[ubuntu/noble-security] linux-azure-nvidia-6.14 6.14.0-1007.7 (Accepted)
Andy Whitcroft
apw at canonical.com
Tue Oct 21 16:47:40 UTC 2025
linux-azure-nvidia-6.14 (6.14.0-1007.7) noble; urgency=medium
* noble/linux-azure-nvidia-6.14: 6.14.0-1007.7 -proposed tracker (LP: #2123924)
* Plucky update: upstream stable patchset 2025-09-04 (LP: #2122072)
- firmware: arm_ffa: Move memory allocation outside the mutex locking
- firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic
context
* sources list generation using dwarfdump takes up to 0.5hr in build process
(LP: #2104911)
- [Packaging] azure-nvidia-6.14: Don't generate list of source files
[ Ubuntu-azure-6.14: 6.14.0-1014.14~24.04.1 ]
* noble/linux-azure-6.14: 6.14.0-1014.14~24.04.1 -proposed tracker (LP: #2123925)
* sources list generation using dwarfdump takes up to 0.5hr in build process
(LP: #2104911)
- [Packaging] azure-6.14: Don't generate list of source files
[ Ubuntu-azure: 6.14.0-1014.14 ]
* plucky/linux-azure: 6.14.0-1014.14 -proposed tracker (LP: #2123926)
* sources list generation using dwarfdump takes up to 0.5hr in build process
(LP: #2104911)
- [Packaging] azure: Don't generate list of source files
* MANA Catchup (LP: #2125704)
- RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs
- RDMA/mana_ib: implement get_dma_mr
- RDMA/mana_ib: helpers to allocate kernel queues
- RDMA/mana_ib: create kernel-level CQs
- RDMA/mana_ib: Create and destroy UD/GSI QP
- RDMA/mana_ib: UD/GSI QP creation for kernel
- RDMA/mana_ib: create/destroy AH
- RDMA/mana_ib: UD/GSI work requests
- RDMA/mana_ib: implement req_notify_cq
- RDMA/mana_ib: extend mana QP table
- RDMA/mana_ib: polling of CQs for GSI/UD
- RDMA/mana_ib: indicate CM support
- RDMA/mana_ib: request error CQEs when supported
- RDMA/mana_ib: Implement DMABUF MR support
- RDMA/mana_ib: Fix error code in probe()
- net: mana: Probe rdma device in mana driver
- RDMA/mana_ib: Add support of 4M, 1G, and 2G pages
- RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic
- RDMA/mana_ib: unify mana_ib functions to support any gdma device
- net: mana: Add support for auxiliary device servicing events
- net: mana: Handle Reset Request from MANA NIC
[ Ubuntu: 6.14.0-34.34 ]
* plucky/linux: 6.14.0-34.34 -proposed tracker (LP: #2123945)
* [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z
hardware - perf part (LP: #2103415)
- perf list: Add IBM z17 event descriptions
* Kernel fails to build when coresight is enabled (LP: #2122527)
- Coresight: Introduce a new struct coresight_path
- Coresight: Change functions to accept the coresight_path
- coresight: change coresight_device lock type to raw_spinlock_t
* memory leaks when configuring a small rate limit in audit (LP: #2122554)
- audit: fix skb leak when audit rate limit is exceeded
* [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
(LP: #2121150)
- s390/pci: Allow automatic recovery with minimal driver support
* [AMDGPU] Call trace occurs when unplugging a HDMI/DP/VGA cable on Dell
platforms (LP: #2116908)
- drm/amd/display: limit clear_update_flags to dcn32 and above
- drm/amd/display: Allow DCN301 to clear update flags
* sources list generation using dwarfdump takes up to 0.5hr in build process
(LP: #2104911)
- [Packaging] Don't generate list of source files
* [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user
namespaces (LP: #2121257)
- apparmor: shift ouid when mediating hard links in userns
- apparmor: shift uid when mediating af_unix in userns
* Plucky update: upstream stable patchset 2025-09-04 (LP: #2122072)
- rtc: pcf2127: add missing semicolon after statement
- rtc: pcf2127: fix SPI command byte for PCF2131
- rtc: cmos: use spin_lock_irqsave in cmos_interrupt
- virtio-net: xsk: rx: fix the frame's length check
- virtio-net: ensure the received length does not exceed allocated size
- net: txgbe: request MISC IRQ in ndo_open
- vsock/vmci: Clear the vmci transport packet properly when initializing
it
- net: libwx: fix the incorrect display of the queue number
- mmc: sdhci: Add a helper function for dump register in dynamic debug
mode
- Revert "mmc: sdhci: Disable SD card clock before changing parameters"
- mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
- Bluetooth: HCI: Set extended advertising data synchronously
- Bluetooth: hci_sync: revert some mesh modifications
- Bluetooth: MGMT: set_mesh: update LE scan interval and window
- Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
- iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
- regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
- Input: cs40l50-vibra - fix potential NULL dereference in
cs40l50_upload_owt()
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
- mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
- mtk-sd: Prevent memory corruption from DMA map failure
- mtk-sd: reset host->mrq on prepare_data() error
- drm/v3d: Disable interrupts before resetting the GPU
- firmware: arm_ffa: Fix memory leak by freeing notifier callback node
- firmware: arm_ffa: Move memory allocation outside the mutex locking
- firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic
context
- arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
- platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
- RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling
- RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
- NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
- scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
- scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
- scsi: sd: Fix VPD page 0xb7 length check
- scsi: ufs: core: Fix spelling of a sysfs attribute name
- RDMA/mlx5: Fix HW counters query for non-representor devices
- RDMA/mlx5: Fix CC counters query for MPV
- RDMA/mlx5: Fix vport loopback for MPV device
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
- platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
- Bluetooth: Prevent unintended pause by checking if advertising is active
- btrfs: fix missing error handling when searching for inode refs during
log replay
- btrfs: fix iteration of extrefs during log replay
- btrfs: return a btrfs_inode from btrfs_iget_logging()
- btrfs: return a btrfs_inode from read_one_inode()
- btrfs: fix invalid inode pointer dereferences during log replay
- btrfs: fix inode lookup error handling during log replay
- btrfs: record new subvolume in parent dir earlier to avoid dir logging
races
- btrfs: propagate last_unlink_trans earlier when doing a rmdir
- btrfs: use btrfs_record_snapshot_destroy() during rmdir
- ethernet: atl1: Add missing DMA mapping error checks and count errors
- dpaa2-eth: fix xdp_rxq_info leak
- drm/exynos: fimd: Guard display clock control with runtime PM calls
- spi: spi-fsl-dspi: Clear completion counter before initiating transfer
- drm/i915/selftests: Change mock_request() to return error pointers
- nvme: Fix incorrect cdw15 value in passthru error logging
- nvmet: fix memory leak of bio integrity
- platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs
callbacks
- platform/x86: hp-bioscfg: Fix class device unregistration
- platform/x86: think-lmi: Fix class device unregistration
- platform/x86: dell-wmi-sysman: Fix class device unregistration
- platform/mellanox: mlxreg-lc: Fix logic error in power state check
- drm/bridge: aux-hpd-bridge: fix assignment of the of_node
- net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
- drm/i915/gt: Fix timeline left held on VMA alloc error
- drm/i915/gsc: mei interrupt top half should be in irq disabled context
- idpf: return 0 size for RSS key if not supported
- idpf: convert control queue mutex to a spinlock
- igc: disable L1.2 PCI-E link substate to avoid performance issue
- smb: client: set missing retry flag in smb2_writev_callback()
- smb: client: set missing retry flag in cifs_readv_callback()
- smb: client: set missing retry flag in cifs_writev_callback()
- netfs: Fix i_size updating
- lib: test_objagg: Set error message in check_expect_hints_stats()
- amd-xgbe: align CL37 AN sequence as per databook
- enic: fix incorrect MTU comparison in enic_change_mtu()
- rose: fix dangling neighbour pointers in rose_rt_device_down()
- nui: Fix dma_mapping_error() check
- amd-xgbe: do not double read link status
- smb: client: fix race condition in negotiate timeout by using more
precise timing
- crypto: iaa - Remove dst_null support
- crypto: iaa - Do not clobber req->base.data
- kunit: qemu_configs: sparc: use Zilog console
- kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y
- kunit: qemu_configs: Disable faulting tests on 32-bit SPARC
- gfs2: Decode missing glock flags in tracepoints
- gfs2: Add GLF_PENDING_REPLY flag
- gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE
- gfs2: deallocate inodes in gfs2_create_inode
- btrfs: prepare btrfs_page_mkwrite() for large folios
- btrfs: fix wrong start offset for delalloc space release during mmap
write
- ASoC: tas2764: Extend driver to SN012776
- ASoC: tas2764: Reinit cache on part reset
- ACPI: thermal: Fix stale comment regarding trip points
- ACPI: thermal: Execute _SCP before reading trip points
- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup"
bug
- sched_ext: Make scx_group_set_weight() always update tg->scx.weight
- drm/msm: Fix a fence leak in submit error path
- drm/msm: Fix another leak in the submit error path
- ALSA: sb: Don't allow changing the DMA mode during operations
- ALSA: sb: Force to disable DMAs once when DMA mode is changed
- ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
- ata: pata_cs5536: fix build on 32-bit UML
- ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
- platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks
list
- genirq/irq_sim: Initialize work context pointers properly
- powerpc: Fix struct termio related ioctl macros
- ASoC: amd: yc: update quirk data for HP Victus
- regulator: fan53555: add enable_time support and soft-start times
- scsi: target: Fix NULL pointer dereference in
core_scsi3_decode_spec_i_port()
- aoe: defer rexmit timer downdev work to workqueue
- wifi: mac80211: drop invalid source address OCB frames
- wifi: ath6kl: remove WARN on bad firmware input
- ACPICA: Refuse to evaluate a method if arguments are missing
- mtd: spinand: fix memory leak of ECC engine conf
- rcu: Return early if callback is not specified
- module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
- RDMA/mlx5: Fix cache entry update on dereg error
- IB/mlx5: Fix potential deadlock in MR deregistration
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O
- usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
- Revert "usb: xhci: Implement xhci_handshake_check_state() helper"
- usb: xhci: quirk for data loss in ISOC transfers
- xhci: dbctty: disable ECHO flag by default
- xhci: dbc: Flush queued requests before stopping dbc
- xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
- Input: xpad - support Acer NGR 200 Controller
- Input: iqs7222 - explicitly define number of external channels
- usb: cdnsp: do not disable slot for disabled slot
- usb: cdnsp: Fix issue with CV Bad Descriptor test
- usb: dwc3: Abort suspend on soft disconnect failure
- usb: chipidea: udc: disconnect/reconnect from host when do
suspend/resume
- usb: acpi: fix device link removal
- smb: client: fix readdir returning wrong type with POSIX extensions
- cifs: all initializations for tcon should happen in tcon_info_alloc
- dma-buf: fix timeout handling in dma_resv_wait_timeout v2
- i2c/designware: Fix an initialization issue
- Logitech C-270 even more broken
- optee: ffa: fix sleep in atomic context
- iommu/rockchip: prevent iommus dead loop when two masters share one
IOMMU
- powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be
changed
- riscv: cpu_ops_sbi: Use static array for boot_data
- platform/x86: think-lmi: Create ksets consecutively
- platform/x86: think-lmi: Fix kobject cleanup
- platform/x86: think-lmi: Fix sysfs group cleanup
- mm/vmalloc: fix data race in show_numa_info()
- x86/bugs: Rename MDS machinery to something more generic
- x86/microcode/AMD: Add TSA microcode SHAs
- x86/process: Move the buffer clearing before MONITOR
- iommufd/selftest: Add missing close(mfd) in memfd_mmap()
- iommufd/selftest: Add asserts testing global mfd
- xfs: actually use the xfs_growfs_check_rtgeom tracepoint
- mmc: sdhci-uhs2: Adjust some error messages and register dump for SD
UHS-II card
- mmc: core: Adjust some error messages for SD UHS-II cards
- RDMA/mlx5: reduce stack usage in mlx5_ib_ufile_hw_cleanup
- scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask
is set
- btrfs: fix failure to rebuild free space tree using multiple
transactions
- nvme-pci: refresh visible attrs after being checked
- drm/bridge: panel: move prepare_prev_first handling to
drm_panel_bridge_add_typed
- netfs: Fix hang due to missing case in final DIO read result collection
- netfs: Fix looping in wait functions
- netfs: Fix ref leak on inserted extra subreq in write retry
- drm/xe/guc: Enable w/a 16026508708
- drm/xe/guc_pc: Add _locked variant for min/max freq
- drm/xe: Split xe_device_td_flush()
- drm/xe/bmg: Update Wa_14022085890
- drm/xe/bmg: Update Wa_22019338487
- net: ipv4: fix stat increase when udp early demux drops the packet
- smb: client: fix native SMB symlink traversal
- netfs: Fix double put of request
- drm/xe: Allow dropping kunit dependency as built-in
- x86/platform/amd: move final timeout check to after final sleep
- usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs
- dt-bindings: i2c: realtek,rtl9301: Fix missing 'reg' constraint
- x86/bugs: Add a Transient Scheduler Attacks mitigation
- [Config] Enable MITIGATION_TSA
- KVM: x86: Sort CPUID_8000_0021_EAX leaf bits properly
- KVM: SVM: Advertise TSA CPUID bits to guests
- Upstream stable to v6.12.37, v6.15.6
* [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
(LP: #2121149) // Plucky update: upstream stable patchset 2025-09-04
(LP: #2122072)
- s390/pci: Fix stale function handles in error handling
- s390/pci: Do not try re-enabling load/store if device is disabled
* Plucky update: upstream stable patchset 2025-08-22 (LP: #2121266)
- cifs: Correctly set SMB1 SessionKey field in Session Setup Request
- cifs: Fix cifs_query_path_info() for Windows NT servers
- cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE
mode
- NFSv4: Always set NLINK even if the server doesn't support it
- NFSv4.2: fix listxattr to return selinux security label
- NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps
are delegated
- mailbox: Not protect module_put with spin_lock_irqsave
- mfd: max14577: Fix wakeup source leaks on device unbind
- sunrpc: don't immediately retransmit on seqno miss
- dm vdo indexer: don't read request structure after enqueuing
- leds: multicolor: Fix intensity setting while SW blinking
- fuse: fix race between concurrent setattrs from multiple nodes
- cxl/region: Add a dev_err() on missing target list entries
- NFSv4: xattr handlers should check for absent nfs filehandles
- hwmon: (pmbus/max34440) Fix support for max34451
- ksmbd: allow a filename to contain special characters on SMB3.1.1 posix
extension
- ksmbd: provide zero as a unique ID to the Mac client
- rust: module: place cleanup_module() in .exit.text section
- rust: arm: fix unknown (to Clang) argument '-mno-fdpic'
- dmaengine: idxd: Check availability of workqueue allocated by idxd wq
driver before using
- dmaengine: xilinx_dma: Set dma_device directions
- PCI: dwc: Make link training more robust by setting
PORT_LOGIC_LINK_WIDTH to one lane
- PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
- PCI: imx6: Add workaround for errata ERR051624
- nvme-tcp: fix I/O stalls on congested sockets
- nvme-tcp: sanitize request list handling
- md/md-bitmap: fix dm-raid max_write_behind setting
- amd/amdkfd: fix a kfd_process ref leak
- bcache: fix NULL pointer in cache_set_flush()
- drm/amdgpu: seq64 memory unmap uses uninterruptible lock
- drm/scheduler: signal scheduled fence when kill job
- iio: pressure: zpa2326: Use aligned_s64 for the timestamp
- um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
- um: use proper care when taking mmap lock during segfault
- 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0
and later devices
- coresight: Only check bottom two claim bits
- usb: dwc2: also exit clock_gating when stopping udc while suspended
- iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
- misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
- usb: potential integer overflow in usbg_make_tpg()
- tty: serial: uartlite: register uart driver in init
- usb: common: usb-conn-gpio: use a unique name for usb connector device
- usb: Add checks for snprintf() calls in usb_alloc_dev()
- usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
- usb: gadget: f_hid: wake up readers on disable/unbind
- usb: typec: displayport: Receive DP Status Update NAK request exit dp
altmode
- usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
- riscv: add a data fence for CMODX in the kernel mode
- ALSA: hda: Ignore unsol events for cards being shut down
- ALSA: hda: Add new pci id for AMD GPU display HD audio controller
- ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
- ASoC: rt1320: fix speaker noise when volume bar is 100%
- ceph: fix possible integer overflow in ceph_zero_objects()
- scsi: ufs: core: Don't perform UFS clkscaling during host async scan
- ovl: Check for NULL d_inode() in ovl_dentry_upper()
- btrfs: handle csum tree error with rescue=ibadroots correctly
- drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
- Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
- btrfs: factor out nocow ordered extent and extent map generation into a
helper
- btrfs: use unsigned types for constants defined as bit shifts
- btrfs: fix qgroup reservation leak on failure to allocate ordered extent
- fs/jfs: consolidate sanity checking in dbMount
- jfs: validate AG parameters in dbMount() to prevent crashes
- ASoC: codec: wcd9335: Convert to GPIO descriptors
- ASoC: codecs: wcd9335: Fix missing free of regulator supplies
- f2fs: don't over-report free space or inodes in statvfs
- PCI: apple: Use helper function for_each_child_of_node_scoped()
- PCI: apple: Set only available ports up
- accel/ivpu: Add debugfs interface for setting HWS priority bands
- accel/ivpu: Trigger device recovery on engine reset/resume failure
- af_unix: Don't leave consecutive consumed OOB skbs.
- i2c: tiny-usb: disable zero-length read messages
- i2c: robotfuzz-osif: disable zero-length read messages
- smb: client: remove \t from TP_printk statements
- mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path
on write
- ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
- s390/pkey: Prevent overflow in size calculation for memdup_user()
- fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio
- lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
- Revert "riscv: Define TASK_SIZE_MAX for __access_ok()"
- drm/xe/display: Add check for alloc_ordered_workqueue()
- HID: wacom: fix crash in wacom_aes_battery_handler()
- atm: clip: prevent NULL deref in clip_push()
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
- ALSA: usb-audio: Fix out-of-bounds read in
snd_usb_get_audioformat_uac3()
- attach_recursive_mnt(): do not lock the covering tree when sliding
something under it
- libbpf: Fix null pointer dereference in btf_dump__free on allocation
failure
- ethernet: ionic: Fix DMA mapping tests
- wifi: mac80211: fix beacon interval calculation overflow
- af_unix: Don't set -ECONNRESET for consumed OOB skb.
- wifi: mac80211: Add link iteration macro for link data
- wifi: mac80211: Create separate links for VLAN interfaces
- wifi: mac80211: finish link init before RCU publish
- vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
- bnxt: properly flush XDP redirect lists
- um: ubd: Add missing error check in start_io_thread()
- libbpf: Fix possible use-after-free for externs
- net: enetc: Correct endianness handling in _enetc_rd_reg64
- netlink: specs: tc: replace underscores with dashes in names
- atm: Release atm_dev_mutex after removing procfs in
atm_dev_deregister().
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
- net: selftests: fix TCP packet checksum
- drm/amdgpu/discovery: optionally use fw based ip discovery
- drm/amd: Adjust output for discovery error handling
- drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
- drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
- drm/xe: Process deferred GGTT node removals on device unwind
- smb: client: fix potential deadlock when reconnecting channels
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions
- smb: client: make use of common smbdirect_pdu.h
- smb: smbdirect: add smbdirect.h with public structures
- smb: smbdirect: add smbdirect_socket.h
- smb: client: make use of common smbdirect_socket
- smb: smbdirect: introduce smbdirect_socket_parameters
- smb: client: make use of common smbdirect_socket_parameters
- cifs: Fix the smbd_response slab to allow usercopy
- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code
- EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
- x86/traps: Initialize DR6 by writing its architectural reset value
- staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
- dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
- serial: core: restore of_node information in sysfs
- serial: imx: Restore original RXTL for console to fix data loss
- Bluetooth: L2CAP: Fix L2CAP MTU negotiation
- dm-raid: fix variable in journal device check
- btrfs: fix a race between renames and directory logging
- btrfs: update superblock's device bytes_used when dropping chunk
- spi: spi-cadence-quadspi: Fix pm runtime unbalance
- net: libwx: fix the creation of page_pool
- maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
- mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
- f2fs: fix to zero post-eof page
- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
- HID: wacom: fix memory leak on kobject creation failure
- HID: wacom: fix memory leak on sysfs attribute creation failure
- HID: wacom: fix kobject reference count leak
- scsi: megaraid_sas: Fix invalid node index
- scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
- drm/ast: Fix comment on modeset lock
- drm/etnaviv: Protect the scheduler's pending list with its lock
- drm/tegra: Assign plane type before registration
- drm/tegra: Fix a possible null pointer dereference
- drm/udl: Unregister device before cleaning up on disconnect
- drm/msm/gpu: Fix crash when throttling GPU immediately during boot
- drm/amdkfd: Fix race in GWS queue scheduling
- drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
- drm/bridge: cdns-dsi: Fix phy de-init and flag it so
- drm/bridge: cdns-dsi: Fix connecting to next bridge
- drm/bridge: cdns-dsi: Check return value when getting default PHY config
- drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
- drm/amd/display: Add null pointer check for get_first_active_display()
- drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
- drm/amd/display: Correct non-OLED pre_T11_delay.
- drm/xe/vm: move rebind_work init earlier
- drm/xe/guc_submit: add back fix
- drm/amd/display: Fix RMCM programming seq errors
- drm/amdgpu: Add kicker device detection
- drm/amd/display: Check dce_hwseq before dereferencing it
- drm/xe: Fix memset on iomem
- drm/xe: Fix taking invalid lock on wedge
- drm/xe: Fix early wedge on GuC load failure
- drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL
- drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences
- drm/amdgpu: switch job hw_fence to amdgpu_fence
- drm/amd/display: Fix mpv playback corruption on weston
- media: uvcvideo: Rollback non processed entities on error
- x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE
- x86/pkeys: Simplify PKRU update in signal frame
- io_uring: fix potential page leak in io_sqe_buffer_register()
- io_uring/rsrc: fix folio unpinning
- io_uring/net: mark iov as dynamically allocated even for single segments
- mm/vma: reset VMA iterator on commit_merge() OOM failure
- ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA
- mfd: max77541: Fix wakeup source leaks on device unbind
- mfd: 88pm886: Fix wakeup source leaks on device unbind
- mfd: sprd-sc27xx: Fix wakeup source leaks on device unbind
- hwmon: (isl28022) Fix current reading calculation
- cxl: core/region - ignore interleave granularity when ways=1
- bus: mhi: host: pci_generic: Add Telit FN920C04 modem support
- iio: dac: adi-axi-dac: add cntrl chan check
- iio: adc: ad7606_spi: check error in ad7606B_sw_mode_config()
- iio: hid-sensor-prox: Add support for 16-bit report size
- usb: typec: tcpci: Fix wakeup source leaks on device unbind
- usb: typec: tipd: Fix wakeup source leaks on device unbind
- s390/mm: Fix in_atomic() handling in do_secure_storage_access()
- riscv: misaligned: declare misaligned_access_speed under
CONFIG_RISCV_MISALIGNED
- riscv: save the SR_SUM status over switches
- media: uvcvideo: Keep streaming state in the file handle
- media: uvcvideo: Create uvc_pm_(get|put) functions
- media: uvcvideo: Increase/decrease the PM counter per IOCTL
- drm/i915/display: Add check for alloc_ordered_workqueue() and
alloc_workqueue()
- i2c: imx: fix emulated smbus block read
- LoongArch: KVM: Avoid overflow with array index
- LoongArch: KVM: Check validity of "num_cpu" from user space
- LoongArch: KVM: Disable updating of "num_cpu" and "feature"
- LoongArch: KVM: Add address alignment check for IOCSR emulation
- LoongArch: KVM: Fix interrupt route update with EIOINTC
- LoongArch: KVM: Check interrupt route from physical CPU
- scripts/gdb: fix dentry_name() lookup
- smb: client: fix regression with native SMB symlinks
- riscv: vector: Fix context save/restore with xtheadvector
- riscv: export boot_cpu_hartid
- io_uring/rsrc: don't rely on user vaddr alignment
- drm/amd/display: Add sanity checks for drm_edid_raw()
- drm/xe: Move DSB l2 flush to a more sensible place
- drm/xe: move DPT l2 flush to a more sensible place
- HID: Intel-thc-hid: Intel-quicki2c: Enhance QuickI2C reset flow
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame()
- nvme: refactor the atomic write unit detection
- nvme: fix atomic write size validation
- drm/xe/guc: Explicitly exit CT safe mode on unwind
- bcache: remove unnecessary select MIN_HEAP
- Revert "bcache: update min_heap_callbacks to use default builtin swap"
- Revert "bcache: remove heap-related macros and switch to generic
min_heap"
- selinux: change security_compute_sid to return the ssid or tsid on match
- mm: userfaultfd: fix race of userfaultfd_move and swap cache
- mm/shmem, swap: fix softlockup with mTHP swapin
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out
- scsi: fnic: Turn off FDMI ACTIVE flags on link down
- drm/cirrus-qemu: Fix pitch programming
- drm/panel: simple: Tianma TM070JDHG34-00: add delays
- drm/simpledrm: Do not upcast in release helpers
- drm/i915/ptl: Use everywhere the correct DDI port clock select mask
- drm/i915/dp_mst: Work around Thunderbolt sink disconnect after
SINK_COUNT_ESI read
- drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause
- drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13
- drm/amd/display: Add more checks for DSC / HUBP ONO guarantees
- drm/amd/display: Add dc cap for dp tunneling
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-crd: mark l12b and
l15b always-on"
- arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e78100-t14s: mark l12b and
l15b always-on"
- arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on
- arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage
- crypto: powerpc/poly1305 - add depends on BROKEN for now
- [Config] Disable CRYPTO_POLY1305_P10
- drm/amdgpu/mes: add missing locking in helper functions
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e78100-t14s: fix missing HID
supplies"
- arm64: dts: qcom: x1e78100-t14s: fix missing HID supplies
- drm/amd/display: Add early 8b/10b channel equalization test pattern
sequence
- drm/amd/display: Get LTTPR IEEE OUI/Device ID From Closest LTTPR To Host
- rust: completion: implement initial abstraction
- rust: revocable: indicate whether `data` has been revoked already
- rust: devres: fix race in Devres::drop()
- rust: devres: do not dereference to the internal Revocable
- io_uring/kbuf: flag partial buffer mappings
- riscv: uaccess: Only restore the CSR_STATUS SUM bit
- drm/amd/display: Add debugging message for brightness caps
- drm/amd/display: Fix default DC and AC levels
- drm/amd/display: Only read ACPI backlight caps once
- usb: typec: displayport: Fix potential deadlock
- NFSv4.2: another fix for listxattr
- drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
- nvme: revert the cross-controller atomic write size validation
- scripts: gdb: vfs: support external dentry names
- Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
- Upstream stable to v6.12.36, v6.15.5
* Plucky update: upstream stable patchset 2025-08-18 (LP: #2120812)
- configfs: Do not override creating attribute file failure in
populate_attrs()
- crypto: marvell/cesa - Do not chain submitted requests
- gfs2: move msleep to sleepable context
- crypto: qat - add shutdown handler to qat_c3xxx
- crypto: qat - add shutdown handler to qat_420xx
- crypto: qat - add shutdown handler to qat_4xxx
- crypto: qat - add shutdown handler to qat_c62x
- crypto: qat - add shutdown handler to qat_dh895xcc
- ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
- ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
- ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in
create_sdw_dailinks()
- io_uring: account drain memory to cgroup
- io_uring/kbuf: account ring io_buffer_list memory
- powerpc/pseries/msi: Avoid reading PCI device registers in reduced power
states
- regulator: max20086: Fix MAX200086 chip id
- regulator: max20086: Change enable gpio to optional
- net/mlx5_core: Add error handling
inmlx5_query_nic_vport_qkey_viol_cntr()
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
- wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
- wifi: mt76: mt7925: fix host interrupt register initialization
- wifi: ath11k: fix rx completion meta data corruption
- wifi: rtw88: usb: Upload the firmware in bigger chunks
- Revert "UBUNTU: SAUCE: wifi: ath11k: fix ring-buffer corruption"
- wifi: ath11k: fix ring-buffer corruption
- NFSD: unregister filesystem in case genl_register_family() fails
- NFSD: fix race between nfsd registration and exports_proc
- NFSD: Implement FATTR4_CLONE_BLKSIZE attribute
- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
- nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
- SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
- NFSv4: Don't check for OPEN feature support in v4.1
- fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
- Revert "UBUNTU: SAUCE: wifi: ath12k: fix ring-buffer corruption"
- wifi: ath12k: fix ring-buffer corruption
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
- svcrdma: Unregister the device if svc_rdma_accept() fails
- wifi: rtw88: usb: Reduce control message timeout to 500 ms
- wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
- media: ov8856: suppress probe deferral errors
- media: ov5675: suppress probe deferral errors
- media: imx335: Use correct register width for HNUM
- media: nxp: imx8-isi: better handle the m2m usage_count
- media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
- media: ccs-pll: Start VT pre-PLL multiplier search from correct value
- media: ov2740: Move pm-runtime cleanup on probe-errors to proper place
- media: ccs-pll: Start OP pre-PLL multiplier search from correct value
- media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
- media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
- media: cxusb: no longer judge rbuf when the write fails
- media: davinci: vpif: Fix memory leak in probe error path
- media: gspca: Add error handling for stv06xx_read_sensor()
- media: i2c: imx335: Fix frame size enumeration
- media: imagination: fix a potential memory leak in e5010_probe()
- media: intel/ipu6: Fix dma mask for non-secure mode
- media: ipu6: Remove workaround for Meteor Lake ES2
- media: mediatek: vcodec: Correct vsi_core framebuffer size
- media: omap3isp: use sgtable-based scatterlist wrappers
- media: v4l2-dev: fix error handling in __video_register_device()
- media: venus: Fix probe error handling
- media: videobuf2: use sgtable-based scatterlist wrappers
- media: vidtv: Terminating the subsequent process of initialization
failure
- media: vivid: Change the siize of the composing
- media: imx-jpeg: Drop the first error frames
- media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
- media: imx-jpeg: Reset slot data pointers when freed
- media: imx-jpeg: Cleanup after an allocation error
- media: uvcvideo: Return the number of processed controls
- media: uvcvideo: Send control events for partial succeeds
- media: uvcvideo: Fix deferred probing error
- arm64/mm: Close theoretical race where stale TLB entry remains valid
- ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
- ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
- ASoC: codecs: wcd9375: Fix double free of regulator supplies
- ASoC: codecs: wcd937x: Drop unused buck_supply
- block: use plug request list tail for one-shot backmerge attempt
- block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion
- bus: mhi: ep: Update read pointer only after buffer is written
- bus: mhi: host: Fix conflict between power_up and SYSERR
- can: kvaser_pciefd: refine error prone echo_skb_max handling logic
- can: tcan4x5x: fix power regulator retrieval during probe
- ceph: avoid kernel BUG for encrypted inode with unaligned file size
- ceph: set superblock s_magic for IMA fsmagic matching
- cgroup,freezer: fix incomplete freezing when attaching tasks
- bus: firewall: Fix missing static inline annotations for stubs
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
- ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard
- ata: ahci: Disallow LPM for Asus B550-F motherboard
- bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
- bus: fsl-mc: fix GET/SET_TAILDROP command ids
- ext4: inline: fix len overflow in ext4_prepare_inline_data
- ext4: fix calculation of credits for extent tree modification
- ext4: factor out ext4_get_maxbytes()
- ext4: ensure i_size is smaller than maxbytes
- ext4: only dirty folios when data journaling regular files
- Input: ims-pcu - check record size in ims_pcu_flash_firmware()
- Input: gpio-keys - fix possible concurrent access in
gpio_keys_irq_timer()
- f2fs: fix to do sanity check on ino and xnid
- f2fs: prevent kernel warning due to negative i_nlink from corrupted
image
- f2fs: fix to do sanity check on sit_bitmap_size
- hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
- NFC: nci: uart: Set tty->disc_data only in success path
- net/sched: fix use-after-free in taprio_dev_notifier
- net: ftgmac100: select FIXED_PHY
- fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in
fb_videomode_to_var
- EDAC/altera: Use correct write width with the INTTEST register
- fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
- parisc/unaligned: Fix hex output to show 8 hex chars
- vgacon: Add check for vc_origin address range in vgacon_scroll()
- parisc: fix building with gcc-15
- clk: meson-g12a: add missing fclk_div2 to spicc
- ipc: fix to protect IPCS lookups using RCU
- watchdog: fix watchdog may detect false positive of softlockup
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
- mm: fix ratelimit_pages update error in dirty_ratio_handler()
- soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events
- configfs-tsm-report: Fix NULL dereference of tsm_ops
- firmware: arm_scmi: Ensure that the message-id supports fastchannel
- mtd: rawnand: sunxi: Add randomizer configuration in
sunxi_nfc_hw_ecc_write_chunk
- mtd: nand: sunxi: Add randomizer configuration before randomizer enable
- KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
- KVM: VMX: Flush shadow VMCS on emergency reboot
- dm-mirror: fix a tiny race condition
- dm-verity: fix a memory leak if some arguments are specified multiple
times
- mtd: rawnand: qcom: Fix read len for onfi param page
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
- dm: lock limits when reading them
- phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
- net: ch9200: fix uninitialised access during mii_nway_restart
- KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
- sysfb: Fix screen_info type check for VGA
- video: screen_info: Relocate framebuffers behind PCI bridges
- pwm: axi-pwmgen: fix missing separate external clock
- staging: iio: ad5933: Correct settling cycles encoding per datasheet
- mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
- ovl: Fix nested backing file paths
- regulator: max14577: Add error check for max14577_read_reg()
- remoteproc: core: Cleanup acquired resources when
rproc_handle_resources() fails in rproc_attach()
- remoteproc: core: Release rproc->clean_table after rproc_attach() fails
- remoteproc: k3-m4: Don't assert reset in detach routine
- cifs: reset connections for all channels when reconnect requested
- cifs: update dstaddr whenever channel iface is updated
- cifs: dns resolution is needed only for primary channel
- smb: client: add NULL check in automount_fullpath
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page
boundary
- uio_hv_generic: Use correct size for interrupt and monitor pages
- uio_hv_generic: Align ring size to system page
- PCI: cadence-ep: Correct PBA offset in .set_msix() callback
- PCI: dwc: ep: Correct PBA offset in .set_msix() callback
- PCI: Add ACS quirk for Loongson PCIe
- PCI: Fix lock symmetry in pci_slot_unlock()
- PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from
rockchip_pcie_link_up()
- PCI: dw-rockchip: Fix PHY function call sequence in
rockchip_pcie_phy_deinit()
- iio: accel: fxls8962af: Fix temperature scan element sign
- accel/ivpu: Improve buffer object logging
- accel/ivpu: Use firmware names from upstream repo
- accel/ivpu: Use dma_resv_lock() instead of a custom mutex
- accel/ivpu: Fix warning in ivpu_gem_bo_free()
- dummycon: Trigger redraw when switching consoles with deferred takeover
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
- iio: imu: inv_icm42600: Fix temperature calculation
- iio: adc: ad7944: mask high bits on direct read
- iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build
- iio: adc: ad7606_spi: fix reg write value mask
- ACPICA: fix acpi operand cache leak in dswstate.c
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
- clocksource: Fix the CPUs' choice in the watchdog per CPU verification
- power: supply: collie: Fix wakeup source leaks on device unbind
- mmc: Add quirk to disable DDR50 tuning
- ACPICA: Avoid sequence overread in call to strncmp()
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
- ASoC: intel/sdw_utils: Assign initial value in
asoc_sdw_rt_amp_spk_rtd_init()
- ACPI: bus: Bail out if acpi_kobj registration fails
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
- ACPICA: fix acpi parse and parseext cache leaks
- ACPICA: Apply pack(1) to union aml_resource
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios
laptops
- power: supply: bq27xxx: Retrieve again when busy
- pmdomain: core: Reset genpd->states to avoid freeing invalid data
- ACPICA: utilities: Fix overflow check in vsnprintf()
- platform-msi: Add msi_remove_device_irq_domain() in
platform_device_msi_free_irqs_all()
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
- Make 'cc-option' work correctly for the -Wno-xyzzy pattern
- gpiolib: of: Add polarity quirk for s5m8767
- PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
- power: supply: max17040: adjust thermal channel scaling
- net: macb: Check return value of dma_set_mask_and_coherent()
- net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
- tipc: use kfree_sensitive() for aead cleanup
- f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
- bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
- Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922
- i2c: designware: Invoke runtime suspend on quick slave re-registration
- wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
- emulex/benet: correct command version selection in be_cmd_get_stats()
- Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
- wifi: mt76: mt7925: introduce thermal protection
- wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO
- sctp: Do not wake readers in __sctp_write_space()
- libbpf/btf: Fix string handling to support multi-split BTF
- cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
- i2c: tegra: check msg length in SMBUS block read
- i2c: npcm: Add clock toggle recovery
- clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks
- net: dlink: add synchronization for stats update
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
- wifi: ath12k: fix a possible dead lock caused by ab->base_lock
- wifi: ath11k: Fix QMI memory reuse logic
- wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
- tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
- tcp: remove zero TCP TS samples for autotuning
- tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
- tcp: add receive queue awareness in tcp_rcv_space_adjust()
- x86/sgx: Prevent attempts to reclaim poisoned pages
- ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
- net: page_pool: Don't recycle into cache on PREEMPT_RT
- xfrm: validate assignment of maximal possible SEQ number
- net: atlantic: generate software timestamp just before the doorbell
- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
- pinctrl: armada-37xx: propagate error from
armada_37xx_gpio_get_direction()
- bpf: Pass the same orig_call value to trampoline functions
- net: stmmac: generate software timestamp just before the doorbell
- pinctrl: armada-37xx: propagate error from
armada_37xx_pmx_gpio_set_direction()
- libbpf: Check bpf_map_skeleton link for NULL
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
- net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
- wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
- wifi: mac80211: do not offer a mesh path if forwarding is disabled
- clk: rockchip: rk3036: mark ddrphy as critical
- hid-asus: check ROG Ally MCU version and warn
- wifi: iwlwifi: mvm: fix beacon CCK flag
- f2fs: fix to bail out in get_new_segment()
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
- libbpf: Add identical pointer detection to btf_dedup_is_equiv()
- scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64
commands
- scsi: smartpqi: Add new PCI IDs
- iommu/amd: Ensure GA log notifier callbacks finish running before module
unload
- wifi: iwlwifi: pcie: make sure to lock rxq->read
- wifi: rtw89: 8922a: fix TX fail with wrong VCO setting
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
- netdevsim: Mark NAPI ID on skb in nsim_rcv
- bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index
- wifi: mac80211: VLAN traffic in multicast path
- Revert "mac80211: Dynamically set CoDel parameters per station"
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
- net: bridge: mcast: update multicast contex when vlan state is changed
- net: bridge: mcast: re-implement br_multicast_{enable, disable}_port
functions
- vxlan: Do not treat dst cache initialization errors as fatal
- bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp
- wifi: ath12k: using msdu end descriptor to check for rx multicast
packets
- net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
- software node: Correct a OOB check in software_node_get_reference_args()
- isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry
- pinctrl: mcp23s08: Reset all pins to input at probe
- wifi: ath12k: fix failed to set mhi state error during reboot with
hardware grouping
- scsi: lpfc: Use memcpy() for BIOS version
- sock: Correct error checking condition for (assign|release)_proto_idx()
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw
- ixgbe: Fix unreachable retry logic in combined and byte I2C write
functions
- RDMA/hns: initialize db in update_srq_db()
- ice: fix check for existing switch rule
- usbnet: asix AX88772: leave the carrier control to phylink
- f2fs: fix to set atomic write status more clear
- bpf, sockmap: Fix data lost during EAGAIN retries
- net: ethernet: cortina: Use TOE/TSO on all TCP
- octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
- wifi: ath11k: determine PM policy based on machine model
- wifi: ath12k: fix link valid field initialization in the monitor Rx
- wifi: ath12k: fix incorrect CE addresses
- wifi: ath12k: Pass correct values of center freq1 and center freq2 for
160 MHz
- fbcon: Make sure modelist not set on unregistered console
- watchdog: da9052_wdt: respect TWDMIN
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
- tee: Prevent size calculation wraparound on 32-bit kernels
- Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
first"
- fs/xattr.c: fix simple_xattr_list()
- platform/x86/amd: pmc: Clear metrics table at start of cycle
- platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice
- platform/x86: dell_rbu: Fix list usage
- platform/x86: dell_rbu: Stop overwriting data buffer
- powerpc/vdso: Fix build of VDSO32 with pcrel
- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH
recovery
- io_uring/kbuf: don't truncate end buffer for multiple buffer peeks
- io_uring: fix task leak issue in io_wq_create()
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
- platform/loongarch: laptop: Get brightness setting from EC on probe
- platform/loongarch: laptop: Unregister generic_sub_drivers on exit
- platform/loongarch: laptop: Add backlight power control support
- LoongArch: vDSO: Correctly use asm parameters in syscall wrappers
- LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
- LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
- jffs2: check that raw node were preallocated before writing summary
- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
- cifs: deal with the channel loading lag while picking channels
- cifs: serialize other channels when query server interfaces is pending
- cifs: do not disable interface polling on failure
- smb: improve directory cache reuse for readdir operations
- scsi: storvsc: Increase the timeouts to storvsc_timeout
- scsi: s390: zfcp: Ensure synchronous unit_add
- nvme: always punt polled uring_cmd end_io work to task_work
- net_sched: sch_sfq: reject invalid perturb period
- net: clear the dst when changing skb protocol
- mm: close theoretical race where stale TLB entries could linger
- udmabuf: use sgtable-based scatterlist wrappers
- x86/virt/tdx: Avoid indirect calls to TDX assembly functions
- selftests/x86: Add a test to detect infinite SIGTRAP handler loop
- ksmbd: fix null pointer dereference in destroy_previous_session
- platform/x86: ideapad-laptop: use usleep_range() for EC polling
- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
- platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
- sched_ext, sched/core: Don't call scx_group_set_weight() prematurely
from sched_create_group()
- atm: Revert atm_account_tx() if copy_from_iter_full() fails.
- Input: sparcspkr - avoid unannotated fall-through
- arm64: Restrict pagetable teardown to avoid false warning
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound
card
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
- ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP
Victus 15-fa1xxx
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
- ALSA: hda/realtek: Add quirk for Asus GU605C
- mm/hugetlb: unshare page tables during VMA split, not before
- kbuild: rust: add rustc-min-version support function
- erofs: remove unused trace event erofs_destroy_inode
- nfsd: use threads array as-is in netlink interface
- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
- drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()`
- Kunit to check the longest symbol length
- x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
- ipv6: replace ipcm6_init calls with ipcm6_init_sk
- smb: fix secondary channel creation issue with kerberos by populating
hostname when adding channels
- drm/msm/disp: Correct porch timing for SDM845
- drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
- drm/msm: Fix CP_RESET_CONTEXT_STATE bitfield names
- drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE
- drm/ssd130x: fix ssd132x_clear_screen() columns
- ionic: Prevent driver/fw getting out of sync on devcmd(s)
- drm/nouveau/bl: increase buffer size to avoid truncate warning
- drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
- hwmon: (occ) Rework attribute registration for stack usage
- hwmon: (occ) fix unaligned accesses
- hwmon: (ltc4282) avoid repeated register write
- pldmfw: Select CRC32 when PLDMFW is selected
- aoe: clean device rq_list in aoedev_downdev()
- io_uring/sqpoll: don't put task_struct on tctx setup failure
- net: ice: Perform accurate aRFS flow match
- ice: fix eswitch code memory leak in reset scenario
- workqueue: Initialize wq_isolated_cpumask in workqueue_init_early()
- ksmbd: add free_transport ops in ksmbd connection
- net: netmem: fix skb_ensure_writable with unreadable skbs
- bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start()
- bnxt_en: Add a helper function to configure MRU and RSS
- bnxt_en: Update MRU and RSS table of RSS contexts on queue reset
- ptp: fix breakage after ptp_vclock_in_use() rework
- ptp: allow reading of currently dialed frequency to succeed on free-
running clocks
- wifi: carl9170: do not ping device which has failed to load firmware
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
- atm: atmtcp: Free invalid length skb in atmtcp_c_send().
- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen()
behavior
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
- tcp: fix passive TFO socket having invalid NAPI ID
- eth: fbnic: avoid double free when failing to DMA-map FW msg
- net: lan743x: fix potential out-of-bounds write in
lan743x_ptp_io_event_clock_get()
- ublk: santizize the arguments from userspace when adding a device
- drm/xe/bmg: Update Wa_16023588340
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
- mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available
- net: atm: add lec_mutex
- net: atm: fix /proc/net/atm/lec handling
- EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
- dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
- smb: Log an error when close_all_cached_dirs fails
- smb: client: fix first command failure during re-negotiation
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma()
- perf: Fix sample vs do_exit()
- perf: Fix cgroup state vs ERROR
- perf/core: Fix WARN in perf_cgroup_switch()
- arm64/ptrace: Fix stack-out-of-bounds read in
regs_get_kernel_stack_nth()
- scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
- RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
- RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
- gpio: pca953x: fix wrong error probe return value
- perf evsel: Missed close() when probing hybrid core PMUs
- perf test: Directory file descriptor leak
- gpio: mlxbf3: only get IRQ for device instance 0
- cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr()
function
- bpftool: Fix cgroup command to only show cgroup bpf programs
- alloc_tag: handle module codetag load errors as module load failures
- sched/rt: Fix race in push_rt_task
- sched/fair: Adhere to place_entity() constraints
- firmware: cs_dsp: Fix OOB memory read access in KUnit test
- ASoC: amd: amd_sdw: Fix unlikely uninitialized variable use in
create_sdw_dailinks()
- powerpc64/ftrace: fix clobbered r15 during livepatching
- powerpc/bpf: fix JIT code size calculation of bpf trampoline
- s390/pci: Fix __pcilg_mio_inuser() inline assembly
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC
- fs: add S_ANON_INODE
- nfsd: fix access checking for NLM under XPRTSEC policies
- NFS: always probe for LOCALIO support asynchronously
- media: ov08x40: Extend sleep after reset to 5 ms
- media: rcar-vin: Fix RAW10
- firmware: ti_sci: Convert CPU latency constraint from us to ms
- iommu: Allow attaching static domains in iommu_attach_device_pasid()
- mtd: rawnand: qcom: Fix last codeword read in
qcom_param_page_type_exec()
- dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits
- iio: accel: fxls8962af: Fix temperature calculation
- io_uring/net: only consider msg_inq if larger than 1
- iio: adc: ad7173: fix compiling without gpiolib
- iio: adc: ad7606: fix raw read for 18-bit chips
- power: supply: gpio-charger: Fix wakeup source leaks on device unbind
- EDAC/igen6: Skip absent memory controllers
- ALSA: hda/realtek: Add support for Acer Helios Laptops using CS35L41 HDA
- drm/amd/display: disable DPP RCG before DPP CLK enable
- drm/bridge: select DRM_KMS_HELPER for AUX_BRIDGE
- drm/amdgpu/gfx6: fix CSIB handling
- media: imx-jpeg: Check decoding is ongoing for motion-jpeg
- drm/rockchip: inno-hdmi: Fix video timing HSYNC/VSYNC polarity setting
for rk3036
- drm/dp: add option to disable zero sized address only transactions.
- sunrpc: update nextcheck time when adding new cache entries
- drm/amdgpu: Fix API status offset for MES queue reset
- drm/amd/display: DCN32 null data check
- drm/xe: Fix CFI violation when accessing sysfs files
- drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling
disable_irq()
- workqueue: Fix race condition in wq->stats incrementation
- drm/panel/sharp-ls043t1le01: Use _multi variants
- exfat: fix double free in delayed_free
- drm/bridge: anx7625: enable HPD interrupts
- drm/panthor: Don't update MMU_INT_MASK in panthor_mmu_irq_handler()
- drm/bridge: anx7625: change the gpiod_set_value API
- exfat: do not clear volume dirty flag during sync
- drm/amdkfd: Drop workaround for GC v9.4.3 revID 0
- drm/amdgpu/gfx11: fix CSIB handling
- media: nuvoton: npcm-video: Fix stuck due to no video signal error
- drm/nouveau: fix hibernate on disabled GPU
- media: i2c: imx334: Enable runtime PM before sub-device registration
- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
- drm/nouveau/gsp: fix rm shutdown wait condition
- drm/msm/hdmi: add runtime PM calls to DDC transfer function
- media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition
- drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit()
- media: verisilicon: Enable wide 4K in AV1 decoder
- drm/amd/display: Skip to enable dsc if it has been off
- drm/amdgpu: Add basic validation for RAS header
- dlm: use SHUT_RDWR for SCTP shutdown
- drm/msm/a6xx: Increase HFI response timeout
- drm/amd/display: Do Not Consider DSC if Valid Config Not Found
- media: i2c: imx334: Fix runtime PM handling in remove function
- drm/amdgpu/gfx10: fix CSIB handling
- drm: panel-orientation-quirks: Add ZOTAC Gaming Zone
- media: ccs-pll: Better validate VT PLL branch
- media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition
- drm/amd/display: fix zero value for APU watermark_c
- drm/ttm/tests: fix incorrect assert in ttm_bo_unreserve_bulk()
- drm/amdgpu/gfx7: fix CSIB handling
- ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in
ext4_ext_remove_space()
- jfs: fix array-index-out-of-bounds read in add_missing_indices
- media: ti: cal: Fix wrong goto on error path
- drm/xe/vf: Fix guc_info debugfs for VFs
- drm/amd/display: Correct SSC enable detection for DCN351
- drm/amd/display: Fix Vertical Interrupt definitions for dcn32, dcn401
- media: cec: extron-da-hd-4k-plus: Fix Wformat-truncation
- media: rkvdec: Initialize the m2m context before the controls
- drm/amdgpu: fix MES GFX mask
- drm/amdgpu: Disallow partition query during reset
- sunrpc: fix race in cache cleanup causing stale nextcheck time
- ext4: prevent stale extent cache entries caused by concurrent get
es_cache
- drm/amdgpu/gfx8: fix CSIB handling
- drm/amdgpu/gfx9: fix CSIB handling
- drm/amd/display: Fix VUpdate offset calculations for dcn401
- jfs: Fix null-ptr-deref in jfs_ioc_trim
- drm/amd/pm: Reset SMU v13.0.x custom settings
- drm/amd/display: Correct prefetch calculation
- drm/amd/display: Restructure DMI quirks
- media: renesas: vsp1: Fix media bus code setup on RWPF source pad
- drm/msm/dpu: don't select single flush for active CTL blocks
- drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB
- media: tc358743: ignore video while HPD is low
- media: platform: exynos4-is: Add hardware sync wait to
fimc_is_hw_change_mode()
- media: i2c: imx334: update mode_3840x2160_regs array
- nios2: force update_mmu_cache on spurious tlb-permission--related
pagefaults
- media: rcar-vin: Fix stride setting for RAW8 formats
- drm/amdgpu: Add indirect L1_TLB_CNTL reg programming for VFs
- drm/xe/uc: Remove static from loop variable
- media: qcom: venus: Fix uninitialized variable warning
- drm/panel: simple: Add POWERTIP PH128800T004-ZZA01 panel entry
- Bluetooth: btusb: Add RTL8851BE device 0x0bda:0xb850
- Bluetooth: btmrvl_sdio: Fix wakeup source leaks on device unbind
- Bluetooth: btmtksdio: Fix wakeup source leaks on device unbind
- i2c: pasemi: Enable the unjam machine
- i2c: pasemi: Add registers bits and switch to BIT()
- clk: qcom: gcc: Set FORCE_MEM_CORE_ON for gcc_ufs_axi_clk for 8650/8750
- net: phy: mediatek: do not require syscon compatible for pio property
- net/mlx5: HWS, fix counting of rules in the matcher
- wifi: rtw88: rtw8822bu VID/PID for BUFFALO WI-U2-866DM
- ipmi:ssif: Fix a shutdown race
- rtla: Define __NR_sched_setattr for LoongArch
- wifi: iwlwifi: dvm: pair transport op-mode enter/leave
- net/mlx5: HWS, Fix IP version decision
- vxlan: Add RCU read-side critical sections in the Tx path
- wifi: ath12k: correctly handle mcast packets for clients
- wifi: ath12k: make assoc link associate first
- wifi: rtw88: Set AMPDU factor to hardware for RTL8814A
- wifi: ath12k: Fix incorrect rates sent to firmware
- wifi: ath12k: Fix the enabling of REO queue lookup table feature
- wifi: ath12k: Fix memory leak due to multiple rx_stats allocation
- net/mlx5: HWS, Harden IP version definer checks
- watchdog: stm32: Fix wakeup source leaks on device unbind
- i3c: mipi-i3c-hci: Fix handling status of i3c_hci_irq_handler()
- platform/x86/amd: pmf: Use device managed allocations
- io_uring/rsrc: validate buffer count with offset for cloning
- firmware: cs_dsp: Fix OOB memory read access in KUnit test (ctl cache)
- firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)
- tracing: Fix regression of filter waiting a long time on RCU
synchronization
- x86/its: move its_pages array to struct mod_arch_specific
- io_uring/net: always use current transfer count for buffer put
- drm/msm/dp: Disable wide bus support for SDM845
- Octeontx2-pf: Fix Backpresure configuration
- tools: ynl: parse extack for sub-messages
- tools: ynl: fix mixing ops and notifications on one socket
- KVM: arm64: VHE: Synchronize restore of host debug registers
- perf/x86/intel: Fix crash in icl_update_topdown_event()
- EDAC/igen6: Fix NULL pointer dereference
- dm-table: check BLK_FEAT_ATOMIC_WRITES inside limits_lock
- tracing: Do not free "head" on error path of
filter_free_subsystem_filters()
- mtd: spinand: Use more specific naming for the (single) read from cache
ops
- mtd: spinand: Use more specific naming for the (dual output) read from
cache ops
- mtd: spinand: Use more specific naming for the (dual IO) read from cache
ops
- mtd: spinand: Use more specific naming for the (quad output) read from
cache ops
- mtd: spinand: Use more specific naming for the (quad IO) read from cache
ops
- mtd: spinand: winbond: Prevent unsupported frequencies on dual/quad I/O
variants
- PCI: pciehp: Ignore belated Presence Detect Changed caused by DPC
- Revert "drm/amd/display: Fix VUpdate offset calculations for dcn401"
- drm/i915: fix build error some more
- bridge: mcast: Fix use-after-free during router port configuration
- perf/core: Fix the WARN_ON_ONCE is out of lock protected region
- kallsyms: fix build without execinfo
- ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk
- smb: client: fix warning when reconnecting channel
- tools/hv: fcopy: Fix irregularities with size of ring buffer
- Upstream stable to v6.12.35, v6.15.4
* CVE-2025-39682
- tls: fix handling of zero-length records on the rx_list
* CVE-2025-38541
- wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
* CVE-2025-38477
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
qfq_delete_class
* CVE-2025-38500
- xfrm: interface: fix use-after-free after changing collect_md xfrm
interface
* CVE-2025-38617
- net/packet: fix a race in packet_set_ring() and packet_notifier()
* CVE-2025-38618
- vsock: Do not allow binding to VMADDR_PORT_ANY
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
linux-azure-nvidia-6.14 (6.14.0-1006.6) noble; urgency=medium
* noble/linux-azure-nvidia-6.14: 6.14.0-1006.6 -proposed tracker (LP: #2124021)
linux-azure-nvidia-6.14 (6.14.0-1005.5) noble; urgency=medium
* Backport support for Grace MPAM (LP: #2122432)
- SAUCE: [Config] azure-nvidia-6.14: RESCTRL configs added to annotations
* NVIDIA 6.14 kernel SAUCE patch causes LTP madvise07 test case to fail with
"Child killed by SIGKILL" (LP: #2125434)
- NVIDIA: SAUCE: mm: correctly identify pfn without struct pages
* Backport support for Grace MPAM (LP: #2122432)
- cpu/SMT: Provide a default topology_is_primary_thread()
- mseal sysmap: kernel config and header change
- virtio_net: simplify virtnet_set_affinity()
- ibmvnic: simplify ibmvnic_set_queue_affinity()
- powerpc/xmon: simplify xmon_batch_next_cpu()
- cpumask: deprecate cpumask_next_wrap()
- cpumask: re-introduce cpumask_next{,_and}_wrap()
- cpumask: use cpumask_next_wrap() where appropriate
- padata: switch padata_find_next() to using cpumask_next_wrap()
- s390: switch stop_machine_yield() to using cpumask_next_wrap()
- scsi: lpfc: switch lpfc_irq_rebalance() to using cpumask_next_wrap()
- scsi: lpfc: rework lpfc_next_{online,present}_cpu()
- PCI: hv: Switch hv_compose_multi_msi_req_get_cpu() to using
cpumask_next_wrap()
- cpumask: drop cpumask_next_wrap_old()
- cpumask: add for_each_{possible,online}_cpu_wrap
- objpool: rework objpool_pop()
- cpumask: drop cpumask_assign_cpu()
- cpumask: Relax cpumask_any_but()
- find: Add find_first_andnot_bit()
- cpumask: Add cpumask_{first,next}_andnot() API
- kernfs: Acquire kernfs_rwsem in kernfs_notify_workfn().
- kernfs: Acquire kernfs_rwsem in kernfs_get_parent_dentry().
- kernfs: Acquire kernfs_rwsem in kernfs_node_dentry().
- kernfs: Don't re-lock kernfs_root::kernfs_rwsem in kernfs_fop_readdir().
- kernfs: Use RCU to access kernfs_node::parent.
- kernfs: Use RCU to access kernfs_node::name.
- x86: Move sysctls into arch/x86
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64
- platform: arm64: add Huawei Matebook E Go EC driver
- x86/resctrl: Add a helper to avoid reaching into the arch code resource
list
- x86/resctrl: Remove fflags from struct rdt_resource
- x86/resctrl: Use schema type to determine how to parse schema values
- x86/resctrl: Use schema type to determine the schema format string
- x86/resctrl: Remove data_width and the tabular format
- x86/resctrl: Add max_bw to struct resctrl_membw
- x86/resctrl: Generate default_ctrl instead of sharing it
- x86/resctrl: Add helper for setting CPU default properties
- x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid()
- x86/resctrl: Expose resctrl fs's init function to the rest of the kernel
- x86/resctrl: Move rdt_find_domain() to be visible to arch and fs code
- x86/resctrl: Move resctrl types to a separate header
- x86/resctrl: Add an arch helper to reset one resource
- x86/resctrl: Move monitor exit work to a resctrl exit call
- x86/resctrl: Move monitor init work to a resctrl init call
- x86/resctrl: Rewrite and move the for_each_*_rdt_resource() walkers
- x86/resctrl: Move the is_mbm_*_enabled() helpers to asm/resctrl.h
- x86/resctrl: Add resctrl_arch_is_evt_configurable() to abstract BMEC
- x86/resctrl: Change mon_event_config_{read,write}() to be arch helpers
- x86/resctrl: Move mba_mbps_default_event init to filesystem code
- x86/resctrl: Move mbm_cfg_mask to struct rdt_resource
- x86/resctrl: Add resctrl_arch_ prefix to pseudo lock functions
- x86/resctrl: Allow an architecture to disable pseudo lock
- x86/resctrl: Make prefetch_disable_bits belong to the arch code
- x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr
- x86/resctrl: Move RFTYPE flags to be managed by resctrl
- x86/resctrl: Handle throttle_mode for SMBA resources
- x86/resctrl: Move get_config_index() to a header
- x86/resctrl: Move get_{mon,ctrl}_domain_from_cpu() to live with their
callers
- arm64/mm: Define PTDESC_ORDER
- arm64: Kconfig: Enable HOTPLUG_SMT
- kbuild: rust: add rustc-min-version support function
- kbuild: Introduce Kconfig symbol for linking vmlinux with relocations
- mm/sparse: allow for alternate vmemmap section init at boot
- mm: rename GENERIC_PTDUMP and PTDUMP_CORE
- mseal sysmap: enable arm64
- platform: arm64: huawei-gaokun-ec: Remove unneeded semicolon
- x86/resctrl: Fix rdtgroup_mkdir()'s unlocked use of kernfs_node::name
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
- platform: Do not enable by default during compile testing
- arm64: Kconfig: remove unnecessary selection of CRC32
- arm64: drop binutils version checks
- arm64/fpsimd: Allow CONFIG_ARM64_SME to be selected
- arm64/mm: Batch barriers when updating kernel mappings
- x86/resctrl: Optimize cpumask_any_housekeeping()
- x86/resctrl: Remove the limit on the number of CLOSID
- x86/resctrl: Rename resctrl_sched_in() to begin with "resctrl_arch_"
- x86/resctrl: Check all domains are offline in resctrl_exit()
- x86/resctrl: Resctrl_exit() teardown resctrl but leave the mount point
- x86/resctrl: Drop __init/__exit on assorted symbols
- x86/resctrl: Move is_mba_sc() out of core.c
- x86/resctrl: Add end-marker to the resctrl_event_id enum
- x86/resctrl: Expand the width of domid by replacing mon_data_bits
- x86/resctrl: Split trace.h
- fs/resctrl: Add boiler plate for external resctrl code
- x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl
- x86/resctrl: Move enum resctrl_event_id to resctrl.h
- x86/resctrl: Fix types in resctrl_arch_mon_ctx_{alloc,free}() stubs
- x86/resctrl: Move pseudo lock prototypes to include/linux/resctrl.h
- x86/resctrl: Squelch whitespace anomalies in resctrl core code
- x86/resctrl: Prefer alloc(sizeof(*foo)) idiom in rdt_init_fs_context()
- x86/resctrl: Relax some asm #includes
- x86/resctrl: Always initialise rid field in rdt_resources_all[]
- x86,fs/resctrl: Move the resctrl filesystem code to live in /fs/resctrl
- KVM: arm64: Force HCR_EL2.xMO to 1 at all times in VHE mode
- arm64: errata: Work around AmpereOne's erratum AC04_CPU_23
- ACPI: irq: Introduce acpi_get_gsi_dispatcher()
- x86,fs/resctrl: Remove inappropriate references to cacheinfo in the
resctrl subsystem
- fs/resctrl: Restore the rdt_last_cmd_clear() calls after acquiring
rdtgroup_mutex
- cacheinfo: Set cache 'id' based on DT data
- cacheinfo: Add arch hook to compress CPU h/w id into 32 bits for cache-
id
- arm64: cacheinfo: Provide helper to compress MPIDR value into u32
- NVIDIA: SAUCE: cacheinfo: Expose the code to generate a cache-id from a
device_node
- NVIDIA: SAUCE: drivers: base: cacheinfo: Add helper to find the cache
size from cpu+level
- NVIDIA: SAUCE: ACPI / PPTT: Add a helper to fill a cpumask from a
processor container
- NVIDIA: SAUCE: ACPI / PPTT: Stop acpi_count_levels() expecting callers
to clear levels
- NVIDIA: SAUCE: ACPI / PPTT: Find cache level by cache-id
- NVIDIA: SAUCE: ACPI / PPTT: Add a helper to fill a cpumask from a
cache_id
- NVIDIA: SAUCE: arm64: kconfig: Add Kconfig entry for MPAM
- NVIDIA: SAUCE: ACPI / MPAM: Parse the MPAM table
- NVIDIA: SAUCE: dt-bindings: arm: Add MPAM MSC binding
- NVIDIA: SAUCE: platform: arm64: Move ec devices to an ec subdirectory
- NVIDIA: SAUCE: arm_mpam: Add probe/remove for mpam msc driver and kbuild
boiler plate
- NVIDIA: SAUCE: arm_mpam: Add support for memory controller MSC on DT
platforms
- NVIDIA: SAUCE: arm_mpam: Add the class and component structures for ris
firmware described
- NVIDIA: SAUCE: arm_mpam: Add MPAM MSC register layout definitions
- NVIDIA: SAUCE: arm_mpam: Add cpuhp callbacks to probe MSC hardware
- NVIDIA: SAUCE: arm_mpam: Probe MSCs to find the supported partid/pmg
values
- NVIDIA: SAUCE: arm_mpam: Add helpers for managing the locking around the
mon_sel registers
- NVIDIA: SAUCE: arm_mpam: Probe the hardware features resctrl supports
- NVIDIA: SAUCE: arm_mpam: Merge supported features during mpam_enable()
into mpam_class
- NVIDIA: SAUCE: arm_mpam: Reset MSC controls from cpu hp callbacks
- NVIDIA: SAUCE: arm_mpam: Add a helper to touch an MSC from any CPU
- NVIDIA: SAUCE: arm_mpam: Extend reset logic to allow devices to be reset
any time
- NVIDIA: SAUCE: arm_mpam: Register and enable IRQs
- NVIDIA: SAUCE: arm_mpam: Use a static key to indicate when mpam is
enabled
- NVIDIA: SAUCE: arm_mpam: Allow configuration to be applied and restored
during cpu online
- NVIDIA: SAUCE: arm_mpam: Probe and reset the rest of the features
- NVIDIA: SAUCE: arm_mpam: Add helpers to allocate monitors
- NVIDIA: SAUCE: arm_mpam: Add mpam_msmon_read() to read monitor value
- NVIDIA: SAUCE: arm_mpam: Track bandwidth counter state for overflow and
power management
- NVIDIA: SAUCE: arm_mpam: Probe for long/lwd mbwu counters
- NVIDIA: SAUCE: arm_mpam: Use long MBWU counters if supported
- NVIDIA: SAUCE: arm_mpam: Add helper to reset saved mbwu state
- NVIDIA: SAUCE: arm_mpam: Add kunit test for bitmap reset
- NVIDIA: SAUCE: arm_mpam: Add kunit tests for props_mismatch()
- NVIDIA: SAUCE: arm64: mpam: Context switch the MPAM registers
- NVIDIA: SAUCE: arm64: mpam: Re-initialise MPAM regs when CPU comes
online
- NVIDIA: SAUCE: arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs
- NVIDIA: SAUCE: arm64: mpam: Advertise the CPUs MPAM limits to the driver
- NVIDIA: SAUCE: arm64: mpam: Add helpers to change a tasks and cpu mpam
partid/pmg values
- NVIDIA: SAUCE: untested: KVM: arm64: Force guest EL1 to use user-space's
partid configuration
- NVIDIA: SAUCE: arm_mpam: resctrl: Add boilerplate cpuhp and domain
allocation
- NVIDIA: SAUCE: arm_mpam: resctrl: Pick the caches we will use as resctrl
resources
- NVIDIA: SAUCE: arm_mpam: resctrl: Implement
resctrl_arch_reset_all_ctrls()
- NVIDIA: SAUCE: arm_mpam: resctrl: Add resctrl_arch_get_config()
- NVIDIA: SAUCE: arm_mpam: resctrl: Implement helpers to update
configuration
- NVIDIA: SAUCE: arm_mpam: resctrl: Add plumbing against arm64 task andcpu
hooks
- NVIDIA: SAUCE: arm_mpam: resctrl: Add CDP emulation
- NVIDIA: SAUCE: arm_mpam: resctrl: Add rmid index helpers
- NVIDIA: SAUCE: arm_mpam: resctrl: Add support for 'MB' resource
- NVIDIA: SAUCE: arm_mpam: resctrl: Add kunit test for control format
conversions
- NVIDIA: SAUCE: arm_mpam: resctrl: Add support for csu counters
- NVIDIA: SAUCE: untested: arm_mpam: resctrl: pick classes for use as mbm
counters
- NVIDIA: SAUCE: arm_mpam: resctrl: Pre-allocate free running monitors
- NVIDIA: SAUCE: arm_mpam: resctrl: Allow resctrl to allocate monitors
- NVIDIA: SAUCE: arm_mpam: resctrl: Add resctrl_arch_rmid_read() and
resctrl_arch_reset_rmid()
- NVIDIA: SAUCE: untested: arm_mpam: resctrl: Allow monitors to be
configured
- NVIDIA: SAUCE: arm_mpam: resctrl: Add empty definitions for fine-grained
enables
- NVIDIA: SAUCE: arm64: mpam: Select ARCH_HAS_CPU_RESCTRL
- NVIDIA: SAUCE: fs/resctrl: Don't touch rmid_ptrs[] in free_rmid() when
there are no monitors
- NVIDIA: SAUCE: fs/resctrl: Avoid a race with dom_data_exit() and
closid_num_dirty_rmid[]
- NVIDIA: SAUCE: fs/resctrl: Avoid a race with dom_data_exit() and
rmid_ptrs[]
- NVIDIA: SAUCE: perf/arm-cmn: Stop claiming all the resources
- NVIDIA: SAUCE: arm_mpam: resctrl: Tell resctrl about cpu/domain
online/offline
- NVIDIA: SAUCE: arm_mpam: resctrl: Call resctrl_exit() in the event of
errors
- NVIDIA: SAUCE: arm_mpam: resctrl: Update the rmid reallocation limit
- NVIDIA: SAUCE: FIX ME: arm_mpam: Sort the domain list by domain-id
- NVIDIA: SAUCE: arm_mpam: Generate a configuration for min controls
- NVIDIA: SAUCE: arm_mpam: Add quirk framework
- NVIDIA: SAUCE: arm_mpam: Add workaround for T241-MPAM-1
- NVIDIA: SAUCE: arm_mpam: Add workaround for T241-MPAM-4
- NVIDIA: SAUCE: arm_mpam: Add workaround for T241-MPAM-6
- NVIDIA: SAUCE: arm_mpam: Quirk CMN-650's CSU NRDY behaviour
- NVIDIA: SAUCE: debugfs: Add helpers for creating cpumask entries in
debugfs
- NVIDIA: SAUCE: arm_mpam: Add debugfs entries to show the MSC/RIS the
driver discovered
- NVIDIA: SAUCE: arm_mpam: Add force-disable debugfs trigger
- NVIDIA: SAUCE: arm_mpam: Expose the number of NRDY retries in debugfs
- NVIDIA: SAUCE: [Config] RESCTRL configs added to annotations
- NVIDIA: SAUCE: Fix redefined kvm_arch_has_irq_bypass()
- kernfs: Drop kernfs_rwsem while invoking lookup_positive_unlocked().
- platform: arm64: huawei-gaokun-ec: fix OF node leak
- arm64/mm: Disable barrier batching in interrupt contexts
- arm64/mm: Permit lazy_mmu_mode to be nested
- arm64: sysreg: Drag linux/kconfig.h to work around vdso build issue
[ Ubuntu-nvidia-6.14: 6.14.0-1011.11 ]
* Kernel fails to build when coresight is enabled (LP: #2122527)
- Coresight: Introduce a new struct coresight_path
- Coresight: Change functions to accept the coresight_path
- coresight: change coresight_device lock type to raw_spinlock_t
[ Ubuntu-nvidia-6.14: 6.14.0-1010.10 ]
* noble/linux-nvidia-6.14: 6.14.0-1010.10 -proposed tracker (LP: #2125209)
* Remove backport packaging logic for non-backport kernels (LP: #2080970)
- [Packaging] Remove hooks.mk
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* NVIDIA: SAUCE: MEDIATEK: usb: host: xhci-hub: fix MT89xx SoCs return
PORTLI value (LP: #2125126)
- NVIDIA: SAUCE: MEDIATEK: usb: host: xhci-hub: fix MT89xx SoCs return
PORTLI value
* NVIDIA: SAUCE: ffa notification count initialization fix (LP: #2123861)
- NVIDIA: SAUCE: Fix FFA notification count initialization
* NVIDIA: SAUCE: vfio/nvgrace-gpu: Add GB300 SKU to the devid table
(LP: #2121544)
- NVIDIA: SAUCE: vfio/nvgrace-gpu: Add GB300 SKU to the devid table
* tegra-i2c: fix reset (LP: #2122067)
- i2c: tegra: Fix reset error handling with ACPI
- i2c: tegra: Use internal reset when reset property is not available
[ Ubuntu-azure-6.14: 6.14.0-1013.13~24.04.1 ]
* noble/linux-azure-6.14: 6.14.0-1013.13~24.04.1 -proposed tracker (LP: #2124022)
[ Ubuntu-azure: 6.14.0-1013.13 ]
* plucky/linux-azure: 6.14.0-1013.13 -proposed tracker (LP: #2124023)
* azure: backport "hv_netvsc: Fix panic during namespace deletion with VF"
(LP: #2120803)
- hv_netvsc: Fix panic during namespace deletion with VF
* azure: backport various SMB multichannel fixes (LP: #2118807)
- cifs: reset connections for all channels when reconnect requested
- cifs: update dstaddr whenever channel iface is updated
- cifs: dns resolution is needed only for primary channel
- cifs: deal with the channel loading lag while picking channels
- cifs: serialize other channels when query server interfaces is pending
- cifs: do not disable interface polling on failure
- smb: client: fix potential deadlock when reconnecting channels
- smb: client: fix warning when reconnecting channel
* net: mana: Use page pool fragments for RX buffers instead of full pages to
improve memory efficiency (LP: #2121570)
- net: mana: Use page pool fragments for RX buffers instead of full pages
to improve memory efficiency.
[ Ubuntu: 6.14.0-33.33 ]
* plucky/linux: 6.14.0-33.33 -proposed tracker (LP: #2124042)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* CVE-2025-38477
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
qfq_delete_class
* CVE-2025-38500
- xfrm: interface: fix use-after-free after changing collect_md xfrm
interface
* CVE-2025-38617
- net/packet: fix a race in packet_set_ring() and packet_notifier()
* CVE-2025-38618
- vsock: Do not allow binding to VMADDR_PORT_ANY
linux-azure-nvidia-6.14 (6.14.0-1004.4~24.04.1) noble; urgency=medium
* noble/linux-azure-nvidia-6.14: 6.14.0-1004.4~24.04.1 -proposed tracker (LP: #2120105)
* Kernel fails to build when coresight is enabled (LP: #2122527)
- Coresight: Introduce a new struct coresight_path
- Coresight: Change functions to accept the coresight_path
- coresight: change coresight_device lock type to raw_spinlock_t
* Set CONFIG_IOMMU_DEFAULT_DMA_LAZY as default for Nvidia CPUs
(LP: #2119661)
- [Config] azure-nvidia-6.14: Update annotations to set
CONFIG_IOMMU_DEFAULT_DMA_LAZY
* Backport support for Grace virtualization features: vEVENTQ, HW QUEUE, and
vEGM (LP: #2119656)
- NVIDIA: SAUCE: arm64: configs: enable NVGRACE_EGM as module
* Backport support for arm64 BRBE and a future NVIDIA CPU ID (LP: #2118663)
- [Config] azure-nvidia-6.14: Enable BRBE
* azure: Add the drm_ttm_helper module to the inclusion list (LP: #2119016)
- [Packaging] azure-nvidia-6.14: Add the drm_ttm_helper module to the
inclusion list
[ Ubuntu-nvidia-6.14: 6.14.0-1009.9]
* noble/linux-nvidia-6.14: 6.14.0-1009.9 -proposed tracker (LP: #2121703)
* Remove obsolete build flags in derivative kernels (LP: #2077306)
- [Packaging] nvidia-6.14: Drop unused or invalid rule flags
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] debian.nvidia-6.14/dkms-versions -- update from kernel-
versions (main/d2025.08.25)
* linux-nvidia: Do not produce linux-modules-extra package (LP: #2121416)
- NVIDIA: [Packaging] Do not produce modules-extra packages
* Backport: iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement
(LP: #2121415)
- iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement
* Revert Fix incorrect iommu_groups with PCIe ACS (LP: #2121418)
- Revert "NVIDIA: SAUCE: PCI: Check ACS Extended flags for
pci_bus_isolated()"
- Revert "NVIDIA: SAUCE: PCI: Check ACS DSP/USP redirect bits in
pci_enable_pasid()"
- Revert "NVIDIA: SAUCE: PCI: Enable ACS Enhanced bits for enable_acs and
config_acs"
- Revert "NVIDIA: SAUCE: PCI: Add the ACS Enhanced Capability definitions"
- Revert "NVIDIA: SAUCE: iommu: Validate that pci_for_each_dma_alias()
matches the groups"
- Revert "NVIDIA: SAUCE: iommu: Compute iommu_groups properly for PCIe
MFDs"
- Revert "NVIDIA: SAUCE: PCI: Add pci_mfd_isolation()"
- Revert "NVIDIA: SAUCE: PCI: Widen the acs_flags to u32 within the quirk
callback"
- Revert "NVIDIA: SAUCE: PCI: Use pci_acs_ctrl_isolated() for
pci_quirk_al_acs()"
- Revert "NVIDIA: SAUCE: PCI: Use pci_quirk_mf_endpoint_acs() for
pci_quirk_amd_sb_acs()"
- Revert "NVIDIA: SAUCE: PCI: Remove duplication in calling
pci_acs_ctrl_enabled()"
- Revert "NVIDIA: SAUCE: PCI: Add pci_reachable_set()"
- Revert "NVIDIA: SAUCE: iommu: Organize iommu_group by member size"
- Revert "NVIDIA: SAUCE: iommu: Compute iommu_groups properly for PCIe
switches"
- Revert "NVIDIA: SAUCE: PCI: Add pci_bus_isolation()"
- Revert "NVIDIA: SAUCE: PCI: Move REQ_ACS_FLAGS into pci_regs.h as
PCI_ACS_ISOLATED"
* backport: "ACPI/PCI: Fix memory leak fix in pci_acpi_preserve_config"
(LP: #2121451)
- PCI/ACPI: Fix pci_acpi_preserve_config() memory leak
* Pull-request for setting CPU frequency gov to performance (LP: #2028576)
- [Config] nvidia-6.14: Use performance CPU frequency governor on amd64
* Backport: iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev
(LP: #2121161)
- iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev
* Backport: mm/hugetlb: don't crash when allocating a folio if there are no
resv (LP: #2119577)
- mm/hugetlb: don't crash when allocating a folio if there are no resv
* Set CONFIG_IOMMU_DEFAULT_DMA_LAZY as default for Nvidia CPUs
(LP: #2119661)
- [Config] nvidia-6.14: Update annotations to set
CONFIG_IOMMU_DEFAULT_DMA_LAZY
* mt7925: Additional wifi fixes (LP: #2119687)
- wifi: mt76: mt7925: fix incorrect scan probe IE handling for hw_scan
- NVIDIA: SAUCE: wifi: mt76: mt7925: add MBSSID support
- NVIDIA: SAUCE: wifi: mt76: mt7925: fix the wrong bss cleanup for SAP
* Backport support for Grace virtualization features: vEVENTQ, HW QUEUE, and
vEGM (LP: #2119656)
- Revert "x86/module: prepare module loading for ROX allocations of text"
- x86/ibt: Clean up is_endbr()
- Revert "NVIDIA: SAUCE: iommu/arm-smmu-v3: Implement
arm_smmu_get_msi_mapping_domain"
- iommufd/fault: Remove iommufd_fault_domain_attach/detach/replace_dev()
- Revert "NVIDIA: SAUCE: iommu/dma: Support MSIs through nested domains"
- genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of
iommu_cookie
- genirq/msi: Refactor iommu_dma_compose_msi_msg()
- iommu: Make iommu_dma_prepare_msi() into a generic operation
- iommu: Make @handle mandatory in iommu_{attach|replace}_group_handle()
- iommu: Drop iommu_group_replace_domain()
- iommu: Store either domain or handle in group->pasid_array
- iommu: Swap the order of setting group->pasid_array and calling attach
op of iommu drivers
- iommu: Unexport iommu_fwspec_free()
- iommu: Keep dev->iommu state consistent
- irqchip: Have CONFIG_IRQ_MSI_IOMMU be selected by irqchips that need it
- iommu: Turn fault_data to iommufd private pointer
- iommufd: Implement sw_msi support natively
- iommufd/fault: Move two fault functions out of the header
- iommufd/fault: Add an iommufd_fault_init() helper
- iommufd: Abstract an iommufd_eventq from iommufd_fault
- iommufd: Rename fault.c to eventq.c
- iommufd: Add IOMMUFD_OBJ_VEVENTQ and IOMMUFD_CMD_VEVENTQ_ALLOC
- iommufd/viommu: Add iommufd_viommu_get_vdev_id helper
- iommufd/viommu: Add iommufd_viommu_report_event helper
- iommufd/selftest: Require vdev_id when attaching to a nested domain
- iommufd/selftest: Add IOMMU_TEST_OP_TRIGGER_VEVENT for vEVENTQ coverage
- iommufd/selftest: Add IOMMU_VEVENTQ_ALLOC test coverage
- Documentation: userspace-api: iommufd: Update FAULT and VEVENTQ
- iommu/arm-smmu-v3: Introduce struct arm_smmu_vmaster
- iommu/arm-smmu-v3: Report events that belong to devices attached to
vIOMMU
- iommufd: Disallow allocating nested parent domain with fault ID
- iommufd: Set domain->iommufd_hwpt in all hwpt->domain allocators
- iommu: Sort out domain user data
- iommufd: Move iommufd_sw_msi and related functions to driver.c
- iommu: Drop sw_msi from iommu_domain
- iommu: Require passing new handles to APIs supporting handle
- NVIDIA: SAUCE: Revert "iommu: Skip PASID validation for devices without
PASID capability"
- iommu: Introduce a replace API for device pasid
- iommu: Skip PASID validation for devices without PASID capability
- iommufd: Pass @pasid through the device attach/replace path
- iommufd/device: Only add reserved_iova in non-pasid path
- iommufd/device: Replace idev->igroup with local variable
- iommufd/device: Add helper to detect the first attach of a group
- iommufd/device: Wrap igroup->hwpt and igroup->device_list into attach
struct
- iommufd/device: Replace device_list with device_array
- iommufd/device: Add pasid_attach array to track per-PASID attach
- iommufd: Enforce PASID-compatible domain in PASID path
- iommufd: Support pasid attach/replace
- iommufd: Enforce PASID-compatible domain for RID
- iommu/vt-d: Add IOMMU_HWPT_ALLOC_PASID support
- iommufd: Allow allocating PASID-compatible domain
- iommufd/selftest: Add set_dev_pasid in mock iommu
- iommufd/selftest: Add a helper to get test device
- iommufd/selftest: Add test ops to test pasid attach/detach
- iommufd/selftest: Add coverage for iommufd pasid attach/detach
- ida: Add ida_find_first_range()
- vfio-iommufd: Support pasid [at|de]tach for physical VFIO devices
- vfio: VFIO_DEVICE_[AT|DE]TACH_IOMMUFD_PT support pasid
- iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability
- iommufd: Initialize the flags of vevent in iommufd_viommu_report_event()
- iommufd: Balance veventq->num_events inc/dec
- iommu: Convert unreachable() to BUG()
- iommufd: Test attach before detaching pasid
- iommu: Fix crash in report_iommu_fault()
- iommufd/selftest: Add coverage for reporting max_pasid_log2 via
IOMMU_HW_INFO
- iommu/virtio: Break out bypass identity support into a global static
- iommu: Add domain_alloc_identity()
- iommu/virtio: Move to domain_alloc_paging()
- iommu: Do not call domain_alloc() in iommu_sva_domain_alloc()
- iommu: Hide ops.domain_alloc behind CONFIG_FSL_PAMU
- iommufd: Apply obvious cosmetic fixes
- iommufd: Drop unused ictx in struct iommufd_vdevice
- iommufd: Use enum iommu_viommu_type for type in struct iommufd_viommu
- iommufd: Use enum iommu_veventq_type for type in struct iommufd_veventq
- iommufd: Return EOPNOTSUPP for failures due to driver bugs
- iommu: Introduce get_viommu_size and viommu_init ops
- iommufd/viommu: Support get_viommu_size and viommu_init ops
- iommufd/selftest: Drop parent domain from mock_iommu_domain_nested
- iommufd/selftest: Replace mock_viommu_alloc with mock_viommu_init
- iommu/arm-smmu-v3: Replace arm_vsmmu_alloc with arm_vsmmu_init
- iommu: Deprecate viommu_alloc op
- iommufd: Move _iommufd_object_alloc out of driver.c
- iommufd: Introduce iommufd_object_alloc_ucmd helper
- iommufd: Apply the new iommufd_object_alloc_ucmd helper
- iommufd: Report unmapped bytes in the error path of
iopt_unmap_iova_range
- iommufd: Correct virt_id kdoc at struct iommu_vdevice_alloc
- iommufd/viommu: Explicitly define vdev->virt_id
- iommu: Use enum iommu_hw_info_type for type in hw_info op
- iommu: Add iommu_copy_struct_to_user helper
- iommu: Pass in a driver-level user data structure to viommu_init op
- iommufd/viommu: Allow driver-specific user data for a vIOMMU object
- iommufd/selftest: Support user_data in mock_viommu_alloc
- iommufd/selftest: Add coverage for viommu data
- iommufd/access: Add internal APIs for HW queue to use
- iommufd/access: Bypass access->ops->unmap for internal use
- iommufd/viommu: Add driver-defined vDEVICE support
- iommufd/viommu: Introduce IOMMUFD_OBJ_HW_QUEUE and its related struct
- iommufd/viommu: Add IOMMUFD_CMD_HW_QUEUE_ALLOC ioctl
- iommufd/driver: Add iommufd_hw_queue_depend/undepend() helpers
- iommufd/selftest: Add coverage for IOMMUFD_CMD_HW_QUEUE_ALLOC
- iommufd: Add mmap interface
- iommufd/selftest: Add coverage for the new mmap interface
- Documentation: userspace-api: iommufd: Update HW QUEUE
- iommu: Allow an input type in hw_info op
- iommufd: Allow an input data_type via iommu_hw_info
- iommufd/selftest: Update hw_info coverage for an input data_type
- iommu/arm-smmu-v3-iommufd: Add vsmmu_size/type and vsmmu_init impl ops
- iommu/arm-smmu-v3-iommufd: Add hw_info to impl_ops
- iommu/tegra241-cmdqv: Use request_threaded_irq
- iommu/tegra241-cmdqv: Simplify deinit flow in
tegra241_cmdqv_remove_vintf()
- iommu/tegra241-cmdqv: Do not statically map LVCMDQs
- iommu/tegra241-cmdqv: Add user-space use support
- iommu/tegra241-cmdqv: Add IOMMU_VEVENTQ_TYPE_TEGRA241_CMDQV support
- iommufd: Do not allow _iommufd_object_alloc_ucmd if abort op is set
- iommu/tegra241-cmdqv: import IOMMUFD module namespace
- NVIDIA: SAUCE: mm: handle poisoning of pfn without struct pages
- NVIDIA: SAUCE: mm: Add poison error check in fixup_user_fault() for
mapped pfn
- NVIDIA: SAUCE: mm: Change ghes code to allow poison of non-struct pfn
- NVIDIA: SAUCE: vfio/nvgrace-gpu: register device memory for poison
handling
- NVIDIA: SAUCE: arm64: configs: Build NVGRACE_GPU_VFIO_PCI as LKM
- NVIDIA: SAUCE: arm64: configs: Enable IOMMUFD and VFIO_DEVICE_CDEV
- NVIDIA: SAUCE: arm64: configs: Replace VFIO_CONTAINER with
IOMMUFD_VFIO_CONTAINER
- NVIDIA: SAUCE: KVM: arm64: Allow exec fault on memory mapped cacheable
in VMA
- NVIDIA: SAUCE: vfio/nvgrace-egm: Introduce module to manage EGM
- NVIDIA: SAUCE: vfio/nvgrace-egm: Handle pages with ECC errors on the EGM
- NVIDIA: SAUCE: vfio/nvgrace-egm: Register EGM for runtime ECC poison
errors handling
- NVIDIA: SAUCE: arm64: configs: Build CONFIG_NVGRACE_EGM as LKM
- NVIDIA: SAUCE: vfio/nvgrace-egm: Move the egm header file to include
- NVIDIA: SAUCE: vfio/nvgrace-egm: Free region memory during
unregistration
- NVIDIA: SAUCE: vfio/nvgrace-egm: Move region hash initialization
- NVIDIA: SAUCE: vfio/nvgrace-egm: Handle and convey EGM registration
errors
- NVIDIA: SAUCE: vfio/nvgrace-gpu: Handle EGM registration failure
- NVIDIA: SAUCE: vfio/nvgrace-gpu: Address checkpatch warnings
- NVIDIA: SAUCE: vfio/nvgrace-egm: Address sparse errors
- NVIDIA: SAUCE: vfio/nvgrace-egm: Address smatch errors
- NVIDIA: SAUCE: vfio/nvgrace-gpu: Address smatch errors
- NVIDIA: SAUCE: vfio/nvgrace-egm: Ensure ACPI value reads are successful
- NVIDIA: SAUCE: vfio/nvgrace-egm: Avoid invalid retired pages base
- NVIDIA: SAUCE: vfio/nvgrace-egm: Update EGM unregistration API
- NVIDIA: SAUCE: vfio/nvgrace-egm: track GPUs associated with the EGM
regions
- NVIDIA: SAUCE: vfio/nvgrace-egm: list gpus through sysfs
- NVIDIA: SAUCE: vfio/nvgrace-egm: expose the egm size through sysfs
- NVIDIA: SAUCE: vfio/nvgrace-egm: Add null pointer checks after memory
allocations
- NVIDIA: SAUCE: arm64: configs: enable NVGRACE_EGM as module
- NVIDIA: SAUCE: vfio/nvgrace-gpu: Avoid resmem pfn unregistration
- NVIDIA: [Config] Fix CONFIG_IRQ_MSI_IOMMU annotation for amd64
- software node: Prevent link creation failure from causing kobj reference
count imbalance
* Backport support for arm64 BRBE and a future NVIDIA CPU ID (LP: #2118663)
- NVIDIA: SAUCE: arm64: cputype: Add NVIDIA Olympus definitions
- arm64: el2_setup.h: Make __init_el2_fgt labels consistent, again
- perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
- perf: arm_pmuv3: Don't disable counter in armv8pmu_enable_event()
- perf: arm_v7_pmu: Drop obvious comments for enabling/disabling counters
and interrupts
- perf: arm_v7_pmu: Don't disable counter in
(armv7|krait_|scorpion_)pmu_enable_event()
- perf: apple_m1: Don't disable counter in m1_pmu_enable_event()
- perf: arm_pmu: Move PMUv3-specific data
- arm64/sysreg: Add BRBE registers and fields
- arm64: Handle BRBE booting requirements
- KVM: arm64: nvhe: Disable branch generation in nVHE guests
- perf: arm_pmuv3: Add support for the Branch Record Buffer Extension
(BRBE)
- [Config] nvidia-6.14: Enable BRBE
* sbsa_gwdt: seeing reboot due watchdog reset (LP: #2117095)
- watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race
condition
[ Ubuntu-azure-6.14: 6.14.0-1012.12~24.04.1 ]
* noble/linux-azure-6.14: 6.14.0-1012.12~24.04.1 -proposed tracker (LP: #2121969)
[ Ubuntu-azure: 6.14.0-1012.12 ]
* plucky/linux-azure: 6.14.0-1012.12 -proposed tracker (LP: #2120107)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* [MANA][Backport] The big tcp enablement patch (LP: #2119958)
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
- hv_netvsc: Use VF's tso_max_size value when data path is VF
* [storvsc][Backport] scsi: storvsc: Increase the timeouts to
storvsc_timeout (LP: #2119690)
- scsi: storvsc: Increase the timeouts to storvsc_timeout
* [MANA][Backport]net: mana: Record doorbell physical address in PF mode
(LP: #2119680)
- net: mana: Record doorbell physical address in PF mode
* MANA patch catch-up with azure-nvidia (LP: #2119485)
- net: mana: Change the function signature of mana_get_primary_netdev_rcu
- RDMA/mana_ib: Handle net event for pointing to the current netdev
- RDMA/mana_ib: Add port statistics support
- RDMA/mana_ib: Query feature_flags bitmask from FW
- RDMA/mana_ib: Add device statistics support
* net: mana: Expose additional hardware counters for drop and TC via ethtool
(LP: #2119686)
- net: mana: Expose additional hardware counters for drop and TC via
ethtool.
* azure: Add the drm_ttm_helper module to the inclusion list (LP: #2119016)
- [Packaging] Add the drm_ttm_helper module to the inclusion list
* [MANA][Backport] patch: net: mana: Add debug logs in MANA network driver
(LP: #2119168)
- net: mana: Add debug logs in MANA network driver
[ Ubuntu: 6.14.0-32.32 ]
* plucky/linux: 6.14.0-32.32 -proposed tracker (LP: #2121653)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* Pytorch reports incorrect GPU memory causing "HIP Out of Memory" errors
(LP: #2120454)
- drm/amdkfd: add a new flag to manage where VRAM allocations go
- drm/amdkfd: use GTT for VRAM on APUs only if GTT is larger
* nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
- SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme
* kernel panic when reloading apparmor 5.0.0 profiles (LP: #2120233)
- SAUCE: apparmor5.0.0 [59/53]: apparmor: prevent profile->disconnected
double free in aa_free_profile
* [SRU] Add support for ALC1708 codec on TRBL platform (LP: #2116247)
- ASoC: Intel: soc-acpi-intel-lnl-match: add rt1320_l12_rt714_l0 support
* [SRU] Add waiting latency for USB port resume (LP: #2115478)
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime
pm
- usb: hub: Fix flushing of delayed work used for post resume purposes
* minimal kernel lacks modules for blk disk in arm64 openstack environments
where config_drive is required (LP: #2118499)
- [Config] Enable SYM53C8XX_2 on arm64
* Support xe2_hpg (LP: #2116175)
- drm/xe/xe2_hpg: Add PCI IDs for xe2_hpg
- drm/xe/xe2_hpg: Define additional Xe2_HPG GMD_ID
- drm/xe/xe2_hpg: Add set of workarounds
- drm/xe/xe2hpg: Add Wa_16025250150
* drm/xe: Lite restore breaks fdinfo drm-cycles-rcs reporting (LP: #2119526)
- drm/xe: Add WA BB to capture active context utilization
- drm/xe/lrc: Use a temporary buffer for WA BB
* No IP Address assigned after hot-plugging Ethernet cable on HP Platform
(LP: #2115393)
- Revert "e1000e: change k1 configuration on MTP and later platforms"
* I/O performance regression on NVMes under same bridge (dual port nvme)
(LP: #2115738)
- iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes
- iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags()
- iommu/vt-d: Create unique domain ops for each stage
- iommu/vt-d: Split intel_iommu_enforce_cache_coherency()
- iommu/vt-d: Split paging_domain_compatible()
- iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain
* BPF header file in wrong location (LP: #2118965)
- [Packaging] Install bpf header to correct location
* Internal microphone not working on ASUS VivoBook with Realtek ALC256
(Ubuntu 24.04 + kernel 6.15) (LP: #2112330)
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA
* Documentation update for [Ubuntu25.04] "virsh attach-interface" requires
a reboot to reflect the attached interfaces on the guest (LP: #2111231)
- powerpc/pseries/dlpar: Search DRC index from ibm, drc-indexes for IO add
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603)
- tools/x86/kcpuid: Fix error handling
- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
- crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
- sched: Fix trace_sched_switch(.prev_state)
- perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member
- perf/x86/amd/uncore: Prevent UMC counters from saturating
- gfs2: replace sd_aspace with sd_inode
- gfs2: gfs2_create_inode error handling fix
- perf/core: Fix broken throttling when max_samples_per_tick=1
- crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
- powerpc: do not build ppc_save_regs.o always
- powerpc/crash: Fix non-smp kexec preparation
- sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed
tasks
- x86/microcode/AMD: Do not return error when microcode update is not
necessary
- crypto: sun8i-ce - undo runtime PM changes during driver removal
- x86/cpu: Sanitize CPUID(0x80000000) output
- x86/insn: Fix opcode map (!REX2) superscript tags
- brd: fix aligned_sector from brd_do_discard()
- brd: fix discard end sector
- kselftest: cpufreq: Get rid of double suspend in rtcwake case
- crypto: marvell/cesa - Avoid empty transfer descriptor
- erofs: fix file handle encoding for 64-bit NIDs
- powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view
- btrfs: scrub: update device stats when an error is detected
- btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
- btrfs: fix invalid data space release when truncating block in NOCOW
mode
- rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
- crypto: lrw - Only add ecb if it is not already there
- crypto: xts - Only add ecb if it is not already there
- crypto: sun8i-ce - move fallback ahash_request to the end of the struct
- kunit: Fix wrong parameter to kunit_deactivate_static_stub()
- crypto: api - Redo lookup on EEXIST
- ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
- ASoC: tas2764: Enable main IRQs
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
channel 0
- spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
- spi: tegra210-quad: remove redundant error handling code
- spi: tegra210-quad: modify chip select (CS) deactivation
- power: reset: at91-reset: Optimize at91_reset()
- ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
- ASoC: SOF: amd: add missing acp descriptor field
- PM: wakeup: Delete space in the end of string shown by
pm_show_wakelocks()
- ACPI: resource: fix a typo for MECHREVO in
irq1_edge_low_force_override[]
- x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
- PM: sleep: Print PM debug messages during hibernation
- thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure
- ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
- spi: sh-msiof: Fix maximum DMA transfer size
- ASoC: apple: mca: Constrain channels according to TDM mask
- ALSA: core: fix up bus match const issues.
- drm/vmwgfx: Add seqno waiter for sync_files
- drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource
- drm/vmwgfx: Fix dumb buffer leak
- drm/xe/d3cold: Set power state to D3Cold during s2idle/s3
- drm/vc4: tests: Use return instead of assert
- media: rkvdec: Fix frame size enumeration
- arm64/fpsimd: Avoid RES0 bits in the SME trap handler
- arm64/fpsimd: Don't corrupt FPMR when streaming mode changes
- arm64/fpsimd: Reset FPMR upon exec()
- arm64/fpsimd: Fix merging of FPSIMD state during signal return
- drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions
- drm/panthor: Update panthor_mmu::irq::mask when needed
- drm/panel: samsung-sofef00: Drop s6e3fc2x01 support
- drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
- fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr
- kunit/usercopy: Disable u64 test on 32-bit SPARC
- watchdog: exar: Shorten identity name to fit correctly
- m68k: mac: Fix macintosh_config for Mac II
- firmware: psci: Fix refcount leak in psci_dt_init
- arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
- selftests/seccomp: fix syscall_restart test for arm compat
- drm/msm/dpu: enable SmartDMA on SM8150
- drm/msm/dpu: enable SmartDMA on SC8180X
- drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
- drm/vkms: Adjust vkms_state->active_planes allocation type
- drm/tegra: rgb: Fix the unbound reference count
- firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
- arm64/fpsimd: Do not discard modified SVE state
- overflow: Fix direct struct member initialization in _DEFINE_FLEX()
- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
- selftests/seccomp: fix negative_ENOSYS tracer tests on arm32
- drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3
- drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
- drm/mediatek: Fix kobject put for component sub-drivers
- drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
- media: verisilicon: Free post processor buffers on error
- svcrdma: Reduce the number of rdma_rw contexts per-QP
- xen/x86: fix initial memory balloon target
- wifi: ath12k: Fix memory leak during vdev_id mismatch
- wifi: ath12k: Fix invalid memory access while forming 802.11 header
- IB/cm: use rwlock for MAD agent lock
- bpf: Check link_create.flags parameter for multi_kprobe
- selftests/bpf: Fix bpf_nf selftest failure
- bpf, sockmap: fix duplicated data transmission
- wifi: ath12k: fix cleanup path after mhi init
- wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
- f2fs: clean up unnecessary indentation
- f2fs: prevent the current section from being selected as a victim during
GC
- page_pool: Move pp_magic check into helper functions
- page_pool: Track DMA-mapped pages and unmap them when destroying the
pool
- net: ncsi: Fix GCPS 64-bit member variables
- libbpf: Fix buffer overflow in bpf_object__init_prog
- net/mlx5: Avoid using xso.real_dev unnecessarily
- xfrm: Use xdo.dev instead of xdo.real_dev
- wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
- wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
- wifi: rtw88: do not ignore hardware read error during DPK
- wifi: ath12k: Add MSDU length validation for TKIP MIC error
- wifi: ath12k: Fix the QoS control field offset to build QoS header
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
- libbpf: Fix event name too long error
- libbpf: Remove sample_period init in perf_buffer
- Use thread-safe function pointer in libbpf_print
- iommu: Protect against overflow in iommu_pgsize()
- bonding: assign random address if device address is same as bond
- f2fs: clean up w/ fscrypt_is_bounce_page()
- f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
- libbpf: Use proper errno value in linker
- bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
- netfilter: bridge: Move specific fragmented packet to slow_path instead
of dropping it
- netfilter: nft_quota: match correctly when the quota just depleted
- bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
- tracing: Move histogram trigger variables from stack to per CPU
structure
- clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
- clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
- clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
- clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
- bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
- wifi: iwlfiwi: mvm: Fix the rate reporting
- efi/libstub: Describe missing 'out' parameter in efi_load_initrd
- selftests/bpf: Fix caps for __xlated/jited_unpriv
- tracing: Rename event_trigger_alloc() to trigger_data_alloc()
- tracing: Fix error handling in event_trigger_parse()
- of: unittest: Unlock on error in unittest_data_add()
- ktls, sockmap: Fix missing uncharge operation
- libbpf: Use proper errno value in nlattr
- dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference
- clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
- s390/bpf: Store backchain even for leaf progs
- wifi: rtw89: pci: enlarge retry times of RX tag to 1000
- wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips
- iommu: remove duplicate selection of DMAR_TABLE
- wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
- hisi_acc_vfio_pci: add eq and aeq interruption restore
- scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
- Bluetooth: ISO: Fix not using SID from adv report
- wifi: mt76: mt7925: prevent multiple scan commands
- wifi: mt76: mt7925: refine the sniffer commnad
- wifi: mt76: mt7925: ensure all MCU commands wait for response
- wifi: mt76: mt7996: set EHT max ampdu length capability
- wifi: mt76: mt7996: fix RX buffer size of MCU event
- bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-
uprobe attach logic"
- netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft
only builds
- netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
- vfio/type1: Fix error unwind in migration dirty bitmap allocation
- Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
- netfilter: nf_tables: nft_fib: consistent l3mdev handling
- netfilter: nft_tunnel: fix geneve_opt dump
- RISC-V: KVM: lock the correct mp_state during reset
- vsock/virtio: fix `rx_bytes` accounting for stream sockets
- net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
- net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in
dmaengine xmit
- net: phy: fix up const issues in to_mdio_device() and to_phy_device()
- net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
- net: lan743x: Fix PHY reset handling during initialization and WOL
- octeontx2-pf: QOS: Perform cache sync on send queue teardown
- net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
- f2fs: use d_inode(dentry) cleanup dentry->d_inode
- f2fs: fix to correct check conditions in f2fs_cross_rename
- arm64: dts: qcom: sm8650: setup gpu thermal with higher temperatures
- arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the
mdss node
- arm64: dts: qcom: x1e80100-romulus: Keep L12B and L15B always on
- arm64: dts: qcom: sdm845-starqltechn: remove wifi
- arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
- arm64: dts: qcom: sdm845-starqltechn: refactor node order
- arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
- arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
- arm64: dts: qcom: sm8250: Fix CPU7 opp table
- arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
- arm64: dts: qcom: ipq9574: Fix USB vdd info
- arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588
- ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
- ARM: dts: at91: at91sam9263: fix NAND chip selects
- arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
- arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect
GPIO
- arm64: dts: mt8183: Add port node to mt8183.dtsi
- arm64: dts: imx8mm-beacon: Fix RTC capacitive load
- arm64: dts: imx8mn-beacon: Fix RTC capacitive load
- arm64: dts: imx8mp-beacon: Fix RTC capacitive load
- arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI
audio
- arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI
audio
- arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
- arm64: dts: mt6359: Add missing 'compatible' property to regulators node
- arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
- arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
- arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c
- arm64: dts: rockchip: Update eMMC for NanoPi R5 series
- arm64: tegra: Drop remaining serial clock-names and reset-names
- arm64: tegra: Add uartd serial alias for Jetson TX1 module
- arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
- soc: qcom: smp2p: Fix fallback to qcom,ipc parse
- ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
- nilfs2: add pointer check for nilfs_direct_propagate()
- nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
- dt-bindings: vendor-prefixes: Add Liontron name
- ARM: dts: qcom: apq8064: add missing clocks to the timer node
- ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon
device
- ARM: dts: qcom: apq8064: move replicator out of soc node
- arm64: defconfig: mediatek: enable PHY drivers
- arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
Puma with Haikou
- arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects
- arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
- arm64: dts: mt6359: Rename RTC node to match binding expectations
- ARM: aspeed: Don't select SRAM
- soc: aspeed: lpc: Fix impossible judgment condition
- randstruct: gcc-plugin: Remove bogus void member
- randstruct: gcc-plugin: Fix attribute addition
- perf build: Warn when libdebuginfod devel files are not available
- perf ui browser hists: Set actions->thread before calling
do_zoom_thread()
- dm: don't change md if dm_table_set_restrictions() fails
- dm: free table mempools if not used in __bind
- x86/irq: Ensure initial PIR loads are performed exactly once
- perf symbol-minimal: Fix double free in filename__read_build_id
- dm-flakey: error all IOs when num_features is absent
- dm-flakey: make corrupting read bios work
- perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
- perf tests: Fix 'perf report' tests installation
- perf intel-pt: Fix PEBS-via-PT data_src
- perf scripts python: exported-sql-viewer.py: Fix pattern matching with
Python 3
- remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
- remoteproc: k3-r5: Drop check performed in
k3_r5_rproc_{mbox_callback/kick}
- remoteproc: k3-dsp: Drop check performed in
k3_dsp_rproc_{mbox_callback/kick}
- rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
- mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe()
- mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in
exynos_lpass_remove()
- mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
- perf tests switch-tracking: Fix timestamp comparison
- mailbox: imx: Fix TXDB_V2 sending
- mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting
- perf symbol: Fix use-after-free in filename__read_build_id
- perf record: Fix incorrect --user-regs comments
- perf trace: Always print return value for syscalls returning a pid
- nfs: clear SB_RDONLY before getting superblock
- nfs: ignore SB_RDONLY when remounting nfs
- perf trace: Set errpid to false for rseq and set_robust_list
- perf callchain: Always populate the addr_location map when adding IP
- cifs: Fix validation of SMB1 query reparse point response
- rust: alloc: add missing invariant in Vec::set_len()
- rtc: sh: assign correct interrupts with DT
- phy: rockchip: samsung-hdptx: Fix clock ratio setup
- phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy->rate in case of
errors
- PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
- PCI: rcar-gen4: set ep BAR4 fixed size
- PCI: cadence: Fix runtime atomic count underflow
- PCI: apple: Use gpiod_set_value_cansleep in probe flow
- PCI/DPC: Initialize aer_err_info before using it
- PCI/DPC: Log Error Source ID only when valid
- rtc: loongson: Add missing alarm notifications for ACPI RTC events
- PCI: endpoint: Retain fixed-size BAR size as well as aligned size
- thunderbolt: Fix a logic error in wake on connect
- iio: filter: admv8818: fix band 4, state 15
- iio: filter: admv8818: fix integer overflow
- iio: filter: admv8818: fix range calculation
- iio: filter: admv8818: Support frequencies >= 2^32
- iio: adc: ad7124: Fix 3dB filter frequency reading
- MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
- coresight: Fixes device's owner field for registered using
coresight_init_driver()
- coresight: catu: Introduce refcount and spinlock for enabling/disabling
- counter: interrupt-cnt: Protect enable/disable OPs with mutex
- vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
- mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array()
- iio: adc: PAC1934: fix typo in documentation link
- iio: adc: mcp3911: fix device dependent mappings for conversion result
registers
- USB: gadget: udc: fix const issue in gadget_match_driver()
- USB: typec: fix const issue in typec_match()
- loop: add file_start_write() and file_end_write()
- drm/xe: Make xe_gt_freq part of the Documentation
- Fix sock_exceed_buf_limit not being triggered in
__sk_mem_raise_allocated
- net: stmmac: platform: guarantee uniqueness of bus_id
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
- net: tipc: fix refcount warning in tipc_aead_encrypt
- driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
- net/mlx4_en: Prevent potential integer overflow calculating Hz
- net: lan966x: Make sure to insert the vlan tags also in host mode
- spi: bcm63xx-spi: fix shared reset
- spi: bcm63xx-hsspi: fix shared reset
- Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
- ice: create new Tx scheduler nodes for new queues only
- ice: fix rebuilding the Tx scheduler tree for large queue counts
- idpf: fix a race in txq wakeup
- idpf: avoid mailbox timeout delays during reset
- net: dsa: tag_brcm: legacy: fix pskb_may_pull length
- drm/i915/guc: Check if expecting reply before decrementing
outstanding_submission_g2h
- drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP
- drm/i915/guc: Handle race condition where wakeref count drops below 0
- vmxnet3: correctly report gso type for UDP tunnels
- selftests: net: build net/lib dependency in all target
- PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
- nvme: fix command limits status code
- drm/panel-simple: fix the warnings for the Evervision VGG644804
- netfilter: nf_nat: also check reverse tuple to obtain clashing entry
- net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces.
- net: dsa: b53: do not enable RGMII delay on bcm63xx
- net: dsa: b53: allow RGMII for bcm63xx RGMII ports
- net: dsa: b53: do not touch DLL_IQQD on bcm53115
- wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
- net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing
- wireguard: device: enable threaded NAPI
- scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
- ASoC: codecs: hda: Fix RPM usage count underflow
- ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
- ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
- iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec
- path_overmount(): avoid false negatives
- fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
- do_change_type(): refuse to operate on unmounted/not ours mounts
- tools/power turbostat: Fix AMD package-energy reporting
- ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA
- ALSA: hda/realtek - Support mute led function for HP platform
- ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
- ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
- Input: synaptics-rmi - fix crash with unsupported versions of F34
- pmdomain: core: Introduce dev_pm_genpd_rpm_always_on()
- mmc: sdhci-of-dwcmshc: add PD workaround on RK3576
- pinctrl: samsung: refactor drvdata suspend & resume callbacks
- pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks
- pinctrl: samsung: add gs101 specific eint suspend/resume callbacks
- Bluetooth: hci_core: fix list_for_each_entry_rcu usage
- Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers
- Bluetooth: btintel_pcie: Increase the tx and rx descriptor count
- Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race
condition
- Bluetooth: MGMT: Remove unused mgmt_pending_find_data
- net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0
- ath10k: snoc: fix unbalanced IRQ enable in crash recovery
- wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
- wifi: ath11k: don't use static variables in
ath11k_debugfs_fw_stats_process()
- wifi: ath11k: don't wait when there is no vdev started
- wifi: ath11k: move some firmware stats related functions outside of
debugfs
- wifi: ath11k: validate ath11k_crypto_mode on top of
ath11k_core_qmi_firmware_ready
- wifi: ath12k: refactor ath12k_hw_regs structure
- regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
- spi: omap2-mcspi: Disable multi mode when CS should be kept asserted
after message
- spi: omap2-mcspi: Disable multi-mode when the previous message kept CS
asserted
- pinctrl: qcom: pinctrl-qcm2290: Add missing pins
- scsi: iscsi: Fix incorrect error path labels for flashnode operations
- powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
- drm/meson: fix debug log statement when setting the HDMI clocks
- drm/meson: use vclk_freq instead of pixel_freq in debug print
- drm/meson: fix more rounding issues with 59.94Hz modes
- i40e: return false from i40e_reset_vf if reset is in progress
- i40e: retry VFLR handling if there is ongoing VF reset
- macsec: MACsec SCI assignment for ES = 0
- Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
- Bluetooth: MGMT: Fix sparse errors
- net/mlx5: Ensure fw pages are always allocated on same NUMA
- net/mlx5: Fix return value when searching for existing flow group
- net/mlx5: HWS, fix missing ip_version handling in definer
- net/mlx5e: Fix leak of Geneve TLV option object
- net_sched: tbf: fix a race in tbf_change()
- fs/filesystems: Fix potential unsigned integer underflow in fs_name()
- gfs2: pass through holder from the VFS for freeze/thaw
- btrfs: exit after state split error at set_extent_bit()
- nvmet-fcloop: access fcpreq only when holding reqlock
- perf: Ensure bpf_perf_link path is properly serialized
- block: use q->elevator with ->elevator_lock held in elv_iosched_show()
- io_uring: consistently use rcu semantics with sqpoll thread
- bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
- block: Fix bvec_set_folio() for very large folios
- objtool/rust: relax slice condition to cover more `noreturn` Rust
functions
- tools/resolve_btfids: Fix build when cross compiling kernel with clang.
- Revert "wifi: mwifiex: Fix HT40 bandwidth issue."
- ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
- usb: usbtmc: Fix read_stb function and get_stb ioctl
- tty: serial: 8250_omap: fix TX with DMA for am33xx
- usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence
- usb: cdnsp: Fix issue with detecting command completion event
- usb: cdnsp: Fix issue with detecting USB 3.2 speed
- usb: Flush altsetting 0 endpoints before reinitializating them after
reset.
- usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
- 9p: Add a migrate_folio method
- ring-buffer: Move cpus_read_lock() outside of buffer->mutex
- xfs: don't assume perags are initialised when trimming AGs
- xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
- x86/fred/signal: Prevent immediate repeat of single step trap on return
from SIGTRAP handler
- calipso: unlock rcu before returning -EAFNOSUPPORT
- regulator: dt-bindings: mt6357: Drop fixed compatible requirement
- usb: misc: onboard_usb_dev: fix build warning for
CONFIG_USB_ONBOARD_DEV_USB5744=n
- net: usb: aqc111: debug info before sanitation
- overflow: Introduce __DEFINE_FLEX for having no initializer
- gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add
- thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit
- pidfs: move O_RDWR into pidfs_alloc_file()
- ACPICA: Introduce ACPI_NONSTRING
- ACPICA: Apply ACPI_NONSTRING
- ACPICA: Apply ACPI_NONSTRING in more places
- bcachefs: Repair code for directory i_size
- bcachefs: delete dead code from may_delete_deleted_inode()
- bcachefs: Run may_delete_deleted_inode() checks in bch2_inode_rm()
- bcachefs: Fix subvol to missing root repair
- crypto: ecdsa - Fix enc/dec size reported by KEYCTL_PKEY_QUERY
- crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
- spinlock: extend guard with spinlock_bh variants
- crypto: zynqmp-sha - Add locking
- gfs2: Move gfs2_dinode_dealloc
- gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc
- selftests: coredump: Properly initialize pointer
- selftests: coredump: Fix test failure for slow machines
- selftests: coredump: Raise timeout to 2 minutes
- sched/fair: Fixup wake_up_sync() vs DELAYED_DEQUEUE
- gfs2: Move gfs2_trans_add_databufs
- gfs2: Don't start unnecessary transactions during log flush
- platform/chrome: cros_ec_typec: Set Pin Assignment E in DP PORT VDO
- PM: runtime: Add new devm functions
- spi: atmel-quadspi: Fix unbalanced pm_runtime by using devm_ API
- EDAC/bluefield: Don't use bluefield_edac_readl() result on error
- drm: xlnx: zynqmp_dpsub: fix Kconfig dependencies for ASoC
- drm/vc4: hdmi: Call HDMI hotplug helper on disconnect
- drm/panthor: Call panthor_gpu_coherency_init() after PM resume()
- accel/amdxdna: Fix incorrect size of ERT_START_NPU commands
- drm/panthor: Fix the panthor_gpu_coherency_init() error path
- drm/amdgpu: Refine Cleaner Shader MEC firmware version for GFX10.1.x
GPUs
- drm/v3d: Associate a V3D tech revision to all supported devices
- drm/v3d: fix client obtained from axi_ids on V3D 4.1
- drm/v3d: client ranges from axi_ids are different with V3D 7.1
- drm/msm/dpu: remove DSC feature bit for PINGPONG on MSM8937
- drm/msm/dpu: remove DSC feature bit for PINGPONG on MSM8917
- drm/msm/dpu: remove DSC feature bit for PINGPONG on MSM8953
- drm/amd/display: Don't check for NULL divisor in fixpt code
- kselftest/arm64: fp-ptrace: Fix expected FPMR value when PSTATE.SM is
changed
- drm/i915/dp_mst: Use the correct connector while computing the link BPP
limit on MST
- libbpf: Fix implicit memfd_create() for bionic
- bpf: Check link_create.flags parameter for multi_uprobe
- net: phy: mediatek: permit to compile test GE SOC PHY driver
- wifi: ath12k: Resolve multicast packet drop by populating key_cipher in
ath12k_install_key()
- wifi: ath12k: fix SLUB BUG - Object already free in ath12k_reg_free()
- wifi: ath12k: fix ATH12K_FLAG_REGISTERED flag handling
- net/mlx5: HWS, Fix matcher action template attach
- xfrm: provide common xdo_dev_offload_ok callback implementation
- xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free}
- bonding: Mark active offloaded xfrm_states
- bonding: Fix multiple long standing offload races
- wifi: ath12k: Handle error cases during extended skb allocation
- wifi: ath12k: Refactor the monitor Rx parser handler argument
- wifi: ath12k: Add extra TLV tag parsing support in monitor Rx path
- wifi: ath12k: Avoid fetch Error bitmap and decap format from Rx TLV
- wifi: ath12k: Replace band define G with GHZ where appropriate
- wifi: ath12k: change the status update in the monitor Rx
- wifi: ath12k: add rx_info to capture required field from rx descriptor
- wifi: ath12k: remove redundant declaration of ath12k_dp_rx_h_find_peer()
- wifi: ath12k: replace the usage of rx desc with rx_info
- wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers
- wifi: iwlwifi: re-add IWL_AMSDU_8K case
- iommu: ipmmu-vmsa: avoid Wformat-security warning
- iommu/io-pgtable-arm: dynamically allocate selftest device struct
- f2fs: zone: fix to calculate first_zoned_segno correctly
- selftests/bpf: Fix kmem_cache iterator draining
- iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev
- clk: test: Forward-declare struct of_phandle_args in kunit/clk.h
- pinctrl: qcom: correct the ngpios entry for QCS615
- pinctrl: qcom: correct the ngpios entry for QCS8300
- wifi: ath12k: Reorder and relocate the release of resources in
ath12k_core_deinit()
- hisi_acc_vfio_pci: bugfix cache write-back issue
- hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
- wifi: mt76: mt7996: avoid null deref in mt7996_stop_phy()
- Bluetooth: separate CIS_LINK and BIS_LINK link types
- wifi: mt76: scan: Fix 'mlink' dereferenced before IS_ERR_OR_NULL check
- wifi: mt76: mt7996: fix beamformee SS field
- wifi: mt76: mt7996: fix invalid NSS setting when TX path differs from
NSS
- wifi: mt76: fix available_antennas setting
- octeontx2-af: Send Link events one by one
- f2fs: fix to skip f2fs_balance_fs() if checkpoint is disabled
- arm64: dts: qcom: sa8775p: Partially revert "arm64: dts: qcom: sa8775p:
add QCrypto nodes"
- arm64: dts: qcom: qcs8300: Partially revert "arm64: dts: qcom: qcs8300:
add QCrypto nodes"
- arm64: dts: qcom: sm8550: use ICC tag for all interconnect phandles
- arm64: dts: qcom: sm8550: add missing cpu-cfg interconnect path in the
mdss node
- arm64: dts: qcom: ipq9574: fix the msi interrupt numbers of pcie3
- arm64: dts: qcom: sm8750: Fix cluster hierarchy for idle states
- arm64: dts: qcom: sm8750: Correct clocks property for uart14 node
- arm64: dts: qcom: qcs615: remove disallowed property in spmi bus node
- arm64: dts: qcom: sm8650: Fix domain-idle-state for CPU2
- arm64: dts: rockchip: Add missing uart3 interrupt for RK3528
- arm64: dts: mediatek: mt8188: Fix IOMMU device for rdma0
- arm64: dts: qcom: x1e001de-devkit: Describe USB retimers resets pin
configs
- arm64: dts: qcom: x1e001de-devkit: Fix pin config for USB0 retimer vregs
- arm64: dts: allwinner: a100: set maximum MMC frequency
- arm64: dts: renesas: white-hawk-single: Improve Ethernet TSN description
- arm64: dts: qcom: sm8650: add the missing l2 cache node
- arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
Puma
- dt-bindings: display/msm/dsi-phy: Add header with exposed clock IDs
- arm64: dts: qcom: msm8998: Use the header with DSI phy clock IDs
- arm64: dts: qcom: msm8998: Remove mdss_hdmi_phy phandle argument
- arm64: dts: qcom: qcs615: Fix up UFS clocks
- ubsan: integer-overflow: depend on BROKEN to keep this out of CI
- [Config] disable UBSAN_SIGNED_WRAP
- tools build: Don't set libunwind as available if test-all.c build
succeeds
- tools build: Don't show libunwind build status as it is opt-in
- tools build: Don't show libbfd build status as it is opt-in
- dm: handle failures in dm_table_set_restrictions
- HID: intel-thc-hid: intel-quicki2c: pass correct arguments to
acpi_evaluate_object
- perf tool_pmu: Fix aggregation on duration_time
- remoteproc: k3-r5: Refactor sequential core power up/down operations
- netfs: Fix setting of transferred bytes with short DIO reads
- netfs: Fix the request's work item to not require a ref
- netfs: Fix wait/wake to be consistent about the waitqueue used
- mfd: exynos-lpass: Fix another error handling path in
exynos_lpass_probe()
- netfs: Fix undifferentiation of DIO reads from unbuffered reads
- mailbox: mchp-ipc-sbi: Fix COMPILE_TEST build error
- perf pmu: Avoid segv for missing name/alias_name in wildcarding
- s390/uv: Don't return 0 from make_hva_secure() if the operation was not
successful
- s390/uv: Always return 0 from s390_wiggle_split_folio() if successful
- s390/uv: Improve splitting of large folios that cannot be split while
dirty
- nfs_localio: use cmpxchg() to install new nfs_file_localio
- nfs_localio: always hold nfsd net ref with nfsd_file ref
- nfs_localio: simplify interface to nfsd for getting nfsd_file
- nfs_localio: duplicate nfs_close_local_fh()
- nfs_localio: protect race between nfs_uuid_put() and
nfs_close_local_fh()
- nfs_localio: change nfsd_file_put_local() to take a pointer to __rcu
pointer
- rust: file: mark `LocalFile` as `repr(transparent)`
- exportfs: require ->fh_to_parent() to encode connectable file handles
- PCI: pciehp: Ignore Presence Detect Changed caused by DPC
- PCI: pciehp: Ignore Link Down/Up caused by Secondary Bus Reset
- PCI: rockchip: Fix order of rockchip_pci_core_rsts
- PCI: imx6: Save and restore the LUT setting during suspend/resume for
i.MX95 SoC
- Revert "phy: qcom-qusb2: add QUSB2 support for IPQ5424"
- phy: qcom-qusb2: reuse the IPQ6018 settings for IPQ5424
- soundwire: only compute port params in specific stream states
- rust: pci: fix docs related to missing Markdown code spans
- coresight: core: Disable helpers for devices that fail to enable
- iio: dac: adi-axi-dac: fix bus read
- coresight: tmc: fix failure to disable/enable ETF after reading
- coresight: etm4x: Fix timestamp bit field handling
- coresight/etm4: fix missing disable active config
- staging: gpib: Fix PCMCIA config identifier
- staging: gpib: Fix secondary address restriction
- rust: miscdevice: fix typo in MiscDevice::ioctl documentation
- drm/bridge: analogix_dp: Remove the unnecessary calls to
clk_disable_unprepare() during probing
- drm/bridge: analogix_dp: Remove CONFIG_PM related check in
analogix_dp_bind()/analogix_dp_unbind()
- drm/bridge: analogix_dp: Add support to get panel from the DP AUX bus
- drm/bridge: analogix_dp: Fix clk-disable removal
- drm/xe: Add missing documentation of rpa_freq
- md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT
- net: Fix checksum update for ILA adj-transport
- bpf: Clarify the meaning of BPF_F_PSEUDO_HDR
- bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
- iavf: iavf_suspend(): take RTNL before netdev_lock()
- iavf: centralize watchdog requeueing itself
- iavf: simplify watchdog_task in terms of adminq task scheduling
- iavf: extract iavf_watchdog_step() out of iavf_watchdog_task()
- iavf: sprinkle netdev_assert_locked() annotations
- drm/amdgpu/gfx10: Refine Cleaner Shader for GFX10.1.10
- block: flip iter directions in blk_rq_integrity_map_user()
- nvme: fix implicit bool to flags conversion
- net: dsa: b53: implement setting ageing time
- net: dsa: b53: do not configure bcm63xx's IMP port interface
- netlink: specs: rt-link: add missing byte-order properties
- net: annotate data-races around cleanup_net_task
- drm/xe/vsec: fix CONFIG_INTEL_VSEC dependency
- drm/xe: Rework eviction rejection of bound external bos
- ALSA: hda: Allow to fetch hlink by ID
- ASoC: Intel: avs: PCM operations for LNL-based platforms
- ASoC: Intel: avs: Fix PPLCxFMT calculation
- ASoC: Intel: avs: Ignore Vendor-space manipulation for ACE
- ASoC: Intel: avs: Read HW capabilities when possible
- ASoC: Intel: avs: Relocate DSP status registers
- ASoC: Intel: avs: Fix paths in MODULE_FIRMWARE hints
- fs: convert mount flags to enum
- finish_automount(): don't leak MNT_LOCKED from parent to child
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the
right userns
- genksyms: Fix enum consts from a reference affecting new values
- accel/amdxdna: Fix incorrect PSP firmware size
- drm/vc4: fix infinite EPROBE_DEFER loop
- iavf: fix reset_task for early reset event
- ice/ptp: fix crosstimestamp reporting
- net/mlx5: HWS, make sure the uplink is the last destination
- btrfs: fix fsync of files with no hard links not persisting deletion
- io_uring: fix spurious drain flushing
- smb: client: fix perf regression with deferred closes
- rust: compile libcore with edition 2024 for 1.87+
- pidfs: never refuse ppid == 0 in PIDFD_GET_INFO
- powerpc/kernel: Fix ppc_save_regs inclusion in build
- mm/filemap: gate dropbehind invalidate on folio !dirty && !writeback
- mm/filemap: use filemap_end_dropbehind() for read invalidation
- x86/hyperv: Fix APIC ID and VP index confusion in hv_snp_boot_ap()
- Upstream stable to v6.12.34, v6.15.1, v6.15.2, v6.15.3
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38105
- ALSA: usb-audio: Kill timer properly at removal
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38114
- e1000: Move cancel_work_sync to avoid deadlock
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38116
- wifi: ath12k: fix uaf in ath12k_core_init()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38306
- fs/fhandle.c: fix a race in call of has_locked_children()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38272
- net: dsa: b53: do not enable EEE on bcm63xx
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38311
- iavf: get rid of the crit lock
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38128
- Bluetooth: MGMT: reject malformed HCI_CMD_SYNC commands
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38130
- drm/connector: only call HDMI audio helper plugged cb if non-null
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38132
- coresight: holding cscfg_csdev_lock while removing cscfg from csdev
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38137
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38139
- netfs: Fix oops in write-retry from mis-resetting the subreq iterator
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38140
- dm: limit swapping tables for devices with zone write plugs
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38279
- bpf: Do not include stack ptr register in precision backtracking
bookkeeping
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38314
- virtio-pci: Fix result size returned for the admin command completion
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38316
- wifi: mt76: mt7996: avoid NULL pointer dereference in
mt7996_set_monitor()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38281
- wifi: mt76: mt7996: Add NULL check in mt7996_thermal_init
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38284
- wifi: rtw89: pci: configure manual DAC mode via PCI config API only
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38287
- IB/cm: Drop lockdep assert and WARN when freeing old msg
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38289
- scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38291
- wifi: ath12k: Prevent sending WMI commands to firmware during firmware
crash
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38294
- wifi: ath12k: fix NULL access in assign channel context handler
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38296
- ACPI: platform_profile: Avoid initializing on non-ACPI platforms
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38100
- x86/iopl: Cure TIF_IO_BITMAP inconsistencies
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38101
- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38267
- ring-buffer: Do not trigger WARN_ON() due to a commit_overrun
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38268
- usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38102
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38301
- nvmem: zynqmp_nvmem: unbreak driver after cleanup
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38352
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and
posix_cpu_timer_del()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38103
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38302
- block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38106
- io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38269
- btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38270
- net: drv: netdevsim: don't napi_complete() from netpoll
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38107
- net_sched: ets: fix a race in ets_qdisc_change()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38108
- net_sched: red: fix a race in __red_change()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38109
- net/mlx5: Fix ECVF vports unload on shutdown flow
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38303
- Bluetooth: eir: Fix possible crashes on eir_create_adv_data
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38304
- Bluetooth: Fix NULL pointer deference on eir_get_service_data
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38110
- net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38111
- net/mdiobus: Fix potential out-of-bounds read/write access
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38112
- net: Fix TOCTOU issue in sk_is_readable()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38113
- ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38088
- powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38115
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38414
- wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38305
- ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38117
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38118
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38119
- scsi: core: ufs: Fix a hang in the error handler
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38307
- ASoC: Intel: avs: Verify content returned by parse_int_array()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38310
- seg6: Fix validation of nexthop addresses
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38120
- netfilter: nf_set_pipapo_avx2: fix initial map fill
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38122
- gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38123
- net: wwan: t7xx: Fix napi rx poll issue
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38124
- net: fix udp gso skb_segment after pull from frag_list
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38125
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38126
- net: stmmac: make sure that ptp_rate is not 0 before configuring
timestamping
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38127
- ice: fix Tx scheduler error handling in XDP callback
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38129
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38131
- coresight: prevent deactivate active config while enabling the config
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38274
- fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38134
- usb: acpi: Prevent null pointer dereference in
usb_acpi_add_usb4_devlink()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38135
- serial: Fix potential null-ptr-deref in mlb_usio_probe()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38136
- usb: renesas_usbhs: Reorder clock handling and power management in probe
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38138
- dmaengine: ti: Add NULL check in udma_probe()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38275
- phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38141
- dm: fix dm_blk_report_zones
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38142
- hwmon: (asus-ec-sensors) check sensor index in read_string()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38277
- mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38143
- backlight: pm8941: Add NULL check in wled_configure()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38312
- fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38145
- soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38313
- bus: fsl-mc: fix double-free on mc_dev
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38415
- Squashfs: check return result of sb_min_blocksize
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38146
- net: openvswitch: Fix the dead loop of MPLS parse
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38147
- calipso: Don't call calipso functions for AF_INET sk.
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38278
- octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38148
- net: phy: mscc: Fix memory leak when using one step timestamping
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38149
- net: phy: clear phydev->devlink when the link is deleted
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38280
- bpf: Avoid __bpf_prog_ret0_warn when jit fails
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38151
- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38153
- net: usb: aqc111: fix error handling of usbnet read calls
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38154
- bpf, sockmap: Avoid using sk_socket after free when sending
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38315
- Bluetooth: btintel: Check dsbr size from EFI variable
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38155
- wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38156
- wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38282
- kernfs: Relax constraint in draining guard
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38157
- wifi: ath9k_htc: Abort software beacon handling if disabled
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38283
- hisi_acc_vfio_pci: bugfix live migration function without VF device
driver
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38158
- hisi_acc_vfio_pci: fix XQE dma address error
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38159
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38285
- bpf: Fix WARN() in get_bpf_raw_tp_regs
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38286
- pinctrl: at91: Fix possible out-of-boundary access
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38160
- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38161
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38162
- netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38288
- scsi: smartpqi: Fix smp_processor_id() call trace for preemptible
kernels
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38290
- wifi: ath12k: fix node corruption in ar->arvifs list
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38292
- wifi: ath12k: fix invalid access to memory
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38163
- f2fs: fix to do sanity check on sbi->total_valid_block_count
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38317
- wifi: ath12k: Fix buffer overflow in debugfs
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38164
- f2fs: zone: fix to avoid inconsistence in between SIT and SSA
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38165
- bpf, sockmap: Fix panic when calling skb_linearize
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38166
- bpf: fix ktls panic with sockmap
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38293
- wifi: ath11k: fix node corruption in ar->arvifs list
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38295
- perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in
meson_ddr_pmu_create()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38167
- fs/ntfs3: handle hdr_first_de() return value
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38318
- perf: arm-ni: Fix missing platform_set_drvdata()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38168
- perf: arm-ni: Unregister PMUs on probe failure
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38169
- arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38170
- arm64/fpsimd: Discard stale CPU state when handling SME traps
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38319
- drm/amd/pp: Fix potential NULL pointer dereference in
atomctrl_initialize_mc_reg_table
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38297
- PM: EM: Fix potential division-by-zero error in em_compute_costs()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38298
- EDAC/skx_common: Fix general protection fault
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38299
- ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38172
- erofs: avoid using multiple devices with different type
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38173
- crypto: marvell/cesa - Handle zero-length skcipher requests
* Plucky update: upstream stable patchset 2025-08-06 (LP: #2119603) //
CVE-2025-38300
- crypto: sun8i-ce-cipher - fix error handling in
sun8i_ce_cipher_prepare()
* Plucky update: v6.14.11 upstream stable release (LP: #2119039)
- tracing: Fix compilation warning on arm32
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
- pinctrl: armada-37xx: set GPIO output value before setting direction
- clk: samsung: correct clock summary for hsi1 block
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- Documentation: ACPI: Use all-string data node references
- rtc: Make rtc_time64_to_tm() support dates before 1970
- rtc: Fix offset calculation for .start_secs < 0
- orangefs: adjust counting code to recover from 665575cf
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
- usb: typec: ucsi: fix Clang -Wsign-conversion warning
- Bluetooth: hci_qca: move the SoC type check to the right place
- nvmem: rmem: select CONFIG_CRC32
- usb: usbtmc: Fix timeout value in get_stb
- dt-bindings: pwm: adi,axi-pwmgen: Fix clocks
- dt-bindings: usb: cypress,hx3: Add support for all variants
- dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt
property
- Linux 6.14.11
* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
CVE-2025-38174
- thunderbolt: Do not double dequeue a configuration request
* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
CVE-2025-38175
- binder: fix yet another UAF in binder_devices
* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
CVE-2025-38176
- binder: fix use-after-free in binderfs_evict_inode()
* Plucky update: v6.14.11 upstream stable release (LP: #2119039) //
CVE-2025-38265
- serial: jsm: fix NPE during jsm_uart_port_init
* Plucky update: v6.14.10 upstream stable release (LP: #2119010)
- can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
- arm64: dts: socfpga: agilex5: fix gpio0 address
- arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma
- arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
- arm64: dts: qcom: sa8775p: Add missing properties for cryptobam
- arm64: dts: qcom: sa8775p: Remove extra entries from the iommus property
- arm64: dts: qcom: sa8775p: Remove cdsp compute-cb at 10
- arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
- arm64: dts: qcom: sm8450: Add missing properties for cryptobam
- arm64: dts: qcom: sm8550: Add missing properties for cryptobam
- arm64: dts: qcom: sm8650: Add missing properties for cryptobam
- arm64: dts: qcom: x1e001de-devkit: Fix vreg_l2j_1p2 voltage
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e001de-devkit: mark l12b and
l15b always-on"
- arm64: dts: qcom: x1e001de-devkit: mark l12b and l15b always-on
- arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix vreg_l2j_1p2 voltage
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-dell-xps13-9345: mark
l12b and l15b always-on"
- arm64: dts: qcom: x1e80100-dell-xps13-9345: mark l12b and l15b always-on
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-hp-omnibook-x14:
Enable SMB2360 0 and 1"
- arm64: dts: qcom: x1e80100-hp-omnibook-x14: Enable SMB2360 0 and 1
- arm64: dts: qcom: x1e80100-hp-omnibook-x14: Fix vreg_l2j_1p2 voltage
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-hp-x14: mark l12b and
l15b always-on"
- arm64: dts: qcom: x1e80100-hp-x14: mark l12b and l15b always-on
- arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix vreg_l2j_1p2 voltage
- arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-qcp: mark l12b and
l15b always-on"
- arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on
- Revert "UBUNTU: SAUCE: arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b
and l15b always-on"
- arm64: dts: qcom: x1e80100-yoga-slim7x: mark l12b and l15b always-on
- arm64: dts: qcom: x1e80100: Fix PCIe 3rd controller DBI size
- arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default
- arm64: dts: ti: k3-am62a-main: Set eMMC clock parent to default
- arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to
default
- arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219
overlay
- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay
- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay
- arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
- arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
- arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
- arm64: dts: ti: k3-j721e-sk: Remove clock-names property from IMX219
overlay
- arm64: dts: ti: k3-j721e-sk: Add requiried voltage supplies for IMX219
- arm64: dts: ti: k3-j722s-evm: Enable "serdes_wiz0" and "serdes_wiz1"
- arm64: dts: ti: k3-j722s-main: Disable "serdes_wiz0" and "serdes_wiz1"
- arm64: dts: ti: k3-j784s4-j742s2-main-common: Fix length of
serdes_ln_ctrl
- perf/arm-cmn: Fix REQ2/SNP2 mixup
- perf/arm-cmn: Initialise cmn->cpu earlier
- perf/arm-cmn: Add CMN S3 ACPI binding
- iommu: Handle yet another race around registration
- coredump: fix error handling for replace_fd()
- coredump: hand a pidfd to the usermode coredump helper
- dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
- HID: amd_sfh: Avoid clearing reports for SRA sensor
- HID: quirks: Add ADATA XPG alpha wireless mouse support
- nfs: don't share pNFS DS connections between net namespaces
- platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
- kbuild: Require pahole <v1.28 or >v1.29 with GENDWARFKSYMS on X86
- SAUCE: Revert "kbuild: Require pahole <v1.28 or >v1.29 with
GENDWARFKSYMS on X86"
- um: let 'make clean' properly clean underlying SUBARCH as well
- nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq()
- drm/amd/display: fix link_set_dpms_off multi-display MST corner case
- nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing
- phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
- phy: phy-rockchip-samsung-hdptx: Fix PHY PLL output 50.25MHz error
- spi: spi-sun4i: fix early activation
- nvme: all namespaces in a subsystem must adhere to a common atomic write
size
- nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
- drm/xe/xe2hpg: Add Wa_22021007897
- drm/xe: Save the gt pointer in lrc and drop the tile
- char: tpm: tpm-buf: Add sanity check fallback in read helpers
- NFS: Avoid flushing data while holding directory locks in nfs_rename()
- platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
- ALSA: hda/realtek - restore auto-mute mode for Dell Chrome platform
- platform/x86: thinkpad_acpi: Ignore battery threshold change event
notification
- net: ethernet: ti: am65-cpsw: Lower random mac address error print to
info
- Linux 6.14.10
* Plucky update: v6.14.10 upstream stable release (LP: #2119010) //
CVE-2025-38092
- ksmbd: use list_first_entry_or_null for opinfo_get_list()
* Plucky update: v6.14.10 upstream stable release (LP: #2119010) //
CVE-2025-38091
- drm/amd/display: check stream id dml21 wrapper to get plane_id
* Plucky update: v6.14.10 upstream stable release (LP: #2119010) //
CVE-2025-38082
- gpio: virtuser: fix potential out-of-bound write
* Plucky update: v6.14.9 upstream stable release (LP: #2115678)
- drm/amd/display: Do not enable replay when vtotal update is pending.
- drm/amd/display: Correct timing_adjust_pending flag setting.
- drm/amd/display: Defer BW-optimization-blocked DRR adjustments
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver
data
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
- nvmet: pci-epf: Keep completion queues mapped
- nvmet: pci-epf: clear completion queue IRQ flag on delete
- cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
- nvmem: rockchip-otp: Move read-offset into variant-data
- nvmem: rockchip-otp: add rk3576 variant data
- nvmem: core: fix bit offsets of more than one byte
- nvmem: core: verify cell's raw_len
- nvmem: core: update raw_len if the bit reading is required
- nvmem: qfprom: switch to 4-byte aligned reads
- scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
- dma/mapping.c: dev_dbg support for dma_addressing_limited
- intel_th: avoid using deprecated page->mapping, index fields
- mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type
- dma-mapping: avoid potential unused data compilation warning
- btrfs: tree-checker: adjust error code for header level check
- cgroup: Fix compilation issue due to cgroup_mutex not being exported
- vhost_task: fix vhost_task_create() documentation
- scsi: mpi3mr: Add level check to control event logging
- dma-mapping: Fix warning reported for missing prototype
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ
- fs/buffer: split locking for pagecache lookups
- fs/buffer: introduce sleeping flavors for pagecache lookups
- fs/buffer: use sleeping version of __find_get_block()
- fs/ocfs2: use sleeping version of __find_get_block()
- fs/jbd2: use sleeping version of __find_get_block()
- fs/ext4: use sleeping version of sb_find_get_block()
- drm/amd/display: Enable urgent latency adjustment on DCN35
- drm/amdgpu: Allow P2P access through XGMI
- selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
- block: hoist block size validation code to a separate function
- io_uring: don't duplicate flushing in io_req_post_cqe
- bpf: fix possible endless loop in BPF map iteration
- samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
- kconfig: merge_config: use an empty file as initfile
- s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel
log
- cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
- cifs: Fix querying and creating MF symlinks over SMB1
- cifs: Fix access_flags_to_smbopen_mode
- cifs: Fix negotiate retry functionality
- smb: client: Store original IO parameters and prevent zero IO sizes
- fuse: Return EPERM rather than ENOSYS from link()
- exfat: call bh_read in get_block only when necessary
- io_uring/msg: initialise msg request opcode
- NFSv4: Check for delegation validity in
nfs_start_delegation_return_locked()
- NFS: Don't allow waiting for exiting tasks
- SUNRPC: Don't allow waiting for exiting tasks
- arm64: Add support for HIP09 Spectre-BHB mitigation
- iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability
- ring-buffer: Use kaslr address instead of text delta
- tracing: Mark binary printing functions with __printf() attribute
- ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
- tpm: Convert warn to dbg in tpm2_start_auth_session()
- mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
- mailbox: use error ret code of of_parse_phandle_with_args()
- riscv: Allow NOMMU kernels to access all of RAM
- fbdev: fsl-diu-fb: add missing device_remove_file()
- fbcon: Use correct erase colour for clearing in fbcon
- fbdev: core: tileblit: Implement missing margin clearing for tileblit
- cifs: Set default Netbios RFC1001 server name to hostname in UNC
- cifs: add validation check for the fields in smb_aces
- cifs: Fix establishing NetBIOS session for SMB2+ connection
- cifs: Fix getting DACL-only xattr system.cifs_acl and system.smb3_acl
- cifs: Check if server supports reparse points before using them
- NFSv4: Treat ENETUNREACH errors as fatal for state recovery
- SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
- SUNRPC: rpcbind should never reset the port to the value '0'
- ASoC: codecs: wsa884x: Correct VI sense channel mask
- ASoC: codecs: wsa883x: Correct VI sense channel mask
- mctp: Fix incorrect tx flow invalidation condition in mctp-i2c
- net: tn40xx: add pci-id of the aqr105-based Tehuti TN4010 cards
- net: tn40xx: create swnode for mdio and aqr105 phy and add to mdiobus
- thermal/drivers/mediatek/lvts: Start sensor interrupts disabled
- thermal/drivers/qoriq: Power down TMU on system suspend
- Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler
removal
- Bluetooth: Disable SCO support if READ_VOICE_SETTING is
unsupported/broken
- RISC-V: add vector extension validation checks
- dql: Fix dql->limit value when reset.
- lockdep: Fix wait context check on softirq for PREEMPT_RT
- objtool: Properly disable uaccess validation
- net/mlx5e: Use right API to free bitmap memory
- PCI: dwc: ep: Ensure proper iteration over outbound map windows
- r8169: disable RTL8126 ZRX-DC timeout
- tools/build: Don't pass test log files to linker
- PCI: xilinx-cpm: Add cpm_csr register mapping for CPM5_HOST1 variant
- i2c: qcom-geni: Update i2c frequency table to match hardware guidance
- pNFS/flexfiles: Report ENETDOWN as a connection error
- drm/amdgpu/discovery: check ip_discovery fw file available
- drm/amdgpu: rework how the cleaner shader is emitted v3
- drm/amdgpu: rework how isolation is enforced v2
- drm/amdgpu: use GFP_NOWAIT for memory allocations
- drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12
- PCI: vmd: Disable MSI remapping bypass under Xen
- xen/pci: Do not register devices with segments >= 0x10000
- ext4: on a remount, only log the ro or r/w state when it has changed
- pidfs: improve multi-threaded exec and premature thread-group leader
exit polling
- staging: vchiq_arm: Create keep-alive thread during probe
- mmc: host: Wait for Vdd to settle on card power off
- drm/amdgpu: Skip pcie_replay_count sysfs creation for VF
- cgroup/rstat: avoid disabling irqs for O(num_cpu)
- wifi: mt76: Check link_conf pointer in mt76_connac_mcu_sta_basic_tlv()
- wifi: mt76: scan: fix setting tx_info fields
- wifi: mt76: mt7996: implement driver specific get_txpower function
- wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
- wifi: mt76: mt7996: use the correct vif link for scanning/roc
- wifi: mt76: scan: set vif offchannel link for scanning/roc
- wifi: mt76: mt7996: fix SER reset trigger on WED reset
- wifi: mt76: mt7996: revise TXS size
- wifi: mt76: mt7925: load the appropriate CLC data based on hardware type
- wifi: mt76: mt7925: Simplify HIF suspend handling to avoid suspend fail
- wifi: mt76: mt7925: fix fails to enter low power mode in suspend state
- x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in non-UAPI headers
- x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers
- x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
- x86/smpboot: Fix INIT delay assignment for extended Intel Families
- x86/microcode: Update the Intel processor flag scan check
- x86/amd_node: Add SMN offsets to exclusive region access
- i2c: qup: Vote for interconnect bandwidth to DRAM
- i2c: amd-asf: Set cmd variable when encountering an error
- i2c: pxa: fix call balance of i2c->clk handling routines
- btrfs: make btrfs_discard_workfn() block_group ref explicit
- btrfs: avoid linker error in btrfs_find_create_tree_block()
- btrfs: run btrfs_error_commit_super() early
- btrfs: fix non-empty delayed iputs list on unmount due to async workers
- btrfs: get zone unusable bytes while holding lock at
btrfs_reclaim_bgs_work()
- btrfs: send: return -ENAMETOOLONG when attempting a path that is too
long
- blk-cgroup: improve policy registration error handling
- drm/amdgpu: release xcp_mgr on exit
- drm/amd/display: Guard against setting dispclk low for dcn31x
- drm/amdgpu: don't free conflicting apertures for non-display devices
- drm/amdgpu: adjust drm_firmware_drivers_only() handling
- i3c: master: svc: Fix missing STOP for master request
- s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste()
- dlm: make tcp still work in multi-link env
- loop: move vfs_fsync() out of loop_update_dio()
- clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug
- um: Store full CSGSFS and SS register from mcontext
- um: Update min_low_pfn to match changes in uml_reserved
- net/mlx5: Preserve rate settings when creating a rate node
- wifi: mwifiex: Fix HT40 bandwidth issue.
- bnxt_en: Query FW parameters when the CAPS_CHANGE bit is set
- ixgbe: add support for thermal sensor event reception
- riscv: Call secondary mmu notifier when flushing the tlb
- ext4: reorder capability check last
- hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
- scsi: st: Tighten the page format heuristics with MODE SELECT
- scsi: st: ERASE does not change tape location
- vfio/pci: Handle INTx IRQ_NOTCONNECTED
- bpftool: Using the right format specifiers
- bpf: Return prog btf_id without capable check
- PCI: dwc: Use resource start as ioremap() input in
dw_pcie_pme_turn_off()
- jbd2: do not try to recover wiped journal
- tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
- rtc: rv3032: fix EERD location
- thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for
retimer
- erofs: initialize decompression early
- spi: spi-mux: Fix coverity issue, unchecked return value
- ASoC: pcm6240: Drop bogus code handling IRQ as GPIO
- ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
- kunit: tool: Fix bug in parsing test plan
- bpf: Allow pre-ordering for bpf cgroup progs
- kbuild: fix argument parsing in scripts/config
- kconfig: do not clear SYMBOL_VALID when reading include/config/auto.conf
- crypto: octeontx2 - suppress auth failure screaming due to negative
tests
- dm: restrict dm device size to 2^63-512 bytes
- net/smc: use the correct ndev to find pnetid by pnetid table
- xen: Add support for XenServer 6.1 platform device
- pinctrl-tegra: Restore SFSEL bit when freeing pins
- mfd: syscon: Add check for invalid resource size
- mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
- drm/amdgpu/gfx12: don't read registers in mqd init
- drm/amdgpu/gfx11: don't read registers in mqd init
- drm/amdgpu: Update SRIOV video codec caps
- ASoC: sun4i-codec: support hp-det-gpios property
- ASoC: sun4i-codec: correct dapm widgets and controls for h616
- clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490
- leds: Kconfig: leds-st1202: Add select for required LEDS_TRIGGER_PATTERN
- leds: leds-st1202: Initialize hardware before DT node child operations
- ext4: reject the 'data_err=abort' option in nojournal mode
- ext4: do not convert the unwritten extents if data writeback fails
- RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
- posix-timers: Add cond_resched() to posix_timer_add() search loop
- posix-timers: Ensure that timer initialization is fully visible
- net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe
- net: hsr: Fix PRP duplicate detection
- timer_list: Don't use %pK through printk()
- wifi: rtw89: coex: Fix coexistence report not show as expected
- wifi: rtw89: set force HE TB mode when connecting to 11ax AP
- netfilter: conntrack: Bound nf_conntrack sysctl writes
- PNP: Expand length of fixup id string
- phy: rockchip: usbdp: Only verify link rates/lanes/voltage when the
corresponding set flags are set
- arm64/mm: Check pmd_table() in pmd_trans_huge()
- arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
- mmc: dw_mmc: add exynos7870 DW MMC support
- mmc: sdhci: Disable SD card clock before changing parameters
- usb: xhci: Don't change the status of stalled TDs on failed Stop EP
- wifi: iwlwifi: mvm: fix setting the TK when associated
- hwmon: (dell-smm) Increment the number of fans
- iommu: Keep dev->iommu state consistent
- printk: Check CON_SUSPEND when unblanking a console
- wifi: iwlwifi: don't warn when if there is a FW error
- wifi: iwlwifi: w/a FW SMPS mode selection
- wifi: iwlwifi: mark Br device not integrated
- wifi: iwlwifi: fix the ECKV UEFI variable name
- wifi: mac80211: don't include MLE in ML reconf per-STA profile
- wifi: cfg80211: Update the link address when a link is added
- wifi: mac80211: fix warning on disconnect during failed ML reconf
- wifi: mac80211_hwsim: Fix MLD address translation
- wifi: mac80211: fix U-APSD check in ML reconfiguration
- wifi: cfg80211: allow IR in 20 MHz configurations
- r8169: increase max jumbo packet size on RTL8125/RTL8126
- ipv6: save dontfrag in cork
- drm/amd/display: remove minimum Dispclk and apply oem panel timing.
- drm/amd/display: calculate the remain segments for all pipes
- drm/amd/display: not abort link train when bw is low
- drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
- gfs2: Check for empty queue in run_queue
- auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct
hd44780_common"
- ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
- badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable
< 0
- block: acquire q->limits_lock while reading sysfs attributes
- coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t
- coresight: change coresight_trace_id_map's lock type to raw_spinlock_t
- iommu/vt-d: Check if SVA is supported when attaching the SVA domain
- iommu/amd/pgtbl_v2: Improve error handling
- fs/pipe: Limit the slots in pipe_resize_ring()
- cpufreq: tegra186: Share policy per cluster
- watchdog: s3c2410_wdt: Fix PMU register bits for ExynosAutoV920 SoC
- watchdog: aspeed: Update bootstatus handling
- misc: pci_endpoint_test: Give disabled BARs a distinct error code
- selftests: pci_endpoint: Skip disabled BARs
- crypto: mxs-dcp - Only set OTP_KEY bit for OTP key
- drm/amdkfd: Set per-process flags only once for gfx9/10/11/12
- drm/amdkfd: Set per-process flags only once cik/vi
- drm/amdkfd: clear F8_MODE for gfx950
- drm/amdgpu: increase RAS bad page threshold
- drm/amdgpu: Fix missing drain retry fault the last entry
- arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
- arm64: tegra: Resize aperture for the IGX PCIe C5 slot
- powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
- ALSA: seq: Improve data consistency at polling
- tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
- rtc: ds1307: stop disabling alarms on probe
- ieee802154: ca8210: Use proper setters and getters for bitwise types
- drm/xe: Nuke VM's mapping upon close
- drm/xe: Retry BO allocation
- soc: samsung: include linux/array_size.h where needed
- ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
- media: c8sectpfe: Call of_node_put(i2c_bus) only once in
c8sectpfe_probe()
- media: cec: use us_to_ktime() where appropriate
- usb: xhci: set page size to the xHCI-supported size
- soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables
- drm/gem: Test for imported GEM buffers with helper
- net: phylink: use pl->link_interface in phylink_expects_phy()
- blk-throttle: don't take carryover for prioritized processing of
metadata
- remoteproc: qcom_wcnss: Handle platforms with only single power domain
- drm/xe: Disambiguate GMDID-based IP names
- drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
- drm/amdgpu: Reinit FW shared flags on VCN v5.0.1
- drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35
- drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
- drm/amd/display: Fix DMUB reset sequence for DCN401
- drm/amd/display: Fix p-state type when p-state is unsupported
- drm/amd/display: Request HW cursor on DCN3.2 with SubVP
- drm/amdgpu: Avoid HDP flush on JPEG v5.0.1
- drm/amdgpu: Add offset normalization in VCN v5.0.1
- perf/core: Clean up perf_try_init_event()
- pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
- rcu: Fix get_state_synchronize_rcu_full() GP-start detection
- drm/msm/dpu: Set possible clones for all encoders
- net: ethernet: ti: cpsw_new: populate netdev of_node
- eth: fbnic: Prepend TSENE FW fields with FBNIC_FW
- net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104
- dpll: Add an assertion to check freq_supported_num
- ublk: enforce ublks_max only for unprivileged devices
- iommufd: Disallow allocating nested parent domain with fault ID
- media: imx335: Set vblank immediately
- net: pktgen: fix mpls maximum labels list parsing
- perf/core: Fix perf_mmap() failure path
- perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
- ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
- scsi: logging: Fix scsi_logging_level bounds
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
- ipv4: fib: Hold rtnl_net_lock() in ip_rt_ioctl().
- drm/rockchip: vop2: Add uv swap for cluster window
- block: mark bounce buffering as incompatible with integrity
- null_blk: generate null_blk configfs features string
- ublk: complete command synchronously on error
- media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
- media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
- clk: imx8mp: inform CCF of maximum frequency of clocks
- PM: sleep: Suppress sleeping parent warning in special case
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
- hwmon: (acpi_power_meter) Fix the fake power alarm reporting
- hwmon: (gpio-fan) Add missing mutex locks
- ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
- drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
- fpga: altera-cvp: Increase credit timeout
- perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
- soc: apple: rtkit: Use high prio work queue
- soc: apple: rtkit: Implement OSLog buffers properly
- wifi: ath12k: Report proper tx completion status to mac80211
- PCI: brcmstb: Expand inbound window size up to 64GB
- PCI: brcmstb: Add a softdep to MIP MSI-X driver
- drm/xe/vf: Retry sending MMIO request to GUC on timeout error
- drm/xe/pf: Create a link between PF and VF devices
- net/mlx5: Avoid report two health errors on same syndrome
- selftests/net: have `gro.sh -t` return a correct exit code
- driver core: faux: only create the device if probe() succeeds
- pinctrl: sophgo: avoid to modify untouched bit when setting cv1800
pinconf
- drm/amdkfd: KFD release_work possible circular locking
- drm/xe: xe_gen_wa_oob: replace program_invocation_short_name
- leds: pwm-multicolor: Add check for fwnode_property_read_u32
- accel/amdxdna: Check interrupt register before mailbox_rx_worker exits
- net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
- net: xgene-v2: remove incorrect ACPI_PTR annotation
- wifi: rtw89: Parse channel from IE to correct invalid hardware reports
during scanning
- bonding: report duplicate MAC address in all situations
- tcp: be less liberal in TSEcr received while in SYN_RECV state
- pinctrl: qcom: msm8917: Add MSM8937 wsa_reset pin
- wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
- soc: ti: k3-socinfo: Do not use syscon helper to build regmap
- bpf: Search and add kfuncs in struct_ops prologue and epilogue
- Octeontx2-af: RPM: Register driver with PCI subsys IDs
- x86/build: Fix broken copy command in genimage.sh when making isoimage
- drm/amd/display: handle max_downscale_src_width fail check
- drm/amd/display: fix dcn4x init failed
- drm/amd/display: fix check for identity ratio
- drm/amd/display: Fix mismatch type comparison
- drm/amd/display: Add opp recout adjustment
- drm/amd/display: Fix mismatch type comparison in custom_float
- ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
- ASoC: mediatek: mt8188: Add reference for dmic clocks
- x86/nmi: Add an emergency handler in nmi_desc & use it in
nmi_shootdown_cpus()
- vhost-scsi: Return queue full for page alloc failures during copy
- vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
- cpuidle: menu: Avoid discarding useful information
- media: adv7180: Disable test-pattern control on adv7180
- media: tc358746: improve calculation of the D-PHY timing registers
- net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode
- scsi: mpi3mr: Update timestamp only for supervisor IOCs
- loop: check in LO_FLAGS_DIRECT_IO in loop_default_blocksize
- net: stmmac: Correct usage of maximum queue number macros
- libbpf: Fix out-of-bound read
- gpiolib: sanitize the return value of gpio_chip::set_config()
- scsi: scsi_debug: First fixes for tapes
- bpf: arm64: Silence "UBSAN: negation-overflow" warning
- net/mlx5: Change POOL_NEXT_SIZE define value and make it global
- x86/kaslr: Reduce KASLR entropy on most x86 systems
- crypto: ahash - Set default reqsize from ahash_alg
- crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
- net: ipv6: Init tunnel link-netns before registering dev
- rtnetlink: Lookup device in target netns when creating link
- drm/xe/oa: Ensure that polled read returns latest data
- MIPS: Use arch specific syscall name match function
- drm/amdgpu: remove all KFD fences from the BO on release
- x86/mm: Make MMU_GATHER_RCU_TABLE_FREE unconditional
- x86/locking: Use ALT_OUTPUT_SP() for percpu_{,try_}cmpxchg{64,128}_op()
- pps: generators: replace copy of pps-gen info struct with const pointer
- MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
- clocksource: mips-gic-timer: Enable counter when CPUs start
- PCI: epf-mhi: Update device ID for SA8775P
- scsi: mpt3sas: Send a diag reset if target reset fails
- wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
- wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
- wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
- wifi: rtw88: Fix rtw_mac_power_switch() for RTL8814AU
- wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
- wifi: rtw89: fw: get sb_sel_ver via get_unaligned_le32()
- wifi: rtw89: fw: add blacklist to avoid obsolete secure firmware
- wifi: rtw89: 8922a: fix incorrect STA-ID in EHT MU PPDU
- power: supply: axp20x_battery: Update temp sensor for AXP717 from device
tree
- EDAC/ie31200: work around false positive build warning
- i3c: master: svc: Flush FIFO before sending Dynamic Address
Assignment(DAA)
- netdevsim: call napi_schedule from a timer context
- mfd: axp20x: AXP717: Add AXP717_TS_PIN_CFG to writeable regs
- eeprom: ee1004: Check chip before probing
- irqchip/riscv-imsic: Separate next and previous pointers in IMSIC vector
- drm/xe/client: Skip show_run_ticks if unable to read timestamp
- drm/amd/pm: Fetch current power limit from PMFW
- drm/amd/display: Add support for disconnected eDP streams
- drm/amd/display: Guard against setting dispclk low when active
- drm/amd/display: Fix BT2020 YCbCr limited/full range input
- drm/amd/display: Read LTTPR ALPM caps during link cap retrieval
- Revert "drm/amd/display: Request HW cursor on DCN3.2 with SubVP"
- drm/amd/display: Don't treat wb connector as physical in
create_validate_stream_for_sink
- RDMA/core: Fix best page size finding when it can cross SG entries
- pmdomain: imx: gpcv2: use proper helper for property detection
- can: c_can: Use of_property_present() to test existence of DT property
- bpf: don't do clean_live_states when state->loop_entry->branches > 0
- eth: mlx4: don't try to complete XDP frames in netpoll
- PCI: Fix old_size lower bound in calculate_iosize() too
- ACPI: HED: Always initialize before evged
- vxlan: Join / leave MC group after remote changes
- posix-timers: Invoke cond_resched() during exit_itimers()
- hrtimers: Replace hrtimer_clock_to_base_table with switch-case
- irqchip/riscv-imsic: Set irq_set_affinity() for IMSIC base
- media: test-drivers: vivid: don't call schedule in loop
- bpf: Make every prog keep a copy of ctx_arg_info
- net/mlx5: Modify LSB bitmask in temperature event to include only the
first bit
- net/mlx5: Apply rate-limiting to high temperature warning
- firmware: arm_ffa: Reject higher major version as incompatible
- firmware: arm_ffa: Handle the presence of host partition in the
partition info
- firmware: xilinx: Dont send linux address to get fpga config get status
- io_uring: use IO_REQ_LINK_FLAGS more
- io_uring: sanitise ring params earlier
- ASoC: ops: Enforce platform maximum on initial value
- ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
- ASoC: tas2764: Mark SW_RESET as volatile
- ASoC: tas2764: Power up/down amp on mute ops
- ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
- pinctrl: devicetree: do not goto err when probing hogs in
pinctrl_dt_to_map
- smack: recognize ipv4 CIPSO w/o categories
- drm/xe/pf: Release all VFs configs on device removal
- smack: Revert "smackfs: Added check catlen"
- kunit: tool: Use qboot on QEMU x86_64
- media: i2c: imx219: Correct the minimum vblanking value
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op
- media: stm32: csi: use ARRAY_SIZE to search D-PHY table
- media: stm32: csi: add missing pm_runtime_put on error
- media: i2c: ov2740: Free control handler on error path
- bnxt_en: Set NPAR 1.2 support when registering with firmware
- net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
- drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init()
- drm/xe: Fix xe_tile_init_noalloc() error propagation
- clk: qcom: ipq5018: allow it to be bulid on arm32
- [Config] enable IPQ_GCC_5018 on armhf
- accel/amdxdna: Refactor hardware context destroy routine
- clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
- drm/xe/debugfs: fixed the return value of wedged_mode_set
- drm/xe/debugfs: Add missing xe_pm_runtime_put in wedge_mode_set
- x86/ibt: Handle FineIBT in handle_cfi_failure()
- x86/traps: Cleanup and robustify decode_bug()
- x86/boot: Mark start_secondary() with __noendbr
- sched: Reduce the default slice to avoid tasks getting an extra tick
- serial: sh-sci: Update the suspend/resume support
- pinctrl: renesas: rzg2l: Add suspend/resume support for pull up/down
- drm/xe/display: Remove hpd cancel work sync from runtime pm path
- phy: phy-rockchip-samsung-hdptx: Swap the definitions of LCPLL_REF and
ROPLL_REF
- phy: core: don't require set_mode() callback for phy_get_mode() to work
- phy: exynos5-usbdrd: fix EDS distribution tuning (gs101)
- soundwire: amd: change the soundwire wake enable/disable sequence
- soundwire: cadence_master: set frame shape and divider based on actual
clk freq
- jbd2: Avoid long replay times due to high number or revoke blocks
- net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
- scsi: usb: Rename the RESERVE and RELEASE constants
- drm/amdgpu/mes11: fix set_hw_resources_1 calculation
- drm/amdkfd: fix missing L2 cache info in topology
- drm/amdgpu: Set snoop bit for SDMA for MI series
- drm/amd/display: pass calculated dram_speed_mts to dml2
- drm/amd/display: remove TF check for LLS policy
- drm/amd/display: Don't try AUX transactions on disconnected link
- drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
- drm/amd/pm: Skip P2S load for SMU v13.0.12
- drm/amd/display: Support multiple options during psr entry.
- Revert "drm/amd/display: Exit idle optimizations before attempt to
access PHY"
- drm/amd/display: Fixes for mcache programming in DML21
- drm/amd/display: Ammend DCPG IP control sequences to align with HW
guidance
- drm/amd/display: Account For OTO Prefetch Bandwidth When Calculating
Urgent Bandwidth
- drm/amd/display: Update CR AUX RD interval interpretation
- drm/amd/display: Initial psr_version with correct setting
- drm/amdgpu/gfx10: Add cleaner shader for GFX10.1.10
- drm/amdgpu: Skip err_count sysfs creation on VF unsupported RAS blocks
- amdgpu/soc15: enable asic reset for dGPU in case of suspend abort
- drm/amd/display: Reverse the visual confirm recouts
- drm/amd/display: Use Nominal vBlank If Provided Instead Of Capping It
- drm/amd/display: Populate register address for dentist for dcn401
- drm/amdgpu: Use active umc info from discovery
- drm/amdgpu: enlarge the VBIOS binary size limit
- drm/amdkfd: Have kfd driver use same PASID values from graphic driver
- drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
- scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
- net/mlx5: XDP, Enable TX side XDP multi-buffer support
- net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
- net/mlx5e: set the tx_queue_len for pfifo_fast
- net/mlx5e: reduce rep rxq depth to 256 for ECPF
- net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
- drm/v3d: Add clock handling
- xfrm: prevent high SEQ input in non-ESN mode
- iio: adc: ad7606: protect register access
- wifi: ath12k: Enable MLO setup ready and teardown commands for single
split-phy device
- wifi: ath12k: use arvif instead of link_conf in ath12k_mac_set_key()
- wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV
- wifi: ath12k: Update the peer id in PPDU end user stats TLV
- mptcp: pm: userspace: flags: clearer msg if no remote addr
- wifi: iwlwifi: use correct IMR dump variable
- wifi: iwlwifi: don't warn during reprobe
- wifi: mac80211: always send max agg subframe num in strict mode
- wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
- wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
- wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx
- wifi: mac80211: add HT and VHT basic set verification
- wifi: mac80211: Drop cooked monitor support
- net: fec: Refactor MAC reset to function
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
- powerpc/pseries/iommu: create DDW for devices with DMA mask less than
64-bits
- arch/powerpc/perf: Check the instruction type before creating sample
with perf_mem_data_src
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
- r8152: add vendor/device ID pair for Dell Alienware AW1022z
- iio: adc: ad7944: don't use storagebits for sizing
- igc: Avoid unnecessary link down event in XDP_SETUP_PROG process
- pstore: Change kmsg_bytes storage size to u32
- leds: trigger: netdev: Configure LED blink interval for HW offload
- ext4: don't write back data before punch hole in nojournal mode
- ext4: remove writable userspace mappings before truncating page cache
- wifi: rtw88: Fix rtw_update_sta_info() for RTL8814AU
- wifi: rtw88: Extend rtw_fw_send_ra_info() for RTL8814AU
- wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
- wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
- wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang
- wifi: rtw89: fw: validate multi-firmware header before getting its size
- wifi: rtw89: fw: validate multi-firmware header before accessing
- wifi: rtw89: call power_on ahead before selecting firmware
- iio: dac: ad3552r-hs: use instruction mode for configuration
- iio: dac: adi-axi-dac: add bus mode setup
- clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
- netdevsim: allow normal queue reset while down
- net: page_pool: avoid false positive warning if NAPI was never added
- tools/power turbostat: Clustered Uncore MHz counters should honor
show/hide options
- hwmon: (xgene-hwmon) use appropriate type for the latency value
- drm/xe: Fix PVC RPe and RPa information
- f2fs: introduce f2fs_base_attr for global sysfs entries
- media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is
available
- media: qcom: camss: Add default case in vfe_src_pad_code
- drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0
- eth: fbnic: set IFF_UNICAST_FLT to avoid enabling promiscuous mode when
adding unicast addrs
- tools: ynl-gen: don't output external constants
- ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
- r8169: don't scan PHY addresses > 0
- net: flush_backlog() small changes
- bridge: mdb: Allow replace of a host-joined group
- ice: init flow director before RDMA
- ice: treat dyn_allowed only as suggestion
- rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
- rcu: handle unstable rdp in rcu_read_unlock_strict()
- rcu: fix header guard for rcu_all_qs()
- perf: Avoid the read if the count is already updated
- ice: count combined queues using Rx/Tx count
- drm/xe/relay: Don't use GFP_KERNEL for new transactions
- net/mana: fix warning in the writer of client oob
- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
- scsi: lpfc: Ignore ndlp rport mismatch in dev_loss_tmo callbk
- scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when
pci_irq_vector() fails
- scsi: lpfc: Reduce log message generation during ELS ring clean up
- scsi: st: Restore some drive settings after reset
- wifi: ath12k: Avoid napi_sync() before napi_enable()
- HID: usbkbd: Fix the bit shift number for LED_KANA
- arm64: zynqmp: add clock-output-names property in clock nodes
- ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
- ASoC: rt722-sdca: Add some missing readable registers
- irqchip/riscv-aplic: Add support for hart indexes
- dm vdo indexer: prevent unterminated string warning
- dm vdo: use a short static string for thread name prefix
- drm/ast: Find VBIOS mode from regular display size
- bpf: Use kallsyms to find the function name of a struct_ops's stub
function
- bpftool: Fix readlink usage in get_fd_type
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids
- perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
- perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
- clk: renesas: rzg2l-cpg: Refactor Runtime PM clock validation
- wifi: rtl8xxxu: retry firmware download on error
- wifi: rtw88: Don't use static local variable in
rtw8822b_set_tx_power_index_by_rate
- wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
- spi: zynqmp-gqspi: Always acknowledge interrupts
- regulator: ad5398: Add device tree support
- wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
- accel/qaic: Mask out SR-IOV PCI resources
- drm/xe/pf: Reset GuC VF config when unprovisioning critical resource
- wifi: ath9k: return by of_get_mac_address
- wifi: ath12k: Fetch regdb.bin file from board-2.bin
- drm/xe/pf: Move VFs reprovisioning to worker
- wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
- wifi: ath12k: report station mode receive rate for IEEE 802.11be
- wifi: ath12k: report station mode transmit rate
- drm: bridge: adv7511: fill stream capabilities
- drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE
- wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
- drm/ast: Hide Gens 1 to 3 TX detection in branch
- drm/xe: Move suballocator init to after display init
- drm/xe: Do not attempt to bootstrap VF in execlists mode
- wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan
event
- wifi: rtw89: coex: Add protect to avoid A2DP lag while Wi-Fi connecting
- drm/xe/sa: Always call drm_suballoc_manager_fini()
- drm/xe: Always setup GT MMIO adjustment data
- drm/xe/guc: Drop error messages about missing GuC logs
- drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
- drm/buddy: fix issue that force_merge cannot free all roots
- drm/xe: Add locks in gtidle code
- drm/panel-edp: Add Starry 116KHD024006
- drm: Add valid clones check
- i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
- ASoC: sma1307: Fix error handling in sma1307_setting_loaded()
- pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
- watchdog: aspeed: fix 64-bit division
- drm/amdkfd: Correct F8_MODE for gfx950
- drm/gem: Internally test import_attach for imported objects
- virtgpu: don't reset on shutdown
- x86/mm/init: Handle the special case of device private pages in
add_pages(), to not increase max_pfn and trigger
dma_addressing_limited() bounce buffers
- bpf: abort verification if env->cur_state->loop_entry != NULL
- ipv6: remove leftover ip6 cookie initializer
- serial: sh-sci: Save and restore more registers
- drm/amd/display: Exit idle optimizations before accessing PHY
- drm/amdkfd: Fix error handling for missing PASID in
'kfd_process_device_init_vm'
- drm/amdkfd: Fix pasid value leak
- wifi: mac80211: Add counter for all monitor interfaces
- HID: Kconfig: Add LEDS_CLASS_MULTICOLOR dependency to HID_LOGITECH
- net-sysfs: restore behavior for not running devices
- ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
- book3s64/radix: Fix compile errors when
CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
- pinctrl: meson: define the pull up/down resistor value as 60 kOhm
- smb: server: smb2pdu: check return value of xa_store()
- platform/x86/intel: hid: Add Pantherlake support
- platform/x86: asus-wmi: Disable OOBE state after resume from hibernation
- platform/x86: ideapad-laptop: add support for some new buttons
- ASoC: cs42l43: Disable headphone clamps during type detection
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
- ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
- drm/ttm: fix the warning for hit_low and evict_low
- nvme-pci: add quirks for device 126f:1001
- nvme-pci: add quirks for WDC Blue SN550 15b7:5009
- ALSA: usb-audio: Fix duplicated name in MIDI substream names
- io_uring/fdinfo: annotate racy sq/cq head/tail reads
- cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
- cifs: Fix changing times and read-only attr over SMB1
smb_set_file_info() function
- ASoC: intel/sdw_utils: Add volume limit to cs42l43 speakers
- ASoC: intel/sdw_utils: Add volume limit to cs35l56 speakers
- iio: accel: fxls8962af: Fix wakeup source leaks on device unbind
- iio: adc: qcom-spmi-iadc: Fix wakeup source leaks on device unbind
- iio: imu: st_lsm6dsx: Fix wakeup source leaks on device unbind
- btrfs: compression: adjust cb->compressed_folios allocation type
- btrfs: handle empty eb->folios in num_extent_folios()
- tools: ynl-gen: validate 0 len strings from kernel
- block: only update request sector if needed
- wifi: iwlwifi: add support for Killer on MTL
- xenbus: Allow PVH dom0 a non-local xenstore
- drm/amd/display: Call FP Protect Before Mode Programming/Mode Support
- soundwire: bus: Fix race on the creation of the IRQ domain
- espintcp: remove encap socket caching to avoid reference leak
- xfrm: Fix UDP GRO handling for some corner cases
- dmaengine: idxd: Fix allowing write() from different address spaces
- x86/sev: Fix operator precedence in GHCB_MSR_VMPL_REQ_LEVEL macro
- kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
- remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
- clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
- xfrm: Sanitize marks before insert
- dmaengine: idxd: Fix ->poll() return value
- dmaengine: fsl-edma: Fix return code for unhandled interrupts
- irqchip/riscv-imsic: Start local sync timer on correct CPU
- Bluetooth: L2CAP: Fix not checking l2cap_chan security level
- Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump
handling
- bridge: netfilter: Fix forwarding of fragmented packets
- ice: fix vf->num_mac count with port representors
- ice: Fix LACP bonds without SRIOV environment
- loop: don't require ->write_iter for writable files in loop_configure
- pinctrl: qcom: switch to devm_register_sys_off_handler()
- net: dwmac-sun8i: Use parsed internal PHY address instead of 1
- net: lan743x: Restore SGMII CTRL register on resume
- xsk: Bring back busy polling support in XDP_COPY
- io_uring: fix overflow resched cqe reordering
- idpf: fix idpf_vport_splitq_napi_poll()
- octeontx2-pf: use xdp_return_frame() to free xdp buffers
- octeontx2-pf: Add AF_XDP non-zero copy support
- octeontx2-pf: AF_XDP zero copy receive support
- octeontx2-pf: Avoid adding dcbnl_ops for LBK and SDP vf
- octeontx2-af: Set LMT_ENA bit for APR table entries
- octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
- clk: s2mps11: initialise clk_hw_onecell_data::num before accessing
::hws[] in probe()
- can: slcan: allow reception of short error messages
- ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
- ASoC: SOF: Intel: hda-bus: Use PIO mode on ACE2+ platforms
- ASoc: SOF: topology: connect DAI to a single DAI link
- ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback
direction
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
- llc: fix data loss when reading from a socket in llc_ui_recvmsg()
- can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
- can: kvaser_pciefd: Fix echo_skb race
- io_uring/net: only retry recv bundle for a full transfer
- net: dsa: microchip: linearize skb for tail-tagging switches
- vmxnet3: update MTU after device quiesce
- mmc: sdhci_am654: Add SDHCI_QUIRK2_SUPPRESS_V1P8_ENA quirk to am62
compatible
- pmdomain: renesas: rcar: Remove obsolete nullify checks
- pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
- thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
- drm/edid: fixed the bug that hdr metadata was not reset
- arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
- smb: client: Reset all search buffer pointers when releasing buffer
- Input: xpad - add more controllers
- highmem: add folio_test_partial_kmap()
- memcg: always call cond_resched() after fn()
- mm/page_alloc.c: avoid infinite retries caused by cpuset race
- module: release codetag section when module load fails
- taskstats: fix struct taskstats breaks backward compatibility since
version 15
- mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled
- mm: fix VM_UFFD_MINOR == VM_SHADOW_STACK on USERFAULTFD=y && ARM64_GCS=y
- mm: vmalloc: actually use the in-place vrealloc region
- mm: vmalloc: only zero-init on vrealloc shrink
- octeontx2: hide unused label
- wifi: mac80211: restore monitor for outgoing frames
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
- Bluetooth: btmtksdio: Check function enabled before doing close
- Bluetooth: btmtksdio: Do close if SDIO card removed without close
- Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
- ksmbd: fix stream write failure
- platform/x86: think-lmi: Fix attribute name usage for non-compliant
items
- spi: use container_of_cont() for to_spi_device()
- spi: spi-fsl-dspi: restrict register range for regmap access
- spi: spi-fsl-dspi: Halt the module after a new message transfer
- spi: spi-fsl-dspi: Reset SR flags before sending a new message
- drm/xe: Use xe_mmio_read32() to read mtcfg register
- err.h: move IOMEM_ERR_PTR() to err.h
- drm/i915/dp: Fix determining SST/MST mode during MTP TU state
computation
- drm/amdgpu/vcn4.0.5: split code along instances
- gcc-15: make 'unterminated string initialization' just a warning
- gcc-15: disable '-Wunterminated-string-initialization' entirely for now
- Fix mis-uses of 'cc-option' for warning disablement
- kbuild: Properly disable -Wunterminated-string-initialization for clang
- Linux 6.14.9
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38050
- mm/hugetlb: fix kernel NULL pointer dereference when replacing free
hugetlb folios
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38029
- kasan: avoid sleepable page allocation from atomic context
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38076
- alloc_tag: allocate percpu counters for module tags dynamically
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) // Unable to
put display on standby after resuming from hibernate (LP: #2121449)
- Revert "drm/amd: Keep display off while going into S4"
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38051
- smb: client: Fix use-after-free in cifs_fill_dirent
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38077
- platform/x86: dell-wmi-sysman: Avoid buffer overflow in
current_password_store()
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38078
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38003
- can: bcm: add missing rcu read protection for procfs content
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38004
- can: bcm: add locking for bcm_op runtime updates
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38031
- padata: do not leak refcount in reorder_work
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38079
- crypto: algif_hash - fix double free in hash_accept
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38052
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38053
- idpf: fix null-ptr-deref in idpf_features_check
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38032
- mr: consolidate the ipmr_can_free_table() checks.
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38054
- ptp: ocp: Limit signal/freq counts in summary output functions
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38055
- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38057
- espintcp: fix skb leaks
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38058
- __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38033
- x86/Kconfig: make CFI_AUTO_DEFAULT depend on !RUST or Rust >= 1.88
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38059
- btrfs: avoid NULL pointer dereference if no valid csum tree
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38034
- btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38035
- nvmet-tcp: don't restore null sk_state_change
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38036
- drm/xe/vf: Perform early GT MMIO initialization to read GMDID
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38037
- vxlan: Annotate FDB data races
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38038
- cpufreq: amd-pstate: Remove unnecessary driver_lock in set_boost
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38039
- net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload
enabled
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38080
- drm/amd/display: Increase block_sequence array size
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38060
- bpf: copy_verifier_state() should copy 'loop_entry' field
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38040
- serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38061
- net: pktgen: fix access outside of user given buffer in
pktgen_thread_write()
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38062
- genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of
iommu_cookie
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38041
- clk: sunxi-ng: h616: Reparent GPU clock during frequency changes
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38063
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38064
- virtio: break and reset virtio devices on device_shutdown()
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38042
- dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from
k3_udma_glue_reset_rx_chn
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38043
- firmware: arm_ffa: Set dma_mask for ffa devices
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38044
- media: cx231xx: set device_caps for 417
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38065
- orangefs: Do not truncate file size
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38066
- dm cache: prevent BUG_ON by blocking retries on failed device resumes
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38067
- rseq: Fix segfault on registration when rseq_cs is non-zero
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38069
- PCI: endpoint: pci-epf-test: Fix double free that causes kernel to oops
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38045
- wifi: iwlwifi: fix debug actions order
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38070
- ASoC: sma1307: Add NULL check in sma1307_setting_loaded()
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38071
- x86/mm: Check return value from memblock_phys_alloc_range()
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38072
- libnvdimm/labels: Fix divide error in nd_label_data_init()
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38081
- spi-rockchip: Fix register out of bounds access
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38047
- x86/fred: Fix system hang during S4 resume with FRED enabled
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38073
- block: fix race between set_blocksize and read paths
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38074
- vhost-scsi: protect vq->log_used with vq->mutex
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38048
- virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
* Plucky update: v6.14.9 upstream stable release (LP: #2115678) //
CVE-2025-38075
- scsi: target: iscsi: Fix timeout on deleted connection
* CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
[ Ubuntu-azure: 6.14.0-1011.11 ]
* plucky/linux-azure: 6.14.0-1011.11 -proposed tracker (LP: #2119930)
[ Ubuntu: 6.14.0-29.29 ]
* plucky/linux: 6.14.0-29.29 -proposed tracker (LP: #2119948)
* CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
Date: 2025-10-04 05:01:15.934962+00:00
Changed-By: John Cabaj <john-cabaj at ubuntu.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-azure-nvidia-6.14/6.14.0-1007.7
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list