# changelog

author: Anand Jain <anand.jain@oracle.com> - 6.12.0-1.el9
changelog:
  - btrfs-progs: release 6.12.0-1 (Anand Jain)  
  - btrfs-progs: resize: remove the misleading warning for the 'max' option (Anand Jain)  
  - btrfs-progs: btrfstune: add ability to remove squotas (Boris Burkov)  
  - btrfs-progs: add a helper for clearing all the items in a tree (Boris Burkov)  
  - btrfs-progs: btrfstune: fix documentation for --enable-simple-quota (Boris Burkov)


author: Nicola Sella <nsella@redhat.com> 4.0.12-1
changelog:
  - Update Cmake to pull translations from weblate
  - Drop Python 2 support
  - README: Add Installation, Contribution, etc
  - Add the DNF_SYSTEM_UPGRADE_NO_REBOOT env variable to control system-upgrade reboot.
  - [system-upgrade] Upgrade groups and environments (RhBug:1845562,1860408)


author: Nicola Sella <nsella@redhat.com> - 4.0.13-1
changelog:
  - Update to 4.0.13
  - system-upgrade: Use Transaction Store/Replay
  - system-upgrade: Pretty-print the state json


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.15-1
changelog:
  - Update to 4.0.15
  - Add symlink for man pages of offline-upgrade and offline-distrosync commands (RhBug:1917378)
  - system-upgrade: Handle empty transaction on download (RhBug:1917639)


author: Alex Burmashev <alexander.burmashev@oracle.com> - 057-104.git20250919.0.3
changelog:
  - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. [Orabug: 38705580]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.12
changelog:
  - Fix evaluation order of bcopy() arguments and lift non-alloca restriction
    on the source address. (Eugene Loh, Kris Van Hees)
  - Implement actions: clear(), tracemem(). (Kris Van Hees, Eugene Loh)
  - Implement subroutines: copyout(), copyinstr(). (Kris Van Hees, Eugene Loh)
  - Implement options: switchrate, aggrate.
  - Implement provider: cpc. (Eugene Loh)
  - Implement provider: proc.
  - Implement built-in variable: uregs. (Eugene Loh)
  - Increase strtab maximum size.
  - Support using indirect load instructions for pointers to alloca()'d and
    DTrace managed memory. (Kris Van Hees, Eugene Loh)
  - Fix arg0 and arg1 for profile-* and tick-* probes. (Eugene Loh)
  - Implement runtime bounds checking for scalar array access. (Eugene Loh)
  - Updated manpage and moved to dtrace.8.
  - Support arbitrary address pointers for basename(), dirname(), strchr(),
    strrchr(), and inet_ntoa(). (Eugene Loh) [Orabug: 34857846]
  - Add runtime bounds checking for scalar array access. (Eugene Loh)
    [Orabug: 35045463]
  - Various testsuite fixes and improvements. [Orabug: 34829509]
  - Various code improvements. [Orabug: 34829509]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.13
changelog:
  - Full support for is-enabled USDT probes. (Nick Alcock)
  - Report error on programs that exceed aggsize or dynvarsize.
  - Support for drop counters for principal, speculation, and aggregation buffers
    and for dynamic variables.
  - Implement probe: proc:::signal-clear.
  - Implement provider: sched (partial implementation).
  - Implement provider: lockstat (for kernels >= 5.10.0 and UEK6 with fix).
  - Support NULL strings. (Eugene Loh)
  - Support uregs[] on older kernels. (Eugene Loh)
  - New option: lonknommap. (Nick Alcock)
  - Support for USDT probes in programs in different fs namespaces. (Nick Alcock)
  - Support for USDT probes in non-PIE executables. (Nick Alcock)
  - Fix dtprobed to support DOF that exceeds 64KiB. (Nick Alcock)
    [Orabug: 35411920]
  - Do not modify input files with dtrace -G if unchanged. (Steven Sistare)
    [Orbug: 35417184]
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees) [Orabug: 35435195]
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 35435195]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.13.1
changelog:
  - Restart dtprobed when upgrading DTrace.
  - Report and clean up orphaned tracing events after each test.


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.13.2
changelog:
  - Support using DTrace with upstream kernels.
  - Implement provider: ip.
  - Implement actions: trunc(), pcap().
  - Implement subroutines: inet_ntoa6().
  - Implement subroutines: inet_ntop(). (Eugene Loh)
  - Support modules.builtin.ranges for builtin module-symbol association.
  - Provide a BTF-to-CTF convertor to provide (limited) kernel type information
    when CTF is not available.
  - Remove dependency on waitfd(). (Nick Alcock)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various code improvements. (Nick Alcock, Eugene Loh, Kris Van Hees)


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.0-1.14
changelog:
  - Implement provider: io.  (Eugene Loh, Kris Van Hees)
  - Implement actions: print().  (Alan Maguire)
  - Implement subroutines: link_ntop(), cleanpath().  (Eugene Loh)
  - Implement options: -xcpu, -xaggpercpu.  (Eugene Loh)
  - Improve providers: pid (offset-based probes) and rawtp (arg info).
  - Improve options: -xlockmem (improve default).  (Eugene Loh)
  - Ensure USDT probes can survive dtprobed restarts.  (Nick Alcock)
  - Improve USDT probe creation/deletion.  (Nick Alcock)
  - Improve support for DTrace with upstream kernels.  (Nick Alcock)
  - Improve support for compiling DTrace in older environments.  (Kris Van Hees)
  - Add support for aggregations of stacks.  (Eugene Loh)
  - Improve lexer parsing (top-level wildcard ambiguities and `numerals).
    (Nick Alcock)
  - Fix END probe execution with multiple tracers.  (Nick Alcock)
  - Preemptive BPF program execution for DTrace probes is not allowed.
  - Buffer overrun fix for systems with non-sequential online CPU ids.
    (Kris Van Hees, Nick Alcock) [Orabug: 36356681]
  - Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 36329725]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.1-1
changelog:
  - Implement FBT probes with fentry/fexit tracepoints
  - Provide argument info for FBT probes.
  - Provide pre-generated translator files sets. [Orabug: 36504847]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.2-1
changelog:
  - Translators to support kernels 6.10 and later.
  - FBT return probe argument support.
  - The print() action is augmented with type information.  (Alan Maguire)
  - Support to discover and trace USDT probes after a tracing session has
    started.  (Eugene Loh, Nick Alcock)
  - USDT probe argument support (translated types, mapping).  (Nick Alcock)
  - Installation locations are now configurable.  (Nick Alcock)
  - Valgrind is no longer a required build dependency.  (Nick Alcock)
  - Self-grabs have been improved.  (Nick Alcock)
  - New provider: rawfbt.  (Kris Van Hees)
  - Various bug fixes.  (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)
  - Various code improvements.  (Nick Alcock, Eugene Loh, Kris Van Hees)
    [Orabug: 37274251]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.3-1
changelog:
  - This is only released on OL10.
  - Redesigned USDT support to work for LTO compilations.  [Orabug: 38011704]
  - New builtin variable: execargs.
  - Offset probes in pid provider.  (Eugene Loh)
  - Various bug fixes.  (Nick Alcock, Eugene Loh, Kris Van Hees)
  - Various testsuite fixes and improvements.
    (Nick Alcock, Sam James, Eugene Loh, Kris Van Hees)


author: Eugene Loh <eugene.loh@oracle.com> - 2.0.4-1
changelog:
  - TCP, UDP, and stapsdt providers implemented.  (Alan Maguire)
  - New learning materials:  the User's Guide in Markdown format,
    example scripts, and a context file for LLMs.
    (Eugene Loh, Bruce McCulloch, Ruud van der Pas, Elena Zannoni).
  - Allow [u]stack() to be used as a variable value.  (Kris Van Hees)
    [Orabug: 37950533]
  - Comments using // are now supported.  (Kris Van Hees)
  - Scalability improvements.  (Kris Van Hees)
  - Error injection via return() action.  (Kris Van Hees)
  - Improved string handling.  (Kris Van Hees)
  - Various bug fixes.  (Eugene Loh, Kris Van Hees)
  - Fix dyn vars overwriting one another.  [Orabug: 37994729]
  - Fix regression:  list fbt probes by default.  [Orabug: 38249511]
  - Various testsuite fixes and improvements.
    (Nick Alcock, Eugene Loh, Alan Maguire, Kris Van Hees)
  - Add test for preprocessor definitions.  [Orabug: 28763074]
  - Fix some stack tests.  [Orabug: 37459289]


author: Eugene Loh <eugene.loh@oracle.com> - 2.0.5-1
changelog:
  - Implement PID-specific uprobes.  (Kris Van Hees)
  - Allocate the buffers BPF map to fit highest CPU id.  (Kris Van Hees)
  - Fix argument handling for multi-location user probes.
    (Kris Van Hees) [Orabug: 38922360]
  - Change the "stack skip" to 3 for fbt (fprobe) and rawtp providers.
    [Orabug: 38776929]
  - Fix prvname so that both rawfbt and fbt probes are seen.
    [Orabug: 38842114]
  - Do not convert "__" to "-" for stapsdt provider names.
  - Fix printf formatting with non-monetary grouping chars.
    [Orabug: 30430270]
  - Discontinue -xversion=V as an option.  (Kris Van Hees) [Orabug: 38615307]
  - Add the DTrace Tutorial to the git repo and install package.
  - Add missing documentation:  trunc(), stapsdt, usdt.h include path.
  - Update LLM context files to forbid "if" statements.
  - Test suite weakly pulls in kernel-uek-tools to get perf.  (Nick Alcock)
    [Orabug: 38064413]


author: Kris Van Hees <kris.van.hees@oracle.com> - 2.0.7-4
changelog:
  - Prevent out-of-buonds memory access during object symbol table construction
    (CVE-2026-35233).  [Orabug: 39121881]
  - Prevent divide-by-zero (FPE trap) if section header data is corrupted.
    (CVE-2026-21996).  [Orabug: 39121874]
  - Ensure safety checks are performed on program header data from ELF objects.
  - Ensure that the data of string table sections is proper terminated.
  - Ensure that the symbol table references a valid string table.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.1.el9
changelog:
  - man: ip-link.8: add a note for gso_ipv4_max_size (Andrea Claudi)
  - iplink: add gso and gro max_size attributes for ipv4 (Andrea Claudi)
  - Update kernel headers (Andrea Claudi)
  - ss: Add support for dumping TCP bound-inactive sockets. (Andrea Claudi)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.13.11.el9uek]
changelog:
  - Revert "perf build-ids: Fall back to debuginfod query if debuginfo not found" (Samasth Norway Ananda)  [Orabug: 37577051]
  - Refine rpm conflicts field about shim for OL10 (Yifei Liu)  [Orabug: 37574800]
  - fs/dcache: remove sentinel from negative dentry sysctl (Stephen Brennan)  [Orabug: 37463693]
  - scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (Arun Easi)  [Orabug: 37581892]
  - scsi: fnic: Test for memory allocation failure and return error code (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Return appropriate error code from failure of scsi drv init (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Return appropriate error code for mem alloc failure (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (Arun Easi)  [Orabug: 37581892]
  - scsi: fnic: Fix use of uninitialized value in debug message (Dheeraj Reddy Jonnalagadda)  [Orabug: 37581892]
  - scsi: fnic: Delete incorrect debugfs error handling (Dan Carpenter)  [Orabug: 37581892]
  - scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Remove extern definition from .c files (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Increment driver version (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add support to handle port channel RSCN (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Code cleanup (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add stats and related functionality (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Modify fnic interfaces to use FDLS (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Modify IO path to use FDLS (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add functionality in fnic to support FDLS (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add and integrate support for FIP (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add and integrate support for FDMI (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add Cisco hardware model names (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add support for unsolicited requests and responses (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add support for target based solicited requests and responses (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add support for fabric based solicited requests and responses (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Add headers and definitions for FDLS (Karan Tilak Kumar)  [Orabug: 37581892]
  - scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (Karan Tilak Kumar)  [Orabug: 37581892]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.15.12.el9uek]
changelog:
  - LTS version: v6.12.15 (Jack Vogel)
  - xfs: don't lose solo dquot update transactions (Darrick J. Wong)
  - LTS version: v6.12.14 (Jack Vogel)
  - ocfs2: check dir i_size in ocfs2_find_entry (Su Yue)
  - arm64: dts: rockchip: add reset-names for combphy on rk3568 (Chukun Pan)
  - statmount: let unset strings be empty (Miklos Szeredi)
  - fs: fix adding security options to statmount.mnt_opt (Miklos Szeredi)
  - fs: prepend statmount.mnt_opts string with security_sb_mnt_opts() (Jeff Layton)
  - drm/xe: Fix and re-enable xe_print_blob_ascii85() (Lucas De Marchi)
  - Revert "drm/amd/display: Fix green screen issue after suspend" (Rodrigo Siqueira)
  - Revert "selftests/sched_ext: fix build after renames in sched_ext API" (Libo Chen)
  - md: Fix linear_set_limits() (Bart Van Assche)
  - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add() (Dan Carpenter)
  - x86/mm: Convert unreachable() to BUG() (Peter Zijlstra)
  - mptcp: prevent excessive coalescing on receive (Paolo Abeni)
  - btrfs: avoid monopolizing a core when activating a swap file (Filipe Manana)
  - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den)
  - spi: atmel-qspi: Memory barriers after memory-mapped I/O (Bence Csókás)
  - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families (Csókás, Bence)
  - xfs: fix mount hang during primary superblock recovery failure (Long Li)
  - xfs: lock dquot buffer before detaching dquot from b_li_list (Darrick J. Wong)
  - xfs: release the dquot buf outside of qli_lock (Darrick J. Wong)
  - xfs: convert quotacheck to attach dquot buffers (Darrick J. Wong)
  - xfs: attach dquot buffer to dquot log item buffer (Darrick J. Wong)
  - xfs: clean up log item accesses in xfs_qm_dqflush{,_done} (Darrick J. Wong)
  - xfs: separate dquot buffer reads from xfs_dqflush (Darrick J. Wong)
  - xfs: don't lose solo superblock counter update transactions (Darrick J. Wong)
  - xfs: avoid nested calls to __xfs_trans_commit (Darrick J. Wong)
  - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static (WangYuli)
  - s390/fpu: Add fpc exception handler / remove fixup section again (Heiko Carstens)
  - timers/migration: Fix off-by-one root mis-connection (Frederic Weisbecker)
  - rtc: zynqmp: Fix optional clock name property (Michal Simek)
  - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error (Yishai Hadas)
  - ptp: Ensure info->enable callback is always set (Thomas Weißschuh)
  - pinctrl: renesas: rzg2l: Fix PFC_MASK for RZ/V2H and RZ/G3E (Lad Prabhakar)
  - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional() fails (Javier Carrasco)
  - rtla/timerlat_top: Stop timerlat tracer on signal (Tomas Glozar)
  - rtla/timerlat_hist: Stop timerlat tracer on signal (Tomas Glozar)
  - rtla: Add trace_instance_stop (Tomas Glozar)
  - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar)
  - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads (Tomas Glozar)
  - rtla/osnoise: Distinguish missing workload option (Tomas Glozar)
  - tracing/osnoise: Fix resetting of tracepoints (Steven Rostedt)
  - scripts/gdb: fix aarch64 userspace detection in get_current_task (Jan Kiszka)
  - maple_tree: simplify split calculation (Wei Yang)
  - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset (Milos Reljin)
  - net/ncsi: wait for the last response to Deselect Package before configuring channel (Paul Fertser)
  - misc: fastrpc: Fix copy buffer page size (Ekansh Gupta)
  - misc: fastrpc: Fix registered buffer page address (Ekansh Gupta)
  - misc: fastrpc: Deregister device nodes properly in error scenarios (Anandu Krishnan E)
  - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (Vimal Agrawal)
  - mtd: onenand: Fix uninitialized retlen in do_otp_read() (Ivan Stepchenko)
  - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so (Nick Chan)
  - i3c: master: Fix missing 'ret' assignment in set_speed() (Frank Li)
  - fgraph: Fix set_graph_notrace with setting TRACE_GRAPH_NOTRACE_BIT (Steven Rostedt)
  - NFC: nci: Add bounds checking in nci_hci_create_pipe() (Dan Carpenter)
  - mailbox: zynqmp: Remove invalid __percpu annotation in zynqmp_ipi_probe() (Uros Bizjak)
  - mailbox: tegra-hsp: Clear mailbox before using message (Pekka Pessi)
  - NFSD: Encode COMPOUND operation status on page boundaries (Chuck Lever)
  - nfs: Make NFS_FSCACHE select NETFS_SUPPORT instead of depending on it (Dragan Simic)
  - nilfs2: fix possible int overflows in nilfs_fiemap() (Nikita Zhandarovich)
  - ocfs2: handle a symlink read error correctly (Matthew Wilcox (Oracle))
  - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao)
  - pnfs/flexfiles: retry getting layout segment for reads (Mike Snitzer)
  - selftests: mptcp: connect: -f: no reconnect (Matthieu Baerts (NGI0))
  - vfio/platform: check the bounds of read/write syscalls (Alex Williamson)
  - io_uring/net: don't retry connect operation on EPOLLERR (Jens Axboe)
  - io_uring: fix multishots with selected buffers (Pavel Begunkov)
  - nvmem: imx-ocotp-ele: set word length to 1 (Sascha Hauer)
  - nvmem: imx-ocotp-ele: fix reading from non zero offset (Sascha Hauer)
  - nvmem: imx-ocotp-ele: fix MAC address byte order (Sascha Hauer)
  - nvmem: imx-ocotp-ele: simplify read beyond device check (Sascha Hauer)
  - nvmem: core: improve range check for nvmem_cell_write() (Jennifer Berringer)
  - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config (Luca Weiss)
  - ceph: fix memory leak in ceph_mds_auth_match() (Antoine Viallon)
  - crypto: qce - unregister previously registered algos in error path (Bartosz Golaszewski)
  - crypto: qce - fix goto jump in error path (Bartosz Golaszewski)
  - irqchip/irq-mvebu-icu: Fix access to msi_data from irq_domain::host_data (Stefan Eichenberger)
  - ata: libata-sff: Ensure that we cannot write outside the allocated buffer (Niklas Cassel)
  - mm/compaction: fix UBSAN shift-out-of-bounds warning (Liu Shixin)
  - mm/hugetlb: fix hugepage allocation for interleaved memory nodes (Ritesh Harjani (IBM))
  - mm/vmscan: accumulate nr_demoted for accurate demotion statistics (Li Zhijian)
  - mm: gup: fix infinite loop within __get_longterm_locked (Zhaoyang Huang)
  - mm: kmemleak: fix upper boundary check for physical address objects (Catalin Marinas)
  - media: uvcvideo: Remove dangling pointers (Ricardo Ribalda)
  - media: uvcvideo: Remove redundant NULL assignment (Ricardo Ribalda)
  - media: uvcvideo: Only save async fh if success (Ricardo Ribalda)
  - media: uvcvideo: Support partial control reads (Ricardo Ribalda)
  - media: uvcvideo: Fix event flags in uvc_ctrl_send_events (Ricardo Ribalda)
  - media: uvcvideo: Fix crash during unbind if gpio unit is in use (Ricardo Ribalda)
  - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702 (Tomi Valkeinen)
  - media: i2c: ds90ub960: Fix UB9702 VC map (Tomi Valkeinen)
  - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702 (Tomi Valkeinen)
  - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put() (Tomi Valkeinen)
  - media: ccs: Fix cleanup order in ccs_probe() (Mehdi Djait)
  - media: ccs: Fix CCS static data parsing for large block sizes (Sakari Ailus)
  - media: stm32: dcmipp: correct dma_set_mask_and_coherent mask value (Alain Volmat)
  - media: ov5640: fix get_light_freq on auto (Sam Bobrowicz)
  - media: intel/ipu6: remove cpu latency qos request on error (Stanislaw Gruszka)
  - media: imx296: Add standby delay during probe (Naushir Patuck)
  - media: nuvoton: Fix an error check in npcm_video_ece_init() (Zhen Lei)
  - media: mc: fix endpoint iteration (Cosmin Tanislav)
  - media: mmp: Bring back registration of the device (Lubomir Rintel)
  - soc: qcom: smem_state: fix missing of_node_put in error path (Krzysztof Kozlowski)
  - soc: qcom: llcc: Enable LLCC_WRCACHE at boot on X1 (Konrad Dybcio)
  - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove (Krzysztof Kozlowski)
  - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths (Krzysztof Kozlowski)
  - soc: samsung: exynos-pmu: Fix uninitialized ret in tensor_set_bits_atomic() (Krzysztof Kozlowski)
  - iommufd/fault: Use a separate spinlock to protect fault->deliver list (Nicolin Chen)
  - iommufd/fault: Destroy response and mutex in iommufd_fault_destroy() (Nicolin Chen)
  - iommu/tegra241-cmdqv: Read SMMU IDR1.CMDQS instead of hardcoding (Nicolin Chen)
  - iio: light: as73211: fix channel handling in only-color triggered buffer (Javier Carrasco)
  - mm/hugetlb: fix avoid_reserve to allow taking folio from subpool (Peter Xu)
  - media: ccs: Clean up parsed CCS static data on parse failure (Sakari Ailus)
  - kfence: skip __GFP_THISNODE allocations on NUMA systems (Marco Elver)
  - iommufd: Fix struct iommu_hwpt_pgfault init and padding (Nicolin Chen)
  - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING (Frederic Weisbecker)
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco)
  - tpm: Change to kvalloc() in eventlog/acpi.c (Jarkko Sakkinen)
  - ACPI: PRM: Remove unnecessary strict handler address checks (Aubrey Li)
  - accel/ivpu: Clear runtime_error after pm_runtime_resume_and_get() fails (Jacek Lawrynowicz)
  - xfs: Add error handling for xfs_reflink_cancel_cow_range (Wentao Liang)
  - xfs: Propagate errors from xfs_reflink_cancel_cow_range in xfs_dax_write_iomap_end (Wentao Liang)
  - xfs: don't call remap_verify_area with sb write protection held (Christoph Hellwig)
  - pwm: microchip-core: fix incorrect comparison with max period (Conor Dooley)
  - parisc: Temporarily disable jump label support (Helge Deller)
  - arm64: tegra: Disable Tegra234 sce-fabric node (Sumit Gupta)
  - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible (Sumit Gupta)
  - crypto: qce - fix priority to be less than ARMv8 CE (Eric Biggers)
  - arm64: dts: qcom: sm8650: correct MDSS interconnects (Dmitry Baryshkov)
  - arm64: dts: qcom: sm8550: correct MDSS interconnects (Dmitry Baryshkov)
  - arm64: dts: qcom: sm8650: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8650: Fix CDSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8650: Fix ADSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8550: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8550: Fix CDSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8550: Fix ADSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8450: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8450: Fix CDSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8450: Fix ADSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8350: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8350: Fix CDSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm8350: Fix ADSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6375: Fix MPSS memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6375: Fix CDSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6375: Fix ADSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6350: Fix uart1 interconnect path (Luca Weiss)
  - arm64: dts: qcom: sm6350: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6350: Fix ADSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6115: Fix ADSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6115: Fix CDSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sm6115: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: x1e80100: Fix CDSP memory length (Krzysztof Kozlowski)
  - arm64: dts: qcom: x1e80100: Fix ADSP memory base and length (Krzysztof Kozlowski)
  - arm64: dts: qcom: sdx75: Fix MPSS memory length (Krzysztof Kozlowski)
  - arm64: dts: mediatek: mt8183: Disable DPI display output by default (Chen-Yu Tsai)
  - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module (Andreas Kemnade)
  - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus (Romain Naour)
  - ubi: Add a check for ubi_num (Denis Arefev)
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
  - x86/acpi: Fix LAPIC/x2APIC parsing order (Zhang Rui)
  - x86: rust: set rustc-abi=x86-softfloat on rustc>=1.86.0 (Alice Ryhl)
  - rust: init: use explicit ABI to clean warning in future compilers (Miguel Ojeda)
  - kbuild: Move -Wenum-enum-conversion to W=2 (Nathan Chancellor)
  - scsi: core: Do not retry I/Os during depopulation (Igor Pylypiv)
  - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li)
  - scsi: ufs: core: Fix use-after free in init error and remove paths (André Draszik)
  - scsi: ufs: qcom: Fix crypto key eviction (Eric Biggers)
  - scsi: qla2xxx: Move FCE Trace buffer allocation to user control (Quinn Tran)
  - scsi: st: Don't set pos_unknown just after device recognition (Kai Mäkisara)
  - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking (Sean Christopherson)
  - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk (Georg Gottleuber)
  - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk (Georg Gottleuber)
  - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (Niklas Cassel)
  - PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar() (Niklas Cassel)
  - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf() (Zijun Hu)
  - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 (Werner Sembach)
  - s390/pci: Fix SR-IOV for PFs initially in standby (Niklas Schnelle)
  - arm64: tegra: Fix Tegra234 PCIe interrupt-map (Brad Griffis)
  - ALSA: hda: Fix headset detection failure due to unstable sort (Kuan-Wei Chiu)
  - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7 (Takashi Iwai)
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Edson Juliano Drosdeck)
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (Krzysztof Kozlowski)
  - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available() (Krzysztof Kozlowski)
  - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Thadeu Lima de Souza Cascardo)
  - block: don't revert iter for -EIOCBQUEUED (Jens Axboe)
  - Revert "MIPS: csrc-r4k: Select HAVE_UNSTABLE_SCHED_CLOCK if SMP && 64BIT" (Xi Ruoyao)
  - MIPS: pci-legacy: Override pci_address_to_pio (Jiaxun Yang)
  - mips/math-emu: fix emulation of the prefx instruction (Mateusz Jończyk)
  - dm-crypt: track tag_offset in convert_context (Hou Tao)
  - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit() (Hou Tao)
  - powerpc/pseries/eeh: Fix get PE state translation (Narayana Murty N)
  - LoongArch: Extend the maximum number of watchpoints (Tiezhu Yang)
  - MIPS: Loongson64: remove ROM Size unit in boardinfo (Kexy Biscuit)
  - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is in use (Claudiu Beznea)
  - serial: sh-sci: Drop __initdata macro for port_cfg (Claudiu Beznea)
  - soc: qcom: socinfo: Avoid out of bounds read of serial number (Stephan Gerhold)
  - ASoC: acp: Support microphone from Lenovo Go S (Mario Limonciello)
  - arm64: dts: qcom: x1e80100: Fix usb_2 controller interrupts (Abel Vesa)
  - arm64: dts: qcom: x1e80100-microsoft-romulus: Fix USB QMP PHY supplies (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix USB QMP PHY supplies (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-crd: Fix USB QMP PHY supplies (Stephan Gerhold)
  - arm64: dts: qcom: x1e78100-lenovo-thinkpad-t14s: Fix USB QMP PHY supplies (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-qcp: Fix USB QMP PHY supplies (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix USB QMP PHY supplies (Stephan Gerhold)
  - usbnet: ipheth: document scope of NCM implementation (Foster Snowhill)
  - usbnet: ipheth: fix DPE OoB read (Foster Snowhill)
  - usbnet: ipheth: break up NCM header size computation (Foster Snowhill)
  - usbnet: ipheth: refactor NCM datagram loop (Foster Snowhill)
  - usbnet: ipheth: check that DPE points past NCM header (Foster Snowhill)
  - usbnet: ipheth: use static NDP16 location in URB (Foster Snowhill)
  - usbnet: ipheth: fix possible overflow in DPE length check (Foster Snowhill)
  - usb: gadget: f_tcm: Don't prepare BOT write request twice (Thinh Nguyen)
  - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint (Thinh Nguyen)
  - usb: gadget: f_tcm: Decrement command ref count on cleanup (Thinh Nguyen)
  - usb: gadget: f_tcm: Translate error to sense (Thinh Nguyen)
  - wifi: rtw88: 8703b: Fix RX/TX issues (Vasily Khoruzhick)
  - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916 (Shayne Chen)
  - wifi: rtw88: sdio: Fix disconnection after beacon loss (Fiona Klute)
  - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH (Nick Morrow)
  - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize() (Marcel Hamer)
  - wifi: rtlwifi: rtl8821ae: Fix media status report (Bitterblue Smith)
  - atomic64: Use arch_spin_locks instead of raw_spin_locks (Steven Rostedt)
  - ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg() (Steven Rostedt)
  - HID: hid-sensor-hub: don't use stale platform-data on remove (Heiko Stuebner)
  - Input: bbnsm_pwrkey - add remove hook (Peng Fan)
  - of: reserved-memory: Fix using wrong number of cells to get property 'alignment' (Zijun Hu)
  - of: Fix of_find_node_opts_by_path() handling of alias+path+options (Zijun Hu)
  - of: address: Fix empty resource handling in __of_address_resource_bounds() (Thomas Weißschuh)
  - of: Correct child specifier used as input of the 2nd nexus node (Zijun Hu)
  - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions (Bao D. Nguyen)
  - perf bench: Fix undefined behavior in cmpworker() (Kuan-Wei Chiu)
  - efi: libstub: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
  - blk-cgroup: Fix class @block_class's subsystem refcount leakage (Zijun Hu)
  - seccomp: passthrough uretprobe systemcall without filtering (Eyal Birger)
  - clk: mediatek: mt2701-mm: add missing dummy clk (Daniel Golle)
  - clk: mediatek: mt2701-img: add missing dummy clk (Daniel Golle)
  - clk: mediatek: mt2701-bdp: add missing dummy clk (Daniel Golle)
  - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe (Daniel Golle)
  - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe (Daniel Golle)
  - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate (Anastasia Belova)
  - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg (Satya Priya Kakitapalli)
  - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock (Luca Weiss)
  - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (Luca Weiss)
  - clk: qcom: gcc-sm8650: Do not turn off PCIe GDSCs during gdsc_disable() (Manivannan Sadhasivam)
  - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable() (Manivannan Sadhasivam)
  - clk: qcom: clk-alpha-pll: fix alpha mode configuration (Gabor Juhos)
  - clk: clk-loongson2: Fix the number count of clk provider (Binbin Zhou)
  - media: i2c: ds90ub960: Fix UB9702 refclk register access (Tomi Valkeinen)
  - clk: mmp2: call pm_genpd_init() only after genpd.name is set (Lubomir Rintel)
  - clk: sunxi-ng: a100: enable MMC clock reparenting (Cody Eksal)
  - KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y (David Gstir)
  - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection (Fedor Pchelkin)
  - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (Fedor Pchelkin)
  - drm/amd/display: Fix seamless boot sequence (Lo-an Chen)
  - drm/amdgpu: add a BO metadata flag to disable write compression for Vulkan (Marek Olšák)
  - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes (Ville Syrjälä)
  - drm/i915/dp: Iterate DSC BPP from high to low on all platforms (Jani Nikula)
  - drm/xe/devcoredump: Move exec queue snapshot to Contexts section (Lucas De Marchi)
  - drm/komeda: Add check for komeda_get_layer_fourcc_list() (Haoxiang Li)
  - drm/i915: Fix page cleanup on DMA remap failure (Brian Geffon)
  - drm/i915/guc: Debug print LRC state entries only if the context is pinned (Daniele Ceraolo Spurio)
  - Revert "drm/amd/display: Use HW lock mgr for PSR1" (Tom Chung)
  - drm/amdkfd: Block per-queue reset when halt_if_hws_hang=1 (Jay Cornwall)
  - drm/amdkfd: only flush the validate MES contex (Prike Liang)
  - drm/amd/amdgpu: change the config of cgcg on gfx12 (Kenneth Feng)
  - drm/amd/pm: Mark MM activity as unsupported (Lijo Lazar)
  - drm/amd/display: Optimize cursor position updates (Aric Cyr)
  - ksmbd: fix integer overflows on 32 bit systems (Dan Carpenter)
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (David Hildenbrand)
  - kvm: defer huge page recovery vhost task to later (Keith Busch)
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (Sean Christopherson)
  - remoteproc: omap: Handle ARM dma_iommu_mapping (Robin Murphy)
  - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma (Jakob Unterwurzacher)
  - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event() (Thomas Zimmermann)
  - KVM: arm64: timer: Always evaluate the need for a soft timer (Marc Zyngier)
  - arm64/mm: Reduce PA space to 48 bits when LPA2 is not enabled (Ard Biesheuvel)
  - arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu() (Mark Brown)
  - arm64/mm: Override PARange for !LPA2 and use it consistently (Ard Biesheuvel)
  - arm64/kvm: Configure HYP TCR.PS/DS based on host stage1 (Ard Biesheuvel)
  - accel/ivpu: Fix Qemu crash when running in passthrough (Jacek Lawrynowicz)
  - binfmt_flat: Fix integer overflow bug on 32 bit systems (Dan Carpenter)
  - fs/proc: do_task_stat: Fix ESP not readable during coredump (Nam Cao)
  - m68k: vga: Fix I/O defines (Thomas Zimmermann)
  - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented (Marc Zyngier)
  - s390/futex: Fix FUTEX_OP_ANDN implementation (Heiko Carstens)
  - md: reintroduce md-linear (Yu Kuai)
  - smb: client: change lease epoch type from unsigned int to __u16 (Meetakshi Setiya)
  - smb: client: fix order of arguments of tracepoints (Ruben Devos)
  - drm/client: Handle tiled displays better (Maarten Lankhorst)
  - drm/modeset: Handle tiled displays in pan_display_atomic. (Maarten Lankhorst)
  - cifs: Remove intermediate object of failed create SFU call (Pali Rohár)
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (Sebastian Wiese-Wagner)
  - leds: lp8860: Write full EEPROM, not only half of it (Alexander Sverdlin)
  - cpufreq: s3c64xx: Fix compilation warning (Viresh Kumar)
  - cpufreq: fix using cpufreq-dt as module (Andreas Kemnade)
  - rxrpc: Fix call state set to not include the SERVER_SECURING state (David Howells)
  - net: sched: Fix truncation of offloaded action statistics (Ido Schimmel)
  - tun: revert fix group permission check (Willem de Bruijn)
  - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)
  - pfifo_tail_enqueue: Drop new packet when sch->limit == 0 (Quang Le)
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read() (Andy Shevchenko)
  - x86/xen: add FRAME_END to xen_hypercall_hvm() (Juergen Gross)
  - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Juergen Gross)
  - gpio: sim: lock hog configfs items if present (Bartosz Golaszewski)
  - net: rose: lock the socket in rose_bind() (Eric Dumazet)
  - net: atlantic: fix warning during hot unplug (Jacob Moroni)
  - gpio: pca953x: Improve interrupt support (Mark Tomlinson)
  - rxrpc: Fix the rxrpc_connection attend queue handling (David Howells)
  - ethtool: rss: fix hiding unsupported fields in dumps (Jakub Kicinski)
  - drm/i915/dp: fix the Adaptive sync Operation mode for SDP (Ankit Nautiyal)
  - udp: gso: do not drop small packets when PMTU reduces (Yan Zhai)
  - tg3: Disable tg3 PCIe AER on system reboot (Lenny Szubowicz)
  - vmxnet3: Fix tx queue race condition with XDP (Sankararaman Jayaraman)
  - ice: Add check for devm_kzalloc() (Jiasheng Jiang)
  - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN (Florian Fainelli)
  - nvme-fc: use ctrl state getter (Daniel Wagner)
  - nvme: make nvme_tls_attrs_group static (Keith Busch)
  - ice: stop storing XDP verdict within ice_rx_buf (Maciej Fijalkowski)
  - ice: gather page_count()'s of each frag right before XDP prog call (Maciej Fijalkowski)
  - ice: put Rx buffers after being done with current frame (Maciej Fijalkowski)
  - gpu: drm_dp_cec: fix broken CEC adapter properties check (Hans Verkuil)
  - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry (Prasad Pandit)
  - nvme: handle connectivity loss in nvme_set_queue_count (Daniel Wagner)
  - sched/fair: Fix inaccurate h_nr_runnable accounting with delayed dequeue (K Prateek Nayak)
  - platform/x86: serdev_helpers: Check for serial_ctrl_uid == NULL (Hans de Goede)
  - tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN (Günther Noack)
  - tty: xilinx_uartps: split sysrq handling (Sean Anderson)
  - xfs: don't over-report free space or inodes in statvfs (Darrick J. Wong)
  - xfs: report realtime block quota limits on realtime directories (Darrick J. Wong)
  - drm/amdgpu: Fix Circular Locking Dependency in AMDGPU GFX Isolation (Srinivasan Shanmugam)
  - KVM: e500: always restore irqs (Paolo Bonzini)
  - KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults (Sean Christopherson)
  - KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock (Sean Christopherson)
  - KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map() (Sean Christopherson)
  - platform/x86: acer-wmi: Ignore AC events (Armin Wolf)
  - platform/x86: acer-wmi: add support for Acer Nitro AN515-58 (Hridesh MG)
  - Input: allocate keycode for phone linking (Illia Ostapyshyn)
  - ASoC: amd: Add ACPI dependency to fix build error (Yu-Chun Lin)
  - platform/x86: acer-wmi: Add support for Acer Predator PH16-72 (Armin Wolf)
  - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (Kuninori Morimoto)
  - platform/x86: acer-wmi: Add support for Acer PH14-51 (Armin Wolf)
  - platform/x86: int3472: Check for adev == NULL (Hans de Goede)
  - iommu/arm-smmu-v3: Clean up more on probe failure (Robin Murphy)
  - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible (Richard Acayan)
  - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7 (Simon Trimmer)
  - x86/kexec: Allocate PGD for x86_64 transition page tables separately (David Woodhouse)
  - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (Bard Liao)
  - net: ethernet: ti: am65-cpsw: ensure proper channel cleanup in error path (Roger Quadros)
  - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack() (Liu Ye)
  - tipc: re-order conditions in tipc_crypto_key_rcv() (Dan Carpenter)
  - octeon_ep_vf: update tx/rx stats locally for persistence (Shinas Rasheed)
  - octeon_ep: update tx/rx stats locally for persistence (Shinas Rasheed)
  - mmc: sdhci-msm: Correctly set the load for the regulator (Yuanjie Yang)
  - HID: hid-asus: Disable OOBE mode on the ProArt P16 (Luke D. Jones)
  - net: wwan: iosm: Fix hibernation by re-binding the driver around it (Maciej S. Szmigiero)
  - Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (Mazin Al Haddad)
  - Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925 (En-Wei Wu)
  - Bluetooth: btusb: Add new VID/PID 13d3/3610 for MT7922 (Andrew Halaney)
  - APEI: GHES: Have GHES honor the panic= setting (Borislav Petkov)
  - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz (Randolph Ha)
  - wifi: iwlwifi: avoid memory leak (Miri Korenblit)
  - wifi: iwlwifi: pcie: Add support for new device ids (Somashekhar(Som))
  - wifi: brcmfmac: Check the return value of of_property_read_string_index() (Stefan Dösinger)
  - net/mlx5: use do_aux_work for PHC overflow checks (Vadim Fedorenko)
  - HID: Wacom: Add PCI Wacom device support (Even Xu)
  - HID: multitouch: Add quirk for Hantick 5288 touchpad (Youwan Wang)
  - clk: qcom: Make GCC_8150 depend on QCOM_GDSC (Konrad Dybcio)
  - wifi: rtw88: add __packed attribute to efuse layout struct (Ping-Ke Shih)
  - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id (Hans de Goede)
  - tomoyo: don't emit warning in tomoyo_write_control() (Tetsuo Handa)
  - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (Dmitry Antipov)
  - mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G (Ciprian Marian Costea)
  - mmc: core: Respect quirk_max_rate for non-UHS SDIO card (Shawn Lin)
  - tun: fix group permission check (Stas Sergeev)
  - wifi: rtw89: add crystal_cap check to avoid setting as overflow value (Chih-Kang Chang)
  - ring-buffer: Make reading page consistent with the code logic (Jeongjun Park)
  - drm/amd/display: Limit Scaling Ratio on DCN3.01 (Gabe Teeger)
  - drm/amd/display: Increase sanitizer frame larger than limit when compile testing with clang (Nathan Chancellor)
  - safesetid: check size of policy writes (Leo Stone)
  - drm/bridge: it6505: fix HDCP CTS KSV list wait timer (Hermes Wu)
  - drm/bridge: it6505: fix HDCP CTS compare V matching (Hermes Wu)
  - drm/bridge: it6505: fix HDCP encryption when R0 ready (Hermes Wu)
  - drm/bridge: it6505: fix HDCP Bstatus check (Hermes Wu)
  - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT (Hermes Wu)
  - drm/amdkfd: Queue interrupt work to different CPU (Philip Yang)
  - drm/amdgpu: Don't enable sdma 4.4.5 CTXEMPTY interrupt (Philip Yang)
  - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor (Fangzhi Zuo)
  - drm/vc4: hdmi: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/sti: hdmi: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/radeon: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/exynos: hdmi: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/amd/display: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/bridge: ite-it66121: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/bridge: anx7625: use eld_mutex to protect access to connector->eld (Dmitry Baryshkov)
  - drm/connector: add mutex to protect ELD from concurrent access (Dmitry Baryshkov)
  - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (Kuan-Wei Chiu)
  - drm/amd/display: Overwriting dualDPP UBF values before usage (Ausef Yousof)
  - drm/amd/display: Populate chroma prefetch parameters, DET buffer fix (Ausef Yousof)
  - drm/tests: hdmi: return meaningful value from set_connector_edid() (Dmitry Baryshkov)
  - drm/tests: hdmi: handle empty modes in find_preferred_mode() (Dmitry Baryshkov)
  - nvkm: correctly calculate the available space of the GSP cmdq buffer (Zhi Wang)
  - nvkm/gsp: correctly advance the read pointer of GSP message queue (Zhi Wang)
  - drm: panel-backlight-quirks: Add Framework 13 glossy and 2.8k panels (Dustin L. Howett)
  - drm: panel-backlight-quirks: Add Framework 13 matte panel (Thomas Weißschuh)
  - drm: Add panel backlight quirks (Thomas Weißschuh)
  - drm/virtio: New fence for every plane update (Dongwon Kim)
  - x86/amd_nb: Restrict init function to AMD-based systems (Yazen Ghannam)
  - lockdep: Fix upper limit for LOCKDEP_*_BITS configs (Carlos Llamas)
  - locking/ww_mutex/test: Use swap() macro (Thorsten Blum)
  - x86: Convert unreachable() to BUG() (Peter Zijlstra)
  - sched: Don't try to catch up excess steal time. (Suleiman Souhlal)
  - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling (Josef Bacik)
  - btrfs: fix data race when accessing the inode's disk_i_size at btrfs_drop_extents() (Hao-ran Zheng)
  - s390/stackleak: Use exrl instead of ex in __stackleak_poison() (Sven Schnelle)
  - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case (Kees Cook)
  - arm64/mm: Ensure adequate HUGE_MAX_HSTATE (Anshuman Khandual)
  - btrfs: fix use-after-free when attempting to join an aborted transaction (Filipe Manana)
  - btrfs: do not output error message if a qgroup has been already cleaned up (Qu Wenruo)
  - btrfs: fix assertion failure when splitting ordered extent after transaction abort (Filipe Manana)
  - irqchip/lan966x-oic: Make CONFIG_LAN966X_OIC depend on CONFIG_MCHP_LAN966X_PCI (Geert Uytterhoeven)
  - uek-rpm: Enable MXC4005 and place it in -modules-desktop (Harshit Mogalapalli)  [Orabug: 37607614]
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 37577036]
  - Partial revert "rds: Add inc/frag cache statistics" (Hans Westgaard Ry)  [Orabug: 37576835]
  - sched_ext: disallow for now (Vegard Nossum)  [Orabug: 37229232]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.16.14.el9uek]
changelog:
  - LTS version: v6.12.16 (Jack Vogel)
  - Revert "vfio/platform: check the bounds of read/write syscalls" (Greg Kroah-Hartman)
  - vsock: Orphan socket after transport release (Michal Luczaj)
  - vsock: Keep the binding until socket destruction (Michal Luczaj)
  - io_uring/kbuf: reallocate buf lists on upgrade (Pavel Begunkov)
  - scsi: ufs: core: Ensure clk_gating.lock is used only after initialization (Avri Altman)
  - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski)
  - cpufreq/amd-pstate: Remove the goto label in amd_pstate_update_limits (Dhananjay Ugwekar)
  - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit (Ping-Ke Shih)
  - selftests/bpf: Fix uprobe consumer test (Jiri Olsa)
  - bpf: handle implicit declaration of function gettid in bpf_iter.c (Jason Xing)
  - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Andrew Cooper)
  - selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu)
  - netdevsim: print human readable IP address (Hangbin Liu)
  - drm: renesas: rz-du: Increase supported resolutions (Chris Brandt)
  - drm/xe/tracing: Fix a potential TP_printk UAF (Thomas Hellström)
  - drm/v3d: Stop active perfmon if it is being destroyed (Christian Gmeiner)
  - drm/msm/dpu1: don't choke on disabling the writeback connector (Dmitry Baryshkov)
  - drm/msm/dpu: fix x1e80100 intf_6 underrun/vsync interrupt (Stephan Gerhold)
  - drm/rcar-du: dsi: Fix PHY lock bit check (Tomi Valkeinen)
  - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit() (Dan Carpenter)
  - drm/tidss: Clear the interrupt status for interrupts being disabled (Devarsh Thakkar)
  - drm/tidss: Fix race condition while handling interrupt registers (Devarsh Thakkar)
  - drm/tidss: Fix issue in irq handling causing irq-flood issue (Tomi Valkeinen)
  - ipv6: mcast: add RCU protection to mld_newpack() (Eric Dumazet)
  - btrfs: fix stale page cache after race between readahead and direct IO write (Filipe Manana)
  - btrfs: rename __get_extent_map() and pass btrfs_inode (David Sterba)
  - ipv6: mcast: extend RCU protection in igmp6_send() (Eric Dumazet)
  - ndisc: extend RCU protection in ndisc_send_skb() (Eric Dumazet)
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Eric Dumazet)
  - arp: use RCU protection in arp_xmit() (Eric Dumazet)
  - neighbour: use RCU protection in __neigh_notify() (Eric Dumazet)
  - ndisc: use RCU protection in ndisc_alloc_skb() (Eric Dumazet)
  - HID: hid-steam: Move hidraw input (un)registering to work (Vicki Pfau)
  - HID: hid-steam: Make sure rumble work is canceled on removal (Vicki Pfau)
  - ipv6: icmp: convert to dev_net_rcu() (Eric Dumazet)
  - ipv6: use RCU protection in ip6_default_advmss() (Eric Dumazet)
  - flow_dissector: use RCU protection to fetch dev_net() (Eric Dumazet)
  - ipv4: icmp: convert to dev_net_rcu() (Eric Dumazet)
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Eric Dumazet)
  - net: ipv4: Cache pmtu for all packet paths if multipath enabled (Vladimir Vdovin)
  - ipv4: use RCU protection in inet_select_addr() (Eric Dumazet)
  - ipv4: use RCU protection in rt_is_expired() (Eric Dumazet)
  - ipv4: use RCU protection in ipv4_default_advmss() (Eric Dumazet)
  - net: add dev_net_rcu() helper (Eric Dumazet)
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Eric Dumazet)
  - ipv4: add RCU protection to ip4_dst_hoplimit() (Eric Dumazet)
  - cpufreq/amd-pstate: Fix cpufreq_policy ref counting (Dhananjay Ugwekar)
  - cpufreq/amd-pstate: convert mutex use to guard() (Mario Limonciello)
  - cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and amd_pstate_epp_offline() (Dhananjay Ugwekar)
  - cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions (Dhananjay Ugwekar)
  - cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and amd_pstate_epp_offline() (Dhananjay Ugwekar)
  - cpufreq/amd-pstate: Align offline flow of shared memory and MSR based systems (Dhananjay Ugwekar)
  - cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function (Dhananjay Ugwekar)
  - rust: kbuild: add -fzero-init-padding-bits to bindgen_skip_cflags (Justin M. Forbes)
  - scsi: ufs: Fix toggling of clk_gating.state when clock gating is not allowed (Avri Altman)
  - scsi: ufs: core: Introduce a new clock_gating lock (Avri Altman)
  - scsi: ufs: core: Prepare to introduce a new clock_gating lock (Avri Altman)
  - scsi: ufs: core: Introduce ufshcd_has_pending_tasks() (Avri Altman)
  - clocksource: Use migrate_disable() to avoid calling get_random_u32() in atomic context (Waiman Long)
  - clocksource: Use pr_info() for "Checking clocksource synchronization" message (Waiman Long)
  - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels (Jakub Kicinski)
  - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue (Justin Iurman)
  - include: net: add static inline dst_dev_overhead() to dst.h (Justin Iurman)
  - btrfs: fix hole expansion when writing at an offset beyond EOF (Filipe Manana)
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Wentao Liang)
  - cifs: pick channels for individual subrequests (Shyam Prasad N)
  - igc: Set buffer type for empty frames in igc_init_empty_frame (Song Yoong Siang)
  - mmc: mtk-sd: Fix register settings for hs400(es) mode (Andy-ld Lu)
  - arm64: Handle .ARM.attributes section in linker scripts (Nathan Chancellor)
  - regmap-irq: Add missing kfree() (Jiasheng Jiang)
  - iommu: Fix potential memory leak in iopf_queue_remove_device() (Lu Baolu)
  - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator (Varadarajan Narayanan)
  - sched_ext: Fix incorrect autogroup migration detection (Tejun Heo)
  - partitions: mac: fix handling of bogus partition table (Jann Horn)
  - gpio: stmpe: Check return value of stmpe_reg_read in stmpe_gpio_irq_sync_unlock (Wentao Liang)
  - gpiolib: acpi: Add a quirk for Acer Nitro ANV14 (Mario Limonciello)
  - s390/pci: Fix handling of isolated VFs (Niklas Schnelle)
  - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (Niklas Schnelle)
  - alpha: align stack for page fault and user unaligned trap handlers (Ivan Kokshaysky)
  - alpha: replace hardcoded stack offsets with autogenerated ones (Ivan Kokshaysky)
  - serial: 8250: Fix fifo underflow on flush (John Keeping)
  - serial: port: Always update ->iotype in __uart_read_properties() (Andy Shevchenko)
  - serial: port: Assign ->iotype correctly when ->iobase is set (Andy Shevchenko)
  - cgroup: fix race between fork and cgroup.kill (Shakeel Butt)
  - rust: rbtree: fix overindented list item (Miguel Ojeda)
  - objtool/rust: add one more `noreturn` Rust function (Miguel Ojeda)
  - arm64: rust: clean Rust 1.85.0 warning using softfloat target (Miguel Ojeda)
  - efi: Avoid cold plugged memory for placing the kernel (Ard Biesheuvel)
  - kbuild: userprogs: fix bitsize and target detection on clang (Thomas Weißschuh)
  - PCI: Avoid FLR for Mediatek MT7922 WiFi (Bjorn Helgaas)
  - wifi: ath12k: fix handling of 6 GHz rules (Aditya Kumar Singh)
  - alpha: make stack 16-byte aligned (most cases) (Ivan Kokshaysky)
  - can: etas_es58x: fix potential NULL pointer dereference on udev->serial (Vincent Mailhol)
  - can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated (Robin van der Gracht)
  - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data length zero (Alexander Hölzl)
  - can: c_can: fix unbalanced runtime PM disable in error path (Krzysztof Kozlowski)
  - can: ctucanfd: handle skb allocation failure (Fedor Pchelkin)
  - USB: serial: option: drop MeiG Smart defines (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990B compositions (Fabio Porcedda)
  - USB: serial: option: add MeiG Smart SLM828 (Chester A. Unal)
  - usb: gadget: core: flush gadget workqueue after device removal (Roy Luo)
  - usb: cdc-acm: Fix handling of oversized fragments (Jann Horn)
  - usb: cdc-acm: Check control transfer buffer size before access (Jann Horn)
  - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk (Marek Vasut)
  - USB: hub: Ignore non-compliant devices with too many configs or interfaces (Alan Stern)
  - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths (John Keeping)
  - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone (Mathias Nyman)
  - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist (Lei Huang)
  - usb: core: fix pipe creation for get_bMaxPacketSize0 (Stefan Eichenberger)
  - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI (Huacai Chen)
  - usb: xhci: Restore xhci_pci support for Renesas HCs (Michal Pecio)
  - usb: dwc2: gadget: remove of_node reference upon udc_stop (Fabrice Gasnier)
  - usb: gadget: udc: renesas_usb3: Fix compiler warning (Guo Ren)
  - usb: roles: set switch registered flag early on (Elson Roy Serrao)
  - usb: dwc3: Fix timeout issue during controller enter/exit from halt state (Selvarasu Ganesan)
  - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind retries (Selvarasu Ganesan)
  - ring-buffer: Update pages_touched to reflect persistent buffer content (Steven Rostedt)
  - ring-buffer: Validate the persistent meta data subbuf array (Steven Rostedt)
  - tracing: Do not allow mmap() of persistent ring buffer (Steven Rostedt)
  - ring-buffer: Unlock resize on mmap error (Steven Rostedt)
  - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting (Sean Christopherson)
  - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF (Kan Liang)
  - KVM: nSVM: Enter guest mode before initializing nested NPT MMU (Sean Christopherson)
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Sean Christopherson)
  - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel (Sean Christopherson)
  - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() (Jiang Liu)
  - batman-adv: Drop unmanaged ELP metric worker (Sven Eckelmann)
  - batman-adv: Ignore neighbor throughput metrics in error case (Sven Eckelmann)
  - batman-adv: fix panic during interface removal (Andy Strohman)
  - kbuild: Use -fzero-init-padding-bits=all (Kees Cook)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Hans de Goede)
  - kbuild: suppress stdout from merge_config for silent builds (Masahiro Yamada)
  - orangefs: fix a oob in orangefs_debug_write (Mike Marshall)
  - x86/mm/tlb: Only trim the mm_cpumask once a second (Rik van Riel)
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (Hans de Goede)
  - selftests: gpio: gpio-sim: Fix missing chip disablements (Koichiro Den)
  - Grab mm lock before grabbing pt lock (Maksym Planeta)
  - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode() (Konstantin Komarov)
  - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM (Ankit Agrawal)
  - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem (Ankit Agrawal)
  - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client() (Zichen Xie)
  - vfio/pci: Enable iowrite64 and ioread64 for vfio pci (Ramesh Thomas)
  - kunit: platform: Resolve 'struct completion' warning (Brian Norris)
  - 8250: microchip: pci1xxxx: Add workaround for RTS bit toggle (Rengarajan S)
  - serial: 8250_pci: Share WCH IDs with parport_serial driver (Andy Shevchenko)
  - serial: 8250_pci: Resolve WCH vendor ID ambiguity (Andy Shevchenko)
  - rtla/timerlat_top: Abort event processing on second signal (Tomas Glozar)
  - rtla/timerlat_hist: Abort event processing on second signal (Tomas Glozar)
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal (Guixin Liu)
  - PCI: switchtec: Add Microchip PCI100X device IDs (Rakesh Babu Saladi)
  - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P (Takashi Iwai)
  - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread (Edward Adam Davis)
  - media: uvcvideo: Add Kurokesu C1 PRO camera (Isaac Scott)
  - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a camera (Isaac Scott)
  - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets (Isaac Scott)
  - media: bcm2835-unicam: Disable trigger mode operation (Naushir Patuck)
  - media: i2c: ds90ub953: Add error handling for i2c reads/writes (Tomi Valkeinen)
  - media: i2c: ds90ub913: Add error handling to ub913_hw_init() (Tomi Valkeinen)
  - media: cxd2841er: fix 64-bit division on gcc-9 (Arnd Bergmann)
  - i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus (Jarkko Nikula)
  - i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming (Jarkko Nikula)
  - soc/tegra: fuse: Update Tegra234 nvmem keepout list (Kartik Rajput)
  - fbdev: omap: use threaded IRQ for LCD DMA (Aaro Koskinen)
  - firmware: qcom: scm: smc: Handle missing SCM device (Krzysztof Kozlowski)
  - RDMA/efa: Reset device on probe failure (Michael Margolin)
  - tools: fix annoying "mkdir -p ..." logs when building tools in parallel (Masahiro Yamada)
  - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path (Vasant Hegde)
  - gpiolib: Fix crash on error in gpiochip_get_ngpios() (Andy Shevchenko)
  - sched_ext: Use SCX_CALL_OP_TASK in task_tick_scx (Chuyi Zhou)
  - sched_ext: Fix the incorrect bpf_list kfunc API in common.bpf.h. (Chuyi Zhou)
  - block: cleanup and fix batch completion adding conditions (Jens Axboe)
  - x86/xen: allow larger contiguous memory regions in PV guests (Juergen Gross)
  - xen/swiotlb: relax alignment requirements (Juergen Gross)
  - drm: Fix DSC BPP increment decoding (Imre Deak)
  - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode() (Jiang Liu)
  - amdkfd: properly free gang_ctx_bo when failed to init user queue (Zhu Lingshan)
  - io_uring/uring_cmd: remove dead req_has_async_data() check (Jens Axboe)
  - io_uring/waitid: don't abuse io_tw_state (Pavel Begunkov)
  - gpio: bcm-kona: Add missing newline to dev_err format string (Artur Weber)
  - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ (Artur Weber)
  - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0 (Artur Weber)
  - drm/i915/selftests: avoid using uninitialized context (Krzysztof Karas)
  - drm/xe/client: bo->client does not need bos_lock (Tejas Upadhyay)
  - perf/x86/intel: Clean up PEBS-via-PT on hybrid (Kan Liang)
  - cgroup: Remove steal time from usage_usec (Muhammad Adeel)
  - gpu: host1x: Fix a use of uninitialized mutex (Rupinderjit Singh)
  - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array (Radu Rendec)
  - drm/tests: hdmi: Fix WW_MUTEX_SLOWPATH failures (Maxime Ripard)
  - sched_ext: Fix lock imbalance in dispatch_to_local_dsq() (Andrea Righi)
  - workqueue: Put the pwq after detaching the rescuer from the pool (Lai Jiangshan)
  - team: better TEAM_OPTION_TYPE_STRING validation (Eric Dumazet)
  - Bluetooth: btintel_pcie: Fix a potential race condition (Kiran K)
  - net: ethernet: ti: am65_cpsw: fix tx_cleanup for XDP case (Roger Quadros)
  - net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases (Roger Quadros)
  - LoongArch: KVM: Fix typo issue about GCFG feature detection (Bibo Mao)
  - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths (Yuli Wang)
  - LoongArch: Fix idle VS timer enqueue (Marco Crivellari)
  - vxlan: check vxlan_vnigroup_init() return value (Eric Dumazet)
  - igc: Fix HW RX timestamp when passed by ZC XDP (Zdenek Bouska)
  - idpf: call set_real_num_queues in idpf_open (Joshua Hay)
  - idpf: record rx queue in skb for RSC packets (Sridhar Samudrala)
  - idpf: fix handling rsc packet with a single segment (Sridhar Samudrala)
  - vrf: use RCU protection in l3mdev_l3_out() (Eric Dumazet)
  - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() (Eric Dumazet)
  - Documentation/networking: fix basic node example document ISO 15765-2 (Reyders Morales)
  - net: fib_rules: annotate data-races around rule->[io]ifindex (Eric Dumazet)
  - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt (Murad Masimov)
  - spi: sn-f-ospi: Fix division by zero (Kunihiko Hayashi)
  - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context (Vicki Pfau)
  - HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_endpoints() (Tulio Fernandes)
  - pinctrl: pinconf-generic: Print unsigned value if a format is registered (Claudiu Beznea)
  - scripts/Makefile.extrawarn: Do not show clang's non-kprintf warnings at W=1 (Nathan Chancellor)
  - HID: multitouch: Add NULL check in mt_input_configured (Charles Han)
  - HID: winwing: Add NULL check in winwing_init_led() (Charles Han)
  - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware (Andy Shevchenko)
  - pinctrl: cy8c95x0: Rename PWMSEL to SELPWM (Andy Shevchenko)
  - pinctrl: cy8c95x0: Enable regmap locking for debug (Andy Shevchenko)
  - pinctrl: cy8c95x0: Avoid accessing reserved registers (Andy Shevchenko)
  - nfsd: validate the nfsd_serv pointer before calling svc_wake_up (Jeff Layton)
  - NFSD: fix hang in nfsd4_shutdown_callback (Dai Ngo)
  - nfsd: clear acl_access/acl_default after releasing them (Li Lingfeng)
  - Revert "selftests/net: add zerocopy support for PF_RDS test case" (Samasth Norway Ananda)  [Orabug: 37006889]
  - uek-rpm: Refactor the code for removing modules from the list (Harshit Mogalapalli)  [Orabug: 37453041]
  - uek-rpm: Add --no-run-if-empty option to xargs for a remove command (Harshit Mogalapalli)  [Orabug: 37453041]
  - uek-rpm: Simplify the unzipsed macro in the spec file. (Harshit Mogalapalli)  [Orabug: 37453041]
  - uek-rpm: Remove unused filter-arch.sh scripts from UEK source (Harshit Mogalapalli)  [Orabug: 37453041]
  - Sched: Add scheduler stat for cpu time slice extension (Prakash Sangappa)  [Orabug: 37583007]
  - Sched: Scheduler time slice extension (Prakash Sangappa)  [Orabug: 37583007]
  - scsi: lpfc: Copyright updates for 14.4.0.8 patches (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Update lpfc version to 14.4.0.8 (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Reduce log message generation during ELS ring clean up (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Copyright updates for 14.4.0.7 patches (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Update lpfc version to 14.4.0.7 (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Add support for large fw object application layer reads (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Update definition of firmware configuration mbox cmds (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Change lpfc_nodelist save_flags member into a bitmask (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Add handling for LS_RJT reason explanation authentication required (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Modify handling of ADISC based on ndlp state and RPI registration (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Delete NLP_TARGET_REMOVE flag due to obsolete usage (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Restrict the REG_FCFI MAM field to FCoE adapters only (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Redefine incorrect type in lpfc_create_device_data() (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Fix spelling errors 'asynchronously' (liujing)  [Orabug: 37603756]
  - scsi: lpfc: Copyright updates for 14.4.0.6 patches (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Update lpfc version to 14.4.0.6 (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Update lpfc_els_flush_cmd() to check for SLI_ACTIVE before BSG flag (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (Justin Tee)  [Orabug: 37603756]
  - scsi: lpfc: Modify CGN warning signal calculation based on EDC response (Justin Tee)  [Orabug: 37603756]
  - uek-rpm: Move br_netfilter and ebtable_broute to core modules list (Harshit Mogalapalli)  [Orabug: 37612924]
  - UEK8 kABI padding addition for arch/x86/include/asm/processor.h (Thomas Tai)  [Orabug: 37613888]
  - uek-rpm: aarch64: Fix cpufreq_dt module configuration (Harshit Mogalapalli)  [Orabug: 37617240]
  - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi)  [Orabug: 37619140]
  - uek: kabi: add kABI padding to sched_ext (Daniel Jordan)  [Orabug: 37619831]
  - uek: kabi: add kABI padding to kernel/sched/sched.h (Libo Chen)  [Orabug: 37619831]
  - uek: kabi: add kABI padding to include/linux/sched/user.h (Libo Chen)  [Orabug: 37619831]
  - uek: kabi: add kABI padding to include/linux/sched/signal.h (Libo Chen)  [Orabug: 37619831]
  - uek: kabi: add kABI padding to include/linux/sched.h (Libo Chen)  [Orabug: 37619831]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.17.15.el9uek]
changelog:
  - Revert "selftests/timers/posix_timers: Add SIG_IGN test" (Alok Tiwari)  [Orabug: 37196869]
  - Revert "selftests/timers/posix_timers: Validate signal rules" (Alok Tiwari)  [Orabug: 37196869]
  - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge)  [Orabug: 37551354]
  - RDMA/mlx5: Fix Shared PD prefetch of ODP memory region (Mark Haywood)  [Orabug: 31688618] [Orabug: 37577019]
  - mm: fix vma iterator misconfiguration that triggers VM_WARN_ONs (Anthony Yznaga)  [Orabug: 37588319]
  - mm: fix VM_BUG_ON hit when preserving memory (Anthony Yznaga)  [Orabug: 37588319]
  - kallsyms: Export kallsyms_lookup_name (Boris Ostrovsky)  [Orabug: 37653707]
  - LTS version: v6.12.17 (Jack Vogel)
  - drm/amdgpu: bump version for RV/PCO compute fix (Alex Deucher)
  - drm/amdgpu/gfx9: manually control gfxoff for CS on RV (Alex Deucher)
  - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus lts (Tianling Shen)
  - selftests/mm: build with -O2 (Kevin Brodsky)
  - sched_ext: Fix incorrect assumption about migration disabled tasks in task_can_run_on_remote_rq() (Tejun Heo)
  - net: pse-pd: Fix deadlock in current limit functions (Kory Maincent)
  - tracing: Fix using ret variable in tracing_set_tracer() (Steven Rostedt)
  - ftrace: Do not add duplicate entries in subops manager ops (Steven Rostedt)
  - ftrace: Fix accounting of adding subops to a manager ops (Steven Rostedt)
  - ftrace: Correct preemption accounting for function tracing. (Sebastian Andrzej Siewior)
  - EDAC/qcom: Correct interrupt enable register configuration (Komal Bajaj)
  - smb: client: Add check for next_buffer in receive_encrypted_standard() (Haoxiang Li)
  - irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled (Marc Zyngier)
  - perf/x86/intel: Fix event constraints for LNC (Kan Liang)
  - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single (Niravkumar L Rabara)
  - mtd: rawnand: cadence: use dma_map_resource for sdma address (Niravkumar L Rabara)
  - mtd: rawnand: cadence: fix error code in cadence_nand_init() (Niravkumar L Rabara)
  - mtd: spi-nor: sst: Fix SST write failure (Amit Kumar Mahapatra)
  - mm,madvise,hugetlb: check for 0-length range after end address adjustment (Ricardo Cañuelo Navarro)
  - acct: block access to kernel internal filesystems (Christian Brauner)
  - acct: perform last write from workqueue (Christian Brauner)
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (Peter Ujfalusi)
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (John Veness)
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (Wentao Liang)
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality() (Nikita Zhandarovich)
  - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data() (Peter Ujfalusi)
  - gve: set xdp redirect target only when it is available (Joshua Washington)
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (Haoxiang Li)
  - smb: client: fix chmod(2) regression with ATTR_READONLY (Paulo Alcantara)
  - lib/iov_iter: fix import_iovec_ubuf iovec management (Pavel Begunkov)
  - xfs: fix online repair probing when CONFIG_XFS_ONLINE_REPAIR=n (Darrick J. Wong)
  - s390/boot: Fix ESSA detection (Heiko Carstens)
  - soc: loongson: loongson2_guts: Add check for devm_kstrdup() (Haoxiang Li)
  - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck (Lukasz Czechowski)
  - arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM (Lukasz Czechowski)
  - arm64: dts: rockchip: Fix broken tsadc pinctrl names for rk3588 (Alexander Shiyan)
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand)
  - drop_monitor: fix incorrect initialization order (Gavrilov Ilia)
  - tee: optee: Fix supplicant wait loop (Sumit Garg)
  - gpiolib: protect gpio_chip with SRCU in array_info paths in multi get/set (Bartosz Golaszewski)
  - io_uring: prevent opcode speculation (Pavel Begunkov)
  - io_uring/rw: forbid multishot async reads (Pavel Begunkov)
  - drm/i915/gt: Use spin_lock_irqsave() in interruptible context (Krzysztof Karas)
  - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL (Imre Deak)
  - drm/i915/dp: Fix error handling during 128b/132b link training (Imre Deak)
  - drm/i915: Make sure all planes in use by the joiner have their crtc included (Ville Syrjälä)
  - drm/msm/dpu: Disable dither in phys encoder cleanup (Jessica Zhang)
  - drm: panel: jd9365da-h3: fix reset signal polarity (Hugo Villeneuve)
  - irqchip/jcore-aic, clocksource/drivers/jcore: Fix jcore-pit interrupt request (Artur Rojek)
  - drm/nouveau/pmu: Fix gp10b firmware guard (Aaron Kling)
  - bpf: skip non exist keys in generic_map_lookup_batch (Yan Zhai)
  - nvme/ioctl: add missing space in err message (Caleb Sander Mateos)
  - nvme-tcp: fix connect failure on receiving partial ICResp PDU (Caleb Sander Mateos)
  - nvme: tcp: Fix compilation warning with W=1 (Damien Le Moal)
  - drm/msm/dsi/phy: Do not overwite PHY_CMN_CLK_CFG1 when choosing bitclk source (Krzysztof Kozlowski)
  - drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG1 against clock driver (Krzysztof Kozlowski)
  - drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG0 updated from driver side (Krzysztof Kozlowski)
  - drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields (Marijn Suijten)
  - drm/msm/dpu: enable DPU_WB_INPUT_CTRL for DPU 5.x (Dmitry Baryshkov)
  - drm/msm/dpu: skip watchdog timer programming through TOP on >= SM8450 (Dmitry Baryshkov)
  - drm/msm: Avoid rounding up to one jiffy (Rob Clark)
  - nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range() (David Hildenbrand)
  - platform: cznic: CZNIC_PLATFORMS should depend on ARCH_MVEBU (Geert Uytterhoeven)
  - firmware: imx: IMX_SCMI_MISC_DRV should depend on ARCH_MXC (Geert Uytterhoeven)
  - md/raid*: Fix the set_queue_limits implementations (Bart Van Assche)
  - firmware: arm_scmi: imx: Correct tx size of scmi_imx_misc_ctrl_set (Peng Fan)
  - arm64: dts: rockchip: adjust SMMU interrupt type on rk3588 (Patrick Wildt)
  - bpf: Fix softlockup in arena_map_free on 64k page kernel (Alan Maguire)
  - net: Add rx_skb of kfree_skb to raw_tp_null_args[]. (Kuniyuki Iwashima)
  - selftests/bpf: Add tests for raw_tp null handling (Kumar Kartikeya Dwivedi)
  - power: supply: axp20x_battery: Fix fault handling for AXP717 (Chris Morgan)
  - power: supply: da9150-fg: fix potential overflow (Andrey Vatoropin)
  - arm64: dts: rockchip: Fix lcdpwr_en pin for Cool Pi GenBook (Andy Yan)
  - bpf: Fix deadlock when freeing cgroup storage (Abel Wu)
  - bpf: Disable non stream socket for strparser (Jiayuan Chen)
  - bpf: Fix wrong copied_seq calculation (Jiayuan Chen)
  - strparser: Add read_sock callback (Jiayuan Chen)
  - bpf: avoid holding freeze_mutex during mmap operation (Andrii Nakryiko)
  - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic (Andrii Nakryiko)
  - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Shigeru Yoshida)
  - net: allow small head cache usage with large MAX_SKB_FRAGS values (Paolo Abeni)
  - tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca)
  - net: axienet: Set mac_managed_pm (Nick Hu)
  - arp: switch to dev_getbyhwaddr() in arp_req_set_public() (Breno Leitao)
  - net: Add non-RCU dev_getbyhwaddr() helper (Breno Leitao)
  - flow_dissector: Fix port range key handling in BPF conversion (Cong Wang)
  - flow_dissector: Fix handling of mixed port and port-range keys (Cong Wang)
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Kuniyuki Iwashima)
  - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl(). (Kuniyuki Iwashima)
  - net: pse-pd: pd692x0: Fix power limit retrieval (Kory Maincent)
  - net: pse-pd: Use power limit at driver side instead of current limit (Kory Maincent)
  - net: pse-pd: Avoid setting max_uA in regulator constraints (Kory Maincent)
  - tcp: adjust rcvq_space after updating scaling ratio (Jakub Kicinski)
  - vsock/bpf: Warn on socket without transport (Michal Luczaj)
  - sockmap, vsock: For connectible sockets allow only connected (Michal Luczaj)
  - ibmvnic: Don't reference skb after sending to VIOS (Nick Child)
  - ibmvnic: Add stat for tx direct vs tx batched (Nick Child)
  - s390/ism: add release function for struct device (Julian Ruess)
  - ALSA: seq: Drop UMP events when no UMP-conversion is set (Takashi Iwai)
  - net/sched: cls_api: fix error handling causing NULL dereference (Pierre Riteau)
  - ALSA: hda/cirrus: Correct the full scale volume set logic (Vitaly Rodionov)
  - geneve: Fix use-after-free in geneve_find_dev(). (Kuniyuki Iwashima)
  - vsock/virtio: fix variables initialization during resuming (Junnan Wu)
  - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device (Shengjiu Wang)
  - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC (Christophe Leroy)
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Kailang Yang)
  - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline (Christophe Leroy)
  - powerpc/code-patching: Disable KASAN report during patching via temporary mm (Christophe Leroy)
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Peter Ujfalusi)
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (John Keeping)
  - sched_ext: Fix migration disabled handling in targeted dispatches (Tejun Heo)
  - sched_ext: Factor out move_task_between_dsqs() from scx_dispatch_from_dsq() (Tejun Heo)
  - USB: gadget: f_midi: f_midi_complete to call queue_work (Jill Donahue)
  - tracing: Have the error of __tracing_resize_ring_buffer() passed to user (Steven Rostedt)
  - tracing: Switch trace.c code over to use guard() (Steven Rostedt)
  - drm/amdkfd: Ensure consistent barrier state saved in gfx12 trap handler (Lancelot SIX)
  - drm/amdkfd: Move gfx12 trap handler to separate file (Jay Cornwall)
  - accel/ivpu: Fix error handling in recovery/reset (Jacek Lawrynowicz)
  - accel/ivpu: Add FW state dump on TDR (Tomasz Rusinowicz)
  - accel/ivpu: Add coredump support (Karol Wachowski)
  - accel/ivpu: Limit FW version string length (Jacek Lawrynowicz)
  - arm64: dts: mediatek: mt8183: Disable DSI display output by default (Chen-Yu Tsai)
  - arm64: dts: mediatek: mt8183-pumpkin: add HDMI support (Fabien Parent)
  - PCI: Restore original INTX_DISABLE bit by pcim_intx() (Takashi Iwai)
  - PCI: Remove devres from pci_intx() (Philipp Stanner)
  - PCI: Export pci_intx_unmanaged() and pcim_intx() (Philipp Stanner)
  - PCI: Make pcim_request_all_regions() a public function (Philipp Stanner)
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Dan Carpenter)
  - ASoC: renesas: rz-ssi: Terminate all the DMA transactions (Claudiu Beznea)
  - Input: synaptics - fix crash when enabling pass-through port (Dmitry Torokhov)
  - Input: serio - define serio_pause_rx guard to pause and resume serio ports (Dmitry Torokhov)
  - Bluetooth: qca: Fix poor RF performance for WCN6855 (Zijun Hu)
  - Bluetooth: qca: Update firmware-name to support board specific nvm (Cheng Jiang)
  - drm/amd/display: Correct register address in dcn35 (loanchen)
  - drm/amd/display: update dcn351 used clock offset (Charlene Liu)
  - drm/amd/display: Refactoring if and endif statements to enable DC_LOGGER (Lohita Mudimela)
  - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID (Chao Gao)
  - KVM: x86: Inline kvm_get_apic_mode() in lapic.h (Sean Christopherson)
  - KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base() (Sean Christopherson)
  - btrfs: fix double accounting race when extent_writepage_io() failed (Qu Wenruo)
  - btrfs: fix double accounting race when btrfs_run_delalloc_range() failed (Qu Wenruo)
  - btrfs: use btrfs_inode in extent_writepage() (David Sterba)
  - btrfs: rename btrfs_folio_(set|start|end)_writer_lock() (Qu Wenruo)
  - btrfs: unify to use writer locks for subpage locking (Qu Wenruo)
  - btrfs: remove unused btrfs_folio_start_writer_lock() (Qu Wenruo)
  - btrfs: mark all dirty sectors as locked inside writepage_delalloc() (Qu Wenruo)
  - btrfs: move the delalloc range bitmap search into extent_io.c (Qu Wenruo)
  - btrfs: do not assume the full page range is not dirty in extent_writepage_io() (Qu Wenruo)
  - xe/oa: Fix query mode of operation for OAR/OAC (Umesh Nerlige Ramappa)
  - drm/xe/oa: Add input fence dependencies (Ashutosh Dixit)
  - drm/xe/oa/uapi: Define and parse OA sync properties (Ashutosh Dixit)
  - drm/xe/oa: Separate batch submission from waiting for completion (Ashutosh Dixit)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.19.16.el9uek]
changelog:
  - LTS version: v6.12.19 (Jack Vogel)
  - wifi: iwlwifi: pcie: Fix TSO preparation (Ilan Peer)
  - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode (Xi Ruoyao)
  - selftests/bpf: Clean up open-coded gettid syscall invocations (Kumar Kartikeya Dwivedi)
  - uprobes: Fix race in uprobe_free_utask (Jiri Olsa)
  - KVM: e500: always restore irqs (Paolo Bonzini)
  - Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()" (Greg Kroah-Hartman)
  - Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock" (Greg Kroah-Hartman)
  - Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults" (Greg Kroah-Hartman)
  - Revert "KVM: e500: always restore irqs" (Greg Kroah-Hartman)
  - docs: rust: remove spurious item in `expect` list (Miguel Ojeda)
  - nvme-tcp: Fix a C2HTermReq error message (Maurizio Lombardi)
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage (Arnd Bergmann)
  - kbuild: hdrcheck: fix cross build with clang (Arnd Bergmann)
  - fs/netfs/read_collect: fix crash due to uninitialized `prev` variable (Max Kellermann)
  - fs/netfs/read_pgpriv2: skip folio queues without `marks3` (Max Kellermann)
  - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes (Ryan Roberts)
  - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear() (Ryan Roberts)
  - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value (Nayab Sayed)
  - iio: adc: ad7192: fix channel select (Markus Burri)
  - iio: dac: ad3552r: clear reset status flag (Angelo Dureghello)
  - iio: light: apds9306: fix max_scale_nano values (Javier Carrasco)
  - iio: filter: admv8818: Force initialization of SDO (Sam Winchenbach)
  - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl (Haoyu Li)
  - eeprom: digsy_mtc: Make GPIO lookup table match the device (Andy Shevchenko)
  - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock (Manivannan Sadhasivam)
  - slimbus: messaging: Free transaction ID in delayed interrupt scenario (Visweswara Tanuku)
  - drivers: core: fix device leak in __fw_devlink_relax_cycles() (Luca Ceresoli)
  - char: misc: deallocate static minor in error path (Thadeu Lima de Souza Cascardo)
  - intel_th: pci: Add Panther Lake-P/U support (Alexander Shishkin)
  - intel_th: pci: Add Panther Lake-H support (Alexander Shishkin)
  - intel_th: pci: Add Arrow Lake support (Pawel Chmielewski)
  - mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO (Hans de Goede)
  - mei: me: add panther lake P DID (Alexander Usyskin)
  - cdx: Fix possible UAF error in driver_override_show() (Qiu-ji Chen)
  - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM (Xiaoyao Li)
  - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs (Sean Christopherson)
  - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled (Sean Christopherson)
  - KVM: x86: Snapshot the host's DEBUGCTL in common x86 (Sean Christopherson)
  - KVM: SVM: Suppress DEBUGCTL.BTF on AMD (Sean Christopherson)
  - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value (Sean Christopherson)
  - KVM: SVM: Save host DR masks on CPUs with DebugSwap (Sean Christopherson)
  - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow (Sean Christopherson)
  - usb: xhci: Enable the TRB overfetch quirk on VIA VL805 (Michal Pecio)
  - xhci: pci: Fix indentation in the PCI device ID definitions (Andy Shevchenko)
  - rust: map `long` to `isize` and `char` to `u8` (Gary Guo)
  - rust: finish using custom FFI integer types (Miguel Ojeda)
  - acpi: typec: ucsi: Introduce a ->poll_cci method (Christian A. Ehrhardt)
  - kbuild: userprogs: use correct lld when linking through clang (Thomas Weißschuh)
  - usb: gadget: Check bmAttributes only if configuration is valid (Prashanth K)
  - usb: gadget: Fix setting self-powered state on suspend (Marek Szyprowski)
  - usb: gadget: Set self-powered based on MaxPower and bmAttributes (Prashanth K)
  - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality (AngeloGioacchino Del Regno)
  - usb: typec: ucsi: increase timeout for PPM reset operations (Fedor Pchelkin)
  - usb: dwc3: gadget: Prevent irq storm when TH re-executes (Badhri Jagan Sridharan)
  - usb: dwc3: Set SUSPENDENABLE soon after phy init (Thinh Nguyen)
  - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich)
  - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails (Prashanth K)
  - usb: renesas_usbhs: Flush the notify_hotplug_work (Claudiu Beznea)
  - usb: typec: ucsi: Fix NULL pointer access (Andrei Kuchynski)
  - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader (Miao Li)
  - usb: hub: lack of clearing xHC resources (Pawel Laszczak)
  - usb: renesas_usbhs: Use devm_usb_get_phy() (Claudiu Beznea)
  - xhci: Restrict USB4 tunnel detection for USB3 devices to Intel hosts (Marc Zyngier)
  - usb: renesas_usbhs: Call clk_put() (Claudiu Beznea)
  - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection" (Christian Heusel)
  - gpio: rcar: Fix missing of_node_put() call (Fabrizio Castro)
  - net: ipv6: fix missing dst ref drop in ila lwtunnel (Justin Iurman)
  - net: ipv6: fix dst ref loop in ila lwtunnel (Justin Iurman)
  - mctp i3c: handle NULL header address (Matt Johnston)
  - net: dsa: mt7530: Fix traffic flooding for MMIO devices (Lorenzo Bianconi)
  - nvme-tcp: fix signedness bug in nvme_tcp_init_connection() (Dan Carpenter)
  - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list (Zecheng Li)
  - ublk: set_params: properly check if parameters can be applied (Uday Shankar)
  - net-timestamp: support TCP GSO case for a few missing flags (Jason Xing)
  - exfat: short-circuit zero-byte writes in exfat_file_write_iter (Eric Sandeen)
  - exfat: fix soft lockup in exfat_clear_bitmap (Namjae Jeon)
  - exfat: fix just enough dentries but allocate a new cluster to dir (Yuezhang Mo)
  - x86/sgx: Fix size overflows in sgx_encl_create() (Jarkko Sakkinen)
  - vlan: enforce underlying device type (Oscar Maes)
  - net: ethtool: netlink: Allow NULL nlattrs when getting a phy_device (Maxime Chevallier)
  - net: ethtool: plumb PHY stats to PHY drivers (Jakub Kicinski)
  - ethtool: linkstate: migrate linkstate functions to support multi-PHY setups (Oleksij Rempel)
  - ppp: Fix KMSAN uninit-value warning with bpf (Jiayuan Chen)
  - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7 (Luca Weiss)
  - net: ipa: Fix QSB data for v4.7 (Luca Weiss)
  - net: ipa: Fix v4.7 resource group names (Luca Weiss)
  - HID: hid-steam: Fix use-after-free when detaching device (Vicki Pfau)
  - drm/xe: Remove double pageflip (Maarten Lankhorst)
  - drm/i915: Plumb 'dsb' all way to the plane hooks (Ville Syrjälä)
  - drm/i915/color: Extract intel_color_modeset() (Ville Syrjälä)
  - net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error (Peiyang Wang)
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Nikolay Aleksandrov)
  - drm/sched: Fix preprocessor guard (Philipp Stanner)
  - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe() (Xinghuo Chen)
  - llc: do not use skb_get() before dev_queue_xmit() (Eric Dumazet)
  - ALSA: usx2y: validate nrpacks module parameter on probe (Murad Masimov)
  - drm/imagination: Fix timestamps in firmware traces (Alessio Belle)
  - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro (Masami Hiramatsu (Google))
  - hwmon: (ad7314) Validate leading zero bits and return error (Erik Schumacher)
  - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table (Maud Spierings)
  - hwmon: (pmbus) Initialise page count in pmbus_identify() (Titus Rwantare)
  - perf/core: Fix pmus_lock vs. pmus_srcu ordering (Peter Zijlstra)
  - caif_virtio: fix wrong pointer check in cfv_probe() (Vitaliy Shevtsov)
  - net: gso: fix ownership in __udp_gso_segment (Antoine Tenart)
  - ALSA: hda/realtek: Remove (revert) duplicate Ally X config (Antheas Kapenekakis)
  - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch (Meir Elisha)
  - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() (Maurizio Lombardi)
  - nvme-tcp: add basic support for the C2HTermReq PDU (Maurizio Lombardi)
  - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops (Salah Triki)
  - drm/nouveau: select FW caching (Dave Airlie)
  - drm/nouveau: Run DRM default client setup (Thomas Zimmermann)
  - drm/fbdev-ttm: Support struct drm_driver.fbdev_probe (Thomas Zimmermann)
  - drm: Add client-agnostic setup helper (Thomas Zimmermann)
  - drm/fbdev: Add memory-agnostic fbdev client (Thomas Zimmermann)
  - drm/fbdev-helper: Move color-mode lookup into 4CC format helper (Thomas Zimmermann)
  - wifi: mac80211: fix vendor-specific inheritance (Johannes Berg)
  - wifi: mac80211: fix MLE non-inheritance parsing (Johannes Berg)
  - wifi: mac80211: Support parsing EPCS ML element (Ilan Peer)
  - nvme-ioctl: fix leaked requests on mapping error (Keith Busch)
  - nvme-pci: use sgls for all user requests if possible (Keith Busch)
  - nvme-pci: add support for sgl metadata (Keith Busch)
  - coredump: Only sort VMAs when core_sort_vma sysctl is set (Kees Cook)
  - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (Zhang Lixu)
  - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (Zhang Lixu)
  - HID: google: fix unused variable warning under !CONFIG_ACPI (Yu-Chun Lin)
  - wifi: iwlwifi: Fix A-MSDU TSO preparation (Ilan Peer)
  - wifi: iwlwifi: Free pages allocated when failing to build A-MSDU (Ilan Peer)
  - wifi: iwlwifi: limit printed string from FW file (Johannes Berg)
  - wifi: iwlwifi: mvm: don't try to talk to a dead firmware (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: clean up ROC on failure (Johannes Berg)
  - mm: memory-hotplug: check folio ref count first in do_migrate_range (Ma Wupeng)
  - hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio (Ma Wupeng)
  - mm: fix finish_fault() handling for large folios (Brian Geffon)
  - mm: don't skip arch_sync_kernel_mappings() in error paths (Ryan Roberts)
  - mm: memory-failure: update ttu flag inside unmap_poisoned_folio (Ma Wupeng)
  - mm: abort vma_modify() on merge out of memory failure (Lorenzo Stoakes)
  - mm/page_alloc: fix uninitialized variable (Hao Zhang)
  - block: fix conversion of GPT partition name to 7-bit (Olivier Gayot)
  - userfaultfd: do not block on locking a large folio with raised refcount (Suren Baghdasaryan)
  - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback (Mike Snitzer)
  - s390/traps: Fix test_monitor_call() inline assembly (Heiko Carstens)
  - dma: kmsan: export kmsan_handle_dma() for modules (Sebastian Andrzej Siewior)
  - rapidio: fix an API misues when rio_add_net() fails (Haoxiang Li)
  - rapidio: add check for rio_add_net() in rio_scan_alloc_net() (Haoxiang Li)
  - selftests/damon/damon_nr_regions: sort collected regiosn before checking with min/max boundaries (SeongJae Park)
  - selftests/damon/damon_nr_regions: set ops update for merge results check to 100ms (SeongJae Park)
  - selftests/damon/damos_quota: make real expectation of quota exceeds (SeongJae Park)
  - selftests/damon/damos_quota_goal: handle minimum quota that cannot be further reduced (SeongJae Park)
  - wifi: nl80211: reject cooked mode if it is set along with other flags (Vitaliy Shevtsov)
  - wifi: cfg80211: regulatory: improve invalid hints checking (Nikita Zhandarovich)
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected() (Haoxiang Li)
  - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name() (Haoxiang Li)
  - drm/xe/userptr: Unmap userptrs in the mmu notifier (Thomas Hellström)
  - drm/xe/userptr: properly setup pfn_flags_mask (Matthew Auld)
  - drm/xe: Fix fault mode invalidation with unbind (Thomas Hellström)
  - drm/xe: Fix GT "for each engine" workarounds (Tvrtko Ursulin)
  - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr (Krister Johansen)
  - drm/xe/vm: Validate userptr during gpu vma prefetching (Thomas Hellström)
  - drm/xe/vm: Fix a misplaced #endif (Thomas Hellström)
  - drm/xe/hmm: Don't dereference struct page pointers without notifier lock (Thomas Hellström)
  - drm/xe/hmm: Style- and include fixes (Thomas Hellström)
  - drm/xe: Add staging tree for VM binds (Matthew Brost)
  - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63 (Ahmed S. Darwish)
  - x86/cpu: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output (Ahmed S. Darwish)
  - x86/boot: Sanitize boot params before parsing command line (Ard Biesheuvel)
  - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e (Mingcong Bai)
  - Revert "selftests/mm: remove local __NR_* definitions" (John Hubbard)
  - Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[] for empty zone" (Gabriel Krisman Bertazi)
  - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M (Richard Thier)
  - drm/imagination: only init job done fences once (Brendan King)
  - drm/imagination: Hold drm_gem_gpuva lock for unmap (Brendan King)
  - drm/imagination: avoid deadlock on fence release (Brendan King)
  - drm/amd/pm: always allow ih interrupt from fw (Kenneth Feng)
  - drm/amdkfd: Fix NULL Pointer Dereference in KFD queue (Andrew Martin)
  - drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params (Ma Ke)
  - hwmon: (peci/dimmtemp) Do not provide fake thresholds data (Paul Fertser)
  - btrfs: fix a leaked chunk map issue in read_one_chunk() (Haoxiang Li)
  - ALSA: hda/realtek: update ALC222 depop optimize (Kailang Yang)
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform (Kailang Yang)
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Hoku Ishibe)
  - ALSA: seq: Avoid module auto-load handling at event delivery (Takashi Iwai)
  - gpio: aggregator: protect driver attr handlers against module unload (Koichiro Den)
  - gpio: rcar: Use raw_spinlock to protect register access (Niklas Söderlund)
  - ksmbd: fix bug on trap in smb2_lock (Namjae Jeon)
  - ksmbd: fix use-after-free in smb2_lock (Namjae Jeon)
  - ksmbd: fix out-of-bounds in parse_sec_desc() (Namjae Jeon)
  - ksmbd: fix type confusion via race condition when using ipc_msg_send_request (Namjae Jeon)
  - HID: appleir: Fix potential NULL dereference at raw event handle (Daniil Dulov)
  - LoongArch: KVM: Fix GPA size issue about VM (Bibo Mao)
  - LoongArch: KVM: Reload guest CSR registers after sleep (Bibo Mao)
  - LoongArch: KVM: Add interrupt checking for AVEC (Bibo Mao)
  - LoongArch: Set max_pfn with the PFN of the last page (Bibo Mao)
  - LoongArch: Use polling play_dead() when resuming from hibernation (Huacai Chen)
  - LoongArch: Convert unreachable() to BUG() (Tiezhu Yang)
  - stmmac: loongson: Pass correct arg to PCI function (Philipp Stanner)
  - tracing: tprobe-events: Reject invalid tracepoint name (Masami Hiramatsu (Google))
  - tracing: tprobe-events: Fix a memory leak when tprobe with $retval (Masami Hiramatsu (Google))
  - Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'" (Rob Herring (Arm))
  - rust: alloc: Fix `ArrayLayout` allocations (Asahi Lina)
  - rust: use custom FFI integer types (Gary Guo)
  - rust: map `__kernel_size_t` and friends also to usize/isize (Gary Guo)
  - rust: fix size_t in bindgen prototypes of C builtins (Gary Guo)
  - rust: kbuild: expand rusttest target for macros (Ethan D. Twardy)
  - drm/panic: allow verbose version check (Thomas Böhler)
  - drm/panic: allow verbose boolean for clarity (Thomas Böhler)
  - drm/panic: correctly indent continuation of line in list item (Thomas Böhler)
  - drm/panic: remove redundant field when assigning value (Thomas Böhler)
  - drm/panic: prefer eliding lifetimes (Thomas Böhler)
  - drm/panic: remove unnecessary borrow in alignment_pattern (Thomas Böhler)
  - drm/panic: avoid reimplementing Iterator::find (Thomas Böhler)
  - MAINTAINERS: add entry for the Rust `alloc` module (Danilo Krummrich)
  - kbuild: rust: remove the `alloc` crate and `GlobalAlloc` (Danilo Krummrich)
  - rust: alloc: update module comment of alloc.rs (Danilo Krummrich)
  - rust: str: test: replace `alloc::format` (Danilo Krummrich)
  - rust: alloc: implement `Cmalloc` in module allocator_test (Danilo Krummrich)
  - rust: alloc: implement `contains` for `Flags` (Danilo Krummrich)
  - rust: error: check for config `test` in `Error::name` (Danilo Krummrich)
  - rust: error: use `core::alloc::LayoutError` (Danilo Krummrich)
  - rust: alloc: add `Vec` to prelude (Danilo Krummrich)
  - rust: alloc: remove `VecExt` extension (Danilo Krummrich)
  - rust: treewide: switch to the kernel `Vec` type (Danilo Krummrich)
  - rust: alloc: implement `collect` for `IntoIter` (Danilo Krummrich)
  - rust: alloc: implement `IntoIterator` for `Vec` (Danilo Krummrich)
  - rust: alloc: implement kernel `Vec` type (Danilo Krummrich)
  - rust: alloc: introduce `ArrayLayout` (Benno Lossin)
  - rust: alloc: add `Box` to prelude (Danilo Krummrich)
  - rust: alloc: remove extension of std's `Box` (Danilo Krummrich)
  - rust: treewide: switch to our kernel `Box` type (Danilo Krummrich)
  - rust: alloc: implement kernel `Box` (Danilo Krummrich)
  - rust: alloc: add __GFP_NOWARN to `Flags` (Danilo Krummrich)
  - rust: alloc: implement `KVmalloc` allocator (Danilo Krummrich)
  - rust: alloc: implement `Vmalloc` allocator (Danilo Krummrich)
  - rust: alloc: add module `allocator_test` (Danilo Krummrich)
  - rust: alloc: implement `Allocator` for `Kmalloc` (Danilo Krummrich)
  - rust: alloc: make `allocator` module public (Danilo Krummrich)
  - rust: alloc: implement `ReallocFunc` (Danilo Krummrich)
  - rust: alloc: rename `KernelAllocator` to `Kmalloc` (Danilo Krummrich)
  - rust: alloc: separate `aligned_size` from `krealloc_aligned` (Danilo Krummrich)
  - rust: alloc: add `Allocator` trait (Danilo Krummrich)
  - rust: error: optimize error type to use nonzero (Filipe Xavier)
  - rust: error: make conversion functions public (Filipe Xavier)
  - Documentation: rust: discuss `#[expect(...)]` in the guidelines (Miguel Ojeda)
  - rust: start using the `#[expect(...)]` attribute (Miguel Ojeda)
  - Documentation: rust: add coding guidelines on lints (Miguel Ojeda)
  - rust: enable Clippy's `check-private-items` (Miguel Ojeda)
  - rust: provide proper code documentation titles (Miguel Ojeda)
  - rust: replace `clippy::dbg_macro` with `disallowed_macros` (Miguel Ojeda)
  - rust: introduce `.clippy.toml` (Miguel Ojeda)
  - rust: sync: remove unneeded `#[allow(clippy::non_send_fields_in_send_ty)]` (Miguel Ojeda)
  - rust: init: remove unneeded `#[allow(clippy::disallowed_names)]` (Miguel Ojeda)
  - rust: enable `rustdoc::unescaped_backticks` lint (Miguel Ojeda)
  - rust: enable `clippy::ignored_unit_patterns` lint (Miguel Ojeda)
  - rust: enable `clippy::unnecessary_safety_doc` lint (Miguel Ojeda)
  - rust: enable `clippy::unnecessary_safety_comment` lint (Miguel Ojeda)
  - rust: enable `clippy::undocumented_unsafe_blocks` lint (Miguel Ojeda)
  - rust: types: avoid repetition in `{As,From}Bytes` impls (Miguel Ojeda)
  - rust: sort global Rust flags (Miguel Ojeda)
  - rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]` (Miguel Ojeda)
  - loongarch: Use ASM_REACHABLE (Peter Zijlstra)
  - x86/microcode/AMD: Add some forgotten models to the SHA check (Borislav Petkov (AMD))
  - btrfs: fix data overwriting bug during buffered write when block size < page size (Qu Wenruo)
  - smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions (Steve French)
  - cifs: Remove symlink member from cifs_open_info_data union (Pali Rohár)
  - gpio: vf610: add locking to gpio direction functions (Johan Korsnes)
  - gpio: vf610: use generic device_get_match_data() (Bartosz Golaszewski)
  - drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro (Imre Deak)
  - drm/i915/dsi: convert to struct intel_display (Jani Nikula)
  - rust: block: fix formatting in GenDisk doc (Yutaro Ohno)
  - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range() (Andrew Cooper)
  - LTS version: v6.12.18 (Jack Vogel)
  - thermal: gov_power_allocator: Add missing NULL pointer check (Rafael J. Wysocki)
  - x86/microcode/AMD: Load only SHA256-checksummed patches (Borislav Petkov (AMD))
  - x86/microcode/AMD: Add get_patch_level() (Borislav Petkov (AMD))
  - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration (Borislav Petkov (AMD))
  - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite (Borislav Petkov (AMD))
  - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations (Borislav Petkov (AMD))
  - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section() signature (Borislav Petkov (AMD))
  - x86/microcode/AMD: Have __apply_microcode_amd() return bool (Borislav Petkov (AMD))
  - x86/microcode/AMD: Return bool from find_blobs_in_containers() (Nikolay Borisov)
  - amdgpu/pm/legacy: fix suspend/resume issues (chr[])
  - efi: Don't map the entire mokvar table to determine its size (Peter Jones)
  - riscv: cpufeature: use bitmap_equal() instead of memcmp() (Clément Léger)
  - riscv: signal: fix signal_minsigstksz (Yong-Xuan Wang)
  - riscv: cacheinfo: Use of_property_present() for non-boolean properties (Rob Herring)
  - riscv: signal: fix signal frame size (Yong-Xuan Wang)
  - riscv/futex: sign extend compare value in atomic cmpxchg (Andreas Schwab)
  - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm (Stafford Horne)
  - scsi: ufs: core: bsg: Fix crash when arpmb command fails (Arthur Simchaev)
  - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr (Roberto Sassu)
  - dm vdo: add missing spin_lock_init (Ken Raeburn)
  - dm-integrity: Avoid divide by zero in table status in Inline mode (Milan Broz)
  - selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP (Mikhail Ivanov)
  - sched_ext: Fix pick_task_scx() picking non-queued tasks when it's called without balance() (Tejun Heo)
  - sched/core: Prevent rescheduling when interrupts are disabled (Thomas Gleixner)
  - rcuref: Plug slowpath race in rcuref_put() (Thomas Gleixner)
  - vmlinux.lds: Ensure that const vars with relocations are mapped R/O (Ard Biesheuvel)
  - selftests/landlock: Test that MPTCP actions are not restricted (Mikhail Ivanov)
  - mptcp: reset when MPTCP opts are dropped after join (Matthieu Baerts (NGI0))
  - mptcp: always handle address removal under msk socket lock (Paolo Abeni)
  - intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly (Thomas Gleixner)
  - iommu/vt-d: Fix suspicious RCU usage (Lu Baolu)
  - iommu/vt-d: Remove device comparison in context_setup_pass_through_cb (Jerry Snitselaar)
  - phy: exynos5-usbdrd: gs101: ensure power is gated to SS phy in phy_exit() (André Draszik)
  - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk (Kaustabh Chakraborty)
  - phy: tegra: xusb: reset VBUS & ID OVERRIDE (BH Hsieh)
  - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs() (Wei Fang)
  - net: enetc: correct the xdp_tx statistics (Wei Fang)
  - net: enetc: update UDP checksum when updating originTimestamp field (Wei Fang)
  - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC (Wei Fang)
  - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs() (Wei Fang)
  - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs() (Wei Fang)
  - net: phy: qcom: qca807x fix condition for DAC_DSP_BIAS_CURRENT (George Moussalem)
  - net: stmmac: dwmac-loongson: Add fix_soc_reset() callback (Qunqin Zhao)
  - usbnet: gl620a: fix endpoint checking in genelink_bind() (Nikita Zhandarovich)
  - i2c: ls2x: Fix frequency division register access (Binbin Zhou)
  - i2c: npcm: disable interrupt enable bit before devm_request_irq (Tyrone Ting)
  - block: Remove zone write plugs when handling native zone append writes (Damien Le Moal)
  - drm/amd/display: Fix HPD after gpu reset (Roman Li)
  - drm/amd/display: add a quirk to enable eDP0 on DP1 (Yilin Chen)
  - drm/amd/display: Disable PSR-SU on eDP panels (Tom Chung)
  - drm/amdgpu: init return value in amdgpu_ttm_clear_buffer (Pierre-Eric Pelloux-Prayer)
  - drm/amdgpu: disable BAR resize on Dell G5 SE (Alex Deucher)
  - drm/amdkfd: Preserve cp_hqd_pq_control on update_mqd (David Yat Sin)
  - drm/xe/userptr: fix EFAULT handling (Matthew Auld)
  - drm/xe/userptr: restore invalidation list on error (Matthew Auld)
  - drm/xe/regs: remove a duplicate definition for RING_CTL_SIZE(size) (Mingcong Bai)
  - perf/core: Fix low freq setting via IOC_PERIOD (Kan Liang)
  - perf/x86: Fix low freqency setting issue (Kan Liang)
  - perf/core: Add RCU read lock protection to perf_iterate_ctx() (Breno Leitao)
  - KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2 (Oliver Upton)
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (Adrien Vergé)
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Dmitry Panchenko)
  - ftrace: Avoid potential division by zero in function_stat_show() (Nikolay Kuratov)
  - tracing: Fix bad hist from corrupting named_triggers list (Steven Rostedt)
  - riscv: KVM: Fix SBI TIME error generation (Andrew Jones)
  - riscv: KVM: Fix SBI IPI error generation (Andrew Jones)
  - riscv: KVM: Fix hart suspend_type use (Andrew Jones)
  - riscv: KVM: Fix hart suspend status check (Andrew Jones)
  - phy: rockchip: naneng-combphy: compatible reset with old DT (Chukun Pan)
  - phy: rockchip: fix Kconfig dependency more (Arnd Bergmann)
  - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems (Russell Senior)
  - objtool: Fix C jump table annotations for Clang (Ard Biesheuvel)
  - objtool: Remove annotate_{,un}reachable() (Peter Zijlstra)
  - unreachable: Unify (Peter Zijlstra)
  - io_uring/net: save msg_control for compat (Pavel Begunkov)
  - thermal: gov_power_allocator: Update total_weight on bind and cdev updates (Yu-Che Cheng)
  - thermal: core: Move lists of thermal instances to trip descriptors (Rafael J. Wysocki)
  - thermal/of: Fix cdev lookup in thermal_of_should_bind() (Rafael J. Wysocki)
  - thermal: of: Simplify thermal_of_should_bind with scoped for each OF child (Krzysztof Kozlowski)
  - uprobes: Reject the shared zeropage in uprobe_write_opcode() (Tong Tiangen)
  - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list (Luo Gengkun)
  - thermal: gov_power_allocator: Fix incorrect calculation in divvy_up_power() (Yu-Che Cheng)
  - net: ti: icss-iep: Reject perout generation request (Meghana Malladi)
  - idpf: fix checksums set in idpf_rx_rsc() (Eric Dumazet)
  - selftests: drv-net: Check if combined-count exists (Joe Damato)
  - net: ipv6: fix dst ref loop on input in rpl lwt (Justin Iurman)
  - net: ipv6: fix dst ref loop on input in seg6 lwt (Justin Iurman)
  - net/mlx5: IRQ, Fix null string in debug print (Shay Drory)
  - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination. (Harshal Chaudhari)
  - net: Clear old fragment checksum value in napi_reuse_skb (Mohammad Heib)
  - tcp: Defer ts_recent changes until req is owned (Wang Hai)
  - ice: Avoid setting default Rx VSI twice in switchdev setup (Marcin Szycik)
  - ice: Fix deinitializing VF in error path (Marcin Szycik)
  - ice: add E830 HW VF mailbox message limit support (Paul Greenwalt)
  - tcp: devmem: don't write truncated dmabuf CMSGs to userspace (Stanislav Fomichev)
  - net: ethernet: ti: am65-cpsw: select PAGE_POOL (Sascha Hauer)
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (Takashi Iwai)
  - ASoC: cs35l56: Prevent races when soft-resetting using SPI control (Richard Fitzgerald)
  - firmware: cs_dsp: Remove async regmap writes (Richard Fitzgerald)
  - drm/xe/oa: Allow oa_exponent value of 0 (Umesh Nerlige Ramappa)
  - drm/xe/oa: Allow only certain property changes from config (Ashutosh Dixit)
  - drm/xe/oa: Add syncs support to OA config ioctl (Ashutosh Dixit)
  - drm/xe/oa: Move functions up so they can be reused for config ioctl (Ashutosh Dixit)
  - drm/xe/oa: Signal output fences (Ashutosh Dixit)
  - ipvs: Always clear ipvs_property flag in skb_scrub_packet() (Philo Lu)
  - ASoC: fsl: Rename stream name of SAI DAI driver (Chancel Liu)
  - ASoC: es8328: fix route from DAC to output (Nicolas Frattaroli)
  - net: dsa: rtl8366rb: Fix compilation problem (Linus Walleij)
  - net: cadence: macb: Synchronize stats calculations (Sean Anderson)
  - ipvlan: ensure network headers are in skb linear part (Eric Dumazet)
  - ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos conversion. (Guillaume Nault)
  - ipv4: Convert ip_route_input() to dscp_t. (Guillaume Nault)
  - ipv4: Convert icmp_route_lookup() to dscp_t. (Guillaume Nault)
  - net: set the minimum for net_hotdata.netdev_budget_usecs (Jiri Slaby (SUSE))
  - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel)
  - afs: Give an afs_server object a ref on the afs_cell object it points to (David Howells)
  - afs: Fix the server_list to unuse a displaced server rather than putting it (David Howells)
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie (David Howells)
  - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response (Luiz Augusto von Dentz)
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Takashi Iwai)
  - sunrpc: suppress warnings for unused procfs functions (Arnd Bergmann)
  - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers (Kashyap Desai)
  - RDMA/mlx5: Fix bind QP error cleanup flow (Patrisious Haddad)
  - scsi: ufs: core: Set default runtime/system PM levels before ufshcd_hba_init() (Manivannan Sadhasivam)
  - scsi: core: Clear driver private data when retrying request (Ye Bin)
  - RDMA/mlx5: Fix AH static rate parsing (Patrisious Haddad)
  - RDMA/mlx5: Fix implicit ODP hang on parent deregistration (Yishai Hadas)
  - SUNRPC: Handle -ETIMEDOUT return from tlshd (Benjamin Coddington)
  - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file (Trond Myklebust)
  - SUNRPC: Prevent looping due to rpc_signal_task() races (Trond Myklebust)
  - NFS: Adjust delegated timestamps for O_DIRECT reads and writes (Trond Myklebust)
  - NFS: O_DIRECT writes must check and adjust the file length (Trond Myklebust)
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Vasiliy Kovalev)
  - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out() (Bart Van Assche)
  - landlock: Fix non-TCP sockets restriction (Mikhail Ivanov)
  - RDMA/bnxt_re: Fix the statistics for Gen P7 VF (Selvin Xavier)
  - RDMA/bnxt_re: Allocate dev_attr information dynamically (Kalesh AP)
  - RDMA/bnxt_re: Add sanity checks on rdev validity (Kalesh AP)
  - RDMA/bnxt_re: Cache MSIx info to a local structure (Kalesh AP)
  - RDMA/bnxt_re: Refactor NQ allocation (Kalesh AP)
  - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved (Kalesh AP)
  - RDMA/hns: Fix mbox timing out by adding retry mechanism (Junxian Huang)
  - RDMA/mana_ib: Allocate PAGE aligned doorbell index (Konstantin Taranov)
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Yishai Hadas)
  - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error (Yishai Hadas)
  - IB/mlx5: Set and get correct qp_num for a DCT QP (Mark Zhang)
  - RDMA/mlx5: Fix the recovery flow of the UMR QP (Yishai Hadas)
  - uek-rpm: Move few upstream retired modules to modules-deprecated (Harshit Mogalapalli)  [Orabug: 37499469]
  - uek-rpm: Fix depmod warnings with wireless modules in aarch64 (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: make depmod checks more stricter in UEK8 (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Add modules-usb a requirement for modules-desktop rpm (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: ol9: Adjust the dependencies layout between packages (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Move few very old wireless drivers to deprecated. (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Move DVB drivers and media tuners to deprecated (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Move these modules from modules-desktop to modules (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Move few useful usb modules back to modules (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Move few modules back to kernel-uek-modules-extra (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Move few extra-netfilter modules back to core (Harshit Mogalapalli)  [Orabug: 37621770]
  - uek-rpm: Add few modules back to modules-core (Harshit Mogalapalli)  [Orabug: 37621770]
  - dyndbg: export ddebug_add_module/ddebug_remove_module (Julian Pidancet)  [Orabug: 37629343]
  - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet)  [Orabug: 37629343]
  - kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet)  [Orabug: 37629343]
  - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol10/ol9 container kernels (Jonah Palmer)  [Orabug: 37703178]
  - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge)  [Orabug: 36441943]
  - kbuild: exclude .rodata.(cst|str)* when building ranges (Kris Van Hees)  [Orabug: 37459360]
  - UEK8 kABI padding addition for cgroup rdma structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup io structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup hugetlb structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup cpu structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup memcg structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup freezer structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup misc structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup pids structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup cpuset structs (Kamalesh Babulal)  [Orabug: 37470875]
  - UEK8 kABI padding addition for cgroup core structs (Kamalesh Babulal)  [Orabug: 37470875]
  - io_uring/rw: don't mask in f_iocb_flags (Jens Axboe)  [Orabug: 37508827]
  - io_uring: expose read/write attribute capability (Anuj Gupta)  [Orabug: 37508827]
  - block: make bio_integrity_map_user() static inline (Jens Axboe)  [Orabug: 37508827]
  - block: add support to pass user meta buffer (Kanchan Joshi)  [Orabug: 37508827]
  - scsi: add support for user-meta interface (Anuj Gupta)  [Orabug: 37508827]
  - nvme: add support for passing on the application tag (Kanchan Joshi)  [Orabug: 37508827]
  - block: introduce BIP_CHECK_GUARD/REFTAG/APPTAG bip_flags (Anuj Gupta)  [Orabug: 37508827]
  - io_uring: introduce attributes for read/write and PI support (Anuj Gupta)  [Orabug: 37508827]
  - fs: introduce IOCB_HAS_METADATA for metadata (Anuj Gupta)
  - fs, iov_iter: define meta io descriptor (Anuj Gupta)  [Orabug: 37508827]
  - block: modify bio_integrity_map_user to accept iov_iter as argument (Anuj Gupta)  [Orabug: 37508827]
  - block: define set of integrity flags to be inherited by cloned bip (Anuj Gupta)  [Orabug: 37508827]
  - blk-integrity: remove seed for user mapped buffers (Keith Busch)  [Orabug: 37508827]
  - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Carolina Jubran)  [Orabug: 37534708]
  - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (Shravan Kumar Ramani)  [Orabug: 37534708]
  - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (Shravan Kumar Ramani)  [Orabug: 37534708]
  - uek-rpm: Disable INFINIBAND_BNXT_RE (Sherry Yang)  [Orabug: 37645733]
  - UEK8 kABI padding addition for include/linux/mm_types.h (Anthony Yznaga)  [Orabug: 37647051]
  - UEK8 kABI padding addition for include/linux/mm.h (Anthony Yznaga)  [Orabug: 37647051]
  - uek-rpm: Enable CONFIG_MICROSOFT_MANA as module in aarch64 (Vijayendra Suman)  [Orabug: 37647862]
  - Scheduler extension change under Oracle Extensions and modify enum value (Prakash Sangappa)  [Orabug: 37654695]
  - arm64/mm: Fix Boot panic on Ampere Altra (Ryan Roberts)  [Orabug: 37666771]
  - uek: kabi: add kABI padding to include/linux/perf_event.h (Saeed Mirzamohammadi)  [Orabug: 37675597]
  - uek: kabi: add kABI padding to include/uapi/linux/perf_event.h (Saeed Mirzamohammadi)  [Orabug: 37675597]
  - uek: kabi: add kABI padding to arch/x86/events/perf_event.h (Saeed Mirzamohammadi)  [Orabug: 37675597]
  - ARM: dts: aspeed: Add device tree for Ampere's Mt. Jefferson BMC (Chanh Nguyen)  [Orabug: 37680790]
  - dt-bindings: arm: aspeed: add Mt. Jefferson board (Chanh Nguyen)  [Orabug: 37680790]
  - ARM: dts: aspeed: mtmitchell: Add gpio line names for io expanders (Chanh Nguyen)  [Orabug: 37680790]
  - ARM: dts: aspeed: mtmitchell: Add I2C FAN controllers (Chanh Nguyen)  [Orabug: 37680790]
  - perf arm-spe: Add support for SPE Data Source packet on AmpereOne (Ilkka Koskinen)  [Orabug: 37680790]
  - perf arm-spe: Prepare for adding data source packet implementations for other cores (Ilkka Koskinen)  [Orabug: 37680790]
  - perf arm-spe: Use old behavior when opening old SPE files (James Clark)  [Orabug: 37680790]
  - perf arm-spe: Correctly set sample flags (Graham Woodward)  [Orabug: 37680790]
  - perf arm-spe: Add Cortex CPUs to common data source encoding list (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Add Neoverse-V2 to common data source encoding list (Besar Wicaksono)  [Orabug: 37680790]
  - perf arm-spe: Remove the unused 'midr' field (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Use metadata to decide the data source feature (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Introduce arm_spe__is_homogeneous() (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Rename the common data source encoding (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Rename arm_spe__synth_data_source_generic() (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Dump metadata with version 2 (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Support metadata version 2 (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Save per CPU information in metadata (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Calculate meta data size (Leo Yan)  [Orabug: 37680790]
  - perf arm-spe: Define metadata header version 2 (Leo Yan)  [Orabug: 37680790]
  - Documentation: dwc_pcie_pmu: Fix the mnemonics and eventid (Ilkka Koskinen)  [Orabug: 37680790]
  - perf/dwc_pcie: Fix the event numbers (Ilkka Koskinen)  [Orabug: 37680790]
  - idpf: Don't hard code napi_struct size (Joe Damato)  [Orabug: 37693455]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.19.17.el9uek]
changelog:
  - rds/ib: avoid scq/rcq polling during rds connection shutdown (Arumugam Kolappan)  [Orabug: 37440575]
  - uek: kabi: add kABI padding to include/net/page_pool/types.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to nclude/linux/skbuff.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/ethtool.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/tcp.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/sch_generic.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/netlink.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/inetdevice.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/ipv6.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/net.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/netdevice.h and include/linux/netdev_rx_queue.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/linux/netfilter/x_tables.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/dcbnl.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/devlink.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/dst.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/dst_ops.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/fib_rules.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/flow.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/genetlink.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/inet_hashtables.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/ip6_fib.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/ip_tunnels.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/l3mdev.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/lwtunnel.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/neighbour.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/netns/xfrm.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/rtnetlink.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/sch_generic.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/sock.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/switchdev.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/tls.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/xdp.h (Yifei Liu)  [Orabug: 37681321]
  - uek: kabi: add kABI padding to include/net/xfrm.h (Yifei Liu)  [Orabug: 37681321]
  - UEK8 kABI padding addition for include/linux/swap.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/dma-buf.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/dma-map_ops.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/memremap.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/mm_types.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/mmu_notifier.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/mmzone.h (Anthony Yznaga)  [Orabug: 37688615]
  - UEK8 kABI padding addition for include/linux/user_namespace.h (Anthony Yznaga)  [Orabug: 37688615]
  - uek: kabi: add paddings in different domains (Saeed Mirzamohammadi)  [Orabug: 37704304]
  - uek: kabi: add kABI padding to data structures in include/net/udp_tunnel.h (Qing Huang)  [Orabug: 37704599]
  - uek: kabi: add kABI padding to data structures in include/linux/phy.h (Qing Huang)  [Orabug: 37704599]
  - block: make sure ->nr_integrity_segments is cloned in blk_rq_prep_clone (Ming Lei)  [Orabug: 37705235]
  - uek: kabi: add kABI padding to data structures in net/core/dev.h (Qing Huang)  [Orabug: 37729381]
  - uek: kabi: add kABI padding to data structures in include/net/xdp.h (Qing Huang)  [Orabug: 37729381]
  - Update README with UEK Text Description (Somasundaram Krishnasamy)  [Orabug: 37577134]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.20.18.el9uek]
changelog:
  - LTS version: v6.12.20 (Jack Vogel)
  - fs/netfs/read_collect: add to next->prev_donated (Max Kellermann)
  - HID: apple: disable Fn key handling on the Omoton KB066 (Alex Henrie)
  - nvme-fc: rely on state transitions to handle connectivity loss (Daniel Wagner)
  - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del (Luiz Augusto von Dentz)
  - tools/sched_ext: Add helper to check task migration state (Andrea Righi)
  - sched_ext: selftests/dsp_local_on: Fix selftest on UP systems (Andrea Righi)
  - smb: client: Fix match_session bug preventing session reuse (Henrique Carvalho)
  - smb3: add support for IAKerb (Steve French)
  - mm/hugetlb: wait for hugetlb folios to be freed (Ge Yang)
  - i2c: sis630: Fix an error handling path in sis630_probe() (Christophe JAILLET)
  - i2c: ali15x3: Fix an error handling path in ali15x3_probe() (Christophe JAILLET)
  - i2c: ali1535: Fix an error handling path in ali1535_probe() (Christophe JAILLET)
  - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware hypervisors (Ajay Kaher)
  - cifs: Fix integer overflow while processing closetimeo mount option (Murad Masimov)
  - cifs: Fix integer overflow while processing actimeo mount option (Murad Masimov)
  - cifs: Fix integer overflow while processing acdirmax mount option (Murad Masimov)
  - cifs: Fix integer overflow while processing acregmax mount option (Murad Masimov)
  - block: change blk_mq_add_to_batch() third argument type to bool (Shin'ichiro Kawasaki)
  - scripts: generate_rust_analyzer: add uapi crate (Tamir Duberstein)
  - scripts: generate_rust_analyzer: add missing include_dirs (Tamir Duberstein)
  - scripts: generate_rust_analyzer: add missing macros deps (Tamir Duberstein)
  - drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support for partial mmaps (José Roberto de Souza)
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Christophe JAILLET)
  - nvme: move error logging from nvme_end_req() to __nvme_end_req() (Shin'ichiro Kawasaki)
  - drm/xe/pm: Temporarily disable D3Cold on BMG (Rodrigo Vivi)
  - drm/xe/userptr: Fix an incorrect assert (Thomas Hellström)
  - drm/xe: Release guc ids before cancelling work (Tejas Upadhyay)
  - drm/xe: cancel pending job timer before freeing scheduler (Tejas Upadhyay)
  - ASoC: rt722-sdca: add missing readable registers (Bard Liao)
  - rust: init: add missing newline to pr_info! calls (Alban Kurti)
  - ASoC: cs42l43: Fix maximum ADC Volume (Charles Keepax)
  - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data() (Ivan Abramov)
  - rust: error: add missing newline to pr_warn! calls (Alban Kurti)
  - ASoC: ops: Consistently treat platform_max as control value (Charles Keepax)
  - sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() (Andrea Righi)
  - net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata (Andrei Botila)
  - net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata (Andrei Botila)
  - smb: client: fix regression with guest option (Paulo Alcantara)
  - qlcnic: fix memory leak issues in qlcnic_sriov_common.c (Haoxiang Li)
  - Fix mmu notifiers for range-based invalidates (Piotr Jaroszynski)
  - arm64: mm: Populate vmemmap at the page level if not section aligned (Zhenhua Huang)
  - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature (Kent Overstreet)
  - netmem: prevent TX of unreadable skbs (Mina Almasry)
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model (Thomas Mizrahi)
  - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Peter Ujfalusi)
  - clk: samsung: gs101: fix synchronous external abort in samsung_clk_save() (Peter Griffin)
  - clk: samsung: update PLL locktime for PLL142XX used on FSD platform (Varada Pavani)
  - ksmbd: prevent connection release during oplock break notification (Namjae Jeon)
  - ksmbd: fix use-after-free in ksmbd_free_work_struct (Namjae Jeon)
  - drm/amd/display: Fix slab-use-after-free on hdcp_work (Mario Limonciello)
  - drm/amd/display: Assign normalized_pix_clk when color depth = 14 (Alex Hung)
  - drm/amd/display: Restore correct backlight brightness after a GPU reset (Mario Limonciello)
  - drm/amd/display: fix missing .is_two_pixels_per_container (Aliaksei Urbanski)
  - drm/amd/display: fix default brightness (Mario Limonciello)
  - drm/amd/display: Disable unneeded hpd interrupts during dm_init (Leo Li)
  - drm/amdgpu/display: Allow DCC for video formats on GFX12 (David Rosca)
  - drm/amd/amdkfd: Evict all queues even HWS remove queue failed (Yifan Zha)
  - drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags (Natalie Vock)
  - drm/dp_mst: Fix locking when skipping CSN before topology probing (Imre Deak)
  - drm/atomic: Filter out redundant DPMS calls (Ville Syrjälä)
  - drm/panic: fix overindented list items in documentation (Miguel Ojeda)
  - drm/panic: use `div_ceil` to clean Clippy warning (Miguel Ojeda)
  - drm/i915/cdclk: Do cdclk post plane programming later (Ville Syrjälä)
  - spi: microchip-core: prevent RX overflows when transmit size > FIFO size (Conor Dooley)
  - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes (Florent Revest)
  - rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>` (Benno Lossin)
  - rust: Disallow BTF generation with Rust + LTO (Matthew Maurer)
  - rust: alloc: satisfy POSIX alignment requirement (Tamir Duberstein)
  - rust: remove leftover mentions of the `alloc` crate (Miguel Ojeda)
  - rust: lockdep: Remove support for dynamically allocated LockClassKeys (Mitchell Levy)
  - USB: serial: option: match on interface class for Telit FN990B (Johan Hovold)
  - USB: serial: option: fix Telit Cinterion FE990A name (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FE990B compositions (Fabio Porcedda)
  - USB: serial: ftdi_sio: add support for Altera USB Blaster 3 (Boon Khai Ng)
  - Input: i8042 - swap old quirk combination with new quirk for more devices (Werner Sembach)
  - Input: i8042 - swap old quirk combination with new quirk for several devices (Werner Sembach)
  - Input: i8042 - add required quirks for missing old boardnames (Werner Sembach)
  - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ (Werner Sembach)
  - Input: xpad - rename QH controller to Legion Go S (Antheas Kapenekakis)
  - Input: xpad - add support for TECNO Pocket Go (Antheas Kapenekakis)
  - Input: xpad - add support for ZOTAC Gaming Zone (Antheas Kapenekakis)
  - Input: xpad - add multiple supported devices (Pavel Rojtberg)
  - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers (Nilton Perim Neto)
  - Input: iqs7222 - preserve system status register (Jeff LaBundy)
  - Input: ads7846 - fix gpiod allocation (H. Nikolaus Schaller)
  - Input: goodix-berlin - fix vddio regulator references (Luca Weiss)
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point() (Pali Rohár)
  - cifs: Validate content of WSL reparse point buffers (Pali Rohár)
  - vhost: return task creation error instead of NULL (Keith Busch)
  - block: fix 'kmem_cache of name 'bio-108' already exists' (Ming Lei)
  - net: Handle napi_schedule() calls from non-interrupt (Frederic Weisbecker)
  - drm/nouveau: Do not override forced connector status (Thomas Zimmermann)
  - mptcp: safety check before fallback (Matthieu Baerts (NGI0))
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Aaron Ma)
  - x86/irq: Define trace events conditionally (Arnd Bergmann)
  - x86/of: Don't use DTB for SMP setup if ACPI is enabled (Dmytro Maluka)
  - perf/x86/intel: Use better start period for frequency mode (Kan Liang)
  - drm/vkms: Round fixp2int conversion in lerp_u16 (Harry Wentland)
  - ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup (Bard Liao)
  - ASoC: dapm-graph: set fill colour of turned on nodes (Nicolas Frattaroli)
  - fuse: don't truncate cached, mutated symlink (Miklos Szeredi)
  - ASoC: tas2764: Set the SDOUT polarity correctly (Hector Martin)
  - ASoC: tas2764: Fix power control mask (Hector Martin)
  - ASoC: tas2770: Fix volume scale (Hector Martin)
  - phy: ti: gmii-sel: Do not use syscon helper to build regmap (Andrew Davis)
  - nvme: only allow entering LIVE from CONNECTING state (Daniel Wagner)
  - sctp: Fix undefined behavior in left shift operation (Yu-Chun Lin)
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes (Pali Rohár)
  - apple-nvme: Release power domains when probe fails (Hector Martin)
  - nvmet-rdma: recheck queue state is LIVE in state lock in recv done (Ruozhu Li)
  - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers (Christopher Lentocha)
  - io-wq: backoff when retrying worker creation (Uday Shankar)
  - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors (Stephan Gerhold)
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE (Cristian Ciocaltea)
  - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk (Cristian Ciocaltea)
  - ALSA: hda: hda-intel: add Panther Lake-H support (Pierre-Louis Bossart)
  - ASoC: SOF: Intel: pci-ptl: Add support for PTL-H (Peter Ujfalusi)
  - ALSA: hda: intel-dsp-config: Add PTL-H support (Pierre-Louis Bossart)
  - PCI: pci_ids: add INTEL_HDA_PTL_H (Pierre-Louis Bossart)
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Terry Cheong)
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Vitaly Rodionov)
  - ASoC: rsnd: adjust convert rate limitation (Kuninori Morimoto)
  - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime() (Kuninori Morimoto)
  - ASoC: rsnd: indicate unsupported clock rate (Kuninori Morimoto)
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50 (Edson Juliano Drosdeck)
  - ASoC: simple-card-utils.c: add missing dlc->of_node (Kuninori Morimoto)
  - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull (Bard Liao)
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 (Richard Fitzgerald)
  - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID (Richard Fitzgerald)
  - selftests/bpf: Fix invalid flag of recv() (Jiayuan Chen)
  - drm/tests: hdmi: Fix recursive locking (Maxime Ripard)
  - drm/tests: hdmi: Reorder DRM entities variables assignment (Maxime Ripard)
  - drm/tests: hdmi: Remove redundant assignments (Maxime Ripard)
  - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd (Luiz Augusto von Dentz)
  - Xen/swiotlb: mark xen_swiotlb_fixup() __init (Jan Beulich)
  - arm64: amu: Delay allocating cpumask for AMU FIE support (Beata Michalska)
  - LoongArch: KVM: Set host with kernel mode when switch to VM mode (Bibo Mao)
  - LoongArch: Fix kernel_page_present() for KPRANGE/XKPRANGE (Huacai Chen)
  - thermal/cpufreq_cooling: Remove structure member documentation (Daniel Lezcano)
  - s390/cio: Fix CHPID "configure" attribute caching (Peter Oberparleiter)
  - platform/x86: int3472: Call "reset" GPIO "enable" for INT347E (Sakari Ailus)
  - platform/x86: int3472: Use correct type for "polarity", call it gpio_flags (Sakari Ailus)
  - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles (Mark Pearson)
  - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e (Sybil Isabel Dorsett)
  - sched: Clarify wake_up_q()'s write to task->wake_q.next (Jann Horn)
  - objtool: Ignore dangling jump table entries (Josh Poimboeuf)
  - btrfs: fix two misuses of folio_shift() (Matthew Wilcox (Oracle))
  - HID: apple: fix up the F6 key on the Omoton KB066 keyboard (Alex Henrie)
  - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support (Ievgen Vovk)
  - selftests/cgroup: use bash in test_cpuset_v1_hp.sh (Bharadwaj Raju)
  - HID: topre: Fix n-key rollover on Realforce R3S TKL boards (Daniel Brackenbury)
  - HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs (Zhang Lixu)
  - usb: phy: generic: Use proper helper for property detection (Alexander Stein)
  - HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode (Vicki Pfau)
  - HID: ignore non-functional sensor in HP 5MP Camera (Chia-Lin Kao (AceLan))
  - HID: intel-ish-hid: Send clock sync message immediately after reset (Zhang Lixu)
  - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell (Zhang Lixu)
  - sched_ext: selftests/dsp_local_on: Fix sporadic failures (Tejun Heo)
  - selftests: always check mask returned by statmount(2) (Miklos Szeredi)
  - vboxsf: fix building with GCC 15 (Brahmajit Das)
  - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support (Eric W. Biederman)
  - smb: client: fix noisy when tree connecting to DFS interlink targets (Paulo Alcantara)
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Gannon Kolding)
  - scsi: qla1280: Fix kernel oops when debug level > 2 (Magnus Lindholm)
  - scsi: ufs: core: Fix error return with query response (Seunghui Lee)
  - scsi: core: Use GFP_NOIO to avoid circular locking dependency (Rik van Riel)
  - drm/amd/display: Fix out-of-bound accesses (Alex Hung)
  - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show() (Dmitry Kandybka)
  - sched/debug: Provide slice length for fair tasks (Christian Loehle)
  - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() (Chengen Du)
  - futex: Pass in task to futex_queue() (Jens Axboe)
  - btrfs: avoid starting new transaction when cleaning qgroup during subvolume drop (Filipe Manana)
  - powercap: call put_device() on an error path in powercap_register_control_type() (Joe Hattori)
  - hrtimers: Mark is_migration_base() with __always_inline (Andy Shevchenko)
  - nvme-fc: do not ignore connectivity loss during connecting (Daniel Wagner)
  - nvme-fc: go straight to connecting state when initializing (Daniel Wagner)
  - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices (Carolina Jubran)
  - net/mlx5: Bridge, fix the crash caused by LAG state check (Jianbo Liu)
  - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch (Shay Drory)
  - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs (Shay Drory)
  - net/mlx5: HWS, Rightsize bwc matcher priority (Vlad Dogaru)
  - Revert "openvswitch: switch to per-action label counting in conntrack" (Xin Long)
  - net: openvswitch: remove misbehaving actions length check (Ilya Maximets)
  - gre: Fix IPv6 link-local address generation. (Guillaume Nault)
  - netfilter: nft_exthdr: fix offset with ipv4_find_option() (Alexey Kashavkin)
  - net_sched: Prevent creation of classes with TC_H_ROOT (Cong Wang)
  - ipvs: prevent integer overflow in do_ip_vs_get_ctl() (Dan Carpenter)
  - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree() (Kohei Enju)
  - rtase: Fix improper release of ring list entries in rtase_sw_reset (Justin Lai)
  - selftests: bonding: fix incorrect mac address (Hangbin Liu)
  - bonding: fix incorrect MAC address setting to receive NS messages (Hangbin Liu)
  - net: mctp: unshare packets when reassembling (Matt Johnston)
  - net: switchdev: Convert blocking notification chain to a raw one (Amit Cohen)
  - eth: bnxt: fix memory leak in queue reset (Taehee Yoo)
  - bnxt_en: handle tpa_info in queue API implementation (David Wei)
  - bnxt_en: refactor tpa_info alloc/free into helpers (David Wei)
  - eth: bnxt: use page pool for head frags (Jakub Kicinski)
  - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx} (Taehee Yoo)
  - eth: bnxt: do not update checksum in bnxt_xdp_build_skb() (Taehee Yoo)
  - eth: bnxt: do not use BNXT_VNIC_NTUPLE unconditionally in queue restart logic (Taehee Yoo)
  - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc() (Taehee Yoo)
  - eth: bnxt: fix truesize for mb-xdp-pass case (Taehee Yoo)
  - net/mlx5: handle errors in mlx5_chains_create_table() (Wentao Liang)
  - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio() (Michael Kelley)
  - fbdev: hyperv_fb: Allow graceful removal of framebuffer (Saurabh Sengar)
  - fbdev: hyperv_fb: Simplify hvfb_putmem (Saurabh Sengar)
  - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs (Michael Kelley)
  - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed (Michael Kelley)
  - netpoll: hold rcu read lock in __netpoll_send_skb() (Breno Leitao)
  - net: mctp i2c: Copy headers if cloned (Matt Johnston)
  - net: mctp i3c: Copy headers if cloned (Matt Johnston)
  - net: dsa: mv88e6xxx: Verify after ATU Load ops (Joseph Huang)
  - net/mlx5: Fill out devlink dev info only for PFs (Jiri Pirko)
  - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context" (Luiz Augusto von Dentz)
  - Bluetooth: hci_event: Fix enabling passive scanning (Luiz Augusto von Dentz)
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy (Miri Korenblit)
  - wifi: mac80211: don't queue sdata::work for a non-running sdata (Miri Korenblit)
  - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms (Emmanuel Grumbach)
  - sched: address a potential NULL pointer dereference in the GRED scheduler. (Jun Yang)
  - netfilter: nf_tables: make destruction work queue pernet (Florian Westphal)
  - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around (Nicklas Bo Jensen)
  - ice: Fix switchdev slow-path in LAG (Marcin Szycik)
  - ice: fix memory leak in aRFS after reset (Grzegorz Nitka)
  - ice: do not configure destination override for switchdev (Larysa Zaremba)
  - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template. (Sebastian Andrzej Siewior)
  - pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw (Charles Han)
  - pinctrl: bcm281xx: Fix incorrect regmap max_registers value (Artur Weber)
  - fbdev: hyperv_fb: iounmap() the correct memory when removing a device (Michael Kelley)
  - userfaultfd: fix PTE unmapping stack-allocated PTE copies (Suren Baghdasaryan)
  - mm: fix kernel BUG when userfaultfd_move encounters swapcache (Barry Song)
  - mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq (Uladzislau Rezki (Sony))


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.20.19.el9uek]
changelog:
  - uek-rpm: switch to new secureboot certificates and upgrade shim (Samasth Norway Ananda)  [Orabug: 37764000]
  - rds: ib: Fix racy send affinity work cancellation (Håkon Bugge)  [Orabug: 37607468]
  - uek: kabi: Update kABI files and enable the kABI checker (Yifei Liu)  [Orabug: 37670742]
  - rds: ib: Do not attempt to insert RDMA exthdr twice (Håkon Bugge)  [Orabug: 37688884]
  - RDMA/cma: Fix workqueue crash in cma_netevent_work_handler (Sharath Srinivasan)  [Orabug: 37712584]
  - perf probe: Improve log for long event name failure (Leo Yan)  [Orabug: 37752600]
  - perf probe: Check group string length (Leo Yan)  [Orabug: 37752600]
  - perf probe: Use the MAX_EVENT_NAME_LEN macro (Leo Yan)  [Orabug: 37752600]
  - uek-rpm: install the perf exec dir (Stephen Brennan)  [Orabug: 37757733]
  - uek: kabi: add kABI padding to struct module in include/linux/module.h (Sherry Yang)  [Orabug: 37762627]
  - Revert "uek: kabi: add kABI padding to include/uapi/linux/perf_event.h" (Yifei Liu)  [Orabug: 37740310]
  - Move the padding location to be prior to frags[MAX_SKB_FRAGS] (Yifei Liu)  [Orabug: 37734888]
  - uek: kabi: add kABI padding to napi_struct in include/linux/netdevice.h (Yifei Liu)  [Orabug: 37734849]
  - perf dso: fix dso__is_kallsyms() check (Stephen Brennan)  [Orabug: 37724378]
  - uek-rpm: use find instead of ls for removing modules (Harshit Mogalapalli)  [Orabug: 37721662]
  - Special case SHM_HUGETLB allocation using mlock ulimit (Prakash Sangappa)  [Orabug: 37704635]
  - uek-rpm: update firmware dependency to latest .38 version (Samasth Norway Ananda)  [Orabug: 37693355]
  - rds: ib: Make traffic_class visible to user-space (Håkon Bugge)  [Orabug: 37617864]
  - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge)  [Orabug: 37617864]
  - Revert "rds: ib: Make sure receives are posted before connection is up" (Gerd Rausch)  [Orabug: 37577031]
  - mm: lru: add VM_WARN_ON_ONCE_FOLIO to lru maintenance function (Muchun Song)  [Orabug: 37405594]
  - mm: memcontrol: use obj_cgroup APIs to charge the LRU pages (Muchun Song)  [Orabug: 37405594]
  - mm: memcontrol: introduce memcg_reparent_ops (Muchun Song)  [Orabug: 37405594]
  - mm: memcontrol: make all the callers of {folio,page}_memcg() safe (Muchun Song)  [Orabug: 37405594]
  - mm: thp: make split queue lock safe when LRU pages are reparented (Muchun Song)  [Orabug: 37405594]
  - mm: vmscan: rework move_pages_to_lru() (Muchun Song)  [Orabug: 37405594]
  - mm: memcontrol: make lruvec lock safe when LRU pages are reparented (Muchun Song)  [Orabug: 37405594]
  - mm: memcontrol: prepare objcg API for non-kmem usage (Muchun Song)  [Orabug: 37405594]
  - mm: rename unlock_page_lruvec{_irq, _irqrestore} to lruvec_unlock{_irq, _irqrestore} (Muchun Song)  [Orabug: 37405594]
  - mm: memcontrol: remove dead code and comments (Muchun Song)  [Orabug: 37405594]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.20.20.el9uek]
changelog:
  - block: prevent calls to should_fail_bio() optimized by gcc (Prasad Singamsetty)  [Orabug: 37782458]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-0.20.20.1.el9uek]
changelog:
  - rds: ib: Fix NULL ptr deref in rds_ib_cq_follow_affinity (Håkon Bugge)  [Orabug: 37702023]
  - scsi: mpi3mr: Task Abort EH Support (Chandrakanth Patil)  [Orabug: 37778472]
  - scsi: mpi3mr: Update driver version to 8.13.0.5.50 (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Check admin reply queue from Watchdog (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Update timestamp only for supervisor IOCs (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Update MPI Headers to revision 35 (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Fix locking in an error path (Bart Van Assche)  [Orabug: 37778472]
  - scsi: mpi3mr: Fix spelling mistake "skiping" -> "skipping" (Colin Ian King)  [Orabug: 37778472]
  - scsi: mpi3mr: Update driver version to 8.12.1.0.50 (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Support for Segmented Hardware Trace buffer (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Avoid reply queue full condition (Ranjan Kumar)  [Orabug: 37778472]
  - scsi: mpi3mr: Update driver version to 8.12.0.3.50 (Ranjan Kumar)  [Orabug: 37778472]
  - uek-rpm: Enable Intel In Field Scan as a module in UEK8 (Harshit Mogalapalli)  [Orabug: 37778856]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-1.23.1.el9uek]
changelog:
  - LTS version: v6.12.23 (Jack Vogel)
  - platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc() (Dan Carpenter)
  - tracing: Do not use PERF enums when perf is not defined (Steven Rostedt)
  - ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE (Nathan Chancellor)
  - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up (Chuck Lever)
  - NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory (Chuck Lever)
  - NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs() (Chuck Lever)
  - nfsd: fix management of listener transports (Olga Kornievskaia)
  - nfsd: put dl_stid if fail to queue dl_recall (Li Lingfeng)
  - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid() (Jeff Layton)
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov)
  - media: vimc: skip .s_stream() for stopped entities (Nikita Zhandarovich)
  - exec: fix the racy usage of fs_struct->in_exec (Oleg Nesterov)
  - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() (Yosry Ahmed)
  - jfs: add index corruption check to DT_GETPAGE() (Roman Smirnov)
  - jfs: fix slab-out-of-bounds read in ea_get() (Qasim Ijaz)
  - ext4: fix OOB read when checking dotdot dir (Acs, Jakub)
  - ext4: don't over-report free space or inodes in statvfs (Theodore Ts'o)
  - wifi: mt76: mt7921: fix kernel panic due to null pointer dereference (Ming Yen Hsieh)
  - arm64: Don't call NULL in do_compat_alignment_fixup() (Angelos Oikonomopoulos)
  - mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs (David Hildenbrand)
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Ran Xiaokai)
  - tracing: Fix synth event printk format for str fields (Douglas Raillard)
  - tracing: Ensure module defining synth event cannot be unloaded while tracing (Douglas Raillard)
  - tracing: Fix use-after-free in print_graph_function_flags during tracer switching (Tengda Wu)
  - exfat: fix potential wrong error return from get_block (Sungjong Seo)
  - exfat: fix random stack corruption after get_block (Sungjong Seo)
  - ksmbd: fix null pointer dereference in alloc_preauth_hash() (Namjae Jeon)
  - ksmbd: validate zero num_subauth before sub_auth is accessed (Norbert Szetei)
  - ksmbd: fix overflow in dacloffset bounds check (Norbert Szetei)
  - ksmbd: fix session use-after-free in multichannel connection (Namjae Jeon)
  - ksmbd: fix use-after-free in ksmbd_sessions_deregister() (Namjae Jeon)
  - ksmbd: add bounds check for create lease context (Norbert Szetei)
  - ksmbd: add bounds check for durable handle context (Namjae Jeon)
  - KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error (Sean Christopherson)
  - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD (Ulf Hansson)
  - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability (Karel Balej)
  - mmc: omap: Fix memory leak in mmc_omap_new_slot (Miaoqian Lin)
  - Remove unnecessary firmware version check for gc v9_4_2 (Candice Li)
  - media: omap3isp: Handle ARM dma_iommu_mapping (Robin Murphy)
  - ARM: 9444/1: add KEEP() keyword to ARM_VECTORS (Christian Eggers)
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Paul Menzel)
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Murad Masimov)
  - wifi: mt76: mt7925: remove unused acpi function for clc (Ming Yen Hsieh)
  - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs (Jann Horn)
  - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume (Guilherme G. Piccoli)
  - x86/Kconfig: Add cmpxchg8b support back to Geode CPUs (Arnd Bergmann)
  - uprobes/x86: Harden uretprobe syscall trampoline check (Jiri Olsa)
  - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read (Kan Liang)
  - perf/x86/intel: Apply static call for drain_pebs (Peter Zijlstra (Intel))
  - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk() (Markus Elfring)
  - platform/x86: ISST: Correct command storage data length (Srinivas Pandruvada)
  - platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and E560 (Eduard Christian Dumitrescu)
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Hans de Goede)
  - x86/tdx: Fix arch_safe_halt() execution for TDX VMs (Vishal Annapurve)
  - x86/mce: use is_copy_from_user() to determine copy-from-user context (Shuai Xue)
  - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value (Boris Ostrovsky)
  - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected (Paolo Bonzini)
  - x86/hyperv: Fix check of return value from snp_set_vmsa() (Tianyu Lan)
  - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC (Hengqi Chen)
  - LoongArch: BPF: Don't override subprog's return value (Hengqi Chen)
  - LoongArch: BPF: Fix off-by-one error in build_prologue() (Hengqi Chen)
  - LoongArch: Increase MAX_IO_PICS up to 8 (Huacai Chen)
  - LoongArch: Increase ARCH_DMA_MINALIGN up to 16 (Huacai Chen)
  - rust: Fix enabling Rust and building with GCC for LoongArch (WANG Rui)
  - usbnet:fix NPE during rx_complete (Ying Lu)
  - wifi: mac80211: Fix sparse warning for monitor_sdata (Alexander Wetzel)
  - tty: serial: lpuart: only disable CTS instead of overwriting the whole UARTMODIR register (Sherry Sun)
  - tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning (Sherry Sun)
  - tty: serial: fsl_lpuart: use port struct directly to simply code (Sherry Sun)
  - tty: serial: fsl_lpuart: Use u32 and u8 for register variables (Sherry Sun)
  - cgroup/rstat: Fix forceidle time in cpu.stat (Abel Wu)
  - cgroup/rstat: Tracking cgroup-level niced CPU time (Joshua Hahn)
  - tracing: Correct the refcount if the hist/hist_debug file fails to open (Tengda Wu)
  - tracing/hist: Support POLLPRI event for poll on histogram (Masami Hiramatsu (Google))
  - tracing/hist: Add poll(POLLIN) support on hist file (Masami Hiramatsu (Google))
  - tracing: Switch trace_events_hist.c code over to use guard() (Steven Rostedt)
  - tools/power turbostat: report CoreThr per measurement interval (Len Brown)
  - perf/core: Fix child_total_time_enabled accounting bug at task exit (Yeoreum Yun)
  - drm/amdgpu/gfx12: fix num_mec (Alex Deucher)
  - drm/amdgpu/gfx11: fix num_mec (Alex Deucher)
  - kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally (Alexandru Gagniuc)
  - net: ibmveth: make veth_pool_store stop hanging (Dave Marquardt)
  - arcnet: Add NULL check in com20020pci_probe() (Henry Martin)
  - ipv6: Do not consider link down nexthops in path selection (Ido Schimmel)
  - ipv6: Start path selection from the first nexthop (Ido Schimmel)
  - net: fix geneve_opt length integer overflow (Lin Ma)
  - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy (David Oberhollenzer)
  - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS (Fernando Fernandez Mancera)
  - netfilter: nft_tunnel: fix geneve_opt type confusion addition (Lin Ma)
  - net: decrease cached dst counters in dst_release (Antoine Tenart)
  - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). (Guillaume Nault)
  - vsock: avoid timeout during connect() if the socket is closing (Stefano Garzarella)
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima)
  - udp: Fix multiple wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima)
  - net: mvpp2: Prevent parser TCAM memory corruption (Tobias Waldekranz)
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet)
  - net_sched: skbprio: Remove overly strict queue assertions (Cong Wang)
  - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets (Debin Zhu)
  - netfilter: nf_tables: don't unregister hook when table is dormant (Florian Westphal)
  - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only (Pablo Neira Ayuso)
  - idpf: fix adapter NULL pointer dereference on reboot (Emil Tantilov)
  - e1000e: change k1 configuration on MTP and later platforms (Vitaly Lifshits)
  - spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent (Florian Fainelli)
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Takashi Iwai)
  - spi: bcm2835: Do not call gpiod_put() on invalid descriptor (Florian Fainelli)
  - ASoC: imx-card: Add NULL check in imx_card_probe() (Henry Martin)
  - nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Caleb Sander Mateos)
  - riscv/purgatory: 4B align purgatory_start (Björn Töpel)
  - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator (Yao Zi)
  - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte (Alexandre Ghiti)
  - spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock() (Josh Poimboeuf)
  - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe() (Christophe JAILLET)
  - s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation (Sven Schnelle)
  - ublk: make sure ubq->canceling is set when queue is frozen (Ming Lei)
  - x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs (Herton R. Krzesinski)
  - RISC-V: errata: Use medany for relocatable builds (Palmer Dabbelt)
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Takashi Iwai)
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Richard Fitzgerald)
  - ntb: intel: Fix using link status DB's (Nikita Shubin)
  - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Yajun Deng)
  - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra (Juhan Jin)
  - fs/9p: fix NULL pointer dereference on mkdir (Christian Schoenebeck)
  - spufs: fix a leak in spufs_create_context() (Al Viro)
  - spufs: fix gang directory lifetimes (Al Viro)
  - spufs: fix a leak on spufs_new_file() failure (Al Viro)
  - netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int (David Howells)
  - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9} (Tasos Sahanidis)
  - memory: omap-gpmc: drop no compatible check (Roger Quadros)
  - can: statistics: use atomic access in hot path (Oliver Hartkopp)
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Navon John Lukose)
  - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted (Florian Westphal)
  - net: devmem: do not WARN conditionally after netdev_rx_queue_restart() (Taehee Yoo)
  - drm/amd: Keep display off while going into S4 (Mario Limonciello)
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Keith Busch)
  - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled (Vladis Dronov)
  - x86/hyperv: Fix output argument to hypercall that changes page visibility (Michael Kelley)
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long)
  - wifi: mac80211: fix SA Query processing in MLO (Johannes Berg)
  - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state (Emmanuel Grumbach)
  - ASoC: rt1320: set wake_capable = 0 explicitly (Bard Liao)
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Alexey Klimov)
  - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory (Naman Jain)
  - sched/deadline: Use online cpus for validating runtime (Shrikanth Hegde)
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Stefan Binding)
  - exfat: add a check for invalid data size (Yuezhang Mo)
  - platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA (Shyam Sundar S K)
  - platform/x86/amd/pmf: Propagate PMF-TA return codes (Shyam Sundar S K)
  - HID: i2c-hid: improve i2c_hid_get_report error message (Wentao Guan)
  - net: dsa: rtl8366rb: don't prompt users for LED control (Jakub Kicinski)
  - platform/x86/intel/vsec: Add Diamond Rapids support (David E. Box)
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Dmitry Panchenko)
  - cifs: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
  - smb: common: change the data type of num_aces to le16 (Namjae Jeon)
  - perf/core: Fix perf_pmu_register() vs. perf_init_event() (Peter Zijlstra)
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Daniel Bárta)
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Antheas Kapenekakis)
  - affs: don't write overlarge OFS data block size fields (Simon Tatham)
  - affs: generate OFS sequence numbers starting at 1 (Simon Tatham)
  - wifi: brcmfmac: keep power during suspend if board requires it (Matthias Proske)
  - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA (Icenowy Zheng)
  - nvme-pci: clean up CMBMSC when registering CMB fails (Icenowy Zheng)
  - nvme-tcp: fix possible UAF in nvme_tcp_poll (Sagi Grimberg)
  - wifi: iwlwifi: mvm: use the right version of the rate API (Emmanuel Grumbach)
  - wifi: iwlwifi: fw: allocate chained SG tables for dump (Johannes Berg)
  - wifi: mac80211: remove debugfs dir for virtual monitor (Alexander Wetzel)
  - wifi: mac80211: Cleanup sta TXQs on flush (Alexander Wetzel)
  - nfs: Add missing release on error in nfs_lock_and_join_requests() (Dan Carpenter)
  - objtool/loongarch: Add unwind hints in prepare_frametrace() (Josh Poimboeuf)
  - rcu-tasks: Always inline rcu_irq_work_resched() (Josh Poimboeuf)
  - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}() (Josh Poimboeuf)
  - sched/smt: Always inline sched_smt_active() (Josh Poimboeuf)
  - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set (David Laight)
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq (Geetha sowjanya)
  - octeontx2-af: Fix mbox INTR handler when num VFs > 64 (Geetha sowjanya)
  - net: phy: broadcom: Correct BCM5221 PHY model detection (Jim Liu)
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Giovanni Gherdovich)
  - LoongArch: Rework the arch_kgdb_breakpoint() implementation (Yuli Wang)
  - LoongArch: Fix device node refcount leak in fdt_cpu_clk_init() (Miaoqian Lin)
  - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig (谢致邦 (XIE Zhibang))
  - objtool: Fix segfault in ignore_unreachable_insn() (Josh Poimboeuf)
  - ring-buffer: Fix bytes_dropped calculation issue (Feng Yang)
  - net/mlx5e: SHAMPO, Make reserved size independent of page size (Lama Kayal)
  - ksmbd: fix r_count dec/increment mismatch (Namjae Jeon)
  - ksmbd: fix multichannel connection failure (Namjae Jeon)
  - ksmbd: use aead_request_free to match aead_request_alloc (Miaoqian Lin)
  - rndis_host: Flag RNDIS modems as WWAN devices (Lubomir Rintel)
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Mark Zhang)
  - exfat: fix missing shutdown check (Yuezhang Mo)
  - exfat: fix the infinite loop in exfat_find_last_cluster() (Yuezhang Mo)
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Wang Zhaolong)
  - NFS: Shut down the nfs_client only after all the superblocks (Trond Myklebust)
  - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() (Josh Poimboeuf)
  - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show() (Josh Poimboeuf)
  - thermal: core: Remove duplicate struct declaration (xueqin Luo)
  - perf bpf-filter: Fix a parsing error with comma (Namhyung Kim)
  - perf tools: annotate asm_pure_loop.S (Marcus Meissner)
  - fs/procfs: fix the comment above proc_pid_wchan() (Bart Van Assche)
  - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation (Ilkka Koskinen)
  - tty: n_tty: use uint for space returned by tty_write_room() (Jiri Slaby (SUSE))
  - staging: vchiq_arm: Fix possible NPR of keep-alive thread (Stefan Wahren)
  - staging: vchiq_arm: Register debugfs after cdev (Stefan Wahren)
  - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES (谢致邦 (XIE Zhibang))
  - perf: intel-tpebs: Fix incorrect usage of zfree() (James Clark)
  - perf python: Check if there is space to copy all the event (Arnaldo Carvalho de Melo)
  - perf python: Don't keep a raw_data pointer to consumed ring buffer space (Arnaldo Carvalho de Melo)
  - perf python: Decrement the refcount of just created event on failure (Arnaldo Carvalho de Melo)
  - perf python: Fixup description of sample.id event member (Arnaldo Carvalho de Melo)
  - i3c: master: svc: Fix missing the IBI rules (Stanley Chu)
  - um: hostfs: avoid issues on inode number reuse by host (Benjamin Berg)
  - um: remove copy_from_kernel_nofault_allowed (Benjamin Berg)
  - um: Pass the correct Rust target and options with gcc (David Gow)
  - selftests/mm/cow: fix the incorrect error handling (Cyan Yang)
  - fuse: fix dax truncate/punch_hole fault path (Alistair Popple)
  - NFS: fix open_owner_id_maxsz and related fields. (NeilBrown)
  - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations (Trond Myklebust)
  - NFSv4: Avoid unnecessary scans of filesystems for expired delegations (Trond Myklebust)
  - NFSv4: Avoid unnecessary scans of filesystems for returning delegations (Trond Myklebust)
  - NFSv4: Don't trigger uneccessary scans for return-on-close delegations (Trond Myklebust)
  - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig (Anshuman Khandual)
  - ocfs2: validate l_tree_depth to avoid out-of-bounds access (Vasiliy Kovalev)
  - kexec: initialize ELF lowest address to ULONG_MAX (Sourabh Jain)
  - kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page() (David Hildenbrand)
  - perf units: Fix insufficient array space (Arnaldo Carvalho de Melo)
  - perf evlist: Add success path to evlist__create_syswide_maps (Ian Rogers)
  - perf debug: Avoid stack overflow in recursive error message (Ian Rogers)
  - iio: light: Add check for array bounds in veml6075_read_int_time_ms (Karan Sanghavi)
  - iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset (Jonathan Santos)
  - iio: adc: ad7173: Fix comparison of channel configs (Uwe Kleine-König)
  - iio: adc: ad7124: Fix comparison of channel configs (Uwe Kleine-König)
  - iio: adc: ad4130: Fix comparison of channel setups (Uwe Kleine-König)
  - dmaengine: fsl-edma: free irq correctly in remove path (Peng Fan)
  - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister (Peng Fan)
  - fs/ntfs3: Prevent integer overflow in hdr_first_de() (Dan Carpenter)
  - fs/ntfs3: Fix a couple integer overflows on 32bit systems (Dan Carpenter)
  - usb: xhci: correct debug message page size calculation (Niklas Neronin)
  - perf bench: Fix perf bench syscall loop count (Thomas Richter)
  - perf arm-spe: Fix load-store operation checking (Leo Yan)
  - iio: backend: make sure to NULL terminate stack buffer (Nuno Sá)
  - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails. (Jonathan Cameron)
  - iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio (Jonathan Cameron)
  - ucsi_ccg: Don't show failed to get FW build information error (Mario Limonciello)
  - perf build: Fix in-tree build due to symbolic link (Luca Ceresoli)
  - tools/x86: Fix linux/unaligned.h include path in lib/insn.c (Ian Rogers)
  - perf pmu: Don't double count common sysfs and json events (James Clark)
  - coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang)
  - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint (Mike Christie)
  - coresight: catu: Fix number of pages while using 64k pages (Ilkka Koskinen)
  - greybus: gb-beagleplay: Add error handling for gb_greybus_init (Wentao Liang)
  - perf report: Switch data file correctly in TUI (Namhyung Kim)
  - soundwire: slave: fix an OF node reference leak in soundwire slave device (Joe Hattori)
  - isofs: fix KMSAN uninit-value bug in do_isofs_readdir() (Qasim Ijaz)
  - phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine phy-id (Heiko Stuebner)
  - fs/ntfs3: Update inode->i_mapping->a_ops on compression state (Konstantin Komarov)
  - w1: fix NULL pointer dereference in probe (Chenyuan Yang)
  - perf: Always feature test reallocarray (James Clark)
  - perf stat: Fix find_stat for mixed legacy/non-legacy events (Ian Rogers)
  - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock (Barnabás Czémán)
  - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm() (Andy Shevchenko)
  - crypto: hisilicon/sec2 - fix for aead auth key length (Wenkai Lin)
  - RDMA/core: Fix use-after-free when rename device name (Wang Liang)
  - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment (Jann Horn)
  - leds: Fix LED_OFF brightness race (Remi Pommarel)
  - mfd: sm501: Switch to BIT() to mitigate integer overflows (Nikita Zhandarovich)
  - pinctrl: renesas: rzv2m: Fix missing of_node_put() call (Fabrizio Castro)
  - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow (Patrisious Haddad)
  - bpf: Fix array bounds error with may_goto (Jiayuan Chen)
  - clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable() (Neil Armstrong)
  - crypto: nx - Fix uninitialised hv_nxc on error (Herbert Xu)
  - power: supply: max77693: Fix wrong conversion of charge input threshold value (Artur Weber)
  - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1 (Jann Horn)
  - clk: amlogic: g12a: fix mmc A peripheral clock (Jerome Brunet)
  - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents (Laurentiu Mihalcea)
  - crypto: qat - remove access to parity register for QAT GEN4 (Bairavi Alagappan)
  - pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment (Andy Shevchenko)
  - rust: fix signature of rust_fmt_argument (Alice Ryhl)
  - selftests/bpf: Select NUMA_NO_NODE to create map (Saket Kumar Bhaskar)
  - clk: amlogic: gxbb: drop non existing 32k clock parent (Jerome Brunet)
  - clk: amlogic: g12b: fix cluster A parent data (Jerome Brunet)
  - pinctrl: tegra: Set SFIO mode to Mux Register (Prathamesh Shete)
  - IB/mad: Check available slots before posting receive WRs (Maher Sanalla)
  - crypto: api - Fix larval relookup type and mask (Herbert Xu)
  - power: supply: bq27xxx_battery: do not update cached flags prematurely (Sicelo A. Mhlongo)
  - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain (Luca Weiss)
  - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() (Cheng Xu)
  - RDMA/mlx5: Fix calculation of total invalidated pages (Chiara Meiohas)
  - RDMA/core: Don't expose hw_counters outside of init net namespace (Roman Gushchin)
  - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent (Peter Geis)
  - selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Tengda Wu)
  - RDMA/mlx5: Fix MR cache initialization error flow (Michael Guralnik)
  - pinctrl: renesas: rzg2l: Fix missing of_node_put() call (Fabrizio Castro)
  - pinctrl: renesas: rza2: Fix missing of_node_put() call (Fabrizio Castro)
  - lib: 842: Improve error handling in sw842_compress() (Tanya Agarwal)
  - bpf: Use preempt_count() directly in bpf_send_signal_common() (Hou Tao)
  - clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK (Konrad Dybcio)
  - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226 (Luca Weiss)
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Akhil R)
  - RDMA/mana_ib: Ensure variable err is initialized (Kees Bakker)
  - s390: Remove ioremap_wt() and pgprot_writethrough() (Niklas Schnelle)
  - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock (Vladimir Lypak)
  - crypto: tegra - Fix CMAC intermediate result handling (Akhil R)
  - pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw() (Yue Haibing)
  - clk: samsung: Fix UBSAN panic in samsung_clk_init() (Will McVicker)
  - remoteproc: qcom: pas: add minidump_id to SC7280 WPSS (Luca Weiss)
  - clk: renesas: r8a08g045: Check the source of the CPU PLL settings (Claudiu Beznea)
  - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range() (David Hildenbrand)
  - selftests/bpf: Fix string read in strncmp benchmark (Viktor Malik)
  - libbpf: Fix hypothetical STT_SECTION extern NULL deref case (Andrii Nakryiko)
  - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust (Luca Weiss)
  - pinctrl: renesas: rzg2l: Suppress binding attributes (Claudiu Beznea)
  - of: property: Increase NR_FWNODE_REFERENCE_ARGS (Zijun Hu)
  - remoteproc: core: Clear table_sz when rproc_shutdown (Peng Fan)
  - RDMA/mlx5: Fix page_size variable overflow (Michael Guralnik)
  - crypto: hisilicon/sec2 - fix for sec spec check (Wenkai Lin)
  - crypto: hisilicon/sec2 - fix for aead authsize alignment (Wenkai Lin)
  - clk: amlogic: gxbb: drop incorrect flag on 32k clock (Jerome Brunet)
  - crypto: tegra - Use HMAC fallback when keyslots are full (Akhil R)
  - crypto: bpf - Add MODULE_DESCRIPTION for skcipher (Arnd Bergmann)
  - crypto: tegra - check return value for hash do_one_req (Akhil R)
  - crypto: tegra - Use separate buffer for setkey (Akhil R)
  - crypto: qat - set parity error mask for qat_420xx (Bairavi Alagappan)
  - crypto: iaa - Test the correct request flag (Herbert Xu)
  - fbdev: sm501fb: Add some geometry checks. (Danila Chernetsov)
  - mdacon: rework dependency list (Arnd Bergmann)
  - dummycon: fix default rows/cols (Arnd Bergmann)
  - fbdev: au1100fb: Move a variable assignment behind a null pointer check (Markus Elfring)
  - PCI: pciehp: Don't enable HPIE when resuming in poll mode (Ilpo Järvinen)
  - PCI: Fix BAR resizing when VF BARs are assigned (Ilpo Järvinen)
  - PCI: histb: Fix an error handling path in histb_pcie_probe() (Christophe JAILLET)
  - PCI: dwc: ep: Return -ENOMEM for allocation failures (Dan Carpenter)
  - drm/amd/display: avoid NPD when ASIC does not support DMUB (Thadeu Lima de Souza Cascardo)
  - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer() (Dan Carpenter)
  - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr (Douglas Anderson)
  - drm/mediatek: Fix config_updating flag never false when no mbox channel (Jason-JH Lin)
  - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe (Thippeswamy Havalige)
  - PCI: Remove stray put_device() in pci_register_host_bridge() (Dan Carpenter)
  - powerpc/kexec: fix physical address calculation in clear_utlb_entry() (Christophe Leroy)
  - crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD (Christophe Leroy)
  - drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump (Rob Clark)
  - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters() (Vitaliy Shevtsov)
  - drm/panthor: Update CS_STATUS_ defines to correct values (Ashley Smith)
  - PCI: Avoid reset when disabled via sysfs (Nishanth Aravamudan)
  - PCI/portdrv: Only disable pciehp interrupts early when needed (Feng Tang)
  - PCI: brcmstb: Fix potential premature regulator disabling (Jim Quinlan)
  - PCI: brcmstb: Fix error path after a call to regulator_bulk_get() (Jim Quinlan)
  - PCI: brcmstb: Use internal register to change link capability (Jim Quinlan)
  - PCI: brcmstb: Set generation limit before PCIe link up (Jim Quinlan)
  - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload (Hans Zhang)
  - drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables' (Srinivasan Shanmugam)
  - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host (Marijn Suijten)
  - drm/msm/dsi: Use existing per-interface slice count in DSC timing (Marijn Suijten)
  - drm/msm/dsi/phy: Program clock inverters in correct register (Krzysztof Kozlowski)
  - drm/msm/dpu: don't use active in atomic_check() (Dmitry Baryshkov)
  - drm/amd/display: fix an indent issue in DML21 (Aurabindo Pillai)
  - PCI/ACS: Fix 'pci=config_acs=' parameter (Tushar Dave)
  - drm/panel: ilitek-ili9882t: fix GPIO name in error message (John Keeping)
  - PCI/ASPM: Fix link state exit during switch upstream function removal (Daniel Stodden)
  - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member (AngeloGioacchino Del Regno)
  - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure (AngeloGioacchino Del Regno)
  - PCI: Remove add_align overwrite unrelated to size0 (Ilpo Järvinen)
  - PCI: Use downstream bridges for distributing resources (Kai-Heng Feng)
  - drm/amdgpu/umsch: fix ucode check (Alex Deucher)
  - drm/amdgpu: refine smu send msg debug log format (Yang Wang)
  - gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines (Vitalii Mordan)
  - drm/vkms: Fix use after free and double free on init error (José Expósito)
  - drm: xlnx: zynqmp: Fix max dma segment size (Tomi Valkeinen)
  - drm/bridge: it6505: fix HDCP V match check is not performed correctly (Hermes Wu)
  - drm/dp_mst: Fix drm RAD print (Wayne Lin)
  - drm/ssd130x: ensure ssd132x pitch is correct (John Keeping)
  - drm/ssd130x: fix ssd132x encoding (John Keeping)
  - drm/ssd130x: Set SPI .id_table to prevent an SPI core warning (Javier Martinez Canillas)
  - drm/bridge: ti-sn65dsi86: Fix multiple instances (Geert Uytterhoeven)
  - ALSA: timer: Don't take register_mutex with copy_from/to_user() (Takashi Iwai)
  - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible (Jayesh Choudhary)
  - ALSA: hda/realtek: Always honor no_shutup_pins (Takashi Iwai)
  - dt-bindings: vendor-prefixes: add GOcontroll (Maud Spierings)
  - HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER (Jiri Kosina)
  - ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry (Venkata Prasad Potturu)
  - ASoC: cs35l41: check the return value from spi_setup() (Vitaliy Shevtsov)
  - platform/x86: dell-ddv: Fix temperature calculation (Armin Wolf)
  - platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static (Ilpo Järvinen)
  - platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static (Ilpo Järvinen)
  - auxdisplay: panel: Fix an API misuse in panel.c (Andy Shevchenko)
  - media: platform: allgro-dvt: unregister v4l2_device on the error path (Joe Hattori)
  - media: verisilicon: HEVC: Initialize start_bit field (Benjamin Gaignard)
  - auxdisplay: MAX6959 should select BITREVERSE (Geert Uytterhoeven)
  - regulator: pca9450: Fix enable register for LDO5 (Frieder Schrempf)
  - x86/entry: Add __init to ia32_emulation_override_cmdline() (Vitaly Kuznetsov)
  - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures (Chao Gao)
  - x86/traps: Make exc_double_fault() consistently noreturn (Josh Poimboeuf)
  - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll (Tao Chen)
  - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() (Sebastian Andrzej Siewior)
  - PM: sleep: Fix handling devices with direct_complete set on errors (Rafael J. Wysocki)
  - thermal: int340x: Add NULL check for adev (Chenyuan Yang)
  - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors (James Morse)
  - EDAC/ie31200: Fix the error path order of ie31200_init() (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the DIMM size mask for several SoCs (Qiuxu Zhuo)
  - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer (Qiuxu Zhuo)
  - selinux: Chain up tool resolving errors in install_policy.sh (Tim Schumacher)
  - watchdog/hardlockup/perf: Fix perf_event memory leak (Li Huafei)
  - kunit/stackinit: Use fill byte different from Clang i386 pattern (Kees Cook)
  - RISC-V: KVM: Disable the kernel perf counter during configure (Atish Patra)
  - cpufreq: tegra194: Allow building for Tegra234 (Aaron Kling)
  - PM: sleep: Adjust check before setting power.must_resume (Rafael J. Wysocki)
  - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock (Peter Zijlstra)
  - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable() (Kevin Loughlin)
  - x86/platform: Only allow CONFIG_EISA for 32-bit (Arnd Bergmann)
  - x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct() (Benjamin Berg)
  - x86/fpu: Fix guest FPU state buffer allocation size (Stanislav Spassov)
  - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids (Qiuxu Zhuo)
  - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() (Jie Zhan)
  - sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks (Tianchen Ding)
  - sched: Cancel the slice protection of the idle entity (zihan zhou)
  - smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label (Konstantin Andreev)
  - smack: dont compile ipv6 code unless ipv6 is configured (Konstantin Andreev)
  - cpufreq: scpi: compare kHz instead of Hz (zuoqian)
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Mike Rapoport (Microsoft))
  - watch_queue: fix pipe accounting mismatch (Eric Sandeen)
  - LTS version: v6.12.22 (Jack Vogel)
  - bcachefs: bch2_ioctl_subvolume_destroy() fixes (Kent Overstreet)
  - serial: 8250_dma: terminate correct DMA in tx_dma_flush() (John Keeping)
  - serial: stm32: do not deassert RS485 RTS GPIO prematurely (Cheick Traore)
  - perf tools: Fix up some comments and code to properly use the event_source bus (Greg Kroah-Hartman)
  - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (Luo Qiu)
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michal Pecio)
  - usb: xhci: Don't skip on Stopped - Length Invalid (Michal Pecio)
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Dominique Martinet)
  - net: usb: qmi_wwan: add Telit Cinterion FE990B composition (Fabio Porcedda)
  - net: usb: qmi_wwan: add Telit Cinterion FN990B composition (Fabio Porcedda)
  - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers (Sherry Sun)
  - tty: serial: 8250: Add Brainboxes XC devices (Cameron Williams)
  - tty: serial: 8250: Add some more device IDs (Cameron Williams)
  - counter: microchip-tcb-capture: Fix undefined counter channel state on probe (William Breathitt Gray)
  - counter: stm32-lptimer-cnt: fix error handling when enabling (Fabrice Gasnier)
  - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx (Dhruv Deshpande)
  - netfilter: socket: Lookup orig tuple for IPv6 SNAT (Maxim Mikityanskiy)
  - drm/amd/display: Don't write DP_MSTM_CTRL after LT (Wayne Lin)
  - atm: Fix NULL pointer dereference (Minjoong Kim)
  - HID: hid-plantronics: Add mic mute mapping and generalize quirks (Terry Junge)
  - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names (Terry Junge)
  - LTS version: v6.12.21 (Jack Vogel)
  - mptcp: Fix data stream corruption in the address announcement (Arthur Mongodin)
  - mm/huge_memory: drop beyond-EOF folios with the right number of refs (Zi Yan)
  - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S (Justin Klaassen)
  - libsubcmd: Silence compiler warning (Eder Zulian)
  - Revert "sched/core: Reduce cost of sched_move_task when config autogroup" (Dietmar Eggemann)
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Mark Rutland)
  - KVM: arm64: Mark some header functions as inline (Mark Rutland)
  - KVM: arm64: Refactor exit handlers (Mark Rutland)
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN (Mark Rutland)
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Mark Rutland)
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Mark Rutland)
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland)
  - KVM: arm64: Calculate cptr_el2 traps on activating traps (Fuad Tabba)
  - io_uring/net: fix sendzc double notif flush (Pavel Begunkov)
  - ksmbd: fix incorrect validation for num_aces field of smb_acl (Namjae Jeon)
  - drm/amdkfd: Fix user queue validation on Gfx7/8 (Philip Yang)
  - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven (David Rosca)
  - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size (David Rosca)
  - drm/amdgpu: Remove JPEG from vega and carrizo video caps (David Rosca)
  - drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2 (Alex Deucher)
  - drm/amdgpu/pm: Handle SCLK offset correctly in overdrive for smu 14.0.2 (Tomasz Pakuła)
  - drm/amdgpu: Restore uncached behaviour on GFX12 (David Belanger)
  - drm/amd/pm: add unique_id for gfx12 (Harish Kasiviswanathan)
  - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP (Mario Limonciello)
  - drm/amd/display: Fix message for support_edp0_on_dp1 (Yilin Chen)
  - drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini() (Wentao Liang)
  - drm/sched: Fix fence reference count leak (qianyi liu)
  - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse() (Nikita Zhandarovich)
  - pmdomain: amlogic: fix T7 ISP secpower (Xianwei Zhao)
  - soc: qcom: pdr: Fix the potential deadlock (Saranya R)
  - batman-adv: Ignore own maximum aggregation size during RX (Sven Eckelmann)
  - xsk: fix an integer overflow in xp_create_and_assign_umem() (Gavrilov Ilia)
  - keys: Fix UAF in key_put() (David Howells)
  - efi/libstub: Avoid physical address 0x0 when doing random allocation (Ard Biesheuvel)
  - firmware: qcom: uefisecapp: fix efivars registration race (Johan Hovold)
  - ARM: shmobile: smp: Enforce shmobile_smp_* alignment (Geert Uytterhoeven)
  - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6 (Stefan Eichenberger)
  - memcg: drain obj stock on cpu hotplug teardown (Shakeel Butt)
  - proc: fix UAF in proc_get_inode() (Ye Bin)
  - mm/page_alloc: fix memory accept before watermarks gets initialized (Kirill A. Shutemov)
  - mm/migrate: fix shmem xarray update during migration (Zi Yan)
  - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT (Raphael S. Carvalho)
  - selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation (Rafael Aquini)
  - mmc: atmel-mci: Add missing clk_disable_unprepare() (Gu Bowen)
  - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops (Kamal Dasu)
  - arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou (Quentin Schulz)
  - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou (Quentin Schulz)
  - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
  - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card (Stefan Eichenberger)
  - accel/qaic: Fix integer overflow in qaic_validate_req() (Dan Carpenter)
  - regulator: check that dummy regulator has been probed before using it (Christian Eggers)
  - regulator: dummy: force synchronous probing (Christian Eggers)
  - netfs: Call `invalidate_cache` only if implemented (Max Kellermann)
  - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions (E Shattow)
  - io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Jens Axboe)
  - drm/v3d: Don't run jobs that have errors flagged in its fence (Maíra Canal)
  - drm/xe: Fix exporting xe buffers multiple times (Tomasz Rusinowicz)
  - can: flexcan: disable transceiver during system PM (Haibo Chen)
  - can: flexcan: only change CAN state when link up in system PM (Haibo Chen)
  - can: ucan: fix out of bound read in strscpy() source (Vincent Mailhol)
  - can: rcar_canfd: Fix page entries in the AFL list (Biju Das)
  - dt-bindings: can: renesas,rcar-canfd: Fix typo in pattern properties for R-Car V4M (Biju Das)
  - net: mana: Support holes in device list reply msg (Haiyang Zhang)
  - i2c: omap: fix IRQ storms (Andreas Kemnade)
  - tracing: tprobe-events: Fix leakage of module refcount (Masami Hiramatsu (Google))
  - Revert "gre: Fix IPv6 link-local address generation." (Guillaume Nault)
  - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES (Lin Ma)
  - libfs: Fix duplicate directory entry in offset_dir_lookup (Yongjian Sun)
  - net: ipv6: ioam6: fix lwtunnel_output() loop (Justin Iurman)
  - net: lwtunnel: fix recursion loops (Justin Iurman)
  - net: ti: icssg-prueth: Add lock to stats (MD Danish Anwar)
  - net: atm: fix use after free in lec_send() (Dan Carpenter)
  - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Jason Gunthorpe)
  - phy: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
  - dpll: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
  - devlink: fix xa_alloc_cyclic() error handling (Michal Swiatkowski)
  - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create(). (Kuniyuki Iwashima)
  - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw(). (Kuniyuki Iwashima)
  - net: ipv6: fix TCP GSO segmentation with NAT (Felix Fietkau)
  - net: ethernet: ti: am65-cpsw: Fix NAPI registration sequence (Vignesh Raghavendra)
  - ata: libata-core: Add ATA_QUIRK_NO_LPM_ON_ATI for certain Samsung SSDs (Niklas Cassel)
  - tracing: tprobe-events: Fix to clean up tprobe correctly when module unload (Masami Hiramatsu (Google))
  - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX (David Lechner)
  - accel/qaic: Fix possible data corruption in BOs > 2G (Jeffrey Hugo)
  - Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters (Arkadiusz Bokowy)
  - Bluetooth: Fix error code in chan_alloc_skb_cb() (Dan Carpenter)
  - RDMA/hns: Fix wrong value of max_sge_rd (Junxian Huang)
  - RDMA/hns: Fix missing xa_destroy() (Junxian Huang)
  - RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common() (Junxian Huang)
  - RDMA/hns: Fix invalid sq params not being blocked (Junxian Huang)
  - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db() (Junxian Huang)
  - RDMA/hns: Fix soft lockup during bt pages loop (Junxian Huang)
  - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path (Saravanan Vajravel)
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Baochen Qiang)
  - ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200 (Chester A. Unal)
  - ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300 (Chester A. Unal)
  - ARM: dts: bcm2711: Don't mark timer regs unconfigured (Phil Elwell)
  - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP (Arnd Bergmann)
  - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate() (Qasim Ijaz)
  - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx (Kashyap Desai)
  - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex() tests (Zhu Yanjun)
  - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1 (Yao Zi)
  - arm64: dts: bcm2712: PL011 UARTs are actually r1p5 (Phil Elwell)
  - ARM: dts: bcm2711: PL011 UARTs are actually r1p5 (Phil Elwell)
  - ARM: dts: bcm2711: Fix xHCI power-domain (Stefan Wahren)
  - soc: imx8m: Unregister cpufreq and soc dev in cleanup path (Peng Fan)
  - soc: imx8m: Use devm_* to simplify probe failure handling (Marek Vasut)
  - soc: imx8m: Remove global soc_uid (Marek Vasut)
  - xfrm_output: Force software GSO only in tunnel mode (Cosmin Ratiu)
  - xfrm: fix tunnel mode TX datapath in packet offload mode (Alexandre Cassen)
  - arm64: dts: rockchip: remove supports-cqe from rk3588 tiger (Heiko Stuebner)
  - arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar (Heiko Stuebner)
  - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply (Alexander Stein)
  - firmware: imx-scu: fix OF node leak in .probe() (Joe Hattori)
  - firmware: qcom: scm: Fix error code in probe() (Dan Carpenter)
  - rds: Tear down the copy-from-user cache before destroying rds_wq (Håkon Bugge)  [Orabug: 37379052]
  - uek-rpm: Set uek_release variable in UEK 8 spec file (Harshit Mogalapalli)  [Orabug: 37801392]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-1.23.2.el9uek]
changelog:
  - vhost_scsi: log write descriptors (Dongli Zhang)  [Orabug: 37393517]
  - vhost-scsi: protect vq->log_base with vq->mutex (Dongli Zhang)  [Orabug: 37393517]
  - RDS: avoid queueing delayed work on an offlined cpu (Praveen Kumar Kannoju)  [Orabug: 37260584] [Orabug: 37551308]
  - Revert "x86/simplefb: simplefb was broken on UEFI mode Oracle and HP system, skip VIDEO_TYPE_EFI" (Harshit Mogalapalli)  [Orabug: 37638881]
  - uek-rpm: Replace legacy FBDEV drivers with simpledrm and fbdev emulation layer (Harshit Mogalapalli)  [Orabug: 37638881]
  - uek-rpm/kernel-uek.spec: Set DEFAULTKERNEL correctly during %postun (Vijay Kumar)
  - uek-rpm: Enable gcov build (Sherry Yang)  [Orabug: 37734677]
  - uek-rpm: remove .el9 from shim version (Samasth Norway Ananda)  [Orabug: 37820202]
  - drm/mgag200: Added support for the new device G200eH5 (Gwenael Georgeault)  [Orabug: 37835185]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-1.23.3.1.el9uek]
changelog:
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920680]  
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920680]  
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920680]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add support for RSB stuffing mitigation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-1.23.3.2.el9uek]
changelog:
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37935547]  
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920680]  
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920680]  
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920680]  
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add support for RSB stuffing mitigation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956} 
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37863725]  {CVE-2024-28956}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-2.24.1.el9uek]
changelog:
  - x86/microcode/AMD: Clean the cache if update did not load microcode (Boris Ostrovsky)  [Orabug: 37800727]
  - LTS version: v6.12.24 (Jack Vogel)
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang)
  - s390/cpumf: Fix double free on error in cpumf_pmu_event_init() (Thomas Richter)
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov)
  - media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline (Arnd Bergmann)
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
  - libbpf: Prevent compiler warnings/errors (Eder Zulian)
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle)
  - nfsd: don't ignore the return code of svc_proc_register() (Jeff Layton)
  - NFSD: Fix CB_GETATTR status fix (Chuck Lever)
  - NFSD: fix decoding in nfs4_xdr_dec_cb_getattr (Olga Kornievskaia)
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor)
  - iommufd: Fail replace if device has not been attached (Yi Liu)
  - iommufd: Make attach_handle generic than fault specific (Nicolin Chen)
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson)
  - thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold (Nícolas F. R. A. Prado)
  - thermal/drivers/mediatek/lvts: Disable monitor mode during suspend (Nícolas F. R. A. Prado)
  - selftests: mptcp: fix incorrect fd checks in main_loop (Cong Liu)
  - selftests: mptcp: close fd_in before returning in main_loop (Geliang Tang)
  - sched_ext: create_dsq: Return -EEXIST on duplicate request (Jake Hillion)
  - s390: Fix linker error when -no-pie option is unavailable (Sumanth Korikkar)
  - s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues (David Hildenbrand)
  - s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Niklas Schnelle)
  - ring-buffer: Use flush_kernel_vmap_range() over flush_dcache_folio() (Steven Rostedt)
  - pinctrl: samsung: add support for eint_fltcon_offset (Peter Griffin)
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold)
  - phy: freescale: imx8m-pcie: assert phy reset and perst in power off (Stefan Eichenberger)
  - PCI: Fix wrong length of devres array (Philipp Stanner)
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke)
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke)
  - PCI: pciehp: Avoid unnecessary device replacement check (Lukas Wunner)
  - PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4 (Siddharth Vadapalli)
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov)
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu)
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu)
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu)
  - of/irq: Fix device node refcount leakage in API of_irq_parse_raw() (Zijun Hu)
  - of/irq: Fix device node refcount leakage in API of_irq_parse_one() (Zijun Hu)
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin)
  - net: mana: Switch to page pool for jumbo frames (Haiyang Zhang)
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi)
  - selftests/landlock: Add a new test for setuid() (Mickaël Salaün)
  - selftests/landlock: Split signal_scoping_threads tests (Mickaël Salaün)
  - landlock: Prepare to add second errata (Mickaël Salaün)
  - landlock: Always allow signals between threads of the same process (Mickaël Salaün)
  - landlock: Add erratum for TCP fix (Mickaël Salaün)
  - landlock: Add the errata interface (Mickaël Salaün)
  - landlock: Move code to ease future backports (Mickaël Salaün)
  - KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses (Sean Christopherson)
  - KVM: x86: Explicitly zero-initialize on-stack CPUID unions (Sean Christopherson)
  - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Amit Machhiwal)
  - gve: handle overflow when reporting TX consumed descriptors (Joshua Washington)
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu)
  - ftrace: Properly merge notrace hashes (Andy Chiu)
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (zhoumin)
  - dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg' (Krzysztof Kozlowski)
  - dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg' (Krzysztof Kozlowski)
  - dm-verity: fix prefetch-vs-suspend race (Mikulas Patocka)
  - dm-integrity: fix non-constant-time tag verification (Jo Van Bulck)
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka)
  - dm-ebs: fix prefetch-vs-suspend race (Mikulas Patocka)
  - dlm: fix error if active rsb is not hashed (Alexander Aring)
  - dlm: fix error if inactive rsb is not hashed (Alexander Aring)
  - crypto: ccp - Fix uAPI definitions of PSP errors (Dionna Glaze)
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky)
  - clk: qcom: gdsc: Set retain_ff before moving to HW CTRL (Taniya Das)
  - clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code (Bryan O'Donoghue)
  - clk: qcom: gdsc: Release pm subdomains in reverse add order (Bryan O'Donoghue)
  - clk: qcom: clk-branch: Fix invert halt status bit check for votable clocks (Ajit Pandey)
  - clk: renesas: r9a07g043: Fix HP clock source for RZ/Five (Lad Prabhakar)
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Pali Rohár)
  - cifs: fix integer overflow in match_server() (Roman Smirnov)
  - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina)
  - CIFS: Propagate min offload along with other parameters from primary to secondary channels. (Aman)
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner)
  - tracing: Do not add length to print format in synthetic events (Steven Rostedt)
  - tracing: fprobe events: Fix possible UAF on modules (Masami Hiramatsu (Google))
  - x86/xen: fix balloon target initialization for PVH dom0 (Roger Pau Monne)
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro)
  - mm/hwpoison: introduce folio_contain_hwpoisoned_page() helper (Jinjiang Tu)
  - mm/hugetlb: move hugetlb_sysctl_init() to the __init section (Marc Herbert)
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue)
  - mm/userfaultfd: fix release hang over concurrent GUP (Peter Xu)
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers)
  - mm/mremap: correctly handle partial mremap() of VMA starting at 0 (Lorenzo Stoakes)
  - mm: fix lazy mmu docs and usage (Ryan Roberts)
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu)
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand)
  - mm/damon/ops: have damon_get_folio return folio even for tail pages (Usama Arif)
  - sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes (Ryan Roberts)
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts)
  - iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs (Sean Christopherson)
  - iommu/vt-d: Fix possible circular locking dependency (Lu Baolu)
  - iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes (Sean Christopherson)
  - iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled (Sean Christopherson)
  - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Nicolin Chen)
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Nicolin Chen)
  - btrfs: zoned: fix zone finishing with missing devices (Johannes Thumshirn)
  - btrfs: zoned: fix zone activation with missing devices (Johannes Thumshirn)
  - btrfs: tests: fix chunk map leak after failure to add it to the tree (Filipe Manana)
  - btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers (Filipe Manana)
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina)
  - arm64: dts: exynos: gs101: disable pinctrl_gsacore node (Peter Griffin)
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai)
  - arm64: mm: Correct the update of max_pfn (Zhenhua Huang)
  - arm64: tegra: Remove the Orin NX/Nano suspend key (Ninad Malwade)
  - arm64: mops: Do not dereference src reg for a set operation (Keir Fraser)
  - mtd: rawnand: Add status chack in r852_ready() (Wentao Liang)
  - mtd: inftlcore: Add error check for inftl_read_oob() (Wentao Liang)
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts (NGI0))
  - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan)
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham)
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng)
  - mailbox: tegra-hsp: Define dimensioning masks in SoC data (Kartik Rajput)
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang)
  - leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs (Abel Vesa)
  - leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs (Abel Vesa)
  - jbd2: remove wrong sb->s_sequence check (Jan Kara)
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh)
  - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu)
  - ima: limit the number of ToMToU integrity violations (Mimi Zohar)
  - ima: limit the number of open-writers integrity violations (Mimi Zohar)
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Steve French)
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang)
  - svcrdma: do not unregister device for listeners (Olga Kornievskaia)
  - tpm: do not start chip while suspended (Thadeu Lima de Souza Cascardo)
  - udf: Fix inode_getblk() return value (Jan Kara)
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu)
  - f2fs: fix to avoid atomicity corruption of atomic file (Yeongjin Gil)
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov)
  - bus: mhi: host: Fix race between unprepare and queue_buf (Jeff Hugo)
  - accel/ivpu: Fix deadlock in ivpu_ms_cleanup() (Jacek Lawrynowicz)
  - accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal() (Jacek Lawrynowicz)
  - ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx (Sharan Kumar M)
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov)
  - ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. (Srinivas Kandagatla)
  - ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla)
  - ASoC: q6apm-dai: make use of q6apm_get_hw_pointer (Srinivas Kandagatla)
  - ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs (Srinivas Kandagatla)
  - ASoC: q6apm: add q6apm_get_hw_pointer helper (Srinivas Kandagatla)
  - ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() (Haoxiang Li)
  - io_uring/kbuf: reject zero sized provided buffers (Jens Axboe)
  - io_uring/net: fix io_req_post_cqe abuse by send bundle (Pavel Begunkov)
  - io_uring/net: fix accept multishot handling (Pavel Begunkov)
  - wifi: mt76: mt7925: fix the wrong simultaneous cap for MLO (Ming Yen Hsieh)
  - wifi: mt76: mt7925: fix the wrong link_idx when a p2p_device is present (Ming Yen Hsieh)
  - wifi: mt76: mt7925: fix country count limitation for CLC (Ming Yen Hsieh)
  - wifi: mt76: mt7925: ensure wow pattern command align fw format (Ming Yen Hsieh)
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia)
  - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li)
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue)
  - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang)
  - net: dsa: mv88e6xxx: fix internal PHYs for 6320 family (Marek Behún)
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún)
  - mtd: Add check for devm_kcalloc() (Jiasheng Jiang)
  - mptcp: sockopt: fix getting freebind & transparent (Matthieu Baerts (NGI0))
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts (NGI0))
  - media: chips-media: wave5: Fix timeout while testing 10bit hevc fluster (Jackson.lee)
  - media: chips-media: wave5: Fix a hang after seeking (Jackson.lee)
  - media: chips-media: wave5: Avoid race condition in the interrupt handler (Jackson.lee)
  - media: chips-media: wave5: Fix gray color on screen (Jackson.lee)
  - media: i2c: imx214: Rectify probe error handling related to runtime PM (Sakari Ailus)
  - media: i2c: imx219: Rectify runtime PM handling in probe and remove (Sakari Ailus)
  - media: i2c: imx319: Rectify runtime PM handling probe and remove (Sakari Ailus)
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia)
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia)
  - media: nuvoton: Fix reference handling of ece_pdev (Ricardo Ribalda)
  - media: nuvoton: Fix reference handling of ece_node (Ricardo Ribalda)
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus)
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus)
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus)
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus)
  - Revert "media: imx214: Fix the error handling in imx214_probe()" (Sakari Ailus)
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich)
  - media: imx219: Adjust PLL settings based on the number of MIPI lanes (Dave Stevenson)
  - media: platform: stm32: Add check for clk_enable() (Jiasheng Jiang)
  - media: visl: Fix ERANGE error when setting enum controls (Nicolas Dufresne)
  - media: hi556: Fix memory leak (on error) in hi556_check_hwcfg() (Hans de Goede)
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov)
  - accel/ivpu: Fix PM related deadlocks in MS IOCTLs (Jacek Lawrynowicz)
  - tpm, tpm_tis: Fix timeout handling when waiting for TPM status (Jonathan McDowell)
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu)
  - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal)
  - KVM: arm64: Tear down vGIC on failed vCPU creation (Will Deacon)
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson)
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson)
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson)
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson)
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich)
  - media: rockchip: rga: fix rga offset lookup (John Keeping)
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can)
  - media: vim2m: print device name after registering device (Matthew Majewski)
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia)
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia)
  - media: intel/ipu6: set the dev_parent of video device to pdev (Bingbu Cao)
  - media: mgb4: Fix switched CMT frequency range "magic values" sets (Martin Tůma)
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund)
  - media: mgb4: Fix CMT registers update logic (Martin Tůma)
  - media: uapi: rkisp1-config: Fix typo in extensible params example (Niklas Söderlund)
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann)
  - media: mediatek: vcodec: Fix a resource leak related to the scp device in FW initialization (Jiasheng Jiang)
  - dt-bindings: media: st,stmipid02: correct lane-polarities maxItems (Alain Volmat)
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li)
  - HID: pidff: Fix set_device_control() (Tomasz Pakuła)
  - HID: pidff: Fix 90 degrees direction name North -> East (Tomasz Pakuła)
  - HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff (Tomasz Pakuła)
  - HID: pidff: Clamp effect playback LOOP_COUNT value (Tomasz Pakuła)
  - HID: pidff: Rename two functions to align them with naming convention (Tomasz Pakuła)
  - HID: pidff: Remove redundant call to pidff_find_special_keys (Tomasz Pakuła)
  - HID: pidff: Support device error response from PID_BLOCK_LOAD (Tomasz Pakuła)
  - HID: pidff: Comment and code style update (Tomasz Pakuła)
  - HID: hid-universal-pidff: Add Asetek wheelbases support (Tomasz Pakuła)
  - HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX (Tomasz Pakuła)
  - HID: pidff: Factor out pool report fetch and remove excess declaration (Tomasz Pakuła)
  - HID: pidff: Use macros instead of hardcoded min/max values for shorts (Tomasz Pakuła)
  - HID: pidff: Simplify pidff_rescale_signed (Tomasz Pakuła)
  - HID: pidff: Move all hid-pidff definitions to a dedicated header (Tomasz Pakuła)
  - HID: pidff: Factor out code for setting gain (Tomasz Pakuła)
  - HID: pidff: Rescale time values to match field units (Tomasz Pakuła)
  - HID: pidff: Define values used in pidff_find_special_fields (Tomasz Pakuła)
  - HID: pidff: Simplify pidff_upload_effect function (Tomasz Pakuła)
  - HID: pidff: Completely rework and fix pidff_reset function (Tomasz Pakuła)
  - HID: pidff: Stop all effects before enabling actuators (Tomasz Pakuła)
  - HID: pidff: Clamp PERIODIC effect period to device's logical range (Tomasz Pakuła)
  - s390/pci: Fix s390_mmio_read/write syscall page fault handling (Niklas Schnelle)
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn)
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn)
  - erofs: set error to bio if file-backed IO fails (Sheng Yong)
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König)
  - pwm: rcar: Improve register calculation (Uwe Kleine-König)
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf)
  - tpm: End any active auth session before shutdown (Jonathan McDowell)
  - tpm, tpm_tis: Workaround failed command reception on Infineon devices (Jonathan McDowell)
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain)
  - tracing: probe-events: Add comments about entry data storing code (Masami Hiramatsu (Google))
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov)
  - drm/amdgpu: grab an additional reference on the gang fence v2 (Christian König)
  - drm/amdgpu: Fix the race condition for draining retry fault (Emily Deng)
  - PCI: Enable Configuration RRS SV early (Bjorn Helgaas)
  - drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() (Wentao Liang)
  - PCI: Add Rockchip Vendor ID (Shawn Lin)
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno)
  - drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data (AngeloGioacchino Del Regno)
  - drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds (Tvrtko Ursulin)
  - drm/amdkfd: debugfs hang_hws skip GPU with MES (Philip Yang)
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang)
  - drm/amdkfd: Fix mode1 reset crash issue (Philip Yang)
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin)
  - drivers: base: devres: Allow to release group on device release (Lucas De Marchi)
  - drm/amd/display: stop DML2 from removing pipes based on planes (Mike Katsnelson)
  - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli)
  - drm/debugfs: fix printk format for bridge index (Luca Ceresoli)
  - drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) (Andrew Wyatt)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt)
  - drm: panel-orientation-quirks: Add quirk for AYA NEO Slide (Andrew Wyatt)
  - drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB (Andrew Wyatt)
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt)
  - drm/amdgpu: Unlocked unmap only clear page table leaves (Philip Yang)
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai)
  - drm/xe/vf: Don't try to trigger a full GT reset if VF (Michal Wajdeczko)
  - drm/xe/bmg: Add new PCI IDs (Shekhar Chauhan)
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar)
  - Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE (Pedro Nishiyama)
  - Bluetooth: Add quirk for broken READ_VOICE_SETTING (Pedro Nishiyama)
  - Bluetooth: qca: simplify WCN399x NVM loading (Dmitry Baryshkov)
  - Bluetooth: hci_qca: use the power sequencer for wcn6750 (Janaki Ramaiah Thota)
  - Bluetooth: btusb: Add 2 HWIDs for MT7922 (Jiande Lu)
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov)
  - Bluetooth: btintel_pcie: Add device id of Whale Peak (Kiran K)
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni)
  - net: vlan: don't propagate flags on open (Stanislav Fomichev)
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng)
  - btrfs: harden block_group::bg_list against list_del() races (Boris Burkov)
  - ahci: Marvell 88SE9215 controllers prefer DMA for ATAPI (Huacai Chen)
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara)
  - cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk (Philipp Hahn)
  - ext4: ignore xattrs past end (Bhupesh)
  - Revert "f2fs: rebuild nat_bits during umount" (Chao Yu)
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo)
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral)
  - net: sfp: add quirk for FS SFP-10GM-T copper SFP+ module (Martin Schiller)
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu)
  - wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi (Manish Dharanenthiran)
  - net: sfp: add quirk for 2.5G OEM BX SFP (Birger Koblitz)
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel)
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis)
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis)
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb)
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb)
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han)
  - can: flexcan: add NXP S32G2/S32G3 SoC support (Ciprian Marian Costea)
  - can: flexcan: Add quirk to handle separate interrupt lines for mailboxes (Ciprian Marian Costea)
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing)
  - net: usb: asix_devices: add FiberGecko DeviceID (Max Schulze)
  - scsi: target: spc: Fix RSOC parameter data header size (Chaohai Chen)
  - wifi: mac80211: ensure sdata->work is canceled before initialized. (Miri Korenblit)
  - wifi: mac80211: add strict mode disabling workarounds (Johannes Berg)
  - f2fs: don't retry IO for corrupted data scenario (Chao Yu)
  - net: page_pool: don't cast mp param to devmem (Pavel Begunkov)
  - ata: libata-core: Add 'external' to the libata.force kernel parameter (Niklas Cassel)
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh)
  - wifi: ath12k: fix memory leak in ath12k_pci_remove() (Miaoqing Pan)
  - wifi: ath11k: fix memory leak in ath11k_xxx_remove() (Miaoqing Pan)
  - wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues (P Praneesh)
  - platform/x86: x86-android-tablets: Add select POWER_SUPPLY to Kconfig (Hans de Goede)
  - ASoC: amd: yc: update quirk data for new Lenovo model (Syed Saba kareem)
  - ASoC: amd: Add DMI quirk for ACP6X mic support (keenplify)
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof)
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Kaustabh Chakraborty)
  - media: s5p-mfc: Corrected NV12M/NV21M plane-sizes (Aakarsh Jain)
  - media: uvcvideo: Add quirk for Actions UVC05 (Ricardo Ribalda)
  - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang)
  - ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist (Maxim Mikityanskiy)
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy)
  - ASoC: amd: ps: use macro for ACP6.3 pci revision id (Vijendar Mukunda)
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła)
  - HID: pidff: Add PERIODIC_SINE_ONLY quirk (Tomasz Pakuła)
  - HID: Add hid-universal-pidff driver and supported device ids (Tomasz Pakuła)
  - HID: pidff: Add FIX_WHEEL_DIRECTION quirk (Tomasz Pakuła)
  - HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol (Tomasz Pakuła)
  - HID: pidff: Add PERMISSIVE_CONTROL quirk (Tomasz Pakuła)
  - HID: pidff: Add MISSING_PBO quirk and its detection (Tomasz Pakuła)
  - HID: pidff: Add MISSING_DELAY quirk and its detection (Tomasz Pakuła)
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła)
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła)
  - ASoC: SOF: topology: Use krealloc_array() to replace krealloc() (Zhang Heng)
  - platform/chrome: cros_ec_lpc: Match on Framework ACPI device (Daniel Schaefer)
  - zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work around compiler segfault (Ingo Molnar)
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook)
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson)
  - Flush console log from kernel_power_off() (Paul E. McKenney)
  - PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() (Lizhi Xu)
  - perf/dwc_pcie: fix some unreleased resources (Yunhui Cui)
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland)
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker)
  - x86/ia32: Leave NULL selector values 0~3 unchanged (Xin Li (Intel))
  - x86/percpu: Disable named address spaces for UBSAN_BOOL with KASAN for GCC < 14.2 (Uros Bizjak)
  - x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW (Matthew Wilcox (Oracle))
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han)
  - umount: Allow superblock owners to force umount (Trond Myklebust)
  - fs: consistently deref the files table with rcu_dereference_raw() (Mateusz Guzik)
  - iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group (Louis-Alexis Eyraud)
  - iommu/exynos: Fix suspend/resume with IDENTITY domain (Marek Szyprowski)
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal)
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte)
  - ipv6: Align behavior across nexthops during path selection (Ido Schimmel)
  - net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY (Vladimir Oltean)
  - net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend() (Vladimir Oltean)
  - smb: client: fix UAF in decryption with multichannel (Paulo Alcantara)
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila)
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila)
  - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner)
  - drm/i915/huc: Fix fence not released on early probe errors (Janusz Krzysztofik)
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Wentao Liang)
  - net: libwx: handle page_pool_dev_alloc_pages error (Chenyuan Yang)
  - drm/tests: probe-helper: Fix drm_display_mode memory leak (Maxime Ripard)
  - drm/tests: modes: Fix drm_display_mode memory leak (Maxime Ripard)
  - drm/tests: cmdline: Fix drm_display_mode memory leak (Maxime Ripard)
  - drm/tests: helpers: Create kunit helper to destroy a drm_display_mode (Maxime Ripard)
  - drm/tests: modeset: Fix drm_display_mode memory leak (Maxime Ripard)
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier)
  - tc: Ensure we have enough buffer space when sending filter netlink notifications (Toke Høiland-Jørgensen)
  - octeontx2-pf: qos: fix VF root node parent queue index (Hariprasad Kelam)
  - net: tls: explicitly disallow disconnect (Jakub Kicinski)
  - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() (Cong Wang)
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen)
  - objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret() (Josh Poimboeuf)
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin)
  - drm/xe/hw_engine: define sysfs_ops on all directories (Tejas Upadhyay)
  - x86/acpi: Don't limit CPUs to 1 for Xen PV guests due to disabled ACPI (Petr Vaněk)
  - drm/i915: Disable RPG during live selftest (Badal Nilawar)
  - ublk: fix handling recovery & reissue in ublk_abort_queue() (Ming Lei)
  - ublk: refactor recovery configuration flag helpers (Uday Shankar)
  - selftests/futex: futex_waitv wouldblock test should fail (Edward Liaw)
  - gpiolib: of: Fix the choice for Ingenic NAND quirk (Andy Shevchenko)
  - cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set (Waiman Long)
  - cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call per operation (Waiman Long)
  - cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in update_cpumasks_hier()" (Waiman Long)
  - cgroup/cpuset: Fix error handling in remote_partition_disable() (Waiman Long)
  - cgroup/cpuset: Fix incorrect isolated_cpus update in update_parent_effective_cpumask() (Waiman Long)
  - ASoC: Intel: adl: add 2xrt1316 audio configuration (Bard Liao)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-2.27.2.el9uek]
changelog:
  - LTS version: v6.12.27 (Jack Vogel)
  - bpf: Fix BPF_INTERNAL namespace import (Xi Ruoyao)
  - LTS version: v6.12.26 (Jack Vogel)
  - mq-deadline: don't call req_get_ioprio from the I/O completion handler (Christoph Hellwig)
  - arm64: dts: ti: k3-j784s4-j742s2-main-common: Correct the GICD size (Keerthy)
  - crypto: Kconfig - Select LIB generic option (Herbert Xu)
  - usb: typec: class: Unlocked on error in typec_register_partner() (Dan Carpenter)
  - objtool: Silence more KCOV warnings, part 2 (Josh Poimboeuf)
  - objtool: Ignore end-of-section jumps for KCOV/GCOV (Josh Poimboeuf)
  - usb: xhci: Fix Short Packet handling rework ignoring errors (Michal Pecio)
  - nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke)
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer)
  - media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl() (Dan Carpenter)
  - crypto: lib/Kconfig - Hide arch options from user (Herbert Xu)
  - iommu: Handle race with default domain setup (Robin Murphy)
  - net: dsa: mv88e6xxx: enable STU methods for 6320 family (Marek Behún)
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún)
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún)
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún)
  - Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family" (Marek Behún)
  - usb: typec: class: Invalidate USB device pointers on partner unregistration (Andrei Kuchynski)
  - ext4: goto right label 'out_mmap_sem' in ext4_setattr() (Baokun Li)
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott)
  - vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp (Daniel Borkmann)
  - usb: typec: class: Fix NULL pointer access (Andrei Kuchynski)
  - selftests/bpf: Adjust data size to have ETH_HLEN (Shigeru Yoshida)
  - selftests/bpf: check program redirect in xdp_cpumap_attach (Alexis Lothoré (eBPF Foundation))
  - selftests/bpf: make xdp_cpumap_attach keep redirect prog attached (Alexis Lothoré (eBPF Foundation))
  - selftests/bpf: fix bpf_map_redirect call for cpu map test (Alexis Lothoré (eBPF Foundation))
  - xfs: flush inodegc before swapon (Christoph Hellwig)
  - xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate (Christoph Hellwig)
  - xfs: Do not allow norecovery mount with quotacheck (Carlos Maiolino)
  - xfs: do not check NEEDSREPAIR if ro,norecovery mount. (Lukas Herbolt)
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Dmitry Torokhov)
  - driver core: introduce device_set_driver() helper (Dmitry Torokhov)
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Dmitry Torokhov)
  - spi: spi-imx: Add check for spi_imx_setupxfer() (Tamura Dai)
  - drm/amdgpu: Use the right function for hdp flush (Lijo Lazar)
  - drm/amdgpu: use a dummy owner for sysfs triggered cleaner shaders v4 (Christian König)
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha)
  - x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove cores (Pi Xiange)
  - ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh)
  - spi: tegra210-quad: add rate limiting and simplify timeout error message (Breno Leitao)
  - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Breno Leitao)
  - ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING" (Namjae Jeon)
  - riscv: Provide all alternative macros all the time (Andrew Jones)
  - iomap: skip unnecessary ifs_block_is_uptodate check (Gou Hao)
  - netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS (Song Liu)
  - x86/i8253: Call clockevent_i8253_disable() with interrupts disabled (Fernando Fernandez Mancera)
  - ASoC: fsl_asrc_dma: get codec or cpu dai from backend (Shengjiu Wang)
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv)
  - scsi: ufs: exynos: gs101: Put UFS device in reset on .suspend() (Peter Griffin)
  - scsi: ufs: exynos: Move phy calls to .exit() callback (Peter Griffin)
  - scsi: ufs: exynos: Enable PRDT pre-fetching with UFSHCD_CAP_CRYPTO (Peter Griffin)
  - scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() (Peter Griffin)
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang)
  - ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo)
  - iommu: Clear iommu-dma ops on cleanup (Robin Murphy)
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Pali Rohár)
  - timekeeping: Add a lockdep override in tick_freeze() (Sebastian Andrzej Siewior)
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Pali Rohár)
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner)
  - nvmet-fc: take tgtport reference only once (Daniel Wagner)
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf)
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf)
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf)
  - selftests/mincore: Allow read-ahead pages to reach the end of the file (Qiuxu Zhuo)
  - x86/xen: disable CPU idle and frequency drivers for PVH dom0 (Roger Pau Monne)
  - gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment (Andy Shevchenko)
  - objtool: Stop UNRET validation on UD2 (Josh Poimboeuf)
  - nvme: multipath: fix return value of nvme_available_path (Uday Shankar)
  - nvme: re-read ANA log page after ns scan completes (Hannes Reinecke)
  - drm/xe/xe3lpg: Apply Wa_14022293748, Wa_22019794406 (Julia Filipchuk)
  - drm/amdgpu: Increase KIQ invalidate_tlbs timeout (Jay Cornwall)
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin)
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mario Limonciello)
  - nvme: requeue namespace scan on missed AENs (Hannes Reinecke)
  - xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk)
  - perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init (Gabriel Shahrouzi)
  - selftests: ublk: fix test_stripe_04 (Ming Lei)
  - cgroup/cpuset: Don't allow creation of local partition over a remote one (Waiman Long)
  - KVM: s390: Don't use %pK through debug printing (Thomas Weißschuh)
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh)
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov)
  - kbuild: add dependency from vmlinux to sorttable (Xi Ruoyao)
  - io_uring: always do atomic put from iowq (Pavel Begunkov)
  - rtc: pcf85063: do a SW reset if POR failed (Lukas Stockmann)
  - 9p/trans_fd: mark concurrent read and writes to p9_conn->err (Ignacio Encinas)
  - 9p/net: fix improper handling of bogus negative read/write replies (Dominique Martinet)
  - ntb_hw_amd: Add NTB PCI ID for new gen CPU (Basavaraj Natikar)
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann)
  - qibfs: fix _another_ leak (Al Viro)
  - objtool, lkdtm: Obfuscate the do_nothing() pointer (Josh Poimboeuf)
  - objtool, regulator: rk808: Remove potential undefined behavior in rk806_set_mode_dcdc() (Josh Poimboeuf)
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf)
  - objtool, panic: Disable SMAP in __stack_chk_fail() (Josh Poimboeuf)
  - objtool: Silence more KCOV warnings (Josh Poimboeuf)
  - um: work around sched_yield not yielding in time-travel mode (Benjamin Berg)
  - thunderbolt: Scan retimers after device router has been enumerated (Mika Westerberg)
  - usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func (Théo Lebrun)
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang)
  - phy: rockchip: usbdp: Avoid call hpd_event_trigger in dp_phy_init (Andy Yan)
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michal Pecio)
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes)
  - i3c: master: svc: Add support for Nuvoton npcm845 i3c (Stanley Chu)
  - xhci: Handle spurious events on Etron host isoc enpoints (Mathias Nyman)
  - usb: xhci: Fix isochronous Ring Underrun/Overrun event handling (Michal Pecio)
  - usb: xhci: Complete 'error mid TD' transfers when handling Missed Service (Michal Pecio)
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz)
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko)
  - usb: dwc3: gadget: Refactor loop to avoid NULL endpoints (Andy Shevchenko)
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis)
  - fs/ntfs3: Keep write operations atomic (Lizhi Xu)
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein)
  - mailbox: pcc: Always clear the platform ack interrupt first (Sudeep Holla)
  - mailbox: pcc: Fix the possible race in updation of chan_in_use flag (Huisong Li)
  - bpf: Reject attaching fexit/fmod_ret to __noreturn functions (Yafang Shao)
  - bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it creates storage (Martin KaFai Lau)
  - bpf: bpftool: Setting error code in do_loader() (Sewon Nam)
  - s390/tty: Fix a potential memory leak bug (Haoxiang Li)
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li)
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin)
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner)
  - bpf: Fix deadlock between rcu_tasks_trace and event_mutex. (Alexei Starovoitov)
  - bpf: Fix kmemleak warning for percpu hashmap (Yonghong Song)
  - crypto: null - Use spin lock instead of mutex (Herbert Xu)
  - crypto: lib/Kconfig - Fix lib built-in failure when arch is modular (Herbert Xu)
  - crypto: ccp - Add support for PCI device 0x1134 (Devaraj Rangasamy)
  - MIPS: cm: Detect CM quirks from device tree (Gregory CLEMENT)
  - pinctrl: mcp23s08: Get rid of spurious level interrupts (Dmitry Mastykin)
  - pinctrl: renesas: rza2: Fix potential NULL pointer dereference (Chenyuan Yang)
  - selftests/bpf: Fix stdout race condition in traffic monitor (Amery Hung)
  - USB: wdm: add annotation (Oliver Neukum)
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum)
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum)
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum)
  - USB: VLI disk crashes if LPM is used (Oliver Neukum)
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li)
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li)
  - usb: dwc3: xilinx: Prevent spike in reset signal (Mike Looijmans)
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen)
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin)
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin)
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin)
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen)
  - usb: xhci: Fix invalid pointer dereference in Etron workaround (Michal Pecio)
  - xhci: Limit time spent with xHC interrupts disabled during bus resume (Mathias Nyman)
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling)
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue)
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich)
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura)
  - serial: msm: Configure correct working mode before starting earlycon (Stephan Gerhold)
  - tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT (Günther Noack)
  - firmware: stratix10-svc: Add of_platform_default_populate() (Mahesh Rao)
  - misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack (Rengarajan S)
  - misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration (Rengarajan S)
  - char: misc: register chrdev region with all possible minors (Thadeu Lima de Souza Cascardo)
  - KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer (Sean Christopherson)
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson)
  - KVM: x86: Explicitly treat routing entry type changes as changes (Sean Christopherson)
  - mei: vsc: Fix fortify-panic caused by invalid counted_by() use (Hans de Goede)
  - mei: me: add panther lake H DID (Alexander Usyskin)
  - scsi: Improve CDL control (Damien Le Moal)
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum)
  - ata: libata-scsi: Fix ata_msense_control_ata_feature() (Damien Le Moal)
  - ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type (Damien Le Moal)
  - ata: libata-scsi: Improve CDL control (Damien Le Moal)
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li)
  - cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports (Smita Koralahalli)
  - KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson)
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jens Axboe)
  - LoongArch: KVM: Fix PMU pass-through issue if VM exits to host finally (Bibo Mao)
  - LoongArch: KVM: Fully clear some CSRs when VM reboot (Bibo Mao)
  - LoongArch: Remove a bogus reference to ZONE_DMA (Petr Tesarik)
  - LoongArch: Return NULL from huge_pte_offset() for invalid PMD (Ming Wang)
  - LoongArch: Handle fp, lsx, lasx and lbt assembly symbols (Tiezhu Yang)
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose)
  - x86/insn: Fix CTEST instruction decoding (Kirill A. Shutemov)
  - drm/amd/display: Force full update in gpu reset (Roman Li)
  - drm/amd/display: Fix gpu reset in multidisplay config (Roman Li)
  - drm: panel: jd9365da: fix reset signal polarity in unprepare (Hugo Villeneuve)
  - rust: firmware: Use `ffi::c_char` type in `FwFunc` (Christian Schrefl)
  - net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute)
  - net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel)
  - xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() (Alexey Nepomnyashih)
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún)
  - sched_ext: Use kvzalloc for large exit_dump allocation (Breno Leitao)
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic)
  - netfilter: fib: avoid lookup if socket is available (Florian Westphal)
  - LoongArch: Make do_xyz() exception handlers more robust (Tiezhu Yang)
  - LoongArch: Make regs_irqs_disabled() more clear (Tiezhu Yang)
  - LoongArch: Select ARCH_USE_MEMTEST (Yuli Wang)
  - perf/x86: Fix non-sampling (counting) events on certain x86 platforms (Luo Gengkun)
  - bpf: Add namespace to BPF internal symbols (Alexei Starovoitov)
  - splice: remove duplicate noinline from pipe_clear_nowait (T.J. Mercier)
  - riscv: uprobes: Add missing fence.i after building the XOL buffer (Björn Töpel)
  - riscv: Replace function-like macro by static inline function (Björn Töpel)
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson)
  - block: never reduce ra_pages in blk_apply_bdi_limits (Christoph Hellwig)
  - pds_core: make wait_context part of q_info (Shannon Nelson)
  - pds_core: Remove unnecessary check in pds_client_adminq_cmd() (Brett Creeley)
  - pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result (Brett Creeley)
  - pds_core: Prevent possible adminq overflow/stuck condition (Brett Creeley)
  - net: dsa: mt7530: sync driver-specific behavior of MT7531 variants (Daniel Golle)
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang)
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang)
  - fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount() (Al Viro)
  - net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration (Bo-Cun Chen)
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen)
  - net: phy: leds: fix memory leak (Qingfang Deng)
  - net: lwtunnel: disable BHs when required (Justin Iurman)
  - scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer() (Chenyuan Yang)
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Anastasia Kovaleva)
  - net/mlx5: Move ttc allocation after switch case to prevent leaks (Henry Martin)
  - net/mlx5: Fix null-ptr-deref in mlx5_create_{inner_,}ttc_table() (Henry Martin)
  - cgroup/cpuset-v1: Add missing support for cpuset_v2_mode (T.J. Mercier)
  - btrfs: zoned: return EIO on RAID1 block group write pointer mismatch (Johannes Thumshirn)
  - btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() (Qu Wenruo)
  - cpufreq: fix compile-test defaults (Johan Hovold)
  - cpufreq: Do not enable by default during compile testing (Krzysztof Kozlowski)
  - cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier)
  - scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort() (Chenyuan Yang)
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin)
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin)
  - cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() (Henry Martin)
  - dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann)
  - cpufreq: sun50i: prevent out-of-bounds access (Andre Przywara)
  - ceph: Fix incorrect flush end position calculation (David Howells)
  - lib/Kconfig.ubsan: Remove 'default UBSAN' from UBSAN_INTEGER_WRAP (Nathan Chancellor)
  - drm/amd/display/dml2: use vzalloc rather than kzalloc (Alex Deucher)
  - drm/amd/display: Fix unnecessary cast warnings from checkpatch (Rohit Chavan)
  - drm/xe/bmg: Add one additional PCI ID (Matt Roper)
  - net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads (Jonathan Currier)
  - scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set (Peter Griffin)
  - scsi: ufs: exynos: Move UFS shareability value to drvdata (Peter Griffin)
  - scsi: ufs: exynos: Add gs101_ufs_drv_init() hook and enable WriteBooster (Peter Griffin)
  - scsi: ufs: exynos: Remove superfluous function parameter (Tudor Ambarus)
  - scsi: ufs: exynos: Remove empty drv_init method (Tudor Ambarus)
  - ksmbd: fix use-after-free in __smb2_lease_break_noti() (Namjae Jeon)
  - ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL (Namjae Jeon)
  - ksmbd: add netdev-up/down event debug print (Namjae Jeon)
  - ksmbd: use __GFP_RETRY_MAYFAIL (Namjae Jeon)
  - accel/ivpu: Fix the NPU's DPU frequency calculation (Andrzej Kacprowski)
  - accel/ivpu: Add auto selection logic for job scheduler (Jacek Lawrynowicz)
  - PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads (Jonathan Currier)
  - PCI/MSI: Handle the NOMASK flag correctly for all PCI/MSI backends (Thomas Gleixner)
  - PCI/MSI: Convert pci_msi_ignore_mask to per MSI domain flag (Roger Pau Monne)
  - scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus)
  - of: resolver: Fix device node refcount leakage in of_resolve_phandles() (Zijun Hu)
  - of: resolver: Simplify of_resolve_phandles() using __free() (Rob Herring (Arm))
  - arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix serdes_ln_ctrl reg-masks (Siddharth Vadapalli)
  - arm64: dts: ti: Refactor J784s4 SoC files to a common file (Manorit Chawdhry)
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean)
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron)
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún)
  - media: ov08x40: Add missing ov08x40_identify_module() call on stream-start (Hans de Goede)
  - media: ov08x40: Move ov08x40_identify_module() function up (Hans de Goede)
  - media: i2c: imx214: Fix link frequency validation (André Apitzsch)
  - media: i2c: imx214: Check number of lanes from device tree (André Apitzsch)
  - media: i2c: imx214: Replace register addresses with macros (André Apitzsch)
  - media: i2c: imx214: Convert to CCI register access helpers (André Apitzsch)
  - media: i2c: imx214: Simplify with dev_err_probe() (André Apitzsch)
  - media: i2c: imx214: Use subdev active state (André Apitzsch)
  - PM: EM: Address RCU-related sparse warnings (Rafael J. Wysocki)
  - PM: EM: use kfree_rcu() to simplify the code (Li RongQing)
  - mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get (Tudor Ambarus)
  - soc: qcom: ice: introduce devm_of_qcom_ice_get (Tudor Ambarus)
  - mm/vmscan: don't try to reclaim hwpoison folio (Jinjiang Tu)
  - tracing: Verify event formats that have "%*p.." (Steven Rostedt)
  - tracing: Add __print_dynamic_array() helper (Steven Rostedt)
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis)
  - LTS version: v6.12.25 (Jack Vogel)
  - selftests/bpf: extend changes_pkt_data with cases w/o subprograms (Eduard Zingerman)
  - bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs (Eduard Zingerman)
  - selftests/bpf: validate that tail call invalidates packet pointers (Eduard Zingerman)
  - selftests/bpf: freplace tests for tracking of changes_packet_data (Eduard Zingerman)
  - bpf: check changes_pkt_data property for extension programs (Eduard Zingerman)
  - selftests/bpf: test for changing packet data from global functions (Eduard Zingerman)
  - bpf: track changes_pkt_data property for global functions (Eduard Zingerman)
  - bpf: add find_containing_subprog() utility function (Eduard Zingerman)
  - wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process (P Praneesh)
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (WangYuli)
  - MIPS: cevt-ds1287: Add missing ds1287.h include (WangYuli)
  - MIPS: dec: Declare which_prom() as static (WangYuli)
  - Revert "wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process" (Alexander Tsoy)
  - mm/vma: add give_up_on_oom option on modify/merge, use in uffd release (Lorenzo Stoakes)
  - nvmet-fc: Remove unused functions (WangYuli)
  - drm/amd/display: Temporarily disable hostvm on DCN31 (Aurabindo Pillai)
  - LoongArch: Eliminate superfluous get_numa_distances_cnt() (Yuli Wang)
  - efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32 (Hamza Mahfooz)
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi)
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi)
  - selftests/bpf: Fix raw_tp null handling test (Shung-Hsi Yu)
  - md: fix mddev uaf while iterating all_mddevs list (Yu Kuai)
  - platform/x86: msi-wmi-platform: Workaround a ACPI firmware bug (Armin Wolf)
  - platform/x86: msi-wmi-platform: Rename "data" variable (Armin Wolf)
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
  - scripts: generate_rust_analyzer: Add ffi crate (Lukas Fischer)
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki)
  - arm64/boot: Enable EL2 requirements for FEAT_PMUv3p9 (Anshuman Khandual)
  - arm64/sysreg: Add register fields for HFGWTR2_EL2 (Anshuman Khandual)
  - arm64/sysreg: Add register fields for HFGRTR2_EL2 (Anshuman Khandual)
  - arm64/sysreg: Add register fields for HFGITR2_EL2 (Anshuman Khandual)
  - arm64/sysreg: Add register fields for HDFGWTR2_EL2 (Anshuman Khandual)
  - arm64/sysreg: Add register fields for HDFGRTR2_EL2 (Anshuman Khandual)
  - arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1 (Anshuman Khandual)
  - drm/mgag200: Fix value in <VBLKSTR> register (Thomas Zimmermann)
  - drm/amdgpu: fix warning of drm_mm_clean (ZhenGuo Yin)
  - drm/xe: Set LRC addresses before guc load (Lucas De Marchi)
  - drm/xe/userptr: fix notifier vs folio deadlock (Matthew Auld)
  - drm/xe/dma_buf: stop relying on placement in unmap (Matthew Auld)
  - drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on DP1 (Mario Limonciello)
  - drm/amd/display: Protect FPU in dml2_init()/dml21_init() (Huacai Chen)
  - drm/amd/display: Do not enable Replay and PSR while VRR is on in amdgpu_dm_commit_planes() (Tom Chung)
  - drm/amdgpu: immediately use GTT for new allocations (Christian König)
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula)
  - drm/xe: Fix an out-of-bounds shift when invalidating TLB (Thomas Hellström)
  - drm/sti: remove duplicate object names (Rolf Eike Beer)
  - drm/imagination: take paired job reference (Brendan King)
  - drm/imagination: fix firmware memory leaks (Brendan King)
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge)
  - drm/amdgpu/dma_buf: fix page_link check (Matthew Auld)
  - drm/amdgpu/mes11: optimize MES pipe FW version fetching (Alex Deucher)
  - drm/amd/display: Protect FPU in dml21_copy() (Huacai Chen)
  - drm/amd/display: Protect FPU in dml2_validate()/dml21_validate() (Huacai Chen)
  - drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1 (Mario Limonciello)
  - drm/xe: Use local fence in error path of xe_migrate_clear (Matthew Brost)
  - drm/i915/vrr: Add vrr.vsync_{start, end} in vrr_params_changed (Ankit Nautiyal)
  - drm/amdgpu/mes12: optimize MES pipe FW version fetching (Alex Deucher)
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev)
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev)
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev)
  - drm/amd/pm/smu11: Prevent division by zero (Denis Arefev)
  - drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev)
  - drm/amd/pm: Prevent division by zero (Denis Arefev)
  - drm/amd/display: Increase vblank offdelay for PSR panels (Leo Li)
  - drm/amd/display: Actually do immediate vblank disable (Leo Li)
  - drm/amd: Handle being compiled without SI or CIK support better (Mario Limonciello)
  - drm/amd/display: prevent hang on link training fail (Brendan Tam)
  - drm/amdgpu: Prefer shadow rom when available (Lijo Lazar)
  - drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen)
  - drm/msm/dsi: Add check for devm_kstrdup() (Haoxiang Li)
  - drm/ast: Fix ast_dp connection status (Jocelyn Falempe)
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang)
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi)
  - platform/x86: amd: pmf: Fix STT limits (Mario Limonciello)
  - RAS/AMD/FMPM: Get masked address (Yazen Ghannam)
  - RAS/AMD/ATL: Include row[13] bit in row retirement (Yazen Ghannam)
  - scsi: ufs: exynos: Ensure consistent phy reference counts (Peter Griffin)
  - scsi: megaraid_sas: Block zero-length ATA VPD inquiry (Chandrakanth Patil)
  - x86/boot/sev: Avoid shared GHCB page for early memory acceptance (Ard Biesheuvel)
  - x86/cpu/amd: Fix workaround for erratum 1054 (Sandipan Das)
  - x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (Borislav Petkov (AMD))
  - virtiofs: add filesystem context source name check (Xiangsheng Hou)
  - tracing: Fix filter string testing (Steven Rostedt)
  - string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne)
  - smb3 client: fix open hardlink on deferred close file error (Chunjie Zhu)
  - slab: ensure slab->obj_exts is clear in a newly allocated slab page (Suren Baghdasaryan)
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown)
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor)
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Kuniyuki Iwashima)
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Kuniyuki Iwashima)
  - ksmbd: fix the warning from __kernel_write_iter (Namjae Jeon)
  - ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev)
  - ksmbd: fix use-after-free in smb_break_all_levII_oplock() (Namjae Jeon)
  - ksmbd: Fix dangling pointer in krb_authenticate (Sean Heelan)
  - ovl: don't allow datadir only (Miklos Szeredi)
  - mm: fix apply_to_existing_page_range() (Kirill A. Shutemov)
  - mm: fix filemap_get_folios_contig returning batches of identical folios (Vishal Moola (Oracle))
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He)
  - mm/compaction: fix bug in hugetlb handling pathway (Vishal Moola (Oracle))
  - loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh)
  - loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh)
  - isofs: Prevent the use of too small fid (Edward Adam Davis)
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo)
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev)
  - crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu)
  - cpufreq/sched: Explicitly synchronize limits_changed flag handling (Rafael J. Wysocki)
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel)
  - Bluetooth: vhci: Avoid needless snprintf() calls (Kees Cook)
  - Bluetooth: l2cap: Process valid commands in too long frame (Frédéric Danis)
  - drm/msm/a6xx+: Don't let IB_SIZE overflow (Rob Clark)
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Menglong Dong)
  - i2c: atr: Fix wrong include (Andy Shevchenko)
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng)
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers)
  - dma-buf/sw_sync: Decrement refcount on error in sw_sync_ioctl_get_deadline() (Dan Carpenter)
  - drm/v3d: Fix Indirect Dispatch configuration for V3D 7.1.6 and later (Maíra Canal)
  - block: integrity: Do not call set_page_dirty_lock() (Martin K. Petersen)
  - asus-laptop: Fix an uninitialized variable (Denis Arefev)
  - ASoC: qcom: Fix sc7280 lpass potential buffer overflow (Evgeny Pimenov)
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Peter Ujfalusi)
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla)
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla)
  - ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START event (Herve Codina)
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson)
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher)
  - rust: kbuild: use `pound` to support GNU Make < 4.3 (Miguel Ojeda)
  - rust: disable `clippy::needless_continue` (Miguel Ojeda)
  - rust: kasan/kbuild: fix missing flags on first build (Miguel Ojeda)
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.86.0 (Miguel Ojeda)
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki)
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (WangYuli)
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (WangYuli)
  - kunit: qemu_configs: SH: Respect kunit cmdline (Thomas Weißschuh)
  - riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Samuel Holland)
  - riscv: module: Fix out-of-bounds relocation access (Samuel Holland)
  - riscv: Properly export reserved regions in /proc/iomem (Björn Töpel)
  - riscv: Use kvmalloc_array on relocation_hashtable (Will Pierce)
  - net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings (Bo-Cun Chen)
  - net: ethernet: mtk_eth_soc: correct the max weight of the queue limit for 100Mbps (Bo-Cun Chen)
  - net: ethernet: mtk_eth_soc: reapply mdc divider on reset (Bo-Cun Chen)
  - net: ti: icss-iep: Fix possible NULL pointer dereference for perout request (Meghana Malladi)
  - net: ti: icss-iep: Add phase offset configuration for perout signal (Meghana Malladi)
  - net: ti: icss-iep: Add pwidth configuration for perout signal (Meghana Malladi)
  - ptp: ocp: fix start time alignment in ptp_ocp_signal_set (Sagi Maimon)
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean)
  - net: dsa: free routing table on probe failure (Vladimir Oltean)
  - net: dsa: clean up FDB, MDB, VLAN entries on unbind (Vladimir Oltean)
  - net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported (Vladimir Oltean)
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean)
  - net: txgbe: fix memory leak in txgbe_probe() error path (Abdun Nihaal)
  - net: bridge: switchdev: do not notify new brentries as changed (Jonas Gorski)
  - net: b53: enable BPDU reception for management port (Jonas Gorski)
  - netlink: specs: rt-link: adjust mctp attribute naming (Jakub Kicinski)
  - netlink: specs: rt-link: add an attr layer around alt-ifname (Jakub Kicinski)
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal)
  - ata: libata-sata: Save all fields from sense data descriptor (Niklas Cassel)
  - loop: stop using vfs_iter_{read,write} for buffered I/O (Christoph Hellwig)
  - loop: aio inherit the ioprio of original request (Yunlong Xing)
  - eth: bnxt: fix missing ring index trim on error path (Jakub Kicinski)
  - net: ethernet: ti: am65-cpsw: fix port_np reference counting (Michael Walle)
  - net: ngbe: fix memory leak in ngbe_probe() error path (Abdun Nihaal)
  - can: rockchip_canfd: fix broken quirks checks (Weizhao Ouyang)
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets)
  - netlink: specs: ovs_vport: align with C codegen capabilities (Jakub Kicinski)
  - block: fix resource leak in blk_register_queue() error path (Zheng Qixing)
  - net: mctp: Set SOCK_RCU_FREE (Matt Johnston)
  - ethtool: cmis_cdb: use correct rpl size in ethtool_cmis_module_poll() (Damodharam Ammepalli)
  - pds_core: fix memory leak in pdsc_debugfs_add_qcq() (Abdun Nihaal)
  - test suite: use %zu to print size_t (Matthew Wilcox (Oracle))
  - smc: Fix lockdep false-positive for IPPROTO_SMC. (Kuniyuki Iwashima)
  - dt-bindings: soc: fsl: fsl,ls1028a-reset: Fix maintainer entry (Geert Uytterhoeven)
  - igc: add lock preventing multiple simultaneous PTM transactions (Christopher S M Hall)
  - igc: cleanup PTP module if probe fails (Christopher S M Hall)
  - igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S M Hall)
  - igc: move ktime snapshot into PTM retry loop (Christopher S M Hall)
  - igc: increase wait time before retrying PTM (Christopher S M Hall)
  - igc: fix PTM cycle trigger logic (Christopher S M Hall)
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg)
  - xen: fix multicall debug feature (Juergen Gross)
  - ipv6: add exception routes to GC list in rt6_insert_exception (Xin Long)
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis)
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter)
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz)
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory)
  - ASoC: cs42l43: Reset clamp override on jack removal (Charles Keepax)
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Kailang Yang)
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Takashi Iwai)
  - ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA (Jaroslav Kysela)
  - ALSA: hda/cirrus_scodec_test: Don't select dependencies (Richard Fitzgerald)
  - RDMA/hns: Fix wrong maximum DMA segment size (Chengchang Tang)
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing)
  - ovl: remove unused forward declaration (Giuseppe Scrivano)
  - crypto: tegra - Fix IV usage for AES ECB (Akhil R)
  - crypto: tegra - Do not use fixed size buffers (Akhil R)
  - crypto: tegra - remove redundant error check on ret (Colin Ian King)
  - ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe() (Henry Martin)
  - ASoC: dwc: always enable/disable i2s irqs (Brady Norander)
  - md/md-bitmap: fix stats collection for external bitmaps (Zheng Qixing)
  - md/raid10: fix missing discard IO accounting (Yu Kuai)
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin)
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal)
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel)
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel)
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal)
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang)
  - aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump (Brian Maly)  [Orabug: 37446372]
  - vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang)  [Orabug: 37840543]
  - vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang)  [Orabug: 37840543]
  - vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang)  [Orabug: 37840543]
  - vhost-scsi: Reduce response iov mem use (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Stop duplicating se_cmd fields (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Dynamically allocate scatterlists (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Add better resource allocation failure handling (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie)  [Orabug: 37840543]
  - vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie)  [Orabug: 37840543]
  - Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie)  [Orabug: 37840543]
  - Revert "vhost_scsi: log write descriptors" (Mike Christie)  [Orabug: 37840543]
  - scsi: mpi3mr: Event processing debug improvement (Ranjan Kumar)  [Orabug: 37878021]
  - scsi: mpi3mr: Add level check to control event logging (Ranjan Kumar)  [Orabug: 37878021]
  - scsi: mpi3mr: Reset the pending interrupt flag (Ranjan Kumar)  [Orabug: 37878021]
  - scsi: mpi3mr: Fix pending I/O counter (Ranjan Kumar)  [Orabug: 37878021]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-2.28.3.el9uek]
changelog:
  - LTS version: v6.12.28 (Jack Vogel)
  - dm: fix copying after src array boundaries (Tudor Ambarus)
  - drm/amd/display: Fix slab-use-after-free in hdcp (Chris Bainbridge)
  - drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp (Mario Limonciello)
  - drivers: base: handle module_kobject creation (Shyam Saini)
  - kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
  - kernel: param: rename locate_module_kobject (Shyam Saini)
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" (Christian Hewitt)
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs (Christian Bruel)
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs (Christian Bruel)
  - ARM: dts: opos6ul: add ksz8081 phy properties (Sébastien Szymanski)
  - arm64: dts: imx95: Correct the range of PCIe app-reg region (Richard Zhu)
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Sudeep Holla)
  - firmware: arm_scmi: Balance device refcount when destroying devices (Cristian Marussi)
  - drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change (Niranjana Vishwanathapura)
  - sch_ets: make est_qlen_notify() idempotent (Cong Wang)
  - sch_qfq: make qfq_qlen_notify() idempotent (Cong Wang)
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang)
  - sch_drr: make drr_qlen_notify() idempotent (Cong Wang)
  - sch_htb: make htb_qlen_notify() idempotent (Cong Wang)
  - accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW (Karol Wachowski)
  - accel/ivpu: Fix locking order in ivpu_job_submit (Karol Wachowski)
  - accel/ivpu: Abort all jobs after command queue unregister (Karol Wachowski)
  - accel/ivpu: Update VPU FW API headers (Andrzej Kacprowski)
  - accel/ivpu: Fix a typo (Andrew Kreimer)
  - accel/ivpu: Use xa_alloc_cyclic() instead of custom function (Karol Wachowski)
  - accel/ivpu: Make DB_ID and JOB_ID allocations incremental (Tomasz Rusinowicz)
  - net: Fix the devmem sock opts and msgs for parisc (Pranjal Shrivastava)
  - bcachefs: Remove incorrect __counted_by annotation (Alan Huang)
  - mm, slab: clean up slab->obj_exts always (Zhenhua Huang)
  - net: vertexcom: mse102x: Fix RX error handling (Stefan Wahren)
  - net: vertexcom: mse102x: Add range check for CMD_RTS (Stefan Wahren)
  - net: vertexcom: mse102x: Fix LEN_MASK (Stefan Wahren)
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt (Stefan Wahren)
  - net: hns3: defer calling ptp_clock_register() (Jian Shen)
  - net: hns3: fixed debugfs tm_qset size (Hao Lan)
  - net: hns3: fix an interrupt residual problem (Yonglong Liu)
  - net: hns3: store rx VLAN tag offload state for VF (Jian Shen)
  - octeon_ep: Fix host hang issue during device reboot (Sathesh B Edara)
  - net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan)
  - ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations (Sagi Maimon)
  - net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Jibin Zhang)
  - bnxt_en: fix module unload sequence (Vadim Fedorenko)
  - ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction (Alexander Stein)
  - nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Alistair Francis)
  - nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Alistair Francis)
  - nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Michael Chan)
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab)
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab)
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Kashyap Desai)
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Somnath Kotur)
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Kalesh AP)
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shravya KN)
  - ALSA: hda/realtek: Fix built-mic regression on other ASUS models (Takashi Iwai)
  - net: ipv6: fix UDPv6 GSO segmentation with NAT (Felix Fietkau)
  - net: dsa: felix: fix broken taprio gate states after clock jump (Vladimir Oltean)
  - net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM (Chad Monroe)
  - igc: fix lock order in igc_ptp_reset (Jacob Keller)
  - idpf: protect shutdown from reset (Larysa Zaremba)
  - idpf: fix potential memory leak on kcalloc() failure (Michal Swiatkowski)
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy (Da Xue)
  - net: dlink: Correct endianness handling of led_mode (Simon Horman)
  - drm/mipi-dbi: Fix blanking for non-16 bit formats (Russell Cloran)
  - drm/tests: shmem: Fix memleak (Maxime Ripard)
  - nvme-pci: fix queue unquiesce check on slot_reset (Keith Busch)
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Takashi Iwai)
  - scsi: ufs: core: Remove redundant query_complete trace (Keoseong Park)
  - idpf: fix offloads support for encapsulated packets (Madhu Chittim)
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Xuanqiang Luo)
  - net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira)
  - net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira)
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira)
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira)
  - pds_core: remove write-after-free of client_id (Shannon Nelson)
  - pds_core: specify auxiliary_device to be created (Shannon Nelson)
  - pds_core: make pdsc_auxbus_dev_del() void (Shannon Nelson)
  - net: ethernet: mtk_eth_soc: sync mtk_clks_source_name array (Daniel Golle)
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised (Louis-Alexis Eyraud)
  - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (Louis-Alexis Eyraud)
  - rtase: Modify the condition used to detect overflow in rtase_calc_time_mitigation (Justin Lai)
  - bnxt_en: improve TX timestamping FIFO configuration (Vadim Fedorenko)
  - octeon_ep_vf: Resolve netdevice usage count issue (Sathesh B Edara)
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID (Vladimir Oltean)
  - Bluetooth: L2CAP: copy RX timestamp to new fragments (Pauli Virtanen)
  - Bluetooth: btintel_pcie: Add additional to checks to clear TX/RX paths (Kiran K)
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (En-Wei Wu)
  - Bluetooth: btintel_pcie: Avoid redundant buffer allocation (Kiran K)
  - Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync (Luiz Augusto von Dentz)
  - Bluetooth: hci_conn: Fix not setting conn_timeout for Broadcast Receiver (Luiz Augusto von Dentz)
  - Bluetooth: hci_conn: Remove alloc from critical section (Iulia Tanasescu)
  - ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot (Venkata Prasad Potturu)
  - accel/ivpu: Correct DCT interrupt handling (Karol Wachowski)
  - net/mlx5: E-switch, Fix error handling for enabling roce (Chris Mi)
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Cosmin Ratiu)
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Jianbo Liu)
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Maor Gottlieb)
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Vlad Dogaru)
  - xsk: Fix race condition in AF_XDP generic RX path (e.kubanski)
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Ido Schimmel)
  - powerpc/boot: Fix dash warning (Madhavan Srinivasan)
  - wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release (Murad Masimov)
  - wifi: iwlwifi: fix the check for the SCRATCH register upon resume (Emmanuel Grumbach)
  - wifi: iwlwifi: don't warn if the NIC is gone in resume (Emmanuel Grumbach)
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions' (Chen Linxuan)
  - ALSA: hda/realtek - Enable speaker for HP platform (Kailang Yang)
  - ASoC: Intel: sof_sdw: Add NULL check in asoc_sdw_rt_dmic_rtd_init() (Chenyuan Yang)
  - powerpc/boot: Check for ld-option support (Madhavan Srinivasan)
  - pinctrl: imx: Return NULL if no group is matched and found (Hui Wang)
  - book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Donet Tom)
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence (Sheetal)
  - ASoC: cs-amp-lib-test: Don't select SND_SOC_CS_AMP_LIB (Richard Fitzgerald)
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties (Geert Uytterhoeven)
  - drm/amd/display: Default IPS to RCG_IN_ACTIVE_IPS2_IN_OFF (Leo Li)
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park)
  - cpufreq: Fix setting policy limits when frequency tables are used (Rafael J. Wysocki)
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Rafael J. Wysocki)
  - smb: client: fix zero length for mkdir POSIX create context (Jethro Donaldson)
  - ksmbd: fix use-after-free in session logoff (Sean Heelan)
  - ksmbd: fix use-after-free in kerberos authentication (Sean Heelan)
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon)
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug (Shouye Liu)
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles (Mario Limonciello)
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Nicolin Chen)
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Mingcong Bai)
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Balbir Singh)
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Nicolin Chen)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov)
  - drm: Select DRM_KMS_HELPER from DRM_DEBUG_DP_MST_TOPOLOGY_REFS (Janne Grunau)
  - drm/amdgpu: Fix offset for HDP remap in nbio v7.11 (Lijo Lazar)
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski)
  - dm-integrity: fix a warning on invalid table line (Mikulas Patocka)
  - dm-bufio: don't schedule in atomic context (LongPing Wei)
  - x86/boot/sev: Support memory acceptance in the EFI stub under SVSM (Ard Biesheuvel)
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Wentao Liang)
  - tracing: Do not take trace_event_sem in print_event_fields() (Steven Rostedt)
  - spi: tegra114: Don't fail set_cs_timing when delays are zero (Aaron Kling)
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe (Ruslan Piasetskyi)
  - mm/memblock: repeat setting reserved region nid if array is doubled (Wei Yang)
  - mm/memblock: pass size instead of end to memblock_set_node() (Wei Yang)
  - irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs (Stephan Gerhold)
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload (Vishal Badole)
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Sean Christopherson)
  - perf/x86/intel: Only check the group flag for X86 leader (Kan Liang)
  - parisc: Fix double SIGFPE crash (Helge Deller)
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Will Deacon)
  - i2c: imx-lpi2c: Fix clock count when probe defers (Clark Wang)
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration (Niravkumar L Rabara)
  - EDAC/altera: Test the correct error reg offset (Niravkumar L Rabara)
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() (Philipp Stanner)
  - drm/fdinfo: Protect against driver unbind (Tvrtko Ursulin)
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (Srinivas Pandruvada)
  - btrfs: fix COW handling in run_delalloc_nocow() (Dave Chen)
  - btrfs: adjust subpage bit start based on sectorsize (Josef Bacik)
  - binder: fix offset calculation in debug log (Carlos Llamas)
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset (Joachim Priesner)
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface() (Geoffrey D. Bennett)
  - Revert "rndis_host: Flag RNDIS modems as WWAN devices" (Christian Heusel)
  - Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x (Zijun Hu)
  - Bluetooth: btusb: Add new VID/PID for WCN785x (Dorian Cruveiller)
  - Bluetooth: btusb: Add ID 0x2c7c:0x0130 for Qualcomm WCN785x (Mark Dietzer)
  - Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x (Zijun Hu)
  - Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (Zijun Hu)
  - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (Aaron Ma)
  - x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya)  [Orabug: 37383447]
  - x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya)  [Orabug: 37383447]
  - x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya)  [Orabug: 37383447]
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil)  [Orabug: 37877985]
  - scsi: megaraid_sas: Make most module parameters static (Dr. David Alan Gilbert)  [Orabug: 37877985]
  - scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() (Dan Carpenter)  [Orabug: 37878012]
  - scsi: mpt3sas: Fix spelling mistake "receveid" -> "received" (Colin Ian King)  [Orabug: 37878012]
  - scsi: mpt3sas: update driver version to 52.100.00.00 (Shivasharan S)  [Orabug: 37878012]
  - scsi: mpt3sas: Send a diag reset if target reset fails (Shivasharan S)  [Orabug: 37878012]
  - scsi: mpt3sas: Report driver capability as part of IOCINFO command (Shivasharan S)  [Orabug: 37878012]
  - scsi: mpt3sas: Add support for MCTP Passthrough commands (Shivasharan S)  [Orabug: 37878012]
  - scsi: mpt3sas: Update MPI headers to 02.00.62 version (Shivasharan S)  [Orabug: 37878012]
  - scsi: mpt3sas: Fix a locking bug in an error path (Bart Van Assche)  [Orabug: 37878012]
  - scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO (Paul Menzel)  [Orabug: 37878012]
  - scsi: mpt3sas: Remove unused config functions (Dr. David Alan Gilbert)  [Orabug: 37878012]
  - scsi: mpt3sas: Add details to EEDPTagMode error message (Paul Menzel)  [Orabug: 37878012]
  - scsi: mpt3sas: Update driver version to 51.100.00.00 (Ranjan Kumar)  [Orabug: 37878012]
  - vhost-scsi: log event queue write descriptors (Dongli Zhang)  [Orabug: 37883837]
  - vhost-scsi: log control queue write descriptors (Dongli Zhang)  [Orabug: 37883837]
  - vhost-scsi: log I/O queue write descriptors (Dongli Zhang)  [Orabug: 37883837]
  - vhost-scsi: adjust vhost_scsi_get_desc() to log vring descriptors (Dongli Zhang)  [Orabug: 37883837]
  - vhost: modify vhost_log_write() for broader users (Dongli Zhang)  [Orabug: 37883837]
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu)  [Orabug: 37899161]
  - uek-rpm: Move vmxnet3 to module-core in UEK8 (Harshit Mogalapalli)  [Orabug: 37908279]
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre)  [Orabug: 37936569]
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta)  [Orabug: 37920673]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon)  [Orabug: 37920673]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon)  [Orabug: 37920673]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta)  [Orabug: 37945459]  {CVE-2024-28956}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-100.28.1.el9uek]
changelog:
  - KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Michael Roth)  [Orabug: 37894105]
  - KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Michael Roth)  [Orabug: 37894105]
  - Revert "KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching" (Liam Merwick)  [Orabug: 37894105]
  - uek-rpm: Enable SECURITY_DMESG_RESTRICT in UEK8 (Harshit Mogalapalli)  [Orabug: 37867042]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-100.28.2.el9uek]
changelog:
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval)
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967533]
  - Revert "block: sysfs option to change ioticks granularity" (Gulam Mohamed)  [Orabug: 37921776]
  - RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37968545]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-100.28.2.2.el9uek]
changelog:
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38129827]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38129827]  {CVE-2024-36350} {CVE-2024-36357} 
  - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38129827]  {CVE-2024-36350} {CVE-2024-36357} 
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38129827]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38129827]  {CVE-2024-36350} {CVE-2024-36357} 
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38129827]  {CVE-2024-36350} {CVE-2024-36357}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-100.28.2.el9uek]
changelog:
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval)   
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang)  [Orabug: 37967533]  
  - Revert "block: sysfs option to change ioticks granularity" (Gulam Mohamed)  [Orabug: 37921776]  
  - RDS: use pin_user_pages_fast() (Stephen Brennan)  [Orabug: 37968545]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-2.28.3.el9uek]
changelog:
  - LTS version: v6.12.28 (Jack Vogel)
  - dm: fix copying after src array boundaries (Tudor Ambarus)
  - drm/amd/display: Fix slab-use-after-free in hdcp (Chris Bainbridge) [Orabug: 37976747] {CVE-2025-37903}
  - drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp (Mario Limonciello)
  - drivers: base: handle module_kobject creation (Shyam Saini)
  - kernel: globalize lookup_or_create_module_kobject() (Shyam Saini)
  - kernel: param: rename locate_module_kobject (Shyam Saini)
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" (Christian Hewitt)
  - arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs (Christian Bruel)
  - arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs (Christian Bruel)
  - ARM: dts: opos6ul: add ksz8081 phy properties (Sébastien Szymanski)
  - arm64: dts: imx95: Correct the range of PCIe app-reg region (Richard Zhu)
  - firmware: arm_ffa: Skip Rx buffer ownership release if not acquired (Sudeep Holla)
  - firmware: arm_scmi: Balance device refcount when destroying devices (Cristian Marussi) [Orabug: 37976752] {CVE-2025-37905}
  - drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change (Niranjana Vishwanathapura)
  - sch_ets: make est_qlen_notify() idempotent (Cong Wang)
  - sch_qfq: make qfq_qlen_notify() idempotent (Cong Wang)
  - sch_hfsc: make hfsc_qlen_notify() idempotent (Cong Wang)
  - sch_drr: make drr_qlen_notify() idempotent (Cong Wang)
  - sch_htb: make htb_qlen_notify() idempotent (Cong Wang) [Orabug: 37976858] {CVE-2025-37932}
  - accel/ivpu: Add handling of VPU_JSM_STATUS_MVNCI_CONTEXT_VIOLATION_HW (Karol Wachowski)
  - accel/ivpu: Fix locking order in ivpu_job_submit (Karol Wachowski) [Orabug: 37976760] {CVE-2025-37907}
  - accel/ivpu: Abort all jobs after command queue unregister (Karol Wachowski)
  - accel/ivpu: Update VPU FW API headers (Andrzej Kacprowski)
  - accel/ivpu: Fix a typo (Andrew Kreimer)
  - accel/ivpu: Use xa_alloc_cyclic() instead of custom function (Karol Wachowski)
  - accel/ivpu: Make DB_ID and JOB_ID allocations incremental (Tomasz Rusinowicz)
  - net: Fix the devmem sock opts and msgs for parisc (Pranjal Shrivastava)
  - bcachefs: Remove incorrect __counted_by annotation (Alan Huang)
  - mm, slab: clean up slab->obj_exts always (Zhenhua Huang) [Orabug: 37976762] {CVE-2025-37908}
  - net: vertexcom: mse102x: Fix RX error handling (Stefan Wahren)
  - net: vertexcom: mse102x: Add range check for CMD_RTS (Stefan Wahren)
  - net: vertexcom: mse102x: Fix LEN_MASK (Stefan Wahren)
  - net: vertexcom: mse102x: Fix possible stuck of SPI interrupt (Stefan Wahren)
  - net: hns3: defer calling ptp_clock_register() (Jian Shen)
  - net: hns3: fixed debugfs tm_qset size (Hao Lan)
  - net: hns3: fix an interrupt residual problem (Yonglong Liu)
  - net: hns3: store rx VLAN tag offload state for VF (Jian Shen)
  - octeon_ep: Fix host hang issue during device reboot (Sathesh Edara) [Orabug: 37976864] {CVE-2025-37933}
  - net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [Orabug: 37976765] {CVE-2025-37909}
  - ptp: ocp: Fix NULL dereference in Adva board SMA sysfs operations (Sagi Maimon) [Orabug: 37976771] {CVE-2025-37910}
  - net: use sock_gen_put() when sk_state is TCP_TIME_WAIT (Jibin Zhang) [Orabug: 37976728] {CVE-2025-37894}
  - bnxt_en: fix module unload sequence (Vadim Fedorenko)
  - ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction (Alexander Stein) [Orabug: 37976869] {CVE-2025-37934}
  - nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS (Alistair Francis)
  - nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS (Alistair Francis)
  - nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Michael Chan)
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [Orabug: 37976773] {CVE-2025-37911}
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab)
  - bnxt_en: call pci_alloc_irq_vectors() after bnxt_reserve_rings() (Kashyap Desai)
  - bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan() (Somnath Kotur)
  - bnxt_en: Fix ethtool selftest output in one of the failure cases (Kalesh Ap)
  - bnxt_en: Fix error handling path in bnxt_init_chip() (Shravya Kn) [Orabug: 37976731] {CVE-2025-37895}
  - ALSA: hda/realtek: Fix built-mic regression on other ASUS models (Takashi Iwai)
  - net: ipv6: fix UDPv6 GSO segmentation with NAT (Felix Fietkau)
  - net: dsa: felix: fix broken taprio gate states after clock jump (Vladimir Oltean)
  - net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM (Chad Monroe) [Orabug: 37976872] {CVE-2025-37935}
  - igc: fix lock order in igc_ptp_reset (Jacob Keller)
  - idpf: protect shutdown from reset (Larysa Zaremba)
  - idpf: fix potential memory leak on kcalloc() failure (Michal Swiatkowski)
  - net: mdio: mux-meson-gxl: set reversed bit when using internal phy (Da Xue)
  - net: dlink: Correct endianness handling of led_mode (Simon Horman)
  - drm/mipi-dbi: Fix blanking for non-16 bit formats (Russell Cloran)
  - drm/tests: shmem: Fix memleak (Maxime Ripard)
  - nvme-pci: fix queue unquiesce check on slot_reset (Keith Busch)
  - ALSA: ump: Fix buffer overflow at UMP SysEx message conversion (Takashi Iwai) [Orabug: 37970918] {CVE-2025-37891}
  - scsi: ufs: core: Remove redundant query_complete trace (Keoseong Park)
  - idpf: fix offloads support for encapsulated packets (Madhu Chittim)
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Luoxuanqiang) [Orabug: 37976779] {CVE-2025-37912}
  - net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976783] {CVE-2025-37913}
  - net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976788] {CVE-2025-37914}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [Orabug: 37970915] {CVE-2025-37890}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976792] {CVE-2025-37915}
  - pds_core: remove write-after-free of client_id (Shannon Nelson) [Orabug: 37976797] {CVE-2025-37916}
  - pds_core: specify auxiliary_device to be created (Shannon Nelson)
  - pds_core: make pdsc_auxbus_dev_del() void (Shannon Nelson)
  - net: ethernet: mtk_eth_soc: sync mtk_clks_source_name array (Daniel Golle)
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised (Louis-Alexis Eyraud)
  - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (Louis-Alexis Eyraud) [Orabug: 37976802] {CVE-2025-37917}
  - rtase: Modify the condition used to detect overflow in rtase_calc_time_mitigation (Justin Lai)
  - bnxt_en: improve TX timestamping FIFO configuration (Vadim Fedorenko)
  - octeon_ep_vf: Resolve netdevice usage count issue (Sathesh Edara)
  - net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID (Vladimir Oltean)
  - Bluetooth: L2CAP: copy RX timestamp to new fragments (Pauli Virtanen)
  - Bluetooth: btintel_pcie: Add additional to checks to clear TX/RX paths (Kiran K)
  - Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue() (En-Wei Wu) [Orabug: 37976804] {CVE-2025-37918}
  - Bluetooth: btintel_pcie: Avoid redundant buffer allocation (Kiran K)
  - Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync (Luiz Augusto von Dentz)
  - Bluetooth: hci_conn: Fix not setting conn_timeout for Broadcast Receiver (Luiz Augusto von Dentz)
  - Bluetooth: hci_conn: Remove alloc from critical section (Iulia Tanasescu)
  - ASoC: amd: acp: Fix NULL pointer deref in acp_i2s_set_tdm_slot (Venkata Prasad Potturu) [Orabug: 37976806] {CVE-2025-37919}
  - accel/ivpu: Correct DCT interrupt handling (Karol Wachowski)
  - net/mlx5: E-switch, Fix error handling for enabling roce (Chris Mi)
  - net/mlx5e: Fix lock order in mlx5e_tx_reporter_ptpsq_unhealthy_recover (Cosmin Ratiu)
  - net/mlx5e: TC, Continue the attr process even if encap entry is invalid (Jianbo Liu)
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Maor Gottlieb)
  - net/mlx5e: Use custom tunnel header for vxlan gbp (Vlad Dogaru)
  - xsk: Fix race condition in AF_XDP generic RX path (Eryk Kubanski) [Orabug: 37976809] {CVE-2025-37920}
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Ido Schimmel) [Orabug: 37976815] {CVE-2025-37921}
  - powerpc/boot: Fix dash warning (Madhavan Srinivasan)
  - wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release (Murad Masimov) [Orabug: 37976734] {CVE-2025-37897}
  - wifi: iwlwifi: fix the check for the SCRATCH register upon resume (Emmanuel Grumbach)
  - wifi: iwlwifi: don't warn if the NIC is gone in resume (Emmanuel Grumbach)
  - drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions' (Chen Linxuan)
  - ALSA: hda/realtek - Enable speaker for HP platform (Kailang Yang)
  - ASoC: Intel: sof_sdw: Add NULL check in asoc_sdw_rt_dmic_rtd_init() (Chenyuan Yang)
  - powerpc/boot: Check for ld-option support (Madhavan Srinivasan)
  - pinctrl: imx: Return NULL if no group is matched and found (Hui Wang)
  - book3s64/radix : Align section vmemmap start address to PAGE_SIZE (Donet Tom) [Orabug: 37976819] {CVE-2025-37922}
  - ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence (Sheetal)
  - ASoC: cs-amp-lib-test: Don't select SND_SOC_CS_AMP_LIB (Richard Fitzgerald)
  - ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties (Geert Uytterhoeven)
  - drm/amd/display: Default IPS to RCG_IN_ACTIVE_IPS2_IN_OFF (Sun Peng Li)
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [Orabug: 37976821] {CVE-2025-37923}
  - cpufreq: Fix setting policy limits when frequency tables are used (Rafael J. Wysocki)
  - cpufreq: Avoid using inconsistent policy->min and policy->max (Rafael J. Wysocki)
  - smb: client: fix zero length for mkdir POSIX create context (Jethro Donaldson)
  - ksmbd: fix use-after-free in session logoff (Sean Heelan) [Orabug: 37976738] {CVE-2025-37899}
  - ksmbd: fix use-after-free in kerberos authentication (Sean Heelan) [Orabug: 37976828] {CVE-2025-37924}
  - ksmbd: fix use-after-free in ksmbd_session_rpc_open (Namjae Jeon) [Orabug: 37976832] {CVE-2025-37926}
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug (Shouye Liu)
  - platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles (Mario Limonciello)
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Nicolin Chen) [Orabug: 37976741] {CVE-2025-37900}
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Mingcong Bai)
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Balbir Singh)
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Nicolin Chen)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [Orabug: 37976836] {CVE-2025-37927}
  - drm: Select DRM_KMS_HELPER from DRM_DEBUG_DP_MST_TOPOLOGY_REFS (Janne Grunau)
  - drm/amdgpu: Fix offset for HDP remap in nbio v7.11 (Lijo Lazar)
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski)
  - dm-integrity: fix a warning on invalid table line (Mikulas Patocka)
  - dm-bufio: don't schedule in atomic context (Longping Wei) [Orabug: 37976844] {CVE-2025-37928}
  - x86/boot/sev: Support memory acceptance in the EFI stub under SVSM (Ard Biesheuvel)
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Xu Wang) [Orabug: 37977118] {CVE-2025-37990}
  - tracing: Do not take trace_event_sem in print_event_fields() (Steven Rostedt)
  - spi: tegra114: Don't fail set_cs_timing when delays are zero (Aaron Kling)
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe (Ruslan Piasetskyi)
  - mm/memblock: repeat setting reserved region nid if array is doubled (Wei Yang)
  - mm/memblock: pass size instead of end to memblock_set_node() (Wei Yang)
  - irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs (Stephan Gerhold) [Orabug: 37976744] {CVE-2025-37901}
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload (Vishal Badole)
  - perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. (Sean Christopherson) [Orabug: 37976874] {CVE-2025-37936}
  - perf/x86/intel: Only check the group flag for X86 leader (Kan Liang)
  - parisc: Fix double SIGFPE crash (Helge Deller) [Orabug: 37977127] {CVE-2025-37991}
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Will Deacon) [Orabug: 37977182] {CVE-2025-37929}
  - i2c: imx-lpi2c: Fix clock count when probe defers (Clark Wang)
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration (Niravkumar L Rabara)
  - EDAC/altera: Test the correct error reg offset (Niravkumar L Rabara)
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() (Philipp Stanner) [Orabug: 37976850] {CVE-2025-37930}
  - drm/fdinfo: Protect against driver unbind (Tvrtko Ursulin)
  - cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode (Srinivas Pandruvada)
  - btrfs: fix COW handling in run_delalloc_nocow() (Dave Chen)
  - btrfs: adjust subpage bit start based on sectorsize (Josef Bacik) [Orabug: 37976853] {CVE-2025-37931}
  - binder: fix offset calculation in debug log (Carlos Llamas)
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset (Joachim Priesner)
  - ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface() (Geoffrey D. Bennett)
  - Revert "rndis_host: Flag RNDIS modems as WWAN devices" (Christian Heusel)
  - Bluetooth: btusb: Add 13 USB device IDs for Qualcomm WCN785x (Zijun Hu)
  - Bluetooth: btusb: Add new VID/PID for WCN785x (Dorian Cruveiller)
  - Bluetooth: btusb: Add ID 0x2c7c:0x0130 for Qualcomm WCN785x (Mark Dietzer)
  - Bluetooth: btusb: Add one more ID 0x13d3:0x3623 for Qualcomm WCN785x (Zijun Hu)
  - Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x (Zijun Hu)
  - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (Aaron Ma)
  - x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya) [Orabug: 37383447]
  - x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya) [Orabug: 37383447]
  - x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya) [Orabug: 37383447]
  - scsi: megaraid_sas: Driver version update to 07.734.00.00-rc1 (Chandrakanth Patil) [Orabug: 37877985]
  - scsi: megaraid_sas: Make most module parameters static (Dr. David Alan Gilbert) [Orabug: 37877985]
  - scsi: mpt3sas: Fix buffer overflow in mpt3sas_send_mctp_passthru_req() (Dan Carpenter) [Orabug: 37878012]
  - scsi: mpt3sas: Fix spelling mistake "receveid" -> "received" (Colin Ian King) [Orabug: 37878012]
  - scsi: mpt3sas: update driver version to 52.100.00.00 (Shivasharan S) [Orabug: 37878012]
  - scsi: mpt3sas: Send a diag reset if target reset fails (Shivasharan S) [Orabug: 37878012]
  - scsi: mpt3sas: Report driver capability as part of IOCINFO command (Shivasharan S) [Orabug: 37878012]
  - scsi: mpt3sas: Add support for MCTP Passthrough commands (Shivasharan S) [Orabug: 37878012]
  - scsi: mpt3sas: Update MPI headers to 02.00.62 version (Shivasharan S) [Orabug: 37878012]
  - scsi: mpt3sas: Fix a locking bug in an error path (Bart Van Assche) [Orabug: 37878012]
  - scsi: mpt3sas: Reduce log level of ignore_delay_remove message to KERN_INFO (Paul Menzel) [Orabug: 37878012]
  - scsi: mpt3sas: Remove unused config functions (Dr. David Alan Gilbert) [Orabug: 37878012]
  - scsi: mpt3sas: Add details to EEDPTagMode error message (Paul Menzel) [Orabug: 37878012]
  - scsi: mpt3sas: Update driver version to 51.100.00.00 (Ranjan Kumar) [Orabug: 37878012]
  - vhost-scsi: log event queue write descriptors (Dongli Zhang) [Orabug: 37883837]
  - vhost-scsi: log control queue write descriptors (Dongli Zhang) [Orabug: 37883837]
  - vhost-scsi: log I/O queue write descriptors (Dongli Zhang) [Orabug: 37883837]
  - vhost-scsi: adjust vhost_scsi_get_desc() to log vring descriptors (Dongli Zhang) [Orabug: 37883837]
  - vhost: modify vhost_log_write() for broader users (Dongli Zhang) [Orabug: 37883837]
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu) [Orabug: 37899161]
  - uek-rpm: Move vmxnet3 to module-core in UEK8 (Harshit Mogalapalli) [Orabug: 37908279]
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre) [Orabug: 37936569]
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37920673]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37920673]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37920673]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37945459] {CVE-2024-28956}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-100.28.1.el9uek]
changelog:
  - KVM: SEV: Add KVM_SEV_SNP_ENABLE_REQ_CERTS command (Michael Roth) [Orabug: 37894105]
  - KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching (Michael Roth) [Orabug: 37894105]
  - Revert "KVM: Introduce KVM_EXIT_SNP_REQ_CERTS for SNP certificate-fetching" (Liam Merwick) [Orabug: 37894105]
  - uek-rpm: Enable SECURITY_DMESG_RESTRICT in UEK8 (Harshit Mogalapalli) [Orabug: 37867042]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-100.28.2.el9uek]
changelog:
  - sched/eevdf: Fix se->slice being set to U64_MAX and resulting crash (Omar Sandoval) [Orabug: 37930100] {CVE-2025-37821}
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967533]
  - Revert "block: sysfs option to change ioticks granularity" (Gulam Mohamed) [Orabug: 37921776]
  - RDS: use pin_user_pages_fast() (Stephen Brennan) [Orabug: 37968545]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-101.31.1.el9uek]
changelog:
  - LTS version: v6.12.31 (Jack Vogel)
  - drm/gem: Internally test import_attach for imported objects (Thomas Zimmermann)
  - x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers (Balbir Singh)
  - i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() (Nathan Chancellor)
  - pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group() (Dan Carpenter)
  - watchdog: aspeed: fix 64-bit division (Arnd Bergmann)
  - drm/amdkfd: Correct F8_MODE for gfx950 (Amber Lin)
  - serial: sh-sci: Save and restore more registers (Geert Uytterhoeven)
  - bpf: abort verification if env->cur_state->loop_entry != NULL (Eduard Zingerman)
  - drm/amd/display: Exit idle optimizations before accessing PHY (Ovidiu Bunea)
  - kbuild: Properly disable -Wunterminated-string-initialization for clang (Nathan Chancellor)
  - Fix mis-uses of 'cc-option' for warning disablement (Linus Torvalds)
  - gcc-15: disable '-Wunterminated-string-initialization' entirely for now (Linus Torvalds)
  - gcc-15: make 'unterminated string initialization' just a warning (Linus Torvalds)
  - err.h: move IOMEM_ERR_PTR() to err.h (Raag Jadav)
  - spi: spi-fsl-dspi: Reset SR flags before sending a new message (Larisa Grigore)
  - spi: spi-fsl-dspi: Halt the module after a new message transfer (Bogdan-Gabriel Roman)
  - spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)
  - spi: use container_of_cont() for to_spi_device() (Greg Kroah-Hartman)
  - platform/x86: think-lmi: Fix attribute name usage for non-compliant items (Mark Pearson)
  - ksmbd: fix stream write failure (Namjae Jeon)
  - Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" (Jernej Skrabec)
  - Bluetooth: btmtksdio: Do close if SDIO card removed without close (Chris Lu)
  - Bluetooth: btmtksdio: Check function enabled before doing close (Chris Lu)
  - nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs() (Ryusuke Konishi)
  - mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled (Ignacio Moreno Gonzalez)
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)
  - memcg: always call cond_resched() after fn() (Breno Leitao)
  - highmem: add folio_test_partial_kmap() (Matthew Wilcox)
  - Input: xpad - add more controllers (Vicki Pfau)
  - Revert "drm/amd: Keep display off while going into S4" (Mario Limonciello)
  - smb: client: Reset all search buffer pointers when releasing buffer (Zhaolong Wang)
  - arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs (Gabor Juhos)
  - smb: client: Fix use-after-free in cifs_fill_dirent (Zhaolong Wang) [Orabug: 38094970] {CVE-2025-38051}
  - drm/edid: fixed the bug that hdr metadata was not reset (Feijuan Li)
  - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature (Zhang Rui)
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin) [Orabug: 38095141] {CVE-2025-38077}
  - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)
  - pmdomain: renesas: rcar: Remove obsolete nullify checks (Geert Uytterhoeven)
  - vmxnet3: update MTU after device quiesce (Ronak Doshi)
  - net: dsa: microchip: linearize skb for tail-tagging switches (Jakob Unterwurzacher)
  - can: kvaser_pciefd: Fix echo_skb race (Axel Forsman)
  - can: kvaser_pciefd: Continue parsing DMA buf after dropped RX (Axel Forsman)
  - llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Gavrilov Ilia)
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10 (Ed Burcher)
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai) [Orabug: 38095145] {CVE-2025-38078}
  - ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction (Peter Ujfalusi)
  - ASoc: SOF: topology: connect DAI to a single DAI link (Kai Vehmanen)
  - ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms (Peter Ujfalusi)
  - ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext (Peter Ujfalusi)
  - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp) [Orabug: 38049369] {CVE-2025-38003}
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp) [Orabug: 38049374] {CVE-2025-38004}
  - can: slcan: allow reception of short error messages (Carlos Sanchez)
  - padata: do not leak refcount in reorder_work (Dominik Grzegorzek) [Orabug: 38094842] {CVE-2025-38031}
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin) [Orabug: 38095153] {CVE-2025-38079}
  - clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe() (André Draszik)
  - octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG (Geetha Sowjanya)
  - octeontx2-af: Set LMT_ENA bit for APR table entries (Subbaraya Sundeep)
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang) [Orabug: 38094978] {CVE-2025-38052}
  - octeontx2-pf: Add AF_XDP non-zero copy support (Suman Ghosh)
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang) [Orabug: 38049357] {CVE-2025-38000}
  - idpf: fix idpf_vport_splitq_napi_poll() (Eric Dumazet)
  - io_uring: fix overflow resched cqe reordering (Pavel Begunkov)
  - net: lan743x: Restore SGMII CTRL register on resume (Thangaraj Samynathan)
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)
  - pinctrl: qcom: switch to devm_register_sys_off_handler() (Dmitry Baryshkov)
  - loop: don't require ->write_iter for writable files in loop_configure (Christoph Hellwig)
  - idpf: fix null-ptr-deref in idpf_features_check (Pavan Kumar Linga) [Orabug: 38094982] {CVE-2025-38053}
  - ice: Fix LACP bonds without SRIOV environment (Dave Ertman)
  - ice: fix vf->num_mac count with port representors (Jacob Keller)
  - bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)
  - ptp: ocp: Limit signal/freq counts in summary output functions (Sagi Maimon) [Orabug: 38094984] {CVE-2025-38054}
  - Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling (En-Wei Wu)
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz)
  - perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq (Adrian Hunter) [Orabug: 38094988] {CVE-2025-38055}
  - irqchip/riscv-imsic: Start local sync timer on correct CPU (Andrew Bresticker)
  - ASoC: SOF: Intel: hda: Fix UAF when reloading module (Tavian Barnes) [Orabug: 38094991] {CVE-2025-38056}
  - devres: Introduce devm_kmemdup_array() (Raag Jadav)
  - driver core: Split devres APIs to device/devres.h (Andy Shevchenko)
  - dmaengine: fsl-edma: Fix return code for unhandled interrupts (Stefan Wahren)
  - dmaengine: idxd: Fix ->poll() return value (Dave Jiang)
  - xfrm: Sanitize marks before insert (Paul Chaignon)
  - clk: sunxi-ng: d1: Add missing divider for MMC mod clocks (Andre Przywara)
  - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators (Matti Lehtimäki)
  - kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork() (David Hildenbrand)
  - x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro (Seongman Lee)
  - dmaengine: idxd: Fix allowing write() from different address spaces (Vinicius Costa Gomes)
  - xfrm: Fix UDP GRO handling for some corner cases (Tobias Brunner)
  - espintcp: remove encap socket caching to avoid reference leak (Sabrina Dubroca)
  - espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094993] {CVE-2025-38057}
  - soundwire: bus: Fix race on the creation of the IRQ domain (Charles Keepax)
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro) [Orabug: 38095000] {CVE-2025-38058}
  - drm/amd/display: Call FP Protect Before Mode Programming/Mode Support (Austin Zheng)
  - xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk)
  - x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88 (Paweł Anikiel) [Orabug: 38094847] {CVE-2025-38033}
  - wifi: iwlwifi: add support for Killer on MTL (Johannes Berg)
  - block: only update request sector if needed (Johannes Thumshirn)
  - tools: ynl-gen: validate 0 len strings from kernel (David Wei)
  - btrfs: avoid NULL pointer dereference if no valid csum tree (Qu Wenruo) [Orabug: 38095010] {CVE-2025-38059}
  - btrfs: handle empty eb->folios in num_extent_folios() (Boris Burkov)
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues) [Orabug: 38094856] {CVE-2025-38034}
  - btrfs: compression: adjust cb->compressed_folios allocation type (Kees Cook)
  - ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers (Stefan Binding)
  - cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function (Pali Rohár)
  - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() (Pali Rohár)
  - io_uring/fdinfo: annotate racy sq/cq head/tail reads (Jens Axboe)
  - nvmet-tcp: don't restore null sk_state_change (Alistair Francis) [Orabug: 38094863] {CVE-2025-38035}
  - ALSA: usb-audio: Fix duplicated name in MIDI substream names (Takashi Iwai)
  - nvme-pci: add quirks for WDC Blue SN550 15b7:5009 (Guan Wentao)
  - nvme-pci: add quirks for device 126f:1001 (Guan Wentao)
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx (Takashi Iwai)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai)
  - ASoC: cs42l43: Disable headphone clamps during type detection (Charles Keepax)
  - platform/x86: ideapad-laptop: add support for some new buttons (Gašper Nemgar)
  - platform/x86: asus-wmi: Disable OOBE state after resume from hibernation (Pavel Nikulin)
  - platform/x86/intel: hid: Add Pantherlake support (Saranya Gopal)
  - smb: server: smb2pdu: check return value of xa_store() (Salah Triki)
  - pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl)
  - book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n (Ritesh Harjani)
  - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() (Chenyuan Yang)
  - drm: Add valid clones check (Jessica Zhang)
  - drm/panel-edp: Add Starry 116KHD024006 (Douglas Anderson)
  - drm/buddy: fix issue that force_merge cannot free all roots (Lin Cao)
  - drm/atomic: clarify the rules around drm_atomic_state->allow_modeset (Simona Vetter)
  - drm/xe: Reject BO eviction if BO is bound to current VM (Oak Zeng)
  - drm/xe/sa: Always call drm_suballoc_manager_fini() (Michal Wajdeczko)
  - wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan event (Ching-Te Ku)
  - drm/xe: Do not attempt to bootstrap VF in execlists mode (Maarten Lankhorst)
  - drm/xe: Move suballocator init to after display init (Maarten Lankhorst)
  - wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation (P Praneesh)
  - drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE (Zhi Wang)
  - drm: bridge: adv7511: fill stream capabilities (Olivier Moysan)
  - wifi: ath12k: Fix end offset bit definition in monitor ring descriptor (P Praneesh)
  - wifi: ath12k: Fetch regdb.bin file from board-2.bin (Aaradhana Sahu)
  - wifi: ath9k: return by of_get_mac_address (Rosen Penev)
  - drm/xe/pf: Reset GuC VF config when unprovisioning critical resource (Michal Wajdeczko)
  - accel/qaic: Mask out SR-IOV PCI resources (Youssef Samir)
  - wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override (Nicolas Escande)
  - regulator: ad5398: Add device tree support (Isaac Scott)
  - spi: zynqmp-gqspi: Always acknowledge interrupts (Sean Anderson)
  - wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet (Ping-Ke Shih)
  - wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue Smith)
  - wifi: rtl8xxxu: retry firmware download on error (Soeren Moch)
  - clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation (Lad Prabhakar)
  - perf/amd/ibs: Fix ->config to sample period calculation for OP PMU (Ravi Bangoria)
  - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Ravi Bangoria)
  - firmware: arm_scmi: Relax duplicate name constraint across protocol ids (Sudeep Holla)
  - bpftool: Fix readlink usage in get_fd_type (Viktor Malik)
  - bpf: Use kallsyms to find the function name of a struct_ops's stub function (Martin Kafai Lau)
  - drm/ast: Find VBIOS mode from regular display size (Thomas Zimmermann)
  - dm vdo: use a short static string for thread name prefix (Matthew Sakai)
  - dm vdo indexer: prevent unterminated string warning (Chung Chung)
  - irqchip/riscv-aplic: Add support for hart indexes (Vladimir Kondratiev)
  - ASoC: rt722-sdca: Add some missing readable registers (Charles Keepax)
  - ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode (Cezary Rojewski)
  - arm64: zynqmp: add clock-output-names property in clock nodes (Naman Trivedi Manojbhai)
  - HID: usbkbd: Fix the bit shift number for LED_KANA (Junan)
  - wifi: ath12k: Avoid napi_sync() before napi_enable() (Avula Sri Charan)
  - scsi: st: Restore some drive settings after reset (Kai Mäkisara)
  - net/mana: fix warning in the writer of client oob (Konstantin Taranov)
  - drm/xe/relay: Don't use GFP_KERNEL for new transactions (Michal Wajdeczko)
  - ice: count combined queues using Rx/Tx count (Michal Swiatkowski)
  - perf: Avoid the read if the count is already updated (Peter Zijlstra)
  - rcu: fix header guard for rcu_all_qs() (Ankur Arora)
  - rcu: handle unstable rdp in rcu_read_unlock_strict() (Ankur Arora)
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora)
  - ice: treat dyn_allowed only as suggestion (Michal Swiatkowski)
  - ice: init flow director before RDMA (Michal Swiatkowski)
  - bridge: mdb: Allow replace of a host-joined group (Petr Machata)
  - net: flush_backlog() small changes (Eric Dumazet)
  - r8169: don't scan PHY addresses > 0 (Heiner Kallweit)
  - ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only (Geert Uytterhoeven)
  - vxlan: Annotate FDB data races (Ido Schimmel) [Orabug: 38094879] {CVE-2025-38037}
  - cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost (Dhananjay Ugwekar) [Orabug: 38094888] {CVE-2025-38038}
  - tools: ynl-gen: don't output external constants (Jakub Kicinski)
  - eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when adding unicast addrs (Alexander Duyck)
  - drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0 (Cristian Ciocaltea)
  - media: qcom: camss: Add default case in vfe_src_pad_code (Depeng Shao)
  - media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available (Depeng Shao)
  - f2fs: introduce f2fs_base_attr for global sysfs entries (Jaegeuk Kim)
  - hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin)
  - tools/power turbostat: Clustered Uncore MHz counters should honor show/hide options (Len Brown)
  - net: page_pool: avoid false positive warning if NAPI was never added (Jakub Kicinski)
  - clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs (Jordan Crouse)
  - wifi: rtw89: call power_on ahead before selecting firmware (Ping-Ke Shih)
  - wifi: rtw89: fw: validate multi-firmware header before accessing (Ping-Ke Shih)
  - wifi: rtw89: fw: validate multi-firmware header before getting its size (Ping-Ke Shih)
  - wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang (Ching-Te Ku)
  - wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU (Bitterblue Smith)
  - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU (Bitterblue Smith)
  - ext4: remove writable userspace mappings before truncating page cache (Zhang Yi)
  - ext4: don't write back data before punch hole in nojournal mode (Zhang Yi)
  - leds: trigger: netdev: Configure LED blink interval for HW offload (Marek Vasut)
  - pstore: Change kmsg_bytes storage size to u32 (Kees Cook)
  - iio: adc: ad7944: don't use storagebits for sizing (David Lechner)
  - r8152: add vendor/device ID pair for Dell Alienware AW1022z (Aleksander Jan Bajkowski)
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima)
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Athira Rajeev)
  - powerpc/pseries/iommu: create DDW for devices with DMA mask less than 64-bits (Gaurav Batra)
  - powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Gaurav Batra)
  - net: fec: Refactor MAC reset to function (Csókás Bence)
  - wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx (Emmanuel Grumbach)
  - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call (Johannes Berg)
  - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() (Johannes Berg)
  - wifi: iwlwifi: don't warn during reprobe (Miri Korenblit)
  - wifi: iwlwifi: use correct IMR dump variable (Johannes Berg)
  - mptcp: pm: userspace: flags: clearer msg if no remote addr (Matthieu Baerts)
  - wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV (P Praneesh)
  - xfrm: prevent high SEQ input in non-ESN mode (Leon Romanovsky)
  - drm/v3d: Add clock handling (Stefan Wahren)
  - net/mlx5e: reduce the max log mpwrq sz for ECPF and reps (William Tu)
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu)
  - net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu)
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar)
  - net/mlx5: XDP, Enable TX side XDP multi-buffer support (Alexei Lazar)
  - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Chaohai Chen)
  - drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer() (Alex Deucher)
  - drm/amdgpu: enlarge the VBIOS binary size limit (Morris Zhang)
  - drm/amdgpu: Use active umc info from discovery (Lijo Lazar)
  - drm/amd/display: Populate register address for dentist for dcn401 (Dillon Varone)
  - drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It (Austin Zheng)
  - drm/amd/display: Increase block_sequence array size (Joshua Aberback) [Orabug: 38095164] {CVE-2025-38080}
  - drm/amd/display: Initial psr_version with correct setting (Tom Chung)
  - drm/amd/display: Update CR AUX RD interval interpretation (George Shen)
  - Revert "drm/amd/display: Exit idle optimizations before attempt to access PHY" (Brandon Syu)
  - drm/amd/display: Support multiple options during psr entry. (Martin Tsai)
  - drm/amd/pm: Skip P2S load for SMU v13.0.12 (Asad Kamal)
  - drm/amdgpu: reset psp->cmd to NULL after releasing the buffer (Jiang Liu)
  - drm/amd/display: Don't try AUX transactions on disconnected link (Ilya Bakoulin)
  - drm/amd/display: pass calculated dram_speed_mts to dml2 (Charlene Liu)
  - drm/amdgpu: Set snoop bit for SDMA for MI series (Harish Kasiviswanathan)
  - drm/amdkfd: fix missing L2 cache info in topology (Eric Huang)
  - drm/amdgpu/mes11: fix set_hw_resources_1 calculation (Alex Deucher)
  - net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size (Huacai Chen)
  - soundwire: cadence_master: set frame shape and divider based on actual clk freq (Bard Liao)
  - soundwire: amd: change the soundwire wake enable/disable sequence (Vijendar Mukunda)
  - phy: exynos5-usbdrd: fix EDS distribution tuning (gs101) (André Draszik)
  - phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov)
  - phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and ROPLL_REF (Damon Ding)
  - pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down (Claudiu Beznea)
  - serial: sh-sci: Update the suspend/resume support (Claudiu Beznea)
  - sched: Reduce the default slice to avoid tasks getting an extra tick (Zihan Zhou)
  - x86/traps: Cleanup and robustify decode_bug() (Peter Zijlstra)
  - x86/ibt: Handle FineIBT in handle_cfi_failure() (Peter Zijlstra)
  - drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set (Shuicheng Lin)
  - drm/xe/debugfs: fixed the return value of wedged_mode_set (Xin Wang)
  - clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate (Krzysztof Kozlowski)
  - clk: qcom: ipq5018: allow it to be bulid on arm32 (Karl Chan)
  - drm/xe: Fix xe_tile_init_noalloc() error propagation (Lucas De Marchi)
  - drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init() (Lucas De Marchi)
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook)
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Sakari Ailus)
  - media: i2c: imx219: Correct the minimum vblanking value (David Plowman)
  - kunit: tool: Use qboot on QEMU x86_64 (Brendan Jackman)
  - smack: Revert "smackfs: Added check catlen" (Konstantin Andreev)
  - smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev)
  - pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron)
  - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() (Kuninori Morimoto)
  - ASoC: tas2764: Power up/down amp on mute ops (Hector Martin)
  - ASoC: tas2764: Mark SW_RESET as volatile (Hector Martin)
  - ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG (Hector Martin)
  - ASoC: ops: Enforce platform maximum on initial value (Martin Povišer)
  - firmware: xilinx: Dont send linux address to get fpga config get status (Siva Durga Prasad Paladugu)
  - firmware: arm_ffa: Handle the presence of host partition in the partition info (Sudeep Holla)
  - firmware: arm_ffa: Reject higher major version as incompatible (Sudeep Holla)
  - net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit)
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit)
  - media: test-drivers: vivid: don't call schedule in loop (Hans Verkuil)
  - irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base (Andrew Jones)
  - hrtimers: Replace hrtimer_clock_to_base_table with switch-case (Andy Shevchenko)
  - vxlan: Join / leave MC group after remote changes (Petr Machata)
  - ACPI: HED: Always initialize before evged (Xiaofei Tan)
  - PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Järvinen)
  - eth: mlx4: don't try to complete XDP frames in netpoll (Jakub Kicinski)
  - bpf: copy_verifier_state() should copy 'loop_entry' field (Eduard Zingerman) [Orabug: 38095018] {CVE-2025-38060}
  - bpf: don't do clean_live_states when state->loop_entry->branches > 0 (Eduard Zingerman)
  - can: c_can: Use of_property_present() to test existence of DT property (Krzysztof Kozlowski)
  - pmdomain: imx: gpcv2: use proper helper for property detection (Ahmad Fatoum)
  - RDMA/core: Fix best page size finding when it can cross SG entries (Michael Margolin)
  - serial: mctrl_gpio: split disable_ms into sync and no_sync APIs (Alexis Lothoré) [Orabug: 38094901] {CVE-2025-38040}
  - drm/amd/display: Don't treat wb connector as physical in create_validate_stream_for_sink (Harry Wentland)
  - Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP" (Leo Zeng)
  - drm/amd/display: Read LTTPR ALPM caps during link cap retrieval (George Shen)
  - drm/amd/display: Fix BT2020 YCbCr limited/full range input (Ilya Bakoulin)
  - drm/amd/display: Guard against setting dispclk low when active (Nicholas Kazlauskas)
  - drm/amd/display: Add support for disconnected eDP streams (Harry Vanzylldejong)
  - drm/amd/pm: Fetch current power limit from PMFW (Lijo Lazar)
  - irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector (Anup Patel)
  - eeprom: ee1004: Check chip before probing (Eddie James)
  - mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs (Chris Morgan)
  - i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA) (Frank Li)
  - EDAC/ie31200: work around false positive build warning (Arnd Bergmann)
  - power: supply: axp20x_battery: Update temp sensor for AXP717 from device tree (Chris Morgan)
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer) [Orabug: 38095024] {CVE-2025-38061}
  - wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU (Kuan-Chung Chen)
  - wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware (Ping-Ke Shih)
  - wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32() (Ping-Ke Shih)
  - wifi: rtw89: fw: propagate error code from rtw89_h2c_tx() (Ping-Ke Shih)
  - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 (Bitterblue Smith)
  - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith)
  - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU (Bitterblue Smith)
  - PCI: epf-mhi: Update device ID for SA8775P (Mrinmay Sarkar)
  - clocksource: mips-gic-timer: Enable counter when CPUs start (Paul Burton)
  - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton)
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jason Gunthorpe) [Orabug: 38095031] {CVE-2025-38062}
  - x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op() (Uros Bizjak)
  - drm/amdgpu: remove all KFD fences from the BO on release (Christian König)
  - MIPS: Use arch specific syscall name match function (Bibo Mao)
  - drm/xe/oa: Ensure that polled read returns latest data (Umesh Nerlige Ramappa)
  - net: ipv6: Init tunnel link-netns before registering dev (Xiao Liang)
  - crypto: skcipher - Zap type in crypto_alloc_sync_skcipher (Herbert Xu)
  - crypto: ahash - Set default reqsize from ahash_alg (Herbert Xu)
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)
  - net/mlx5: Change POOL_NEXT_SIZE define value and make it global (Patrisious Haddad)
  - scsi: scsi_debug: First fixes for tapes (Kai Mäkisara)
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Jinliang Zheng) [Orabug: 38095038] {CVE-2025-38063}
  - libbpf: Fix out-of-bound read (Nandakumar Edamana)
  - loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize (Christoph Hellwig)
  - net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode (Jianbo Liu)
  - media: tc358746: improve calculation of the D-PHY timing registers (Matthias Fend)
  - media: adv7180: Disable test-pattern control on adv7180 (Niklas Söderlund)
  - cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki)
  - vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines (Konstantin Shkolnyy)
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long)
  - ASoC: mediatek: mt8188: Add reference for dmic clocks (Nícolas F R A Prado)
  - ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile (Nícolas F R A Prado)
  - drm/amd/display: Fix mismatch type comparison (Navid Assadian)
  - drm/amd/display: fix dcn4x init failed (Charlene Liu)
  - drm/amd/display: handle max_downscale_src_width fail check (Yihan Zhu)
  - x86/build: Fix broken copy command in genimage.sh when making isoimage (Nir Lichtman)
  - Octeontx2-af: RPM: Register driver with PCI subsys IDs (Hariprasad Kelam)
  - bpf: Search and add kfuncs in struct_ops prologue and epilogue (Amery Hung)
  - soc: ti: k3-socinfo: Do not use syscon helper to build regmap (Andrew Davis)
  - wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band (Ramasamy Kaliappan)
  - bonding: report duplicate MAC address in all situations (Hangbin Liu)
  - net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann)
  - net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only (Eric Woudstra)
  - leds: pwm-multicolor: Add check for fwnode_property_read_u32 (Yuanjun Gong)
  - drm/xe: xe_gen_wa_oob: replace program_invocation_short_name (Daniel Gomez)
  - drm/amdkfd: KFD release_work possible circular locking (Philip Yang)
  - pinctrl: sophgo: avoid to modify untouched bit when setting cv1800 pinconf (Inochi Amaoto)
  - selftests/net: have `gro.sh -t` return a correct exit code (Kevin Krakauer)
  - net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh)
  - drm/xe/pf: Create a link between PF and VF devices (K V P Satyanarayana)
  - drm/xe/vf: Retry sending MMIO request to GUC on timeout error (K V P Satyanarayana)
  - firmware: arm_ffa: Set dma_mask for ffa devices (Viresh Kumar) [Orabug: 38094925] {CVE-2025-38043}
  - PCI: brcmstb: Add a softdep to MIP MSI-X driver (Stanimir Varbanov)
  - PCI: brcmstb: Expand inbound window size up to 64GB (Stanimir Varbanov)
  - wifi: ath12k: Report proper tx completion status to mac80211 (Vinith Kumar R)
  - soc: apple: rtkit: Implement OSLog buffers properly (Hector Martin)
  - soc: apple: rtkit: Use high prio work queue (Janne Grunau)
  - perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters (Rob Herring)
  - fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan)
  - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno)
  - ARM: at91: pm: fix at91_suspend_finish for ZQ calibration (Li Bin)
  - hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein)
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao)
  - clk: imx8mp: inform CCF of maximum frequency of clocks (Ahmad Fatoum)
  - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Ricardo Ribalda)
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Ricardo Ribalda)
  - ublk: complete command synchronously on error (Caleb Sander)
  - block: mark bounce buffering as incompatible with integrity (Christoph Hellwig)
  - drm/rockchip: vop2: Add uv swap for cluster window (Andy Yan)
  - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Kuniyuki Iwashima)
  - scsi: logging: Fix scsi_logging_level bounds (Nicolas Bouchinet)
  - ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7 (Maciej S. Szmigiero)
  - perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type (Saket Kumar Bhaskar)
  - net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer)
  - media: imx335: Set vblank immediately (Paul Elder)
  - iommufd: Disallow allocating nested parent domain with fault ID (Yi Liu)
  - ublk: enforce ublks_max only for unprivileged devices (Uday Shankar)
  - dpll: Add an assertion to check freq_supported_num (Jiasheng Jiang)
  - net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104 (Andrei Botila)
  - net: ethernet: ti: cpsw_new: populate netdev of_node (Alexander Sverdlin)
  - rcu: Fix get_state_synchronize_rcu_full() GP-start detection (Paul E. McKenney)
  - pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" (Artur Weber)
  - media: cx231xx: set device_caps for 417 (Hans Verkuil) [Orabug: 38094934] {CVE-2025-38044}
  - perf/core: Clean up perf_try_init_event() (Peter Zijlstra)
  - drm/amd/display: Request HW cursor on DCN3.2 with SubVP (Aric Cyr)
  - drm/amd/display: Fix p-state type when p-state is unsupported (Dillon Varone)
  - drm/amd/display: Fix DMUB reset sequence for DCN401 (Dillon Varone)
  - drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination (George Shen)
  - drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35 (Nicholas Kazlauskas)
  - drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c (Victor Lu)
  - remoteproc: qcom_wcnss: Handle platforms with only single power domain (Matti Lehtimäki)
  - blk-throttle: don't take carryover for prioritized processing of metadata (Ming Lei)
  - net: phylink: use pl->link_interface in phylink_expects_phy() (Choong Yong Liang)
  - drm/gem: Test for imported GEM buffers with helper (Thomas Zimmermann)
  - orangefs: Do not truncate file size (Matthew Wilcox) [Orabug: 38095056] {CVE-2025-38065}
  - soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables (AngeloGioacchino Del Regno)
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai) [Orabug: 38095063] {CVE-2025-38066}
  - usb: xhci: set page size to the xHCI-supported size (Niklas Neronin)
  - media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring)
  - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel)
  - soc: samsung: include linux/array_size.h where needed (Arnd Bergmann)
  - drm/xe: Retry BO allocation (Matthew Brost)
  - drm/xe: Nuke VM's mapping upon close (Matthew Brost)
  - ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko)
  - rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni)
  - tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() (Eric Dumazet)
  - ALSA: seq: Improve data consistency at polling (Takashi Iwai)
  - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab)
  - arm64: tegra: Resize aperture for the IGX PCIe C5 slot (Jonathan Hunter)
  - arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator (Diogo Ivo)
  - drm/amdgpu: Fix missing drain retry fault the last entry (Emily Deng)
  - drm/amdkfd: Set per-process flags only once cik/vi (Harish Kasiviswanathan)
  - drm/amdkfd: Set per-process flags only once for gfx9/10/11/12 (Harish Kasiviswanathan)
  - crypto: mxs-dcp - Only set OTP_KEY bit for OTP key (Sven Schwermer)
  - crypto: lzo - Fix compression buffer overrun (Herbert Xu) [Orabug: 38095079] {CVE-2025-38068}
  - misc: pci_endpoint_test: Give disabled BARs a distinct error code (Niklas Cassel)
  - PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops (Christian Bruel) [Orabug: 38095087] {CVE-2025-38069}
  - watchdog: aspeed: Update bootstatus handling (Chin-Ting Kuo)
  - cpufreq: tegra186: Share policy per cluster (Aaron Kling)
  - iommu/amd/pgtbl_v2: Improve error handling (Vasant Hegde)
  - coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t (Levi Yun)
  - badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable < 0 (Coly Li)
  - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() (Alexey Klimov)
  - auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" (Andy Shevchenko)
  - gfs2: Check for empty queue in run_queue (Andreas Gruenbacher)
  - drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch (Leon Huang)
  - drm/amd/display: not abort link train when bw is low (Peichen Huang)
  - drm/amd/display: calculate the remain segments for all pipes (Zhikai Zhai)
  - drm/amd/display: remove minimum Dispclk and apply oem panel timing. (Charlene Liu)
  - ipv6: save dontfrag in cork (Willem de Bruijn)
  - wifi: cfg80211: allow IR in 20 MHz configurations (Anjaneyulu)
  - wifi: mac80211_hwsim: Fix MLD address translation (Ilan Peer)
  - wifi: mac80211: fix warning on disconnect during failed ML reconf (Johannes Berg)
  - wifi: iwlwifi: fix the ECKV UEFI variable name (Emmanuel Grumbach)
  - wifi: iwlwifi: mark Br device not integrated (Johannes Berg)
  - wifi: iwlwifi: fix debug actions order (Johannes Berg) [Orabug: 38094942] {CVE-2025-38045}
  - wifi: iwlwifi: w/a FW SMPS mode selection (Daniel Gabay)
  - wifi: iwlwifi: don't warn when if there is a FW error (Miri Korenblit)
  - printk: Check CON_SUSPEND when unblanking a console (Marcos Paulo de Souza)
  - iommu: Keep dev->iommu state consistent (Robin Murphy)
  - hwmon: (dell-smm) Increment the number of fans (Kurt Borja)
  - wifi: iwlwifi: mvm: fix setting the TK when associated (Avraham Stern)
  - usb: xhci: Don't change the status of stalled TDs on failed Stop EP (Michał Pecio)
  - mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd)
  - mmc: dw_mmc: add exynos7870 DW MMC support (Kaustabh Chakraborty)
  - arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (Ryan Roberts)
  - arm64/mm: Check pmd_table() in pmd_trans_huge() (Ryan Roberts)
  - phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the corresponding set flags are set (Andy Yan)
  - PNP: Expand length of fixup id string (Kees Cook)
  - netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet)
  - wifi: rtw89: set force HE TB mode when connecting to 11ax AP (Dian-Syuan Yang)
  - timer_list: Don't use %pK through printk() (Thomas Weißschuh)
  - net: hsr: Fix PRP duplicate detection (Jaakko Karrenpalo)
  - net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe (Jonas Karlman)
  - posix-timers: Ensure that timer initialization is fully visible (Thomas Gleixner)
  - posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet)
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Maher Sanalla)
  - ext4: do not convert the unwritten extents if data writeback fails (Baokun Li)
  - ext4: reject the 'data_err=abort' option in nojournal mode (Baokun Li)
  - clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490 (Taniya Das)
  - ASoC: sun4i-codec: support hp-det-gpios property (Ryan Walklin)
  - drm/amdgpu: Update SRIOV video codec caps (David Rosca)
  - drm/amdgpu/gfx11: don't read registers in mqd init (Alex Deucher)
  - drm/amdgpu/gfx12: don't read registers in mqd init (Alex Deucher)
  - mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check (Shree Ramamoorthy)
  - pinctrl-tegra: Restore SFSEL bit when freeing pins (Prathamesh Shete)
  - xen: Add support for XenServer 6.1 platform device (Frediano Ziglio)
  - net/smc: use the correct ndev to find pnetid by pnetid table (Guangguan Wang)
  - dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka)
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Shashank Gupta)
  - kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf (Masahiro Yamada)
  - kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab)
  - bpf: Allow pre-ordering for bpf cgroup progs (Yonghong Song)
  - ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect (Nícolas F R A Prado)
  - ASoC: pcm6240: Drop bogus code handling IRQ as GPIO (Linus Walleij)
  - spi: spi-mux: Fix coverity issue, unchecked return value (Sergio Perez Gonzalez)
  - erofs: initialize decompression early (Gao Xiang)
  - thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer (Mika Westerberg)
  - objtool: Fix error handling inconsistencies in check() (Josh Poimboeuf)
  - rtc: rv3032: fix EERD location (Alexandre Belloni)
  - tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() (Ilpo Järvinen)
  - jbd2: do not try to recover wiped journal (Jan Kara)
  - PCI: dwc: Use resource start as ioremap() input in dw_pcie_pme_turn_off() (Frank Li)
  - bpf: Return prog btf_id without capable check (Mykyta Yatsenko)
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson)
  - scsi: st: ERASE does not change tape location (Kai Mäkisara)
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Mäkisara)
  - hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure (Al Viro)
  - ext4: reorder capability check last (Christian Göttsche)
  - riscv: Call secondary mmu notifier when flushing the tlb (Alexandre Ghiti)
  - bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set (Shantiprasad Shettar)
  - wifi: mwifiex: Fix HT40 bandwidth issue. (Jeff Chen)
  - um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie)
  - um: Store full CSGSFS and SS register from mcontext (Benjamin Berg)
  - clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug (Nick Hu)
  - dlm: make tcp still work in multi-link env (Heming Zhao)
  - s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste() (Heiko Carstens)
  - i3c: master: svc: Fix missing STOP for master request (Stanley Chu)
  - drm/amdgpu: adjust drm_firmware_drivers_only() handling (Alex Deucher)
  - drm/amd/display: Guard against setting dispclk low for dcn31x (Jing Zhou)
  - drm/amdgpu: release xcp_mgr on exit (Flora Cui)
  - blk-cgroup: improve policy registration error handling (Chen Linxuan)
  - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana)
  - btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Filipe Manana)
  - btrfs: fix non-empty delayed iputs list on unmount due to async workers (Filipe Manana)
  - btrfs: run btrfs_error_commit_super() early (Qu Wenruo)
  - btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone)
  - btrfs: make btrfs_discard_workfn() block_group ref explicit (Boris Burkov)
  - i2c: pxa: fix call balance of i2c->clk handling routines (Vitalii Mordan)
  - i2c: qup: Vote for interconnect bandwidth to DRAM (Stephan Gerhold)
  - x86/mm: Check return value from memblock_phys_alloc_range() (Philip Redkin) [Orabug: 38095101] {CVE-2025-38071}
  - x86/microcode: Update the Intel processor flag scan check (Sohil Mehta)
  - x86/smpboot: Fix INIT delay assignment for extended Intel Families (Sohil Mehta)
  - x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP (Ingo Molnar)
  - x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers (Thomas Huth)
  - wifi: mt76: mt7925: fix fails to enter low power mode in suspend state (Quan Zhou)
  - wifi: mt76: mt7925: load the appropriate CLC data based on hardware type (Ming Yen Hsieh)
  - wifi: mt76: mt7996: revise TXS size (Benjamin Lin)
  - wifi: mt76: mt7996: fix SER reset trigger on WED reset (Rex Lu)
  - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 (Felix Fietkau)
  - cgroup/rstat: avoid disabling irqs for O(num_cpu) (Eric Dumazet)
  - drm/amdgpu: Skip pcie_replay_count sysfs creation for VF (Victor Skvortsov)
  - mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd)
  - staging: vchiq_arm: Create keep-alive thread during probe (Stefan Wahren)
  - pidfs: improve multi-threaded exec and premature thread-group leader exit polling (Christian Brauner)
  - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter) [Orabug: 38095109] {CVE-2025-38072}
  - ext4: on a remount, only log the ro or r/w state when it has changed (Nicolas Bretz)
  - xen/pci: Do not register devices with segments >= 0x10000 (Roger Pau Monné)
  - PCI: vmd: Disable MSI remapping bypass under Xen (Roger Pau Monné)
  - drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12 (Jonathan Kim)
  - drm/amdgpu/discovery: check ip_discovery fw file available (Flora Cui)
  - pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust)
  - tools/build: Don't pass test log files to linker (Ian Rogers)
  - r8169: disable RTL8126 ZRX-DC timeout (Chunhao Lin)
  - PCI: dwc: ep: Ensure proper iteration over outbound map windows (Frank Li)
  - objtool: Properly disable uaccess validation (Josh Poimboeuf)
  - lockdep: Fix wait context check on softirq for PREEMPT_RT (Ryo Takakura)
  - dql: Fix dql->limit value when reset. (Jing Su)
  - Bluetooth: Disable SCO support if READ_VOICE_SETTING is unsupported/broken (Pedro Nishiyama)
  - Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler removal (Sean Wang)
  - thermal/drivers/qoriq: Power down TMU on system suspend (Alice Guo)
  - thermal/drivers/mediatek/lvts: Start sensor interrupts disabled (Nícolas F R A Prado)
  - net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus (Hans-Frieder Vogt)
  - net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards (Hans-Frieder Vogt)
  - mctp: Fix incorrect tx flow invalidation condition in mctp-i2c (Daniel Hsu)
  - ASoC: codecs: wsa883x: Correct VI sense channel mask (Krzysztof Kozlowski)
  - ASoC: codecs: wsa884x: Correct VI sense channel mask (Krzysztof Kozlowski)
  - spi-rockchip: Fix register out of bounds access (Luis de Arquer) [Orabug: 38095173] {CVE-2025-38081}
  - SUNRPC: rpcbind should never reset the port to the value '0' (Trond Myklebust)
  - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust)
  - NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust)
  - cifs: Fix establishing NetBIOS session for SMB2+ connection (Pali Rohár)
  - cifs: add validation check for the fields in smb_aces (Namjae Jeon)
  - cifs: Set default Netbios RFC1001 server name to hostname in UNC (Pali Rohár)
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar)
  - fbcon: Use correct erase colour for clearing in fbcon (Zsolt Kajtar)
  - fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou)
  - riscv: Allow NOMMU kernels to access all of RAM (Samuel Holland)
  - mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus)
  - mailbox: pcc: Use acpi_os_ioremap() instead of ioremap() (Sudeep Holla)
  - tpm: Convert warn to dbg in tpm2_start_auth_session() (Jonathan Mcdowell)
  - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Diogo Ivo)
  - tracing: Mark binary printing functions with __printf() attribute (Andy Shevchenko)
  - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Yi Liu)
  - arm64: Add support for HIP09 Spectre-BHB mitigation (Jinqian Yang)
  - SUNRPC: Don't allow waiting for exiting tasks (Trond Myklebust)
  - NFS: Don't allow waiting for exiting tasks (Trond Myklebust)
  - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Trond Myklebust)
  - io_uring/msg: initialise msg request opcode (Pavel Begunkov)
  - exfat: call bh_read in get_block only when necessary (Sungjong Seo)
  - fuse: Return EPERM rather than ENOSYS from link() (Matt Johnston)
  - smb: client: Store original IO parameters and prevent zero IO sizes (Zhaolong Wang)
  - cifs: Fix negotiate retry functionality (Pali Rohár)
  - cifs: Fix querying and creating MF symlinks over SMB1 (Pali Rohár)
  - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (Pali Rohár)
  - s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log (Tony Krowiak)
  - x86/fred: Fix system hang during S4 resume with FRED enabled (Xin Li) [Orabug: 38094951] {CVE-2025-38047}
  - kconfig: merge_config: use an empty file as initfile (Daniel Gomez)
  - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora (Haoran Jiang)
  - bpf: fix possible endless loop in BPF map iteration (Brandon Kammerdiener)
  - io_uring: don't duplicate flushing in io_req_post_cqe (Pavel Begunkov)
  - block: fix race between set_blocksize and read paths (Darrick J. Wong) [Orabug: 38095117] {CVE-2025-38073}
  - selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure (Ihor Solodrai)
  - drm/amdgpu: Allow P2P access through XGMI (Felix Kuehling)
  - drm/amd/display: Enable urgent latency adjustment on DCN35 (Nicholas Susanto)
  - fs/ext4: use sleeping version of sb_find_get_block() (Davidlohr Bueso)
  - fs/jbd2: use sleeping version of __find_get_block() (Davidlohr Bueso)
  - fs/ocfs2: use sleeping version of __find_get_block() (Davidlohr Bueso)
  - fs/buffer: use sleeping version of __find_get_block() (Davidlohr Bueso)
  - fs/buffer: introduce sleeping flavors for pagecache lookups (Davidlohr Bueso)
  - fs/buffer: split locking for pagecache lookups (Davidlohr Bueso)
  - ima: process_measurement() needlessly takes inode_lock() on MAY_READ (Frederick Lawler)
  - dma-mapping: Fix warning reported for missing prototype (Balbir Singh)
  - net: enetc: refactor bulk flipping of RX buffers to separate function (Vladimir Oltean)
  - vhost_task: fix vhost_task_create() documentation (Stefano Garzarella)
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported (Gao Xu)
  - dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski)
  - mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type (Hans de Goede)
  - intel_th: avoid using deprecated page->mapping, index fields (Lorenzo Stoakes)
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Balbir Singh)
  - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Zhongqiu Han) [Orabug: 38094958] {CVE-2025-38048}
  - scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices (Manish Pandey)
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov) [Orabug: 38095134] {CVE-2025-38075}
  - nvmem: qfprom: switch to 4-byte aligned reads (Dmitry Baryshkov)
  - nvmem: core: update raw_len if the bit reading is required (Dmitry Baryshkov)
  - nvmem: core: verify cell's raw_len (Dmitry Baryshkov)
  - nvmem: core: fix bit offsets of more than one byte (Dmitry Baryshkov)
  - nvmem: rockchip-otp: add rk3576 variant data (Heiko Stuebner)
  - nvmem: rockchip-otp: Move read-offset into variant-data (Heiko Stuebner)
  - cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist (Pengyu Luo)
  - phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off (Claudiu Beznea)
  - phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data (Claudiu Beznea)
  - phy: renesas: rcar-gen3-usb2: Move IRQ request in probe (Claudiu Beznea)
  - i2c: designware: Fix an error handling path in i2c_dw_pci_probe() (Christophe Jaillet)
  - i2c: designware: Use temporary variable for struct device (Andy Shevchenko)
  - drm/amd/display: Defer BW-optimization-blocked DRR adjustments (John Olender)
  - drm/amd/display: Correct timing_adjust_pending flag setting. (Zhongwei)
  - drm/amd/display: Do not enable replay when vtotal update is pending. (Sung-Huai Wang)
  - drm/amd/display: Configure DTBCLK_P with OPTC only for dcn401 (Dillon Varone)
  - LTS version: v6.12.30 (Jack Vogel)
  - drm/amdgpu: fix pm notifier handling (Alex Deucher)
  - phy: tegra: xusb: remove a stray unlock (Dan Carpenter)
  - usb: typec: ucsi: displayport: Fix deadlock (Andrei Kuchynski) [Orabug: 37977018] {CVE-2025-37967}
  - drm/tiny: panel-mipi-dbi: Use drm_client_setup_with_fourcc() (Fabio Estevam)
  - drm/panel-mipi-dbi: Run DRM default client setup (Thomas Zimmermann)
  - drm/fbdev-dma: Support struct drm_driver.fbdev_probe (Thomas Zimmermann)
  - Bluetooth: btnxpuart: Fix kernel panic during FW release (Neeraj Sanjay Kale) [Orabug: 37844459] {CVE-2025-22102}
  - iio: light: opt3001: fix deadlock due to concurrent flag access (Luca Ceresoli) [Orabug: 37977026] {CVE-2025-37968}
  - accel/ivpu: Fix fw log printing (Jacek Lawrynowicz)
  - accel/ivpu: Refactor functions in ivpu_fw_log.c (Jacek Lawrynowicz)
  - accel/ivpu: Reset fw log on cold boot (Tomasz Rusinowicz)
  - accel/ivpu: Rename ivpu_log_level to fw_log_level (Jacek Lawrynowicz)
  - mm/page_alloc: fix race condition in unaccepted memory handling (Kirill A. Shutemov) [Orabug: 38094767] {CVE-2025-38008}
  - drm/xe/gsc: do not flush the GSC worker from the reset path (Daniele Ceraolo Spurio)
  - CIFS: New mount option for cifs.upcall namespace resolution (Ritvik Budhiraja)
  - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Shuai Xue) [Orabug: 38094790] {CVE-2025-38014}
  - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Shuai Xue)
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Shuai Xue) [Orabug: 38094793] {CVE-2025-38015}
  - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Shuai Xue)
  - dmaengine: idxd: Add missing cleanups in cleanup internals (Shuai Xue)
  - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Shuai Xue)
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Shuai Xue)
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Shuai Xue)
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Shuai Xue)
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Yemike Abhilash Chandra)
  - dmaengine: ti: k3-udma: Add missing locking (Ronald Wahl) [Orabug: 38094756] {CVE-2025-38005}
  - mm: userfaultfd: correct dirty flags set for both present and swap pte (Barry Song)
  - net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
  - ring-buffer: Fix persistent buffer when commit page is the reader page (Steven Rostedt)
  - wifi: mt76: disable napi on driver removal (Fedor Pchelkin) [Orabug: 38094770] {CVE-2025-38009}
  - tpm: Mask TPM RC in tpm2_start_auth_session() (Jarkko Sakkinen)
  - spi: tegra114: Use value to check for invalid delays (Aaron Kling)
  - smb: client: fix memory leak during error handling for POSIX mkdir (Jethro Donaldson)
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Steve Siwinski)
  - phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea)
  - phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind (Claudiu Beznea)
  - phy: Fix error handling in tegra_xusb_port_init (Ma Ke)
  - phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking (Wayne Chang) [Orabug: 38094777] {CVE-2025-38010}
  - tracing: samples: Initialize trace_array_printk() with the correct function (Steven Rostedt)
  - ftrace: Fix preemption accounting for stacktrace filter command (Donglin Peng)
  - ftrace: Fix preemption accounting for stacktrace trigger command (Donglin Peng)
  - kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor)
  - Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Michael Kelley)
  - Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Michael Kelley)
  - arm64: dts: rockchip: Remove overdrive-mode OPPs from RK3588J SoC dtsi (Dragan Simic)
  - arm64: dts: amlogic: dreambox: fix missing clkc_audio node (Christian Hewitt)
  - hv_netvsc: Remove rmsg_pgcnt (Michael Kelley)
  - hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Michael Kelley)
  - hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Michael Kelley)
  - dma-buf: insert memory barrier before updating num_fences (Hyejeong Choi)
  - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera (Nicolas Chauvet)
  - ALSA: usb-audio: Add sample rate quirk for Audioengine D1 (Christian Heusel)
  - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang)
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton)
  - gpio: pca953x: fix IRQ storm on system wake up (Emanuele Ghidoli)
  - MAINTAINERS: Update Alexey Makhalov's email address (Alexey Makhalov)
  - drm/amd/display: Avoid flooding unnecessary info messages (Wayne Lin)
  - drm/amd/display: Correct the reply value when AUX write incomplete (Wayne Lin)
  - drm/amdgpu: csa unmap use uninterruptible lock (Philip Yang) [Orabug: 38094779] {CVE-2025-38011}
  - drm/amdgpu: fix incorrect MALL size for GFX1151 (Tim Huang)
  - Revert "drm/amd/display: Hardware cursor changes color when switched to software cursor" (Melissa Wen)
  - btrfs: add back warning for mount option commit values exceeding 300 (Kyoji Ogasawara)
  - btrfs: fix folio leak in submit_one_async_extent() (Boris Burkov)
  - btrfs: fix discard worker infinite loop after disabling discard (Filipe Manana)
  - LoongArch: uprobes: Remove redundant code about resume_era (Tiezhu Yang)
  - LoongArch: uprobes: Remove user_{en,dis}able_single_step() (Tiezhu Yang)
  - LoongArch: Fix MAX_REG_OFFSET calculation (Huacai Chen)
  - LoongArch: Save and restore CSR.CNTC for hibernation (Huacai Chen)
  - LoongArch: Move __arch_cpu_idle() to .cpuidle.text section (Huacai Chen)
  - LoongArch: Prevent cond_resched() occurring within kernel-fpu (Tianyang Zhang)
  - HID: bpf: abort dispatch if device destroyed (Rongrong) [Orabug: 38094796] {CVE-2025-38016}
  - udf: Make sure i_lenExtents is uptodate on inode eviction (Jan Kara)
  - sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator (Tejun Heo) [Orabug: 38094786] {CVE-2025-38012}
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" (Nathan Lynch)
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust)
  - tsnep: fix timestamping with a stacked DSA driver (Gerhard Engleder)
  - net/tls: fix kernel panic when alloc_page failed (Pengtao He) [Orabug: 38094802] {CVE-2025-38018}
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ido Schimmel) [Orabug: 38094804] {CVE-2025-38019}
  - wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request (Kees Cook) [Orabug: 38094788] {CVE-2025-38013}
  - octeontx2-pf: Do not reallocate all ntuple filters (Subbaraya Sundeep)
  - octeontx2-af: Fix CGX Receive counters (Hariprasad Kelam)
  - net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability (Bc-Bocun Chen)
  - octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy (Subbaraya Sundeep)
  - netlink: specs: tc: all actions are indexed arrays (Jakub Kicinski)
  - netlink: specs: tc: fix a couple of attribute names (Jakub Kicinski)
  - drm/xe: Save CTX_TIMESTAMP mmio value instead of LRC value (Umesh Nerlige Ramappa)
  - regulator: max20086: fix invalid memory access (Cosmin Tanislav) [Orabug: 38094833] {CVE-2025-38027}
  - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal)
  - net/mlx5e: Disable MACsec offload for uplink representor profile (Carolina Jubran) [Orabug: 38094808] {CVE-2025-38020}
  - vsock/test: Fix occasional failure in SIOCOUTQ tests (Konstantin Shkolnyy)
  - net: dsa: b53: prevent standalone from trying to forward to other ports (Jonas Gorski)
  - ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven)
  - nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable (Keith Busch)
  - nvme-pci: make nvme_pci_npages_prp() __always_inline (Kees Cook)
  - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean)
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe)
  - ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info (Takashi Iwai)
  - ALSA: seq: Fix delivery of UMP events to group ports (Takashi Iwai)
  - net: mctp: Ensure keys maintain only one ref to corresponding dev (Andrew Jeffery)
  - tests/ncdevmem: Fix double-free of queue array (Cosmin Ratiu)
  - selftests: ncdevmem: Switch to AF_INET6 (Stanislav Fomichev)
  - selftests: ncdevmem: Make client_ip optional (Stanislav Fomichev)
  - selftests: ncdevmem: Unify error handling (Stanislav Fomichev)
  - selftests: ncdevmem: Separate out dmabuf provider (Stanislav Fomichev)
  - selftests: ncdevmem: Redirect all non-payload output to stderr (Stanislav Fomichev)
  - net: mctp: Don't access ifa_index when missing (Matt Johnston)
  - mctp: no longer rely on net->dev_index_head[] (Eric Dumazet)
  - tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing (Hangbin Liu)
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [Orabug: 37998128] {CVE-2025-37992}
  - Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags (Luiz Augusto von Dentz)
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Zhu Yanjun) [Orabug: 38094813] {CVE-2025-38022}
  - spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven)
  - nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094818] {CVE-2025-38023}
  - HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 38094764] {CVE-2025-38007}
  - HID: thrustmaster: fix memory leak in thrustmaster_interrupts() (Qasim Ijaz)
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094827] {CVE-2025-38024}
  - virtio_net: ensure netdev_tx_reset_queue is called on bind xsk for tx (Koichiro Den)
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Koichiro Den)
  - iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner)
  - iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron)
  - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Mathias Nyman)
  - xhci: dbc: Improve performance by removing delay in transfer event polling. (Mathias Nyman)
  - Revert "drm/amd: Stop evicting resources on APUs in suspend" (Alex Deucher)
  - drm/amd: Add Suspend/Hibernate notification callback support (Mario Limonciello)
  - iio: pressure: mprls0025pa: use aligned_s64 for timestamp (David Lechner)
  - iio: chemical: pms7003: use aligned_s64 for timestamp (David Lechner)
  - iio: adc: ad7266: Fix potential timestamp alignment issue. (Jonathan Cameron)
  - KVM: x86/mmu: Prevent installing hugepages when mem attributes are changing (Sean Christopherson)
  - KVM: Add member to struct kvm_gfn_range to indicate private/shared (Isaku Yamahata)
  - uio_hv_generic: Fix sysfs creation path for ring buffer (Naman Jain)
  - tpm: tis: Double the timeout B to 4s (Michal Suchanek)
  - tracing: probes: Fix a possible race in trace_probe_log APIs (Masami Hiramatsu)
  - cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks (Waiman Long)
  - arm64: dts: imx8mp-var-som: Fix LDO5 shutdown causing SD card timeout (Himanshu Bhavani)
  - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede)
  - platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL) (Runhua He)
  - binfmt_elf: Move brk for static PIE even if ASLR disabled (Kees Cook)
  - riscv: dts: sophgo: fix DMA data-width configuration for CV18xx (Ze Huang)
  - drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies (Mario Limonciello)
  - drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC Policies (Mario Limonciello)
  - fs/xattr.c: fix simple_xattr_list to always include security.* xattrs (Stephen Smalley)
  - arm64: dts: rockchip: Assign RT5616 MCLK rate on rk3588-friendlyelec-cm3588 (Tom Vincent)
  - LTS version: v6.12.29 (Jack Vogel)
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (James Morse)
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977004] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976926] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (James Morse)
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (James Morse)
  - arm64: insn: Add support for encoding DSB (James Morse)
  - mm: page_alloc: speed up fallbacks in rmqueue_bulk() (Johannes Weiner)
  - mm: page_alloc: don't steal single pages from biggest buddy (Johannes Weiner)
  - Bluetooth: btmtk: Remove the resetting step before downloading the fw (Hao Qin)
  - Bluetooth: btmtk: Remove resetting mt7921 before downloading the fw (Hao Qin)
  - io_uring: always arm linked timeouts prior to issue (Jens Axboe)
  - rust: clean Rust 1.88.0's `clippy::uninlined_format_args` lint (Miguel Ojeda)
  - rust: allow Rust 1.87.0's `clippy::ptr_eq` lint (Miguel Ojeda)
  - Revert "um: work around sched_yield not yielding in time-travel mode" (Christian Lamparter)
  - do_umount(): add missing barrier before refcount checks in sync case (Al Viro)
  - io_uring/sqpoll: Increase task_work submission batch size (Gabriel Krisman Bertazi)
  - drm/xe/tests/mocs: Hold XE_FORCEWAKE_ALL for LNCF regs (Tejas Upadhyay)
  - drm/xe/tests/mocs: Update xe_force_wake_get() return handling (Himal Prasad Ghimiray)
  - riscv: misaligned: enable IRQs while handling misaligned accesses (Clément Léger)
  - riscv: misaligned: factorize trap handling (Clément Léger)
  - nvme: unblock ctrl state transition for firmware update (Daniel Wagner)
  - drm/panel: simple: Update timings for AUO G101EVN010 (Kevin Baker)
  - loop: Add sanity check for read/write_iter (Lizhi Xu)
  - loop: factor out a loop_assign_backing_file helper (Christoph Hellwig)
  - loop: refactor queue limits updates (Christoph Hellwig)
  - loop: Fix ABBA locking race (Ogawa Hirofumi)
  - loop: Simplify discard granularity calc (John Garry)
  - loop: Use bdev limit helpers for configuring discard (John Garry)
  - riscv: misaligned: Add handling for ZCB instructions (Nylon Chen)
  - MIPS: Fix MAX_REG_OFFSET (Thorsten Blum)
  - iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron)
  - iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64 (Jonathan Cameron)
  - types: Complement the aligned types with signed 64-bit one (Andy Shevchenko)
  - iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer. (Jonathan Cameron)
  - iio: accel: adxl367: fix setting odr for activity time update (Lothar Rubusch)
  - usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler)
  - usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler)
  - usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler)
  - USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum)
  - usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015126] {CVE-2025-37994}
  - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera)
  - usb: misc: onboard_usb_dev: fix support for Cypress HX3 hubs (Lukasz Czechowski)
  - usb: host: tegra: Prevent host controller crash when OTG port is used (Jim Lin)
  - usb: gadget: Use get_status callback to set remote wakeup capability (Prashanth K)
  - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN (Wayne Chang)
  - usb: gadget: f_ecm: Add get_status callback (Prashanth K)
  - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version (Pawel Laszczak)
  - usb: cdnsp: Fix issue with resuming from L1 (Pawel Laszczak)
  - usb: dwc3: gadget: Make gadget_wakeup asynchronous (Prashanth K)
  - x86/microcode: Consolidate the loader enablement checking (Borislav Petkov)
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015131] {CVE-2025-37995}
  - memblock: Accept allocated memory before use in memblock_double_array() (Tom Lendacky) [Orabug: 37976994] {CVE-2025-37960}
  - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej Siewior)
  - arm64: cpufeature: Move arm64_use_ng_mappings to the .data section to prevent wrong idmap generation (Levi Yun)
  - accel/ivpu: Increase state dump msg timeout (Jacek Lawrynowicz)
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976934] {CVE-2025-37949}
  - xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it (John Ernberg)
  - smb: client: Avoid race in open_cached_dir with lease breaks (Paul Aurich) [Orabug: 37976959] {CVE-2025-37954}
  - usb: uhci-platform: Make the clock really optional (Alexey Charkov)
  - drm/amdgpu/hdp7: use memcfg register to post the write for HDP flush (Alex Deucher)
  - drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush (Alex Deucher)
  - drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush (Alex Deucher)
  - drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush (Alex Deucher)
  - drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush (Alex Deucher)
  - drm/amd/display: Copy AUX read reply data whenever length > 0 (Wayne Lin)
  - drm/amd/display: Fix wrong handling for AUX_DEFER case (Wayne Lin)
  - drm/amd/display: Remove incorrect checking in dmub aux handler (Wayne Lin)
  - drm/amd/display: Fix the checking condition in dmub aux handling (Wayne Lin)
  - drm/amd/display: more liberal vmin/vmax update for freesync (Aurabindo Pillai)
  - drm/amd/display: Fix invalid context error in dml helper (Roman Li) [Orabug: 37977185] {CVE-2025-37965}
  - drm/amdgpu/vcn: using separate VCN1_AON_SOC offset (Ruijing Dong)
  - drm/xe: Add page queue multiplier (Matthew Brost)
  - drm/v3d: Add job to pending list if the reset was skipped (Maíra Canal) [Orabug: 37976942] {CVE-2025-37951}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug: 37977031] {CVE-2025-37969}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977037] {CVE-2025-37970}
  - iio: imu: inv_mpu6050: align buffer for timestamp (David Lechner)
  - iio: adis16201: Correct inclinometer channel resolution (Gabriel)
  - iio: adc: rockchip: Fix clock initialization sequence (Simon Xue)
  - iio: adc: ad7606: fix serial register access (Angelo Dureghello)
  - io_uring: ensure deferred completions are flushed for multishot (Jens Axboe)
  - drm/amd/display: Shift DMUB AUX reply command if necessary (Wayne Lin)
  - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception (Mikhail Lobanov) [Orabug: 37976977] {CVE-2025-37957}
  - selftests/mm: fix a build failure on powerpc (Nysal Jan K.A.)
  - selftests/mm: compaction_test: support platform with huge mount of memory (Feng Tang)
  - mm/userfaultfd: fix uninitialized output field for -EAGAIN race (Peter Xu)
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976982] {CVE-2025-37958}
  - mm: fix folio_pte_batch() on XEN PV (Petr Vaněk)
  - x86/mm: Eliminate window where TLB flushes may be inadvertently skipped (Dave Hansen) [Orabug: 37977013] {CVE-2025-37964}
  - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel)
  - staging: axis-fifo: Remove hardware resets for user errors (Gabriel)
  - staging: bcm2835-camera: Initialise dev in v4l2_dev (Dave Stevenson) [Orabug: 37977042] {CVE-2025-37971}
  - staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel)
  - rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros` configuration (Miguel Ojeda)
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.87.0 (Miguel Ojeda)
  - rust: clean Rust 1.88.0's `unnecessary_transmutes` lint (Miguel Ojeda)
  - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg)
  - Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov)
  - Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg)
  - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg)
  - Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena)
  - Input: xpad - fix two controller table values (Vicki Pfau)
  - Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller (Lode Willems)
  - Input: xpad - fix Share button on Xbox One controllers (Vicki Pfau)
  - Input: mtk-pmic-keys - fix possible null pointer dereference (Gary Bisson) [Orabug: 37977044] {CVE-2025-37972}
  - Input: cyttsp5 - fix power control issue on wakeup (Mikael Gonella-Bolduc)
  - Input: cyttsp5 - ensure minimum reset pulse width (Hugo Villeneuve)
  - virtio-net: fix total qstat values (Jakub Kicinski)
  - net: export a helper for adding up queue stats (Jakub Kicinski)
  - fbnic: Do not allow mailbox to toggle to ready outside fbnic_mbx_poll_tx_ready (Alexander Duyck)
  - fbnic: Pull fbnic_fw_xmit_cap_msg use out of interrupt context (Alexander Duyck)
  - fbnic: Improve responsiveness of fbnic_mbx_poll_tx_ready (Alexander Duyck)
  - fbnic: Actually flush_tx instead of stalling out (Alexander Duyck)
  - fbnic: Gate AXI read/write enabling on FW mailbox (Alexander Duyck)
  - fbnic: Fix initialization of mailbox descriptor rings (Alexander Duyck)
  - net: dsa: b53: do not set learning and unicast/multicast on up (Jonas Gorski)
  - net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski)
  - net: dsa: b53: fix toggling vlan_filtering (Jonas Gorski)
  - net: dsa: b53: do not program vlans when vlan filtering is off (Jonas Gorski)
  - net: dsa: b53: do not allow to configure VLAN 0 (Jonas Gorski)
  - net: dsa: b53: always rejoin default untagged VLAN on bridge leave (Jonas Gorski)
  - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave (Jonas Gorski)
  - net: dsa: b53: fix flushing old pvid VLAN on pvid change (Jonas Gorski)
  - net: dsa: b53: fix clearing PVID of a port (Jonas Gorski)
  - net: dsa: b53: keep CPU port always tagged again (Jonas Gorski)
  - net: dsa: b53: allow leaky reserved multicast (Jonas Gorski)
  - bpf: Scrub packet on bpf_redirect_peer (Paul Chaignon) [Orabug: 37976990] {CVE-2025-37959}
  - netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015141] {CVE-2025-37997}
  - ipvs: fix uninit-value for saddr in do_output_route4 (Julian Anastasov) [Orabug: 37976996] {CVE-2025-37961}
  - erofs: ensure the extra temporary copy is valid for shortened bvecs (Gao Xiang)
  - ice: use DSN instead of PCI BDF for ice_adapter index (Przemek Kitszel)
  - ice: Initial support for E825C hardware in ice_adapter (Sergey Temerkhanov)
  - wifi: mac80211: fix the type of status_code for negotiated TID to Link Mapping (Michael-Cy Lee)
  - can: gw: fix RCU/BH usage in cgw_create_job() (Oliver Hartkopp)
  - can: mcp251xfd: fix TDC setting for low data bit rates (Kelsey Maes)
  - can: m_can: m_can_class_allocate_dev(): initialize spin lock on device probe (Antonios Salios) [Orabug: 38015123] {CVE-2025-37993}
  - net: ethernet: mtk_eth_soc: do not reset PSE when setting FE (Frank Wunderlich)
  - net: ethernet: mtk_eth_soc: reset all TX queues on DMA free (Daniel Golle)
  - gre: Fix again IPv6 link-local address generation. (Guillaume Nault)
  - virtio-net: free xsk_buffs on error in virtnet_xsk_pool_enable() (Jakub Kicinski) [Orabug: 37976969] {CVE-2025-37955}
  - virtio_net: xsk: bind/unbind xsk for tx (Xuan Zhuo)
  - sch_htb: make htb_deactivate() idempotent (Cong Wang) [Orabug: 37977176] {CVE-2025-37953}
  - s390/entry: Fix last breaking event handling in case of stack corruption (Heiko Carstens)
  - ksmbd: fix memory leak in parse_lease_state() (Zhaolong Wang) [Orabug: 37977180] {CVE-2025-37962}
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015148] {CVE-2025-37998}
  - ksmbd: Fix UAF in __close_file_table_ids (Sean Heelan) [Orabug: 37976951] {CVE-2025-37952}
  - ksmbd: prevent out-of-bounds stream writes by validating *pos (Norbert Szetei) [Orabug: 37976923] {CVE-2025-37947}
  - ksmbd: prevent rename with empty string (Namjae Jeon) [Orabug: 37976972] {CVE-2025-37956}
  - can: rockchip_canfd: rkcanfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)
  - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Niklas Schnelle) [Orabug: 37976920] {CVE-2025-37946}
  - vfio/pci: Align huge faults to order (Alex Williamson)
  - wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation (Veerendranath Jakkam) [Orabug: 37977046] {CVE-2025-37973}
  - s390/pci: Fix missing check for zpci_create_device() error return (Niklas Schnelle) [Orabug: 37977050] {CVE-2025-37974}
  - can: mcan: m_can_class_unregister(): fix order of unregistration calls (Marc Kleine-Budde)
  - firmware: arm_scmi: Fix timeout checks on polling path (Cristian Marussi)
  - arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2 (Wojciech Dubowik)
  - Revert "btrfs: canonicalize the device path before adding it" (Qu Wenruo)
  - fs/erofs/fileio: call erofs_onlinefolio_split() after bio_add_folio() (Max Kellermann) [Orabug: 38015155] {CVE-2025-37999}
  - dm: add missing unlock on in dm_keyslot_evict() (Dan Carpenter)
  - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM (Zeng Jingxiang) [Orabug: 37480932]
  - dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Vinicius Costa Gomes) [Orabug: 37801355]
  - uek-rpm: build the fwctl mlx5 driver on UEK (Qing Huang) [Orabug: 37810636]
  - fwctl: Adapt upstream code for UEK8 (Mikhael Goikhman) [Orabug: 37810636]
  - mlx5: Create an auxiliary device for fwctl_mlx5 (Saeed Mahameed) [Orabug: 37810636]
  - fwctl/mlx5: Support for communicating with mlx5 fw (Saeed Mahameed) [Orabug: 37810636]
  - fwctl: Add documentation (Jason Gunthorpe) [Orabug: 37810636]
  - fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware (Jason Gunthorpe) [Orabug: 37810636]
  - taint: Add TAINT_FWCTL (Jason Gunthorpe) [Orabug: 37810636]
  - fwctl: FWCTL_INFO to return basic information about the device (Jason Gunthorpe) [Orabug: 37810636]
  - fwctl: Basic ioctl dispatch for the character device (Jason Gunthorpe) [Orabug: 37810636]
  - fwctl: Add basic structure for a class subsystem with a cdev (Jason Gunthorpe) [Orabug: 37810636]
  - Revert "fwctl: Add basic structure for a class subsystem with a cdev" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl: Basic ioctl dispatch for the character device" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl: FWCTL_INFO to return basic information about the device" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl/mlx5: Support for communicating with mlx5 fw" (Qing Huang) [Orabug: 37810636]
  - Revert "mlx5: Create an auxiliary device for fwctl_mlx5" (Qing Huang) [Orabug: 37810636]
  - Revert "taint: Add TAINT_FWCTL" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl: Adapt code for UEK-NEXT" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl/mlx5: Add INTERNAL_DEV_RES uctx capability" (Qing Huang) [Orabug: 37810636]
  - Revert "fwctl: Allow up to 4k devices" (Qing Huang) [Orabug: 37810636]
  - Revert "uek-rpm: build the fwctl mlx5 driver on UEK" (Qing Huang) [Orabug: 37810636]
  - dmaengine: idxd: Change err messages to dbg (Jack Vogel) [Orabug: 37841831]
  - PCI: Add PCI_VDEVICE_SUB helper macro (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbevf: Add support for Intel(R) E610 device (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Enable link management in E610 device (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Clean up the E610 link management related code (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Add ixgbe_x540 multiple header inclusion protection (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Add support for EEPROM dump in E610 device (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Add support for NVM handling in E610 device (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Add link management support for E610 device (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Add support for E610 device capabilities detection (Piotr Kwapulinski) [Orabug: 37889575]
  - ixgbe: Add support for E610 FW Admin Command Interface (Piotr Kwapulinski) [Orabug: 37889575]
  - uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda) [Orabug: 37940897]
  - uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar) [Orabug: 37961540]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani) [Orabug: 37964051]
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [Orabug: 37964051,38037120] {CVE-2025-37866}
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li) [Orabug: 37964051]
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao) [Orabug: 37964051]
  - uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman) [Orabug: 37966384]
  - x86/its: Fix build errors when CONFIG_MODULES=n (Eric Biggers) [Orabug: 37970148]
  - x86/its: Use dynamic thunks for indirect branches (Peter Zijlstra) [Orabug: 37970148]
  - x86/ibt: Keep IBT disabled during alternative patching (Pawan Gupta) [Orabug: 37970148]
  - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 37989268]
  - amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar) [Orabug: 38000074]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-101.33.2.el9uek]
changelog:
  - net: mana: Add support for Multi Vports on Bare metal (Haiyang Zhang) [Orabug: 38052741]
  - tools: hv: Enable debug logs for hv_kvp_daemon (Shradha Gupta) [Orabug: 38052759]
  - LTS version: v6.12.33 (Jack Vogel)
  - Revert "drm/amd/display: more liberal vmin/vmax update for freesync" (Aurabindo Pillai)
  - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Xu Yang)
  - dt-bindings: usb: cypress,hx3: Add support for all variants (Lukasz Czechowski)
  - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky)
  - usb: usbtmc: Fix timeout value in get_stb (Dave Penkler)
  - serial: jsm: fix NPE during jsm_uart_port_init (Dustin Lundquist)
  - Bluetooth: hci_qca: move the SoC type check to the right place (Bartosz Golaszewski)
  - usb: typec: ucsi: fix Clang -Wsign-conversion warning (Qasim Ijaz)
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Charles Yeh)
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie)
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li)
  - Revert "cpufreq: tegra186: Share policy per cluster" (Jonathan Hunter)
  - block: fix adding folio to bio (Ming Lei) [Orabug: 37844657] {CVE-2025-22122}
  - PCI/ASPM: Disable L1 before disabling L1 PM Substates (Ajay Agarwal)
  - accel/ivpu: Update power island delays (Karol Wachowski)
  - accel/ivpu: Add initial Panther Lake support (Maciej Falkowski)
  - rtc: Fix offset calculation for .start_secs < 0 (Alexandre Mergnat)
  - rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat)
  - Documentation: ACPI: Use all-string data node references (Sakari Ailus)
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Gautham R. Shenoy)
  - pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos)
  - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 (Gabor Juhos)
  - f2fs: fix to avoid accessing uninitialized curseg (Chao Yu) [Orabug: 37844644] {CVE-2025-22123}
  - tracing: Fix compilation warning on arm32 (Pan Taixi)
  - LTS version: v6.12.32 (Jack Vogel)
  - ksmbd: use list_first_entry_or_null for opinfo_get_list() (Namjae Jeon)
  - net: ethernet: ti: am65-cpsw: Lower random mac address error print to info (Nishanth Menon)
  - platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)
  - ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform (Kailang Yang)
  - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)
  - NFS: Avoid flushing data while holding directory locks in nfs_rename() (Trond Myklebust)
  - char: tpm: tpm-buf: Add sanity check fallback in read helpers (Purva Yeshi)
  - drm/xe: Save the gt pointer in lrc and drop the tile (Umesh Nerlige Ramappa)
  - drm/xe/xe2hpg: Add Wa_22021007897 (Aradhya Bhatia)
  - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Ilya Guterman)
  - spi: spi-sun4i: fix early activation (Alessandro Grassi)
  - phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error (Algea Cao)
  - phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure (Hal Feng)
  - drm/amd/display: check stream id dml21 wrapper to get plane_id (Aurabindo Pillai)
  - drm/amd/display: fix link_set_dpms_off multi-display MST corner case (George Shen)
  - gpio: virtuser: fix potential out-of-bound write (Markus Burri) [Orabug: 38095181] {CVE-2025-38082}
  - um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada)
  - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau)
  - nfs: don't share pNFS DS connections between net namespaces (Jeff Layton)
  - HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera)
  - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Purva Yeshi)
  - coredump: hand a pidfd to the usermode coredump helper (Christian Brauner)
  - coredump: fix error handling for replace_fd() (Christian Brauner)
  - perf/arm-cmn: Add CMN S3 ACPI binding (Robin Murphy)
  - perf/arm-cmn: Initialise cmn->cpu earlier (Robin Murphy)
  - perf/arm-cmn: Fix REQ2/SNP2 mixup (Robin Murphy)
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela) [Orabug: 38049363] {CVE-2025-38001}
  - arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of serdes_ln_ctrl (Siddharth Vadapalli)
  - arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1" (Siddharth Vadapalli)
  - arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1" (Siddharth Vadapalli)
  - arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219 (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219 overlay (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 (Judith Mendez)
  - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219 overlay (Yemike Abhilash Chandra)
  - arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to default (Judith Mendez)
  - arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default (Judith Mendez)
  - arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default (Judith Mendez)
  - arm64: dts: qcom: x1e80100: Fix video thermal zone (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on (Johan Hovold)
  - arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on (Johan Hovold)
  - arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
  - arm64: dts: qcom: sm8650: Add missing properties for cryptobam (Stephan Gerhold)
  - arm64: dts: qcom: sm8550: Add missing properties for cryptobam (Stephan Gerhold)
  - arm64: dts: qcom: sm8450: Add missing properties for cryptobam (Stephan Gerhold)
  - arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node (Alok Tiwari)
  - arm64: dts: qcom: sa8775p: Remove cdsp compute-cb@10 (Karthik Sanagavarapu)
  - arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property (Ling Xu)
  - arm64: dts: qcom: ipq9574: Add missing properties for cryptobam (Stephan Gerhold)
  - can: kvaser_pciefd: Force IRQ edge in case of nested IRQ (Axel Forsman)
  - RDMA/bnxt_re: Remove unusable nq variable (Leon Romanovsky) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix budget handling of notification queue (Kashyap Desai) [Orabug: 37822348]
  - bnxt_en: Add FW trace coredump segments to the coredump (Shruti Parab) [Orabug: 37822348]
  - bnxt_en: Add a new ethtool -W dump flag (Michael Chan) [Orabug: 37822348]
  - bnxt_en: Add 2 parameters to bnxt_fill_coredump_seg_hdr() (Shruti Parab) [Orabug: 37822348]
  - bnxt_en: Add functions to copy host context memory (Sreekanth Reddy) [Orabug: 37822348]
  - bnxt_en: Do not free FW log context memory (Hongguang Gao) [Orabug: 37822348]
  - bnxt_en: Manage the FW trace context memory (Shruti Parab) [Orabug: 37822348]
  - bnxt_en: Allocate backing store memory for FW trace logs (Shruti Parab) [Orabug: 37822348]
  - bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348]
  - bnxt_en: Refactor bnxt_free_ctx_mem() (Hongguang Gao) [Orabug: 37822348]
  - bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type (Shruti Parab) [Orabug: 37822348]
  - bnxt_en: refactor bnxt_alloc_rx_rings() to call bnxt_alloc_rx_agg_bmap() (David Wei) [Orabug: 37822348]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Daniel Xu) [Orabug: 37822348]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Daniel Xu) [Orabug: 37822348]
  - bnxt_en: use irq_update_affinity_hint() (Mohammad Heib) [Orabug: 37822348]
  - bnxt_en: add unlocked version of bnxt_refclk_read (Vadim Fedorenko) [Orabug: 37822348]
  - bnxt_en: replace PTP spinlock with seqlock (Vadim Fedorenko) [Orabug: 37822348]
  - bnxt_en: cache only 24 bits of hw counter (Vadim Fedorenko) [Orabug: 37822348]
  - bnxt_en: Update firmware interface spec to 1.10.3.85 (Michael Chan) [Orabug: 37822348]
  - bnxt_en: Skip reading PXP registers during ethtool -d if unsupported (Michael Chan) [Orabug: 37822348]
  - bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (Michael Chan) [Orabug: 37822348]
  - bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (Michael Chan) [Orabug: 37822348]
  - bnxt_en: Do not allow ethtool -m on an untrusted VF (Michael Chan) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix reporting maximum SRQs on P7 chips (Preethi G) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix allocation of QP table (Kashyap Desai) [Orabug: 37822348]
  - RDMA/bnxt_re: Remove deliver net device event (Yuyu Li) [Orabug: 37822348]
  - RDMA/bnxt_re: Remove unnecessary goto in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Remove extra new line in bnxt_re_netdev_event (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Optimize error handling in bnxt_re_probe (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix an issue in bnxt_re_async_notifier (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Pass the context for ulp_irq_stop (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Add support to handle DCB_CONFIG_CHANGE event (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Query firmware defaults of CC params during probe (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Add Async event handling support (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Remove unnecessary header file inclusion (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Eliminate need for some forward declarations (Kalesh Ap) [Orabug: 37822348]
  - bnxt_en: Add ULP call to notify async events (Michael Chan) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix issue in the unload path (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix setting mandatory attributes for modify_qp (Damodharam Ammepalli) [Orabug: 37822348]
  - RDMA/bnxt_re: Don't fail destroy QP and cleanup debugfs earlier (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Use the default mode of congestion control (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Support different traffic class (Chandramohan Akula) [Orabug: 37822348]
  - RDMA/bnxt_re: Refurbish CQ to NQ hash calculation (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Enhance RoCE SRIOV resource configuration design (Bhargava Chenna Marreddy) [Orabug: 37822348]
  - bnxt_en: Add support for RoCE sriov configuration (Vikas Gupta) [Orabug: 37822348]
  - RDMA/bnxt_re: Add debugfs hook in the driver (Kalesh Ap) [Orabug: 37822348]
  - RDMA/bnxt_re: Support raw data query for each resources (Kashyap Desai) [Orabug: 37822348]
  - RDMA/bnxt_re: Add support for querying HW contexts (Kashyap Desai) [Orabug: 37822348]
  - RDMA/bnxt_re: Support driver specific data collection using rdma tool (Kashyap Desai) [Orabug: 37822348]
  - RDMA/bnxt_re: Fix access flags for MR and QP modify (Hongguang Gao) [Orabug: 37822348]
  - RDMA/bnxt_re: Add support for CQ rx coalescing (Chandramohan Akula) [Orabug: 37822348]
  - RDMA/bnxt_re: Add support for optimized modify QP (Kalesh Ap) [Orabug: 37822348]
  - mm/memcontrol: Fix LRU reparenting logic when !MGLRU (Kamalesh Babulal) [Orabug: 37920452]
  - mm: multi-gen LRU: skip rotation of offlined memcgs (Harry Yoo) [Orabug: 37997501]
  - mm: lru: move VM_WARN_ON_ONCE_FOLIO before MGLRU functions (Harry Yoo) [Orabug: 37997580]
  - mm: thp: replace folio_memcg() with folio_memcg_charged() (Muchun Song) [Orabug: 37997580]
  - mm: zswap: prevent lruvec release in zswap_folio_swapin() (Muchun Song) [Orabug: 37997580]
  - mm: workingset: prevent lruvec release in workingset_refault() (Muchun Song) [Orabug: 37997580]
  - mm: page_io: prevent memory cgroup release in page_io module (Muchun Song) [Orabug: 37997580]
  - mm: workingset: prevent memory cgroup release in lru_gen_eviction() (Muchun Song) [Orabug: 37997580]
  - writeback: prevent memory cgroup release in writeback module (Muchun Song) [Orabug: 37997580]
  - mm: memcontrol: protect lruvec critical section with the RCU read lock (Harry Yoo) [Orabug: 37997580]
  - mm: vmscan: disable IRQ before __mod_lruvec_state() (Harry Yoo) [Orabug: 37997618]
  - mm: multi-gen LRU: fix two warnings in evict_folios() (Harry Yoo) [Orabug: 37997618]
  - mm: multi-gen LRU: update lrugen->nr_pages during lruvec reparenting (Harry Yoo) [Orabug: 37997618]
  - ocfs2: fix the issue with discontiguous allocation in the global_bitmap (Heming Zhao) [Orabug: 38041352]
  - Reapply "ocfs2: fix sparse warnings" (Gautham Ananthakrishna) [Orabug: 38041352]
  - Reapply "ocfs2: speed up chain-list searching" (Gautham Ananthakrishna) [Orabug: 38041352]
  - Reapply "ocfs2: adjust enabling place for la window" (Gautham Ananthakrishna) [Orabug: 38041352]
  - Reapply "ocfs2: improve write IO performance when fragmentation is high" (Gautham Ananthakrishna) [Orabug: 38041352]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-101.33.3.el9uek]
changelog:
  - mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug: 38029049]
  - mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 38029049]
  - Enable EROFS modules and related config options (Harshit Mogalapalli) [Orabug: 38042713]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-101.33.4.el9uek]
changelog:
  - rds: ib: Add cm_id generation scheme in order to detect new ones (Håkon Bugge)  [Orabug: 37617972]
  - uek-rpm: Enable the FWCTL PDS and CXL support in UEK8 (Qing Huang)  [Orabug: 38006732]
  - cxl/feature: Update out_len in set feature failure case (Li Ming)  [Orabug: 38006732]
  - cxl: Fix devm host device for CXL fwctl initialization (Dave Jiang)  [Orabug: 38006732]
  - fwctl/cxl: Fix uuid_t usage in uapi (Dan Williams)  [Orabug: 38006732]
  - pds_fwctl: add Documentation entries (Shannon Nelson)  [Orabug: 38006732]
  - pds_fwctl: add rpc and query support (Brett Creeley)  [Orabug: 38006732]
  - pds_fwctl: initial driver framework (Shannon Nelson)  [Orabug: 38006732]
  - pds_core: add new fwctl auxiliary_device (Shannon Nelson)  [Orabug: 38006732]
  - cxl: Fixup kdoc issues for include/cxl/features.h (Dave Jiang)  [Orabug: 38006732]
  - fwctl/cxl: Add documentation to FWCTL CXL (Dave Jiang)  [Orabug: 38006732]
  - cxl/test: Add Set Feature support to cxl_test (Dave Jiang)  [Orabug: 38006732]
  - cxl/test: Add Get Feature support to cxl_test (Dave Jiang)  [Orabug: 38006732]
  - cxl: Add support to handle user feature commands for set feature (Dave Jiang)  [Orabug: 38006732]
  - cxl: Add support to handle user feature commands for get feature (Dave Jiang)  [Orabug: 38006732]
  - cxl: Add support for fwctl RPC command to enable CXL feature commands (Dave Jiang)  [Orabug: 38006732]
  - cxl: Move cxl feature command structs to user header (Dave Jiang)  [Orabug: 38006732]
  - cxl: Add FWCTL support to CXL (Dave Jiang)  [Orabug: 38006732]
  - cxl: Setup exclusive CXL features that are reserved for the kernel (Dave Jiang)  [Orabug: 38006732]
  - cxl/mbox: Add SET_FEATURE mailbox command (Shiju Jose)  [Orabug: 38006732]
  - cxl/mbox: Add GET_FEATURE mailbox command (Shiju Jose)  [Orabug: 38006732]
  - cxl/test: Add Get Supported Features mailbox command support (Dave Jiang)  [Orabug: 38006732]
  - cxl: Add Get Supported Features command for kernel usage (Dave Jiang)  [Orabug: 38006732]
  - cxl: Enumerate feature commands (Dave Jiang)  [Orabug: 38006732]
  - cxl: Refactor user ioctl command path from mds to mailbox (Dave Jiang)  [Orabug: 38006732]
  - vhost-scsi: Fix log flooding with target does not exist errors (Mike Christie)  [Orabug: 38053075]
  - vhost-scsi: Change def inline_sg_cnt and max_io_vqs for exadata (Mike Christie)  [Orabug: 38053233]
  - sched/numa: add tracepoint that tracks the skipping of numa balancing due to cpuset memory pinning (Libo Chen)  [Orabug: 38070168]
  - sched/numa: skip VMA scanning on memory pinned to one NUMA node via cpuset.mems (Libo Chen)  [Orabug: 38070168]
  - uek-rpm: Enable CONFIG_SERIAL_RP2 as m (Samasth Norway Ananda)  [Orabug: 38091733]
  - serial: update the rp2 driver code (Samasth Norway Ananda)  [Orabug: 38091733]


