Name: | kernel-uek-container |
---|---|
Version: | 5.15.0 |
Release: | 308.178.1.el8uek |
Architecture: | aarch64 |
Group: | Development/System |
Size: | 112090128 |
License: | GPLv2 |
RPM: | kernel-uek-container-5.15.0-308.178.1.el8uek.aarch64.rpm |
Source RPM: | kernel-uek-5.15.0-308.178.1.el8uek.src.rpm |
Build Date: | Wed Mar 26 2025 |
Build Host: | build-ol8-aarch64.oracle.com |
Vendor: | Oracle America |
URL: | http://www.kernel.org/ |
Summary: | The Linux kernel optimized for running inside a container |
Description: | Container kernel |
- perf dso: fix dso__is_kallsyms() check (Stephen Brennan) [Orabug: 37709864] - scsi: storvsc: Set correct data length for sending SCSI command without payload (Long Li) [Orabug: 37681137] - dyndbg: export ddebug_add_module/ddebug_remove_module (Julian Pidancet) [Orabug: 37629344] - kallsyms: add module_kallsyms_on_each_symbol_locked (Julian Pidancet) [Orabug: 37629344] - kallsyms: export module_kallsyms_on_each_symbol (Julian Pidancet) [Orabug: 37629344] - rds: ib: Make traffic_class visible to user-space (Håkon Bugge) [Orabug: 37350892] - rds: ib: Remove incorrect update of the path record sl and qos_class fields (Håkon Bugge) [Orabug: 37350892] - selftest/vm: Add -O2 in CFLAGS to Makefile to avoid possible failure (Yifei Liu) [Orabug: 37197150]
- net/mlx5: DR, prevent potential error pointer dereference (Dan Carpenter) [Orabug: 37434242] {CVE-2024-56660} - uek-rpm: Set CONFIG_IP6_NF_IPTABLES for ol9/ol8 container kernels (Jonah Palmer) [Orabug: 37703179] - net: hsr: fix fill_frame_info() regression vs VLAN packets (Eric Dumazet) - f2fs: Introduce linear search for dentries (Daniel Lee) - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind (Marco Leogrande) - net: loopback: Avoid sending IP packets without an Ethernet header (Ido Schimmel) - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0 (Andrew Cooper) - sched: sch_cake: add bounds checks to host bulk flow fairness counts (Toke Høiland-Jørgensen) - usb: atm: cxacru: fix a flaw in existing endpoint checks (Nikita Zhandarovich) - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx (Juergen Gross) - x86/xen: add FRAME_END to xen_hypercall_hvm() (Juergen Gross) - ocfs2: fix incorrect CPU endianness conversion causing mount failure (Heming Zhao) - usb: dwc3: Set SUSPENDENABLE soon after phy init (Thinh Nguyen) - Revert "btrfs: avoid monopolizing a core when activating a swap file" (Koichiro Den) - Revert "media: uvcvideo: Require entities to have a non-zero unique ID" (Thadeu Lima de Souza Cascardo) - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog() (Cong Wang)
- LTS version: v5.15.178 (Vijayendra Suman) - Input: xpad - add support for wooting two he (arm) (Jack Greiner) - Input: xpad - add unofficial Xbox 360 wireless receiver clone (Nilton Perim Neto) - Input: atkbd - map F23 key to support default copilot shortcut (Mark Pearson) - ALSA: usb-audio: Add delay quirk for USB Audio Device (Lianqin Hu) - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb() (Qasim Ijaz) - wifi: iwlwifi: add a few rate index validity checks (Anjaneyulu) - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service (Easwar Hariharan) - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Ido Schimmel) - platform/chrome: cros_ec_typec: Check for EC driver (Akihiko Odaki) - fs/ntfs3: Additional check in ntfs_file_release (Konstantin Komarov) - Bluetooth: RFCOMM: Fix not validating setsockopt user input (Luiz Augusto von Dentz) - Bluetooth: SCO: Fix not validating setsockopt user input (Luiz Augusto von Dentz) - vfio/platform: check the bounds of read/write syscalls (Alex Williamson) - net: sched: fix ets qdisc OOB Indexing (Jamal Hadi Salim) - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag (Andreas Gruenbacher) - mptcp: don't always assume copied data in mptcp_cleanup_rbuf() (Paolo Abeni) - regmap: detach regmap from dev on regmap_exit (Cosmin Tanislav) - ASoC: samsung: Add missing depends on I2C (Charles Keepax) - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag (Philippe Simons) - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request (Xiang Zhang) - seccomp: Stub for !CONFIG_SECCOMP (Linus Walleij) - ASoC: samsung: Add missing selects for MFD_WM8994 (Charles Keepax) - ASoC: wm8994: Add depends on MFD core (Charles Keepax)
- jbd2: increase maximum transaction size (Jan Kara) [Orabug: 37688920] - net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled (Carolina Jubran) [Orabug: 37534698] - net/mlx5e: Always start IPsec sequence number from 1 (Leon Romanovsky) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: Add support for clock_measure performance block (Shravan Kumar Ramani) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: Add support for monitoring cycle count (Shravan Kumar Ramani) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: incorrect type in assignment (Pei Xiao) [Orabug: 37534698] - net/mlx5e: Disable loopback self-test on multi-PF netdev (Carolina Jubran) [Orabug: 37534698] - net/mlx5: Unregister notifier on eswitch init failure (Cosmin Ratiu) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling (Michal Wilczynski) [Orabug: 37534698] - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice (Jianbo Liu) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: fix lockdep warning (Luiz Capitulino) [Orabug: 37534698] - net/mlx5: Fix bridge mode operations when there are no VFs (Benjamin Poirier) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: Add hw_reset() support for BlueField-3 SoC (Liming Sun) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: add dwcmshc_pltfm_data (Chen Wang) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: factor out code into dwcmshc_rk35xx_init (Chen Wang) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: factor out code for th1520_init() (Chen Wang) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: move two rk35xx functions (Chen Wang) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: add common bulk optional clocks support (Chen Wang) [Orabug: 37534698] - net/mlx5e: Take state lock during tx timeout reporter (Dragos Tatulea) [Orabug: 37534698] - net/mlx5: SD, Do not query MPIR register if no sd_group (Tariq Toukan) [Orabug: 37534698] - net/mlx5: Always drain health in shutdown callback (Shay Drory) [Orabug: 37534698] - mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Liming Sun) [Orabug: 37534698] - mmc: dw_mmc: Add support for platform specific eMMC HW reset (Liming Sun) [Orabug: 37534698] - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Dragos Tatulea) [Orabug: 37534698] - net/mlx5e: SHAMPO, Fix incorrect page release (Dragos Tatulea) [Orabug: 37534698] - net/mlx5: Do not query MPIR on embedded CPU function (Tariq Toukan) [Orabug: 37534698] - net/mlx5: Reload only IB representors upon lag disable/enable (Maher Sanalla) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: Add tuning support for Sophgo CV1800B and SG200X (Jisheng Zhang) [Orabug: 37534698] - macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst (Rahul Rameshbabu) [Orabug: 37534698] - macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads (Rahul Rameshbabu) [Orabug: 37534698] - net/mlx5e: Prevent deadlock while disabling aRFS (Carolina Jubran) [Orabug: 37534698] - net/mlx5e: Use channel mdev reference instead of global mdev instance for coalescing (Rahul Rameshbabu) [Orabug: 37534698] - net/mlx5: SD, Handle possible devcom ERR_PTR (Tariq Toukan) [Orabug: 37534698] - net/mlx5: Disallow SRIOV switchdev mode when in multi-PF netdev (Tariq Toukan) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: Implement SDHCI CQE support (Sergey Khimich) [Orabug: 37534698] - mmc: cqhci: Add cqhci set_tran_desc() callback (Sergey Khimich) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: fix signedness bugs (Dan Carpenter) [Orabug: 37534698] - net/mlx5e: Create EN core HW resources for all secondary devices (Tariq Toukan) [Orabug: 37534698] - net/mlx5e: Create single netdev per SD group (Tariq Toukan) [Orabug: 37534698] - net/mlx5: SD, Add debugfs (Tariq Toukan) [Orabug: 37534698] - net/mlx5: SD, Add informative prints in kernel log (Tariq Toukan) [Orabug: 37534698] - net/mlx5: SD, Implement steering for primary and secondaries (Tariq Toukan) [Orabug: 37534698] - net/mlx5: SD, Implement devcom communication and primary election (Tariq Toukan) [Orabug: 37534698] - net/mlx5: SD, Implement basic query and instantiation (Tariq Toukan) [Orabug: 37534698] - net/mlx5: SD, Introduce SD lib (Tariq Toukan) [Orabug: 37534698] - net/mlx5: Add MPIR bit in mcam_access_reg (Tariq Toukan) [Orabug: 37534698] - lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg (David Gow) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: Ignore unsupported performance blocks (Luiz Capitulino) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: mlxbf_pmc_event_list(): make size ptr optional (Luiz Capitulino) [Orabug: 37534698] - mmc: sdhci-of-dwcmshc: Add support for Sophgo CV1800B and SG2002 (Jisheng Zhang) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up (Shravan Kumar Ramani) [Orabug: 37534698] - platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types (Shravan Kumar Ramani) [Orabug: 37534698] - net: macsec: revert the MAC address if mdo_upd_secy fails (Radu Pirea (NXP OSS)) [Orabug: 37534698] - net: macsec: documentation for macsec_context and macsec_ops (Radu Pirea (NXP OSS)) [Orabug: 37534698] - fortify: Do not cast to "unsigned char" (Kees Cook) [Orabug: 37534698] - fortify: Use SIZE_MAX instead of (size_t)-1 (Kees Cook) [Orabug: 37534698] - fortify: Fix __compiletime_strlen() under UBSAN_BOUNDS_LOCAL (Kees Cook) [Orabug: 37534698] - mmc: dw_mmc: Add driver callbacks for data read timeout (Mårten Lindahl) [Orabug: 37534698] - mmc: dw_mmc-exynos: Add support for ARTPEC-8 (Mårten Lindahl) [Orabug: 37534698] - mmc: dw_mmc: clean up a debug message (Dan Carpenter) [Orabug: 37534698] - mmc: dw_mmc: exynos: use common_caps (John Keeping) [Orabug: 37534698] - mmc: dw_mmc: add common capabilities to replace caps (John Keeping) [Orabug: 37534698] - mmc: dw_mmc: Allow lower TMOUT value than maximum (Mårten Lindahl) [Orabug: 37534698] - rds: Make sure transmit path and connection tear-down does not run concurrently (Håkon Bugge) [Orabug: 36441944] - ice: always add legacy 32byte RXDID in supported_rxdids (Michal Schmidt) [Orabug: 36252756] - ice: virtchnl rss hena support (Md Fahad Iqbal Polash) [Orabug: 36252756] - ice: Add support Flex RXD (Michal Jaron) [Orabug: 36252756]
- uek-rpm: Enable CONFIG_MICROSOFT_MANA as module in aarch64 (Vijayendra Suman) [Orabug: 37647393] - rtc: add new RTC_FEATURE_ALARM_WAKEUP_ONLY feature (Alexandre Belloni) [Orabug: 37631796] - thermal: core: Drop excessive lockdep_assert_held() calls (Rafael J. Wysocki) [Orabug: 37631796] - thermal: core: Introduce thermal_cooling_device_update() (Rafael J. Wysocki) [Orabug: 37631796] - thermal: core: Introduce thermal_cooling_device_present() (Rafael J. Wysocki) [Orabug: 37631796] - thermal: sysfs: Reuse cdev->max_state (Viresh Kumar) [Orabug: 37631796] - rtc: efi: Enable SET/GET WAKEUP services as optional (Shanker Donthineni) [Orabug: 37631796] - rtc: efi: Add wakeup support (Riwen Lu) [Orabug: 37631796] - rtc: efi: switch to RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni) [Orabug: 37631796] - rtc: add BSM parameter (Alexandre Belloni) [Orabug: 37631796] - rtc: add correction parameter (Alexandre Belloni) [Orabug: 37631796] - rtc: add parameter ioctl (Alexandre Belloni) [Orabug: 37631796] - rtc: expose correction feature (Alexandre Belloni) [Orabug: 37631796] - rtc: add alarm related features (Alexandre Belloni) [Orabug: 37631796] - rtc: efi: switch to devm_rtc_allocate_device (Alexandre Belloni) [Orabug: 37631796] - cgroup: Make operations on the cgroup root_list RCU safe (Yafang Shao) [Orabug: 37621589] - rds: ib: Avoid sleeping function inside RCU region by using sampled values instead (Håkon Bugge) [Orabug: 37586089] - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips (Michael Chan) [Orabug: 37434220] {CVE-2024-56656} - bnxt_en: Fix receive ring space parameters when XDP is active (Shravya KN) [Orabug: 37433562] {CVE-2024-53209} - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Aleksandr Mishin) [Orabug: 37070333] {CVE-2024-40919} - bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init() (Vikas Gupta) [Orabug: 37070270] {CVE-2024-35972} - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Somnath Kotur) [Orabug: 37070266] {CVE-2024-44984}
- nvmet: always initialize cqe.result (Daniel Wagner) [Orabug: 36897348] {CVE-2024-41079} - nvmet-auth: complete a request only after freeing the dhchap pointers (Maurizio Lombardi) [Orabug: 36897348] {CVE-2024-41079} - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Justin Tee) [Orabug: 37116505] {CVE-2024-46842} - netdevsim: use cond_resched() in nsim_dev_trap_report_work() (Eric Dumazet) [Orabug: 37264120] {CVE-2024-50155} - nvmet-auth: assign dh_key to NULL after kfree_sensitive (Vitaliy Shevtsov) [Orabug: 37268555] {CVE-2024-50215} - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (Oleksij Rempel) [Orabug: 37433573] {CVE-2024-53213} - PCI/MSI: Handle lack of irqdomain gracefully (Thomas Gleixner) [Orabug: 37452651] {CVE-2024-56760} - selftests: rtnetlink: update netdevsim ipsec output format (Hangbin Liu) [Orabug: 37547931] - netdevsim: print human readable IP address (Hangbin Liu) [Orabug: 37547931] - uek: kabi: Fix build error for HIDE_INCLUDE macro (Saeed Mirzamohammadi) [Orabug: 37619141] - Add __init annotation to pensando_efi_mem_reserve (Joseph Dobosenski) [Orabug: 37619785]
- Revert "usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null" (Greg Kroah-Hartman) - drm/v3d: Assign job pointer to NULL before signaling the fence (Maíra Canal) - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs (Ranjan Kumar) [Orabug: 37472354] {CVE-2024-57804}
- uek-rpm: Update network stress testing options for embedded2 (Joseph Dobosenski) [Orabug: 37530219] - mm, madvise: fix potential workingset node list_lru leaks (Kairui Song) [Orabug: 37464586] - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Dan Carpenter) [Orabug: 37427536] {CVE-2024-53162} - vdpa/mlx5: Fix error path during device add (Dragos Tatulea) [Orabug: 37296163,37561499] - vp_vdpa: fix id_table array not null terminated error (Xiaoguang Wang) [Orabug: 37296163,37561499,37602514] {CVE-2024-53110} - vdpa/mlx5: Postpone MR deletion (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Introduce init/destroy for MR resources (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Rename mr_mtx -> lock (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Extract mr members in own resource struct (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Rename function (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Delete direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Create direct MKEYs in parallel (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Parallelize VQ suspend/resume for CVQ MQ command (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Small improvement for change_num_qps() (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Keep notifiers during suspend but ignore (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Parallelize device resume (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Parallelize device suspend (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Use async API for vq modify commands (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Use async API for vq query command (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Introduce async fw command wrapper (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Introduce error logging function (Dragos Tatulea) [Orabug: 37296163,37561499] - net/mlx5: Support throttled commands from async API (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Add the support of set mac address (Cindy Lu) [Orabug: 37296163,37561499] - vdpa_sim_net: Add the support of set mac address (Cindy Lu) [Orabug: 37296163,37561499] - vdpa: support set mac address from vdpa tool (Cindy Lu) [Orabug: 37296163,37561499] - vdpa/mlx5: Fix invalid mr resource destroy (Dragos Tatulea) [Orabug: 37296163,37561499,37602562] {CVE-2024-47687} - vdpa/mlx5: Don't enable non-active VQs in .set_vq_ready() (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Don't reset VQs more than necessary (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Re-create HW VQs under certain conditions (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Pre-create hardware VQs at vdpa .dev_add time (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Use suspend/resume during VQP change (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Forward error in suspend/resume device (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Consolidate all VQ modify to Ready to use resume_vq() (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Add error code for suspend/resume VQ (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Accept Init -> Ready VQ transition in resume_vq() (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Allow creation of blank VQs (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Set mkey modified flags on all VQs (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Start off rqt_size with max VQPs (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Set an initial size on the VQ (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Add support for modifying the VQ features field (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Add support for modifying the virtio_version VQ field (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Rename init_mvqs (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Clear and reinitialize software VQ data on reset (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Initialize and reset device with one queue pair (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Remove duplicate suspend code (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Iterate over active VQs during suspend/resume (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Drop redundant check in teardown_virtqueues() (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Drop redundant code (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Make setup/teardown_vq_resources() symmetrical (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa/mlx5: Clarify meaning thorough function rename (Dragos Tatulea) [Orabug: 37296163,37561499] - vhost-vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe Jaillet) [Orabug: 37296163,37561499] - vp_vdpa: don't allocate unused msix vectors (Yuxue Liu) [Orabug: 37296163,37561499] - vdpa: Convert sprintf/snprintf to sysfs_emit (Li Zhijian) [Orabug: 37296163,37561499] - vp_vdpa: Fix return value check vp_vdpa_request_irq (Yuxue Liu) [Orabug: 37296163,37561499] - vhost-vdpa: change ioctl # for VDPA_GET_VRING_SIZE (Michael S Tsirkin) [Orabug: 37296163,37561499] - virtio_vdpa: create vqs with the actual size (Zhu Lingshan) [Orabug: 37296163,37561499] - vdpa_sim: implement vdpa_config_ops.get_vq_size for vDPA simulator (Zhu Lingshan) [Orabug: 37296163,37561499] - vp_vdpa: implement vdpa_config_ops.get_vq_size (Zhu Lingshan) [Orabug: 37296163,37561499] - vDPA: introduce get_vq_size to vdpa_config_ops (Zhu Lingshan) [Orabug: 37296163,37561499] - vhost-vdpa: uapi to support reporting per vq size (Zhu Lingshan) [Orabug: 37296163,37561499] - vdpa: skip suspend/resume ops if not DRIVER_OK (Steve Sistare) [Orabug: 37296163,37561499] - vdpa_sim: reset must not run (Steve Sistare) [Orabug: 37296163,37561499] - vdpa: Block vq property changes in DRIVER_OK (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa: Track device suspended state (Dragos Tatulea) [Orabug: 37296163,37561499] - vdpa: Remove usage of the deprecated ida_simple_xx() API (Christophe Jaillet) [Orabug: 37296163,37561499] - SUNRPC: do not retry on EKEYEXPIRED when user TGT ticket expired (Dai Ngo) [Orabug: 34162493]
- LTS version: v5.15.177 (Vijayendra Suman) - Partial revert of xhci: use pm_ptr() instead #ifdef for CONFIG_PM conditionals (Ron Economos) - xhci: use pm_ptr() instead of #ifdef for CONFIG_PM conditionals (Arnd Bergmann) - net: fix data-races around sk->sk_forward_alloc (Wang Liang) [Orabug: 37388795] {CVE-2024-53124} - scsi: sg: Fix slab-use-after-free read in sg_release() (Surajsonawane2415) [Orabug: 37434117] {CVE-2024-56631} - x86/xen: fix SLS mitigation in xen_hypercall_iret() (Juergen Gross) - nfsd: add list_head nf_gc to struct nfsd_file (Youzhong Yang) - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (Eric Dumazet) [Orabug: 37200706] {CVE-2024-47707} - vsock/virtio: discard packets if the transport changes (Stefano Garzarella) [Orabug: 37555796] {CVE-2025-21669} - blk-cgroup: Fix UAF in blkcg_unpin_online() (Tejun Heo) [Orabug: 37434276] {CVE-2024-56672} - iio: adc: rockchip_saradc: fix information leak in triggered buffer (Javier Carrasco) [Orabug: 37497164] {CVE-2024-57907} - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on (Jean-Baptiste Maneyrol) - iio: imu: inv_icm42600: fix spi burst write not supported (Jean-Baptiste Maneyrol) - drm/i915/fb: Relax clear color alignment to 64 bytes (Ville Syrjälä) - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly (Yogesh Lal) - gpiolib: cdev: Fix use after free in lineinfo_changed_notify (Zhongqiu Han) [Orabug: 36683269] {CVE-2024-36899} - fs/proc: fix softlockup in __read_vmcore (part 2) (Rik Van Riel) [Orabug: 37592151] {CVE-2025-21694} - filemap: avoid truncating 64-bit offset to 32 bits (Marco Nelissen) [Orabug: 37555782] {CVE-2025-21665} - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space] (Stefano Garzarella) [Orabug: 37555785] {CVE-2025-21666} - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks (Heiner Kallweit) - nvmet: propagate npwg topology (Luis Chamberlain) - poll_wait: add mb() to fix theoretical race between waitqueue_active() and .poll() (Oleg Nesterov) - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Hans de Goede) - kheaders: Ignore silly-rename files (David Howells) - fs: fix missing declaration of init_files (Zhang Kunbo) - hfs: Sanity check the root record (Leo Stone) - mac802154: check local interfaces before deleting sdata list (Lizhi Xu) [Orabug: 37555775] {CVE-2024-57948} - i2c: rcar: fix NACK handling when being a target (Wolfram Sang) - i2c: mux: demux-pinctrl: check initial mux selection, too (Wolfram Sang) - drm/v3d: Ensure job pointer is set to NULL after job completion (Maíra Canal) - net/mlx5: Fix RDMA TX steering prio (Patrisious Haddad) - net: xilinx: axienet: Fix IRQ coalescing packet count overflow (Sean Anderson) - nfp: bpf: prevent integer overflow in nfp_bpf_event_output() (Dan Carpenter) - pktgen: Avoid out-of-bounds access in get_imix_entries (Artem Chernyshev) [Orabug: 37555838] {CVE-2025-21680} - bpf: Fix bpf_sk_select_reuseport() memory leak (Michal Luczaj) [Orabug: 37555850] {CVE-2025-21683} - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field() (Sudheer Kumar Doredla) - phy: usb: Fix clock imbalance for suspend/resume (Justin Chen) - phy: usb: Use slow clock for wake enabled suspend (Justin Chen) - mptcp: fix TCP options overflow. (Paolo Abeni) [Orabug: 37484954] {CVE-2024-57882} - mptcp: drop port parameter of mptcp_pm_add_addr_signal (Geliang Tang) - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv (Dennis Lam) [Orabug: 37485003] {CVE-2024-57892} - ocfs2: correct return value of ocfs2_local_free_info() (Joseph Qi) - phy: usb: Toggle the PHY power during init (Justin Chen) - phy: usb: Add "wake on" functionality for newer Synopsis XHCI controllers (Al Cooper) - of: address: Preserve the flags portion on 1:1 dma-ranges mapping (Andrea Della Porta) - of: address: Store number of bus flag cells rather than bool (Rob Herring) - of: address: Remove duplicated functions (Herve Codina) - of: address: Fix address translation when address-size is greater than 2 (Herve Codina) - of/address: Add support for 3 address cell bus (Rob Herring) - of: unittest: Add bus address range parsing tests (Rob Herring) - arm64: dts: rockchip: add hevc power domain clock to rk3328 (Peter Geis) - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq() (Yu Kuai) [Orabug: 37497408] {CVE-2025-21631} - iio: adc: ad7124: Disable all channels at probe time (Uwe Kleine-König) - iio: inkern: call iio_device_put() only on mapped devices (Joe Hattori) - iio: adc: at91: call input_free_device() on allocated iio_dev (Joe Hattori) {CVE-2024-57904} - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep() (Fabio Estevam) - iio: gyro: fxas21002c: Fix missing data update in trigger handler (Carlos Song) - iio: adc: ti-ads8688: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57906} - iio: imu: kmx61: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57908} - iio: light: vcnl4035: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57910} - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57911} - iio: pressure: zpa2326: fix information leak in triggered buffer (Javier Carrasco) {CVE-2024-57912} - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind (Akash M) {CVE-2024-57913} - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints (Prashanth K) - usb: fix reference leak in usb_new_device() (Ma Ke) - USB: core: Disable LPM only for non-suspended ports (Kai-Heng Feng) - USB: usblp: return error when setting unsupported protocol (Yan Jun) - usb: gadget: u_serial: Disable ep before setting port to null to fix the crash caused by port being null (Lianqin Hu) - topology: Keep the cpumask unchanged when printing cpumap (Li Huafei) [Orabug: 37497212] {CVE-2024-57917} - usb: dwc3: gadget: fix writing NYET threshold (André Draszik) - USB: serial: cp210x: add Phoenix Contact UPS Device (Johan Hovold) - usb-storage: Add max sectors quirk for Nokia 208 (Lubomir Rintel) - staging: iio: ad9832: Correct phase range check (Zicheng Qu) - staging: iio: ad9834: Correct phase range check (Zicheng Qu) - USB: serial: option: add Neoway N723-EA support (Michal Hrusecky) - USB: serial: option: add MeiG Smart SRM815 (Chukun Pan) - md/raid5: fix atomicity violation in raid5_cache_count (Gui-Dong Han) - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Kuan-Wei Chiu) - drm/amd/display: increase MAX_SURFACES to the value supported by hw (Melissa Wen) - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Hans de Goede) - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Hans de Goede) - riscv: Fix sleeping in invalid context in die() (Nam Cao) {CVE-2024-57939} - drm/amd/display: Add check for granularity in dml ceil/floor helpers (Roman Li) [Orabug: 37497224] {CVE-2024-57922} - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497275] {CVE-2025-21636} - sctp: sysctl: udp_port: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497279] {CVE-2025-21637} - sctp: sysctl: auth_enable: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497282] {CVE-2025-21638} - sctp: sysctl: rto_min/max: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497289] {CVE-2025-21639} - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy (Matthieu Baerts) [Orabug: 37497302] {CVE-2025-21640} - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY (Mikulas Patocka) - dm thin: make get_first_thin use rcu-safe list first function (Krister Johansen) [Orabug: 37506782] {CVE-2025-21664} - afs: Fix the maximum cell name length (David Howells) {CVE-2025-21646} - ksmbd: fix a missing return value check bug (Wentao Liang) {CVE-2024-57925} - drm/mediatek: Add support for 180-degree rotation in the display driver (Jason-JH Lin) - netfilter: conntrack: clamp maximum hashtable size to INT_MAX (Pablo Neira Ayuso) [Orabug: 37497323] {CVE-2025-21648} - netfilter: nf_tables: imbalance in flowtable binding (Pablo Neira Ayuso) - tls: Fix tls_sw_sendmsg error handling (Benjamin Coddington) - cxgb4: Avoid removal of uninserted tid (Anumula Murali Mohan Reddy) - bnxt_en: Fix possible memory leak when hwrm_req_replace fails (Kalesh Ap) - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute (Eric Dumazet) [Orabug: 37497345] {CVE-2025-21653} - tcp/dccp: allow a connection when sk_max_ack_backlog is zero (Zhongqiu Duan) - tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog (Jason Xing) - net: 802: LLC+SNAP OID:PID lookup on start of skb data (Antonio Pastor) - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe() (Keisuke Nishimura) - ASoC: mediatek: disable buffer pre-allocation (Chen-Yu Tsai) - exfat: fix the infinite loop in __exfat_free_cluster() (Yuezhang Mo) - exfat: fix the infinite loop in exfat_readdir() (Yuezhang Mo) [Orabug: 37506742] {CVE-2024-57940} - dm array: fix cursor index when skipping across block boundaries (Ming-Hung Tsai) - dm array: fix unreleased btree blocks on closing a faulty array cursor (Ming-Hung Tsai) - dm array: fix releasing a faulty array block twice in dm_array_cursor_end (Ming-Hung Tsai) [Orabug: 37497248] {CVE-2024-57929} - jbd2: flush filesystem device before updating tail sequence (Zhang Yi) - ceph: give up on paths longer than PATH_MAX (Max Kellermann) [Orabug: 37472273] {CVE-2024-53685}
- mm/page_alloc: fix min_free_kbytes calculation regarding ZONE_MOVABLE (Liuq) [Orabug: 37503579,37556932] - mm: Limit warning message in vmemmap_verify() to once (Ma Wupeng) [Orabug: 37503579,37556932] - assoc_array: fix the return value in assoc_array_insert_mid_shortcut() (Roman Smirnov) [Orabug: 37503579,37556932] - assoc_array: Avoid open coded arithmetic in allocator arguments (Len Baker) [Orabug: 37503579,37556932] - mm/page_alloc: use accumulated load when building node fallback list (Krupa Ramakrishnan) [Orabug: 37503525] - mm/page_alloc: print node fallback order (Bharata B Rao) [Orabug: 37503525] - PCI: Support BAR sizes up to 8TB (Dongdong Liu) [Orabug: 37503525] - uek-rpm: Enable USB_XHCI_PCI_RENESAS as a module for aarch64 platforms (Harshit Mogalapalli) [Orabug: 37552080,37556911] - cifs: use correct lock type in cifs_reconnect() (Paulo Alcantara) [Orabug: 37535421] - cifs: fix NULL ptr dereference in refresh_mounts() (Paulo Alcantara) [Orabug: 37535421]