp_alloc (Magnus Karlsson)  [Orabug: 35074598]  
  - xsk: Optimize for aligned case (Magnus Karlsson)  [Orabug: 35074598]  
  - xsk: Batched buffer allocation for the pool (Magnus Karlsson)  [Orabug: 35074598]  
  - Revert "vdpa/mlx5: Propagate link status from device to vdpa driver" (Mikhael Goikhman)  [Orabug: 35074598]  
  - platform/mellanox: mlxreg-lc: fix error code in mlxreg_lc_create_static_devices() (Dan Carpenter)  [Orabug: 34988287]  
  - ref_tracker: use __GFP_NOFAIL more carefully (Eric Dumazet)  [Orabug: 34988287]  
  - net: allow gro_max_size to exceed 65536 (Alexander Duyck)  [Orabug: 34988287]  
  - net: allow gso_max_size to exceed 65536 (Alexander Duyck)  [Orabug: 34988287]  
  - net: use sk_is_tcp() in more places (Eric Dumazet)  [Orabug: 34988287]  
  - bpf, sockmap: Use stricter sk state checks in sk_lookup_assign (John Fastabend)  [Orabug: 34988287]  
  - net: Adjust sk_gso_max_size once when set (David Ahern)  [Orabug: 34988287]  
  - net: add IFLA_TSO_{MAX_SIZE|SEGS} attributes (Eric Dumazet)  [Orabug: 34988287]  
  - net: make drivers set the TSO limit not the GSO limit (Jakub Kicinski)  [Orabug: 34988287]  
  - lan78xx: Introduce NAPI polling support (John Efstathiades)  [Orabug: 34988287]  
  - lan78xx: Remove hardware-specific header update (John Efstathiades)  [Orabug: 34988287]  
  - lan78xx: Re-order rx_submit() to remove forward declaration (John Efstathiades)  [Orabug: 34988287]  
  - lan78xx: Introduce Rx URB processing improvements (John Efstathiades)  [Orabug: 34988287]  
  - lan78xx: Introduce Tx URB processing improvements (John Efstathiades)  [Orabug: 34988287]  
  - lan78xx: Fix memory allocation bug (John Efstathiades)  [Orabug: 34988287]  
  - net: usb: ax88179_178a: add TSO feature (Jacky Chou)  [Orabug: 34988287]  
  - net: switch to netif_napi_add_tx() (Jakub Kicinski)  [Orabug: 34988287]  
  - netdev: reshuffle netif_napi_add() APIs to allow dropping weight (Jakub Kicinski)  [Orabug: 34988287]  
  - eth: remove copies of the NAPI_POLL_WEIGHT define (Jakub Kicinski)  [Orabug: 34988287]  
  - qeth: remove a copy of the NAPI_POLL_WEIGHT define (Jakub Kicinski)  [Orabug: 34988287]  
  - eth: cpsw: remove a copy of the NAPI_POLL_WEIGHT define (Jakub Kicinski)  [Orabug: 34988287]  
  - net: lantiq_xrx200: increase napi poll weigth (Aleksander Jan Bajkowski)  [Orabug: 34988287]  
  - mlxsw: Use dscp_t in struct mlxsw_sp_fib4_entry (Guillaume Nault)  [Orabug: 34988287]  
  - netdevsim: Use dscp_t in struct nsim_fib4_rt (Guillaume Nault)  [Orabug: 34988287]  
  - ipv4: Use dscp_t in struct fib_entry_notifier_info (Guillaume Nault)  [Orabug: 34988287]  
  - ipv4: Use dscp_t in struct fib_rt_info (Guillaume Nault)  [Orabug: 34988287]  
  - ipv4: Use dscp_t in struct fib_alias (Guillaume Nault)  [Orabug: 34988287]  
  - ipv4: Reject routes specifying ECN bits in rtm_tos (Guillaume Nault)  [Orabug: 34988287]  
  - ipv4: Stop taking ECN bits into account in fib4-rules (Guillaume Nault)  [Orabug: 34988287]  
  - ipv6: Define dscp_t and stop taking ECN bits into account in fib6-rules (Guillaume Nault)  [Orabug: 34988287]  
  - selftests: fib rule: Don't echo modified sysctls (Guillaume Nault)  [Orabug: 34988287]  
  - selftests: fib rule: Log test description (Guillaume Nault)  [Orabug: 34988287]  
  - selftests: fib rule: Drop erroneous TABLE variable (Guillaume Nault)  [Orabug: 34988287]  
  - selftests: fib rule: Make 'getmatch' and 'match' local variables (Guillaume Nault)  [Orabug: 34988287]  
  - net: mscc: ocelot: support egress VLAN rewriting via VCAP ES0 (Vladimir Oltean)  [Orabug: 34988287]  
  - net/mlx5e: CT: Use own workqueue instead of mlx5e priv (Roi Dayan)  [Orabug: 34988287]  
  - net/mlx5: Lag, correct get the port select mode str (Liu, Changcheng)  [Orabug: 34988287]  
  - net/mlx5: Lag, decouple FDB selection and shared FDB (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: TC, allow offload from uplink to other PF's VF (Eli Cohen)  [Orabug: 34988287]  
  - net/mlx5e: Fix matchall police parameters validation (Vlad Buslov)  [Orabug: 34988287]  
  - net/sched: act_police: allow 'continue' action offload (Vlad Buslov)  [Orabug: 34988287]  
  - platform/mellanox: nvsw-sn2201: fix error code in nvsw_sn2201_create_static_devices() (Dan Carpenter)  [Orabug: 34988287]  
  - platform/mellanox: Add static in struct declaration. (Michael Shych)  [Orabug: 34988287]  
  - platform/mellanox: Spelling s/platfom/platform/ (Geert Uytterhoeven)  [Orabug: 34988287]  
  - net/mlx5: E-Switch, pair only capable devices (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5e: CT: Fix cleanup of CT before cleanup of TC ct rules (Paul Blakey)  [Orabug: 34988287]  
  - Revert "net/mlx5e: Allow relaxed ordering over VFs" (Saeed Mahameed)  [Orabug: 34988287]  
  - net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition (Maxim Mikityanskiy)  [Orabug: 34988287]  
  - net/mlx5: fix typo in comment (Julia Lawall)  [Orabug: 34988287]  
  - net/mlx5: fix multiple definitions of mlx5_lag_mpesw_init / mlx5_lag_mpesw_cleanup (Jakub Kicinski)  [Orabug: 34988287]  
  - net/mlx5: Support multiport eswitch mode (Eli Cohen)  [Orabug: 34988287]  
  - net/mlx5: Remove unused argument (Eli Cohen)  [Orabug: 34988287]  
  - net/mlx5: Lag, refactor lag state machine (Eli Cohen)  [Orabug: 34988287]  
  - net/mlx5e: Add XDP SQs to uplink representors steering tables (Gal Pressman)  [Orabug: 34988287]  
  - net/mlx5e: Correct the calculation of max channels for rep (Moshe Tal)  [Orabug: 34988287]  
  - net/mlx5e: CT: Add ct driver counters (Saeed Mahameed)  [Orabug: 34988287]  
  - net/mlx5e: Allow relaxed ordering over VFs (Aya Levin)  [Orabug: 34988287]  
  - net/mlx5e: Support partial GSO for tunnels over vlans (Gal Pressman)  [Orabug: 34988287]  
  - net/mlx5e: IPoIB, Improve ethtool rxnfc callback structure in IPoIB (Gal Pressman)  [Orabug: 34988287]  
  - net/mlx5e: Allocate virtually contiguous memory for reps structures (Tariq Toukan)  [Orabug: 34988287]  
  - net/mlx5e: Allocate virtually contiguous memory for VLANs list (Tariq Toukan)  [Orabug: 34988287]  
  - net/mlx5: Allocate virtually contiguous memory in pci_irq.c (Tariq Toukan)  [Orabug: 34988287]  
  - net/mlx5: Allocate virtually contiguous memory in vport.c (Tariq Toukan)  [Orabug: 34988287]  
  - net/mlx5: Inline db alloc API function (Tariq Toukan)  [Orabug: 34988287]  
  - net/mlx5: Add last command failure syndrome to debugfs (Moshe Shemesh)  [Orabug: 34988287]  
  - net/mlx5: sparse: error: context imbalance in 'mlx5_vf_get_core_dev' (Saeed Mahameed)  [Orabug: 34988287]  
  - net/mlxbf_gige: use eth_zero_addr() to clear mac address (Lu Wei)  [Orabug: 34988287]  
  - mlx5: support BIG TCP packets (Eric Dumazet)  [Orabug: 34988287]  
  - mlx4: support BIG TCP packets (Eric Dumazet)  [Orabug: 34988287]  
  - ipv6/gso: remove temporary HBH/jumbo header (Eric Dumazet)  [Orabug: 34988287]  
  - ipv6: add struct hop_jumbo_hdr definition (Eric Dumazet)  [Orabug: 34988287]  
  - mlxbf_gige: remove driver-managed interrupt counts (David Thompson)  [Orabug: 34988287]  
  - platform/mellanox: Add support for new SN2201 system (Michael Shych)  [Orabug: 34988287]  
  - platform_data/mlxreg: Add field for notification callback (Michael Shych)  [Orabug: 34988287]  
  - fortify: Provide a memcpy trap door for sharp corners (Kees Cook)  [Orabug: 34988287]  
  - net/mlx5: Lag, add debugfs to query hardware lag state (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, use buckets in hash mode (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, refactor dmesg print (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Support devices with more than 2 ports (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, use actual number of lag ports (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, use hash when in roce lag on 4 ports (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, support single FDB only on 2 ports (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, store number of ports inside lag object (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, use lag lock (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, move E-Switch prerequisite check into lag code (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Lag, expose number of lag ports (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: Increase FW pre-init timeout for health recovery (Gavin Li)  [Orabug: 34988287]  
  - net/mlx5: Add exit route when waiting for FW (Gavin Li)  [Orabug: 34988287]  
  - mlxsw: spectrum_router: Take router lock in router notifier handler (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum: Update a comment (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum: Move handling of tunnel events to router code (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum: Move handling of router events to router code (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum: Move handling of HW stats events to router code (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum: Move handling of VRF events to router code (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum_router: Add a dedicated notifier block (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: spectrum: Tolerate enslaving of various devices to VRF (Petr Machata)  [Orabug: 34988287]  
  - mlxbf_gige: increase MDIO polling rate to 5us (David Thompson)  [Orabug: 34988287]  
  - net: don't allow user space to lift the device limits (Jakub Kicinski)  [Orabug: 34988287]  
  - net: add netif_inherit_tso_max() (Jakub Kicinski)  [Orabug: 34988287]  
  - net/mlx5e: Use XFRM state direction instead of flags (Leon Romanovsky)  [Orabug: 34988287]  
  - ixgbe: propagate XFRM offload state direction instead of flags (Leon Romanovsky)  [Orabug: 34988287]  
  - xfrm: store and rely on direction to construct offload flags (Leon Romanovsky)  [Orabug: 34988287]  
  - xfrm: delete not used number of external headers (Leon Romanovsky)  [Orabug: 34988287]  
  - Revert "Merge branch 'mlxsw-line-card-model'" (Jakub Kicinski)  [Orabug: 34988287]  
  - mlxsw: spectrum_router: Only query neighbour activity when necessary (Ido Schimmel)  [Orabug: 34988287]  
  - mlxsw: spectrum_switchdev: Only query FDB notifications when necessary (Ido Schimmel)  [Orabug: 34988287]  
  - mlxsw: spectrum_acl: Do not report activity for multicast routes (Ido Schimmel)  [Orabug: 34988287]  
  - net/mlx5: Allow future addition of IPsec object modifiers (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Don't perform lookup after already known sec_path (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Cleanup XFRM attributes struct (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove not-supported ICV length (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Simplify IPsec capabilities logic (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Don't advertise IPsec netdev support for non-IPsec device (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Make sure that no dangling IPsec FS pointers exist (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Clean IPsec FS add/delete rules (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Simplify HW context interfaces by using SA entry (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove indirections from esp functions (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Merge various control path IPsec headers into one file (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove useless validity check (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Store IPsec ESN update work in XFRM state (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Reduce useless indirection in IPsec FS add/delete flows (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Don't hide fallback to software IPsec in FS code (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Check IPsec TX flow steering namespace in advance (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Simplify IPsec flow steering init/cleanup functions (Leon Romanovsky)  [Orabug: 34988287]  
  - mlxsw: Configure descriptor buffers (Petr Machata)  [Orabug: 34988287]  
  - mlxsw: reg: Add "desc" field to SBPR (Petr Machata)  [Orabug: 34988287]  
  - net/mlx5: fs, an FTE should have no dests when deleted (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: fs, call the deletion function of the node (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: fs, do proper bookkeeping for forward destinations (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: fs, add unused destination type (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: fs, jump to exit point and don't fall through (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: fs, refactor software deletion rule (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5: fs, split software and IFC flow destination definitions (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5e: TC, set proper dest type (Mark Bloch)  [Orabug: 34988287]  
  - net/mlx5e: Remove unused mlx5e_dcbnl_build_rep_netdev function (Gal Pressman)  [Orabug: 34988287]  
  - net/mlx5e: Drop error CQE handling from the XSK RX handler (Maxim Mikityanskiy)  [Orabug: 34988287]  
  - net/mlx5: Print initializing field in case of timeout (Shay Drory)  [Orabug: 34988287]  
  - net/mlx5: Delete redundant default assignment of runtime devlink params (Shay Drory)  [Orabug: 34988287]  
  - net/mlx5: Remove useless kfree (Haowen Bai)  [Orabug: 34988287]  
  - net/mlx5: use kvfree() for kvzalloc() in mlx5_ct_fs_smfs_matcher_create (Ziyang Xuan)  [Orabug: 34988287]  
  - net: mellanox: fix open-coded for_each_set_bit() (Yury Norov)  [Orabug: 34988287]  
  - selftests: mlxsw: Check device info on activated line card (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Expose device FW version over device info (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MDDQ device_info by FW version fields (Jiri Pirko)  [Orabug: 34988287]  
  - selftests: mlxsw: Check line card info on provisioned line card (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Expose HW revision and INI version (Jiri Pirko)  [Orabug: 34988287]  
  - selftests: mlxsw: Check devices on provisioned line card (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Probe provisioned line cards for devices and attach them (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MDDQ by device_info (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: introduce line card device info infrastructure (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: introduce line card info get message (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: introduce line card devices support (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Fix size of array element during ini_files allocation (Jiri Pirko)  [Orabug: 34988287]  
  - ipv6: Use ipv6_only_sock() helper in condition. (Kuniyuki Iwashima)  [Orabug: 34988287]  
  - mlxsw: core_hwmon: Add interfaces for line card initialization and de-initialization (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_thermal: Add interfaces for line card initialization and de-initialization (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_env: Add interfaces for line card initialization and de-initialization (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_env: Split module power mode setting to a separate function (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core: Add bus argument to environment init API (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Introduce ops for linecards status change tracking (Jiri Pirko)  [Orabug: 34988287]  
  - selftests: mlxsw: Introduce devlink line card provision/unprovision/activation tests (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: spectrum: Add port to linecard mapping (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core: Extend driver ops by remove selected ports op (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Implement line card activation process (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: core_linecards: Add line card objects and implement provisioning (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: reg: Add Management Binary Code Transfer Register (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: reg: Add Management DownStream Device Control Register (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: reg: Add Management DownStream Device Query Register (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: spectrum: Introduce port mapping change event processing (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: Narrow the critical section of devl_lock during ports creation/removal (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: reg: Add Ports Mapping Event Configuration Register (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: spectrum: Allocate port mapping array of structs instead of pointers (Jiri Pirko)  [Orabug: 34988287]  
  - mlxsw: spectrum: Allow lane to start from non-zero index (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: add port to line card relationship set (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: implement line card active state (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: implement line card provisioning (Jiri Pirko)  [Orabug: 34988287]  
  - devlink: add support to create line card and expose to user (Jiri Pirko)  [Orabug: 34988287]  
  - mlx5, xsk: Diversify return values from xsk_wakeup call paths (Maciej Fijalkowski)  [Orabug: 34988287]  
  - mlxsw: core_thermal: Use common define for thermal zone name length (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_thermal: Use exact name of cooling devices for binding (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_thermal: Add line card id prefix to line card thermal zone name (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_thermal: Extend internal structures to support multi thermal areas (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_hwmon: Introduce slot parameter in hwmon interfaces (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_hwmon: Extend internal structures to support multi hwmon objects (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core: Move port module events enablement to a separate function (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core: Extend port module data structures for line cards (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core: Extend interfaces for cable info access with slot argument (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Add new field to Management General Peripheral Information Register (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: core_env: Pass slot index during PMAOS register write call (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MGPIR register with new slot fields (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Extend PMMP register with new slot number field (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MCION register with new slot number field (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MCIA register with new slot number field (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MTBR register with new slot number field (Vadim Pasternak)  [Orabug: 34988287]  
  - mlxsw: reg: Extend MTMP register with new slot number field (Vadim Pasternak)  [Orabug: 34988287]  
  - net/mlx5: Remove not-implemented IPsec capabilities (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove ipsec_ops function table (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Reduce kconfig complexity while building crypto support (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Move IPsec file to relevant directory (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove not-needed IPsec config (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Align flow steering allocation namespace to common style (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Unify device IPsec capabilities check (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove useless IPsec device checks (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove ipsec vs. ipsec offload file separation (Leon Romanovsky)  [Orabug: 34988287]  
  - RDMA/mlx5: Drop crypto flow steering API (Leon Romanovsky)  [Orabug: 34988287]  
  - RDMA/mlx5: Delete never supported IPsec flow action (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove FPGA ipsec specific statistics (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove XFRM no_trailer flag (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove not-used IDA field from IPsec struct (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Delete metadata handling logic (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5_fpga: Drop INNOVA IPsec support (Leon Romanovsky)  [Orabug: 34988287]  
  - net/sched: act_police: Add extack messages for offload failure (Ido Schimmel)  [Orabug: 34988287]  
  - net/sched: act_api: Add extack to offload_act_setup() callback (Ido Schimmel)  [Orabug: 34988287]  
  - net/sched: flower: Take verbose flag into account when logging error messages (Ido Schimmel)  [Orabug: 34988287]  
  - net/sched: matchall: Take verbose flag into account when logging error messages (Ido Schimmel)  [Orabug: 34988287]  
  - IB/mlx5: Fix undefined behavior due to shift overflowing the constant (Borislav Petkov)  [Orabug: 34988287]  
  - net/mlx5: Cleanup kTLS function names and their exposure (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove tls vs. ktls separation as it is the same (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Remove indirection in TLS build (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5: Reliably return TLS device capabilities (Leon Romanovsky)  [Orabug: 34988287]  
  - net/mlx5_fpga: Drop INNOVA TLS support (Leon Romanovsky)  [Orabug: 34988287]  
  - mlxsw: spectrum_router: simplify list unwinding (Tom Rix)  [Orabug: 34988287]  
  - net: sched: avoid newline at end of message in NL_SET_ERR_MSG_MOD (Wan Jiabing)  [Orabug: 34988287]  
  - fortify: Add Clang support (Kees Cook)  [Orabug: 34988287]  
  - fortify: Make sure strlen() may still be used as a constant expression (Kees Cook)  [Orabug: 34988287]  
  - fortify: Use __diagnose_as() for better diagnostic coverage (Kees Cook)  [Orabug: 34988287]  
  - fortify: Make pointer arguments const (Kees Cook)  [Orabug: 34988287]  
  - Compiler Attributes: Add __diagnose_as for Clang (Kees Cook)  [Orabug: 34988287]  
  - Compiler Attributes: Add __overloadable for Clang (Kees Cook)  [Orabug: 34988287]  
  - Compiler Attributes: Add __pass_object_size for Clang (Kees Cook)  [Orabug: 34988287]  
  - fortify: Replace open-coded __gnu_inline attribute (Kees Cook)  [Orabug: 34988287]  
  - fortify: Detect struct member overflows in memset() at compile-time (Kees Cook)  [Orabug: 34988287]  
  - fortify: Detect struct member overflows in memmove() at compile-time (Kees Cook)  [Orabug: 34988287]  
  - fortify: Detect struct member overflows in memcpy() at compile-time (Kees Cook)  [Orabug: 34988287]  
  - gro: add ability to control gro max packet size (Coco Li)  [Orabug: 34988287]  
  - flow_offload: fix suspicious RCU usage when offloading tc action (Baowen Zheng)  [Orabug: 34988287]  
  - flow_offload: add reoffload process to update hw_count (Baowen Zheng)  [Orabug: 34988287]  
  - net: sched: save full flags for tc action (Baowen Zheng)  [Orabug: 34988287]  
  - flow_offload: add process to update action stats from hardware (Baowen Zheng)  [Orabug: 34988287]  
  - flow_offload: add skip_hw and skip_sw to control if offload the action (Baowen Zheng)  [Orabug: 34988287]  
  - xfrm: add net device refcount tracker to struct xfrm_state_offload (Eric Dumazet)  [Orabug: 34988287]  
  - net: add networking namespace refcount tracker (Eric Dumazet)  [Orabug: 34988287]  
  - net: add net device refcount tracker infrastructure (Eric Dumazet)  [Orabug: 34988287]  
  - lib: add reference counting tracking infrastructure (Eric Dumazet)  [Orabug: 34988287]  
  - lib, stackdepot: add helper to print stack entries (Imran Khan)  [Orabug: 34988287]  
  - tools: sync uapi/linux/if_link.h header (Eric Dumazet)  [Orabug: 34988287]  
  - net: annotate accesses to dev->gso_max_segs (Eric Dumazet)  [Orabug: 34988287]  
  - net: annotate accesses to dev->gso_max_size (Eric Dumazet)  [Orabug: 34988287]  
  - net: gro: populate net/core/gro.c (Eric Dumazet)  [Orabug: 34988287]  
  - net: gro: move skb_gro_receive into net/core/gro.c (Eric Dumazet)  [Orabug: 34988287]  
  - net: gro: move skb_gro_receive_list to udp_offload.c (Eric Dumazet)  [Orabug: 34988287]  
  - net: move gro definitions to include/net/gro.h (Eric Dumazet)  [Orabug: 34988287]  
  - cls_flower: Fix inability to match GRE/IPIP packets (Yoshiki Komachi)  [Orabug: 34988287]  
  - fortify: strlen: Avoid shadowing previous locals (Qian Cai)  [Orabug: 34988287]  
  - platform/mellanox: mlxreg-lc: Add initial support for Nvidia line card devices (Vadim Pasternak)  [Orabug: 34988287]  
  - platform/mellanox: mlxreg-hotplug: Extend logic for hotplug devices operations (Vadim Pasternak)  [Orabug: 34988287]  
  - platform_data/mlxreg: Add new field for secured access (Vadim Pasternak)  [Orabug: 34988287]  
  - platform_data/mlxreg: Add new type to support modular systems (Vadim Pasternak)  [Orabug: 34988287]  
  - fortify: Add compile-time FORTIFY_SOURCE tests (Kees Cook)  [Orabug: 34988287]  
  - RDMA/mlx5: Add steering support in optional flow counters (Aharon Landau)  [Orabug: 34988287]  
  - net:dev: Change napi_gro_complete return type to void (Gyumin Hwang)  [Orabug: 34988287]  
  - fortify: Allow strlen() and strnlen() to pass compile-time known lengths (Kees Cook)  [Orabug: 34988287]  
  - fortify: Prepare to improve strnlen() and strlen() warnings (Kees Cook)  [Orabug: 34988287]  
  - fortify: Move remaining fortify helpers into fortify-string.h (Kees Cook)  [Orabug: 34988287]  
  - lib/string: Move helper functions out of string.c (Kees Cook)  [Orabug: 34988287]  
  - i2c: designware: Fix corrupted memory seen in the ISR (Jan Bottorff)  [Orabug: 35811484]  
  - ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block (Gautham Ananthakrishna)  [Orabug: 35859330]  
  - net/rds: Avoid calling pci_irq_vector() when system goes down (Gerd Rausch)  [Orabug: 35524808]  
  - KVM: SVM: Set target pCPU during IRTE update if target vCPU is running (Sean Christopherson)  [Orabug: 35827613]  
  - KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry (Sean Christopherson)  [Orabug: 35827613]  
  - io_uring: add a sysctl to disable io_uring system-wide (Matteo Rizzo)  [Orabug: 35828593]


