[ubuntu/noble-proposed] linux-azure-nvidia 6.8.0-1035.38 (Accepted)
Timo Aaltonen
tjaalton at ubuntu.com
Tue May 5 03:45:58 UTC 2026
linux-azure-nvidia (6.8.0-1035.38) noble; urgency=medium
* noble/linux-azure-nvidia: 6.8.0-1035.38 -proposed tracker (LP: #2150007)
[ Ubuntu-azure: 6.8.0-1055.61 ]
* noble/linux-azure: 6.8.0-1055.61 -proposed tracker (LP: #2150009)
[ Ubuntu: 6.8.0-116.116 ]
* noble/linux: 6.8.0-116.116 -proposed tracker (LP: #2150048)
* Linux kernel 6.17.0-22.22 breaks amdxdna (LP: #2149766)
- Revert "iommu: disable SVA when CONFIG_X86 is set"
* Revert "netfilter: conntrack: fix erronous removal of offload bit"
(LP: #2149762)
- Revert "netfilter: conntrack: fix erronous removal of offload bit"
[ Ubuntu: 6.8.0-114.114 ]
* noble/linux: 6.8.0-114.114 -proposed tracker (LP: #2148397)
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465)
- SAUCE: Fix skb_vlan_inet_prepare() usage
[ Ubuntu: 6.8.0-112.112 ]
* noble/linux: 6.8.0-112.112 -proposed tracker (LP: #2147982)
* Canonical Kmod 2025 key rotation (LP: #2147447)
- [Packaging] ubuntu-compatible-signing -- make Ubuntu-Compatible-Signing
extensible
- [Packaging] ubuntu-compatible-signing -- allow consumption of positive
certs
- [Packaging] ubuntu-compatible-signing -- report the livepatch:2025 key
- [Config] prepare for Canonical Kmod key rotation
- [Packaging] ubuntu-compatible-signing -- report the kmod:2025 key
* Remount ext4 to readonly with data=journal mode may dump call trace
(LP: #2147400)
- ext4: fix stale xarray tags after writeback
* Compile error due to nonexistent struct member with CONFIG_PCI_EPF_TEST
(LP: #2147065)
- SAUCE: Revert "PCI: endpoint: pci-epf-test: Limit PCIe BAR size for
fixed BARs"
* BUG: kernel NULL pointer dereference in amdgpu (LP: #2144577)
- drm/amdgpu: validate the flush_gpu_tlb_pasid()
- drm/amdgpu: Fix validating flush_gpu_tlb_pasid()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841)
- x86/kfence: fix booting on 32bit non-PAE systems
- platform/x86: intel_telemetry: Fix swapped arrays in PSS output
- pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest
state
- pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
- pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
- pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system
wakeup
- rbd: check for EOD after exclusive lock is ensured to be held
- ARM: 9468/1: fix memset64() on big-endian
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
- binder: fix BR_FROZEN_REPLY error log
- binderfs: fix ida_alloc_max() upper bound
- KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test
failures
- tracing: Fix ftrace event field alignments
- net: usb: sr9700: support devices with virtual driver CD
- block,bfq: fix aux stat accumulation destination
- LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
- HID: intel-ish-hid: Update ishtp bus match to support device ID table
- HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
- HID: intel-ish-hid: Reset enum_devices_done before enumeration
- HID: playstation: Center initial joystick axes to prevent spurious
events
- ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
- netfilter: replace -EEXIST with -EBUSY
- HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
- HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
- ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
- wifi: mac80211: collect station statistics earlier when disconnect
- ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
- ASoC: amd: yc: Fix microphone on ASUS M6500RE
- ASoC: tlv320adcx140: Propagate error codes during probe
- spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs
initialization
- wifi: cfg80211: Fix bitrate calculation overflow for HE rates
- ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
- wifi: mac80211: correctly check if CSA is active
- wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
- platform/x86: intel_telemetry: Fix PSS event register mask
- platform/x86: hp-bioscfg: Skip empty attribute names
- net: add skb_header_pointer_careful() helper
- net: don't touch dev->stats in BPF redirect paths
- tipc: use kfree_sensitive() for session key material
- net: ethernet: adi: adin1110: Check return value of
devm_gpiod_get_optional() in adin1110_check_spi()
- drm/mgag200: fix mgag200_bmc_stop_scanout()
- hwmon: (occ) Mark occ_init_attribute() as __printf
- ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
- gve: Correct ethtool rx_dropped calculation
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed
transfer
- spi: tegra210-quad: Move curr_xfer read inside spinlock
- spi: tegra210-quad: Protect curr_xfer assignment in
tegra_qspi_setup_transfer_one
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
- spi: tegra210-quad: Protect curr_xfer clearing in
tegra_qspi_non_combined_seq_xfer
- spi: tegra114: Preserve SPI mode bits in def_command1_reg
- ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
- PCI/ERR: Ensure error recoverability at all times
- ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55
- PCI: qcom: Remove ASPM L0s support for MSM8996 SoC
- HID: logitech: add HID++ support for Logitech MX Anywhere 3S
- ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio
- net: phy: add phy_interface_weight()
- net: phy: add phy_interface_copy()
- net: sfp: pre-parse the module support
- net: sfp: enhance quirk for Fibrestore 2.5G copper SFP module
- net: sfp: convert sfp quirks to modify struct sfp_module_support
- net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
- drm/amd/display: fix wrong color value mapping on MCM shaper LUT
- drm/xe/query: Fix topology query pointer advance
- ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update()
- gpiolib-acpi: Update file references in the Documentation and
MAINTAINERS
- Upstream stable to v6.6.124, v6.12.70
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23214
- btrfs: reject new transactions if the fs is fully read-only
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23213
- drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-71225
- md: suspend array while updating raid_disks via sysfs
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-68823
- ublk: fix deadlock when reading partition table
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23191
- ALSA: aloop: Fix racy access at PCM trigger
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23215
- x86/vmware: Fix hypercall clobbers
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23182
- spi: tegra: Fix a memory leak in tegra_slink_probe()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23190
- ASoC: amd: fix memory leak in acp3x pdm dma ops
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23254
- net: gro: fix outer network offset
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23180
- dpaa2-switch: add bounds check for if_id in IRQ handler
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23256
- net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23257
- net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23258
- net: liquidio: Initialize netdev pointer before queue setup
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23206
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23204
- net/sched: cls_u32: use skb_header_pointer_careful()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23205
- smb/client: fix memory leak in smb2_open_file()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23176
- platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23216
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23193
- scsi: target: iscsi: Fix use-after-free in
iscsit_dec_session_usage_count()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23260
- regmap: maple: free entry on mas_store_gfp() failure
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23179
- nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23261
- nvme-fc: release admin tagset if init fails
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23178
- HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-71268
- btrfs: fix reservation leak in some error paths when inserting inline
extent
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-71270
- LoongArch: Enable exception fixup for specific ADE subcode
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-71220
- smb/server: call ksmbd_session_rpc_close() on error path in
create_smb2_pipe()
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-71222
- wifi: wlcore: ensure skb headroom before skb_push
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-71224
- wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23262
- gve: Fix stats report corruption on queue count change
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2025-38201
- netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23198
- KVM: Don't clobber irqfd routing type when deassigning irqfd
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23264
- Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
* Noble update: upstream stable patchset 2026-04-10 (LP: #2147841) //
CVE-2026-23187
- pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543)
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
- can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
- net: bcmasp: fix early exit leak with fixed phy
- net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
- ipv6: use the right ifindex when replying to icmpv6 from localhost
- ice: stop counting UDP csum mismatch as rx_errors
- net/mlx5e: Report rx_discards_phy via rx_dropped
- net/mlx5e: Account for netdev stats in ndo_get_stats64
- net: bridge: fix static key check
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
- scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
- ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
- gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
- dma/pool: distinguish between missing and exhausted atomic pools
- pinctrl: meson: mark the GPIO controller as sleeping
- riscv: compat: fix COMPAT_UTS_MACHINE definition
- rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
- ASoC: fsl: imx-card: Do not force slot width to sample width
- scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
- ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
- gpio: pca953x: mask interrupts in irq shutdown
- scsi: qla2xxx: edif: Fix dma_free_coherent() size
- mptcp: only reset subflow errors when propagated
- selftests: mptcp: check no dup close events after error
- selftests: mptcp: check subflow errors in close events
- selftests: mptcp: join: fix local endp not being tracked
- scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
- drm/amdgpu/soc21: fix xclk for APUs
- drm/amdgpu/gfx10: fix wptr reset in KGQ init
- drm/amdgpu/gfx11: fix wptr reset in KGQ init
- mm/kfence: randomize the freelist on initialization
- arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state
- arm64/fpsimd: signal: Consistently read FPSIMD context
- btrfs: prevent use-after-free on page private data in
btrfs_subpage_clear_uptodate()
- net/sched: act_ife: convert comma to semicolon
- pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
- drm/msm/a6xx: fix bogus hwcg register updates
- writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
- mptcp: avoid dup SUB_CLOSED events after disconnect
- ksmbd: fix recursive locking in RPC handle list access
- bpf/selftests: test_select_reuseport_kern: Remove unused header
- can: at91_can: Fix memory leak in at91_can_probe()
- net: phy: micrel: fix clk warning when removing the driver
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect
- net/mlx5: Initialize events outside devlink lock
- net/mlx5: Fix vhca_id access call trace use before alloc
- bcache: fix improper use of bi_end_io
- bcache: use bio cloning for detached device requests
- bcache: fix I/O accounting leak in detached_dev_do_request
- gpio: rockchip: Stop calling pinctrl for set_direction
- mm/memory-failure: improve memory failure action_result messages
- mm/memory-failure: fix redundant updates for already poisoned pages
- mm/memory-failure: fix missing ->mf_stats count in hugetlb poison
- mm/memory-failure: teach kill_accessing_process to accept hugetlb tail
page pfn
- gpiolib: acpi: Fix potential out-of-boundary left shift
- rust: kbuild: support `-Cjump-tables=n` for Rust 1.93.0
- pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR
TX pins
- [Config] remove PINCTRL_SM8350_LPASS_LPI
- Upstream stable to v6.6.123, v6.12.69
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23148
- nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23166
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23151
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23163
- drm/amdgpu: fix NULL pointer dereference in
amdgpu_gmc_filter_faults_remove
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23159
- perf: sched: Fix perf crash with new is_user_task() helper
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2024-58096
- wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2025-40039
- ksmbd: Fix race condition in RPC handle list access
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23093
- ksmbd: smbd: fix dma_unmap_sg() nents
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23102
- arm64/fpsimd: signal: Fix restoration of SVE context
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23170
- drm/imx/tve: fix probe device leak
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23168
- flex_proportions: make fprop_new_period() hardirq safe
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23156
- efivarfs: fix error propagation in efivar_entry_get()
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23167
- nfc: nci: Fix race between rfkill and nci_unregister_device().
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23173
- net/mlx5e: TC, delete flows only for existing peers
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23150
- nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23164
- rocker: fix memory leak in rocker_world_port_post_fini()
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23172
- net: wwan: t7xx: fix potential skb->frags overflow in RX path
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23212
- bonding: annotate data-races around slave->last_rx
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23160
- octeon_ep: Fix memory leak in octep_device_setup()
* Noble update: upstream stable patchset 2026-04-08 (LP: #2147543) //
CVE-2026-23146
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
* CVE-2026-23394
- af_unix: Give up GC if MSG_PEEK intervened.
* [SRU] MIPI camera is not working after upgrading to 6.17-oem
(LP: #2145171)
- SAUCE: ACPI: respect items already in honor_dep before skipping
* ADATA SU680 causes repeated SATA resets and I/O errors on Ubuntu unless
link power management is forced to max_performance (LP: #2144060)
- ata: libata-core: disable LPM on ADATA SU680 SSD
* intel_idle: add Clearwater Forest SoC support (LP: #2144006)
- intel_idle: add Clearwater Forest SoC support
* Noble kernel 6.8.0-108 does not compile when KASAN enabled (LP: #2144914)
- mm/kasan: fix incorrect unpoisoning in vrealloc for KASAN
* Generic noble linux throws warning from file tegra-i2c.c (LP: #2143152)
- i2c: tegra: Use internal reset when reset property is not available
* [SRU] Duplicated entries in /proc/<pid>/mountinfo (LP: #2143083)
- namespace: fix proc mount iteration
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465)
- firmware: imx: scu-irq: Set mu_resource_id before get handle
- efi/cper: Fix cper_bits_to_str buffer handling and return value
- ASoC: codecs: wsa884x: fix codec initialisation
- xfrm: Fix inner mode lookup in tunnel mode GSO segmentation
- net: bridge: annotate data-races around fdb->{updated,used}
- net: update netdev_lock_{type,name}
- vsock/test: add a final full barrier after run all tests
- net/mlx5e: Restore destroying state bit after profile cleanup
- btrfs: store fs_info in space_info
- btrfs: factor out init_space_info() from create_space_info()
- btrfs: factor out check_removing_space_info() from
btrfs_free_block_groups()
- btrfs: introduce btrfs_space_info sub-group
- btrfs: fix memory leaks in create_space_info() error paths
- selftests: drv-net: fix RPS mask handling for high CPU numbers
- ASoC: tlv320adcx140: fix word length
- textsearch: describe @list member in ts_ops search
- mm, kfence: describe @slab parameter in __kfence_obj_info()
- dmaengine: xilinx_dma: Fix uninitialized addr_width when
"xlnx,addrwidth" property is missing
- phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it
- phy: phy-snps-eusb2: refactor constructs names
- phy: drop probe registration printks
- phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again)
- i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA
- HID: usbhid: paper over wrong bNumDescriptor field
- scsi: core: Fix error handler encryption support
- ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer
- can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit.
- x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers
- phy: rockchip: inno-usb2: fix communication disruption in gadget mode
- phy: freescale: imx8m-pcie: assert phy reset during power on
- phy: rockchip: inno-usb2: fix disconnection in gadget mode
- phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7
- usb: dwc3: Check for USB4 IP_NAME
- usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor
- USB: OHCI/UHCI: Add soft dependencies on ehci_platform
- USB: serial: option: add Telit LE910 MBIM composition
- USB: serial: ftdi_sio: add support for PICAXE AXE027 cable
- nvme-pci: disable secondary temp for Wodposit WPBSNM8
- hrtimer: Fix softirq base check in update_needs_ipi()
- EDAC/x38: Fix a resource leak in x38_probe1()
- EDAC/i3200: Fix a resource leak in i3200_probe1()
- tcpm: allow looking for role_sw device in the main node
- x86/resctrl: Add missing resctrl initialization for Hygon
- x86/resctrl: Fix memory bandwidth counter width for Hygon
- mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free
- LoongArch: Fix PMU counter allocation for mixed-type event groups
- drm/amd/display: Bump the HDMI clock to 340MHz
- drm/amd: Clean up kfd node on surprise disconnect
- drm/amdkfd: fix a memory leak in device_queue_manager_init()
- drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare
- drm/vmwgfx: Fix an error return check in vmw_compat_shader_add()
- dmaengine: apple-admac: Add "apple,t8103-admac" compatible
- dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all()
- dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation
- dmaengine: ti: k3-udma: fix device leak on udma lookup
- io_uring: move local task_work in exit cancel loop
- posix-clock: Store file pointer in struct posix_clock_context
- ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE.
- selftest/ptp: update ptp selftest to exercise the gettimex options
- testptp: Add option to open PHC in readonly mode
- arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links
- hyperv-tlfs: Change prefix of generic HV_REGISTER_* MSRs to HV_MSR_*
- Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
- btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
- dt-bindings: power: qcom,rpmpd: document the SM8750 RPMh Power Domains
- dt-bindings: power: qcom,rpmpd: add Turbo L5 corner
- dt-bindings: power: qcom-rpmpd: split RPMh domains definitions
- dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
- pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
- ata: libata: Add cpr_log to ata_dev_print_features() early return
- ata: libata-core: Introduce ata_dev_config_lpm()
- ata: libata: Call ata_dev_config_lpm() for ATAPI devices
- ata: libata: Print features also for ATAPI devices
- ice: initialize ring_stats->syncp
- ice: Avoid detrimental cleanup for bond during interface stop
- igc: fix race condition in TX timestamp read for register 0
- net: usb: dm9601: remove broken SR9700 support
- selftests: net: fib-onlink-tests: Convert to use namespaces by default
- can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on
usb_submit_urb() error
- amd-xgbe: avoid misleading per-packet error log
- tools: ynl: Specify --no-line-number in ynl-regen.sh.
- veth: fix data race in veth_get_ethtool_stats
- octeontx2: cn10k: fix RX flowid TCAM mask handling
- serial: 8250_pci: Fix broken RS485 for F81504/508/512
- comedi: dmm32at: serialize use of paged registers
- w1: fix redundant counter decrement in w1_attach_slave_device()
- Revert "nfc/nci: Add the inconsistency check between the input data
length and count"
- Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
- Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
- scsi: storvsc: Process unsupported MODE_SENSE_10
- arm64: dts: rockchip: remove dangerous max-link-speed from helios64
- arm64: dts: rockchip: Fix voltage threshold for volume keys for
Pinephone Pro
- x86/kfence: avoid writing L1TF-vulnerable PTEs
- comedi: Fix getting range information for subdevices 16 to 255
- iio: adc: ad7280a: handle spi_setup() errors in probe()
- kconfig: fix static linking of nconf
- riscv: clocksource: Fix stimecmp update hazard on RV32
- ALSA: usb: Increase volume range that triggers a warning
- net: hns3: fix data race in hns3_fetch_stats
- be2net: fix data race in be_get_new_eqd
- net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
- net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
- usbnet: limit max_mtu based on device's hard_mtu
- drm/amd/pm: Don't clear SI SMC table when setting power limit
- drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
- selftests: net: amt: wait longer for connection before sending packets
- net: dsa: fix off-by-one in maximum bridge ID determination
- octeontx2-af: Fix error handling
- net: openvswitch: fix data race in ovs_vport_get_upcall_stats
- vsock/test: fix seqpacket message bounds test
- x86: make page fault handling disable interrupts properly
- of: fix reference count leak in of_alias_scan()
- of: platform: Use default match table for /firmware
- iio: accel: iis328dq: fix gain values
- iio: adc: ad9467: fix ad9434 vref mask
- iio: chemical: scd4x: fix reported channel endianness
- iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
- mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
- wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
- octeontx2: Fix otx2_dma_map_page() error return code
- slimbus: core: fix runtime PM imbalance on report present
- platform/x86: hp-bioscfg: Fix automatic module loading
- perf/x86/intel: Do not enable BTS for guests
- selftests/bpf: Check for timeout in perf_link test
- mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup
failure
- iio: core: add missing mutex_destroy in iio_dev_release()
- iio: core: add separate lockdep class for info_exist_lock
- mm/rmap: fix two comments related to huge_pmd_unshare()
- arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
- iio: adc: exynos_adc: fix OF populate on driver rebind
- dmaengine: stm32: dmamux: fix OF node leak on route allocation failure
- mm: kmsan: fix poisoning of high-order non-compound pages
- phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path
- ASoC: codecs: wsa881x: Drop unused version readout
- ASoC: codecs: wsa881x: fix unnecessary initialisation
- ASoC: codecs: wsa883x: fix unnecessary initialisation
- nvme-fc: rename free_ctrl callback to match name pattern
- nvme-pci: do not directly handle subsys reset fallout
- nvme: fix PCIe subsystem reset controller state transition
- net: phy: fix phy_uses_state_machine()
- pnfs/blocklayout: Fix memory leak in bl_parse_scsi()
- drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions
- ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip
- ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type
- selftests/landlock: Fix TCP bind(AF_UNSPEC) test case
- xfs: Fix the return value of xfs_rtcopy_summary()
- phy: ti: gmii-sel: fix regmap leak on probe failure
- LoongArch: dts: loongson-2k0500: Add default interrupt controller
address cells
- LoongArch: dts: loongson-2k1000: Add default interrupt controller
address cells
- LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names
- LoongArch: dts: loongson-2k2000: Add default interrupt controller
address cells
- HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume
blocking
- HID: intel-ish-hid: Fix -Wcast-function-type-strict in
devm_ishtp_alloc_workqueue()
- xfs: set max_agbno to allow sparse alloc of last full inode chunk
- selftests/bpf: Test invalid narrower ctx load
- mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection
- mm/page_alloc: batch page freeing in decay_pcp_high
- ata: libata-sata: Improve link_power_management_supported sysfs
attribute
- igc: Restore default Qbv schedule when changing channels
- vsock/virtio: Coalesce only linear skb
- platform/x86/amd: Fix memory leak in wbrf_record()
- drm/imagination: Wait for FW trace update command completion
- ice: Fix persistent failure in ice_get_rxfh
- sched/fair: Fix pelt clock sync when entering idle
- drm/nouveau: add missing DCB connector types
- drm/nouveau: implement missing DCB connector types; gracefully handle
unknown connectors
- dpll: Prevent duplicate registrations
- mei: trace: treat reg parameter as string
- s390/ap: Fix wrong APQN fill calculation
- net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick
- gpio: cdev: Correct return code on memory allocation failure
- dmaengine: ti: k3-udma: Enable second resource range for BCDMA and
PKTDMA
- exfat: fix refcount leak in exfat_find
- accel/ivpu: Fix race condition when unbinding BOs
- btrfs: fix racy bitfield write in btrfs_clear_space_info_full()
- vsock/virtio: Move length check to callers of virtio_vsock_skb_rx_put()
- vsock/virtio: Rename virtio_vsock_alloc_skb()
- vsock/virtio: Move SKB allocation lower-bound check to callers
- vsock/virtio: Rename virtio_vsock_skb_rx_put()
- vhost/vsock: Allocate nonlinear SKBs for handling large receive buffers
- vsock/virtio: Allocate nonlinear SKBs for handling large transmit
buffers
- net: Introduce skb_copy_datagram_from_iter_full()
- vsock/virtio: Fix message iterator handling on transmit path
- Upstream stable to v6.6.122, v6.12.67, v6.12.68
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-38591
- bpf: Reject narrower access to pointer ctx fields
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23035
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-22996
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23000
- net/mlx5e: Fix crash on profile change rollback failure
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23053
- NFS: Fix a deadlock involving nfs_release_folio()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23050
- pNFS: Fix a deadlock when returning a delegation during open()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23005
- x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2024-58097
- wifi: ath11k: fix RCU stall while reaping monitor destination ring
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-68365
- fs/ntfs3: Initialize allocated memory before use
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-37926
- ksmbd: fix use-after-free in ksmbd_session_rpc_open
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23030
- phy: rockchip: inno-usb2: Fix a double free bug in
rockchip_usb2phy_probe()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23025
- mm/page_alloc: prevent pcp corruption with SMP=n
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71186
- dmaengine: stm32: dmamux: fix device leak on route allocation
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23078
- ALSA: scarlett2: Fix buffer overflow in config retrieval
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23142
- mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir
setup failure
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23075
- can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-68725
- bpf: Do not let BPF test infra emit invalid GSO types to stack
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23097
- migrate: correct lock ordering for hugetlb file folios
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23108
- can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23080
- can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23061
- can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23058
- can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23085
- irqchip/gic-v3-its: Avoid truncating memory addresses
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23116
- pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23098
- netrom: fix double-free in nr_route_frame()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23063
- uacce: ensure safe queue release with state management
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23056
- uacce: implement mremap in uacce_vm_ops to return -EPERM
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23094
- uacce: fix isolate sysfs check condition
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23096
- uacce: fix cdev handling in the cleanup path
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23091
- intel_th: fix device leak on output open()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23088
- tracing: Fix crash on synthetic stacktrace field usage
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23090
- slimbus: core: fix device reference leak on report present
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23128
- arm64: Set __nocfi on swsusp_arch_resume()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23107
- arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23073
- wifi: rsi: Fix memory corruption due to not set vif driver data size
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23135
- wifi: ath12k: fix dma_free_coherent() pointer
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23133
- wifi: ath10k: fix dma_free_coherent() pointer
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71200
- mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400
mode
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23089
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23076
- ALSA: ctxfi: Fix potential OOB access in audio mixer handling
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71199
- iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc
driver
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23101
- leds: led-class: Only Add LED to leds_list when it is fully ready
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23064
- net/sched: act_ife: avoid possible NULL deref
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23086
- vsock/virtio: cap TX credit to local buffer size
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23069
- vsock/virtio: fix potential underflow in virtio_transport_get_credit()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23119
- bonding: provide a net pointer to __skb_flow_dissect()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23084
- be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23124
- ipv6: annotate data-race in ndisc_router_discovery()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23121
- mISDN: annotate data-race around dev->work
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23126
- netdevsim: fix a race issue related to the operation on bpf_bound_progs
list
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23059
- scsi: qla2xxx: Sanitize payload size to prevent member overflow
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23110
- scsi: core: Wake up the error handler when final completions race
against each other
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23071
- regmap: Fix race condition in hwspinlock irqsave routine
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23068
- spi: spi-sprd-adi: Fix double free in probe error path
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23123
- interconnect: debugfs: initialize src_node and dst_node to empty strings
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71198
- iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event
detection
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23113
- io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23062
- platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23131
- platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23087
- scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71197
- w1: therm: Fix off-by-one buffer overflow in alarms_store
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23105
- net/sched: qfq: Use cl_is_active to determine whether class is active in
qfq_rm_from_ag
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23103
- ipvlan: Make the addrs_lock be per port
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23120
- l2tp: avoid one data-race in l2tp_tunnel_del_work()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23083
- fou: Don't allow 0 for FOU_ATTR_IPPROTO.
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23095
- gue: Fix skb memleak with inner IP protocol 0.
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23125
- sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23099
- bonding: limit BOND_MODE_8023AD to Ethernet devices
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71194
- btrfs: fix deadlock in wait_current_trans() due to ignored transaction
type
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71185
- dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23026
- dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71188
- dmaengine: lpc18xx-dmamux: fix device leak on route allocation
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71163
- dmaengine: idxd: fix device leaks on compat bind and unbind
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71189
- dmaengine: dw: dmamux: fix OF node leak on route allocation failure
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71190
- dmaengine: bcm-sba-raid: fix device leak on probe
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71191
- dmaengine: at_hdmac: fix device leak on of_dma_xlate()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23049
- drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23144
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23145
- ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-22997
- net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session
upon receiving the second rts
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23031
- can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23032
- null_blk: fix kmemleak by releasing references to fault configfs items
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23033
- dmaengine: omap-dma: fix dma_pool resource leak in error paths
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71196
- phy: stm32-usphyc: Fix off by one in probe()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71193
- phy: qcom-qusb2: Fix NULL pointer dereference on early suspend
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71162
- dmaengine: tegra-adma: Fix use-after-free
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2025-71195
- dmaengine: xilinx: xdma: Fix regmap max_register
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23006
- ASoC: tlv320adcx140: fix null pointer
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-22999
- net/sched: sch_qfq: do not free existing class in qfq_change_class()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23010
- ipv6: Fix use-after-free in inet6_addr_del().
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23054
- net: hv_netvsc: reject RSS hash key programming without RX indirection
table
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23011
- ipv4: ip_gre: make ipgre_header() robust
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23001
- macvlan: fix possible UAF in macvlan_forward_source()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23003
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23141
- btrfs: send: check for inline extents in range_is_hole_in_parent()
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-22998
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23037
- can: etas_es58x: allow partial RX URB allocation to succeed
* Noble update: upstream stable patchset 2026-03-26 (LP: #2146465) //
CVE-2026-23038
- pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058)
- NFSD: Fix permission check for read access to executable-only files
- atm: Fix dma_free_coherent() size
- mei: me: add nova lake point S DID
- lib/crypto: aes: Fix missing MMU protection for AES S-box
- counter: 104-quad-8: Fix incorrect return value in IRQ handler
- drm/pl111: Fix error handling in pl111_amba_probe
- drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[]
- gpio: rockchip: mark the GPIO controller as sleeping
- pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping
- net: Add locking to protect skb->dev access in ip_output
- nfsd: Fix a regression in nfsd_setattr()
- nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr()
- nfsd: set security label during create operations
- csky: fix csky_cmpxchg_fixup not working
- ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels
- alpha: don't reference obsolete termio struct for TC* constants
- dm-snapshot: fix 'scheduling while atomic' on real-time kernels
- NFSv4: ensure the open stateid seqid doesn't go backwards
- NFS: Fix up the automount fs_context to use the correct cred
- smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value
- smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value
- smb/client: fix NT_STATUS_NO_DATA_DETECTED value
- scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset
- scsi: ufs: core: Fix EH failure after W-LUN resume error
- scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe
failure scanned in again after probe failed"
- arm64: dts: add off-on-delay-us for usdhc2 regulator
- ARM: dts: imx6q-ba16: fix RTC interrupt level
- arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics
i.MX8M Plus DHCOM
- netfilter: nft_synproxy: avoid possible data-race on update operation
- gpio: pca953x: Add support for level-triggered interrupts
- gpio: pca953x: handle short interrupt pulses on PCAL devices
- netfilter: nf_tables: fix memory leak in nf_tables_newrule()
- bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress
- inet: ping: Fix icmp out counting
- netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates
- net/mlx5e: Don't print error message due to invalid module
- net: wwan: iosm: Fix memory leak in ipc_mux_deinit()
- bnxt_en: Fix potential data corruption with HW GRO/LRO
- net: enetc: fix build warning when PAGE_SIZE is greater than 128K
- arp: do not assume dev_hard_header() does not change skb->head
- ALSA: ac97bus: Use guard() for mutex locks
- NFS: trace: show TIMEDOUT instead of 0x6e
- nfs_common: factor out nfs_errtbl and nfs_stat_to_errno
- NFSD: Remove NFSERR_EAGAIN
- bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than
4K
- bpf: Make variables in bpf_prog_test_run_xdp less confusing
- bpf: Support specifying linear xdp packet data size for
BPF_PROG_TEST_RUN
- powercap: fix race condition in register_control_type()
- powercap: fix sscanf() error return value handling
- ALSA: usb-audio: Update for native DSD support quirks
- ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025
- ASoC: fsl_sai: Add missing registers to cache default
- scsi: sg: Fix occasional bogus elapsed time that exceeds timeout
- bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path
- ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again)
- btrfs: tracepoints: use btrfs_root_id() to get the id of a root
- crypto: qat - fix duplicate restarting msg during AER error
- netfilter: nft_set_pipapo: fix range overlap detection
- vsock: Make accept()ed sockets use custom setsockopt()
- btrfs: only enforce free space tree if v1 cache is required for bs < ps
cases
- riscv: pgtable: Cleanup useless VA_USER_XXX definitions
- idpf: keep the netdev when a reset fails
- net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant
- ata: libata-core: Disable LPM on ST2000DM008-2FR102
- drm/amd/display: Fix DP no audio issue
- ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL
- spi: cadence-quadspi: Prevent lost complete() call during indirect read
- ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback
- Upstream stable to v6.6.121, v6.12.66
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-71184
- btrfs: fix NULL dereference on root when tracing inode eviction
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-71182
- can: j1939: make j1939_session_activate() fail if device is no longer
registered
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-71160
- netfilter: nf_tables: avoid chain re-validation if possible
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22994
- bpf: Fix reference count leak in bpf_prog_test_run_xdp()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23140
- bpf, test_run: Subtract size of xdp_frame from allowed metadata size
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-71192
- ALSA: ac97: fix a double free in snd_ac97_controller_register()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23021
- net: usb: pegasus: fix memory leak in update_eth_regs_async()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22976
- net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate
in qfq_reset
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22979
- net: fix memory leak in skb_segment_list for GRO packets
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22977
- net: sock: fix hardened usercopy panic in sock_recv_errqueue
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22982
- net: mscc: ocelot: Fix crash when adding interface under a lag
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23019
- net: marvell: prestera: fix NULL dereference on devlink_alloc() failure
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23139
- netfilter: nf_conncount: update last_gc only when GC has been performed
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-40149
- tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock().
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-68803
- NFSD: NFSv4 file creation neglects setting ACL
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23047
- libceph: make calc_target() set t->paused, not just clear it
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23136
- libceph: reset sparse-read state in osd_fault()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22992
- libceph: return the handler error from mon_handle_auth_done()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22991
- libceph: make free_choose_arg_map() resilient to partial allocation
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22990
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22984
- libceph: prevent potential out-of-bounds reads in handle_auth_done()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22978
- wifi: avoid kernel-infoleak from struct iw_point
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-71180
- counter: interrupt-cnt: Drop IRQF_NO_THREAD flag
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2025-71183
- btrfs: always detect conflicting inodes when logging inode refs
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-23020
- net: 3com: 3c59x: fix possible null dereference in vortex_probe1()
* Noble update: upstream stable patchset 2026-03-12 (LP: #2144058) //
CVE-2026-22980
- nfsd: provide locking for v4_end_grace
* CVE-2024-50004
- drm/amd/display: update DML2 policy
EnhancedPrefetchScheduleAccelerationFinal DCN35
* CVE-2026-23274
- netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels
* CVE-2026-23351
- netfilter: nft_set_pipapo: split gc into unlink and reclaim phase
* CVE-2026-23231
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
* macvlan: observe an RCU grace period in macvlan_common_newlink() error
path (LP: #2144380) // CVE-2026-23209
- macvlan: observe an RCU grace period in macvlan_common_newlink() error
path
* CVE-2026-23112
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
linux-azure-nvidia (6.8.0-1034.37) noble; urgency=medium
* noble/linux-azure-nvidia: 6.8.0-1034.37 -proposed tracker (LP: #2147851)
[ Ubuntu-azure: 6.8.0-1054.60 ]
* noble/linux-azure: 6.8.0-1054.60 -proposed tracker (LP: #2147853)
* Backporting critical SMB client fixes to affected Ubuntu distros
(LP: #2147347)
- smb: client: fix in-place encryption corruption in SMB2_write()
- cifs: make default value of retrans as zero
[ Ubuntu: 6.8.0-111.111 ]
* noble/linux: 6.8.0-111.111 -proposed tracker (LP: #2147890)
* CVE-2026-23231
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
* macvlan: observe an RCU grace period in macvlan_common_newlink() error
path (LP: #2144380) // CVE-2026-23209
- macvlan: observe an RCU grace period in macvlan_common_newlink() error
path
* CVE-2026-23112
- nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
[ Ubuntu-azure: 6.8.0-1053.59 ]
* noble/linux-azure: 6.8.0-1053.59 -proposed tracker (LP: #2143441)
* [Mana_IB][RDMA][Backport] RDMA/mana_ib: Take CQ type from the device type
(LP: #2140368)
- RDMA/mana_ib: Take CQ type from the device type
[ Ubuntu: 6.8.0-110.110 ]
* noble/linux: 6.8.0-110.110 -proposed tracker (LP: #2144887)
* ITS mitigation is not enabled on affected CPUs (LP: #2144730)
- x86/bugs: Rename CONFIG_RETPOLINE => CONFIG_MITIGATION_RETPOLINE
- x86/bugs: Rename CONFIG_RETHUNK => CONFIG_MITIGATION_RETHUNK
- [Config] rename config options RETHUNK and RETPOLINE
[ Ubuntu: 6.8.0-108.108 ]
* noble/linux: 6.8.0-108.108 -proposed tracker (LP: #2143478)
* linux-riscv-6.8 is FTBFS because of missing patches (LP: #2142235)
- riscv, bpf: Unify 32-bit sign-extension to emit_sextw
- riscv, bpf: Unify 32-bit zero-extension to emit_zextw
- riscv, bpf: Simplify sext and zext logics in branch instructions
- riscv, bpf: Add necessary Zbb instructions
- riscv, bpf: Optimize sign-extention mov insns with Zbb support
- riscv, bpf: Optimize bswap insns with Zbb support
* ADT test for linux package failed with "fatal: unable to connect to
git.launchpad.net" (LP: #2143033)
- [Packaging] d/t/ubuntu-regression-suite: use https to clone
* Coresight fails to build on 6.8.0-102 due to missing function and arg
definitions (LP: #2142337)
- SAUCE: Revert "coresight: catu: Support atclk"
- SAUCE: Revert "coresight: catu: Move ACPI support from AMBA driver to
platform driver"
- SAUCE: Revert "coresight: tmc: Support atclk"
- SAUCE: Revert "coresight: tmc: Move ACPI support from AMBA driver to
platform driver"
- SAUCE: Revert "Coresight: Set correct cs_mode for TPDM to fix disable
issue"
- SAUCE: Revert "Coresight: Set correct cs_mode for dummy source to fix
disable issue"
* efi: Fix swapped arguments to bsearch() in efi_status_to_*() SAUCE patch
(LP: #2141276)
- SAUCE efi: Fix swapped arguments to bsearch() in efi_status_to_*()
* Fix conntrack use after free when ovs hardware offload is enabled
(LP: #2139322)
- netfilter: conntrack: remove skb argument from nf_ct_refresh
- netfilter: conntrack: rework offload nf_conn timeout extension logic
- netfilter: conntrack: fix erronous removal of offload bit
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789)
- xhci: fix stale flag preventig URBs after link state error is cleared
- Revert "xfrm: destroy xfrm_state synchronously on net exit path"
- xfrm: flush all states in xfrm_state_fini
- leds: spi-byte: Use devm_led_classdev_register_ext()
- Documentation: process: Also mention Sasha Levin as stable tree
maintainer
- USB: serial: option: add Foxconn T99W760
- USB: serial: option: add Telit Cinterion FE910C04 new compositions
- USB: serial: option: move Telit 0x10c7 composition in the right place
- USB: serial: ftdi_sio: match on interface number for jtag
- serial: add support of CPCI cards
- USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC
- USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC
- ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct()
- spi: xilinx: increase number of retries before declaring stall
- spi: imx: keep dma request disabled before dma transfer setup
- drm/vmwgfx: Use kref in vmw_bo_dirty
- Bluetooth: btrtl: Avoid loading the config file on security chips
- smb: fix invalid username check in smb3_fs_context_parse_param()
- ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series
- HID: hid-input: Extend Elan ignore battery quirk to USB
- pinctrl: qcom: msm: Fix deadlock in pinmux configuration
- platform/x86: acer-wmi: Ignore backlight event
- HID: apple: Add SONiX AK870 PRO to non_apple_keyboards quirk list
- platform/x86: huawei-wmi: add keys for HONOR models
- platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list
- platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally
- HID: elecom: Add support for ELECOM M-XT3URBK (018F)
- LoongArch: Mask all interrupts during kexec/kdump
- samples: work around glibc redefining some of our defines wrong
- wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1
- drm/panel: visionox-rm69299: Don't clear all mode flags
- USB: Fix descriptor count when handling invalid MBIM extended descriptor
- clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback
- clk: renesas: Use str_on_off() helper
- clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register
- clk: renesas: cpg-mssr: Read back reset registers to assure values
latched
- HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync()
- objtool: Fix standalone --hacks=jump_label
- objtool: Fix weak symbol detection
- sched/fair: Forfeit vruntime on yield
- irqchip/irq-bcm7038-l1: Fix section mismatch
- irqchip/irq-bcm7120-l2: Fix section mismatch
- irqchip/irq-brcmstb-l2: Fix section mismatch
- irqchip/imx-mu-msi: Fix section mismatch
- irqchip/qcom-irq-combiner: Fix section mismatch
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller
- rculist: Add hlist_nulls_replace_rcu() and
hlist_nulls_replace_init_rcu()
- inet: Avoid ehash lookup race in inet_ehash_insert()
- iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member
- arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1
props
- arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl
- arm64: dts: imx8mp-venice-gw702x: remove off-board uart
- arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1
- PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2
- uio: uio_fsl_elbc_gpcm:: Add null pointer check to
uio_fsl_elbc_gpcm_probe
- clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to
other
- clk: qcom: camcc-sm6350: Fix PLL config of PLL2
- crypto: hisilicon/qm - restore original qos values
- s390/smp: Fix fallback CPU detection
- s390/ap: Don't leak debug feature files if AP instructions are not
available
- arm64: dts: ti: k3-am62p: Fix memory ranges for GPU
- firmware: imx: scu-irq: fix OF node leak in
- arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider
- phy: mscc: Fix PTP for VSC8574 and VSC8572
- sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock().
- ARM: dts: renesas: gose: Remove superfluous port property
- ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties
- Revert "mtd: rawnand: marvell: fix layouts"
- mtd: nand: relax ECC parameter validation check
- mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and
remove
- task_work: Fix NMI race condition
- x86/dumpstack: Prevent KASAN false positive warnings in __show_regs()
- tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set
- soc: qcom: smem: fix hwspinlock resource leak in probe error paths
- pinctrl: stm32: fix hwspinlock resource leak in probe function
- i3c: fix refcount inconsistency in i3c_master_register
- i3c: master: svc: Prevent incomplete IBI transaction
- interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS
- arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller
- interconnect: debugfs: Fix incorrect error handling for NULL path
- perf lock contention: Load kernel map before lookup
- perf record: skip synthesize event when open evsel failed
- power: supply: cw2015: Check devm_delayed_work_autocancel() return code
- power: supply: rt9467: Return error on failure in
rt9467_set_value_from_ranges()
- power: supply: rt9467: Prevent using uninitialized local variable in
rt9467_set_value_from_ranges()
- power: supply: wm831x: Check wm831x_set_bits() return value
- power: supply: apm_power: only unset own apm_get_power_status
- scsi: target: Do not write NUL characters into ASCII configfs output
- fs/9p: Don't open remote file with APPEND mode when writeback cache is
used
- ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels
- ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible
- ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible
- x86/boot: Fix page table access in 5-level to 4-level paging transition
- efi/libstub: Fix page table access in 5-level to 4-level paging
transition
- mfd: da9055: Fix missing regmap_del_irq_chip() in error path
- ext4: correct the checking of quota files before moving extents
- perf/x86/intel: Correct large PEBS flag check
- regulator: core: disable supply if enabling main regulator fails
- scsi: stex: Fix reboot_notifier leak in probe error path
- staging: most: i2c: Drop explicit initialization of struct
i2c_device_id::driver_data to 0
- [Config] remove MOST_I2C driver
- dt-bindings: PCI: amlogic: Fix the register name of the DBI region
- RDMA/rtrs: server: Fix error handling in get_or_create_srv
- ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node
properties
- ntfs3: init run lock for extend inode
- scsi: ufs: core: fix incorrect buffer duplication in
ufshcd_read_string_desc()
- cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs
- powerpc/32: Fix unpaired stwcx. on interrupt exit
- wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper()
- coresight: etm4x: Correct polling IDLE bit
- coresight: etm4x: Extract the trace unit controlling
- coresight: etm4x: Add context synchronization before enabling trace
- clk: renesas: r9a06g032: Fix memory leak in error path
- lib/vsprintf: Check pointer before dereferencing in time_and_date()
- ACPI: property: Fix fwnode refcount leak in
acpi_fwnode_graph_parse_endpoint()
- scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls
- leds: netxbig: Fix GPIO descriptor leak in error paths
- PCI: keystone: Exit ks_pcie_probe() for invalid mode
- arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK
5A
- arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A
- ps3disk: use memcpy_{from,to}_bvec index
- bpf: Handle return value of ftrace_set_filter_ip in register_fentry
- selftests/bpf: Fix failure paths in send_signal test
- watchdog: wdat_wdt: Fix ACPI table leak in probe function
- watchdog: starfive: Fix resource leak in probe error path
- tracefs: fix a leak in eventfs_create_events_dir()
- NFSD/blocklayout: Fix minlength check in proc_layoutget
- drm/msm/a2xx: stop over-complaining about the legacy firmware
- bpf: Improve program stats run-time calculation
- powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within
RMA limit
- powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE
format
- fs/ntfs3: out1 also needs to put mi
- fs/ntfs3: Prevent memory leaks in add sub record
- drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue
- net/ipv6: Remove expired routes with a separated list of routes.
- ipv6: clear RA flags when adding a static route
- perf arm-spe: Extend branch operations
- perf arm_spe: Fix memset subclass in operation
- pwm: bcm2835: Make sure the channel is enabled after pwm_request()
- wifi: mac80211: fix CMAC functions not handling errors
- mfd: mt6397-irq: Fix missing irq_domain_remove() in error path
- mfd: mt6358-irq: Fix missing irq_domain_remove() in error path
- phy: renesas: rcar-gen3-usb2: Fix an error handling path in
rcar_gen3_phy_usb2_probe()
- net: phy: adin1100: Fix software power-down ready condition
- cpuset: Treat cpusets in attaching as populated
- usb: chaoskey: fix locking for O_NONBLOCK
- usb: dwc2: disable platform lowlevel hw resources during shutdown
- usb: dwc2: fix hang during shutdown if set as peripheral
- usb: dwc2: fix hang during suspend if set as peripheral
- usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE
- selftests/bpf: skip test_perf_branches_hw() on unsupported platforms
- selftests/bpf: Improve reliability of test_perf_branches_no_hw()
- crypto: ccree - Correctly handle return of sg_nents_for_len
- RISC-V: KVM: Fix guest page fault within HLV* instructions
- RDMA/bnxt_re: Fix the inline size for GenP7 devices
- firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc
- staging: fbtft: core: fix potential memory leak in fbtft_probe_common()
- btrfs: fix leaf leak in an error path in btrfs_del_items()
- PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition
- drm/nouveau: restrict the flush page to a 32-bit address
- iomap: factor out a iomap_dio_done helper
- iomap: always run error completions in user context
- wifi: ieee80211: correct FILS status codes
- backlight: lp855x: Fix lp855x.h kernel-doc warnings
- iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-
metal
- RDMA/irdma: Fix data race in irdma_sc_ccq_arm
- RDMA/irdma: Fix data race in irdma_free_pble
- RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY
- ASoC: fsl_xcvr: clear the channel status control memory
- drm/amd/display: Fix logical vs bitwise bug in
get_embedded_panel_info_v2_1()
- hwmon: sy7636a: Fix regulator_enable resource leak on error path
- ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4
- ublk: prevent invalid access with DEBUG
- ext4: improve integrity checking in __mb_check_buddy by enhancing
order-0 validation
- virtio_vdpa: fix misleading return in void function
- virtio: fix typo in virtio_device_ready() comment
- virtio: fix whitespace in virtio_config_ops
- virtio: fix virtqueue_set_affinity() docs
- vdpa/pds: use %pe for ERR_PTR() in event handler registration
- ASoC: Intel: catpt: Fix error path in hw_params()
- ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system
suspend
- ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during
system suspend
- ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during
system suspend
- ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during
system suspend
- resource: replace open coded resource_intersection()
- resource: introduce is_type_match() helper and use it
- Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()"
- netfilter: flowtable: check for maximum number of encapsulations in
bridge vlan
- netfilter: nf_conncount: rework API to use sk_buff directly
- netfilter: nft_connlimit: update the count if add was skipped
- net: stmmac: fix rx limit check in stmmac_rx_zc()
- mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors
- selftests: bonding: add ipvlan over bond testing
- selftests: bonding: add delay before each xvlan_over_bond connectivity
check
- mtd: lpddr_cmds: fix signed shifts in lpddr_cmds
- remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs
- md/raid5: fix IO hang when array is broken with IO inflight
- clk: keystone: fix compile testing
- perf tools: Fix split kallsyms DSO counting
- pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling
- pinctrl: single: Fix incorrect type for error return variable
- fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe()
- 9p: fix cache/debug options printing in v9fs_show_options
- NFS: Avoid changing nlink when file removes and attribute updates race
- fs/nls: Fix utf16 to utf8 conversion
- NFS: Initialise verifiers for visible dentries in readdir and lookup
- NFS: Initialise verifiers for visible dentries in nfs_atomic_open()
- Revert "nfs: ignore SB_RDONLY when remounting nfs"
- Revert "nfs: clear SB_RDONLY before getting superblock"
- Revert "nfs: ignore SB_RDONLY when mounting nfs"
- Expand the type of nfs_fattr->valid
- NFS: Fix inheritance of the block sizes when automounting
- fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8()
- platform/x86: asus-wmi: use brightness_set_blocking() for kbd led
- ASoC: bcm: bcm63xx-pcm-whistler: Check return value of
of_dma_configure()
- ASoC: ak4458: Disable regulator when error happens
- ASoC: ak5558: Disable regulator when error happens
- blk-mq: Abort suspend when wakeup events are pending
- block: fix comment for op_is_zone_mgmt() to include RESET_ALL
- nvme-auth: use kvfree() for memory allocated with kvcalloc()
- dma/pool: eliminate alloc_pages warning in atomic_pool_expand
- ALSA: uapi: Fix typo in asound.h comment
- rtc: gamecube: Check the return value of ioremap()
- ARM: 9464/1: fix input-only operand modification in
load_unaligned_zeropad()
- dm-raid: fix possible NULL dereference with undefined raid type
- dm log-writes: Add missing set_freezable() for freezable kthread
- efi/cper: Add a new helper function to print bitmasks
- efi/cper: Adjust infopfx size to accept an extra space
- efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs
- ocfs2: fix memory leak in ocfs2_merge_rec_left()
- LoongArch: Add machine_kexec_mask_interrupts() implementation
- net: lan743x: Allocate rings outside ZONE_DMA
- usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt
- usb: phy: Initialize struct usb_phy list_head
- ipv6: add exception routes to GC list in rt6_insert_exception
- btrfs: do not skip logging new dentries when logging a new name
- btrfs: fix a potential path leak in print_data_reloc_error()
- bpf, arm64: Do not audit capability check in do_jit()
- btrfs: fix memory leak of fs_devices in degraded seed device path
- iomap: account for unaligned end offsets when truncating read range
- sched/fair: Revert max_newidle_lb_cost bump
- x86/ptrace: Always inline trivial accessors
- ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint()
only
- cpufreq: dt-platdev: Add JH7110S SOC to the allowlist
- cpufreq: s5pv210: fix refcount leak
- cpuidle: menu: Use residency threshold in polling state override
decisions
- livepatch: Match old_sympos 0 and 1 in klp_find_func()
- fs/ntfs3: Support timestamps prior to epoch
- kbuild: Use objtree for module signing key path
- hfsplus: fix volume corruption issue for generic/070
- hfsplus: fix volume corruption issue for generic/073
- wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet
- btrfs: scrub: always update btrfs_scrub_progress::last_physical
- gfs2: fix remote evict for read-only filesystems
- smb/server: fix return value of smb2_ioctl()
- ksmbd: use rwsem instead of rwlock for lease break
- Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV
- Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE
- net: fec: ERR007885 Workaround for XDP TX path
- ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2()
- mlxsw: spectrum_router: Fix possible neighbour reference count leak
- broadcom: b44: prevent uninitialized value usage
- netfilter: nf_conncount: fix leaked ct in error paths
- nfc: pn533: Fix error code in pn533_acr122_poweron_rdr()
- netfilter: nf_tables: pass context structure to nft_parse_register_load
- netfilter: nf_tables: allow loads only when register is initialized
- netfilter: nf_tables: remove redundant chain validation on register
store
- net/mlx5: fw reset, clear reset requested on drain_fw_reset
- net/mlx5: Drain firmware reset in shutdown callback
- net/mlx5: fw_tracer, Handle escaped percent properly
- net/mlx5: Skip HotPlug check on sync reset using hot reset
- net/mlx5: Serialize firmware reset with devlink
- net: enetc: do not transmit redirected XDP frames when the link is down
- net: hns3: using the num_tqps to check whether tqp_index is out of range
when vf get ring info from mbx
- hwmon: (tmp401) fix overflow caused by default conversion rate value
- MIPS: Fix a reference leak bug in ip22_check_gio()
- drm/panel: sony-td4353-jdi: Enable prepare_prev_first
- x86/xen: Move Xen upcall handler
- x86/xen: Fix sparse warning in enlighten_pv.c
- spi: cadence-quadspi: Fix clock disable on probe failure path
- block: rnbd-clt: Fix leaked ID in init_dev()
- HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen
- Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk
table
- can: gs_usb: gs_can_open(): fix error handling
- ACPI: PCC: Fix race condition by removing static qualifier
- ACPI: CPPC: Fix missing PCC check for guaranteed_perf
- mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig
- dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml
- ALSA: vxpocket: Fix resource leak in vxpocket_probe error path
- ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path
- ipmi: Fix the race between __scan_channels() and deliver_response()
- ipmi: Fix __scan_channels() failing to rescan channels
- firmware: imx: scu-irq: Init workqueue before request mbox channel
- ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx
- clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4
- powerpc/addnote: Fix overflow on 32-bit builds
- scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled
- scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive
- scsi: qla2xxx: Use reinit_completion on mbx_intr_comp
- fuse: Always flush the page cache before FOPEN_DIRECT_IO write
- fuse: Invalidate the page cache after FOPEN_DIRECT_IO write
- reset: fix BIT macro reference
- exfat: fix remount failure in different process environments
- usbip: Fix locking bug in RT-enabled kernels
- iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains
- usb: xhci: limit run_graceperiod for only usb 3.0 devices
- usb: usb-storage: No additional quirks need to be added to the EL-R12
optical drive.
- serial: sprd: Return -EPROBE_DEFER when uart clock is not ready
- libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map
- i2c: designware: Disable SMBus interrupts to prevent storms from mis-
configured firmware
- nvme-fc: don't hold rport lock when putting ctrl
- platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI
quirks
- block: rnbd-clt: Fix signedness bug in init_dev()
- vhost/vsock: improve RCU read sections around vhost_vsock_get()
- mmc: sdhci-msm: Avoid early clock doubling during HS400 transition
- lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit
- s390/dasd: Fix gendisk parent after copy pair swap
- block: rate-limit capacity change info log
- floppy: fix for PAGE_SIZE != 4KB
- kallsyms: Fix wrong "big" kernel symbol type read from procfs
- fs/ntfs3: fix mount failure for sparse runs in run_unpack()
- ktest.pl: Fix uninitialized var in config-bisect.pl
- ext4: clear i_state_flags when alloc inode
- ext4: fix incorrect group number assertion in mb_check_buddy
- ext4: align max orphan file size with e2fsprogs limit
- jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key
- jbd2: use a weaker annotation in journal handling
- media: v4l2-mem2mem: Fix outdated documentation
- mptcp: schedule rtx timer only after pushing data
- usb: usb-storage: Maintain minimal modifications to the bcdDevice range.
- media: pvrusb2: Fix incorrect variable used in trace message
- phy: broadcom: bcm63xx-usbh: fix section mismatches
- USB: lpc32xx_udc: Fix error handling in probe
- usb: phy: isp1301: fix non-OF device reference imbalance
- usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe
- usb: dwc3: keep susphy enabled during exit to avoid controller faults
- usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc()
- intel_th: Fix error handling in intel_th_output_open
- cpuidle: governors: teo: Drop misguided target residency check
- cpufreq: nforce2: fix reference count leak in nforce2
- NFSD: use correct reservation type in nfsd4_scsi_fence_client
- f2fs: fix age extent cache insertion skip on counter overflow
- tools/testing/nvdimm: Use per-DIMM device handle
- KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on
#SMI)
- KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with
period=0
- KVM: x86: Explicitly set new periodic hrtimer expiration in
apic_timer_fn()
- KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE
- KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN
- KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation
- KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN
- KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed
VMRUN)
- KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits
- xfs: fix a memory leak in xfs_buf_item_init()
- PM: runtime: Do not clear needs_force_resume with enabled runtime PM
- r8169: fix RTL8117 Wake-on-Lan in DASH mode
- nfsd: Mark variable __maybe_unused to avoid W=1 build break
- svcrdma: return 0 on success from svc_rdma_copy_inline_range
- s390/ipl: Clear SBP flag when bootprog is set
- gpio: regmap: Fix memleak in error path in gpio_regmap_register()
- drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state()
- selftests: openvswitch: Fix escape chars in regexp.
- crypto: caam - Add check for kcalloc() in test_len()
- amba: tegra-ahb: Fix device leak on SMMU enable
- tracing: Fix fixed array of synthetic event
- soc: qcom: ocmem: fix device leak on lookup
- soc: amlogic: canvas: fix device leak on lookup
- rpmsg: glink: fix rpmsg device leak
- platform/x86: intel: chtwc_int33fe: don't dereference swnode args
- i2c: amd-mp2: fix reference leak in MP2 PCI device
- hwmon: (max16065) Use local variable to avoid TOCTOU
- hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU
- ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32
- wifi: rtw88: limit indirect IO under powered off for RTL8822CS
- wifi: cfg80211: sme: store capped length in __cfg80211_connect_result()
- wifi: mac80211: do not use old MBSSID elements
- i40e: fix scheduling in set_rx_mode
- net: mdio: aspeed: add dummy read to avoid read-after-write issue
- net: openvswitch: Avoid needlessly taking the RTNL on vport destroy
- platform/x86: msi-laptop: add missing sysfs_remove_group()
- platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic
- amd-xgbe: reset retries and mode on RX adapt failures
- Revert "UBUNTU: SAUCE: selftests: net: fix "buffer overflow detected"
for tap.c"
- selftests: net: fix "buffer overflow detected" for tap.c
- genalloc.h: fix htmldocs warning
- firewire: nosy: Fix dma_free_coherent() size
- net: dsa: b53: skip multicast entries for fdb_dump()
- net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group
struct
- RDMA/efa: Remove possible negative shift
- RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr()
- RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db()
- RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send
- RDMA/bnxt_re: Fix to use correct page size for PDE table
- RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation
- RDMA/bnxt_re: fix dma_free_coherent() pointer
- blk-mq: don't schedule block kworker on isolated CPUs
- blk-mq: skip CPU offline notify on unmapped hctx
- selftests/ftrace: traceonoff_triggers: strip off names
- ntfs: Do not overwrite uptodate pages
- ASoC: stm32: sai: fix device leak on probe
- ASoC: stm32: sai: fix clk prepare imbalance on probe failure
- ASoC: qcom: q6apm-dai: set flags to reflect correct operation of
appl_ptr
- ASoC: qcom: q6asm-dai: perform correct state check before closing
- ASoC: qcom: q6adm: the the copp device only during last instance
- ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment.
- iommu/amd: Fix pci_segment memleak in alloc_pci_segment()
- iommu/apple-dart: fix device leak on of_xlate()
- iommu/exynos: fix device leak on of_xlate()
- iommu/ipmmu-vmsa: fix device leak on of_xlate()
- iommu/mediatek-v1: fix device leak on probe_device()
- iommu/mediatek-v1: fix device leaks on probe()
- iommu/mediatek: fix device leak on of_xlate()
- iommu/omap: fix device leaks on probe_device()
- iommu/qcom: fix device leak on of_xlate()
- iommu/sun50i: fix device leak on of_xlate()
- iommu/tegra: fix device leak on probe_device()
- HID: logitech-dj: Remove duplicate error logging
- PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths
- SAUCE: Revert "arm64: dts: ti: k3-j721e-sk: Add DT nodes for power
regulators"
- arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power
regulator
- powerpc, mm: Fix mprotect on book3s 32-bit
- leds: leds-lp50xx: Allow LED 0 to be added to module bank
- leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs
- leds: leds-lp50xx: Enable chip before any communication
- mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup
- mfd: max77620: Fix potential IRQ chip conflict when probing two devices
- media: rc: st_rc: Fix reset control resource leak
- parisc: entry.S: fix space adjustment on interruption for 64-bit
userspace
- parisc: entry: set W bit for !compat tasks in syscall_restore_rfi()
- powerpc/pseries/cmm: call balloon_devinfo_init() also without
CONFIG_BALLOON_COMPACTION
- firmware: stratix10-svc: Add mutex in stratix10 memory management
- dm-ebs: Mark full buffer dirty even on partial write
- dm-bufio: align write boundary on physical block size
- fbdev: gbefb: fix to use physical address instead of dma address
- fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing
- fbdev: tcx.c fix mem_map to correct smem_start offset
- media: cec: Fix debugfs leak on bus_register() failure
- media: msp3400: Avoid possible out-of-bounds array accesses in
msp3400c_thread()
- media: renesas: rcar_drif: fix device node reference leak in
rcar_drif_bond_enabled
- media: samsung: exynos4-is: fix potential ABBA deadlock on init
- media: TDA1997x: Remove redundant cancel_delayed_work in probe
- media: verisilicon: Protect G2 HEVC decoder against invalid DPB index
- media: videobuf2: Fix device reference leak in vb2_dc_alloc error path
- media: vpif_capture: fix section mismatch
- media: vpif_display: fix section mismatch
- media: amphion: Cancel message work before releasing the VPU core
- media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe
- media: i2c: adv7842: Remove redundant cancel_delayed_work in probe
- media: mediatek: vcodec: Fix a reference leak in
mtk_vcodec_fw_vpu_init()
- LoongArch: Add new PCI ID for pci_fixup_vgadev()
- LoongArch: Correct the calculation logic of thread_count
- LoongArch: Fix build errors for CONFIG_RANDSTRUCT
- LoongArch: Use __pmd()/__pte() for swap entry conversions
- LoongArch: Use unsigned long for _end and _text
- compiler_types.h: add "auto" as a macro for "__auto_type"
- kasan: refactor pcpu kasan vmalloc unpoison
- idr: fix idr_alloc() returning an ID out of range
- tools/mm/page_owner_sort: fix timestamp comparison for stable sorting
- samples/ftrace: Adjust LoongArch register restore order in direct calls
- fjes: Add missing iounmap in fjes_hw_init()
- LoongArch: BPF: Zero-extend bpf_tail_call() index
- nfsd: Drop the client reference in client_states_open()
- net: usb: sr9700: fix incorrect command used to write single register
- net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to
macb_open()
- drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma
- drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers
- drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg()
- drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse()
- drm/mgag200: Fix big-endian support
- drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in
prepare_fb
- blk-mq: add helper for checking if one CPU is mapped to specified hctx
- mptcp: Initialise rcv_mss before calling tcp_send_active_reset() in
mptcp_do_fastclose().
- ALSA: wavefront: Use standard print API
- ALSA: wavefront: Use guard() for spin locks
- ALSA: wavefront: Clear substream pointers on close
- ext4: fix string copying in parse_apply_sb_mount_options()
- jbd2: fix the inconsistency between checksum and data in memory for
journal sb
- btrfs: don't rewrite ret from inode_permission
- mm/ksm: fix exec/fork inheritance support for prctl
- usb: ohci-nxp: Use helper function devm_clk_get_enabled()
- usb: ohci-nxp: fix device leak on probe failure
- scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error
- f2fs: use f2fs_err_ratelimited() to avoid redundant logs
- ARM: dts: microchip: sama7g5: fix uart fifo size to 32
- fuse: fix readahead reclaim deadlock
- PCI: brcmstb: Fix disabling L0s capability
- lockd: fix vfs_test_lock() calls
- mm: simplify folio_expected_ref_count()
- mm: consider non-anon swap cache folios in folio_expected_ref_count()
- pmdomain: imx: Fix reference count leak in imx_gpc_probe()
- net: phy: mediatek: fix nvmem cell reference leak in
mt798x_phy_calibration
- drm/amdgpu: Forward VMID reservation errors
- drm/mediatek: Fix probe memory leak
- drm/mediatek: Fix probe resource leaks
- drm/tilcdc: request and mapp iomem with devres
- tty: introduce and use tty_port_tty_vhangup() helper
- xhci: dbgtty: fix device unregister: fixup
- usb: xhci: move link chain bit quirk checks into one helper function.
- LoongArch: Refactor register restoration in ftrace_common_return
- f2fs: remove unused GC_FAILURE_PIN
- f2fs: keep POSIX_FADV_NOREUSE ranges
- f2fs: drop inode from the donation list when the last file is closed
- f2fs: fix to propagate error from f2fs_enable_checkpoint()
- f2fs: fix to detect recoverable inode during dryrun of
find_fsync_dnodes()
- media: verisilicon: Fix CPU stalls on G2 bus error
- mm/balloon_compaction: we cannot have isolated pages in the balloon list
- mm/balloon_compaction: convert balloon_page_delete() to
balloon_page_finalize()
- powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages
- KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-
Exit
- media: amphion: Add a frame flush mode for decoder
- media: amphion: Make some vpu_v4l2 functions static
- media: amphion: Remove vpu_vb_is_codecconfig
- mm/damon/tests/vaddr-kunit: handle alloc failures in
damon_test_split_evenly_fail()
- mm/damon/tests/vaddr-kunit: handle alloc failures on
damon_do_test_apply_three_regions()
- sched/fair: Small cleanup to sched_balance_newidle()
- sched/fair: Small cleanup to update_newidle_cost()
- sched/fair: Proportional newidle balance
- RDMA/rxe: Fix the failure of ibv_query_device() and
ibv_query_device_ex() tests
- mm/damon/tests/vaddr-kunit: handle alloc failures on
damon_test_split_evenly_succ()
- mm/damon/tests/core-kunit: handle alloc failres in
damon_test_new_filter()
- mm/damon/tests/core-kunit: handle allocation failures in
damon_test_regions()
- mm/damon/tests/core-kunit: handle memory failure from
damon_test_target()
- mm/damon/tests/core-kunit: handle alloc failures on
damon_test_split_regions_of()
- mm/damon/tests/core-kunit: handle alloc failures on
damos_test_filter_out()
- mm/damon/tests/core-kunit: handle alloc failures in
damon_test_set_regions()
- mm/damon/tests/core-kunit: handle alloc failures in
damon_test_ops_registration()
- mm/damon/tests/core-kunit: handle alloc failure on
damon_test_set_attrs()
- virtio_console: fix order of fields cols and rows
- pwm: stm32: Always program polarity
- tty: fix tty_port_tty_*hangup() kernel-doc
- firmware: arm_scmi: Fix unused notifier-block in unregister
- ext4: filesystems without casefold feature cannot be mounted with
siphash
- drm/amdkfd: Fix GPU mappings for APU after prefetch
- wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1
- smack: fix bug: setting task label silently ignores input garbage
- wifi: ath10k: Avoid vdev delete timeout when firmware is already down
- wifi: ath10k: Add missing include of export.h
- wifi: ath10k: move recovery check logic into a new work
- wifi: ath11k: restore register window after global reset
- dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets
- dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets
- clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets
- inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule()
- block/mq-deadline: Introduce dd_start_request()
- block/mq-deadline: Switch back to a single dispatch list
- perf annotate: Check return value of evsel__get_arch() properly
- arm64: dts: exynos: gs101: fix sysreg_apm reg property
- clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to
other
- soc: qcom: gsbi: fix double disable caused by devm
- wifi: ath11k: fix VHT MCS assignment
- arm64: dts: qcom: sm8650: set ufs as dma coherent
- perf: Remove get_perf_callchain() init_nr argument
- bpf: Refactor stack map trace depth calculation into helper function
- perf/x86/intel/cstate: Remove PC3 support from LunarLake
- drm/imagination: Fix reference to
devm_platform_get_and_ioremap_resource()
- power: supply: rt5033_charger: Fix device node reference leaks
- power: supply: max17040: Check iio_read_channel_processed() return code
- libbpf: Fix parsing of multi-split BTF
- locktorture: Fix memory leak in param_set_cpumask()
- crypto: iaa - Fix incorrect return value in save_iaa_wq()
- drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype
- leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM
- RAS: Report all ARM processor CPER information to userspace
- vhost: Fix kthread worker cgroup failure handling
- vfio/pci: Use RCU for error/request triggers to avoid circular locking
- net: phy: aquantia: check for NVMEM deferral
- perf tools: Mark split kallsyms DSOs as loaded
- perf hist: In init, ensure mem_info is put on error paths
- sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when
the last task migrates out
- platform/x86:intel/pmc: Update Arrow Lake telemetry GUID
- nfs/vfs: discard d_exact_alias()
- NFS: Initialise verifiers for visible dentries in
_nfs4_open_and_get_state
- drm/plane: Fix IS_ERR() vs NULL check in
drm_plane_create_hotspot_properties()
- regulator: fixed: Rely on the core freeing the enable GPIO
- drm/nouveau: refactor deprecated strcpy
- drm/amdkfd: Use huge page size to check split svm range alignment
- block: return unsigned int from queue_dma_alignment
- fs/ntfs3: check for shutdown in fsync
- wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU
- wifi: cfg80211: use cfg80211_leave() in iftype change
- wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC
load
- gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad"
- Bluetooth: btusb: MT7922: Add VID/PID 0489/e170
- Bluetooth: btusb: MT7920: Add VID/PID 0489/e135
- Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT
- netfilter: nf_nat: remove bogus direction check
- iommufd/selftest: Add coverage for reporting max_pasid_log2 via
IOMMU_HW_INFO
- iommufd/selftest: Update hw_info coverage for an input data_type
- iommufd/selftest: Make it clearer to gcc that the access is not out of
bounds
- hwmon: (dell-smm) Limit fan multiplier to avoid overflow
- drm/xe: Restore engine registers before restarting schedulers after GT
reset
- mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds
- scsi: ufs: host: mediatek: Fix shutdown/suspend race condition
- scsi: smartpqi: Add support for Hurray Data new controller PCI device
- exfat: zero out post-EOF page cache on file extension
- x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA
systems
- perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister()
- wifi: mt76: Fix DTS power-limits on little endian systems
- usb: gadget: lpc32xx_udc: fix clock imbalance in error path
- mei: gsc: add dependency on Xe driver
- serial: sh-sci: Check that the DMA cookie is valid
- powerpc: Add reloc_offset() to font bitmap pointer used for
bootx_printf()
- xfs: fix stupid compiler warning
- NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap
- drm/amd/display: Fix scratch registers offsets for DCN35
- drm/displayid: pass iter to drm_find_displayid_extension()
- KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu()
- soc: apple: mailbox: fix device leak on lookup
- interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes
- i40e: validate ring_len parameter against hardware-specific values
- idpf: reduce mbx_task schedule delay to 300us
- platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event
names
- net: dsa: fix missing put_device() in dsa_tree_find_first_conduit()
- vfio/pds: Fix memory leak in pds_vfio_dirty_enable()
- md: Fix static checker warning in analyze_sbs
- ASoC: codecs: lpass-tx-macro: fix SM6115 support
- iommu/amd: Propagate the error code returned by __modify_irte_ga() in
modify_irte_ga()
- mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips
- mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips
- mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips
- mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips
- mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips
- mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips
- perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init()
on error
- mm/damon/tests/sysfs-kunit: handle alloc failures on
damon_sysfs_test_add_targets()
- mm/damon/tests/core-kunit: handle alloc failures on
damon_test_split_at()
- mm/damon/tests/core-kunit: handle memory alloc failure from
damon_test_aggregate()
- mm/damon/tests/core-kunit: handle alloc failures on
dasmon_test_merge_regions_of()
- mm/damon/tests/core-kunit: handle alloc failures on
damon_test_merge_two()
- mm/damon/tests/core-kunit: handle alloc failures in
damon_test_update_monitoring_result()
- kasan: unpoison vms[area] addresses with a common tag
- drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling
- drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident
- drm/mediatek: Fix probe device leaks
- drm/i915: Fix format string truncation warning
- drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table
- drm/xe: Adjust long-running workload timeslices to reasonable values
- drm/xe: Use usleep_range for accurate long-running workload timeslicing
- drm/xe: Drop preempt-fences when destroying imported dma-bufs.
- drm/imagination: Disallow exporting of PM/FW protected objects
- gfs2: fix freeze error handling
- sched/eevdf: Remove min_vruntime_copy
- sched/eevdf: Fix min_vruntime vs avg_vruntime
- serial: core: fix OF node leak
- serial: core: Restore sysfs fwnode information
- mptcp: pm: ignore unknown endpoint flags
- f2fs: clear SBI_POR_DOING before initing inmem curseg
- f2fs: add timeout in f2fs_enable_checkpoint()
- f2fs: dump more information for f2fs_{enable,disable}_checkpoint()
- gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list()
- gpiolib: acpi: Handle deferred list via new API
- gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter
- gpiolib: acpi: Move quirks to a separate file
- gpiolib: acpi: Add a quirk for Acer Nitro V15
- gpiolib: acpi: Add quirk for ASUS ProArt PX13
- gpiolib: acpi: Add quirk for Dell Precision 7780
- serial: core: Fix serial device initialization
- media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio
- wifi: mt76: mt7925: fix CLC command timeout when suspend/resume
- soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter
- ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime
- vfio/pci: Disable qword access to the PCI ROM bar
- iomap: allocate s_dio_done_wq for async reads as well
- mptcp: ensure context reset on disconnect()
- Upstream stable to v6.6.120, v6.12.62, v6.12.63, v6.12.64, v6.12.65
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2024-36347
- x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo
- x86/microcode/AMD: Select which microcode patch to load
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-40164
- usbnet: Fix using smp_processor_id() in preemptible code warnings
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-40325
- md/raid10: wait barrier before returning discard request with REQ_NOWAIT
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68206
- netfilter: nft_ct: add seqadj extension for natted connections
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71068
- svcrdma: bound check rq_pages index in inline path
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71135
- md/raid5: fix possible null-pointer dereferences in
raid5_store_group_thread_cnt()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-38234
- sched/rt: Fix race in push_rt_task
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68811
- svcrdma: use rc_pageoff for memcpy byte offset
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68810
- KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71109
- MIPS: ftrace: Fix memory corruption when kernel is located beyond 32
bits
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68770
- bnxt_en: Fix XDP_TX path
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71072
- shmem: fix recovery on rename failures
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68374
- md: fix rcu protection in md_wakeup_thread
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68378
- bpf: Fix stackmap overflow check in __bpf_get_stackid()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2024-57795
- RDMA/rxe: Remove the direct link to net_device
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-38022
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device"
problem
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71140
- media: mediatek: vcodec: Use spinlock for context list protection lock
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71105
- f2fs: use global inline_xattr_slab instead of per-sb slab cache
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68772
- f2fs: fix to avoid updating compression context during writeback
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-22111
- net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF.
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-22022
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71141
- drm/tilcdc: Fix removal actions in case of failed probe
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71127
- wifi: mac80211: Discard Beacon frames to non-broadcast address
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71088
- mptcp: fallback earlier on simult connection
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71065
- f2fs: fix to avoid potential deadlock
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68345
- ALSA: hda: cs35l41: Fix NULL pointer dereference in
cs35l41_hda_read_acpi()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68344
- ALSA: wavefront: Fix integer overflow in sample size validation
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71077
- tpm: Cap the number of PCR banks
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71130
- drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71138
- drm/msm/dpu: Add missing NULL pointer check for pingpong interface
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71083
- drm/ttm: Avoid NULL pointer deref for evicted BOs
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71079
- net: nfc: fix deadlock between nfc_unregister_device and
rfkill_fop_write
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71129
- LoongArch: BPF: Sign extend kfunc call arguments
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71093
- e1000: fix OOB in e1000_tbi_should_accept()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71084
- RDMA/cm: Fix leaking the multicast GID table reference
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71096
- RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71136
- media: adv7842: Avoid possible out-of-bounds array accesses in
adv7842_cp_log_status()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71143
- clk: samsung: exynos-clkout: Assign .num before accessing .hws
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71078
- powerpc/64s/slb: Fix SLB multihit issue during SLB preload
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71089
- iommu: disable SVA when CONFIG_X86 is set
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71081
- ASoC: stm32: sai: fix OF node leak on probe
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71153
- ksmbd: Fix memory leak in get_file_all_info()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71133
- RDMA/irdma: avoid invalid read in irdma_net_event
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71086
- net: rose: fix invalid array index in rose_kill_by_device()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71097
- ipv4: Fix reference count leak when using error routes with nexthop
objects
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71085
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71095
- net: stmmac: fix the crash issue for zero copy XDP_TX action
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71137
- octeontx2-pf: fix "UBSAN: shift-out-of-bounds error"
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71101
- platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package
parsing
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71094
- net: usb: asix: validate PHY address before use
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71132
- smc91x: fix broken irq-context in PREEMPT_RT
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71154
- net: usb: rtl8150: fix memory leak on usb_submit_urb() failure
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71091
- team: fix check for port enabled in
team_queue_override_port_prio_changed()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71098
- ip6_gre: make ip6gre_header() robust
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71082
- Bluetooth: btusb: revert use of devm_kzalloc in btusb
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71131
- crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71087
- iavf: fix off-by-one issues in iavf_config_rss_reg()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71071
- iommu/mediatek: fix use-after-free on probe deferral
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71111
- hwmon: (w83791d) Convert macros to functions to avoid TOCTOU
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71113
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71149
- io_uring/poll: correctly handle io_poll_add() return value on update
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68778
- btrfs: don't log conflicting inode if it's a dir moved in the current
transaction
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71119
- powerpc/kexec: Enable SMT before waking offline CPUs
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71120
- SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in
gss_read_proxy_verf
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71148
- net/handshake: restore destructor on submit failure
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68788
- fsnotify: do not generate ACCESS/MODIFY events on child for special
files
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71125
- tracing: Do not register unsupported perf events
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71104
- KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV
timer
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71116
- libceph: make decode_pool() more resilient against corrupted osdmaps
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71121
- parisc: Do not reprogram affinitiy on ASP chip
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71102
- scs: fix a wrong parameter in __scs_magic
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68804
- platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68771
- ocfs2: fix kernel BUG in ocfs2_find_victim_chain
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68808
- media: vidtv: initialize local pointers upon transfer of memory
ownership
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68769
- f2fs: fix return value of f2fs_recover_fsync_data()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71069
- f2fs: invalidate dentry cache on failed whiteout creation
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68796
- f2fs: fix to avoid updating zero-sized extent in extent cache
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71107
- f2fs: ensure node page reads complete before f2fs_put_super() finishes
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68782
- scsi: target: Reset t_task_cdb pointer in error case
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71075
- scsi: aic94xx: fix use-after-free in device removal path
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68818
- scsi: Revert "scsi: qla2xxx: Perform lockless command completion in
abort path"
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68797
- char: applicom: fix NULL pointer dereference in ac_ioctl
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68819
- media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71126
- mptcp: avoid deadlock on fallback while reinjecting
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68820
- ext4: xattr: fix null pointer deref in ext4_raw_inode()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68814
- io_uring: fix filename leak in __io_openat_prep()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71147
- KEYS: trusted: Fix a memory leak in tpm2_load_cmd
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71151
- cifs: Fix memory and information leak in smb3_reconfigure()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71108
- usb: typec: ucsi: Handle incorrect num_connectors capability
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71114
- via_wdt: fix critical boot hang due to unnamed resource allocation
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68783
- ALSA: usb-mixer: us16x08: validate meter packet indices
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68776
- net/hsr: fix NULL pointer dereference in prp_get_untagged_frame()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68773
- spi: fsl-cpm: Check length parity before switching to 16 bit mode
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68777
- Input: ti_am335x_tsc - fix off-by-one error in wire_order validation
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68806
- ksmbd: fix buffer validation by including null terminator size in EA
length
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71150
- ksmbd: Fix refcount leak when invalid session is found on session lookup
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68786
- ksmbd: skip lock-range check on equal size to avoid size==0 underflow
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68789
- hwmon: (ibmpex) fix use-after-free in high/low store
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71112
- net: hns3: add VLAN id validation before using
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71064
- net: hns3: using the num_tqps in the vf driver to apply for resources
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68775
- net/handshake: duplicate handshake cancellations leak socket
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68816
- net/mlx5: fw_tracer, Validate format string parameters
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68795
- ethtool: Avoid overflowing userspace buffer on stats query
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71122
- iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68815
- net/sched: ets: Remove drr class from the active list if it changes to
strict
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68799
- caif: fix integer underflow in cffrml_receive()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68813
- ipvs: fix ipv4 null-ptr-deref in route error path
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68785
- net: openvswitch: fix middle attribute validation in push_nsh() action
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68800
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route
stats
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68801
- mlxsw: spectrum_router: Fix neighbour use-after-free
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71066
- net/sched: ets: Always remove class from active list before deleting in
ets_qdisc_change
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68787
- netrom: Fix memory leak in nr_sendmsg()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68809
- ksmbd: vfs: fix race on m_flags in vfs_cache
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68817
- ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68767
- hfsplus: Verify inode mode when loading from disk
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68774
- hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71067
- ntfs: set dummy blocksize to read boot_block when mounting
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-71118
- ACPICA: Avoid walking the Namespace if start_node is NULL
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68780
- sched/deadline: only set free_cpus for online runqueues
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68798
- perf/x86/amd: Check event before enable to avoid GPF
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68794
- iomap: adjust read range correctly for non-block-aligned positions
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68346
- ALSA: dice: fix buffer overflow in detect_stream_formats()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68766
- irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68756
- block: Use RCU in blk_mq_[un]quiesce_tagset() instead of
set->tag_list_lock
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68753
- ALSA: firewire-motu: add bounds check in put_user loop for DSP events
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68347
- ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68764
- NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68349
- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in
pnfs_mark_layout_stateid_invalid
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68325
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68354
- regulator: core: Protect regulator_supply_alias_list with
regulator_list_mutex
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68758
- backlight: led-bl: Add devlink to supplier LEDs
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68765
- mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68763
- crypto: starfive - Correctly handle return of sg_nents_for_len
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68740
- ima: Handle error code returned by ima_filter_rule_match()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68362
- wifi: rtl818x: rtl8187: Fix potential buffer underflow in
rtl8187_rx_cb()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68741
- scsi: qla2xxx: Fix improper freeing of purex item
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68742
- bpf: Fix invalid prog->stats access when update_effective_progs fails
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68759
- wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68363
- bpf: Check skb->transport_header is set in bpf_skb_check_mtu
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68744
- bpf: Free special fields when update [lru_,]percpu_hash maps
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68364
- ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68366
- nbd: defer config unlock in nbd_genl_connect
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68367
- macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68755
- staging: most: remove broken i2c driver
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68371
- scsi: smartpqi: Fix device resources accessed after device removal
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68372
- nbd: defer config put in recv_work
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68746
- spi: tegra210-quad: Fix timeout handling
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68379
- RDMA/rxe: Fix null deref on srq->rq.queue after resize failure
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68380
- wifi: ath11k: fix peer HE MCS assignment
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68724
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68727
- ntfs3: Fix uninit buffer allocated by __getname()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68728
- ntfs3: fix uninit memory after failed mi_read in mi_format_new
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68757
- drm/vgem-fence: Fix potential deadlock on release
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68732
- gpu: host1x: Fix race in syncpt alloc/free
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68733
- smack: fix bug: unprivileged task can create labels
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68254
- staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68255
- staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68256
- staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68257
- comedi: check device's attached status in compat ioctls
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68258
- comedi: multiq3: sanitize config options in multiq3_attach()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68332
- comedi: c6xdigio: Fix invalid PNP driver unregistration
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68265
- nvme: fix admin request_queue lifetime
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68266
- bfs: Reconstruct file type when loading from disk
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68259
- KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68335
- comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68261
- ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock()
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68336
- locking/spinlock/debug: Fix data-race in do_raw_write_lock
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68263
- ksmbd: ipc: fix use-after-free in ipc_msg_send_request
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68264
- ext4: refresh inline data size before write operations
* Noble update: upstream stable patchset 2026-03-04 (LP: #2142789) //
CVE-2025-68337
- jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system
corrupted
* CVE-2026-23111
- netfilter: nf_tables: fix inverted genmask check in
nft_map_catchall_activate()
* CVE-2026-23209
- macvlan: fix error recovery in macvlan_common_newlink()
* CVE-2026-23074
- net/sched: Enforce that teql can only be used as root qdisc
* CVE-2026-23060
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN
spec
[ Ubuntu-azure: 6.8.0-1052.58 ]
* noble/linux-azure: 6.8.0-1052.58 -proposed tracker (LP: #2144230)
[ Ubuntu: 6.8.0-107.107 ]
* noble/linux: 6.8.0-107.107 -proposed tracker (LP: #2144267)
* CVE-2026-23074
- net/sched: Enforce that teql can only be used as root qdisc
* CVE-2026-23060
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN
spec
* CVE-2026-23111
- netfilter: nf_tables: fix inverted genmask check in
nft_map_catchall_activate()
[ Ubuntu-azure: 6.8.0-1051.57 ]
[ Ubuntu: 6.8.0-106.106 ]
* Miscellaneous upstream changes
- apparmor: validate DFA start states are in bounds in unpack_pdb
- apparmor: fix memory leak in verify_header
- apparmor: replace recursive profile removal with iterative approach
- apparmor: fix: limit the number of levels of policy namespaces
- apparmor: fix side-effect bug in match_char() macro usage
- apparmor: fix missing bounds check on DEFAULT table in verify_dfa()
- apparmor: Fix double free of ns_name in aa_replace_profiles()
- apparmor: fix unprivileged local user can do privileged policy
management
- apparmor: fix differential encoding verification
- apparmor: fix race on rawdata dereference
- apparmor: fix race between freeing data and fs accessing it
[ Ubuntu-azure: 6.8.0-1049.55 ]
* noble/linux-azure: 6.8.0-1049.55 -proposed tracker (LP: #2141849)
[ Ubuntu: 6.8.0-104.104 ]
* noble/linux: 6.8.0-104.104 -proposed tracker (LP: #2141774)
* Change of ABI in 6.8.0 kernel breaks some OTT modules (LP: #2141778)
- Revert "net: tls: Cancel RX async resync request on rcd_delta overflow"
- Revert "net: tls: Change async resync helpers argument"
[ Ubuntu-azure: 6.8.0-1048.54 ]
* noble/linux-azure: 6.8.0-1048.54 -proposed tracker (LP: #2141076)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2026.02.09)
[ Ubuntu: 6.8.0-103.103 ]
* noble/linux: 6.8.0-103.103 -proposed tracker (LP: #2141411)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2026.02.09)
* xhci_find_slot_id_by_port kernel panic on boot on arm64 (LP: #2141314)
- Revert "xhci: fix stale flag preventig URBs after link state error is
cleared"
* Boot up hang with ucsi call trace while plug power cord or device on tbt5
port (LP: #2127764)
- SAUCE: usb: typec: ucsi: Fix workqueue destruction race during connector
cleanup
* TBT call trace while connecting TBT4 monitor on TBT5 port (LP: #2137613)
- thunderbolt: Show path name in debug log when path is deactivated
- thunderbolt: Log path activation failures without WARN backtraces
* x86: tsc: Fix TSC clock source being disabled when SNC is enabled causing
fall back to less precise HPET (LP: #2138120)
- x86/tsc: Use topology_max_packages() to get package number
* Random flickering with Intel i915 (CoffeeLake and WhiskeyLake) on Linux
6.8 (LP: #2136958)
- SAUCE: iommu/intel: disable DMAR for CFL and WHL integrated gfx
* CXL: Fix slab-out-of-bounds in cxl_setup_parent_dport (LP: #2130240)
- cxl/pci: Get AER capability address from RCRB only for RCH dport
- cxl/test: Skip cxl_setup_parent_dport() for emulated dports
* net:tap in ubuntu_kselftests_net fails on Noble (buffer overflow detected)
(LP: #2067642)
- SAUCE: selftests: net: fix "buffer overflow detected" for tap.c
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633)
- Bluetooth: SMP: Fix not generating mackey and ltk when repairing
- net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY
- net: aquantia: Add missing descriptor cache invalidation on ATL2
- net: lan966x: Fix the initialization of taprio
- net/mlx5e: Fix validation logic in rate limiting
- drm/amdgpu: fix cyan_skillfish2 gpu info fw handling
- net: dsa: sja1105: simplify static configuration reload
- net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing
traffic
- net: fec: cancel perout_timer when PEROUT is disabled
- net: fec: do not update PEROUT if it is enabled
- net: fec: do not allow enabling PPS and PEROUT simultaneously
- net: fec: do not register PPS event for PEROUT
- iio: st_lsm6dsx: Fixed calibrated timestamp calculation
- usb: gadget: renesas_usbf: Handle devm_pm_runtime_enable() errors
- mailbox: mailbox-test: Fix debugfs_create_dir error checking
- mailbox: pcc: Refactor error handling in irq handler into separate
function
- mailbox: pcc: don't zero error register
- spi: tegra114: remove Kconfig dependency on TEGRA20_APB_DMA
- spi: amlogic-spifc-a1: Handle devm_pm_runtime_enable() errors
- spi: spi-mem: Allow specifying the byte order in Octal DTR mode
- spi: spi-mem: Extend spi-mem operations with a per-operation maximum
frequency
- spi: spi-mem: Add a new controller capability
- spi: nxp-fspi: Support per spi-mem operation frequency switches
- spi: nxp-fspi: Propagate fwnode in ACPI case as well
- spi: bcm63xx: fix premature CS deassertion on RX-only transactions
- Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()"
- iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields
- iio:common:ssp_sensors: Fix an error handling path ssp_probe()
- iio: accel: fix ADXL355 startup race condition
- iio: adc: ad7280a: fix ad7280_store_balance_timer()
- MIPS: mm: Prevent a TLB shutdown on initial uniquification
- MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow
- ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230
- ARM: dts: nxp: imx6ul: correct SAI3 interrupt line
- can: sja1000: fix max irq loop handling
- can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling
- dm-verity: fix unreliable memory allocation
- drivers/usb/dwc3: fix PCI parent check
- thunderbolt: Add support for Intel Wildcat Lake
- slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves
- mptcp: clear scheduled subflows on retransmit
- serial: amba-pl011: prefer dma_mapping_error() over explicit address
checking
- usb: cdns3: Fix double resource release in cdns3_pci_probe
- USB: storage: Remove subclass and protocol overrides from Novatek quirk
- usb: dwc3: pci: add support for the Intel Nova Lake -S
- usb: dwc3: pci: Sort out the Intel device IDs
- xhci: dbgtty: Fix data corruption when transmitting data form DbC to
host
- xhci: dbgtty: fix device unregister
- USB: serial: ftdi_sio: add support for u-blox EVK-M101
- USB: serial: option: add support for Rolling RW101R-GL
- drm: sti: fix device leaks at component probe
- net: dsa: microchip: common: Fix checks on irq_find_mapping()
- net: dsa: microchip: ptp: Fix checks on irq_find_mapping()
- nfsd: Replace clamp_t in nfsd4_get_drc_mem()
- usb: udc: Add trace event for usb_gadget_set_state
- usb: typec: ucsi: psy: Set max current to zero when disconnected
- can: rcar_canfd: Fix CAN-FD mode as default
- iio: adc: rtq6056: Correct the sign bit index
- net: dsa: microchip: Fix symetry in ksz_ptp_msg_irq_{setup/free}()
- net: dsa: microchip: Free previously initialized ports on init failures
- mailbox: mtk-cmdq: Refine DMA address handling for the command buffer
- iio: humditiy: hdc3020: fix units for temperature and humidity
measurement
- arm64: dts: imx8dxl-ss-conn: swap interrupts number of eqos
- nvmem: layouts: fix nvmem_layout_bus_uevent
- xhci: fix stale flag preventig URBs after link state error is cleared
- drm/amd/display: Don't change brightness for disabled connectors
- KVM: SVM: Introduce svm_recalc_lbr_msr_intercepts()
- KVM: nSVM: Always recalculate LBR MSR intercepts in svm_update_lbrv()
- KVM: nSVM: Fix and simplify LBR virtualization handling with nested
- KVM: SVM: Fix redundant updates of LBR MSR intercepts
- wifi: ath12k: correctly handle mcast packets for clients
- drm/i915/dp: Initialize the source OUI write timestamp always
- SAUCE: bpf: introduce __MAX_BPF_PROG_TYPE delimiter
- Upstream stable to v6.6.119, v6.12.61
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68340
- team: Move team device type change at the end of team_port_add
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68282
- usb: gadget: udc: fix use-after-free in usb_gadget_state_work
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68283
- libceph: replace BUG_ON with bounds check for map->max_osd
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68284
- libceph: prevent potential out-of-bounds writes in
handle_auth_session_key()
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68285
- libceph: fix potential use-after-free in have_mon_and_osd_map()
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68286
- drm/amd/display: Check NULL before accessing
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68287
- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests()
call paths
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68331
- usb: uas: fix urb unmapping issue when the uas device is remove during
ongoing data transfer
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-40345
- usb: storage: sddr55: Reject out-of-bound new_pba
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68288
- usb: storage: Fix memory leak in USB bulk transport
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68327
- usb: renesas_usbhs: Fix synchronous external abort on unbind
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68289
- usb: gadget: f_eem: Fix memory leak in eem_unwrap
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68290
- most: usb: fix double free on late probe failure
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68328
- firmware: stratix10-svc: fix bug in saving controller data
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68295
- smb: client: fix memory leak in cifs_construct_tcon()
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68297
- ceph: fix crash in process_v2_sparse_read() for encrypted directories
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68339
- atm/fore200e: Fix possible data race in fore200e_open()
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68330
- iio: accel: bmc150: Fix irq assumption regression
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68301
- net: atlantic: fix fragment overflow handling in RX path
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68302
- net: sxgbe: fix potential NULL dereference in sxgbe_rx()
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68303
- platform/x86: intel: punit_ipc: fix memory corruption
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68305
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68342
- can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing data
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68343
- can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before
accessing header
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68307
- can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted
URBs
* Noble update: upstream stable patchset 2026-02-03 (LP: #2139633) //
CVE-2025-68308
- can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624)
- HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155
- shmem: fix tmpfs reconfiguration (remount) when noswap is set
- exfat: check return value of sb_min_blocksize in exfat_read_boot_sector
- mptcp: Disallow MPTCP subflows from sockmap
- ata: libata-scsi: Fix system suspend for a security locked drive
- smb: client: introduce close_cached_dir_locked()
- ata: libata-scsi: Add missing scsi_device_put() in ata_scsi_dev_rescan()
- net: dsa: microchip: lan937x: Fix RGMII delay tuning
- Revert "drm/tegra: dsi: Clear enable register if powered by bootloader"
- Input: goodix - add support for ACPI ID GDIX1003
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl()
- MIPS: Malta: Fix !EVA SOC-it PCI MMIO
- dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups
- LoongArch: Don't panic if no valid cache info for PCI
- mptcp: fix ack generation for fallback msk
- mptcp: fix premature close in case of fallback
- mptcp: avoid unneeded subflow-level drops
- mptcp: decouple mptcp fastclose from tcp close
- mptcp: do not fallback when OoO is present
- drm/tegra: dc: Fix reference leak in tegra_dc_couple()
- drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled
- drm/amd/display: Increase DPCD read retries
- drm/amd/display: Move sleep into each retry for retrieve_link_cap()
- xfrm: Determine inner GSO type from packet inner protocol
- xfrm: Prevent locally generated packets from direct output in tunnel
mode
- pinctrl: cirrus: Fix fwnode leak in cs42l43_pin_probe()
- mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats()
- net: dsa: hellcreek: fix missing error handling in LED registration
- net: mlxsw: linecards: fix missing error check in
mlxsw_linecard_devlink_info_get()
- platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to
errnos
- pinctrl: s32cc: initialize gpio_pin_config::list after kmalloc()
- LoongArch: Use UAPI types in ptrace UAPI header
- bcma: don't register devices disabled in OF
- cifs: fix typo in enable_gcm_256 module parameter
- scsi: core: Fix a regression triggered by scsi_host_busy()
- x86/microcode/AMD: Limit Entrysign signature checking to known
generations
- selftests: net: use BASH for bareudp testing
- net: tls: Cancel RX async resync request on rcd_delta overflow
- kconfig/mconf: Initialize the default locale at startup
- kconfig/nconf: Initialize the default locale at startup
- f2fs: compress: change the first parameter of page_array_{alloc,free} to
sbi
- s390/mm: Fix __ptep_rdp() inline assembly
- ALSA: usb-audio: fix uac2 clock source at terminal parser
- tracing/tools: Fix incorrcet short option in usage text for --threads
- smb: client: fix incomplete backport in cfids_invalidation_worker()
- uio_hv_generic: Set event for all channels on the device
- maple_tree: fix tracepoint string pointers
- selftests: mptcp: join: endpoints: longer transfer
- HID: amd_sfh: Stop sensor before starting
- arm64: dts: rockchip: fix PCIe 3.3V regulator voltage on orangepi-5
- mptcp: fix duplicate reset on fastclose
- selftests: mptcp: join: endpoints: longer timeout
- selftests: mptcp: join: userspace: longer timeout
- drm/amd/display: Clear the CUR_ENABLE register on DCN20 on DPP5
- xfrm: set err and extack on failure to create pcpu SA
- pinctrl: realtek: Select REGMAP_MMIO for RTD driver
- selftests: net: lib: Do not overwrite error messages
- af_unix: Cache state->msg in unix_stream_read_generic().
- af_unix: Read sk_peek_offset() again after sleeping in
unix_stream_read_generic().
- net: tls: Change async resync helpers argument
- ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check
- drm/xe: Prevent BIT() overflow when handling invalid prefetch region
- tty/vt: fix up incorrect backport to stable releases
- Upstream stable to v6.6.118, v6.12.60
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68213
- idpf: fix possible vport_config NULL pointer deref in remove
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68223
- drm/radeon: delete radeon_fence_process in is_signaled, no deadlock
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40257
- mptcp: fix a race in mptcp_pm_del_add_timer()
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68231
- mm/mempool: fix poisoning order>0 pages with HIGHMEM
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68198
- crash: fix crashkernel resource shrink
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40266
- KVM: arm64: Check the untrusted offset in FF-A memory share
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68220
- net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return
NULL on error
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-38627
- f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40248
- vsock: Ignore signal/timeout on connect() if already established
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68219
- cifs: fix memory leak in smb3_fs_context_parse_param error path
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40250
- net/mlx5: Clean up only new IRQ glue on request_irq() failure
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40251
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68222
- pinctrl: s32cc: fix uninitialized memory in s32_pinctrl_desc
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40252
- net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont()
and qede_tpa_end()
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40253
- s390/ctcm: Fix double-kfree
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68218
- nvme-multipath: fix lockdep WARN due to partition scan work
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40254
- net: openvswitch: remove never-working support for setting nsh fields
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68233
- drm/tegra: Add call to put_pid()
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40258
- mptcp: fix race condition in mptcp_schedule_work()
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68229
- scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show()
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40259
- scsi: sg: Do not sleep in atomic context
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40261
- nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68235
- nouveau/firmware: Add missing kfree() of nvkm_falcon_fw::boot
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68217
- Input: pegasus-notetaker - fix potential out-of-bounds access
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40262
- Input: imx_sc_key - fix memory corruption on unload
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40263
- Input: cros_ec_keyb - fix an invalid memory access
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-40264
- be2net: pass wrb_params in case of OS2BMC
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68227
- mptcp: Fix proto fallback detection with BPF
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68237
- mtdchar: fix integer overflow in read/write ioctls
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68238
- mtd: rawnand: cadence: fix DMA device NULL pointer dereference
* Noble update: upstream stable patchset 2026-02-02 (LP: #2139624) //
CVE-2025-68214
- timers: Fix NULL function pointer race in timer_shutdown_sync()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460)
- net: usb: asix_devices: Check return value of usbnet_get_endpoints
- fbdev: atyfb: Check if pll_ops->init_pll failed
- ACPI: button: Call input_free_device() on failing input device
registration
- Bluetooth: rfcomm: fix modem control handling
- fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS
- fbdev: valkyriefb: Fix reference count leak in valkyriefb_init
- mptcp: drop bogus optimization in __mptcp_check_push()
- mptcp: restore window probe
- ASoC: qdsp6: q6asm: do not sleep while atomic
- wifi: ath10k: Fix memory leak on unsupported WMI command
- wifi: ath11k: Add missing platform IDs for quirk table
- wifi: ath12k: free skb during idr cleanup callback
- drm/msm/a6xx: Fix GMU firmware parser
- ALSA: usb-audio: fix control pipe direction
- scsi: ufs: core: Initialize value of an attribute returned by uic cmd
- ASoC: Intel: avs: Unprepare a stream when XRUN occurs
- ASoC: fsl_sai: fix bit order for DSD format
- libbpf: Fix powerpc's stack register definition in bpf_tracing.h
- Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during
reset
- Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00
- Bluetooth: ISO: Fix another instance of dst_type handling
- Bluetooth: hci_core: Fix tracking of periodic advertisement
- drm/etnaviv: fix flush sequence logic
- net: hns3: return error code when function fails
- sfc: fix potential memory leak in efx_mae_process_mport()
- drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table()
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji
- drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland
- block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL
- block: make REQ_OP_ZONE_OPEN a write operation
- drm/mediatek: Fix device use-after-free on unbind
- mptcp: fix MSG_PEEK stream corruption
- cpuidle: governors: menu: Rearrange main loop in menu_select()
- cpuidle: governors: menu: Select polling state in some more cases
- net: phy: dp83867: Disable EEE support as not implemented
- [Config] disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP for s390x
- drm/sched: Fix race in drm_sched_entity_select_rq()
- soc: aspeed: socinfo: Add AST27xx silicon IDs
- soc: qcom: smem: Fix endian-unaware access of num_entries
- spi: loopback-test: Don't use %pK through printk
- bpf: Don't use %pK through printk
- pinctrl: single: fix bias pull up/down handling in pin_config_set
- mmc: host: renesas_sdhi: Fix the actual clock
- memstick: Add timeout to prevent indefinite waiting
- irqchip/sifive-plic: Respect mask state when setting affinity
- selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2
- arc: Fix __fls() const-foldability via __builtin_clzl()
- selftests/bpf: Upon failures, exit with code 1 in test_xsk.sh
- irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment
- ACPI: PRM: Skip handlers with NULL handler_address or NULL VA
- ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[]
- power: supply: qcom_battmgr: add OOI chemistry
- hwmon: (k10temp) Add device ID for Strix Halo
- hwmon: (sbtsi_temp) AMD CPU extended temperature range support
- pinctrl: keembay: release allocated memory in detach path
- power: supply: sbs-charger: Support multiple devices
- hwmon: sy7636a: add alias
- irqchip/loongson-pch-lpc: Use legacy domain for PCH-LPC IRQ controller
- arm64: zynqmp: Revert usb node drive strength and slew rate for zcu106
- soc/tegra: fuse: Add Tegra114 nvmem cells and fuse lookups
- ARM: tegra: transformer-20: add missing magnetometer interrupt
- ARM: tegra: transformer-20: fix audio-codec interrupt
- mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card
- ACPICA: dispatcher: Use acpi_ds_clear_operands() in
acpi_ds_call_control_method()
- tee: allow a driver to allocate a tee_device without a pool
- bpf: Do not limit bpf_cgroup_from_id to current's namespace
- video: backlight: lp855x_bl: Set correct EPROM start for LP8556
- tools/cpupower: fix error return value in cpupower_write_sysfs()
- pmdomain: apple: Add "apple,t8103-pmgr-pwrstate"
- power: supply: qcom_battmgr: handle charging state change notifications
- bpftool: Fix -Wuninitialized-const-pointer warnings with clang >= 21
- cpuidle: Fail cpuidle device registration if there is one already
- spi: rpc-if: Add resume support for RZ/G3E
- clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel
- riscv: bpf: Fix uninitialized symbol 'retval_off'
- bpf: Clear pfmemalloc flag when freeing all fragments
- nvme: Use non zero KATO for persistent discovery connections
- uprobe: Do not emulate/sstep original instruction when ip is changed
- hwmon: (asus-ec-sensors) increase timeout for locking ACPI mutex
- hwmon: (dell-smm) Add support for Dell OptiPlex 7040
- tools/cpupower: Fix incorrect size in cpuidle_state_disable()
- tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage
- tools/power x86_energy_perf_policy: Enhance HWP enable
- tools/power x86_energy_perf_policy: Prefer driver HWP limits
- mfd: stmpe: Remove IRQ domain upon removal
- mfd: stmpe-i2c: Add missing MODULE_LICENSE
- mfd: madera: Work around false-positive -Wininitialized warning
- mfd: da9063: Split chip variant reading in two bus transactions
- drm/amd/display: ensure committing streams is seamless
- drm/amd/display: Increase AUX Intra-Hop Done Max Wait Duration
- drm/amd/display: add more cyan skillfish devices
- drm/amd/display: update dpp/disp clock from smu clock table
- drm/amd/pm: Use cached metrics data on aldebaran
- drm/amd/pm: Use cached metrics data on arcturus
- drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff
- drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf()
- PCI: Disable MSI on RDC PCI to PCIe bridges
- selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8
- selftests/net: Ensure assert() triggers in psock_tpacket.c
- wifi: rtw88: sdio: use indirect IO for device registers before power-on
- drm/amdkfd: return -ENOTTY for unsupported IOCTLs
- media: pci: ivtv: Don't create fake v4l2_fh
- media: amphion: Delete v4l2_fh synchronously in .release()
- drm/tidss: Use the crtc_* timings when programming the HW
- drm/bridge: cdns-dsi: Fix REG_WAKEUP_TIME value
- drm/bridge: cdns-dsi: Don't fail on MIPI_DSI_MODE_VIDEO_BURST
- drm/tidss: Set crtc modesetting parameters with adjusted mode
- media: i2c: Kconfig: Ensure a dependency on HAVE_CLK for
VIDEO_CAMERA_SENSOR
- x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall
- net: stmmac: Check stmmac_hw_setup() in stmmac_resume()
- ice: Don't use %pK through printk or tracepoints
- thunderbolt: Use is_pciehp instead of is_hotplug_bridge
- powerpc/eeh: Use result of error_detected() in uevent
- s390/pci: Use pci_uevent_ers() in PCI recovery
- bridge: Redirect to backup port when port is administratively down
- scsi: ufs: host: mediatek: Fix auto-hibern8 timer configuration
- scsi: ufs: host: mediatek: Assign power mode userdata before FASTAUTO
mode change
- scsi: ufs: host: mediatek: Change reset sequence for improved stability
- scsi: ufs: host: mediatek: Fix invalid access in vccqx handling
- drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts
- drm/amdkfd: Handle lack of READ permissions in SVM mapping
- iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before
setting register
- iio: adc: imx93_adc: load calibrated values even calibration failed
- usb: gadget: f_ncm: Fix MAC assignment NCM ethernet
- char: misc: Make misc_register() reentry for miscdevice who wants
dynamic minor
- char: misc: Does not request module for miscdevice with dynamic minor
- net: When removing nexthops, don't call synchronize_net if it is not
necessary
- net: Call trace_sock_exceed_buf_limit() for memcg failure with
SK_MEM_RECV.
- PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call
- ALSA: usb-audio: Add validation of UAC2/UAC3 effect units
- rds: Fix endianness annotation for RDS_MPATH_HASH
- scsi: mpi3mr: Fix controller init failure on fault during queue creation
- scsi: pm80xx: Fix race condition caused by static variables
- extcon: adc-jack: Fix wakeup source leaks on device unbind
- remoteproc: wkup_m3: Use devm_pm_runtime_enable() helper
- net: phy: fixed_phy: let fixed_phy_unregister free the phy_device
- fuse: zero initialize inode private data
- drm/amdkfd: fix vram allocation failure for a special case
- drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption
- media: fix uninitialized symbol warnings
- drm/amdgpu: Respect max pixel clock for HDMI and DVI-D (v2)
- mips: lantiq: danube: add missing properties to cpu node
- mips: lantiq: danube: add model to EASY50712 dts
- mips: lantiq: danube: add missing device_type in pci node
- mips: lantiq: xway: sysctrl: rename stp clock
- mips: lantiq: danube: rename stp node on EASY50712 reference board
- crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof()
- scsi: pm8001: Use int instead of u32 to store error codes
- ptp: Limit time setting of PTP clocks
- dmaengine: sh: setup_xref error handling
- dmaengine: mv_xor: match alloc_wc and free_wc
- dmaengine: dw-edma: Set status for callback_result
- drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL
- drm/msm/dsi/phy_7nm: Fix missing initial VCO rate
- drm/amdgpu: Allow kfd CRIU with no buffer objects
- ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled
- net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms
- media: adv7180: Add missing lock in suspend callback
- media: adv7180: Do not write format to device in set_fmt
- media: adv7180: Only validate format in querystd
- media: verisilicon: Explicitly disable selection api ioctls for decoders
- ALSA: usb-audio: apply quirk for MOONDROP Quark2
- net: call cond_resched() less often in __release_sock()
- smsc911x: add second read of EEPROM mac when possible corruption seen
- iommu/apple-dart: Clear stream error indicator bits for T8110 DARTs
- drm/amd: add more cyan skillfish PCI ids
- drm/amdgpu: don't enable SMU on cyan skillfish
- drm/amdgpu: add support for cyan skillfish gpu_info
- usb: gadget: f_hid: Fix zero length packet transfer
- drm/msm: make sure to not queue up recovery more than once
- char: Use list_del_init() in misc_deregister() to reinitialize list
pointer
- media: ov08x40: Fix the horizontal flip control
- media: i2c: og01a1b: Specify monochrome media bus format instead of
Bayer
- scsi: ufs: host: mediatek: Enhance recovery on resume failure
- scsi: ufs: host: mediatek: Enhance recovery on hibernation exit failure
- net: phy: marvell: Fix 88e1510 downshift counter errata
- scsi: ufs: host: mediatek: Disable auto-hibern8 during power mode
changes
- wifi: mac80211: Fix HE capabilities element check
- phy: cadence: cdns-dphy: Enable lower resolutions in dphy
- phy: renesas: r8a779f0-ether-serdes: add new step added to latest
datasheet
- phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0
- net: sh_eth: Disable WoL if system can not suspend
- selftests: net: replace sleeps in fcnal-test with waits
- media: redrat3: use int type to store negative error codes
- selftests: traceroute: Use require_command()
- netfilter: nf_reject: don't reply to icmp error messages
- x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of
PV_UNHALT
- selftests: Disable dad for ipv6 in fcnal-test.sh
- eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP
- [Config] disable 8139TOO_PIO for armhf
- selftests: Replace sleep with slowwait
- HID: asus: add Z13 folio to generic group for multitouch to work
- watchdog: s3c2410_wdt: Fix max_timeout being calculated larger
- crypto: sun8i-ce - remove channel timeout field
- PCI: dwc: Verify the single eDMA IRQ in dw_pcie_edma_irq_verify()
- crypto: caam - double the entropy delay interval for retry
- net/cls_cgroup: Fix task_get_classid() during qdisc run
- wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device
- wifi: mt76: mt7996: Temporarily disable EPCS
- ALSA: serial-generic: remove shared static buffer
- drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl
- drm/amd: Avoid evicting resources at S5
- drm/amd/display: Fix DVI-D/HDMI adapters
- drm/amd/display: Disable VRR on DCE 6
- ethernet: Extend device_get_mac_address() to use NVMEM
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4
- drm/amdgpu: reject gang submissions under SRIOV
- selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to
clean net/lib dependency
- scsi: ufs: core: Disable timestamp functionality if not supported
- scsi: lpfc: Check return status of lpfc_reset_flush_io_context during
TGT_RESET
- scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in
lpfc_cleanup
- scsi: lpfc: Define size of debugfs entry for xri rebalancing
- allow finish_no_open(file, ERR_PTR(-E...))
- usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs
- usb: xhci: plat: Facilitate using autosuspend for xhci plat devices
- ipv6: np->rxpmtu race annotation
- ASoC: qcom: sc8280xp: explicitly set S16LE format in
sc8280xp_be_hw_params_fixup()
- net: phy: clear link parameters on admin link down
- net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X
- iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot()
- wifi: ath10k: Fix connection after GTK rekeying
- net: intel: fm10k: Fix parameter idx set but not used
- sparc/module: Add R_SPARC_UA64 relocation handling
- sparc64: fix prototypes of reads[bwl]()
- vfio: return -ENOTTY for unsupported device feature
- PCI/PM: Skip resuming to D0 if device is disconnected
- remoteproc: qcom: q6v5: Avoid handling handover twice
- wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256
- drm/amd/display: Add AVI infoframe copy in copy_stream_update_to_stream
- NFSv4: handle ERR_GRACE on delegation recalls
- NFSv4.1: fix mount hang after CREATE_SESSION failure
- net: bridge: Install FDB for bridge MAC on VLAN 0
- scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill()
- accel/habanalabs/gaudi2: fix BMON disable configuration
- scsi: mpt3sas: Add support for 22.5 Gbps SAS link rate
- accel/habanalabs: return ENOMEM if less than requested pages were pinned
- accel/habanalabs/gaudi2: read preboot status after recovering from dirty
state
- fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock
- ext4: increase IO priority of fastcommit
- ASoC: stm32: sai: manage context in set_sysclk callback
- ASoC: tlv320aic3x: Fix class-D initialization for tlv320aic3007
- net/mlx5e: Don't query FEC statistics when FEC is disabled
- net: macb: avoid dealing with endianness in macb_set_hwaddr()
- Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI
frames
- ALSA: usb-audio: add mono main switch to Presonus S1824c
- exfat: limit log print for IO error
- 6pack: drop redundant locking and refcounting
- page_pool: Clamp pool size to max 16K pages
- ksmbd: use sock_create_kern interface to create kernel socket
- smb: client: transport: avoid reconnects triggered by pending task work
- char: misc: restrict the dynamic range to exclude reserved minors
- ACPICA: Update dsmethod.c to get rid of unused variable warning
- RDMA/irdma: Fix SD index calculation
- RDMA/irdma: Remove unused struct irdma_cq fields
- RDMA/irdma: Set irdma_cq cq_num field during CQ create
- RDMA/hns: Fix the modification of max_send_sge
- RDMA/hns: Fix wrong WQE data when QP wraps around
- btrfs: mark dirty extent range for out of bound prealloc extents
- fs/hpfs: Fix error code for new_inode() failure in
mkdir/create/mknod/symlink
- um: Fix help message for ssl-non-raw
- clk: sunxi-ng: sun6i-rtc: Add A523 specifics
- rtc: pcf2127: clear minute/second interrupt
- ARM: at91: pm: save and restore ACR during PLL disable/enable
- clk: at91: clk-master: Add check for divide by 3
- clk: at91: clk-sam9x60-pll: force write to PLL_UPDT register
- clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled
- NTB: epf: Allow arbitrary BAR mapping
- 9p: fix /sys/fs/9p/caches overwriting itself
- cpufreq: tegra186: Initialize all cores to max frequencies
- 9p: sysfs_init: don't hardcode error to ENOMEM
- scsi: ufs: core: Include UTP error in INT_FATAL_ERRORS
- ACPI: property: Return present device nodes only on fwnode interface
- tools bitmap: Add missing asm-generic/bitsperlong.h include
- tools: lib: thermal: don't preserve owner in install
- tools: lib: thermal: use pkg-config to locate libnl3
- rtc: pcf2127: fix watchdog interrupt mask on pcf2131
- kbuild: uapi: Strip comments before size type check
- ASoC: meson: aiu-encoder-i2s: fix bit clock polarity
- ceph: add checking of wait_for_completion_killable() return value
- ceph: refactor wake_up_bit() pattern of calling
- ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again
- media: uvcvideo: Use heuristic to find stream entity
- net: libwx: fix device bus LAN ID
- riscv: Improve exception and system call latency
- riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro
- Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2()
- net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for
bcm63xx
- selftests/net: fix out-of-order delivery of FIN in gro:tcp test
- selftests/net: use destination options instead of hop-by-hop
- netdevsim: add Makefile for selftests
- selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing
ethtool-common.sh
- net: vlan: sync VLAN features with lower device
- net: dsa: b53: fix resetting speed and pause on forced link
- net: dsa: b53: fix enabling ip multicast
- net: dsa: b53: stop reading ARL entries if search is done
- sctp: Hold RCU read lock while iterating over address list
- sctp: Hold sock lock while iterating over address list
- bnxt_en: Fix a possible memory leak in bnxt_ptp_init
- wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup
- net/mlx5e: Use extack in get module eeprom by page callback
- net/mlx5e: Fix return value in case of module EEPROM read error
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages
- net: dsa: microchip: Fix reserved multicast address table programming
- net: bridge: fix MST static key usage
- tracing: Fix memory leaks in create_field_var()
- drm/amd/display: Enable mst when it's detected but yet to be initialized
- rtc: rx8025: fix incorrect register reference
- x86/microcode/AMD: Add more known models to entry sign checking
- smb: client: validate change notify buffer before copy
- lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC
- scsi: ufs: ufs-pci: Fix S0ix/S3 for Intel controllers
- extcon: adc-jack: Cleanup wakeup source only if it was enabled
- drm/amdgpu: Fix function header names in amdgpu_connectors.c
- drm/amd/display: Fix black screen with HDMI outputs
- riscv: stacktrace: fix backtracing through exceptions
- selftests: netdevsim: set test timeout to 10 minutes
- drm/i915: Fix conversion between clock ticks and nanoseconds
- smb: client: fix refcount leak in smb2_set_path_attr
- iommufd: Make vfio_compat's unmap succeed if the range is already empty
- drm/amd: Fix suspend failure with secure display TA
- compiler_types: Move unused static inline functions warning to W=2
- RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid
rfence errors
- riscv: acpi: avoid errors caused by probing DT devices when ACPI is used
- drm/amd/pm: Disable MCLK switching on SI at high pixel clocks
- NFS4: Fix state renewals missing after boot
- HID: quirks: avoid Cooler Master MM712 dongle wakeup bug
- NFS: check if suid/sgid was cleared after a write as needed
- HID: quirks: Add ALWAYS_POLL quirk for VRS R295 steering wheel
- ASoC: max98090/91: fixed max98091 ALSA widget powering up/down
- wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp()
- selftests: net: local_termination: Wait for interfaces to come up
- net: fec: correct rx_bytes statistic for the case SHIFT16 is set
- Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion
- Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions
- net/smc: fix mismatch between CLC header and proposal
- net/handshake: Fix memory leak in tls_handshake_accept()
- net: mdio: fix resource leak in mdiobus_register_device()
- wifi: mac80211: skip rate verification for not captured PSDUs
- net_sched: act_connmark: use RCU in tcf_connmark_dump()
- net/mlx5e: Fix maxrate wraparound in threshold between units
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps
- net/mlx5e: Fix potentially misleading debug message
- net_sched: limit try_bulk_dequeue_skb() batches
- virtio-net: fix incorrect flags recording in big mode
- hsr: Fix supervision frame sending on HSRv0
- ACPI: CPPC: Check _CPC validity for only the online CPUs
- ACPI: CPPC: Perform fast check switch only for online CPUs
- ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs
- Bluetooth: L2CAP: export l2cap_chan_hold for modules
- cifs: stop writeback extension when change of size is detected
- cifs: Fix uncached read into ITER_KVEC iterator
- acpi,srat: Fix incorrect device handle check for Generic Initiator
- regulator: fixed: fix GPIO descriptor leak on register failure
- ASoC: cs4271: Fix regulator leak on probe failure
- ASoC: codecs: va-macro: fix resource leak in probe error path
- ASoC: tas2781: fix getting the wrong device number
- pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect()
- NFS: enable nconnect for RDMA
- pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS
- NFS: sysfs: fix leak when nfs_client kobject add fails
- NFSv4: Fix an incorrect parameter when calling nfs4_call_sync()
- acpi/hmat: Fix lockdep warning for hmem_register_resource()
- irqchip/riscv-intc: Add missing free() callback in riscv_intc_domain_ops
- lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN
- mtd: onenand: Pass correct pointer to IRQ handler
- arm64: dts: rockchip: Set correct pinctrl for I2S1 8ch TX on odroid-m1
- ARM: dts: imx51-zii-rdu1: Fix audmux node names
- HID: hid-ntrig: Prevent memory leak in ntrig_report_version()
- ARM: dts: BCM53573: Fix address of Luxul XAP-1440's Ethernet PHY
- HID: uclogic: Fix potential memory leak in error path
- KVM: SVM: Mark VMCB_LBR dirty when MSR_IA32_DEBUGCTLMSR is updated
- gcov: add support for GCC 15
- strparser: Fix signed/unsigned mismatch bug
- dma-mapping: benchmark: Restore padding to ensure uABI remained
consistent
- LoongArch: Use correct accessor to read FWPC/MWPC
- LoongArch: Let {pte,pmd}_modify() record the status of _PAGE_DIRTY
- selftests/tracing: Run sample events to clear page cache events
- wifi: mac80211: reject address change while connecting
- mm/mm_init: fix hash table order logging in alloc_large_system_hash()
- mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4
- crypto: hisilicon/qm - Fix device reference leak in qm_get_qos_value
- smb: client: fix cifs_pick_channel when channel needs reconnect
- spi: Try to get ACPI GPIO IRQ earlier
- x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev
- selftests/user_events: fix type cast for write_index packed member in
perf_test
- LoongArch: Use physical addresses for CSR_MERRENTRY/CSR_TLBRENTRY
- EDAC/altera: Handle OCRAM ECC enable after warm reset
- EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection
- btrfs: scrub: put bio after errors in scrub_raid56_parity_stripe()
- btrfs: do not update last_log_commit when logging inode due to a new
name
- pmdomain: samsung: plug potential memleak during probe
- selftests: mptcp: connect: fix fallback note due to OoO
- selftests: mptcp: join: rm: set backup flag
- selftests: mptcp: connect: trunc: read all recv data
- Revert "perf dso: Add missed dso__put to dso__load_kcore"
- mm, percpu: do not consider sleepable allocations atomic
- netpoll: remove netpoll_srcu
- net: netpoll: Individualize the skb pool
- net: netpoll: flush skb pool during cleanup
- scsi: ufs: core: Add UFSHCD_QUIRK_CUSTOM_CRYPTO_PROFILE
- scsi: ufs: core: fold ufshcd_clear_keyslot() into its caller
- scsi: ufs: core: Add UFSHCD_QUIRK_BROKEN_CRYPTO_ENABLE
- scsi: ufs: core: Add fill_crypto_prdt variant op
- scsi: ufs: core: Add UFSHCD_QUIRK_KEYS_IN_PRDT
- scsi: ufs: core: Add a quirk for handling broken LSDBS field in
controller capabilities register
- scsi: ufs: core: Add a quirk to suppress link_startup_again
- scsi: ufs: ufs-pci: Set UFSHCD_QUIRK_PERFORM_LINK_STARTUP_ONCE for Intel
ADL
- filemap: cap PTE range to be created to allowed zero fill in
folio_map_range()
- mm/memory: do not populate page table entries beyond i_size
- mm/truncate: unmap large folio on split failure
- net: netpoll: ensure skb_pool list is always initialized
- memory tiers: use default_dram_perf_ref_source in log message
- memcg: fix data-race KCSAN bug in rstats
- s390/pci: Restore IRQ unconditionally for the zPCI device
- wifi: ath11k: add support for MU EDCA
- wifi: ath11k: avoid bit operation on key flags
- wifi: mac80211: don't mark keys for inactive links as uploaded
- wifi: mac80211: fix key tailroom accounting leak
- kunit: test_dev_action: Correctly cast 'priv' pointer to long*
- bpf: Find eligible subprogs for private stack support
- bpf, x86: Avoid repeated usage of bpf_prog->aux->stack_depth
- bpf: Do not audit capability check in do_jit()
- Bluetooth: ISO: Update hci_conn_hash_lookup_big for Broadcast slave
- Bluetooth: ISO: Fix BIS connection dst_type handling
- dpll: spec: add missing module-name and clock-id to pin-get reply
- ASoC: fsl_sai: Fix sync error in consumer mode
- ACPI: fan: Use ACPI handle when retrieving _FST
- drm/sched: avoid killing parent entity on child SIGKILL
- drm/nouveau: Fix race in nouveau_sched_fini()
- drm/ast: Clear preserved bits from register output value
- drm/amd: Check that VPE has reached DPM0 in idle handler
- drm/amd/display: Fix incorrect return of vblank enable on unconfigured
crtc
- firmware: qcom: scm: preserve assign_mem() error return value
- soc: ti: pruss: don't use %pK through printk
- bpf: Use tnums for JEQ/JNE is_branch_taken logic
- ACPI: video: force native for Lenovo 82K8
- libbpf: Fix USDT SIB argument handling causing unrecognized register
error
- ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU
- thermal: gov_step_wise: Allow cooling level to be reduced earlier
- thermal: intel: selftests: workload_hint: Mask unsupported types
- cpufreq: ondemand: Update the efficient idle check for Intel extended
Families
- pwm: pca9685: Use bulk write to atomicially update registers
- i3c: mipi-i3c-hci-pci: Add support for Intel Wildcat Lake-U I3C
- hwmon: (dell-smm) Remove Dell Precision 490 custom config data
- selftests/bpf: Fix flaky bpf_cookie selftest
- mfd: core: Increment of_node's refcount before linking it to the
platform device
- mfd: intel-lpss: Add Intel Wildcat Lake LPSS PCI IDs
- drm/amdgpu: add range check for RAS bad page address
- drm/amdgpu: Check vcn sram load return value
- ASoC: mediatek: Use SND_JACK_AVOUT for HDMI/DP jacks
- drm/amd/display: Reset apply_eamless_boot_optimization when dpms_off
- wifi: rtw89: print just once for unknown C2H events
- PCI/ERR: Update device error_state already after reset
- scsi: ufs: host: mediatek: Fix PWM mode switch issue
- HID: pidff: Use direction fix only for conditional effects
- HID: pidff: PERMISSIVE_CONTROL quirk autodetection
- wifi: rtw89: fix BSSID comparison for non-transmitted BSSID
- dm error: mark as DM_TARGET_PASSES_INTEGRITY
- bnxt_en: Add Hyper-V VF ID
- idpf: do not linearize big TSO packets
- net: wangxun: limit tx_max_coalesced_frames_irq
- rpmsg: char: Export alias for RPMSG ID rpmsg-raw from table
- net: ipv4: allow directed broadcast routes to use dst hint
- scsi: mpi3mr: Fix I/O failures during controller reset
- drm/amd/display: Support HW cursor 180 rot for any number of pipe splits
- media: pci: mgb4: Fix timings comparison in VIDIOC_S_DV_TIMINGS
- ASoC: SOF: ipc4-pcm: Add fixup for channels
- drm/amdgpu: Avoid vcn v5.0.1 poison irq call trace on sriov guest
- inet_diag: annotate data-races in inet_diag_bc_sk()
- scsi: ufs: exynos: fsd: Gate ref_clk and put UFS device in reset on
suspend
- drm/xe/guc: Increase GuC crash dump buffer size
- drm: panel-backlight-quirks: Make EDID match optional
- PCI: imx6: Enable the Vaux supply if available
- drm/xe/guc: Set upper limit of H2G retries over CTB
- crypto: ccp: Skip SEV and SNP INIT for kdump boot
- drm/amd/display: Fix pbn_div Calculation Error
- tty/vt: Add missing return value for VT_RESIZE in vt_ioctl()
- PCI: endpoint: pci-epf-test: Limit PCIe BAR size for fixed BARs
- selftests: mptcp: join: allow more time to send ADD_ADDR
- scsi: ufs: host: mediatek: Correct system PM flow
- selftests: traceroute: Return correct value on failure
- openrisc: Add R_OR1K_32_PCREL relocation type module support
- wifi: mt76: mt76_eeprom_override to int
- wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error
- drm/amd/display: Set up pixel encoding for YCBCR422
- drm/amd/display: fix dml ms order of operations
- scsi: lpfc: Clean up allocated queues when queue setup mbox commands
fail
- scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted
- scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point
topology
- wifi: rtw89: renew a completion for each H2C command waiting C2H event
- usb: xhci-pci: add support for hosts with zero USB3 ports
- RDMA/ipoib: Remove NULL check before dev_{put, hold}
- IB/ipoib: Ignore L3 master device
- bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state
- wifi: mac80211: Track NAN interface start/stop
- crypto: hisilicon/qm - invalidate queues in use
- crypto: hisilicon/qm - adjust the internal processing sequence of the vf
enable and disable
- crypto: hisilicon/qm - clear all VF configurations in the hardware
- selftests: forwarding: Reorder (ar)ping arguments to obey POSIX getopt
- net: dsa: microchip: Set SPI as bus interface during reset for KSZ8463
- drm/amd/display: Init dispclk from bootup clock for DCN314
- drm/amd/display: Fix for test crash due to power gating
- drm/amd/display: change dc stream color settings only in atomic commit
- ACPI: scan: Update honor list for RPMI System MSI
- vfio/pci: Fix INTx handling on legacy non-PCI 2.3 devices
- Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922
- net: stmmac: est: Drop frames causing HLBS error
- usb: xhci-pci: Fix USB2-only root hub registration
- drm/amd/display: Add fallback path for YCBCR422
- RDMA/hns: Fix recv CQ and QP cache affinity
- clk: clocking-wizard: Fix output clock register offset for Versal
platforms
- LoongArch: Handle new atomic instructions for probes
- net: wwan: t7xx: add support for HP DRMR-H01
- ceph: fix potential race condition in ceph_ioctl_lazyio()
- net: ionic: add dma_wmb() before ringing TX doorbell
- net: ionic: map SKB after pseudo-header checksum prep
- bnxt_en: Add mem_valid bit to struct bnxt_ctx_mem_type
- bnxt_en: Refactor bnxt_free_ctx_mem()
- bnxt_en: Add a 'force' parameter to bnxt_free_ctx_mem()
- net: wan: framer: pef2256: Switch to devm_mfd_add_devices()
- drm/amdgpu/smu: Handle S0ix for vangogh
- drm/amd/display: update color on atomic commit time
- drm/mediatek: Add pm_runtime support for GCE power control
- arm64: kprobes: check the return value of set_memory_rox()
- NFS4: Apply delay_retrans to async operations
- HID: nintendo: Wait longer for initial probe
- HID: logitech-hidpp: Add HIDPP_QUIRK_RESET_HI_RES_SCROLL
- NFSD: Skip close replay processing if XDR encoding fails
- net: ethernet: ti: am65-cpsw-qos: fix IET verify/response timeout
- net: ethernet: ti: am65-cpsw-qos: fix IET verify retry mechanism
- proc: fix the issue of proc_mem_open returning NULL
- ext4: introduce ITAIL helper
- LoongArch: KVM: Add delay until timer interrupt injected
- nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes
- ftrace: Fix BPF fexit with livepatch
- btrfs: zoned: fix conventional zone capacity calculation
- btrfs: release root after error in data_reloc_print_warning_inode()
- pmdomain: imx: Fix reference count leak in imx_gpc_remove
- selftests: mptcp: join: userspace: longer transfer
- selftests: mptcp: join: properly kill background tasks
- wifi: cfg80211: add an hrtimer based delayed work item
- proc: proc_maps_open allow proc_mem_open to return NULL
- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete
- Upstream stable to v6.6.117, v6.12.58, v6.12.59
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68204
- pmdomain: arm: scmi: Fix genpd leak on provider registration failure
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-22107
- net: dsa: sja1105: fix kasan out-of-bounds warning in
sja1105_table_delete_entry()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-39981
- Bluetooth: MGMT: Fix possible UAFs
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-22121
- ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-23129
- wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq()
in error path
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40287
- exfat: fix improper check of dentry.stream.valid_size
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40289
- drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68201
- drm/amdgpu: remove two invalid BUG_ON()s
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68180
- drm/amd/display: Fix NULL deref in debugfs odm_combine_segments
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68322
- parisc: Avoid crash due to unaligned access in unwinder
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40305
- 9p/trans_fd: p9_fd_request: kick rx thread if EPOLLIN
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40307
- exfat: validate cluster allocation bits of the allocation bitmap
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68190
- drm/amdgpu/atom: Check kcalloc() for WS buffer in
amdgpu_atom_execute_table_locked()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68315
- f2fs: fix to detect potential corrupted nid in free_nid_list
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40339
- drm/amdgpu: fix nullptr err of vm_handle_moved
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68311
- tty: serial: ip22zilog: Use platform device for probing
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68313
- x86/CPU/AMD: Add RDSEED fix for Zen5
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40360
- drm/sysfb: Do not dereference NULL pointer in plane reset
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68734
- isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40272
- mm/secretmem: fix use-after-free race in fault handler
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40077
- f2fs: fix to avoid overflow while left shift operation
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68245
- net: netpoll: fix incorrect refcount handling causing incorrect cleanup
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40293
- iommufd: Don't overflow during division for dirty tracking
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40303
- btrfs: ensure no dirty metadata is written back for an fs with errors
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68184
- drm/mediatek: Disable AFBC support on Mediatek DRM driver
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40268
- cifs: client: fix memory leak in smb3_fs_context_parse_param
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40269
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40271
- fs/proc: fix uaf in proc_readdir_de()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68241
- ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68246
- ksmbd: close accepted socket when per-IP limit rejects connection
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40273
- NFSD: free copynotify stateid in nfs4_free_ol_stateid()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68208
- bpf: account for current allocated stack depth in
widen_imprecise_scalars()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68200
- bpf: Add bpf_prog_run_data_pointers()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40275
- ALSA: usb-audio: Fix NULL pointer dereference in
snd_usb_mixer_controls_badd
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40277
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40278
- net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-
infoleak
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40279
- net: sched: act_connmark: initialize struct tc_ife to fix kernel leak
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40280
- tipc: Fix use-after-free in tipc_mon_reinit_self().
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40281
- sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40282
- Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40283
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40284
- Bluetooth: MGMT: cancel mesh send timer when hdev removed
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40285
- smb/server: fix possible refcount leak in smb2_sess_setup()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40286
- smb/server: fix possible memory leak in smb2_read()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40288
- drm/amdgpu: Fix NULL pointer dereference in VRAM logic for APU devices
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68244
- drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40292
- virtio-net: fix received length check in big packets
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40328
- smb: client: fix potential UAF in smb2_close_cached_fid()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40294
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40329
- drm/sched: Fix deadlock in drm_sched_entity_kill_jobs_cb
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68320
- lan966x: Fix sleeping in atomic context
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68192
- net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40331
- sctp: Prevent TOCTOU out-of-bounds write
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40301
- Bluetooth: hci_event: validate skb length for unknown CC opcode
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40358
- riscv: stacktrace: Disable KASAN checks for non-current tasks
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40304
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68183
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68173
- ftrace: Fix softlockup in ftrace_module_enable
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40306
- orangefs: fix xattr related buffer overflow...
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40308
- Bluetooth: bcsp: receive data only if registered
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40309
- Bluetooth: SCO: Fix UAF on sco_conn_free
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40310
- amd/amdkfd: resolve a race in amdgpu_amdkfd_device_fini_sw
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40311
- accel/habanalabs: support mapping cb with vmalloc-backed coherent memory
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68185
- nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode
dereferencing
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68176
- PCI: cadence: Check for the existence of cdns_pcie::ops before using it
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68168
- jfs: fix uninitialized waitqueue in transaction manager
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40312
- jfs: Verify inode mode when loading from disk
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40333
- f2fs: fix infinite loop in __insert_extent_tree()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68321
- page_pool: always add GFP_NOWARN for ATOMIC allocations
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68191
- udp_tunnel: use netdev_warn() instead of netdev_WARN()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40313
- ntfs3: pretend $Extend records as regular files
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40314
- usb: cdns3: gadget: Use-after-free during failed initialization and exit
of cdnsp gadget
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40337
- net: stmmac: Correctly handle Rx checksum offload errors
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68194
- media: imon: make send_packet() more robust
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40363
- net: ipv6: fix field-spanning memcpy warning in AH output
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68178
- blk-cgroup: fix possible deadlock while configuring policy
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40341
- futex: Don't leak robust_list pointer on exec race
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40342
- nvme-fc: use lock accessing port_state and rport state
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40343
- nvmet-fc: avoid scheduling association deletion twice
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68177
- cpufreq/longhaul: handle NULL policy in longhaul_exit
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40315
- usb: gadget: f_fs: Fix epfile null pointer access after ep enable.
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68310
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68179
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40317
- regmap: slimbus: fix bus_context pointer in regmap init calls
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40318
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68312
- usbnet: Prevents free active kevent
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68172
- crypto: aspeed - fix double free caused by devm
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40319
- bpf: Sync pending IRQ work before freeing ring buffer
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-68171
- x86/fpu: Ensure XFD state on signal delivery
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40320
- smb: client: fix potential cfid UAF in smb2_query_info_compound
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40321
- wifi: brcmfmac: fix crash while sending Action Frames in standalone AP
Mode
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40322
- fbdev: bitblit: bound-check glyph index in bit_putcs*
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40211
- ACPI: video: Fix use-after-free in acpi_video_switch_brightness()
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40323
- fbcon: Set fb_display[i]->mode to NULL when the mode is released
* Noble update: upstream stable patchset 2026-01-30 (LP: #2139460) //
CVE-2025-40324
- NFSD: Fix crash in nfsd4_read_release()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282)
- exec: Fix incorrect type for ret
- hfs: clear offset and space out of valid records in b-tree node
- hfs: make proper initalization of struct hfs_find_data
- dlm: check for defined force value in dlm_lockspace_release
- hfsplus: return EIO when type of hidden directory mismatch in
hfsplus_fill_super()
- lkdtm: fortify: Fix potential NULL dereference on kmalloc failure
- m68k: bitops: Fix find_*_bit() signatures
- powerpc/32: Remove PAGE_KERNEL_TEXT to fix startup failure
- drivers/perf: hisi: Relax the event ID check in the framework
- smb: server: let smb_direct_flush_send_list() invalidate a remote key
first
- Unbreak 'make tools/*' for user-space targets
- net/mlx5e: Return 1 instead of 0 in invalid case in
mlx5e_mpwrq_umr_entry_size()
- rtnetlink: Allow deleting FDB entries in user namespace
- net: enetc: correct the value of ENETC_RXB_TRUESIZE
- dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path
- can: bxcan: bxcan_start_xmit(): use can_dev_dropped_skb() instead of
can_dropped_invalid_skb()
- selftests: net: fix server bind failure in sctp_vrf.sh
- net/mlx5e: Reuse per-RQ XDP buffer to avoid stack zeroing overhead
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ
- arm64, mm: avoid always making PTE dirty in pte_mkwrite()
- net: bonding: fix possible peer notify event loss or dup issue
- dma-debug: don't report false positives with
DMA_BOUNCE_UNALIGNED_KMALLOC
- gpio: pci-idio-16: Define maximum valid register address offset
- gpio: 104-idio-16: Define maximum valid register address offset
- Revert "cpuidle: menu: Avoid discarding useful information"
- ACPICA: Work around bogus -Wstringop-overread warning since GCC 11
- can: netlink: can_changelink(): allow disabling of automatic restart
- cifs: Fix TCP_Server_Info::credits to be signed
- MIPS: Malta: Fix keyboard resource preventing i8042 driver from
registering
- net: stmmac: dwmac-rk: Fix disabling set_clock_selection
- net: usb: rtl8150: Fix frame padding
- net: ravb: Enforce descriptor type ordering
- net: ravb: Ensure memory write completes before ringing TX doorbell
- selftests: mptcp: join: mark 'flush re-add' as skipped if not supported
- selftests: mptcp: join: mark implicit tests as skipped if not supported
- spi: spi-nxp-fspi: add extra delay after dll locked
- firmware: arm_scmi: Fix premature SCMI_XFER_FLAG_IS_RAW clearing in raw
mode
- RISC-V: Define pgprot_dmacoherent() for non-coherent devices
- RISC-V: Don't print details of CPUs disabled in DT
- hwmon: (sht3x) Fix error handling
- gpio: ljca: Fix duplicated IRQ mapping
- io_uring: correct __must_hold annotation in io_install_fixed_file
- sched: Remove never used code in mm_cid_get()
- USB: serial: option: add UNISOC UIS7720
- USB: serial: option: add Quectel RG255C
- USB: serial: option: add Telit FN920C04 ECM compositions
- usb/core/quirks: Add Huawei ME906S to wakeup quirk
- usb: raw-gadget: do not limit transfer length
- xhci: dbc: enable back DbC in resume if it was enabled before suspend
- x86/microcode: Fix Entrysign revision check for Zen1/Naples
- binder: remove "invalid inc weak" check
- mei: me: add wildcat lake P DID
- misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup
- tcpm: switch check for role_sw device with fw_node
- dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp
- serial: 8250_dw: handle reset control deassert error
- serial: 8250_exar: add support for Advantech 2 port card with Device ID
0x0018
- serial: 8250_mtk: Enable baud clock and manage in runtime PM
- devcoredump: Fix circular locking dependency with devcd->mutex.
- xfs: always warn about deprecated mount options
- fuse: allocate ff->release_args only if release is needed
- audit: record fanotify event regardless of presence of rules
- perf: Use current->flags & PF_KTHREAD|PF_USER_WORKER instead of
current->mm == NULL
- perf: Have get_perf_callchain() return NULL if crosstask and user are
set
- perf: Skip user unwind if the task is a kernel thread
- x86/bugs: Report correct retbleed mitigation status
- x86/bugs: Fix reporting of LFENCE retpoline
- EDAC/mc_sysfs: Increase legacy channel support to 16
- btrfs: zoned: return error from btrfs_zone_finish_endio()
- btrfs: zoned: refine extent allocator hint selection
- btrfs: scrub: replace max_t()/min_t() with clamp() in
scrub_throttle_dev_io()
- btrfs: always drop log root tree reference in btrfs_replay_log()
- btrfs: use level argument in log tree walk callback replay_one_buffer()
- btrfs: use smp_mb__after_atomic() when forcing COW in
create_pending_snapshot()
- arch: Add the macro COMPILE_OFFSETS to all the asm-offsets.c
- mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR
- selftests: mptcp: disable add_addr retrans in endpoint_tests
- selftests: mptcp: join: mark 'delete re-add signal' as skipped if not
supported
- serial: sc16is7xx: remove useless enable of enhanced features
- xhci: dbc: poll at different rate depending on data transfer activity
- xhci: dbc: Allow users to modify DbC poll interval via sysfs
- xhci: dbc: Improve performance by removing delay in transfer event
polling.
- xhci: dbc: Avoid event polling busyloop if pending rx transfers are
inactive.
- xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall
event
- bits: add comments and newlines to #if, #else and #endif directives
- bits: introduce fixed-type GENMASK_U*()
- gpio: regmap: Allow to allocate regmap-irq device
- gpio: regmap: add the .fixed_direction_output configuration parameter
- gpio: idio-16: Define fixed direction of the GPIO lines
- PCI: Test for bit underflow in pcie_set_readrq()
- arm64: sysreg: Correct sign definitions for EIESB and DoubleLock
- s390/mm: Use __GFP_ACCOUNT for user page table allocations
- ptp: ocp: Fix typo using index 1 instead of i in SMA initialization loop
- riscv: hwprobe: avoid uninitialized variable use in hwprobe_arch_id()
- perf/x86/intel: Add ICL_FIXED_0_ADAPTIVE bit into INTEL_FIXED_BITS_MASK
- cpuset: Use new excpus for nocpu error check when enabling root
partition
- btrfs: abort transaction on specific error places when walking log tree
- btrfs: abort transaction in the process_one_buffer() log tree walk
callback
- btrfs: abort transaction if we fail to update inode in log replay dir
fixup
- btrfs: tree-checker: add inode extref checks
- docs: kdoc: handle the obsolescensce of docutils.ErrorString()
- bonding: return detailed error when loading native XDP fails
- btrfs: tree-checker: fix bounds check in check_inode_extref()
- Upstream stable to v6.6.115, v6.6.116, v6.12.56, v6.12.57
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-37860
- sfc: fix NULL dereferences in ef100_process_design_param()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-21833
- iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-22105
- bonding: check xdp prog when set bond mode
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-38643
- wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-23130
- f2fs: fix to avoid panic once fallocation fails for pinfile
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40353
- arm64: mte: Do not warn if the page is already tagged in copy_highpage()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-39678
- platform/x86/amd/hsmp: Ensure sock->metric_tbl_addr is non-NULL
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40235
- btrfs: directly free partially initialized fs_info in
btrfs_check_leaked_roots()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40238
- net/mlx5: Fix IPsec cleanup over MPV device
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40242
- gfs2: Fix unlikely race in gdlm_put_lock
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40083
- net/sched: sch_qfq: Fix null-deref in agg_dequeue
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40084
- ksmbd: transport_ipc: validate payload size before reading handle
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40220
- fuse: fix livelock in synchronous file put from fuseblk workers
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40237
- fs/notify: call exportfs_encode_fid with s_umount
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-68249
- most: usb: hdm_probe: Fix calling put_device() before device
initialization
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40223
- most: usb: Fix use-after-free in hdm_disconnect
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40106
- comedi: fix divide-by-zero in comedi_buf_munge()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40226
- firmware: arm_scmi: Account for failed debug initialization
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40231
- vsock: fix lock inversion in vsock_assign_transport()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40233
- ocfs2: clear extent cache after moving/defragmenting extents
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40346
- arch_topology: Fix incorrect error check in
topology_parse_cpu_capacity()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40240
- sctp: avoid NULL dereference when chunk data buffer is missing
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40350
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding
RQ
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40347
- net: enetc: fix the deadlock of enetc_mdio_lock
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40243
- hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40351
- hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40349
- hfs: validate record offset in hfsplus_bmap_alloc
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40244
- hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent()
* Noble update: upstream stable patchset 2026-01-29 (LP: #2139282) //
CVE-2025-40245
- nios2: ensure that memblock.current_limit is set when setting pfn limits
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267)
- r8152: add error handling in rtl8152_driver_init
- f2fs: fix wrong block mapping for multi-devices
- jbd2: ensure that all ongoing I/O complete before freeing blocks
- ext4: wait for ongoing I/O to complete before freeing blocks
- btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already
running
- btrfs: fix incorrect readahead expansion length
- can: gs_usb: gs_make_candev(): populate net_device->dev_port
- can: gs_usb: increase max interface to U8_MAX
- drm/amdgpu: use atomic functions with memory barriers for vm fault info
- drm/amd: Check whether secure display TA loaded successfully
- cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay
- epoll: Remove ep_scan_ready_list() in comments
- eventpoll: Replace rwlock with spinlock
- drm/msm/adreno: De-spaghettify the use of memory barriers
- drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in
functions
- drm/exynos: exynos7_drm_decon: properly clear channels during bind
- drm/exynos: exynos7_drm_decon: remove ctx->suspended
- media: nxp: imx8-isi: Drop unused argument to mxc_isi_channel_chain()
- usb: gadget: Store endpoint pointer in usb_request
- usb: gadget: Introduce free_usb_request helper
- HID: multitouch: fix sticky fingers
- dax: skip read lock assertion for read-only filesystems
- can: m_can: m_can_plat_remove(): add missing pm_runtime_disable()
- net: dlink: handle dma_map_single() failure properly
- doc: fix seg6_flowlabel path
- r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H
- amd-xgbe: Avoid spurious link down messages during interface toggle
- tcp: fix tcp_tso_should_defer() vs large RTT
- tg3: prevent use of uninitialized remote_adv and local_adv variables
- tls: trim encrypted message to match the plaintext on short splice
- net: tls: wait for async completion on last message
- tls: wait for async encrypt in case of error during latter iterations of
sendmsg
- tls: always set record_type in tls_process_cmsg
- tls: don't rely on tx_work during send()
- net: usb: lan78xx: Add error handling to lan78xx_init_mac_address
- net: usb: lan78xx: fix use of improperly initialized dev->chipid in
lan78xx_reset
- nvme-multipath: Skip nr_active increments in RETRY disposition
- riscv: kprobes: Fix probe address validation
- drm/bridge: lt9211: Drop check for last nibble of version register
- ASoC: codecs: Fix gain setting ranges for Renesas IDT821034 codec
- ASoC: nau8821: Cancel jdet_work before handling jack ejection
- ASoC: nau8821: Generalize helper to clear IRQ status
- ASoC: nau8821: Add DMI quirk to bypass jack debounce circuit
- drm/i915/guc: Skip communication warning on reset in progress
- drm/amd/powerplay: Fix CIK shutdown temperature
- drm/rockchip: vop2: use correct destination rectangle height check
- sched/balancing: Rename newidle_balance() => sched_balance_newidle()
- sched/fair: Fix pelt lost idle time detection
- ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings
- selftests/bpf: make arg_parsing.c more robust to crashes
- HID: hid-input: only ignore 0 battery events for digitizers
- HID: multitouch: fix name of Stylus input devices
- selftests: arg_parsing: Ensure data is flushed to disk before reading.
- arm64: cputype: Add Neoverse-V3AE definitions
- arm64: errata: Apply workarounds for Neoverse-V3AE
- NFSD: Rework encoding and decoding of nfsd4_deviceid
- NFSD: Minor cleanup in layoutcommit processing
- xfs: rename the old_crc variable in xlog_recover_process
- xfs: fix log CRC mismatches between i386 and other architectures
- PM: runtime: Add new devm functions
- iio: imu: inv_icm42600: Simplify pm_runtime setup
- phy: cdns-dphy: Store hs_clk_rate and return it
- phy: cadence: cdns-dphy: Fix PLL lock and O_CMN_READY polling
- iio: imu: inv_icm42600: reorganize DMA aligned buffers in structure
- iio: imu: inv_icm42600: Avoid configuring if already pm_runtime
suspended
- quota: remove unneeded return value of register_quota_format
- phy: cadence: cdns-dphy: Update calibration wait time for startup state
machine
- PCI: Add PCI_VDEVICE_SUB helper macro
- ixgbevf: Add support for Intel(R) E610 device
- ixgbevf: fix getting link speed data for E610 devices
- nfsd: decouple the xprtsec policy check from check_nfsd_access()
- PCI/sysfs: Ensure devices are powered for config reads (part 2)
- ksmbd: browse interfaces list on FSCTL_QUERY_INTERFACE_INFO IOCTL
- PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl"
exists
- PCI: j721e: Fix programming sequence of "strap" settings
- perf/core: Fix address filter match with backing files
- perf/core: Fix MMAP event path names with backing files
- perf/core: Fix MMAP2 event device with backing files
- drm/msm/a6xx: Fix PDC sleep sequence
- can: m_can: m_can_handle_state_errors(): fix CAN state transition to
Error Active
- can: m_can: m_can_chip_config(): bring up interface in correct state
- drm/amdgpu: add ip offset support for cyan skillfish
- drm/amdgpu: add support for cyan skillfish without IP discovery
- drm/amdgpu: fix handling of harvesting for ip_discovery firmware
- nvme/tcp: handle tls partially sent records in write_space()
- nfsd: Use correct error code when decoding extents
- nfsd: Drop dprintk in blocklayout xdr functions
- NFSD: Implement large extent array support in pNFS
- NFSD: Fix last write offset handling in layoutcommit
- wifi: rtw89: avoid possible TX wait initialization race
- xfs: use deferred intent items for reaping crosslinked blocks
- md/raid0: Handle bio_split() errors
- md/raid1: Handle bio_split() errors
- md/raid10: Handle bio_split() errors
- md: fix mssing blktrace bio split events
- x86/resctrl: Refactor resctrl_arch_rmid_read()
- x86/resctrl: Fix miscount of bandwidth event when reactivating
previously unavailable RMID
- d_alloc_parallel(): set DCACHE_PAR_LOOKUP earlier
- dmaengine: Add missing cleanup on module unload
- Upstream stable to v6.6.114, v6.12.55
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40105
- vfs: Don't leak disconnected dentries on umount
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40092
- usb: gadget: f_ncm: Refactor bind path to use __free()
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40101
- btrfs: fix memory leaks when rejecting a non SINGLE data profile without
an RST
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40166
- drm/xe/guc: Check GuC running state before deregistering exec queue
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40104
- ixgbevf: fix mailbox API compatibility by negotiating supported features
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40087
- NFSD: Define a proc_layoutcommit for the FlexFiles layout type
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40196
- fs: quota: create dedicated workqueue for quota_release_work
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40088
- hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp()
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40085
- ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40172
- accel/qaic: Treat remaining == 0 as error in find_and_map_user_pages()
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40176
- tls: wait for pending async decryptions if tls_strp_msg_hold fails
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40173
- net/ip6_tunnel: Prevent perpetual tunnel growth
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40095
- usb: gadget: f_rndis: Refactor bind path to use __free()
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40094
- usb: gadget: f_acm: Refactor bind path to use __free()
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40093
- usb: gadget: f_ecm: Refactor bind path to use __free()
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40165
- media: nxp: imx8-isi: m2m: Fix streaming cleanup on release
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40096
- drm/sched: Fix potential double free in
drm_sched_job_add_resv_dependencies
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40099
- cifs: parse_dfs_referrals: prevent oob on malformed input
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40100
- btrfs: do not assert we found block group item when creating free space
tree
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40167
- ext4: detect invalid INLINE_DATA + EXTENTS flag combination
* Noble update: upstream stable patchset 2026-01-28 (LP: #2139267) //
CVE-2025-40103
- smb: client: Fix refcount leak for cifs_sb_tlink
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158)
- fs: always return zero on success from replace_fd()
- fscontext: do not consume log entries when returning -EMSGSIZE
- clocksource/drivers/clps711x: Fix resource leaks in error paths
- iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE
- asm-generic/io.h: Skip trace helpers if rwmmio events are disabled
- perf evsel: Avoid container_of on a NULL leader
- libperf event: Ensure tracing data is multiple of 8 sized
- clk: at91: peripheral: fix return value
- perf util: Fix compression checks returning -1 as bool
- rtc: x1205: Fix Xicor X1205 vendor prefix
- rtc: optee: fix memory leak on driver removal
- perf arm_spe: Correct setting remote access
- perf arm-spe: Rename the common data source encoding
- perf arm_spe: Correct memory level for remote access
- perf session: Fix handling when buffer exceeds 2 GiB
- perf test: Don't leak workload gopipe in PERF_RECORD_*
- perf test: Add a test for default perf stat command
- perf tools: Add fallback for exclude_guest
- perf evsel: Ensure the fallback message is always written to
- clk: mediatek: mt8195-infra_ao: Fix parent for infra_ao_hdmi_26m
- clk: mediatek: clk-mux: Do not pass flags to
clk_mux_determine_rate_flags()
- clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate()
- clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver
- clk: tegra: do not overallocate memory for bpmp clocks
- ASoC: SOF: ipc4-topology: Correct the minimum host DMA buffer size
- LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init()
- LoongArch: Init acpi_gbl_use_global_lock to false
- net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter()
- drm/vmwgfx: Fix copy-paste typo in validation
- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request().
- net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe
- tools build: Align warning options with perf
- perf python: split Clang options when invoking Popen
- tcp: take care of zero tp->window_clamp in tcp_set_rcvlowat()
- mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call
- mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes
- drm/amdgpu: Add additional DCE6 SCL registers
- drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs
- drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6
- drm/amd/display: Properly disable scaling on DCE6
- netfilter: nf_tables: drop unused 3rd argument from validate callback
ops
- bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu()
- smb: client: fix missing timestamp updates after utime(2)
- tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single
- gpio: wcd934x: mark the GPIO controller as sleeping
- bpf: Avoid RCU context warning when unpinning htab with internal structs
- ACPI: property: Fix buffer properties extraction for subnodes
- ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT
- ACPI: debug: fix signedness issues in read/write helpers
- arm64: dts: qcom: msm8916: Add missing MDSS reset
- arm64: dts: qcom: msm8939: Add missing MDSS reset
- arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees
- arm64: dts: ti: k3-am62a-main: Fix main padcfg length
- ARM: OMAP2+: pm33xx-core: ix device node reference leaks in
amx3_idle_init
- dt-bindings: phy: rockchip-inno-csi-dphy: make power-domains non-
required
- xen/events: Cleanup find_virq() return codes
- xen/manage: Fix suspend error path
- xen/events: Update virq_to_irq on migration
- firmware: meson_sm: fix device leak at probe
- media: cx18: Add missing check after DMA map
- media: i2c: mt9v111: fix incorrect type for ret
- media: mc: Fix MUST_CONNECT handling for pads with no links
- media: pci: ivtv: Add missing check after DMA map
- media: venus: firmware: Use correct reset sequence for IRIS2
- media: lirc: Fix error handling in lirc_register()
- drm/rcar-du: dsi: Fix 1/2/3 lane support
- drm/nouveau: fix bad ret code in nouveau_bo_move_prep
- blk-crypto: fix missing blktrace bio split events
- bus: mhi: ep: Fix chained transfer handling in read path
- bus: mhi: host: Do not use uninitialized 'dev' pointer in
mhi_init_irq_setup()
- copy_sighand: Handle architectures where sizeof(unsigned long) <
sizeof(u64)
- crypto: aspeed - Fix dma_unmap_sg() direction
- crypto: atmel - Fix dma_unmap_sg() direction
- crypto: rockchip - Fix dma_unmap_sg() nents value
- fbdev: Fix logic error in "offb" name match
- fs/ntfs3: Fix a resource leak bug in wnd_extend()
- iio: dac: ad5360: use int type to store negative error codes
- iio: dac: ad5421: use int type to store negative error codes
- iio: frequency: adf4350: Fix prescaler usage.
- iio: xilinx-ams: Fix AMS_ALARM_THR_DIRECT_MASK
- iio: xilinx-ams: Unmask interrupts after updating alarms
- init: handle bootloader identifier in kernel parameters
- iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in
resume
- iommu/vt-d: PRS isn't usable if PDS isn't supported
- KEYS: trusted_tpm1: Compare HMAC values in constant time
- lib/genalloc: fix device leak in of_gen_pool_get()
- of: unittest: Fix device reference count leak in
of_unittest_pci_node_verify
- openat2: don't trigger automounts with RESOLVE_NO_XDEV
- parisc: don't reference obsolete termio struct for TC* constants
- parisc: Remove spurious if statement from raw_copy_from_user()
- nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk
- pinctrl: samsung: Drop unused S3C24xx driver data
- power: supply: max77976_charger: fix constant current reporting
- powerpc/powernv/pci: Fix underflow and leak issue
- powerpc/pseries/msi: Fix potential underflow and leak issue
- sched/deadline: Fix race in push_dl_task()
- scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl()
- sparc64: fix hugetlb for sun4u
- sparc: fix error handling in scan_one_device()
- mtd: rawnand: fsmc: Default to autodetect buswidth
- mmc: core: SPI mode remove cmd7
- memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe
- rtc: interface: Ensure alarm irq is enabled when UIE is enabled
- rtc: interface: Fix long-standing race when setting alarm
- rseq/selftests: Use weak symbol reference, not definition, to link with
glibc
- PCI: tegra: Convert struct tegra_msi mask_lock into raw spinlock
- PCI/sysfs: Ensure devices are powered for config reads
- PCI/ERR: Fix uevent on failure to recover
- PCI/AER: Fix missing uevent on recovery when a reset is requested
- PCI/AER: Support errors introduced by PCIe r6.0
- PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on
exit
- PCI: rcar-host: Drop PMSR spinlock
- PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock
- PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq()
- PCI: tegra194: Handle errors in BPMP response
- spi: cadence-quadspi: Flush posted register writes before INDAC access
- spi: cadence-quadspi: Flush posted register writes before DAC access
- x86/umip: Check that the instruction opcode is at least two bytes
- x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT
aliases)
- selftests: mptcp: join: validate C-flag + def limit
- wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again
- wifi: mt76: mt7921u: Add VID/PID for Netgear A7500
- mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations
- mm/hugetlb: early exit from hugetlb_pages_alloc_boot() when
max_huge_pages=0
- NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul()
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry
- ext4: increase i_disksize to offset + len in
ext4_update_disksize_before_punch()
- ext4: correctly handle queries for metadata mappings
- ext4: fix an off-by-one issue during moving extents
- ext4: guard against EA inode refcount underflow in xattr update
- ext4: validate ea_ino and size in check_xattrs
- ACPICA: Allow to skip Global Lock initialization
- ext4: free orphan info with kvfree
- lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older
- Squashfs: add additional inode sanity checking
- media: mc: Clear minor number before put device
- mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register
value
- mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type
- mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag
- ksmbd: add max ip connections parameter
- misc: fastrpc: Add missing dev_err newlines
- misc: fastrpc: Save actual DMA size in fastrpc_map structure
- PCI: endpoint: Remove surplus return statement from
pci_epf_test_clean_dma_chan()
- btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range()
- KVM: SVM: Emulate PERF_CNTR_GLOBAL_STATUS_SET for PerfMonV2
- ipmi: Fix handling of messages with provided receive message pointer
- arm64: kprobes: call set_memory_rox() for kprobe page
- arm64: mte: Do not flag the zero page as PG_mte_tagged
- ACPI: battery: allocate driver data through devm_ APIs
- ACPI: battery: initialize mutexes through devm_ APIs
- ACPI: battery: Check for error code from devm_mutex_init() call
- ACPI: battery: Add synchronization between interface updates
- ACPI: property: Disregard references in data-only subnode lists
- ACPI: property: Add code comments explaining what is going on
- ACPI: property: Do not pass NULL handles to acpi_attach_data()
- s390/bpf: Change seen_reg to a mask
- s390/bpf: Centralize frame offset calculations
- s390/bpf: Describe the frame using a struct instead of constants
- s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL
- s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG
- selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is
disabled
- mptcp: pm: in-kernel: usable client side with C-flag
- irqchip/sifive-plic: Make use of __assign_bit()
- irqchip/sifive-plic: Avoid interrupt ID 0 handling during suspend/resume
- minixfs: Verify inode mode when loading from disk
- fs: Add 'initramfs_options' to set initramfs mount options
- cramfs: Verify inode mode when loading from disk
- writeback: Avoid softlockup when switching many inodes
- writeback: Avoid excessively long inode switching times
- perf test stat: Avoid hybrid assumption when virtualized
- rseq: Protect event mask against membarrier IPI
- perf vendor events arm64 AmpereOneX: Fix typo - should be
l1d_cache_access_prefetches
- ASoC: SOF: ipc4-topology: Account for different ChainDMA host buffer
size
- ASoC: SOF: Intel: hda-pcm: Place the constraint on period time instead
of buffer time
- ASoC: SOF: Intel: Read the LLP via the associated Link DMA channel
- s390/cio: Update purge function to unregister the unused subchannels
- mailbox: mtk-cmdq-mailbox: Switch to __pm_runtime_put_autosuspend()
- mailbox: mtk-cmdq: Switch to pm_runtime_put_autosuspend()
- mailbox: mtk-cmdq: Remove pm_runtime APIs from cmdq_mbox_send_data()
- cifs: Fix copy_to_iter return value check
- ARM: AM33xx: Implement TI advisory 1.0.36 (EMU0/EMU1 pins state on
reset)
- media: s5p-mfc: remove an unused/uninitialized variable
- media: ti: j721e-csi2rx: Use devm_of_platform_populate
- media: ti: j721e-csi2rx: Fix source subdev link creation
- drm/xe/uapi: loosen used tracking restriction
- PCI: xilinx-nwl: Fix ECAM programming
- PCI: tegra194: Reset BARs when running in PCIe endpoint mode
- s390: Add -Wno-pointer-sign to KBUILD_CFLAGS_DECOMPRESSOR
- wifi: mt76: mt7925u: Add VID/PID for Netgear A9000
- ext4: add ext4_sb_bread_nofail() helper function for
ext4_free_branches()
- mm/ksm: fix incorrect KSM counter handling in mm_struct during fork
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace
- copy_file_range: limit size if in compat mode
- Upstream stable to v6.6.113, v6.12.54
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40198
- ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40159
- xsk: Harden userspace-supplied xdp_desc validation
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40221
- media: pci: mg4b: fix uninitialized iio scan data
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40180
- mailbox: zynqmp-ipi: Fix out-of-bounds access in mailbox cleanup loop
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40178
- pid: Add a judgment for ns null in pid_nr_ns
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40202
- ipmi: Rework user message limit handling
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40032
- PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before
release
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40038
- KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40042
- tracing: Fix race condition in kprobe initialization causing NULL
pointer dereference
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40200
- Squashfs: reject negative file sizes in squashfs_read_inode()
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40179
- ext4: verify orphan file size is not too big
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40218
- mm/damon/vaddr: do not repeat pte_offset_map_lock() until success
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40219
- PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40193
- xtensa: simdisk: add input size check in proc_write_simdisk
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40204
- sctp: Fix MAC comparison to be constant-time
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40192
- Revert "ipmi: fix msg stack when IPMI is disconnected"
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40188
- pwm: berlin: Fix wrong register in suspend/resume
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40201
- kernel/sys.c: fix the racy usage of task_lock(tsk->group_leader) in
sys_prlimit64() paths
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40194
- cpufreq: intel_pstate: Fix object lifecycle issue in
update_qos_request()
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40205
- btrfs: avoid potential out-of-bounds in btrfs_encode_fh()
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40160
- xen/events: Return -EEXIST for bound VIRQs
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40206
- netfilter: nft_objref: validate objref and objrefmap expressions
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40183
- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6}
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40187
- net/sctp: fix a null dereference in sctp_disposition
sctp_sf_do_5_1D_ce()
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40111
- drm/vmwgfx: Fix Use-after-free in validation
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40110
- drm/vmwgfx: Fix a null-ptr access in the cursor snooper
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40001
- scsi: mvsas: Fix use-after-free bugs in mvs_work_queue
* Noble update: upstream stable patchset 2026-01-27 (LP: #2139158) //
CVE-2025-40207
- media: v4l2-subdev: Fix alloc failure check in
v4l2_subdev_call_state_try()
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072)
- media: tunner: xc5000: Refactor firmware load
- USB: serial: option: add SIMCom 8230C compositions
- wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
- ASoC: amd: acp: Adjust pdm gain value
- dm-integrity: limit MAX_TAG_SIZE to 255
- platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
- perf subcmd: avoid crash in exclude_cmds when excludes is empty
- ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
- btrfs: ref-verify: handle damaged extent root tree
- can: rcar_canfd: Fix controller mode setting
- platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042
quirks list
- ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
- hid: fix I2C read buffer overflow in raw_event() for mcp2221
- serial: stm32: allow selecting console when the driver is module
- [Config] enable SERIAL_STM32_CONSOLE
- staging: axis-fifo: fix maximum TX packet length check
- staging: axis-fifo: fix TX handling on copy_from_user() failure
- staging: axis-fifo: flush RX FIFO on read errors
- driver core/PM: Set power.no_callbacks along with power.no_pm
- riscv: mm: Use hint address in mmap if available
- riscv: mm: Do not restrict mmap address based on hint
- filelock: add FL_RECLAIM to show_fl_flags() macro
- init: INITRAMFS_PRESERVE_MTIME should depend on BLK_DEV_INITRD
- seccomp: Fix a race with WAIT_KILLABLE_RECV if the tracer replies too
fast
- selftests: arm64: Check fread return value in exec_target
- gfs2: Fix GLF_INVALIDATE_IN_PROGRESS flag clearing in do_xmote
- coresight: trbe: Prevent overflow in PERF_IDX2OFF()
- perf: arm_spe: Prevent overflow in PERF_IDX2OFF()
- smb: server: fix IRD/ORD negotiation with the client
- x86/vdso: Fix output operand size of RDPID
- arm64: dts: renesas: rzg2lc-smarc: Disable CAN-FD channel0
- regmap: Remove superfluous check for !config in __regmap_init()
- bpf/selftests: Fix test_tcpnotify_user
- bpf: Remove migrate_disable in kprobe_multi_link_prog_run
- libbpf: Fix reuse of DEVMAP
- ARM: dts: renesas: porter: Fix CAN pin group
- leds: flash: leds-qcom-flash: Update torch current clamp setting
- cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus()
- ACPI: processor: idle: Fix memory leak when register cpuidle device
failed
- soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS
- pinctrl: meson-gxl: add missing i2c_d pinmux
- blk-mq: check kobject state_in_sysfs before deleting in
blk_mq_unregister_hctx
- ARM: at91: pm: fix MCKx restore routine
- arm64: dts: apple: t8103-j457: Fix PCIe ethernet iommu-map
- regulator: scmi: Use int type to store negative error codes
- selftests/nolibc: fix EXPECT_NZ macro
- block: use int to store blk_stack_limits() return value
- PM: sleep: core: Clear power.must_resume in noirq suspend error path
- ARM: dts: ti: omap: am335x-baltos: Fix ti,en-ck32k-xtal property in DTS
to use correct boolean syntax
- ARM: dts: ti: omap: omap3-devkit8000-lcd: Fix ti,keep-vref-on property
to use correct boolean syntax in DTS
- ARM: dts: omap: am335x-cm-t335: Remove unused mcasp num-serializer
property
- PM / devfreq: mtk-cci: Fix potential error pointer dereference in
probe()
- power: supply: cw2015: Fix a alignment coding style issue
- pinctrl: renesas: Use int type to store negative error codes
- null_blk: Fix the description of the cache_size module argument
- arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie0
- nbd: restrict sockets to TCP and UDP
- firmware: firmware: meson-sm: fix compile-test default
- cpuidle: qcom-spm: fix device and OF node leaks at probe
- arm64: dts: mediatek: mt6331: Fix pmic, regulators, rtc, keys node names
- arm64: dts: mediatek: mt6795-xperia-m5: Fix mmc0 latch-ck value
- arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible
- pwm: tiehrpwm: Fix corner case in clock divisor calculation
- ACPICA: Fix largest possible resource descriptor index
- nvmet-fc: move lsop put work to nvmet_fc_ls_req_op
- i3c: master: svc: Use manual response for IBI events
- i3c: master: svc: Recycle unused IBI slot
- selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported
- bpf: Explicitly check accesses to bpf_sock_addr
- smp: Fix up and expand the smp_call_function_many() kerneldoc
- tools/nolibc: make time_t robust if __kernel_old_time_t is missing in
host headers
- once: fix race by moving DO_ONCE to separate section
- hwmon: (mlxreg-fan) Separate methods of fan setting coming from
different subsystems
- thermal/drivers/qcom: Make LMH select QCOM_SCM
- thermal/drivers/qcom/lmh: Add missing IRQ includes
- i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD
- i2c: designware: Fix clock issue when PM is disabled
- i2c: designware: Add disabling clocks when probe fails
- bpf: Enforce expected_attach_type for tailcall compatibility
- drm/panel: novatek-nt35560: Fix invalid return value
- drm/radeon/r600_cs: clean up of dead code in r600_cs
- f2fs: fix condition in __allow_reserved_blocks()
- drm/bridge: it6505: select REGMAP_I2C
- media: zoran: Remove zoran_fh structure
- phy: rockchip: naneng-combphy: Enable U3 OTG port for RK3568
- usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup
- usb: misc: qcom_eud: Access EUD_MODE_MANAGER2 through secure calls
- serial: max310x: Add error checking in probe()
- drm/amd/display: Remove redundant semicolons
- crypto: keembay - Add missing check after sg_nents_for_len()
- hwrng: nomadik - add ARM_AMBA dependency
- scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod
- scsi: myrs: Fix dma_alloc_coherent() error check
- media: rj54n1cb0c: Fix memleak in rj54n1_probe()
- RDMA/mlx5: Fix vport loopback forcing for MPV device
- ALSA: lx_core: use int type to store negative error codes
- media: st-delta: avoid excessive stack usage
- crypto: hisilicon/zip - remove unnecessary validation for high-
performance mode configurations
- crypto: hisilicon - re-enable address prefetch after device resuming
- crypto: hisilicon/qm - check whether the input function and PF are on
the same device
- inet: ping: check sock_net() in ping_get_port() and ping_lookup()
- coresight: Only register perf symlink for sinks with alloc_buffer
- drm/amdgpu: Power up UVD 3 for FW validation (v2)
- drm/amd/pm: Disable ULV even if unsupported (v3)
- drm/amd/pm: Fix si_upload_smc_data (v3)
- drm/amd/pm: Adjust si_upload_smc_data register programming (v3)
- drm/amd/pm: Treat zero vblank time as too short in si_dpm (v3)
- drm/amd/pm: Disable MCLK switching with non-DC at 120 Hz+ (v2)
- drm/amd/pm: Disable SCLK switching on Oland with high pixel clocks (v3)
- wifi: mwifiex: send world regulatory domain to driver
- PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation
- tcp: fix __tcp_close() to only send RST when required
- drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl()
- usb: phy: twl6030: Fix incorrect type for ret
- usb: gadget: configfs: Correctly set use_os_string at bind
- tty: n_gsm: Don't block input queue by waiting MSC
- misc: genwqe: Fix incorrect cmd field being reported in error
- pps: fix warning in pps_register_cdev when register device fail
- ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping
- ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping
- drm/msm/dpu: fix incorrect type for ret
- fs: ntfs3: Fix integer overflow in run_unpack()
- fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist
- iio: consumers: Fix handling of negative channel scale in
iio_convert_raw_to_processed()
- iio: consumers: Fix offset handling in iio_convert_raw_to_processed()
- netfilter: ipset: Remove unused htable_bits in macro ahash_region
- ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable
- watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the
watchdog
- drivers/base/node: handle error properly in register_one_node()
- RDMA/cm: Rate limit destroy CM ID timeout error message
- wifi: mt76: fix potential memory leak in mt76_wmac_probe()
- f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()
- f2fs: fix to truncate first page in error path of f2fs_truncate()
- f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()
- ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message
- scsi: qla2xxx: edif: Fix incorrect sign of error code
- scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()
- scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()
- f2fs: fix zero-sized extent for precache extents
- RDMA/core: Resolve MAC of next-hop device without ARP support
- IB/sa: Fix sa_local_svc_timeout_ms read race
- Documentation: trace: historgram-design: Separate sched_waking histogram
section heading and the following diagram
- wifi: mac80211: fix Rx packet handling when pubsta information is not
available
- sparc: fix accurate exception reporting in copy_{from_to}_user for
UltraSPARC
- sparc: fix accurate exception reporting in copy_{from_to}_user for
UltraSPARC III
- sparc: fix accurate exception reporting in copy_{from_to}_user for
Niagara
- sparc: fix accurate exception reporting in copy_to_user for Niagara 4
- sparc: fix accurate exception reporting in copy_{from,to}_user for M7
- vfio/pds: replace bitmap_free with vfree
- crypto: hisilicon/qm - set NULL to qm->debug.qm_diff_regs
- RDMA/rxe: Fix race in do_task() when draining
- wifi: rtw89: avoid circular locking dependency in ser_state_run()
- PCI: tegra194: Fix duplicate PLL disable in
pex_ep_event_pex_rst_assert()
- remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice
- coresight-etm4x: Conditionally access register TRCEXTINSELR
- coresight: etm4x: Support atclk
- coresight: trbe: Return NULL pointer for allocation failures
- NFSv4.1: fix backchannel max_resp_sz verification check
- scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()
- usb: vhci-hcd: Prevent suspending virtually attached devices
- RDMA/siw: Always report immediate post SQ errors
- net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast
- vhost: vringh: Fix copy_to_iter return value check
- Bluetooth: MGMT: Fix not exposing debug UUID on
MGMT_OP_READ_EXP_FEATURES_INFO
- Bluetooth: ISO: Fix possible UAF on iso_conn_free
- Bluetooth: ISO: don't leak skb in ISO_CONT RX
- Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements
- KEYS: X.509: Fix Basic Constraints CA flag parsing
- hwrng: ks-sa - fix division by zero in ks_sa_rng_init
- ocfs2: fix double free in user_cluster_connect()
- drivers/base/node: fix double free in register_one_node()
- mtd: rawnand: atmel: Fix error handling path in
atmel_nand_controller_add_nands
- nfp: fix RSS hash key size when RSS is not supported
- net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not
configurable
- net: dlink: handle copy_thresh allocation failure
- net/mlx5: Stop polling for command response if interface goes down
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown
- net/mlx5: fw reset, add reset timeout work
- smb: client: fix crypto buffers in non-linear memory
- vhost: vringh: Modify the return value check
- bpf: Reject negative offsets for ALU ops
- Squashfs: fix uninit-value in squashfs_get_parent
- uio_hv_generic: Let userspace take care of interrupt mask
- ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()
- ASoC: SOF: ipc3-topology: Fix multi-core and static pipelines tear down
- fs: udf: fix OOB read in lengthAllocDescs handling
- net: nfc: nci: Add parameter validation for packet data
- mfd: rz-mtu3: Fix MTU5 NFCR register offset
- mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data()
- dm: fix queue start/stop imbalance under suspend/load/resume races
- dm: fix NULL pointer dereference in __dm_suspend()
- LoongArch: Automatically disable kaslr if boot from kexec_file
- ksmbd: fix error code overwriting in smb2_get_info_filesystem()
- ext4: fix checks for orphan inodes
- mm: hugetlb: avoid soft lockup when mprotect to large memory area
- nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()
- misc: fastrpc: Fix fastrpc_map_lookup operation
- misc: fastrpc: fix possible map leak in fastrpc_put_args
- misc: fastrpc: Skip reference for DMA handles
- Input: atmel_mxt_ts - allow reset GPIO to sleep
- Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info
leak
- sunrpc: fix null pointer dereference on zero-length checksum
- remoteproc: pru: Fix potential NULL pointer dereference in
pru_rproc_set_ctable()
- pinctrl: check the return value of pinmux_ops::get_function_name()
- bus: fsl-mc: Check return value of platform_get_resource()
- net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock
- usb: typec: tipd: Clear interrupts first
- arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode
- usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call
- Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1
- wifi: rtl8xxxu: Don't claim USB ID 07b8:8188
- netfs: Prevent duplicate unlocking
- nvmem: layouts: fix automatic module loading
- uprobes: uprobe_warn should use passed task
- lsm: CONFIG_LSM can depend on CONFIG_SECURITY
- vdso: Add struct __kernel_old_timeval forward declaration to gettime.h
- selftests: vDSO: vdso_test_abi: Correctly skip whole test with missing
vDSO
- PM / devfreq: rockchip-dfi: double count on RK3588
- soc: mediatek: mtk-svs: fix device leaks on mt8183 probe failure
- soc: mediatek: mtk-svs: fix device leaks on mt8192 probe failure
- pwm: tiehrpwm: Don't drop runtime PM reference in .free()
- pwm: tiehrpwm: Make code comment in .free() more useful
- pwm: tiehrpwm: Fix various off-by-one errors in duty-cycle calculation
- spi: fix return code when spi device has too many chipselects
- bpf: Mark kfuncs as __noclone
- crypto: octeontx2 - Call strscpy() with correct size argument
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count
- idpf: fix Rx descriptor ready check barrier in splitq
- wifi: mt76: mt7996: Fix RX packets configuration for primary WED device
- wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE
- HID: hidraw: tighten ioctl command parsing
- wifi: ath12k: fix wrong logging ID used for CE
- coresight: tmc: Move ACPI support from AMBA driver to platform driver
- coresight: tmc: Support atclk
- coresight: catu: Move ACPI support from AMBA driver to platform driver
- coresight: catu: Support atclk
- PCI: rcar-gen4: Add missing 1ms delay after PWR reset assertion
- PCI: rcar-gen4: Assure reset occurs before DBI access
- Bluetooth: ISO: free rx_skb if not consumed
- PCI: j721e: Fix incorrect error message in probe()
- Upstream stable to v6.6.111, v6.6.112, v6.12.52, v6.12.53
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40031
- tee: fix register_shm_helper()
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40037
- fbdev: simplefb: Fix use after free in simplefb_detach_genpds()
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40047
- io_uring/waitid: always prune wait queue entry in io_waitid_wait()
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40057
- ptp: Add a upper bound on max_vclocks
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40058
- iommu/vt-d: Disallow dirty tracking if incoherent page walk
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40059
- coresight: Fix incorrect handling for return value of devm_kzalloc
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40155
- iommu/vt-d: debugfs: Fix legacy mode page table dump logic
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40079
- riscv, bpf: Sign extend struct ops return values properly
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40000
- wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait()
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40026
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40027
- net/9p: fix double req put in p9_fd_cancelled
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40109
- crypto: rng - Ensure set_ent is always present
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-38105
- ALSA: usb-audio: Kill timer properly at removal
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-40107
- can: hi311x: fix null pointer dereference when resuming from sleep
before interface was enabled
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-39995
- media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in
probe
* Noble update: upstream stable patchset 2026-01-26 (LP: #2139072) //
CVE-2025-39994
- media: tuner: xc5000: Fix use-after-free in xc5000_release
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938)
- scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
- firewire: core: fix overlooked update of subsystem ABI version
- ALSA: usb-audio: Fix block comments in mixer_quirks
- ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
- ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
- ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
- ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
- ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
- ALSA: usb-audio: Convert comma to semicolon
- ALSA: usb-audio: Fix build with CONFIG_INPUT=n
- usb: core: Add 0x prefix to quirks debug output
- mmc: sdhci-cadence: add Mobileye eyeQ support
- i2c: designware: Add quirk for Intel Xe
- ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
- ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
- ALSA: usb-audio: Add mute TLV for playback volumes on more devices
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
- mm: add folio_expected_ref_count() for reference count calculation
- mm/gup: check ref_count instead of lru before migration
- mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
- mm: folio_may_be_lru_cached() unless folio_test_large()
- arm64: dts: imx8mp: Correct thermal sensor index
- ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
- cpufreq: Initialize cpufreq-based invariance before subsys
- smb: server: don't use delayed_work for post_recv_credits_work
- wifi: virt_wifi: Fix page fault on connect
- can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
- bpf: Reject bpf_timer for PREEMPT_RT
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
- ethernet: rvu-af: Remove slash from the driver name
- Bluetooth: hci_sync: Fix hci_resume_advertising_sync
- bnxt_en: correct offset handling for IPv6 destination address
- net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
- selftests: fib_nexthops: Fix creation of non-FDB nexthops
- net: dsa: lantiq_gswip: do also enable or disable cpu port
- net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to
port_setup()
- net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries
added to the CPU port
- HID: asus: add support for missing PX series fn keys
- i40e: add mask to apply valid bits for itr_idx
- i40e: improve VF MAC filters accounting
- ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
- fbcon: Fix OOB access in font allocation
- s390/cpum_cf: Fix uninitialized warning after backport of ce971233242b
- ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
- gpiolib: Extend software-node support to support secondary software-
nodes
- drm/ast: Use msleep instead of mdelay for edid read
- minmax: make generic MIN() and MAX() macros available everywhere
- minmax: simplify min()/max()/clamp() implementation
- minmax: don't use max() in situations that want a C constant expression
- minmax: improve macro expansion and type checking
- minmax: fix up min3() and max3() too
- minmax.h: add whitespace around operators and after commas
- minmax.h: update some comments
- minmax.h: reduce the #define expansion of min(), max() and clamp()
- minmax.h: move all the clamp() definitions after the min/max() ones
- minmax.h: simplify the variants of clamp()
- minmax.h: remove some #defines that are only expanded once
- drm/i915/backlight: Return immediately when scale() finds invalid
parameters
- ALSA: usb-audio: Fix code alignment in mixer_quirks
- ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA
- net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info
- net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick
- net: sfp: add quirk for FLYPRO copper SFP+ module
- HID: amd_sfh: Add sync across amd sfh work functions
- platform/x86: lg-laptop: Fix WMAB call in fan_mode_store()
- crypto: sha256 - fix crash at kexec
- gcc-plugins: Remove TODO_verify_il for GCC >= 16
- Upstream stable to v6.6.109, v6.6.110, v6.12.50, v6.12.51
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39991
- wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39992
- mm: swap: check for stable address space before operating on the VMA
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40013
- ASoC: qcom: audioreach: fix potential null pointer dereference
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40016
- media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39996
- media: b2c2: Fix use-after-free causing by irq_check_work in
flexcop_pci_remove
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39998
- scsi: target: target_core_configfs: Add length check to avoid buffer
overflow
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40009
- fs/proc/task_mmu: check p->vec_buf for NULL
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39973
- i40e: add validation for ring_len param
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-38709
- loop: Avoid updating block size under exclusive owner
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39967
- fbcon: fix integer overflow in fbcon_do_set_font
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40006
- mm/hugetlb: fix folio is still mapped when deleted
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40008
- kmsan: fix out-of-bounds access to shadow memory
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40010
- afs: Fix potential null pointer dereference in afs_put_server
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40021
- tracing: dynevent: Add a missing lockdown check on dynevent
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39968
- i40e: add max boundary check for VF filters
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39969
- i40e: fix validation of VF state in get resources
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39970
- i40e: fix input validation logic for action_meta
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39971
- i40e: fix idx validation in config queues msg
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39972
- i40e: fix idx validation in i40e_validate_queue_map
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39977
- futex: Prevent use-after-free during requeue-PI
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40011
- drm/gma500: Fix null dereference in hdmi teardown
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39978
- octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39980
- nexthop: Forbid FDB status change while nexthop is in a group
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40024
- vhost: Take a reference on the task in struct vhost_task.
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39982
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-40020
- can: peak_usb: fix shift-out-of-bounds issue
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39985
- can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39986
- can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39987
- can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
* Noble update: upstream stable patchset 2026-01-23 (LP: #2138938) //
CVE-2025-39988
- can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867)
- ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is
not supported
- wifi: mac80211: fix incorrect type for ret
- pcmcia: omap_cf: Mark driver struct with __refdata to prevent section
mismatch
- bonding: set random address only when slaves already exist
- power: supply: bq27xxx: fix error return in case of no bq27000 hdq
battery
- power: supply: bq27xxx: restrict no-battery detection to bq27000
- LoongArch: Update help info of ARCH_STRICT_ALIGN
- LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
- LoongArch: Check the return value when creating kobj
- iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
- btrfs: tree-checker: fix the incorrect inode ref size check
- ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S
interface
- ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
- rds: ib: Increment i_fastreg_wrs before bailing out
- selftests: mptcp: connect: catch IO errors on listen side
- selftests: mptcp: avoid spurious errors on TCP disconnect
- ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
- io_uring: backport io_should_terminate_tw()
- io_uring: include dying ring in task_work "should cancel" state
- ASoC: wm8940: Correct PLL rate rounding
- ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error
message
- drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
- selftests: mptcp: userspace pm: validate deny-join-id0 flag
- xhci: dbc: decouple endpoint allocation from initialization
- xhci: dbc: Fix full DbC transfer ring after several reconnects
- rtc: pcf2127: fix SPI command byte for PCF2131 backport
- mptcp: propagate shutdown to subflows when possible
- minmax: avoid overly complicated constant expressions in VM code
- minmax: simplify and clarify min_t()/max_t() implementation
- minmax: add a few more MIN_T/MAX_T users
- nvme: fix PI insert on write
- btrfs: fix invalid extref key setup when replaying dentry
- dpaa2-switch: fix buffer pool seeding for control traffic
- mptcp: set remote_deny_join_id0 on SYN recv
- mptcp: tfo: record 'deny join id0' info
- selftests: mptcp: sockopt: fix error messages
- net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
- ice: store max_frame and rx_buf_len only in ice_rx_ring
- i40e: remove redundant memory barrier when cleaning Tx descs
- bonding: don't set oif to bond dev when getting NS target destination
- octeon_ep: fix VF MAC address lifecycle handling
- net: liquidio: fix overflow in octeon_init_instr_queue()
- nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
- dm-raid: don't set io_min and io_opt for raid1
- mm: revert "mm: vmscan.c: fix OOM on swap stress test"
- mmc: mvsdio: Fix dma_unmap_sg() nents value
- KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
- ASoC: wm8940: Correct typo in control name
- ASoC: wm8974: Correct PLL rate rounding
- ASoC: Intel: catpt: Expose correct bit depth to userspace
- drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()
- smb: client: fix filename matching of deferred files
- platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG
Z13
- platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk
- x86/bugs: Add SRSO_USER_KERNEL_NO support
- x86/bugs: KVM: Add support for SRSO_MSR_FIX
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count
transitions
- mptcp: pm: nl: announce deny-join-id0 flag
- Upstream stable to v6.6.108, v6.12.49
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39932
- smb: client: let smbd_destroy() call
disable_work_sync(&info->post_send_credits_work)
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39940
- dm-stripe: fix a possible integer overflow
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39948
- ice: fix Rx page leak on multi-buffer frames
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39950
- net/tcp: Fix a NULL pointer dereference when using TCP-AO with
TCP_REPAIR
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39961
- iommu/amd/pgtbl: Fix possible race while increase page table level
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-22106
- vmxnet3: unregister xdp rxq info in the reset path
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39929
- smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39931
- crypto: af_alg - Set merge to zero early in af_alg_sendmsg
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39934
- drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39937
- net: rfkill: gpio: Fix crash due to dereferencering uninitialized
pointer
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39938
- ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source
graph failed
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39942
- ksmbd: smbdirect: verify remaining_data_length respects
max_fragmented_recv_size
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39943
- ksmbd: smbdirect: validate data_offset and data_length field of
smb_direct_data_transfer
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39944
- octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39945
- cnic: Fix use-after-free bugs in cnic_delete_task
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39955
- tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39947
- net/mlx5e: Harden uplink netdev access against device unbind
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39949
- qed: Don't collect too many protection override GRC elements
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39951
- um: virtio_uml: Fix use-after-free after put_device in probe
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39953
- cgroup: split cgroup_destroy_wq into 3 workqueues
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39957
- wifi: mac80211: increase scan_ies_len for S1G
* Noble update: upstream stable patchset 2026-01-22 (LP: #2138867) //
CVE-2025-39952
- wifi: wilc1000: avoid buffer overflow in WID string configuration
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681)
- mm: introduce and use {pgd,p4d}_populate_kernel()
- kasan: fix GCC mem-intrinsic prefix with sw tags
- ima: limit the number of ToMToU integrity violations
- flexfiles/pNFS: fix NULL checks on result of
ff_layout_choose_ds_for_read
- SUNRPC: call xs_sock_process_cmsg for all cmsg
- NFSv4: Don't clear capabilities that won't be reset
- NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
- NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
- tracing: Fix tracing_marker may trigger page fault during
preempt_disable
- ftrace/samples: Fix function size computation
- fs/nfs/io: make nfs_start_io_*() killable
- NFS: Serialise O_DIRECT i/o and truncate()
- NFSv4.2: Serialise O_DIRECT i/o and fallocate()
- NFSv4.2: Serialise O_DIRECT i/o and clone range
- NFSv4.2: Serialise O_DIRECT i/o and copy range
- NFSv4/flexfiles: Fix layout merge mirror check.
- s390/cpum_cf: Deny all sampling events by counter PMU
- proc: fix type confusion in pde_set_flags()
- EDAC/altera: Delete an inappropriate dma_free_coherent() call
- compiler-clang.h: define __SANITIZE_*__ macros only when undefined
- net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM
wakeups
- mtd: rawnand: stm32_fmc2: fix ECC overwrite
- fuse: check if copy_file_range() returns larger than requested size
- fuse: prevent overflow in copy_file_range return value
- mm/damon/core: set quota->charged_from to jiffies at first charge window
- drm/mediatek: fix potential OF node use-after-free
- drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
- drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
- mtd: nand: raw: atmel: Fix comment in timings preparation
- mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
- btrfs: use readahead_expand() on compressed extents
- btrfs: fix corruption reading compressed range when block size is
smaller than page size
- mm/khugepaged: fix the address passed to notifier on testing young
- Input: iqs7222 - avoid enabling unused interrupts
- Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk
table
- tty: hvc_console: Call hvc_kick in hvc_write unconditionally
- serial: sc16is7xx: fix bug in flow control levels init
- dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
- USB: serial: option: add Telit Cinterion FN990A w/audio compositions
- USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
- net: bridge: Bounce invalid boolopts
- tunnels: reset the GSO metadata before reusing the skb
- docs: networking: can: change bcm_msg_head frames member to support
flexible array
- igb: fix link test skipping when interface is admin down
- can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when
j1939_local_ecu_get() failed
- can: j1939: j1939_local_ecu_get(): undo increment when
j1939_local_ecu_get() fails
- net: hsr: Add VLAN CTAG filter support
- hsr: use rtnl lock when iterating over ports
- hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
- dmaengine: idxd: Remove improper idxd_free
- dmaengine: idxd: Fix refcount underflow on module unload
- dmaengine: idxd: Fix double free in idxd_setup_wqs()
- regulator: sy7636a: fix lifecycle of power good gpio
- hrtimer: Remove unused function
- hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
- hrtimers: Unconditionally update target CPU base after offline timer
migration
- RISC-V: Remove unnecessary include from compat.h
- xhci: fix memory leak regression when freeing xhci vdev devices depth
first
- USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
- usb: gadget: midi2: Fix missing UMP group attributes initialization
- usb: gadget: midi2: Fix MIDI2 IN EP max packet size
- dmaengine: dw: dmamux: Fix device reference leak in
rzn1_dmamux_route_allocate
- phy: tegra: xusb: fix device and OF node leak at probe
- phy: ti-pipe3: fix device leak at unbind
- net: mdiobus: release reset_gpio in mdiobus_unregister_device()
- drm/amdgpu: fix a memory leak in fence cleanup when unloading
- drm/i915/power: fix size for for_each_set_bit() in abox iteration
- nvme-pci: skip nvme_write_sq_db on empty rqlist
- ext4: introduce linear search for dentries
- drm/i915/pmu: Fix zero delta busyness issue
- drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed
- Revert "drm/amd/display: Optimize cursor position updates"
- ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA
- drm/amdgpu: Add back JPEG to video caps for carrizo and newer
- trace/fgraph: Fix error handling
- NFS: nfs_invalidate_folio() must observe the offset and size arguments
- s390/pai: Deny all events not handled by this PMU
- btrfs: fix squota compressed stats leak
- netlink: specs: mptcp: add missing 'server-side' attr
- netlink: specs: mptcp: clearly mention attributes
- netlink: specs: mptcp: replace underscores with dashes in names
- netlink: specs: mptcp: fix if-idx attribute type
- ceph: fix race condition where r_parent becomes stale before sending
message
- mtd: spinand: winbond: Fix oob_layout for W25N01JW
- Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO
runtime PM wakeups"
- drm/amd/display: use udelay rather than fsleep
- netfilter: nft_set_rbtree: continue traversal if element is inactive
- netfilter: nf_tables: place base_seq in struct net
- netfilter: nf_tables: make nft_set_do_lookup available unconditionally
- netfilter: nf_tables: restart set lookup on base_seq change
- phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties
- phy: ti: omap-usb2: fix device leak at unbind
- Upstream stable to v6.6.107, v6.12.48
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39927
- ceph: fix race condition validating r_parent before applying state
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39923
- dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39869
- dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39873
- can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted
SKB
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39911
- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39876
- net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39881
- kernfs: Fix UAF in polling when open file is released
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39909
- mm/damon/lru_sort: avoid divide-by-zero in
damon_lru_sort_apply_parameters()
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39916
- mm/damon/reclaim: avoid divide-by-zero in
damon_reclaim_apply_parameters()
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39877
- mm/damon/sysfs: fix use-after-free in state_show()
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39880
- libceph: fix invalid accesses to ceph_connection_v1_info
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39883
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison
memory
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39907
- mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39885
- ocfs2: fix recursive semaphore deadlock in fiemap call
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39913
- tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to
allocate psock->cork.
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39886
- bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-39914
- tracing: Silence warning when chunk allocation fails in trace_pid_write
* Noble update: upstream stable patchset 2026-01-20 (LP: #2138681) //
CVE-2025-23143
- net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502)
- bpf: Add cookie object to bpf maps
- bpf: Move cgroup iterator helpers to bpf.h
- btrfs: fix race between logging inode and checking if it was logged
before
- btrfs: fix race between setting last_dir_index_offset and inode logging
- btrfs: avoid load/store tearing races when checking if an inode was
logged
- LoongArch: Save LBT before FPU in setup_sigcontext()
- cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
- drm/amd/display: Don't warn when missing DCE encoder caps
- cpupower: Fix a bug where the -t option of the set subcommand was not
working.
- Bluetooth: hci_sync: Avoid adding default advertising on startup
- arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
- tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
- arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics
i.MX8M Plus DHCOM
- arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M
Plus eDM SBC
- netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
- xirc2ps_cs: fix register access when enabling FullDuplex
- mISDN: Fix memory leak in dsp_hwec_enable()
- icmp: fix icmp_ndo_send address translation for reply direction
- net: macb: Fix tx_ptr_lock locking
- macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
- wifi: ath11k: rename ath11k_start_vdev_delay()
- wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
- wifi: ath11k: fix group data packet drops during rekey
- net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
- wifi: cw1200: cap SSID length in cw1200_do_join()
- wifi: libertas: cap SSID len in lbs_associate()
- net: thunder_bgx: add a missing of_node_put
- net: thunder_bgx: decrement cleanup index before use
- ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
- net/smc: Remove validation of reserved bits in CLC Decline message
- mctp: return -ENOPROTOOPT for unknown getsockopt options
- net: atm: fix memory leak in atm_register_sysfs when device_register
fail
- selftest: net: Fix weird setsockopt() in bind_bhash.c.
- phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
- ALSA: usb-audio: Add mute TLV for playback volumes on some devices
- ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
- arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with
CONFIG_DYNAMIC_FTRACE
- proc: fix missing pde_set_flags() for net proc files
- soc: qcom: mdt_loader: Deal with zero e_shentsize
- wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
- drm/amdgpu: drop hw access in non-DC audio fini
- platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042
quirks list
- e1000e: fix heap overflow in e1000_set_eeprom
- net: pcs: rzn1-miic: Correct MODCTRL register offset
- cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
- cpufreq: intel_pstate: Do not update global.turbo_disabled after
initialization
- cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
- thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum
threshold
- PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
- dmaengine: mediatek: Fix a possible deadlock error in
mtk_cqdma_tx_status()
- ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
- ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
- pcmcia: omap: Add missing check for platform_get_resource
- hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
- spi: spi-fsl-lpspi: Fix transmissions when using CONT
- spi: spi-fsl-lpspi: Set correct chip-select polarity bit
- spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
- spi: spi-fsl-lpspi: Clear status register after disabling the module
- drm/bridge: ti-sn65dsi86: fix REFCLK setting
- perf bpf-event: Fix use-after-free in synthesis
- drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
- drm/amd/amdgpu: Fix missing error return on kzalloc failure
- tools: gpio: rm .*.cmd on make clean
- tools: gpio: remove the include directory on make clean
- riscv: use lw when reading int cpu in asm_per_cpu
- cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
- cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
- cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
- dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
- bpf: Move bpf map owner out of common struct
- btrfs: zoned: skip ZONE FINISH of conventional zones
- arm64: dts: imx8mp-tqma8mpql: fix LDO5 power off
- HID: simplify snto32()
- HID: stop exporting hid_snto32()
- net: usb: qmi_wwan: fix Telit Cinterion FN990A name
- net: usb: qmi_wwan: fix Telit Cinterion FE990A name
- net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition
- LoongArch: vDSO: Remove --hash-style=sysv
- LoongArch: vDSO: Remove -nostdlib complier flag
- mmc: sdhci-of-arasan: Support for emmc hardware reset
- mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up
- bnxt_en: fix incorrect page count in RX aggr ring log
- net: mctp: mctp_fraq_queue should take ownership of passed skb
- idpf: set mac type when adding and removing MAC filters
- net: skb: add pskb_network_may_pull_reason() helper
- net: tunnel: add pskb_inet_may_pull_reason() helper
- net: vxlan: add skb drop reasons to vxlan_rcv()
- net: vxlan: make vxlan_snoop() return drop reasons
- net: vxlan: make vxlan_set_mac() return drop reasons
- net: vxlan: use kfree_skb_reason() in vxlan_xmit()
- net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit()
- net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE
- vxlan: Refresh FDB 'updated' time upon 'NTF_USE'
- vxlan: Avoid unnecessary updates to FDB 'used' time
- vxlan: Add RCU read-side critical sections in the Tx path
- vxlan: Rename FDB Tx lookup function
- mm: fix possible deadlock in kmemleak
- drm/amd/display: Clear the CUR_ENABLE register on DCN314 w/out DPP PG
- net: dsa: add hook to determine whether EEE is supported
- net: dsa: provide implementation of .support_eee()
- md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT
- md/raid1,raid10: strip REQ_NOWAIT from member bios
- ext4: define ext4_journal_destroy wrapper
- wifi: ath11k: update channel list in worker when wait flag is set
- nouveau: fix disabling the nonstall irq due to storm code
- kunit: kasan_test: disable fortify string checker on kasan_strings()
test
- platform/x86: asus-wmi: Remove extra keys from ignore_key_wlan quirk
- perf bpf-utils: Constify bpil_array_desc
- perf bpf-utils: Harden get_bpf_prog_info_linear
- md/raid1: fix data lost for writemostly rdev
- Upstream stable to v6.6.105, v6.6.106, v6.12.46, v6.12.47
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-22124
- md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-22103
- net: fix NULL pointer dereference in l3mdev_l3_rcv
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-23133
- wifi: ath11k: update channel list in reg notifier instead reg worker
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-22113
- ext4: avoid journaling sb update on error if journal is destroying
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-22125
- md/raid1,raid10: don't ignore IO flags
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39899
- mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39897
- net: xilinx: axienet: Add error handling for RX metadata pointer
retrieval
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39850
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39851
- vxlan: Fix NPD when refreshing an FDB entry with a nexthop object
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39852
- net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39901
- i40e: remove read access to debugfs files
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39854
- ice: fix NULL access of tx->in_use in ice_ll_ts_intr
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-38556
- HID: core: Harden s32ton() against conversion to 0 bits
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-38502
- bpf: Fix oob access in cgroup local storage
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39843
- mm: slub: avoid wake up kswapd in set_track_prepare
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39920
- pcmcia: Add error handling for add_interval() in do_validate_mem()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39902
- mm/slub: avoid accessing metadata when pointer is invalid in
object_err()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39838
- cifs: prevent NULL pointer dereference in UTF16 conversion
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39839
- batman-adv: fix OOB read/write in network-coding decode
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39841
- scsi: lpfc: Fix buffer free/clear order in deferred receive path
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39891
- wifi: mwifiex: Initialize the chan_stats array to zero
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39842
- ocfs2: prevent release journal inode after journal shutdown
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39895
- sched: Fix sched_numa_find_nth_cpu() if mask offline
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39844
- mm: move page table sync declarations to linux/pgtable.h
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39845
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and
arch_sync_kernel_mappings()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39846
- pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39847
- ppp: fix memory leak in pad_compress_skb
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39848
- ax25: properly unshare skbs in ax25_kiss_rcv()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39849
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39853
- i40e: Fix potential invalid access when MAC list is empty
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39857
- net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39860
- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39861
- Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39894
- netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in()
after confirm
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39863
- wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info
work
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39864
- wifi: cfg80211: fix use-after-free in cmp_bss()
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39865
- tee: fix NULL pointer dereference in tee_shm_put
* Noble update: upstream stable patchset 2026-01-16 (LP: #2138502) //
CVE-2025-39866
- fs: writeback: fix use-after-free in __mark_inode_dirty()
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664)
- of: dynamic: Fix memleak when of_pci_add_properties() failed
- pinctrl: STMFX: add missing HAS_IOMEM dependency
- mips: dts: lantiq: danube: add missing burst length property
- mips: lantiq: xway: sysctrl: rename the etop node
- of: Add a helper to free property struct
- of: dynamic: Fix use after free in of_changeset_add_prop_helper()
- scsi: core: sysfs: Correct sysfs attributes access rights
- smb: client: fix race with concurrent opens in unlink(2)
- ASoC: codecs: tx-macro: correct tx_macro_component_drv name
- erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
- ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
- nfs: fold nfs_page_group_lock_subrequests into
nfs_lock_and_join_requests
- vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
- net: ipv4: fix regression in local-broadcast routes
- drm/msm: Defer fd_install in SUBMIT ioctl
- powerpc/kvm: Fix ifdef to remove build warning
- HID: input: rename hidinput_set_battery_charge_status()
- HID: input: report battery status changes immediately
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
- Bluetooth: hci_event: Mark connection as closed during suspend
disconnect
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
- Bluetooth: hci_sync: fix set_local_name race condition
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
- drm/nouveau: remove unused memory target test
- ice: fix incorrect counter for buffer allocation failures
- dt-bindings: display/msm: qcom,mdp5: drop lut clock
- net: dlink: fix multicast stats being counted incorrectly
- phy: mscc: Fix when PTP clock is register and unregister
- net/mlx5: Reload auxiliary drivers on fw_activate
- net/mlx5: Add device cap for supporting hot reset in sync reset flow
- net/mlx5: Add support for sync reset using hot reset
- net/mlx5: Nack sync reset when SFs are present
- net/mlx5e: Set local Xoff after FW update
- net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
- net: stmmac: Rename phylink_get_caps() callback to update_caps()
- net: stmmac: xgmac: Correct supported speed modes
- net: stmmac: Set CIC bit only for TX queues with COE
- net: rose: split remove and free operations in rose_remove_neigh()
- x86/microcode/AMD: Handle the case of no BIOS microcode
- HID: quirks: add support for Legion Go dual dinput modes
- HID: logitech: Add ids for G PRO 2 LIGHTSPEED
- HID: wacom: Add a new Art Pen 2
- dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
- net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
- smb3 client: fix return code mapping of remap_file_range
- drm/nouveau/disp: Always accept linear modifier
- net: rose: fix a typo in rose_clear_routes()
- perf symbol-minimal: Fix ehdr reading in filename__read_build_id
- vhost: Fix ioctl # for VHOST_[GS]ET_FORK_FROM_OWNER
- drm/msm/kms: move snapshot init earlier in KMS init
- drm/mediatek: Add error handling for old state CRTC in atomic_disable
- drm/xe/xe_sync: avoid race during ufence signaling
- drm/xe: Don't trigger rebind on initial dma-buf validation
- bnxt_en: Adjust TX rings if reservation is less than requested
- hv_netvsc: Link queues to NAPIs
- net: hv_netvsc: fix loss of early receive events from host during
channel open.
- net: macb: Disable clocks once
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2
- drm/mediatek: Fix device/node reference count leaks in
mtk_drm_get_all_drm_priv
- drm/amd/amdgpu: disable hwmon power1_cap* for gfx 11.0.3 on vf mode
- PCI: Add PCIE_RESET_CONFIG_DEVICE_WAIT_MS waiting time value
- PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to
PCIE_RESET_CONFIG_WAIT_MS
- PCI: dwc: Rename 'dw_pcie::link_gen' to 'dw_pcie::max_link_speed'
- PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up
- thermal/drivers/mediatek/lvts_thermal: Change lvts commands array to
static const
- thermal/drivers/mediatek/lvts_thermal: Add lvts commands and their sizes
to driver data
- thermal/drivers/mediatek/lvts_thermal: Add mt7988 lvts commands
- Upstream stable to v6.6.104, v6.12.45
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39811
- drm/xe/vm: Clear the scratch_pt pointer on error
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39815
- RISC-V: KVM: fix stack overrun when loading vlenb
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39810
- bnxt_en: Fix memory corruption when FW resources change during ifdown
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39836
- efi: stmm: Fix incorrect buffer allocation method
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39805
- net: macb: fix unregister_netdev call order in macb_remove()
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39829
- trace/fgraph: Fix the warning caused by missing unregister notifier
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39835
- xfs: do not propagate ENODATA disk errors into xattr code
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39819
- fs/smb: Fix inconsistent refcnt update
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39808
- HID: hid-ntrig: fix unable to handle page fault in
ntrig_report_version()
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39806
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39824
- HID: asus: fix UAF via HID_CLAIMED_INPUT validation
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39823
- KVM: x86: use array_index_nospec with indices that come from guest
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39817
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39812
- sctp: initialize more fields in sctp_v6_from_sk()
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39827
- net: rose: include node references in rose_neigh refcount
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39826
- net: rose: convert 'use' field to refcount_t
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39832
- net/mlx5: Fix lockdep assertion on sync reset unload event
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39828
- atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39697
- NFS: Fix a race when updating an existing write
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39825
- smb: client: fix race with concurrent opens in rename(2)
* Noble update: upstream stable patchset 2026-01-07 (LP: #2137664) //
CVE-2025-39813
- ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
* CVE-2025-37899
- ksmbd: fix use-after-free in session logoff
* CVE-2025-22037
- ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous
session
- ksmbd: fix race condition between destroy_previous_session() and smb2
operations()
- ksmbd: fix null pointer dereference in alloc_preauth_hash()
[ Ubuntu-azure: 6.8.0-1047.53 ]
* noble/linux-azure: 6.8.0-1047.53 -proposed tracker (LP: #2140922)
* [storvsc][Backport] Backport storvsc patch for handling MODE_SENSE_10
(LP: #2139232)
- scsi: storvsc: Process unsupported MODE_SENSE_10
* linux-azure-nvidia: Include cppc_cpufreq in linux-modules (LP: #2119465)
- [Config] azure: add cppc_cpufreq to azure.inclusion-list
[ Ubuntu: 6.8.0-101.101 ]
* noble/linux: 6.8.0-101.101 -proposed tracker (LP: #2140964)
* CVE-2025-37899
- ksmbd: fix use-after-free in session logoff
* CVE-2025-22037
- ksmbd: mark SMB2_SESSION_EXPIRED to session when destroying previous
session
- ksmbd: fix race condition between destroy_previous_session() and smb2
operations()
- ksmbd: fix null pointer dereference in alloc_preauth_hash()
[ Ubuntu-azure: 6.8.0-1046.52 ]
* noble/linux-azure: 6.8.0-1046.52 -proposed tracker (LP: #2137864)
* Dell AIO backlight is not working, dell_uart_backlight module is missing
(LP: #2083800)
- [Config] azure: Defer to generic for CONFIG_SERIAL_DEV_BUS and
CONFIG_SERIAL_DEV_CTRL_TTYPORT
* azure: SAUCE: add a knob for serializing open/close operations on NFSv4.x
(LP: #2138752)
- SAUCE: NFSv4.x: by default serialize open/close operations.
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586)
- [Config] azure: update page size on all architectures
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722)
- [Config] azure: enable hid-universal-pidff driver
* [Azure] AMDv4 VMs may get no timer interrupts or suffer from timer
interrupt storms (LP: #2137674)
- SAUCE: clocksource: hyper-v: do not use an insanely big TSC in
hv_read_tsc_page_tsc()
- SAUCE: clocksource: hyper-v: use the APIC timer if the Hyper-V timer is
unreliable on some CPUs
[ Ubuntu: 6.8.0-100.100 ]
* noble/linux: 6.8.0-100.100 -proposed tracker (LP: #2138307)
* Turbo boost stuck disabled on Clevo PD5x_7xSNC_SND_SNE (LP: #2122531)
- cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes
* [noble] write-sealed memfd mappings fail to map read-only (LP: #2138244)
- SAUCE: Fix read-only mapping of write-sealed pages
[ Ubuntu: 6.8.0-98.98 ]
* noble/linux: 6.8.0-98.98 -proposed tracker (LP: #2137901)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2026.01.12)
* ubuntu_kselftests:_net/net:gre_gso.sh failing (LP: #2136820)
- SAUCE increase socat timeout in gre_gso.sh
* TPM timeouts occur on some Infineon TPMs (LP: #2137528)
- tpm: Make chip->{status,cancel,req_canceled} opt
- tpm: Check for completion after timeout
* power: intel_pstate: Fix unchecked MSR (LP: #2130244)
- cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722)
- selftests/futex: futex_waitv wouldblock test should fail
- drm/i915/dg2: wait for HuC load completion before running selftests
- drm/i915: Disable RPG during live selftest
- objtool: Fix INSN_CONTEXT_SWITCH handling in validate_unret()
- octeontx2-pf: qos: fix VF root node parent queue index
- tc: Ensure we have enough buffer space when sending filter netlink
notifications
- net: ethtool: Don't call .cleanup_data when prepare_data fails
- drm/tests: modeset: Fix drm_display_mode memory leak
- drm/tests: helpers: Add atomic helpers
- drm/tests: Add helper to create mock plane
- drm/tests: Add helper to create mock crtc
- drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
- drm/tests: helpers: Fix compiler warning
- drm/tests: helpers: Create kunit helper to destroy a drm_display_mode
- drm/tests: cmdline: Fix drm_display_mode memory leak
- drm/tests: modes: Fix drm_display_mode memory leak
- drm/tests: probe-helper: Fix drm_display_mode memory leak
- ata: sata_sx4: Add error handling in pdc20621_i2c_read()
- nvmet-fcloop: swap list_add_tail arguments
- net_sched: sch_sfq: use a temporary work area for validating
configuration
- Revert "net_sched: sch_sfq: move the limit validation"
- net_sched: sch_sfq: move the limit validation
- ipv6: Align behavior across nexthops during path selection
- nft_set_pipapo: fix incorrect avx2 match of 5th field octet
- fs: consistently deref the files table with rcu_dereference_raw()
- umount: Allow superblock owners to force umount
- x86/mm: Clear _PAGE_DIRTY for kernel mappings when we clear _PAGE_RW
- x86/ia32: Leave NULL selector values 0~3 unchanged
- x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD
when running in a virtual machine
- perf: arm_pmu: Don't disable counter in armpmu_add()
- arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
- xen/mcelog: Add __nonstring annotations for unterminated strings
- zstd: Increase DYNAMIC_BMI2 GCC version cutoff from 4.8 to 11.0 to work
around compiler segfault
- ASoC: SOF: topology: Use krealloc_array() to replace krealloc()
- HID: pidff: Convert infinite length from Linux API to PID standard
- HID: pidff: Do not send effect envelope if it's empty
- HID: pidff: Add MISSING_DELAY quirk and its detection
- HID: pidff: Add MISSING_PBO quirk and its detection
- HID: pidff: Add PERMISSIVE_CONTROL quirk
- HID: pidff: Add hid_pidff_init_with_quirks and export as GPL symbol
- HID: pidff: Add FIX_WHEEL_DIRECTION quirk
- HID: Add hid-universal-pidff driver and supported device ids
- [Config] enable hid-universal-pidff driver
- HID: pidff: Add PERIODIC_SINE_ONLY quirk
- ALSA: hda: intel: Fix Optimus when GPU has no sound
- ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist
- ASoC: fsl_audmix: register card device depends on 'dais' property
- media: uvcvideo: Add quirk for Actions UVC05
- mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves
- ALSA: usb-audio: Fix CME quirk for UF series keyboards
- ASoC: amd: Add DMI quirk for ACP6X mic support
- ASoC: amd: yc: update quirk data for new Lenovo model
- f2fs: don't retry IO for corrupted data scenario
- scsi: target: spc: Fix RSOC parameter data header size
- net: usb: asix_devices: add FiberGecko DeviceID
- fs/jfs: cast inactags to s64 to prevent potential overflow
- ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
- net: sfp: add quirk for 2.5G OEM BX SFP
- ahci: add PCI ID for Marvell 88SE9215 SATA Controller
- ext4: protect ext4_release_dquot against freezing
- Revert "f2fs: rebuild nat_bits during umount"
- cdc_ether|r8152: ThinkPad Hybrid USB-C/A Dock quirk
- wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
- tracing: fix return value in __ftrace_event_enable_disable for
TRACE_REG_UNREGISTER
- Bluetooth: hci_uart: fix race during initialization
- Bluetooth: qca: simplify WCN399x NVM loading
- drm: allow encoder mode_set even when connectors change for crtc
- drm/amd/display: Update Cursor request mode to the beginning prefetch
always
- drm/amd/display: add workaround flag to link to force FFE preset
- drm: panel-orientation-quirks: Add support for AYANEO 2S
- drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB
- drm: panel-orientation-quirks: Add quirk for AYA NEO Slide
- drm: panel-orientation-quirks: Add new quirk for GPD Win 2
- drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel)
- drm/bridge: panel: forbid initializing a panel with unknown connector
type
- drivers: base: devres: Allow to release group on device release
- drm/amdkfd: clamp queue size to minimum
- drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
- drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data
- drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
- drm/amdgpu: grab an additional reference on the gang fence v2
- tracing: probe-events: Add comments about entry data storing code
- ktest: Fix Test Failures Due to Missing LOG_FILE Directories
- tpm, tpm_tis: Workaround failed command reception on Infineon devices
- pwm: rcar: Improve register calculation
- pwm: fsl-ftm: Handle clk_get_rate() returning 0
- bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
- ext4: don't treat fhandle lookup of ea_inode as FS corruption
- dt-bindings: media: st,stmipid02: correct lane-polarities maxItems
- media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning
- media: i2c: adv748x: Fix test pattern selection mask
- media: vim2m: print device name after registering device
- media: siano: Fix error handling in smsdvb_module_init()
- xenfs/xensyms: respect hypervisor's "next" indication
- arm64: cputype: Add MIDR_CORTEX_A76AE
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe
list
- spi: cadence-qspi: Fix probe on AM62A LP SK
- tpm, tpm_tis: Fix timeout handling when waiting for TPM status
- media: streamzap: prevent processing IR data on URB failure
- media: visl: Fix ERANGE error when setting enum controls
- media: platform: stm32: Add check for clk_enable()
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
- media: i2c: ccs: Set the device's runtime PM status correctly in remove
- media: i2c: ccs: Set the device's runtime PM status correctly in probe
- media: i2c: ov7251: Set enable GPIO low in probe
- media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
- media: i2c: imx219: Rectify runtime PM handling in probe and remove
- mptcp: sockopt: fix getting IPV6_V6ONLY
- mtd: Add check for devm_kcalloc()
- net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320
family
- mtd: Replace kcalloc() with devm_kcalloc()
- clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init
wakeup
- wifi: mt76: Add check for devm_kstrdup()
- wifi: mac80211: fix integer overflow in hwmp_route_info_get()
- io_uring/kbuf: reject zero sized provided buffers
- ASoC: q6apm: add q6apm_get_hw_pointer helper
- ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment.
- ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns.
- ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
- f2fs: fix to avoid atomicity corruption of atomic file
- vdpa/mlx5: Fix oversized null mkey longer than 32bit
- udf: Fix inode_getblk() return value
- smb311 client: fix missing tcon check when mounting with linux/posix
extensions
- i3c: master: svc: Use readsb helper for reading MDB
- leds: rgb: leds-qcom-lpg: Fix pwm resolution max for Hi-Res PWMs
- leds: rgb: leds-qcom-lpg: Fix calculation of best period Hi-Res PWMs
- mailbox: tegra-hsp: Define dimensioning masks in SoC data
- locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
- lib: scatterlist: fix sg_split_phys to preserve original scatterlist
offsets
- mptcp: only inc MPJoinAckHMacFailure for HMAC failures
- mtd: rawnand: Add status chack in r852_ready()
- arm64: mm: Correct the update of max_pfn
- arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
- btrfs: fix non-empty delayed iputs list on unmount due to compressed
write workers
- btrfs: zoned: fix zone activation with missing devices
- btrfs: zoned: fix zone finishing with missing devices
- iommufd: Fix uninitialized rc in iommufd_access_rw()
- sparc/mm: disable preemption in lazy mmu mode
- sparc/mm: avoid calling arch_enter/leave_lazy_mmu() in set_ptes
- mm/rmap: reject hugetlb folios in folio_make_device_exclusive()
- mm: make page_mapped_in_vma() hugetlb walk aware
- mm: fix lazy mmu docs and usage
- mm/mremap: correctly handle partial mremap() of VMA starting at 0
- mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
- mm/userfaultfd: fix release hang over concurrent GUP
- mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
- mm/hugetlb: move hugetlb_sysctl_init() to the __init section
- x86/xen: fix balloon target initialization for PVH dom0
- tracing: Do not add length to print format in synthetic events
- thermal/drivers/rockchip: Add missing rk3328 mapping entry
- cifs: fix integer overflow in match_server()
- clk: qcom: clk-branch: Fix invert halt status bit check for votable
clocks
- clk: qcom: gdsc: Release pm subdomains in reverse add order
- clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code
- clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
- crypto: ccp - Fix check for the primary ASP device
- dm-ebs: fix prefetch-vs-suspend race
- dm-integrity: set ti->error on memory allocation failure
- dm-verity: fix prefetch-vs-suspend race
- dt-bindings: coresight: qcom,coresight-tpda: Fix too many 'reg'
- dt-bindings: coresight: qcom,coresight-tpdm: Fix too many 'reg'
- gpio: tegra186: fix resource handling in ACPI probe path
- gpio: zynq: Fix wakeup source leaks on device unbind
- gve: handle overflow when reporting TX consumed descriptors
- KVM: x86: Explicitly zero-initialize on-stack CPUID unions
- ntb: use 64-bit arithmetic for the MSI doorbell mask
- of/irq: Fix device node refcount leakage in API of_irq_parse_one()
- of/irq: Fix device node refcount leakage in API of_irq_parse_raw()
- of/irq: Fix device node refcount leakages in of_irq_count()
- of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
- of/irq: Fix device node refcount leakages in of_irq_init()
- PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
- PCI: Fix reference leak in pci_alloc_child_bus()
- phy: freescale: imx8m-pcie: assert phy reset and perst in power off
- pinctrl: qcom: Clear latched interrupt status when changing IRQ type
- selftests: mptcp: close fd_in before returning in main_loop
- selftests: mptcp: fix incorrect fd checks in main_loop
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected()
lists
- ACPI: platform-profile: Fix CFI violation when accessing sysfs files
- iommufd: Fail replace if device has not been attached
- x86/e820: Fix handling of subpage regions when calculating nosave ranges
in e820__register_nosave_regions()
- media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef
noinline
- Bluetooth: hci_uart: Fix another race during initialization
- scsi: hisi_sas: Enable force phy when SATA disk directly connected
- wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
- scsi: iscsi: Fix missing scsi_host_put() in error path
- md/raid10: fix missing discard IO accounting
- md/md-bitmap: fix stats collection for external bitmaps
- ASoC: dwc: always enable/disable i2s irqs
- ovl: remove unused forward declaration
- RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
- RDMA/hns: Fix wrong maximum DMA segment size
- ASoC: cs42l43: Reset clamp override on jack removal
- Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid
address
- Bluetooth: l2cap: Check encryption key size on incoming connection
- Revert "wifi: mac80211: Update skb's control block key in
ieee80211_tx_dequeue()"
- igc: increase wait time before retrying PTM
- igc: move ktime snapshot into PTM retry loop
- igc: handle the IGC_PTP_ENABLED flag correctly
- igc: cleanup PTP module if probe fails
- igc: add lock preventing multiple simultaneous PTM transactions
- test suite: use %zu to print size_t
- pds_core: fix memory leak in pdsc_debugfs_add_qcq()
- net: ethernet: ti: am65-cpsw-nuss: rename phy_node -> port_np
- net: ethernet: ti: am65-cpsw: fix port_np reference counting
- ata: libata-sata: Save all fields from sense data descriptor
- netlink: specs: rt-link: add an attr layer around alt-ifname
- netlink: specs: rt-link: adjust mctp attribute naming
- net: b53: enable BPDU reception for management port
- net: bridge: switchdev: do not notify new brentries as changed
- net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del()
fails
- ptp: ocp: fix start time alignment in ptp_ocp_signal_set
- net: ti: icss-iep: Add pwidth configuration for perout signal
- net: ti: icss-iep: Add phase offset configuration for perout signal
- net: ethernet: mtk_eth_soc: correct the max weight of the queue limit
for 100Mbps
- net: ethernet: mtk_eth_soc: revise QDMA packet scheduler settings
- riscv: Properly export reserved regions in /proc/iomem
- kunit: qemu_configs: SH: Respect kunit cmdline
- riscv: KGDB: Do not inline arch_kgdb_breakpoint()
- riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
- cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
- writeback: fix false warning in inode_to_wb()
- ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
- ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
- asus-laptop: Fix an uninitialized variable
- nfs: add missing selections of CONFIG_CRC32
- nfsd: decrease sc_count directly if fail to queue dl_recall
- i2c: atr: Fix wrong include
- ftrace: fix incorrect hash size in register_ftrace_direct()
- Bluetooth: l2cap: Process valid commands in too long frame
- Bluetooth: vhci: Avoid needless snprintf() calls
- btrfs: correctly escape subvol in btrfs_show_options()
- crypto: caam/qi - Fix drv_ctx refcount bug
- Revert "UBUNTU: SAUCE: fs: hfs/hfsplus: add key_len boundary check to
hfs_bnode_read_key"
- hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
- loop: properly send KOBJ_CHANGED uevent for disk device
- loop: LOOP_SET_FD: send uevents for partitions
- mm/gup: fix wrongly calculated returned value in
fault_in_safe_writeable()
- mm: fix filemap_get_folios_contig returning batches of identical folios
- mm: fix apply_to_existing_page_range()
- ksmbd: Prevent integer overflow in calculation of deadtime
- Revert "smb: client: fix TCP timers deadlock after rmmod"
- riscv: Avoid fortify warning in syscall_get_arguments()
- selftests/mm: generate a temporary mountpoint for cgroup filesystem
- smb3 client: fix open hardlink on deferred close file error
- string: Add load_unaligned_zeropad() code path to sized_strscpy()
- tracing: Fix filter string testing
- x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any
unreleased standalone Zen5 microcode patches
- x86/cpu/amd: Fix workaround for erratum 1054
- x86/boot/sev: Avoid shared GHCB page for early memory acceptance
- scsi: megaraid_sas: Block zero-length ATA VPD inquiry
- scsi: ufs: exynos: Ensure consistent phy reference counts
- perf/x86/intel: Allow to update user space GPRs from PEBS records
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
- perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
- drm/repaper: fix integer overflows in repeat functions
- drm/msm/a6xx: Fix stale rpmh votes from GPU
- drm/amd: Handle being compiled without SI or CIK support better
- drm/amdgpu/dma_buf: fix page_link check
- drm/sti: remove duplicate object names
- drm/i915/gvt: fix unterminated-string-initialization warning
- io_uring/net: fix accept multishot handling
- cpufreq: Reference count policy in cpufreq_update_limits()
- kbuild: Add '-fno-builtin-wcslen'
- mptcp: sockopt: fix getting freebind & transparent
- misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
- efi/libstub: Bump up EFI_MMAP_NR_SLACK_SLOTS to 32
- x86/xen: move xen_reserve_extra_memory()
- x86/xen: fix memblock_reserve() usage on PVH
- x86/split_lock: Fix the delayed detection logic
- LoongArch: Eliminate superfluous get_numa_distances_cnt()
- Revert "usb: typec: fix potential array underflow in
ucsi_ccg_sync_control()"
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
- landlock: Add the errata interface
- nvmet-fc: Remove unused functions
- xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
- sign-file,extract-cert: move common SSL helper functions to a header
- sign-file,extract-cert: avoid using deprecated ERR_get_error_line()
- sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3
- MIPS: dec: Declare which_prom() as static
- MIPS: cevt-ds1287: Add missing ds1287.h include
- MIPS: ds1287: Match ds1287_set_base_clock() function types
- drm/tests: Build KMS helpers when DRM_KUNIT_TEST_HELPERS is enabled
- ASoC: Intel: adl: add 2xrt1316 audio configuration
- cgroup/cpuset: Fix incorrect isolated_cpus update in
update_parent_effective_cpumask()
- cgroup/cpuset: Correct invalid remote parition prs
- cgroup/cpuset: Fix error handling in remote_partition_disable()
- cgroup/cpuset: Revert "Allow suppression of sched domain rebuild in
update_cpumasks_hier()"
- cgroup/cpuset: Enforce at most one rebuild_sched_domains_locked() call
per operation
- cgroup/cpuset: Further optimize code if CONFIG_CPUSETS_V1 not set
- cgroup/cpuset: Fix race between newly created partition and dying one
- gpiolib: of: Fix the choice for Ingenic NAND quirk
- ublk: refactor recovery configuration flag helpers
- net: phy: move phy_link_change() prior to mdio_bus_phy_may_suspend()
- iommu/exynos: Fix suspend/resume with IDENTITY domain
- perf/dwc_pcie: fix some unreleased resources
- Flush console log from kernel_power_off()
- ASoC: amd: ps: use macro for ACP6.3 pci revision id
- media: s5p-mfc: Corrected NV12M/NV21M plane-sizes
- wifi: ath11k: Fix DMA buffer allocation to resolve SWIOTLB issues
- wifi: ath11k: fix memory leak in ath11k_xxx_remove()
- wifi: mac80211: ensure sdata->work is canceled before initialized.
- can: flexcan: Add quirk to handle separate interrupt lines for mailboxes
- can: flexcan: add NXP S32G2/S32G3 SoC support
- Bluetooth: btusb: Add 2 HWIDs for MT7922
- Bluetooth: Add quirk for broken READ_VOICE_SETTING
- Bluetooth: Add quirk for broken READ_PAGE_SCAN_TYPE
- drm/debugfs: fix printk format for bridge index
- drm/amd/display: stop DML2 from removing pipes based on planes
- drm/xe/xelp: Move Wa_16011163337 from tunings to workarounds
- PCI: Add Rockchip Vendor ID
- HID: pidff: Clamp PERIODIC effect period to device's logical range
- HID: pidff: Stop all effects before enabling actuators
- HID: pidff: Completely rework and fix pidff_reset function
- HID: pidff: Simplify pidff_upload_effect function
- HID: pidff: Define values used in pidff_find_special_fields
- HID: pidff: Rescale time values to match field units
- HID: pidff: Factor out code for setting gain
- HID: pidff: Move all hid-pidff definitions to a dedicated header
- HID: pidff: Simplify pidff_rescale_signed
- HID: pidff: Use macros instead of hardcoded min/max values for shorts
- HID: pidff: Factor out pool report fetch and remove excess declaration
- HID: hid-universal-pidff: Add Asetek wheelbases support
- HID: pidff: Comment and code style update
- HID: pidff: Support device error response from PID_BLOCK_LOAD
- HID: pidff: Remove redundant call to pidff_find_special_keys
- HID: pidff: Rename two functions to align them with naming convention
- HID: pidff: Clamp effect playback LOOP_COUNT value
- HID: pidff: Compute INFINITE value instead of using hardcoded 0xffff
- HID: pidff: Fix 90 degrees direction name North -> East
- HID: pidff: Fix set_device_control()
- media: mgb4: Fix CMT registers update logic
- media: mgb4: Fix switched CMT frequency range "magic values" sets
- media: rockchip: rga: fix rga offset lookup
- media: v4l: Add a helper for setting up link-frequencies control
- media: v4l2-common.h: kerneldoc: correctly format return values
- media: imx219: Adjust PLL settings based on the number of MIPI lanes
- media: nuvoton: Fix reference handling of ece_node
- media: nuvoton: Fix reference handling of ece_pdev
- media: i2c: imx319: Rectify runtime PM handling probe and remove
- media: i2c: imx214: Rectify probe error handling related to runtime PM
- media: chips-media: wave5: Fix gray color on screen
- media: chips-media: wave5: Fix a hang after seeking
- wifi: mt76: mt7925: ensure wow pattern command align fw format
- wifi: mt76: mt7925: fix country count limitation for CLC
- ALSA: hda/realtek: Enable Mute LED on HP OMEN 16 Laptop xd000xx
- accel/ivpu: Fix warning in ivpu_ipc_send_receive_internal()
- ima: limit the number of open-writers integrity violations
- arm64: dts: exynos: gs101: disable pinctrl_gsacore node
- btrfs: tests: fix chunk map leak after failure to add it to the tree
- mm/damon/ops: have damon_get_folio return folio even for tail pages
- CIFS: Propagate min offload along with other parameters from primary to
secondary channels.
- dm-integrity: fix non-constant-time tag verification
- landlock: Move code to ease future backports
- landlock: Add erratum for TCP fix
- misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq'
error
- net: mana: Switch to page pool for jumbo frames
- PCI: j721e: Fix the value of .linkdown_irq_regfield for J784S4
- pinctrl: samsung: add support for eint_fltcon_offset
- s390/virtio_ccw: Don't allocate/assign airqs for non-existing queues
- thermal/drivers/mediatek/lvts_thermal: Allow early empty sensor slots
- thermal/drivers/mediatek/lvts_thermal: Fix wrong lvts_ctrl index
- thermal/drivers/mediatek/lvts: Disable monitor mode during suspend
- thermal/drivers/mediatek/lvts: Disable Stage 3 thermal threshold
- NFSD: fix decoding in nfs4_xdr_dec_cb_getattr
- libbpf: Prevent compiler warnings/errors
- Upstream stable to v6.6.88, v6.12.24
- SAUCE: Enable upstream config option "CONFIG_CPUSETS_V1"
* [SRU] ixgbe: Add support for E610 in Noble (LP: #2131265)
- ixgbe: Add support for E610 FW Admin Command Interface
- ixgbe: Add support for E610 device capabilities detection
- ixgbe: Add link management support for E610 device
- ixgbe: Add support for NVM handling in E610 device
- ixgbe: Add support for EEPROM dump in E610 device
- ixgbe: Add ixgbe_x540 multiple header inclusion protection
- ixgbe: Clean up the E610 link management related code
- ixgbe: Enable link management in E610 device
- ixgbe: fix media type detection for E610 device
- ixgbe: fix media cage present detection for E610 device
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586)
- io_uring: don't use int for ABI
- ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
- ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
- smb: client: remove redundant lstrp update in negotiate protocol
- gpio: virtio: Fix config space reading.
- gpio: mlxbf2: use platform_get_irq_optional()
- gpio: mlxbf3: use platform_get_irq_optional()
- netlink: avoid infinite retry looping in netlink_unicast()
- net: phy: micrel: fix KSZ8081/KSZ8091 cable test
- net: gianfar: fix device leak when querying time stamp info
- net: enetc: fix device and OF node leak at probe
- net: mtk_eth_soc: fix device leak at probe
- net: ti: icss-iep: fix device and OF node leaks at probe
- net: dpaa: fix device leak when querying time stamp info
- NFSD: detect mismatch of file handle and delegation stateid in OPEN op
- PCI: Extend isolated function probing to LoongArch
- LoongArch: BPF: Fix jump offset calculation in tailcall
- sunvdc: Balance device refcount in vdc_port_mpgroup_check
- Documentation: ACPI: Fix parent device references
- ACPI: processor: perflib: Fix initial _PPC limit application
- ACPI: processor: perflib: Move problematic pr->performance check
- smb: client: let send_done() cleanup before calling
smbd_disconnect_rdma_connection()
- smb: client: don't wait for info->send_pending == 0 on error
- KVM: x86: Plumb "force_immediate_exit" into kvm_entry() tracepoint
- KVM: VMX: Re-enter guest in fastpath for "spurious" preemption timer
exits
- KVM: VMX: Handle forced exit due to preemption timer in fastpath
- KVM: x86: Move handling of is_guest_mode() into fastpath exit handlers
- KVM: VMX: Handle KVM-induced preemption timer exits in fastpath for L2
- KVM: x86: Fully defer to vendor code to decide how to force immediate
exit
- KVM: x86: Convert vcpu_run()'s immediate exit param into a generic
bitmap
- KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
- KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
- KVM: VMX: Extract checking of guest's DEBUGCTL into helper
- KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
- KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
- KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the
guest
- udp: also consider secpath when evaluating ipsec use for checksumming
- net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
- intel_idle: Allow loading ACPI tables for any family
- ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
- arm64: Handle KCOV __init vs inline mismatches
- nvme-pci: try function level reset on init failure
- udf: Verify partition map count
- hfs: fix not erasing deleted b-tree node issue
- better lockdep annotations for simple_recursive_removal()
- ata: libata-sata: Disallow changing LPM state if not supported
- fs/ntfs3: correctly create symlink for relative path
- ext2: Handle fiemap on empty files to prevent EINVAL
- fix locking in efi_secret_unlink()
- securityfs: don't pin dentries twice, once is enough...
- tracefs: Add d_delete to remove negative dentries
- usb: xhci: print xhci->xhc_state when queue_command failed
- platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
- cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
- selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit
time_t
- usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
- usb: xhci: Avoid showing warnings for dying controller
- usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
- usb: xhci: Avoid showing errors during surprise removal
- soc: qcom: rpmh-rsc: Add RSC version 4 support
- remoteproc: imx_rproc: skip clock enable when M-core is managed by the
SCU
- gpio: wcd934x: check the return value of regmap_update_bits()
- cpufreq: Exit governor when failed to start old governor
- PM / devfreq: governor: Replace sscanf() with kstrtoul() in
set_freq_store()
- EDAC/synopsys: Clear the ECC counters on init
- ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was
successed
- thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when
required
- tools/nolibc: define time_t in terms of __kernel_old_time_t
- iio: adc: ad_sigma_delta: don't overallocate scan buffer
- gpio: tps65912: check the return value of regmap_update_bits()
- tools/build: Fix s390(x) cross-compilation with clang
- selftests: tracing: Use mutex_unlock for testing glob filter
- ACPI: PRM: Reduce unnecessary printing to avoid user confusion
- firmware: tegra: Fix IVC dependency problems
- PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
- thermal: sysfs: Return ENODATA instead of EAGAIN for reads
- PM: sleep: console: Fix the black screen issue
- ACPI: processor: fix acpi_object initialization
- mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
- ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
- pps: clients: gpio: fix interrupt handling order in remove path
- reset: brcmstb: Enable reset drivers for ARCH_BCM2835
- char: misc: Fix improper and inaccurate error code returned by
misc_init()
- mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
- mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
- ALSA: hda: Handle the jack polling always via a work
- ALSA: hda: Disable jack polling at shutdown
- x86/bugs: Avoid warning when overriding return thunk
- ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
- ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
- usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
- usb: core: usb_submit_urb: downgrade type check
- pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
- imx8m-blk-ctrl: set ISI panic write hurry level
- soc: qcom: mdt_loader: Actually use the e_phoff
- platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
- platform/chrome: cros_ec_typec: Defer probe on missing EC parent
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
- ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
- ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
- iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
- ASoC: codecs: rt5640: Retry DEVICE_ID verification
- ASoC: qcom: use drvdata instead of component to keep id
- powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
- Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
- xen/netfront: Fix TX response spurious interrupts
- net: usb: cdc-ncm: check for filtering capability
- ktest.pl: Prevent recursion of default variable options
- wifi: cfg80211: reject HTC bit for management frames
- s390/time: Use monotonic clock in get_cycles()
- be2net: Use correct byte order and format string for TCP seq and ack_seq
- wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
- et131x: Add missing check after DMA map
- net: ag71xx: Add missing check after DMA map
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable
- arm64: Mark kernel as tainted on SAE and SError panic
- net: mctp: Prevent duplicate binds
- wifi: cfg80211: Fix interface type validation
- net: ipv4: fix incorrect MTU in broadcast routes
- net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
- net: phy: micrel: Add ksz9131_resume()
- perf/cxlpmu: Remove unintended newline from IRQ name format string
- wifi: iwlwifi: mvm: set gtk id also in older FWs
- um: Re-evaluate thread flags repeatedly
- wifi: iwlwifi: mvm: fix scan request validation
- s390/stp: Remove udelay from stp_sync_clock()
- sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
- wifi: mac80211: don't complete management TX on SAE commit
- (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
- ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in
__ipv6_dev_mc_inc().
- wifi: mac80211: fix rx link assignment for non-MLO stations
- drm/msm: use trylock for debugfs
- wifi: rtw89: Fix rtw89_mac_power_switch() for USB
- wifi: rtw89: Disable deep power saving for USB/SDIO
- wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
- kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
- net: thunderbolt: Enable end-to-end flow control also in transmit
- net: thunderbolt: Fix the parameter passing of
tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
- net: atlantic: add set_power to fw_ops for atl2 to fix wol
- net: fec: allow disable coalescing
- drm/amd/display: Separate set_gsl from set_gsl_source_select
- wifi: ath12k: Add memset and update default rate value in wmi tx
completion
- wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
- wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
- drm/amd/display: Fix 'failed to blank crtc!'
- wifi: mac80211: update radar_required in channel context after channel
switch
- wifi: rtlwifi: fix possible skb memory leak in
`_rtl_pci_rx_interrupt()`.
- wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
- powerpc: floppy: Add missing checks after DMA map
- netmem: fix skb_frag_address_safe with unreadable skbs
- wifi: iwlegacy: Check rate_idx range after addition
- neighbour: add support for NUD_PERMANENT proxy entries
- dpaa_eth: don't use fixed_phy_change_carrier
- drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to
manual
- net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
- net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
- gve: Return error for unknown admin queue command
- net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
- net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
- net: dsa: b53: prevent DIS_LEARNING access on BCM5325
- net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
- bpftool: Fix JSON writer resource leak in version command
- ptp: Use ratelimite for freerun error message
- wifi: rtlwifi: fix possible skb memory leak in
_rtl_pci_init_one_rxdesc()
- ionic: clean dbpage in de-init
- net: ncsi: Fix buffer overflow in fetching version id
- drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
- drm/ttm: Should to return the evict error
- uapi: in6: restore visibility of most IPv6 socket options
- bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
- selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
- drm/amd/display: Avoid trying AUX transactions on disconnected ports
- drm/ttm: Respect the shrinker core free target
- net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
- vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
- vhost: fail early when __vhost_add_used() fails
- drm/amd/display: Only finalize atomic_obj if it was initialized
- drm/amd/display: Avoid configuring PSR granularity if PSR-SU not
supported
- watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race
condition
- cifs: Fix calling CIFSFindFirst() for root path without msearch
- crypto: hisilicon/hpre - fix dma unmap sequence
- clk: tegra: periph: Fix error handling and resolve unsigned compare
warning
- mfd: axp20x: Set explicit ID for AXP313 regulator
- phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
- fs/orangefs: use snprintf() instead of sprintf()
- watchdog: dw_wdt: Fix default timeout
- hwmon: (emc2305) Set initial PWM minimum value during probe based on
thermal state
- clk: qcom: ipq5018: keep XO clock always on
- MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
- watchdog: iTCO_wdt: Report error if timeout configuration fails
- crypto: jitter - fix intermediary handling
- MIPS: lantiq: falcon: sysctrl: fix request memory check logic
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ
control
- leds: leds-lp50xx: Handle reg to get correct multi_index
- dmaengine: stm32-dma: configure next sg only if there are more than 2
sgs
- RDMA/core: reduce stack using in nldev_stat_get_doit()
- power: supply: qcom_battmgr: Add lithium-polymer entry
- scsi: mpt3sas: Correctly handle ATA device errors
- scsi: mpi3mr: Correctly handle ATA device errors
- pinctrl: stm32: Manage irq affinity settings
- media: tc358743: Check I2C succeeded during probe
- media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
- media: tc358743: Increase FIFO trigger level to 374
- media: usb: hdpvr: disable zero-length read messages
- media: uvcvideo: Fix bandwidth issue for Alcor camera
- crypto: octeontx2 - add timeout for load_fvc completion poll
- soundwire: amd: serialize amd manager resume sequence during pm_prepare
- soundwire: Move handle_nested_irq outside of sdw_dev_lock
- md: dm-zoned-target: Initialize return variable r to avoid uninitialized
use
- module: Prevent silent truncation of module name in delete_module(2)
- i3c: add missing include to internal header
- rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
- i3c: don't fail if GETHDRCAP is unsupported
- i3c: master: Initialize ret in i3c_i2c_notifier_call()
- dm-mpath: don't print the "loaded" message if registering fails
- dm-table: fix checking for rq stackable devices
- apparmor: use the condition in AA_BUG_FMT even with debug disabled
- i2c: Force DLL0945 touchpad i2c freq to 100khz
- f2fs: check the generic conditions first
- kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
- vfio/type1: conditional rescheduling while pinning
- kconfig: nconf: Ensure null termination where strncpy is used
- scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
- scsi: target: core: Generate correct identifiers for PR OUT transport
IDs
- scsi: aacraid: Stop using PCI_IRQ_AFFINITY
- vfio/mlx5: fix possible overflow in tracking max message size
- ipmi: Use dev_warn_ratelimited() for incorrect message warnings
- kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
- kconfig: gconf: fix potential memory leak in renderer_edited()
- kconfig: lxdialog: fix 'space' to (de)select options
- ipmi: Fix strcpy source and destination the same
- net: phy: smsc: add proper reset flags for LAN8710A
- ASoC: Intel: avs: Fix uninitialized pointer error in probe()
- pNFS: Fix stripe mapping in block/scsi layout
- pNFS: Fix disk addr range check in block/scsi layout
- pNFS: Handle RPC size limit for layoutcommits
- rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
- scsi: lpfc: Remove redundant assignment to avoid memory leak
- ASoC: fsl_sai: replace regmap_write with regmap_update_bits
- cifs: reset iface weights when we cannot find a candidate
- iommufd: Report unmapped bytes in the error path of
iopt_unmap_iova_range
- ext4: fix zombie groups in average fragment size lists
- ext4: fix largest free orders lists corruption on mb_optimize_scan
switch
- misc: rtsx: usb: Ensure mmc child device is active when card is present
- usb: typec: ucsi: Update power_supply on power role change
- thunderbolt: Fix copy+paste error in match_service_id()
- cdc-acm: fix race between initial clearing halt and open
- btrfs: zoned: use filesystem size not disk size for reclaim decision
- btrfs: abort transaction during log replay if walk_log_tree() failed
- btrfs: zoned: do not remove unwritten non-data block group
- btrfs: clear dirty status from extent buffer on error at
insert_new_root()
- btrfs: fix log tree replay failure due to file with 0 links and extents
- btrfs: zoned: do not select metadata BG as finish target
- parisc: Makefile: fix a typo in palo.conf
- media: uvcvideo: Do not mark valid metadata as invalid
- tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
- HID: magicmouse: avoid setting up battery timer when not needed
- HID: apple: avoid setting up battery timer for devices without battery
- rcu: Fix racy re-initialization of irq_work causing hangs
- cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
- platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
- m68k: Fix lost column on framebuffer debug console
- usb: atm: cxacru: Merge cxacru_upload_firmware() into
cxacru_heavy_init()
- usb: gadget: udc: renesas_usb3: fix device leak at unbind
- usb: musb: omap2430: fix device leak at unbind
- usb: dwc3: meson-g12a: fix device leaks at unbind
- bus: mhi: host: Fix endianness of BHI vector table
- vt: keyboard: Don't process Unicode characters in K_OFF mode
- vt: defkeymap: Map keycodes above 127 to K_HOLE
- lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
- crypto: qat - lower priority for skcipher and aead algorithms
- ksmbd: extend the connection limiting mechanism to support IPv6
- tracing: fprobe-event: Sanitize wildcard for fprobe event name
- ext4: check fast symlink for ea_inode correctly
- ext4: fix fsmap end of range reporting with bigalloc
- ext4: fix reserved gdt blocks handling in fsmap
- ext4: don't try to clear the orphan_present feature block device is r/o
- ext4: use kmalloc_array() for array space allocation
- ext4: fix hole length calculation overflow in non-extent inodes
- btrfs: zoned: fix write time activation failure for metadata block group
- arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
- arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
- arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
- dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
- dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks
constraints
- scsi: mpi3mr: Fix race between config read submit and interrupt
completion
- ata: libata-scsi: Fix ata_to_sense_error() status handling
- scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like
host controllers
- scsi: ufs: ufs-pci: Fix default runtime and system PM levels
- ata: libata-scsi: Fix CDL control
- zynq_fpga: use sgtable-based scatterlist wrappers
- iio: adc: ad_sigma_delta: change to buffer predisable
- wifi: brcmsmac: Remove const from tbl_ptr parameter in
wlc_lcnphy_common_read_table()
- wifi: ath12k: fix dest ring-buffer corruption
- wifi: ath12k: fix source ring-buffer corruption
- wifi: ath12k: fix dest ring-buffer corruption when ring is full
- wifi: ath11k: fix dest ring-buffer corruption
- wifi: ath11k: fix source ring-buffer corruption
- wifi: ath11k: fix dest ring-buffer corruption when ring is full
- pwm: imx-tpm: Reset counter if CMOD is 0
- pwm: mediatek: Handle hardware enable and clock enable separately
- pwm: mediatek: Fix duty and period setting
- hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
- mtd: spi-nor: Fix spi_nor_try_unlock_all()
- mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
- mtd: rawnand: fsmc: Add missing check after DMA map
- mtd: rawnand: renesas: Add missing check after DMA map
- PCI: endpoint: Fix configfs group removal on driver teardown
- vhost/vsock: Avoid allocating arbitrarily-sized SKBs
- phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization
sequence
- soc/tegra: pmc: Ensure power-domains are in a known state
- parisc: Check region is readable by user in raw_copy_from_user()
- parisc: Define and use set_pte_at()
- parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit
compilers
- parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
- parisc: Try to fixup kernel exception in bad_area_nosemaphore path of
do_page_fault()
- parisc: Update comments in make_insert_tlb
- media: gspca: Add bounds checking to firmware parser
- media: hi556: correct the test pattern configuration
- media: imx: fix a potential memory leak in
imx_media_csc_scaler_device_init()
- media: vivid: fix wrong pixel_array control size
- media: verisilicon: Fix AV1 decoder clock frequency
- media: v4l2-ctrls: Don't reset handler's error in
v4l2_ctrl_handler_free()
- media: ov2659: Fix memory leaks in ov2659_probe()
- media: qcom: camss: cleanup media device allocated resource on error
path
- media: venus: hfi: explicitly release IRQ during teardown
- media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
- media: venus: venc: Clamp param smaller than 1fps and bigger than 240
- drm/amd: Restore cached power limit during resume
- drm/amdgpu: update mmhub 3.0.1 client id mappings
- drm/amd/display: Add primary plane to commits for correct VRR handling
- drm/amd/display: Don't overwrite dce60_clk_mgr
- mptcp: drop skb if MPTCP skb extension allocation fails
- mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
- selftests/memfd: add test for mapping write-sealed memfd read-only
- net: Add net_passive_inc() and net_passive_dec().
- smb: client: fix netns refcount leak after net_passive changes
- net_sched: sch_ets: implement lockless ets_dump()
- leds: flash: leds-qcom-flash: Limit LED current based on thermal
condition
- leds: flash: leds-qcom-flash: Fix registry access after re-bind
- fscrypt: Don't use problematic non-inline crypto engines
- block: Make REQ_OP_ZONE_FINISH a write operation
- usb: typec: fusb302: cache PD RX state
- btrfs: don't ignore inode missing when replaying log tree
- btrfs: move transaction aborts to the error site in
add_block_group_free_space()
- btrfs: always abort transaction on failure to add block group to free
space tree
- xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
- btrfs: fix ssd_spread overallocation
- btrfs: constify more pointer parameters
- btrfs: populate otime when logging an inode item
- btrfs: send: factor out common logic when sending xattrs
- btrfs: send: only use boolean variables at process_recorded_refs()
- btrfs: send: add and use helper to rename current inode when processing
refs
- btrfs: send: keep the current inode's path cached
- btrfs: send: avoid path allocation for the current inode when issuing
commands
- btrfs: send: use fallocate for hole punching with send stream v2
- btrfs: send: make fs_path_len() inline and constify its argument
- wifi: mac80211: check basic rates validity in sta_link_apply_parameters
- usb: dwc3: imx8mp: fix device leak at unbind
- ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
- PM: runtime: Take active children into account in
pm_runtime_get_if_in_use()
- ata: libata-scsi: Return aborted command when missing sense and result
TF
- kbuild: userprogs: use correct linker when mixing clang and GNU ld
- memstick: Fix deadlock by moving removing flag earlier
- mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for
consistency
- squashfs: fix memory leak in squashfs_fill_super
- mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
- ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and
EliteBook 830 G6
- drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
- drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
- drm/amd/display: Find first CRTC and its line time in
dce110_fill_display_configs
- drm/amd/display: Fill display clock and vblank time in
dce110_fill_display_configs
- soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
- PCI: rockchip: Use standard PCIe definitions
- PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
- PCI: imx6: Delay link start until configfs 'start' written
- PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in
epc_features
- scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
- scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
- ext4: preserve SB_I_VERSION on remount
- arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
- mptcp: remove duplicate sk_reset_timer call
- mptcp: disable add_addr retransmission when timeout is 0
- selftests: mptcp: pm: check flush doesn't reset limits
- mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
- mmc: sdhci-pci-gli: Add a new function to simplify the code
- cpuidle: menu: Remove iowait influence
- cpuidle: governors: menu: Avoid selecting states with too much latency
- fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
- iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
- iio: proximity: isl29501: fix buffered read on big-endian systems
- most: core: Drop device reference after usage in get_channel()
- cdx: Fix off-by-one error in cdx_rpmsg_probe()
- usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash
Drive
- usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE
test
- usb: renesas-xhci: Fix External ROM access timeouts
- USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
- usb: storage: realtek_cr: Use correct byte order for bcs->Residue
- USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
- usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
- usb: dwc3: pci: add support for the Intel Wildcat Lake
- drm/amd/display: Don't overclock DCE 6 by 15%
- compiler: remove __ADDRESSABLE_ASM{_STR,}() again
- mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
- powerpc/boot: Fix build with gcc 15
- tracing: Remove unneeded goto out logic
- iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
- iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8)
to aligned_s64
- iio: imu: inv_icm42600: use = { } instead of memset()
- iio: imu: inv_icm42600: Convert to uXX and sXX integer types
- iio: imu: inv_icm42600: change invalid data error to -EBUSY
- usb: xhci: Fix slot_id resource race conflict
- usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and
port is clean
- usb: typec: maxim_contaminant: disable low power mode when reading
comparator values
- spi: spi-fsl-lpspi: Clamp too high speed_hz
- cgroup/cpuset: Use static_branch_enable_cpuslocked() on
cpusets_insane_config_key
- iosys-map: Fix undefined behavior in iosys_map_clear()
- RDMA/erdma: Fix ignored return value of init_kernel_qp
- RDMA/bnxt_re: Fix to do SRQ armena by default
- RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
- RDMA/bnxt_re: Fix to initialize the PBL array
- Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
- Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
- mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
- ALSA: usb-audio: Fix size validation in convert_chmap_v3()
- ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
- net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
- phy: mscc: Fix timestamping for vsc8584
- net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
- LoongArch: Optimize module load time by optimizing PLT/GOT counting
- ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
- igc: fix disabling L1.2 PCI-E link substate on I226 on init
- net/sched: Remove unnecessary WARNING condition for empty child qdisc in
htb_activate
- bonding: update LACP activity flag after setting lacp_active
- bonding: Add independent control state machine
- bonding: send LACPDUs periodically in passive mode after receiving
partner's LACPDU
- Octeontx2-af: Skip overlap check for SPI field
- net/mlx5: Base ECVF devlink port attrs from 0
- net/mlx5e: Preserve shared buffer capacity during headroom updates
- ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs
- s390/hypfs: Enable limited access during lockdown
- alloc_fdtable(): change calling conventions.
- LoongArch: Avoid in-place string operation on FDT content
- clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD
- mm/memory-tier: fix abstract distance calculation overflow
- nvme-tcp: log TLS handshake failures at error level
- ata: ahci: Disallow LPM policy control if not supported
- ata: ahci: Disable DIPM if host lacks support
- usb: typec: tcpm/tcpci_maxim: fix irq wake usage
- pmdomain: ti: Select PM_GENERIC_DOMAINS
- cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
- platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready
- ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless
mode
- tty: serial: fix print format specifiers
- netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps
- wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn
- idpf: preserve coalescing settings across resets
- wifi: mac80211: don't unreserve never reserved chanctx
- sched/deadline: Fix accounting after global limits change
- wifi: mac80211: avoid weird state in error path
- perf/arm: Add missing .suppress_bind_attrs
- drm/imagination: Clear runtime PM errors while resetting the GPU
- drm/xe/xe_query: Use separate iterator while filling GT list
- wifi: ath12k: Fix station association with MBSSID Non-TX BSS
- lib: packing: Include necessary headers
- arm64: stacktrace: Check kretprobe_find_ret_addr() return value
- net: dsa: b53: ensure BCM5325 PHYs are enabled
- drm/amd/display: Update DMCUB loading sequence for DCN3.5
- drm/amd/display: Disable dsc_power_gate for dcn314 by default
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in
BNXT_RE_METHOD_GET_TOGGLE_MEM
- media: ipu-bridge: Add _HID for OV5670
- scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in
dev_loss_tmo_callbk
- media: uvcvideo: Add quirk for HP Webcam HD 2300
- crypto: ccp - Add missing bootloader info reg for pspv6
- soundwire: amd: cancel pending slave status handling workqueue during
remove sequence
- tools/power turbostat: Fix build with musl
- tools/power turbostat: Handle cap_get_proc() ENOSYS
- smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in
_smbd_get_connection
- lib/sbitmap: convert shallow_depth from one word to the whole sbitmap
- drm/amdgpu: fix vram reservation issue
- btrfs: qgroup: set quota enabled bit if quota disable fails flushing
reservations
- btrfs: qgroup: fix qgroup create ioctl returning success after quotas
disabled
- btrfs: don't skip remaining extrefs if dir not found during log replay
- btrfs: error on missing block group when unaccounting log tree extent
buffers
- btrfs: fix iteration bug in __qgroup_excl_accounting()
- xfs: fix scrub trace with null pointer in quotacheck
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info()
- PCI: Store all PCIe Supported Link Speeds
- PCI: Allow PCI bridges to go to D3Hot on all non-x86
- PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
- ata: libata-sata: Add link_power_management_supported sysfs attribute
- io_uring/rw: cast rw->flags assignment to rwf_t
- PCI: Honor Max Link Speed when determining supported speeds
- ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is
disabled
- crypto: octeontx2 - Fix address alignment issue on ucode loading
- crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2
- crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0
- btrfs: fix incorrect log message for nobarrier mount option
- btrfs: restore mount option info messages during mount
- btrfs: fix printing of mount info messages for NODATACOW/NODATASUM
- apparmor: Fix 8-byte alignment for initial dfa blob streams
- PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
- PCI: imx6: Remove apps_reset toggling from
imx_pcie_{assert/deassert}_core_reset
- amdgpu/amdgpu_discovery: increase timeout limit for IFWI init
- ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume
context
- drm/amdgpu/discovery: fix fw based ip discovery
- lib/string_choices: Add str_true_false()/str_false_true() helper
- USB: typec: Use str_enable_disable-like helpers
- btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb()
- btrfs: explicitly ref count block_group on new_bgs list
- btrfs: codify pattern for adding block_group to bg_list
- btrfs: zoned: requeue to unused block group list if zone finish failed
- drm/vblank: Introduce drm_crtc_vblank_crtc()
- drm/vblank: add dynamic per-crtc vblank configuration support
- drm/amd/display: Fix Xorg desktop unresponsive on Replay panel
- arch: consolidate existing CONFIG_PAGE_SIZE_*KB definitions
- arch: simplify architecture specific page size configuration
- [Config] update page size configuration
- arch: define CONFIG_PAGE_SIZE_*KB on all architectures
- [Config] update page size on all architectures
- Mark xe driver as BROKEN if kernel page size is not 4kB
- [Config] disable xe driver where page size is not 4kB
- arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot
- arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC
- arm64: dts: ti: k3-am6*: Add bootph-all property in MMC node
- arm64: dts: ti: k3-am6*: Remove DLL properties for soft PHYs
- arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC
- arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file
- kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq()
- drm/i915/icl+/tc: Convert AUX powered WARN to a debug message
- drm/i915/display: add intel_encoder_is_*() and _to_*() functions
- drm/i915/icl+/tc: Cache the max lane count value
- ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp()
- cgroup/cpuset: Fix a partition error with CPU hotplug
- drm/tests: Fix endian warning
- RDMA/bnxt_re: Fix a possible memory leak in the driver
- RDMA/hns: Fix dip entries leak on devices newer than hip09
- net: xilinx: axienet: Fix RX skb ring management in DMAengine mode
- drm/hisilicon/hibmc: refactored struct hibmc_drm_private
- drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init
failed
- drm/amd/display: Don't print errors for nonexistent connectors
- net: dsa: microchip: Fix KSZ9477 HSR port setup issue
- net/mlx5: Relocate function declarations from port.h to mlx5_core.h
- net/mlx5e: Extract checking of FEC support for a link mode
- net/mlx5e: Support FEC settings for 100G/lane modes
- net/mlx5: Add IFC bits and enums for buf_ownership
- net/mlx5e: Query FW for buffer ownership
- Upstream stable to v6.6.103, v6.12.43, v6.12.44
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39779
- btrfs: subpage: keep TOWRITE tag until folio is cleaned
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39759
- btrfs: qgroup: fix race between quota disable and quota rescan ioctl
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39705
- drm/amd/display: fix a Null pointer dereference vulnerability
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39707
- drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39712
- media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38686
- userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38703
- drm/xe: Make dma-fences compliant with the safe access rules
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39746
- wifi: ath10k: shutdown driver when hardware is unreliable
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39747
- drm/msm: Add error handling for krealloc in metadata setup
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38704
- rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39748
- bpf: Forget ranges when refining tnum after JSET
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38705
- drm/amd/pm: fix null pointer access
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38710
- gfs2: Validate i_depth for exhash directories
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38722
- habanalabs: fix UAF in export_dmabuf()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38732
- netfilter: nf_reject: don't leak dst refcount for loopback packets
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39766
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38734
- net/smc: fix UAF on smcsk after smc_listen_out()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38735
- gve: prevent ethtool ops after shutdown
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39673
- ppp: fix race conditions in ppp_fill_forward_path
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39770
- net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39675
- drm/amd/display: Add null pointer check in
mod_hdcp_hdcp1_create_session()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39772
- drm/hisilicon/hibmc: fix the hibmc loaded failed bug
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38676
- iommu/amd: Avoid stack buffer overflow from kernel cmdline
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39676
- scsi: qla4xxx: Prevent a potential error pointer dereference
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39773
- net: bridge: fix soft lockup in br_multicast_query_expired()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39679
- drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39681
- x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39687
- iio: light: as73211: Ensure buffer holes are zeroed
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39683
- tracing: Limit access to parser->buffer when trace_get_user failed
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39801
- usb: dwc3: Remove WARN_ON for device endpoint command timeouts
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39684
- comedi: Fix use of uninitialized memory in do_insn_ioctl() and
do_insnlist_ioctl()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39685
- comedi: pcl726: Prevent invalid irq number
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39686
- comedi: Make insn_rw_emulate_bits() do insn->n samples
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39689
- ftrace: Also allocate and copy hash for reading of filter files
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39691
- fs/buffer: fix use-after-free when call bh_read() helper
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39692
- smb: server: split ksmbd_rdma_stop_listening() out of
ksmbd_rdma_destroy()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39788
- scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39693
- drm/amd/display: Avoid a NULL pointer dereference
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39694
- s390/sclp: Fix SCCB present check
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39776
- mm/debug_vm_pgtable: clear page table entries at destroy_args()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38681
- mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39800
- btrfs: abort transaction on unexpected eb generation at
btrfs_copy_root()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38684
- net/sched: ets: use old 'nbands' while purging unused classes
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-21884
- net: better track kernel sockets lifetime
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39701
- ACPI: pfr_update: Fix the driver update version check
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39702
- ipv6: sr: Fix MAC comparison to be constant-time
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39703
- net, hsr: reject HSR frame if skb can't hold tag
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39706
- drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39709
- media: venus: protect against spurious interrupts during probe
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39710
- media: venus: Add a check for packet size after reading from shared
memory
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39711
- media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable()
calls
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39713
- media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39714
- media: usbtv: Lock resolution while streaming
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39715
- parisc: Revise gateway LWS calls to probe user read access
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39716
- parisc: Revise __get_user() to probe user read access
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39781
- parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39782
- jbd2: prevent softlockup in jbd2_log_do_checkpoint()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38677
- f2fs: fix to avoid out-of-boundary access in dnode page
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39718
- vsock/virtio: Validate length in packet header before skb_put()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39783
- PCI: endpoint: Fix configfs group list head handling
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39719
- iio: imu: bno055: fix OOB access of hw_xlate array
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39787
- soc: qcom: mdt_loader: Ensure we don't read past the ELF header
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39720
- ksmbd: fix refcount leak causing resource not released
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39721
- crypto: qat - flush misc workqueue during device shutdown
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39790
- bus: mhi: host: Detect events pointing to unexpected TREs
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39724
- serial: 8250: fix panic due to PSLVERR
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39758
- RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38679
- media: venus: Fix OOB read due to missing payload bound check
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38680
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39736
- mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39737
- mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38683
- hv_netvsc: Fix panic during namespace deletion with VF
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38685
- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39738
- btrfs: do not allow relocation of partially dropped subvolumes
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38687
- comedi: fix race between polling and detaching
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39760
- usb: core: config: Prevent OOB read in SS endpoint companion parsing
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38688
- iommufd: Prevent ALIGN() overflow
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39739
- iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38691
- pNFS: Fix uninited ptr deref in block/scsi layout
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39795
- block: avoid possible overflow for chunk_sectors check in
blk_stack_limits()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38692
- exfat: add cluster chain loop check for dir
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38693
- media: dvb-frontends: w7090p: fix null-ptr-deref in
w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38694
- media: dvb-frontends: dib7090p: fix null-ptr-deref in
dib7090p_rw_on_apb()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38695
- scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport
structure
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39742
- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38696
- MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38697
- jfs: upper bound check of tree index in dbAllocAG
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38698
- jfs: Regular file corruption check
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39743
- jfs: truncate good inode pages when hard link is 0
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38699
- scsi: bfa: Double-free fix
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38700
- scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is
allocated
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38701
- ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38702
- fbdev: fix potential buffer overflow in do_register_framebuffer()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39744
- rcu: Fix rcu_read_unlock() deadloop due to IRQ work
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39761
- wifi: ath12k: Decrement TID on RX peer frag setup error handling
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39797
- xfrm: Duplicate SPI Handling
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39749
- rcu: Protect ->defer_qs_iw_pending from data race
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39750
- wifi: ath12k: Correct tid cleanup when tid setup fails
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38706
- ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39794
- ARM: tegra: Use I/O memcpy to write to IRAM
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39752
- ARM: rockchip: fix kernel hang during smp initialization
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39763
- ACPI: APEI: send SIGBUS to current task if synchronous memory error not
recovered
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38707
- fs/ntfs3: Add sanity check for file name
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38708
- drbd: add missing kref_get in handle_write_conflicts
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39753
- gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38711
- smb/server: avoid deadlock when linking with ReplaceIfExists
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38712
- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38713
- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38714
- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38715
- hfs: fix slab-out-of-bounds in hfs_bnode_read()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38716
- hfs: fix general protection fault in hfs_find_init()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38718
- sctp: linearize cloned gso packets in sctp_rcv
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38721
- netfilter: ctnetlink: fix refcount leak on table dump
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38614
- eventpoll: Fix semi-unbounded recursion
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39756
- fs: Prevent file descriptor table allocations exceeding INT_MAX
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39798
- NFS: Fix the setting of capabilities when automounting a new filesystem
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38724
- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38730
- io_uring/net: commit partial buffers on retry
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38725
- net: usb: asix_devices: add phy_mask for ax88772 mdio bus
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38728
- smb3: fix for slab out of bounds on mount to ksmbd
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-39757
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
* Noble update: upstream stable patchset 2026-01-06 (LP: #2137586) //
CVE-2025-38729
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too
* CVE-2025-40297
- net: bridge: fix use-after-free due to MST port state bypass
* CVE-2025-40256
- xfrm: also call xfrm_state_delete_tunnel at destroy time for states that
were never added
* CVE-2025-40215
- xfrm: delete x->tunnel as we delete x
* CVE-2025-40214
- af_unix: Initialise scc_index in unix_add_edge().
* CVE-2025-38248
- bridge: mcast: Fix use-after-free during router port configuration
* Enabling crypto selftests causes boot stall on 6.8 (LP: #2135716)
- SAUCE: Revert "crypto: api - Fix boot-up self-test race"
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261)
- ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
- perf/core: Fix the WARN_ON_ONCE is out of lock protected region
- ASoC: cs35l56: probe() should fail if the device ID is not recognized
- Bluetooth: hci_sync: Fix not disabling advertising instance
- Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
- pinctrl: amd: Clear GPIO debounce for suspend
- fix proc_sys_compare() handling of in-lookup dentries
- vsock: fix `vsock_proto` declaration
- vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also
`transport_local`
- net: stmmac: Fix interrupt handling for level-triggered mode in
DWC_XGMAC2
- net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
- net: phy: smsc: Force predictable MDI-X state on LAN87xx
- net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
- perf: build: Setup PKG_CONFIG_LIBDIR for cross compilation
- x86/mce/amd: Add default names for MCA banks and blocks
- x86/mce/amd: Fix threshold limit reset
- x86/mce: Don't remove sysfs if thresholding sysfs init fails
- x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
- KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing
table.
- gre: Fix IPv6 multicast route creation.
- md/md-bitmap: fix GPF in bitmap_get_stats()
- drm/ttm: fix error handling in ttm_buffer_object_transfer
- drm/gem: Fix race in drm_gem_handle_create_tail()
- Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
- drm/framebuffer: Acquire internal references on GEM handles
- kallsyms: fix build without execinfo
- maple_tree: fix mt_destroy_walk() on root leaf node
- mm: fix the inaccurate memory statistics issue for users
- scripts/gdb: fix interrupts display after MCP on x86
- scripts/gdb: de-reference per-CPU MCE interrupts
- scripts/gdb: fix interrupts.py after maple tree conversion
- mm/vmalloc: leave lazy MMU mode on PTE mapping error
- pwm: mediatek: Ensure to disable clocks in error path
- x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
- x86/mm: Disable hugetlb page table sharing on 32-bit
- smb: server: make use of rdma_destroy_qp()
- ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
- erofs: fix to add missing tracepoint in erofs_read_folio()
- netlink: Fix rmem check in netlink_broadcast_deliver().
- netlink: make sure we allow at least one dump skb
- smb: client: avoid unnecessary reconnects when refreshing referrals
- smb: client: fix DFS interlink failover
- cifs: all initializations for tcon should happen in tcon_info_alloc
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
- net: phy: microchip: limit 100M workaround to link-down events on
LAN88xx
- can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to
debug level
- net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
- bnxt_en: Fix DCB ETS validation
- ublk: sanity check add_dev input for underflow
- atm: idt77252: Add missing `dma_map_error()`
- um: vector: Reduce stack usage in vector_eth_configure()
- io_uring: make fallocate be hashed work
- ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
- ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
- net: usb: qmi_wwan: add SIMCom 8230C composition
- HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
- net: mana: Record doorbell physical address in PF mode
- vt: add missing notification when switching back to text mode
- bpf: Adjust free target to avoid global starvation of LRU map
- HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
- selftests/bpf: adapt one more case in test_lru_map to the new
target_free
- smb: client: fix potential race in cifs_put_tcon()
- drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
- drm/amdgpu/ip_discovery: add missing ip_discovery fw
- x86/mce: Ensure user polling settings are honored when restarting timer
- ASoC: fsl_sai: Force a software reset when starting in consumer mode
- wifi: mt76: mt7921: prevent decap offload config before STA
initialization
- wifi: mt76: mt7925: fix the wrong config for tx interrupt
- wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw
scan
- drm/xe: Allocate PF queue size on pow2 boundary
- clk: scmi: Handle case where child clocks are initialized before their
parents
- erofs: address D-cache aliasing
- wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements
- wifi: cfg80211: fix S1G beacon head validation in nl80211
- wifi: mac80211: correctly identify S1G short beacon
- wifi: mac80211: fix non-transmitted BSSID profile search
- drm/nouveau/gsp: fix potential leak of memory used during acpi init
- erofs: free pclusters if no cached folio is attached
- erofs: get rid of `z_erofs_next_pcluster_t`
- erofs: tidy up zdata.c
- erofs: refine readahead tracepoint
- erofs: fix to add missing tracepoint in erofs_readahead()
- net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
- selftests: net: lib: Move logging from forwarding/lib.sh here
- selftests: net: lib: fix shift count out of range
- net/mlx5e: Add new prio for promiscuous mode
- ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
- ALSA: hda/realtek: Add quirks for some Clevo laptops
- riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
- erofs: fix rare pcluster memory leak after unmounting
- net: libwx: fix alloc msix vectors failed
- net: wangxun: revert the adjustment of the IRQ vector sequence
- arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
- KVM: SVM: Set synthesized TSA CPUID flags
- Upstream stable to v6.6.98, v6.6.99, v6.12.38, v6.12.39
- SAUCE: selftests: net: altnames.sh fix following upstream updates
* vrf_route_leaking.sh in net from ubuntu_kernel_selftests linux ADT test
failure with linux/5.11.0-18.19 (Ping received ICMP Packet too big)
(LP: #1928890)
- selftests: net: use slowwait to stabilize vrf_route_leaking test
* ubuntu_bpf failed to build on Noble ( error: ‘struct prog_test_def’ has no
member named ‘should_tmon’) (LP: #2112357)
- selftests/bpf: Factor out get_xlated_program() helper
- selftests/bpf: extract utility function for BPF disassembly
- selftests/bpf: Add traffic monitor functions.
- selftests/bpf: Add the traffic monitor option to test_progs.
* ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J
(LP: #2096976)
- netdevsim: fix rtnetlink.sh selftest
- [SAUCE] Fix selftest/net/rtnetlink.sh for Big Endian
* fib_tests.sh in ubuntu_kernel_selftests failed with IPv4 mangling tests
Connection check - server side (LP: #2012859)
- selftests: rtnetlink: correct error message in rtnetlink.sh fou test
* net:rtnetlink.sh in ubuntu_kernel_selftests failed with FAIL: address
proto IPv4 / IPv6 (LP: #2031531)
- selftests: rtnetlink: skip tests if tools or feats are missing
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740)
- ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
- ethernet: intel: fix building with large NR_CPUS
- ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
- ASoC: Intel: fix SND_SOC_SOF dependencies
- ASoC: amd: yc: add DMI quirk for ASUS M6501RM
- audit,module: restore audit logging in load failure case
- fs_context: fix parameter name in infofc() macro
- ublk: use vmalloc for ublk_device's __queues
- hfsplus: make splice write available again
- hfs: make splice write available again
- ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
- ASoC: ops: dynamically allocate struct snd_ctl_elem_value
- ASoC: mediatek: use reserved memory or enable buffer pre-allocation
- selftests: Fix errno checking in syscall_user_dispatch test
- soc: qcom: QMI encoding/decoding for big endian
- arm64: dts: qcom: sdm845: Expand IMEM region
- arm64: dts: qcom: sc7180: Expand IMEM region
- arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
- ARM: dts: vfxxx: Correctly use two tuples for timer address
- usb: host: xhci-plat: fix incorrect type for of_match variable in
xhci_plat_probe()
- usb: misc: apple-mfi-fastcharge: Make power supply names unique
- vmci: Prevent the dispatching of uninitialized payloads
- pps: fix poll support
- Revert "vmci: Prevent the dispatching of uninitialized payloads"
- usb: early: xhci-dbc: Fix early_ioremap leak
- arm: dts: ti: omap: Fixup pinheader typo
- soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
- ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
- arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
- arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
- cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
- cpufreq: Initialize cpufreq-based frequency-invariance later
- cpufreq: Init policy->rwsem before it may be possibly used
- samples: mei: Fix building on musl libc
- soc: qcom: pmic_glink: fix OF node leak
- interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
- interconnect: qcom: sc8180x: specify num_nodes
- staging: nvec: Fix incorrect null termination of battery manufacturer
- drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
- bpf, sockmap: Fix psock incorrectly pointing to sk
- selftests/bpf: fix signedness bug in redir_partial()
- net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
- drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
- bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
- caif: reduce stack size, again
- wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
- tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
- net: dst: annotate data-races around dst->input
- net: dst: annotate data-races around dst->output
- kselftest/arm64: Fix check for setting new VLs in sve-ptrace
- drm/msm/dpu: Fill in min_prefill_lines for SC8180X
- m68k: Don't unregister boot console needlessly
- drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
- sched/psi: Optimize psi_group_change() cpu_clock() usage
- fbcon: Fix outdated registered_fb reference in comment
- netfilter: nf_tables: Drop dead code from fill_*_info routines
- netfilter: nf_tables: adjust lockdep assertions handling
- arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
- um: rtc: Avoid shadowing err in uml_rtc_start()
- net_sched: act_ctinfo: use atomic64_t for three counters
- xen/gntdev: remove struct gntdev_copy_batch from stack
- tcp: call tcp_measure_rcv_mss() for ooo packets
- wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
- mwl8k: Add missing check after DMA map
- iommu/amd: Fix geometry.aperture_end for V2 tables
- wifi: plfxlc: Fix error handling in usb driver probe
- wifi: mac80211: Do not schedule stopped TXQs
- wifi: mac80211: Don't call fq_flow_idx() for management frames
- wifi: mac80211: Check 802.11 encaps offloading in
ieee80211_tx_h_select_key()
- Reapply "wifi: mac80211: Update skb's control block key in
ieee80211_tx_dequeue()"
- wifi: ath12k: fix endianness handling while accessing wmi service bit
- wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P
IE
- wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
- kcsan: test: Initialize dummy variable
- Bluetooth: hci_event: Mask data status from LE ext adv reports
- tools/rv: Do not skip idle in trace
- can: peak_usb: fix USB FD devices potential malfunction
- can: kvaser_pciefd: Store device channel index
- can: kvaser_usb: Assign netdev.dev_port based on device channel index
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update
- selftests: rtnetlink.sh: remove esp4_offload after test
- vrf: Drop existing dst reference in vrf_ip6_input_dst
- ipv6: annotate data-races around rt->fib6_nsiblings
- bpf/preload: Don't select USERMODE_DRIVER
- PCI: rockchip-host: Fix "Unexpected Completion" log message
- crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
- crypto: qat - use unmanaged allocation for dc_data
- crypto: marvell/cesa - Fix engine load inaccuracy
- mtd: fix possible integer overflow in erase_xfer()
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
- power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
- crypto: arm/aes-neonbs - work around gcc-15 warning
- PCI: endpoint: pci-epf-vntb: Return -ENOENT if
pci_epc_get_next_free_bar() fails
- pinctrl: sunxi: Fix memory leak on krealloc failure
- fanotify: sanitize handle_type values when reporting fid
- clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
- Fix dma_unmap_sg() nents value
- perf tools: Fix use-after-free in help_unknown_cmd()
- perf sched: Free thread->priv using priv_destructor
- perf sched: Fix memory leaks for evsel->priv in timehist
- perf sched: Fix memory leaks in 'perf sched latency'
- crypto: inside-secure - Fix `dma_unmap_sg()` nents value
- RDMA/hns: Fix -Wframe-larger-than issue
- kernel: trace: preemptirq_delay_test: use offstack cpu mask
- perf tests bp_account: Fix leaked file descriptor
- clk: sunxi-ng: v3s: Fix de clock definition
- scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
- scsi: elx: efct: Fix dma_unmap_sg() nents value
- scsi: mvsas: Fix dma_unmap_sg() nents value
- scsi: isci: Fix dma_unmap_sg() nents value
- watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
- hwrng: mtk - handle devm_pm_runtime_enable errors
- crypto: keembay - Fix dma_unmap_sg() nents value
- crypto: img-hash - Fix dma_unmap_sg() nents value
- soundwire: stream: restore params when prepare ports fail
- PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem
attribute
- fs/orangefs: Allow 2 more characters in do_c_string()
- dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
- dmaengine: nbpfaxi: Add missing check after DMA map
- ASoC: fsl_xcvr: get channel status data when PHY is not exists
- sh: Do not use hyphen in exported variable name
- perf tools: Remove libtraceevent in .gitignore
- crypto: qat - fix DMA direction for compression on GEN2 devices
- crypto: qat - fix seq_file position update in adf_ring_next()
- jfs: fix metapage reference count leak in dbAllocCtl
- mtd: rawnand: atmel: Fix dma_mapping_error() address
- mtd: rawnand: rockchip: Add missing check after DMA map
- mtd: rawnand: atmel: set pmecc data setup time
- vhost-scsi: Fix log flooding with target does not exist errors
- bpf: Check flow_dissector ctx accesses are aligned
- bpf: Check netfilter ctx accesses are aligned
- apparmor: ensure WB_HISTORY_SIZE value is a power of 2
- apparmor: fix loop detection used in conflicting attachment resolution
- module: Restore the moduleparam prefix length check
- ucount: fix atomic_long_inc_below() argument type
- rtc: ds1307: fix incorrect maximum clock rate handling
- rtc: hym8563: fix incorrect maximum clock rate handling
- rtc: nct3018y: fix incorrect maximum clock rate handling
- rtc: pcf85063: fix incorrect maximum clock rate handling
- rtc: pcf8563: fix incorrect maximum clock rate handling
- rtc: rv3028: fix incorrect maximum clock rate handling
- f2fs: doc: fix wrong quota mount option description
- f2fs: fix to update upper_p in __get_secs_required() correctly
- f2fs: fix to calculate dirty data during has_not_enough_free_secs()
- vfio: Fix unbalanced vfio_df_close call in no-iommu mode
- vfio: Prevent open_count decrement to negative
- vfio/pci: Separate SR-IOV VF dev_set
- scsi: mpt3sas: Fix a fw_event memory leak
- scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
- scsi: ufs: core: Use link recovery when h8 exit fails during runtime
resume
- scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
- kconfig: qconf: fix ConfigList::updateListAllforAll()
- sched/psi: Fix psi_seq initialization
- PCI: pnv_php: Work around switches with broken presence detection
- powerpc/eeh: Export eeh_unfreeze_pe()
- pNFS/flexfiles: don't attempt pnfs on fatal DS errors
- sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up()
- NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
- NFSv4.2: another fix for listxattr
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
- md/md-cluster: handle REMOVE message earlier
- netpoll: prevent hanging NAPI when netcons gets enabled
- phy: mscc: Fix parsing of unicast frames
- net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
- netlink: specs: ethtool: fix module EEPROM input/output arguments
- net/mlx5: Correctly set gso_segs when LRO is used
- net/sched: taprio: enforce minimum value for picos_per_byte
- benet: fix BUG when creating VFs
- irqchip: Build IMX_MU_MSI only on ARM
- ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
- smb: server: remove separate empty_recvmsg_queue
- smb: server: make sure we call ib_dma_unmap_single() only if we called
ib_dma_map_single already
- smb: server: let recv_done() consistently call
put_recvmsg/smb_direct_disconnect_rdma_connection
- smb: server: let recv_done() avoid touching data_transfer after
cleanup/move
- smb: client: Use min() macro
- smb: client: Correct typos in multiple comments across various files
- smb: smbdirect: add smbdirect_socket.h
- smb: client: make use of common smbdirect_socket
- smb: client: make sure we call ib_dma_unmap_single() only if we called
ib_dma_map_single already
- smb: client: let recv_done() cleanup before notifying the callers.
- pptp: fix pptp_xmit() error path
- smb: client: return an error if rdma_connect does not return within 5
seconds
- selftests/perf_events: Add a mmap() correctness test
- ksmbd: fix corrupted mtime and ctime in smb2_open
- smb: server: Fix extension string in ksmbd_extract_shortname()
- USB: serial: option: add Foxconn T99W709
- Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
- net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
- net: usbnet: Fix the wrong netif_carrier_on() call
- ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
- ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
- x86/fpu: Delay instruction pointer fixup until after warning
- MIPS: mm: tlb-r4k: Uniquify TLB entries on init
- mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
- ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX
- arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes
- arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size
- mei: vsc: Destroy mutex after freeing the IRQ
- mei: vsc: Event notifier fixes
- mei: vsc: Unset the event callback on remove and probe errors
- arm64: dts: st: fix timer used for ticks
- selftests: breakpoints: use suspend_stats to reliably check suspend
success
- PM / devfreq: Fix a index typo in trans_stat
- drm/panfrost: Fix panfrost device variable name in devfreq
- selftests/bpf: Fix unintentional switch case fall through
- drm/amdgpu: Remove nbiov7.9 replay count reporting
- bpf: Ensure RCU lock is held around bpf_prog_ksym_find
- refscale: Check that nreaders and loops multiplication doesn't overflow
- iommu/amd: Enable PASID and ATS capabilities in the correct order
- file: add take_fd() cleanup helper
- file: fix typo in take_fd() comment
- rcu: Fix delayed execution of hurry callbacks
- ring-buffer: Remove ring_buffer_read_prepare_sync()
- net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863
- stmmac: xsk: fix negative overflow of budget in zerocopy mode
- pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state()
- dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning
- phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers
- perf dso: Add missed dso__put to dso__load_kcore
- mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER
- perf sched: Make sure it frees the usage string
- perf sched: Fix memory leaks in 'perf sched map'
- perf sched: Use RC_CHK_EQUAL() to compare pointers
- RDMA/hns: Fix HW configurations not cleared in error flow
- RDMA/hns: Get message length of ack_req from FW
- RDMA/hns: Add mutex_destroy()
- RDMA/hns: Fix accessing uninitialized resources
- RDMA/hns: Drop GFP_NOWARN
- crypto: qat - disable ZUC-256 capability for QAT GEN5
- remoteproc: xlnx: Disable unsupported features
- perf record: Cache build-ID of hit DSOs only
- vdpa: Fix IDR memory leak in VDUSE module exit
- vhost: Reintroduce kthread API and add mode selection
- [Config] enable VHOST_ENABLE_FORK_OWNER_CONTROL
- apparmor: Fix unaligned memory accesses in KUnit test
- f2fs: turn off one_time when forcibly set to foreground GC
- exfat: fdatasync flag should be same like generic_write_sync()
- s390/ap: Unmask SLCF bit in card and queue ap functions sysfs
- block: Fix default IO priority if there is no IO context
- ASoC: tas2781: Fix the wrong step for TLV on tas2781
- s390/mm: Allocate page table with PAGE_SIZE granularity
- smb: client: remove separate empty_packet_queue
- smb: client: let recv_done() avoid touching data_transfer after
cleanup/move
- drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type
- drm/i915/hdmi: propagate errors from intel_hdmi_init_connector()
- drm/i915/hdmi: add error handling in g4x_hdmi_init()
- drm/i915/ddi: gracefully handle errors from
intel_ddi_init_hdmi_connector()
- drm/i915/display: add intel_encoder_is_hdmi()
- drm/i915/ddi: only call shutdown hooks for valid encoders
- PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state()
- PCI/ASPM: Fix L1SS saving
- ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx
- ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx
- ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26)
- s390/mm: Remove possible false-positive warning in pte_free_defer()
- Upstream stable to v6.6.102, v6.12.42
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38619
- media: ti: j721e-csi2rx: fix list_del corruption
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38582
- RDMA/hns: Fix double destruction of rsv_qp
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38585
- staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38593
- Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-39732
- wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38595
- xen: fix UAF in dmabuf_exp_from_pages()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38660
- parse_longname(): strrchr() expects NUL-terminated string
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38555
- usb: gadget : fix use-after-free in composite_dev_cleanup()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2024-36331 // CVE-2025-38560
- x86/sev: Evict cache lines during SNP memory validation
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38501
- ksmbd: limit repeated connections from clients with the same IP
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38562
- ksmbd: fix null pointer dereference error in generate_encryptionkey
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38566
- sunrpc: fix handling of server side tls alerts
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38568
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38571
- sunrpc: fix client side handling of tls alerts
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38622
- net: drop UFO packets in udp_rcv_segment()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38572
- ipv6: reject malicious packets in ipv6_gso_segment()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38574
- pptp: ensure minimal skb length in pptp_xmit()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-39730
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38623
- PCI: pnv_php: Fix surprise plug detection and recovery
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38576
- powerpc/eeh: Make EEH driver device hotplug safe
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38624
- PCI: pnv_php: Clean up allocated IRQs on unplug
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38625
- vfio/pds: Fix missing detach_ioas op
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38626
- f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-39731
- f2fs: vm_unmap_ram() may be called from an invalid context
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38652
- f2fs: fix to avoid out-of-boundary access in devs.path
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38577
- f2fs: fix to avoid panic in f2fs_evict_inode
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38578
- f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38579
- f2fs: fix KMSAN uninit-value in extent_info usage
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38630
- fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38632
- pinmux: fix race causing mux_owner NULL with active mux_usecount
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38653
- proc: use the same treatment to check proc_lseek as ones for
proc_read_iter et.al
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38581
- crypto: ccp - Fix crash when rebind ccp device for ccp.ko
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38634
- power: supply: cpcap-charger: Fix null check for
power_supply_get_by_name
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38583
- clk: xilinx: vcu: unregister pll_post only if registered correctly
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38635
- clk: davinci: Add NULL check in davinci_lpsc_clk_register()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38587
- ipv6: fix possible infinite loop in fib6_info_uses_dev()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38588
- ipv6: prevent infinite loop in rt6_nlmsg_size()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38590
- net/mlx5e: Remove skb secpath if xfrm state is not found
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38639
- netfilter: xt_nfacct: don't assume acct name is null-terminated
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38640
- bpf: Disable migration in nf_hook_run_bpf().
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38644
- wifi: mac80211: reject TDLS operations when station is not associated
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38553
- net/sched: Restrict conditions for adding duplicating netems to qdisc
tree
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38645
- net/mlx5: Check device memory pointer before usage
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38601
- wifi: ath11k: clear initialized flag for deinit-ed srng lists
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38602
- iwlwifi: Add missing check for alloc_ordered_workqueue
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38604
- wifi: rtl818x: Kill URBs before clearing tx status queue
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38646
- wifi: rtw89: avoid NULL dereference when RX problematic packet on
unsupported 6 GHz band
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38608
- bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38609
- PM / devfreq: Check governor before using governor->name
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38610
- powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38612
- staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38648
- spi: stm32: Check for cfg availability in stm32_spi_probe
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38659
- gfs2: No more self recovery
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-39734
- Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38650
- hfsplus: remove mutex_lock check in hfsplus_free_extents
* Noble update: upstream stable patchset 2025-12-17 (LP: #2136740) //
CVE-2025-38615
- fs/ntfs3: cancle set bad inode after removing name fails
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361)
- virtio_ring: Fix error reporting in virtqueue_resize
- RDMA/core: Rate limit GID cache warning messages
- interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
- iio: adc: ad7949: use spi_is_bpw_supported()
- regmap: fix potential memory leak of regmap_bus
- x86/hyperv: Fix usage of cpu_online_mask to get valid cpu
- platform/x86: Fix initialization order for firmware_attributes_class
- staging: vchiq_arm: Make vchiq_shutdown never fail
- net/mlx5: Fix memory leak in cmd_exec()
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch
- i40e: report VF tx_dropped with tx_errors instead of tx_discards
- i40e: When removing VF MAC filters, only check PF-set MAC
- drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe()
- net: hns3: fix concurrent setting vlan filter issue
- net: hns3: disable interrupt when ptp init failed
- net: hns3: fixed vf get max channels bug
- net: hns3: default enable tx bounce buffer when smmu enabled
- platform/x86: ideapad-laptop: Fix kbd backlight not remembered among
boots
- i2c: tegra: Fix reset error handling with ACPI
- i2c: virtio: Avoid hang by using interruptible completion wait
- bus: fsl-mc: Fix potential double device reference in
fsl_mc_get_endpoint()
- sprintf.h requires stdarg.h
- ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
- dpaa2-eth: Fix device reference count leak in MAC endpoint handling
- dpaa2-switch: Fix device reference count leak in MAC endpoint handling
- e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
- e1000e: ignore uninitialized checksum word on tgp
- gve: Fix stuck TX queue for DQ queue format
- kasan: use vmalloc_dump_obj() for vmalloc error reports
- resource: fix false warning in __request_region()
- selftests: mptcp: connect: also cover alt modes
- selftests: mptcp: connect: also cover checksum
- mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
- usb: typec: tcpm: allow to use sink in accessory mode
- usb: typec: tcpm: allow switching to mode accessory to mux properly
- usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
- comedi: comedi_test: Fix possible deletion of uninitialized timers
- ALSA: hda/tegra: Add Tegra264 support
- ALSA: hda: Add missing NVIDIA HDA codec IDs
- drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x
- mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma
- crypto: powerpc/poly1305 - add depends on BROKEN for now
- [Config] disable CRYPTO_POLY1305_P10
- iio: hid-sensor-prox: Fix incorrect OFFSET calculation
- iio: hid-sensor-prox: Restore lost scale assignments
- mtd: rawnand: qcom: Fix last codeword read in
qcom_param_page_type_exec()
- ksmbd: add free_transport ops in ksmbd connection
- arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1
register
- ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
- Revert "selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid()
test"
- x86/traps: Initialize DR7 by writing its architectural reset value
- virtio_net: Enforce minimum TX ring size for reliability
- platform/x86: asus-nb-wmi: add DMI quirk for ASUS Zenbook Duo UX8406CA
- platform/mellanox: mlxbf-pmc: Remove newline char from event name input
- platform/mellanox: mlxbf-pmc: Validate event/enable input
- platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input
- xfrm: state: use a consistent pcpu_id in xfrm_state_find
- xfrm: Set transport header to fix UDP GRO handling
- ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop
- drm/sched: Remove optimization that causes hang when killing dependent
jobs
- mm/ksm: fix -Wsometimes-uninitialized from clang-21 in
advisor_mode_show()
- ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa0xxx
- rust: give Clippy the minimum supported Rust version
- selftests/bpf: Add tests with stack ptr register in conditional jmp
- spi: cadence-quadspi: fix cleanup of rx_chan on failure paths
- ext4: don't explicit update times in ext4_fallocate()
- ext4: refactor ext4_punch_hole()
- ext4: refactor ext4_zero_range()
- ext4: refactor ext4_collapse_range()
- ext4: refactor ext4_insert_range()
- ext4: factor out ext4_do_fallocate()
- ext4: move out inode_lock into ext4_fallocate()
- fs: sort out the fallocate mode vs flag mess
- ext4: move out common parts into ext4_fallocate()
- ext4: fix incorrect punch max_end
- ext4: correct the error handle in ext4_fallocate()
- ext4: fix out of bounds punch offset
- KVM: x86: drop x86.h include from cpuid.h
- KVM: x86: Route non-canonical checks in emulator through emulate_ops
- KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical
checks
- KVM: x86: model canonical checks more precisely
- x86/hyperv: Fix APIC ID and VP index confusion in hv_snp_boot_ap()
- arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage
- Drivers: hv: Make the sysfs node size for the ring buffer dynamic
- Upstream stable to v6.6.101, v6.12.41
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38351
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38675
- xfrm: state: initialize state_ptrs earlier in xfrm_state_find
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38322
- perf/x86/intel: Fix crash in icl_update_topdown_event()
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-37777
- ksmbd: fix use-after-free in __smb2_lease_break_noti()
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-37925
- jfs: reject on-disk inodes of an unsupported type
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38663
- nilfs2: reject invalid file types when reading inodes
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38664
- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38670
- arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38671
- i2c: qup: jump out of the loop in case of timeout
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-39726
- s390/ism: fix concurrency management in ism_cmd()
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38665
- can: netlink: can_changelink(): fix NULL pointer deref of struct
can_priv::do_set_mode
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38668
- regulator: core: fix NULL dereference on unbind due to stale coupling
data
* Noble update: upstream stable patchset 2025-12-16 (LP: #2136361) //
CVE-2025-38335
- Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221)
- phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
- phy: tegra: xusb: Disable periodic tracking on Tegra234
- USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
- USB: serial: option: add Foxconn T99W640
- USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
- usb: musb: fix gadget state on disconnect
- i2c: stm32: fix the device used for the DMA map
- thunderbolt: Fix wake on connect at runtime
- thunderbolt: Fix bit masking in tb_dp_port_set_hops()
- nvmem: imx-ocotp: fix MAC address byte length
- Input: xpad - set correct controller type for Acer NGR200
- pch_uart: Fix dma_sync_sg_for_device() nents value
- spi: Add check for 8-bit transfer with 8 IO mode support
- HID: core: ensure __hid_request reserves the report ID as the first byte
- tracing/probes: Avoid using params uninitialized in parse_btf_arg()
- drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
- ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
- io_uring/poll: fix POLLERR handling
- phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in
pep_sock_accept()
- net/mlx5: Update the list of the PCI supported devices
- arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
- arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
- arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
- af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
- af_packet: fix soft lockup issue caused by tpacket_snd()
- isofs: Verify inode mode when loading from disk
- memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
- mmc: bcm2835: Fix dma_unmap_sg() nents value
- mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based
Positivo models
- mmc: sdhci_am654: Workaround for Errata i2312
- pmdomain: governor: Consider CPU latency tolerance from
pm_domain_cpu_gov
- soc: aspeed: lpc-snoop: Cleanup resources in stack-order
- iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
- iio: adc: max1363: Reorder mode_list[] entries
- iio: adc: stm32-adc: Fix race in installing chained IRQ handler
- comedi: Fix some signed shift left operations
- soundwire: amd: fix for handling slave alerts after link is down
- soundwire: amd: fix for clearing command status register
- cachefiles: Fix the incorrect return value in __cachefiles_write()
- net: emaclite: Fix missing pointer increment in aligned_read()
- block: fix kobject leak in blk_unregister_queue
- nvme: fix inconsistent RCU list manipulation in
nvme_ns_add_to_ctrl_list()
- nvme: fix misaccounting of nvme-mpath inflight I/O
- wifi: cfg80211: remove scan request n_channels counted_by
- selftests: net: increase inter-packet timeout in udpgro.sh
- Bluetooth: hci_sync: fix connectable extended advertising when using
static random address
- Bluetooth: SMP: If an unallowed command is received consider it a
failure
- Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
- Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant
without board ID
- net/mlx5: Correctly set gso_size when LRO is used
- Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent
IPv6 addrconf
- net: bridge: Do not offload IGMP/MLD messages
- rxrpc: Fix transmission of an abort in response to an abort
- Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
- sched: Change nr_uninterruptible type to unsigned long
- ipv6: make addrconf_wq single threaded
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime
pm
- usb: hub: Fix flushing of delayed work used for post resume purposes
- usb: hub: Don't try to recover devices lost during warm reset.
- usb: dwc3: qcom: Don't leave BCR asserted
- i2c: omap: Add support for setting mux
- [Config] make mux support built-in on arm
- i2c: omap: Fix an error handling path in omap_i2c_probe()
- i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
- Revert "selftests/bpf: adjust dummy_st_ops_success to detect additional
error"
- Revert "selftests/bpf: dummy_st_ops should reject 0 for non-nullable
params"
- i2c: omap: fix deprecated of_property_read_bool() use
- nvmem: layouts: u-boot-env: remove crc32 endianness conversion
- i2c: stm32f7: unmap DMA mapped buffer
- drm/amdgpu: Increase reset counter only on success
- ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx
- mptcp: reset fallback status gracefully at disconnect() time
- arm64: dts: imx8mp-venice-gw72xx: fix TPM SPI frequency
- arm64: dts: imx8mp-venice-gw73xx: fix TPM SPI frequency
- arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi CM5
- arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi 4B
- nvme: fix endianness of command word prints in nvme_log_err_passthru()
- nvmet-tcp: fix callback lock for TLS handshake
- can: tcan4x5x: add option for selecting nWKRQ voltage
- can: tcan4x5x: fix reset gpio usage during probe
- ice: check correct pointer in fwlog debugfs
- riscv: Enable interrupt during exception handling
- riscv: traps_misaligned: properly sign extend value in misaligned load
handler
- Bluetooth: hci_core: add missing braces when using macro parameters
- drm/mediatek: Add wait_event_timeout when disabling plane
- drm/mediatek: only announce AFBC if really supported
- net: libwx: fix multicast packets received count
- sched,freezer: Remove unnecessary warning in __thaw_task
- drm/xe/mocs: Initialize MOCS index early
- drm/xe: Move page fault init after topology init
- smb: client: let smbd_post_send_iter() respect the peers max_send_size
and transmit all data
- Upstream stable to v6.6.100, v6.12.40
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-22115
- btrfs: fix block group refcount race in
btrfs_create_pending_block_groups()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38549
- efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38551
- virtio-net: fix recursived rtnl_lock() during probe()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38531
- iio: common: st_sensors: Fix use of uninitialize device structs
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38552
- mptcp: plug races between subflow fail and subflow creation
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38491
- mptcp: make fallback action and fallback decision atomic
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38469
- KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll
hypercalls
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38499
- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the
right userns
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38524
- rxrpc: Fix recv-recv race of completed call
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38468
- net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38470
- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during
runtime
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38471
- tls: always refresh the queue when reading sock
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38472
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38550
- ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38473
- Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38474
- usb: net: sierra: check for no status endpoint
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38526
- ice: add NULL check in eswitch lag check
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38548
- hwmon: (corsair-cpro) Validate the size of the received input buffer
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38537
- net: phy: Don't register LEDs for genphy
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38527
- smb: client: fix use-after-free in cifs_oplock_break
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38476
- rpl: Fix use-after-free in rpl_do_srh_inline().
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38528
- bpf: Reject %p% format string in bprintf-like helpers
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38478
- comedi: Fix initialization of data for instructions that write to
subdevice
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38480
- comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38481
- comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38482
- comedi: das6402: Fix bit shift out of bounds
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38483
- comedi: das16m1: Fix bit shift out of bounds
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38529
- comedi: aio_iiro_16: Fix bit shift out of bounds
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38530
- comedi: pcl812: Fix bit shift out of bounds
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38485
- iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38487
- soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2024-50047 fix. // CVE-2025-38488
- smb: client: fix use-after-free in crypt_message when using async crypto
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38489
- s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38532
- net: libwx: properly reset Rx ring descriptor
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38533
- net: libwx: fix the using of Rx buffer DMA
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38490
- net: libwx: remove duplicate page_pool_put_full_page()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38538
- dmaengine: nbpfaxi: Fix memory corruption in probe()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38493
- tracing/osnoise: Fix crash in timerlat_dump_stack()
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38539
- tracing: Add down_write(trace_event_sem) when adding trace event
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38494
- HID: core: do not bypass hid_hw_raw_request
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38495
- HID: core: ensure the allocated report buffer can contain the reserved
report ID
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38496
- dm-bufio: fix sched in atomic context
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38497
- usb: gadget: configfs: Fix OOB read on empty string write
* Noble update: upstream stable patchset 2025-12-15 (LP: #2136221) //
CVE-2025-38535
- phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382)
- configfs: Do not override creating attribute file failure in
populate_attrs()
- crypto: marvell/cesa - Do not chain submitted requests
- gfs2: move msleep to sleepable context
- ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
- ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
- io_uring: account drain memory to cgroup
- io_uring/kbuf: account ring io_buffer_list memory
- powerpc/pseries/msi: Avoid reading PCI device registers in reduced power
states
- regulator: max20086: Fix MAX200086 chip id
- regulator: max20086: Change enable gpio to optional
- net/mlx5_core: Add error handling
inmlx5_query_nic_vport_qkey_viol_cntr()
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
- wifi: ath11k: fix rx completion meta data corruption
- wifi: ath11k: fix ring-buffer corruption
- SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
- wifi: ath12k: fix ring-buffer corruption
- wifi: rtw88: usb: Reduce control message timeout to 500 ms
- wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
- media: ov8856: suppress probe deferral errors
- media: ov5675: suppress probe deferral errors
- media: nxp: imx8-isi: better handle the m2m usage_count
- media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
- media: ccs-pll: Start VT pre-PLL multiplier search from correct value
- media: ccs-pll: Start OP pre-PLL multiplier search from correct value
- media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
- media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
- media: davinci: vpif: Fix memory leak in probe error path
- media: gspca: Add error handling for stv06xx_read_sensor()
- media: mediatek: vcodec: Correct vsi_core framebuffer size
- media: omap3isp: use sgtable-based scatterlist wrappers
- media: v4l2-dev: fix error handling in __video_register_device()
- media: venus: Fix probe error handling
- media: videobuf2: use sgtable-based scatterlist wrappers
- media: imx-jpeg: Drop the first error frames
- media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
- media: imx-jpeg: Reset slot data pointers when freed
- media: uvcvideo: Return the number of processed controls
- media: uvcvideo: Send control events for partial succeeds
- media: uvcvideo: Fix deferred probing error
- arm64/mm: Close theoretical race where stale TLB entry remains valid
- ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
- ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
- bus: mhi: host: Fix conflict between power_up and SYSERR
- can: tcan4x5x: fix power regulator retrieval during probe
- ceph: set superblock s_magic for IMA fsmagic matching
- cgroup,freezer: fix incomplete freezing when attaching tasks
- bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
- bus: fsl-mc: fix GET/SET_TAILDROP command ids
- ext4: fix calculation of credits for extent tree modification
- ext4: factor out ext4_get_maxbytes()
- ext4: ensure i_size is smaller than maxbytes
- Input: gpio-keys - fix possible concurrent access in
gpio_keys_irq_timer()
- net: ftgmac100: select FIXED_PHY
- EDAC/altera: Use correct write width with the INTTEST register
- parisc/unaligned: Fix hex output to show 8 hex chars
- parisc: fix building with gcc-15
- clk: meson-g12a: add missing fclk_div2 to spicc
- watchdog: fix watchdog may detect false positive of softlockup
- mm: fix ratelimit_pages update error in dirty_ratio_handler()
- mtd: rawnand: sunxi: Add randomizer configuration in
sunxi_nfc_hw_ecc_write_chunk
- mtd: nand: sunxi: Add randomizer configuration before randomizer enable
- KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
- KVM: VMX: Flush shadow VMCS on emergency reboot
- dm-mirror: fix a tiny race condition
- dm-verity: fix a memory leak if some arguments are specified multiple
times
- mtd: rawnand: qcom: Fix read len for onfi param page
- phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
- KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
- staging: iio: ad5933: Correct settling cycles encoding per datasheet
- mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
- regulator: max14577: Add error check for max14577_read_reg()
- cifs: reset connections for all channels when reconnect requested
- cifs: update dstaddr whenever channel iface is updated
- cifs: dns resolution is needed only for primary channel
- Drivers: hv: Allocate interrupt and monitor pages aligned to system page
boundary
- uio_hv_generic: Use correct size for interrupt and monitor pages
- PCI: cadence-ep: Correct PBA offset in .set_msix() callback
- PCI: Add ACS quirk for Loongson PCIe
- PCI: Fix lock symmetry in pci_slot_unlock()
- PCI: dw-rockchip: Fix PHY function call sequence in
rockchip_pcie_phy_deinit()
- iio: accel: fxls8962af: Fix temperature scan element sign
- iio: imu: inv_icm42600: Fix temperature calculation
- iio: adc: ad7606_spi: fix reg write value mask
- ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
- clocksource: Fix the CPUs' choice in the watchdog per CPU verification
- power: supply: collie: Fix wakeup source leaks on device unbind
- mmc: Add quirk to disable DDR50 tuning
- ACPICA: Avoid sequence overread in call to strncmp()
- ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
- ACPI: bus: Bail out if acpi_kobj registration fails
- ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
- power: supply: bq27xxx: Retrieve again when busy
- ACPICA: utilities: Fix overflow check in vsnprintf()
- ASoC: tegra210_ahub: Add check to of_device_get_match_data()
- gpiolib: of: Add polarity quirk for s5m8767
- PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
- net: macb: Check return value of dma_set_mask_and_coherent()
- tipc: use kfree_sensitive() for aead cleanup
- f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
- i2c: designware: Invoke runtime suspend on quick slave re-registration
- emulex/benet: correct command version selection in be_cmd_get_stats()
- wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
- wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
- sctp: Do not wake readers in __sctp_write_space()
- cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
- i2c: npcm: Add clock toggle recovery
- net: dlink: add synchronization for stats update
- wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
- wifi: ath12k: fix a possible dead lock caused by ab->base_lock
- wifi: ath11k: Fix QMI memory reuse logic
- wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
- tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
- tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
- ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
- net: atlantic: generate software timestamp just before the doorbell
- pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
- pinctrl: armada-37xx: propagate error from
armada_37xx_gpio_get_direction()
- pinctrl: armada-37xx: propagate error from
armada_37xx_pmx_gpio_set_direction()
- pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
- net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
- net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
- wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
- wifi: mac80211: do not offer a mesh path if forwarding is disabled
- clk: rockchip: rk3036: mark ddrphy as critical
- libbpf: Add identical pointer detection to btf_dedup_is_equiv()
- scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64
commands
- iommu/amd: Ensure GA log notifier callbacks finish running before module
unload
- wifi: iwlwifi: pcie: make sure to lock rxq->read
- wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
- wifi: mac80211: VLAN traffic in multicast path
- wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
- net: bridge: mcast: update multicast contex when vlan state is changed
- net: bridge: mcast: re-implement br_multicast_{enable, disable}_port
functions
- vxlan: Do not treat dst cache initialization errors as fatal
- net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
- pinctrl: mcp23s08: Reset all pins to input at probe
- wifi: ath12k: fix failed to set mhi state error during reboot with
hardware grouping
- sock: Correct error checking condition for (assign|release)_proto_idx()
- ice: fix check for existing switch rule
- usbnet: asix AX88772: leave the carrier control to phylink
- f2fs: fix to set atomic write status more clear
- bpf, sockmap: Fix data lost during EAGAIN retries
- octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
- wifi: ath11k: determine PM policy based on machine model
- wifi: ath12k: fix link valid field initialization in the monitor Rx
- wifi: ath12k: fix incorrect CE addresses
- wifi: ath12k: Pass correct values of center freq1 and center freq2 for
160 MHz
- watchdog: da9052_wdt: respect TWDMIN
- bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
- ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
- tee: Prevent size calculation wraparound on 32-bit kernels
- Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices
first"
- fs/xattr.c: fix simple_xattr_list()
- platform/x86/amd: pmc: Clear metrics table at start of cycle
- platform/x86: dell_rbu: Stop overwriting data buffer
- powerpc/vdso: Fix build of VDSO32 with pcrel
- powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH
recovery
- io_uring: fix task leak issue in io_wq_create()
- platform/loongarch: laptop: Get brightness setting from EC on probe
- platform/loongarch: laptop: Unregister generic_sub_drivers on exit
- LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
- cifs: deal with the channel loading lag while picking channels
- cifs: serialize other channels when query server interfaces is pending
- cifs: do not disable interface polling on failure
- smb: improve directory cache reuse for readdir operations
- scsi: storvsc: Increase the timeouts to storvsc_timeout
- scsi: s390: zfcp: Ensure synchronous unit_add
- udmabuf: use sgtable-based scatterlist wrappers
- selftests/x86: Add a test to detect infinite SIGTRAP handler loop
- selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
- platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
- Input: sparcspkr - avoid unannotated fall-through
- wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
- arm64: Restrict pagetable teardown to avoid false warning
- ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound
card
- ALSA: hda/intel: Add Thinkpad E15 to PM deny list
- ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
- iio: accel: fxls8962af: Fix temperature calculation
- net: Fix checksum update for ILA adj-transport
- bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
- erofs: remove unused trace event erofs_destroy_inode
- smb: fix secondary channel creation issue with kerberos by populating
hostname when adding channels
- drm/msm/disp: Correct porch timing for SDM845
- drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
- ionic: Prevent driver/fw getting out of sync on devcmd(s)
- drm/nouveau/bl: increase buffer size to avoid truncate warning
- drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
- hwmon: (occ) Rework attribute registration for stack usage
- hwmon: (occ) fix unaligned accesses
- pldmfw: Select CRC32 when PLDMFW is selected
- net: ice: Perform accurate aRFS flow match
- ptp: fix breakage after ptp_vclock_in_use() rework
- ptp: allow reading of currently dialed frequency to succeed on free-
running clocks
- tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen()
behavior
- tcp: fix passive TFO socket having invalid NAPI ID
- net: microchip: lan743x: Reduce PTP timeout on HW failure
- EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
- dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
- net: make for_each_netdev_dump() a little more bug-proof
- serial: sh-sci: Increment the runtime usage counter for the earlycon
device
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
- ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
- smb: client: fix first command failure during re-negotiation
- platform/loongarch: laptop: Add backlight power control support
- s390/pci: Fix __pcilg_mio_inuser() inline assembly
- perf: Fix cgroup state vs ERROR
- perf/core: Fix WARN in perf_cgroup_switch()
- scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
- RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
- RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
- perf evsel: Missed close() when probing hybrid core PMUs
- crypto: qat - add shutdown handler to qat_c3xxx
- crypto: qat - add shutdown handler to qat_420xx
- crypto: qat - add shutdown handler to qat_4xxx
- crypto: qat - add shutdown handler to qat_c62x
- crypto: qat - add shutdown handler to qat_dh895xcc
- wifi: mt76: mt7925: fix host interrupt register initialization
- wifi: rtw88: usb: Upload the firmware in bigger chunks
- NFSD: unregister filesystem in case genl_register_family() fails
- NFSD: Implement FATTR4_CLONE_BLKSIZE attribute
- media: ov2740: Move pm-runtime cleanup on probe-errors to proper place
- media: i2c: imx335: Fix frame size enumeration
- soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events
- sysfb: Fix screen_info type check for VGA
- ovl: Fix nested backing file paths
- Drivers: hv: vmbus: Add utility function for querying ring size
- uio_hv_generic: Query the ringbuffer size for device
- uio_hv_generic: Align ring size to system page
- PCI: dwc: ep: Correct PBA offset in .set_msix() callback
- PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from
rockchip_pcie_link_up()
- accel/ivpu: Improve buffer object logging
- accel/ivpu: Fix warning in ivpu_gem_bo_free()
- tty: vt: make init parameter of consw::con_init() a bool
- tty: vt: sanitize arguments of consw::con_clear()
- tty: vt: make consw::con_switch() return a bool
- dummycon: Trigger redraw when switching consoles with deferred takeover
- ACPICA: Apply pack(1) to union aml_resource
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios
laptops
- pmdomain: core: Reset genpd->states to avoid freeing invalid data
- power: supply: max17040: adjust thermal channel scaling
- Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922
- Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925
- wifi: mt76: mt7925: introduce thermal protection
- libbpf/btf: Fix string handling to support multi-split BTF
- clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks
- iommu/amd: Allow matching ACPI HID devices without matching UIDs
- tcp: remove zero TCP TS samples for autotuning
- tcp: add receive queue awareness in tcp_rcv_space_adjust()
- bpf: Pass the same orig_call value to trampoline functions
- net: stmmac: generate software timestamp just before the doorbell
- hid-asus: check ROG Ally MCU version and warn
- wifi: iwlwifi: mvm: fix beacon CCK flag
- scsi: smartpqi: Add new PCI IDs
- Revert "mac80211: Dynamically set CoDel parameters per station"
- bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp
- wifi: ath12k: using msdu end descriptor to check for rx multicast
packets
- isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry
- ixgbe: Fix unreachable retry logic in combined and byte I2C write
functions
- RDMA/hns: initialize db in update_srq_db()
- platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice
- LoongArch: vDSO: Correctly use asm parameters in syscall wrappers
- nvme: always punt polled uring_cmd end_io work to task_work
- mm: close theoretical race where stale TLB entries could linger
- x86/virt/tdx: Avoid indirect calls to TDX assembly functions
- wifi: rtw89: phy: add dummy C2H event handler for report of TAS power
- ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP
Victus 15-fa1xxx
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA
- drm/amdgpu: read back register after written for VCN v4.0.5
- Kunit to check the longest symbol length
- x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
- ipv6: remove leftover ip6 cookie initializer
- ipv6: replace ipcm6_init calls with ipcm6_init_sk
- drm/ssd130x: fix ssd132x_clear_screen() columns
- workqueue: Initialize wq_isolated_cpumask in workqueue_init_early()
- mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available
- gpio: pca953x: fix wrong error probe return value
- bpftool: Fix cgroup command to only show cgroup bpf programs
- Upstream stable to v6.6.95, v6.12.35
- bpftool: Query only cgroup-related attach types
- bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38507
- HID: nintendo: avoid bluetooth suspend/resume stalls
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38511
- drm/xe/pf: Clear all LMTT pages on alloc
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38520
- drm/amdkfd: Don't call mmput from MMU notifier callback
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38521
- drm/imagination: Fix kernel crash when hard resetting the GPU
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38506
- KVM: Allow CPU to reschedule while setting per-page memory attributes
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38104
- drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to
avoid Priority Inversion in SRIOV
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38067
- rseq: Fix segfault on registration when rseq_cs is non-zero
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-37984
- crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38437
- ksmbd: fix potential use-after-free in oplock/lease break ack
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38510
- kasan: remove kasan_find_vm_area() to prevent possible deadlock
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38503
- btrfs: fix assertion when building free space tree
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38439
- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38542
- net: appletalk: Fix device refcount leak in atrtr_create()
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38441
- netfilter: flowtable: account for Ethernet header in
nf_flow_pppoe_proto()
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38443
- nbd: fix uaf in nbd_genl_connect() error path
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38444
- raid10: cleanup memleak at raid10_make_request
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38445
- md/raid1: Fix stack memory use after return in raid1_reshape
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38543
- drm/tegra: nvdec: Fix dma_alloc_coherent error check
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38513
- wifi: zd1211rw: Fix potential NULL pointer dereference in
zd_mac_tx_to_dev()
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38448
- usb: gadget: u_serial: Fix race condition in TTY wakeup
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38515
- drm/sched: Increment job count before swapping tail spsc queue
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38449
- drm/gem: Acquire references on GEM handles for framebuffers
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38512
- wifi: prevent A-MSDU attacks in mesh networks
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38516
- pinctrl: qcom: msm: mark certain pins as invalid for interrupts
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38455
- KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-
flight
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38456
- ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38514
- rxrpc: Fix oops due to non-existence of prealloc backlog struct
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38544
- rxrpc: Fix bug due to prealloc collision
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38457
- net/sched: Abort __tc_modify_qdisc if parent class does not exist
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38458
- atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38459
- atm: clip: Fix infinite recursive call of clip_push().
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38546
- atm: clip: Fix memory leak of struct clip_vcc.
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38460
- atm: clip: Fix potential null-ptr-deref in to_atmarpd().
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38461
- vsock: Fix transport_* TOCTOU
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38462
- vsock: Fix transport_{g2h,h2g} TOCTOU
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38463
- tcp: Correct signedness in skb remaining space calculation
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38464
- tipc: Fix use-after-free in tipc_conn_close().
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38465
- netlink: Fix wraparounds of sk->sk_rmem_alloc.
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38466
- perf: Revert to requiring CAP_SYS_ADMIN for uprobes
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38467
- drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
* Noble update: upstream stable patchset 2025-12-12 (LP: #2135261) //
CVE-2025-38349
- eventpoll: don't decrement ep refcount while still holding the ep mutex
* [UBUNTU 24.04] KVM: s390: improve interrupt cpu for wakeup (LP: #2132317)
- KVM: s390: improve interrupt cpu for wakeup
* veth.sh from ubuntu_kselftests_net failed on J-5.15 / N-6.8 (with xdp
attached - gro flag) (LP: #2065369)
- selftests: net: veth: test the ability to independently manipulate GRO
and XDP
* ftrace:test.d--event--subsystem-enable.tc fails on some instances
(LP: #2071861)
- selftests/tracing: Fix false failure of subsystem event test
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640)
- rtc: pcf2127: add missing semicolon after statement
- rtc: pcf2127: fix SPI command byte for PCF2131
- rtc: cmos: use spin_lock_irqsave in cmos_interrupt
- mmc: sdhci: Add a helper function for dump register in dynamic debug
mode
- mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
- Bluetooth: hci_sync: revert some mesh modifications
- Bluetooth: MGMT: set_mesh: update LE scan interval and window
- Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
- mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
- mtk-sd: reset host->mrq on prepare_data() error
- arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
- platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
- scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
- scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
- scsi: ufs: core: Fix spelling of a sysfs attribute name
- RDMA/mlx5: Fix HW counters query for non-representor devices
- RDMA/mlx5: Fix CC counters query for MPV
- RDMA/mlx5: Fix vport loopback for MPV device
- platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
- Bluetooth: Prevent unintended pause by checking if advertising is active
- btrfs: fix missing error handling when searching for inode refs during
log replay
- btrfs: rename err to ret in btrfs_rmdir()
- btrfs: propagate last_unlink_trans earlier when doing a rmdir
- btrfs: use btrfs_record_snapshot_destroy() during rmdir
- ethernet: atl1: Add missing DMA mapping error checks and count errors
- dpaa2-eth: fix xdp_rxq_info leak
- drm/exynos: fimd: Guard display clock control with runtime PM calls
- spi: spi-fsl-dspi: Clear completion counter before initiating transfer
- drm/i915/selftests: Change mock_request() to return error pointers
- platform/x86: make fw_attr_class constant
- platform/x86: firmware_attributes_class: Move include
linux/device/class.h
- platform/x86: firmware_attributes_class: Simplify API
- platform/x86: think-lmi: Directly use firmware_attributes_class
- platform/x86: think-lmi: Fix class device unregistration
- platform/x86: dell-sysman: Directly use firmware_attributes_class
- platform/x86: dell-wmi-sysman: Fix class device unregistration
- platform/mellanox: mlxreg-lc: Fix logic error in power state check
- smb: client: fix warning when reconnecting channel
- drm/i915/gsc: mei interrupt top half should be in irq disabled context
- igc: disable L1.2 PCI-E link substate to avoid performance issue
- lib: test_objagg: Set error message in check_expect_hints_stats()
- amd-xgbe: align CL37 AN sequence as per databook
- enic: fix incorrect MTU comparison in enic_change_mtu()
- nui: Fix dma_mapping_error() check
- amd-xgbe: do not double read link status
- smb: client: fix race condition in negotiate timeout by using more
precise timing
- wifi: mac80211: chan: chandef is non-NULL for reserved
- f2fs: prevent writing without fallocate() for pinned files
- f2fs: convert f2fs_vm_page_mkwrite() to use folio
- f2fs: fix to zero post-eof page
- drm/simpledrm: Do not upcast in release helpers
- ALSA: sb: Don't allow changing the DMA mode during operations
- ALSA: sb: Force to disable DMAs once when DMA mode is changed
- ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
- ata: pata_cs5536: fix build on 32-bit UML
- ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
- platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks
list
- powerpc: Fix struct termio related ioctl macros
- ASoC: amd: yc: update quirk data for HP Victus
- regulator: fan53555: add enable_time support and soft-start times
- aoe: defer rexmit timer downdev work to workqueue
- wifi: mac80211: drop invalid source address OCB frames
- rcu: Return early if callback is not specified
- platform/x86: hp-bioscfg: Directly use firmware_attributes_class
- platform/x86: hp-bioscfg: Fix class device unregistration
- module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
- NFSv4/flexfiles: Fix handling of NFS level errors in I/O
- usb: xhci: quirk for data loss in ISOC transfers
- xhci: dbctty: disable ECHO flag by default
- xhci: dbc: Flush queued requests before stopping dbc
- xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
- Input: xpad - support Acer NGR 200 Controller
- Input: iqs7222 - explicitly define number of external channels
- usb: cdnsp: do not disable slot for disabled slot
- dma-buf: fix timeout handling in dma_resv_wait_timeout v2
- i2c/designware: Fix an initialization issue
- Logitech C-270 even more broken
- iommu/rockchip: prevent iommus dead loop when two masters share one
IOMMU
- powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be
changed
- platform/x86: think-lmi: Create ksets consecutively
- platform/x86: think-lmi: Fix kobject cleanup
- platform/x86: think-lmi: Fix sysfs group cleanup
- usb: typec: displayport: Fix potential deadlock
- powerpc/kernel: Fix ppc_save_regs inclusion in build
- [Config] enable Transient Scheduler Attacks mitigation
- x86/CPU/AMD: Properly check the TSA microcode
- x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
- net: txgbe: request MISC IRQ in ndo_open
- Bluetooth: HCI: Set extended advertising data synchronously
- iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes
- firmware: arm_ffa: Move memory allocation outside the mutex locking
- platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1
- btrfs: return a btrfs_inode from btrfs_iget_logging()
- btrfs: return a btrfs_inode from read_one_inode()
- btrfs: fix invalid inode pointer dereferences during log replay
- btrfs: fix inode lookup error handling during log replay
- nvme: Fix incorrect cdw15 value in passthru error logging
- drm/bridge: aux-hpd-bridge: fix assignment of the of_node
- netfs: Fix i_size updating
- arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma
- crypto: iaa - Remove dst_null support
- crypto: iaa - Do not clobber req->base.data
- spinlock: extend guard with spinlock_bh variants
- crypto: zynqmp-sha - Add locking
- kunit: qemu_configs: sparc: use Zilog console
- kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y
- kunit: qemu_configs: Disable faulting tests on 32-bit SPARC
- gfs2: Initialize gl_no_formal_ino earlier
- gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE
- gfs2: Rename dinode_demise to evict_behavior
- gfs2: Prevent inode creation race
- gfs2: Rename GLF_FREEING to GLF_UNLOCKED
- gfs2: Decode missing glock flags in tracepoints
- gfs2: Add GLF_PENDING_REPLY flag
- gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE
- gfs2: Move gfs2_dinode_dealloc
- gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc
- gfs2: deallocate inodes in gfs2_create_inode
- btrfs: fix wrong start offset for delalloc space release during mmap
write
- ASoC: tas2764: Extend driver to SN012776
- ASoC: tas2764: Reinit cache on part reset
- ACPI: thermal: Fix stale comment regarding trip points
- ACPI: thermal: Execute _SCP before reading trip points
- bonding: Mark active offloaded xfrm_states
- wifi: ath12k: Handle error cases during extended skb allocation
- wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers
- RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup"
bug
- iommu: ipmmu-vmsa: avoid Wformat-security warning
- f2fs: decrease spare area for pinned files for zoned devices
- f2fs: zone: introduce first_zoned_segno in f2fs_sb_info
- f2fs: introduce SEGS_TO_BLKS/BLKS_TO_SEGS for cleanup
- f2fs: zone: fix to calculate first_zoned_segno correctly
- scsi: lpfc: Remove NLP_RELEASE_RPI flag from nodelist structure
- scsi: lpfc: Change lpfc_nodelist nlp_flag member into a bitmask
- hisi_acc_vfio_pci: bugfix cache write-back issue
- hisi_acc_vfio_pci: bugfix the problem of uninstalling driver
- bpf: use common instruction history across all states
- arm64: dts: qcom: sm8650: change labels to lower-case
- arm64: dts: qcom: sm8650: Fix domain-idle-state for CPU2
- arm64: dts: qcom: sm8650: add the missing l2 cache node
- remoteproc: k3: Call of_node_put(rmem_np) only once in three functions
- remoteproc: k3-r5: Add devm action to release reserved memory
- remoteproc: k3-r5: Use devm_kcalloc() helper
- remoteproc: k3-r5: Use devm_ioremap_wc() helper
- remoteproc: k3-r5: Use devm_rproc_alloc() helper
- remoteproc: k3-r5: Use devm_rproc_add() helper
- remoteproc: k3-r5: Refactor sequential core power up/down operations
- mfd: exynos-lpass: Fix another error handling path in
exynos_lpass_probe()
- selinux: change security_compute_sid to return the ssid or tsid on match
- drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause
- drm/xe/bmg: Add BMG platform definition
- drm/i915/bmg: Define IS_BATTLEMAGE macro
- drm/i915/dp_mst: Work around Thunderbolt sink disconnect after
SINK_COUNT_ESI read
- arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on
- scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag
- RDMA/mlx5: Fix cache entry update on dereg error
- drm/xe: Allow dropping kunit dependency as built-in
- usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed
- Revert "usb: xhci: Implement xhci_handshake_check_state() helper"
- usb: cdnsp: Fix issue with CV Bad Descriptor test
- usb: dwc3: Abort suspend on soft disconnect failure
- Upstream stable to v6.6.97, v6.12.37
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38407
- riscv: cpu_ops_sbi: Use static array for boot_data
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38374
- optee: ffa: fix sleep in atomic context
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38373
- IB/mlx5: Fix potential deadlock in MR deregistration
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38408
- genirq/irq_sim: Initialize work context pointers properly
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38279
- bpf: Do not include stack ptr register in precision backtracking
bookkeeping
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38289
- scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38392
- idpf: convert control queue mutex to a spinlock
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38402
- idpf: return 0 size for RSS key if not supported
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38405
- nvmet: fix memory leak of bio integrity
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38388
- firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic
context
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38390
- firmware: arm_ffa: Fix memory leak by freeing notifier callback node
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2024-36350 // CVE-2024-36357
- x86/bugs: Rename MDS machinery to something more generic
- x86/bugs: Add a Transient Scheduler Attacks mitigation
- KVM: SVM: Advertise TSA CPUID bits to guests
- x86/microcode/AMD: Add TSA microcode SHAs
- x86/process: Move the buffer clearing before MONITOR
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38376
- usb: chipidea: udc: disconnect/reconnect from host when do
suspend/resume
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38396
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38371
- drm/v3d: Disable interrupts before resetting the GPU
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38384
- mtd: spinand: fix memory leak of ECC engine conf
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38386
- ACPICA: Refuse to evaluate a method if arguments are missing
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38406
- wifi: ath6kl: remove WARN on bad firmware input
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38399
- scsi: target: Fix NULL pointer dereference in
core_scsi3_decode_spec_i_port()
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38409
- drm/msm: Fix another leak in the submit error path
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38410
- drm/msm: Fix a fence leak in submit error path
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38377
- rose: fix dangling neighbour pointers in rose_rt_device_down()
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38389
- drm/i915/gt: Fix timeline left held on VMA alloc error
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38385
- net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38412
- platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs
callbacks
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38382
- btrfs: fix iteration of extrefs during log replay
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38393
- NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38400
- nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38387
- RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38401
- mtk-sd: Prevent memory corruption from DMA map failure
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38391
- usb: typec: altmodes/displayport: do not index invalid pin_assignments
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38395
- regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38403
- vsock/vmci: Clear the vmci transport packet properly when initializing
it
* Noble update: upstream stable patchset 2025-12-11 (LP: #2134640) //
CVE-2025-38375
- virtio-net: ensure the received length does not exceed allocated size
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499)
- cifs: Correctly set SMB1 SessionKey field in Session Setup Request
- cifs: Fix cifs_query_path_info() for Windows NT servers
- cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE
mode
- NFSv4: Always set NLINK even if the server doesn't support it
- NFSv4.2: fix listxattr to return selinux security label
- mailbox: Not protect module_put with spin_lock_irqsave
- mfd: max14577: Fix wakeup source leaks on device unbind
- sunrpc: don't immediately retransmit on seqno miss
- leds: multicolor: Fix intensity setting while SW blinking
- fuse: fix race between concurrent setattrs from multiple nodes
- cxl/region: Add a dev_err() on missing target list entries
- NFSv4: xattr handlers should check for absent nfs filehandles
- hwmon: (pmbus/max34440) Fix support for max34451
- ksmbd: allow a filename to contain special characters on SMB3.1.1 posix
extension
- ksmbd: provide zero as a unique ID to the Mac client
- rust: module: place cleanup_module() in .exit.text section
- dmaengine: xilinx_dma: Set dma_device directions
- PCI: dwc: Make link training more robust by setting
PORT_LOGIC_LINK_WIDTH to one lane
- PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
- md/md-bitmap: fix dm-raid max_write_behind setting
- amd/amdkfd: fix a kfd_process ref leak
- iio: pressure: zpa2326: Use aligned_s64 for the timestamp
- um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
- um: use proper care when taking mmap lock during segfault
- coresight: Only check bottom two claim bits
- usb: dwc2: also exit clock_gating when stopping udc while suspended
- iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
- usb: potential integer overflow in usbg_make_tpg()
- usb: common: usb-conn-gpio: use a unique name for usb connector device
- usb: Add checks for snprintf() calls in usb_alloc_dev()
- usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
- usb: typec: displayport: Receive DP Status Update NAK request exit dp
altmode
- usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
- ALSA: hda: Ignore unsol events for cards being shut down
- ALSA: hda: Add new pci id for AMD GPU display HD audio controller
- ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
- ceph: fix possible integer overflow in ceph_zero_objects()
- scsi: ufs: core: Don't perform UFS clkscaling during host async scan
- ovl: Check for NULL d_inode() in ovl_dentry_upper()
- fs/jfs: consolidate sanity checking in dbMount
- ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with
dev_err_probe()
- ASoC: codec: wcd9335: Convert to GPIO descriptors
- f2fs: don't over-report free space or inodes in statvfs
- PCI: apple: Use helper function for_each_child_of_node_scoped()
- PCI: apple: Set only available ports up
- platform/x86: ideapad-laptop: move ACPI helpers from header to source
file
- platform/x86: ideapad-laptop: use usleep_range() for EC polling
- i2c: tiny-usb: disable zero-length read messages
- i2c: robotfuzz-osif: disable zero-length read messages
- ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
- attach_recursive_mnt(): do not lock the covering tree when sliding
something under it
- libbpf: Fix null pointer dereference in btf_dump__free on allocation
failure
- wifi: mac80211: fix beacon interval calculation overflow
- af_unix: Don't set -ECONNRESET for consumed OOB skb.
- vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
- um: ubd: Add missing error check in start_io_thread()
- libbpf: Fix possible use-after-free for externs
- net: enetc: Correct endianness handling in _enetc_rd_reg64
- ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
- net: selftests: fix TCP packet checksum
- drm/i915: fix build error some more
- drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
- drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
- EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
- staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
- dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
- serial: imx: Restore original RXTL for console to fix data loss
- Bluetooth: L2CAP: Fix L2CAP MTU negotiation
- dm-raid: fix variable in journal device check
- btrfs: update superblock's device bytes_used when dropping chunk
- net: libwx: fix the creation of page_pool
- HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
- HID: wacom: fix memory leak on kobject creation failure
- HID: wacom: fix memory leak on sysfs attribute creation failure
- HID: wacom: fix kobject reference count leak
- drm/ast: Fix comment on modeset lock
- drm/cirrus-qemu: Fix pitch programming
- drm/etnaviv: Protect the scheduler's pending list with its lock
- drm/tegra: Assign plane type before registration
- drm/udl: Unregister device before cleaning up on disconnect
- drm/amdkfd: Fix race in GWS queue scheduling
- drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
- drm/bridge: cdns-dsi: Fix phy de-init and flag it so
- drm/bridge: cdns-dsi: Fix connecting to next bridge
- drm/bridge: cdns-dsi: Check return value when getting default PHY config
- drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
- drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
- drm/amdgpu: Add kicker device detection
- drm/amdgpu: switch job hw_fence to amdgpu_fence
- ksmbd: Use unsafe_memcpy() for ntlm_negotiate
- ksmbd: remove unsafe_memcpy use in session setup
- media: uvcvideo: Rollback non processed entities on error
- firmware: arm_scmi: Add a common helper to check if a message is
supported
- firmware: arm_scmi: Ensure that the message-id supports fastchannel
- ARM: 9354/1: ptrace: Use bitfield helpers
- nvme-tcp: fix I/O stalls on congested sockets
- drm/amdgpu: seq64 memory unmap uses uninterruptible lock
- 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0
and later devices
- usb: gadget: f_hid: wake up readers on disable/unbind
- drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
- Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
- btrfs: fix qgroup reservation leak on failure to allocate ordered extent
- smb: client: remove \t from TP_printk statements
- fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio
- drm/xe/display: Add check for alloc_ordered_workqueue()
- ethernet: ionic: Fix DMA mapping tests
- wifi: mac80211: Add link iteration macro for link data
- wifi: mac80211: Create separate links for VLAN interfaces
- wifi: mac80211: finish link init before RCU publish
- netlink: specs: tc: replace underscores with dashes in names
- drm/amdgpu/discovery: optionally use fw based ip discovery
- drm/amd: Adjust output for discovery error handling
- x86/traps: Initialize DR6 by writing its architectural reset value
- serial: core: restore of_node information in sysfs
- spi: spi-cadence-quadspi: Fix pm runtime unbalance
- mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
- scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
- drm/amd/display: Correct non-OLED pre_T11_delay.
- drm/xe/vm: move rebind_work init earlier
- drm/xe/sched: stop re-submitting signalled jobs
- drm/xe: Fix memset on iomem
- drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL
- drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences
- drm/amd/display: Fix mpv playback corruption on weston
- x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE
- io_uring: fix potential page leak in io_sqe_buffer_register()
- iio: dac: ad3552r: changes to use FIELD_PREP
- drm/xe: Carve out wopcm portion from the stolen memory
- usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters
ERROR_RECOVERY
- drm/msm/dp: account for widebus and yuv420 during mode validation
- arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi
- ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA
- spi: fsl-qspi: Fix double cleanup in probe error path
- Upstream stable to v6.6.96, v6.12.36
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-37842
- spi: fsl-qspi: use devm function instead of driver remove
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-23155
- net: stmmac: Fix accessing freed irq affinity_hint
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-22101
- net: libwx: fix Tx L4 checksum
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38361
- drm/amd/display: Check dce_hwseq before dereferencing it
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38364
- maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38246
- bnxt: properly flush XDP redirect lists
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38250
- Bluetooth: hci_core: Fix use-after-free in vhci_flush()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38253
- HID: wacom: fix crash in wacom_aes_battery_handler()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38264
- nvme-tcp: sanitize request list handling
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38362
- drm/amd/display: Add null pointer check for get_first_active_display()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38354
- drm/msm/gpu: Fix crash when throttling GPU immediately during boot
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38363
- drm/tegra: Fix a possible null pointer dereference
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38239
- scsi: megaraid_sas: Fix invalid node index
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38365
- btrfs: fix a race between renames and directory logging
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38244
- smb: client: fix potential deadlock when reconnecting channels
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38245
- atm: Release atm_dev_mutex after removing procfs in
atm_dev_deregister().
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38249
- ALSA: usb-audio: Fix out-of-bounds read in
snd_usb_get_audioformat_uac3()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38251
- atm: clip: prevent NULL deref in clip_push()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38255
- lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38257
- s390/pkey: Prevent overflow in size calculation for memdup_user()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38258
- mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path
on write
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38259
- ASoC: codecs: wcd9335: Fix missing free of regulator supplies
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38230
- jfs: validate AG parameters in dbMount() to prevent crashes
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38260
- btrfs: handle csum tree error with rescue=ibadroots correctly
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38262
- tty: serial: uartlite: register uart driver in init
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38368
- misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38436
- drm/scheduler: signal scheduled fence when kill job
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38263
- bcache: fix NULL pointer in cache_set_flush()
* Noble update: upstream stable patchset 2025-12-09 (LP: #2134499) //
CVE-2025-38369
- dmaengine: idxd: Check availability of workqueue allocated by idxd wq
driver before using
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-22128
- wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq()
in error path
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38333
- f2fs: fix to bail out in get_new_segment()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38210
- configfs-tsm-report: Fix NULL dereference of tsm_ops
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38232
- NFSD: fix race between nfsd registration and exports_proc
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38320
- arm64/ptrace: Fix stack-out-of-bounds read in
regs_get_kernel_stack_nth()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38424
- perf: Fix sample vs do_exit()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38321
- smb: Log an error when close_all_cached_dirs fails
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38180
- net: atm: fix /proc/net/atm/lec handling
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38323
- net: atm: add lec_mutex
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38181
- calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38182
- ublk: santizize the arguments from userspace when adding a device
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38183
- net: lan743x: fix potential out-of-bounds write in
lan743x_ptp_io_event_clock_get()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38184
- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38185
- atm: atmtcp: Free invalid length skb in atmtcp_c_send().
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38324
- mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38420
- wifi: carl9170: do not ping device which has failed to load firmware
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38326
- aoe: clean device rq_list in aoedev_downdev()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38089
- sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38084
- mm/hugetlb: unshare page tables during VMA split, not before
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38190
- atm: Revert atm_account_tx() if copy_from_iter_full() fails.
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38191
- ksmbd: fix null pointer dereference in destroy_previous_session
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38192
- net: clear the dst when changing skb protocol
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38193
- net_sched: sch_sfq: reject invalid perturb period
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38328
- jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38194
- jffs2: check that raw node were preallocated before writing summary
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38090
- drivers/rapidio/rio_cm.c: prevent possible heap overwrite
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38197
- platform/x86: dell_rbu: Fix list usage
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38198
- fbcon: Make sure modelist not set on unregistered console
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38331
- net: ethernet: cortina: Use TOE/TSO on all TCP
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38200
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38332
- scsi: lpfc: Use memcpy() for BIOS version
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38342
- software node: Correct a OOB check in software_node_get_reference_args()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38334
- x86/sgx: Prevent attempts to reclaim poisoned pages
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38425
- i2c: tegra: check msg length in SMBUS block read
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38343
- wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38202
- bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38422
- net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38344
- ACPICA: fix acpi parse and parseext cache leaks
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38345
- ACPICA: fix acpi operand cache leak in dswstate.c
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38085
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38208
- smb: client: add NULL check in automount_fullpath
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38418
- remoteproc: core: Release rproc->clean_table after rproc_attach() fails
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38419
- remoteproc: core: Cleanup acquired resources when
rproc_handle_resources() fails in rproc_attach()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38427
- video: screen_info: Relocate framebuffers behind PCI bridges
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38086
- net: ch9200: fix uninitialised access during mii_nway_restart
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38346
- ftrace: Fix UAF when lookup kallsym after ftrace disabled
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38211
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38212
- ipc: fix to protect IPCS lookups using RCU
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38214
- fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38215
- fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in
fb_videomode_to_var
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38087
- net/sched: fix use-after-free in taprio_dev_notifier
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38416
- NFC: nci: uart: Set tty->disc_data only in success path
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38217
- hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38218
- f2fs: fix to do sanity check on sit_bitmap_size
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38219
- f2fs: prevent kernel warning due to negative i_nlink from corrupted
image
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38347
- f2fs: fix to do sanity check on ino and xnid
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38428
- Input: ims-pcu - check record size in ims_pcu_flash_firmware()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38220
- ext4: only dirty folios when data journaling regular files
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38222
- ext4: inline: fix len overflow in ext4_prepare_inline_data
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38336
- ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38429
- bus: mhi: ep: Update read pointer only after buffer is written
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38225
- media: imx-jpeg: Cleanup after an allocation error
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38226
- media: vivid: Change the siize of the composing
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38229
- media: cxusb: no longer judge rbuf when the write fails
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38337
- jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38338
- fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38231
- nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38430
- nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
* Noble update: upstream stable patchset 2025-12-08 (LP: #2134382) //
CVE-2025-38348
- wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786)
- tracing: Fix compilation warning on arm32
- pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
- pinctrl: armada-37xx: set GPIO output value before setting direction
- acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
- rtc: Make rtc_time64_to_tm() support dates before 1970
- rtc: Fix offset calculation for .start_secs < 0
- usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
- usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
- USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
- usb: typec: ucsi: fix Clang -Wsign-conversion warning
- Bluetooth: hci_qca: move the SoC type check to the right place
- usb: usbtmc: Fix timeout value in get_stb
- dt-bindings: usb: cypress,hx3: Add support for all variants
- dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt
property
- tools/x86/kcpuid: Fix error handling
- x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in
mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
- crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
- gfs2: gfs2_create_inode error handling fix
- perf/core: Fix broken throttling when max_samples_per_tick=1
- crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
- powerpc: do not build ppc_save_regs.o always
- powerpc/crash: Fix non-smp kexec preparation
- x86/microcode/AMD: Do not return error when microcode update is not
necessary
- x86/cpu: Sanitize CPUID(0x80000000) output
- crypto: marvell/cesa - Avoid empty transfer descriptor
- btrfs: scrub: update device stats when an error is detected
- btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
- rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
- crypto: lrw - Only add ecb if it is not already there
- crypto: xts - Only add ecb if it is not already there
- crypto: sun8i-ce - move fallback ahash_request to the end of the struct
- kunit: Fix wrong parameter to kunit_deactivate_static_stub()
- ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
- ASoC: tas2764: Enable main IRQs
- EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo
channel 0
- spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
- spi: tegra210-quad: remove redundant error handling code
- spi: tegra210-quad: modify chip select (CS) deactivation
- power: reset: at91-reset: Optimize at91_reset()
- ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
- PM: wakeup: Delete space in the end of string shown by
pm_show_wakelocks()
- x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
- PM: sleep: Print PM debug messages during hibernation
- ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
- spi: sh-msiof: Fix maximum DMA transfer size
- ASoC: apple: mca: Constrain channels according to TDM mask
- drm/vmwgfx: Add seqno waiter for sync_files
- drm/vc4: tests: Use return instead of assert
- media: rkvdec: Fix frame size enumeration
- arm64/fpsimd: Avoid RES0 bits in the SME trap handler
- arm64/fpsimd: Fix merging of FPSIMD state during signal return
- drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
- watchdog: exar: Shorten identity name to fit correctly
- m68k: mac: Fix macintosh_config for Mac II
- firmware: psci: Fix refcount leak in psci_dt_init
- arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
- selftests/seccomp: fix syscall_restart test for arm compat
- drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
- drm/vkms: Adjust vkms_state->active_planes allocation type
- drm/tegra: rgb: Fix the unbound reference count
- firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
- arm64/fpsimd: Do not discard modified SVE state
- scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
- drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
- drm/mediatek: Fix kobject put for component sub-drivers
- drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
- xen/x86: fix initial memory balloon target
- IB/cm: use rwlock for MAD agent lock
- selftests/bpf: Fix bpf_nf selftest failure
- bpf, sockmap: fix duplicated data transmission
- wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
- net: ncsi: Fix GCPS 64-bit member variables
- libbpf: Fix buffer overflow in bpf_object__init_prog
- xfrm: Use xdo.dev instead of xdo.real_dev
- wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
- wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
- wifi: rtw88: do not ignore hardware read error during DPK
- wifi: ath12k: Add MSDU length validation for TKIP MIC error
- RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
- scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
- libbpf: Remove sample_period init in perf_buffer
- Use thread-safe function pointer in libbpf_print
- iommu: Protect against overflow in iommu_pgsize()
- bonding: assign random address if device address is same as bond
- f2fs: clean up w/ fscrypt_is_bounce_page()
- f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
- libbpf: Use proper errno value in linker
- bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
- netfilter: bridge: Move specific fragmented packet to slow_path instead
of dropping it
- netfilter: nft_quota: match correctly when the quota just depleted
- bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
- tracing: Move histogram trigger variables from stack to per CPU
structure
- clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
- clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
- clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
- clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
- efi/libstub: Describe missing 'out' parameter in efi_load_initrd
- tracing: Rename event_trigger_alloc() to trigger_data_alloc()
- tracing: Fix error handling in event_trigger_parse()
- ktls, sockmap: Fix missing uncharge operation
- libbpf: Use proper errno value in nlattr
- clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
- s390/bpf: Store backchain even for leaf progs
- iommu: remove duplicate selection of DMAR_TABLE
- hisi_acc_vfio_pci: add eq and aeq interruption restore
- scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
- wifi: mt76: mt7996: set EHT max ampdu length capability
- wifi: mt76: mt7996: fix RX buffer size of MCU event
- netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
- vfio/type1: Fix error unwind in migration dirty bitmap allocation
- Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
- netfilter: nft_tunnel: fix geneve_opt dump
- RISC-V: KVM: lock the correct mp_state during reset
- RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
- net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
- net: phy: fix up const issues in to_mdio_device() and to_phy_device()
- net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
- net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
- f2fs: use d_inode(dentry) cleanup dentry->d_inode
- f2fs: fix to correct check conditions in f2fs_cross_rename
- arm64: dts: qcom: sdm845-starqltechn: remove wifi
- arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
- arm64: dts: qcom: sdm845-starqltechn: refactor node order
- arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
- arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
- arm64: dts: qcom: sm8250: Fix CPU7 opp table
- arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
- ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
- ARM: dts: at91: at91sam9263: fix NAND chip selects
- arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
- arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect
GPIO
- arm64: dts: imx8mm-beacon: Fix RTC capacitive load
- arm64: dts: imx8mn-beacon: Fix RTC capacitive load
- arm64: dts: imx8mp-beacon: Fix RTC capacitive load
- arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI
audio
- arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI
audio
- arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
- arm64: dts: mt6359: Add missing 'compatible' property to regulators node
- arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
- arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
- arm64: dts: rockchip: Update eMMC for NanoPi R5 series
- arm64: tegra: Drop remaining serial clock-names and reset-names
- arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
- ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
- nilfs2: add pointer check for nilfs_direct_propagate()
- nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
- dt-bindings: vendor-prefixes: Add Liontron name
- ARM: dts: qcom: apq8064: add missing clocks to the timer node
- ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon
device
- arm64: defconfig: mediatek: enable PHY drivers
- arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399
Puma with Haikou
- arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
- arm64: dts: mt6359: Rename RTC node to match binding expectations
- ARM: aspeed: Don't select SRAM
- soc: aspeed: lpc: Fix impossible judgment condition
- randstruct: gcc-plugin: Remove bogus void member
- randstruct: gcc-plugin: Fix attribute addition
- perf build: Warn when libdebuginfod devel files are not available
- perf ui browser hists: Set actions->thread before calling
do_zoom_thread()
- dm: don't change md if dm_table_set_restrictions() fails
- dm: free table mempools if not used in __bind
- dm-flakey: error all IOs when num_features is absent
- dm-flakey: make corrupting read bios work
- perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
- perf intel-pt: Fix PEBS-via-PT data_src
- perf scripts python: exported-sql-viewer.py: Fix pattern matching with
Python 3
- remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
- remoteproc: k3-r5: Drop check performed in
k3_r5_rproc_{mbox_callback/kick}
- rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
- mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in
exynos_lpass_remove()
- mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
- perf tests switch-tracking: Fix timestamp comparison
- perf record: Fix incorrect --user-regs comments
- perf trace: Always print return value for syscalls returning a pid
- nfs: clear SB_RDONLY before getting superblock
- nfs: ignore SB_RDONLY when remounting nfs
- cifs: Fix validation of SMB1 query reparse point response
- rtc: sh: assign correct interrupts with DT
- PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
- PCI: cadence: Fix runtime atomic count underflow
- PCI: apple: Use gpiod_set_value_cansleep in probe flow
- PCI/DPC: Initialize aer_err_info before using it
- rtc: loongson: Add missing alarm notifications for ACPI RTC events
- thunderbolt: Fix a logic error in wake on connect
- iio: filter: admv8818: fix band 4, state 15
- iio: filter: admv8818: fix integer overflow
- iio: filter: admv8818: fix range calculation
- iio: filter: admv8818: Support frequencies >= 2^32
- iio: adc: ad7124: Fix 3dB filter frequency reading
- MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
- counter: interrupt-cnt: Protect enable/disable OPs with mutex
- vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
- net: stmmac: platform: guarantee uniqueness of bus_id
- gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
- net: tipc: fix refcount warning in tipc_aead_encrypt
- driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
- net/mlx4_en: Prevent potential integer overflow calculating Hz
- net: lan966x: Make sure to insert the vlan tags also in host mode
- spi: bcm63xx-spi: fix shared reset
- spi: bcm63xx-hsspi: fix shared reset
- Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
- ice: create new Tx scheduler nodes for new queues only
- ice: fix rebuilding the Tx scheduler tree for large queue counts
- net: dsa: tag_brcm: legacy: fix pskb_may_pull length
- vmxnet3: correctly report gso type for UDP tunnels
- PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
- netfilter: nf_nat: also check reverse tuple to obtain clashing entry
- net: dsa: b53: do not enable RGMII delay on bcm63xx
- net: dsa: b53: allow RGMII for bcm63xx RGMII ports
- wireguard: device: enable threaded NAPI
- scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
- ASoC: codecs: hda: Fix RPM usage count underflow
- ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
- ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
- path_overmount(): avoid false negatives
- fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
- Input: synaptics-rmi - fix crash with unsupported versions of F34
- arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
- serial: sh-sci: Move runtime PM enable to sci_probe_single()
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit
- Bluetooth: hci_core: fix list_for_each_entry_rcu usage
- Bluetooth: MGMT: Remove unused mgmt_pending_find_data
- ath10k: snoc: fix unbalanced IRQ enable in crash recovery
- wifi: ath11k: fix soc_dp_stats debugfs file permission
- wifi: ath11k: convert timeouts to secs_to_jiffies()
- wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
- wifi: ath11k: don't use static variables in
ath11k_debugfs_fw_stats_process()
- wifi: ath11k: don't wait when there is no vdev started
- wifi: ath11k: validate ath11k_crypto_mode on top of
ath11k_core_qmi_firmware_ready
- regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
- pinctrl: qcom: pinctrl-qcm2290: Add missing pins
- scsi: iscsi: Fix incorrect error path labels for flashnode operations
- powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
- drm/meson: use unsigned long long / Hz for frequency types
- drm/meson: fix debug log statement when setting the HDMI clocks
- drm/meson: use vclk_freq instead of pixel_freq in debug print
- drm/meson: fix more rounding issues with 59.94Hz modes
- i40e: return false from i40e_reset_vf if reset is in progress
- i40e: retry VFLR handling if there is ongoing VF reset
- macsec: MACsec SCI assignment for ES = 0
- Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
- net/mlx5: Ensure fw pages are always allocated on same NUMA
- net/mlx5: Fix return value when searching for existing flow group
- net/mlx5e: Fix leak of Geneve TLV option object
- net_sched: tbf: fix a race in tbf_change()
- fs/filesystems: Fix potential unsigned integer underflow in fs_name()
- nvmet-fcloop: access fcpreq only when holding reqlock
- perf: Ensure bpf_perf_link path is properly serialized
- bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
- block: Fix bvec_set_folio() for very large folios
- tools/resolve_btfids: Fix build when cross compiling kernel with clang.
- ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
- io_uring: expand main struct io_kiocb flags to 64-bits
- io_uring: add io_file_can_poll() helper
- io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
- io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
- usb: usbtmc: Fix read_stb function and get_stb ioctl
- usb: cdnsp: Fix issue with detecting command completion event
- usb: cdnsp: Fix issue with detecting USB 3.2 speed
- usb: Flush altsetting 0 endpoints before reinitializating them after
reset.
- usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
- xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
- calipso: unlock rcu before returning -EAFNOSUPPORT
- regulator: dt-bindings: mt6357: Drop fixed compatible requirement
- net: usb: aqc111: debug info before sanitation
- drm/meson: Use 1000ULL when operating with mode->clock
- Documentation: ACPI: Use all-string data node references
- PCI/ASPM: Consolidate link state defines
- PCI/ASPM: Disable L1 before disabling L1 PM Substates
- perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member
- perf/x86/amd/uncore: Prevent UMC counters from saturating
- crypto: sun8i-ce - undo runtime PM changes during driver removal
- erofs: fix file handle encoding for 64-bit NIDs
- btrfs: fix invalid data space release when truncating block in NOCOW
mode
- ACPI: resource: fix a typo for MECHREVO in
irq1_edge_low_force_override[]
- thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure
- drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource
- drm/vmwgfx: Fix dumb buffer leak
- drm/xe/d3cold: Set power state to D3Cold during s2idle/s3
- drm/panel: samsung-sofef00: Drop s6e3fc2x01 support
- kunit/usercopy: Disable u64 test on 32-bit SPARC
- drm/msm/dpu: enable SmartDMA on SM8150
- drm/msm/dpu: enable SmartDMA on SC8180X
- overflow: Fix direct struct member initialization in _DEFINE_FLEX()
- drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3
- media: verisilicon: Free post processor buffers on error
- wifi: ath12k: Fix memory leak during vdev_id mismatch
- wifi: ath12k: Fix invalid memory access while forming 802.11 header
- bpf: Check link_create.flags parameter for multi_kprobe
- wifi: ath12k: fix cleanup path after mhi init
- f2fs: clean up unnecessary indentation
- f2fs: prevent the current section from being selected as a victim during
GC
- net/mlx5: Avoid using xso.real_dev unnecessarily
- wifi: ath12k: Fix the QoS control field offset to build QoS header
- libbpf: Fix event name too long error
- wifi: iwlfiwi: mvm: Fix the rate reporting
- selftests/bpf: Fix caps for __xlated/jited_unpriv
- wifi: rtw89: pci: enlarge retry times of RX tag to 1000
- wifi: mt76: mt7925: prevent multiple scan commands
- wifi: mt76: mt7925: refine the sniffer commnad
- wifi: mt76: mt7925: ensure all MCU commands wait for response
- netfilter: nf_tables: nft_fib: consistent l3mdev handling
- vsock/virtio: fix `rx_bytes` accounting for stream sockets
- net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in
dmaengine xmit
- net: lan743x: Fix PHY reset handling during initialization and WOL
- octeontx2-af: Sync NIX and NPA contexts from NDC to LLC/DRAM
- octeontx2-pf: QOS: Perform cache sync on send queue teardown
- arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the
mdss node
- arm64: dts: qcom: ipq9574: Fix USB vdd info
- arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Simplify DSI endpoint
replacement
- arm64: dts: mt8183: Add port node to mt8183.dtsi
- soc: qcom: smp2p: Fix fallback to qcom,ipc parse
- ARM: dts: qcom: apq8064: move replicator out of soc node
- arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects
- perf symbol-minimal: Fix double free in filename__read_build_id
- mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe()
- mailbox: imx: Fix TXDB_V2 sending
- mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting
- perf symbol: Fix use-after-free in filename__read_build_id
- PCI/DPC: Log Error Source ID only when valid
- coresight: catu: Introduce refcount and spinlock for enabling/disabling
- mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array()
- iio: adc: mcp3911: fix device dependent mappings for conversion result
registers
- drm/xe: Make xe_gt_freq part of the Documentation
- Fix sock_exceed_buf_limit not being triggered in
__sk_mem_raise_allocated
- idpf: fix netdev Tx queue stop/wake
- idpf: fix a race in txq wakeup
- nvme: fix command limits status code
- drm/panel-simple: fix the warnings for the Evervision VGG644804
- net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces.
- net: dsa: b53: Introduce b53_adjust_531x5_rgmii()
- net: dsa: b53: do not touch DLL_IQQD on bcm53115
- ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315
- ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247
- ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA
- ALSA: hda/realtek - Support mute led function for HP platform
- ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
- ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
- dt-bindings: pinctrl: samsung: google,gs101-pinctrl needs a clock
- pinctrl: samsung: support a bus clock
- pinctrl: samsung: refactor drvdata suspend & resume callbacks
- pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks
- pinctrl: samsung: add gs101 specific eint suspend/resume callbacks
- net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0
- wifi: ath11k: move some firmware stats related functions outside of
debugfs
- wifi: ath12k: refactor ath12k_hw_regs structure
- gfs2: pass through holder from the VFS for freeze/thaw
- btrfs: exit after state split error at set_extent_bit()
- block: use q->elevator with ->elevator_lock held in elv_iosched_show()
- 9p: Add a migrate_folio method
- overflow: Introduce __DEFINE_FLEX for having no initializer
- thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit
- Upstream stable to v6.6.94, v6.12.33, v6.12.34
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38101
- ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38269
- btrfs: exit after state insertion failure at btrfs_convert_extent_bit()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38303
- Bluetooth: eir: Fix possible crashes on eir_create_adv_data
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38414
- wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38125
- net: stmmac: make sure that ptp_rate is not 0 before configuring EST
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38129
- page_pool: Fix use-after-free in page_pool_recycle_in_ring
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38156
- wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38162
- netfilter: nft_set_pipapo: prevent overflow in lookup table allocation
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38292
- wifi: ath12k: fix invalid access to memory
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38164
- f2fs: zone: fix to avoid inconsistence in between SIT and SSA
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38169
- arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38299
- ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38100
- x86/iopl: Cure TIF_IO_BITMAP inconsistencies
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38102
- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38103
- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38107
- net_sched: ets: fix a race in ets_qdisc_change()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38108
- net_sched: red: fix a race in __red_change()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38109
- net/mlx5: Fix ECVF vports unload on shutdown flow
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38304
- Bluetooth: Fix NULL pointer deference on eir_get_service_data
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38110
- net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38111
- net/mdiobus: Fix potential out-of-bounds read/write access
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38112
- net: Fix TOCTOU issue in sk_is_readable()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38113
- ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38088
- powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38115
- net_sched: sch_sfq: fix a potential crash on gso_skb handling
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38305
- ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38117
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38119
- scsi: core: ufs: Fix a hang in the error handler
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38307
- ASoC: Intel: avs: Verify content returned by parse_int_array()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38310
- seg6: Fix validation of nexthop addresses
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38120
- netfilter: nf_set_pipapo_avx2: fix initial map fill
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38122
- gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38123
- net: wwan: t7xx: Fix napi rx poll issue
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38124
- net: fix udp gso skb_segment after pull from frag_list
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38126
- net: stmmac: make sure that ptp_rate is not 0 before configuring
timestamping
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38127
- ice: fix Tx scheduler error handling in XDP callback
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38131
- coresight: prevent deactivate active config while enabling the config
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38274
- fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38135
- serial: Fix potential null-ptr-deref in mlb_usio_probe()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38136
- usb: renesas_usbhs: Reorder clock handling and power management in probe
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38138
- dmaengine: ti: Add NULL check in udma_probe()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38275
- phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38142
- hwmon: (asus-ec-sensors) check sensor index in read_string()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38277
- mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38143
- backlight: pm8941: Add NULL check in wled_configure()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38312
- fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38145
- soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38313
- bus: fsl-mc: fix double-free on mc_dev
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38415
- Squashfs: check return result of sb_min_blocksize
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38146
- net: openvswitch: Fix the dead loop of MPLS parse
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38147
- calipso: Don't call calipso functions for AF_INET sk.
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38278
- octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38148
- net: phy: mscc: Fix memory leak when using one step timestamping
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38149
- net: phy: clear phydev->devlink when the link is deleted
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38280
- bpf: Avoid __bpf_prog_ret0_warn when jit fails
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38153
- net: usb: aqc111: fix error handling of usbnet read calls
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38154
- bpf, sockmap: Avoid using sk_socket after free when sending
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38155
- wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38282
- kernfs: Relax constraint in draining guard
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38157
- wifi: ath9k_htc: Abort software beacon handling if disabled
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38283
- hisi_acc_vfio_pci: bugfix live migration function without VF device
driver
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38158
- hisi_acc_vfio_pci: fix XQE dma address error
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-39890
- wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38159
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38285
- bpf: Fix WARN() in get_bpf_raw_tp_regs
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38286
- pinctrl: at91: Fix possible out-of-boundary access
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38160
- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38161
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38290
- wifi: ath12k: fix node corruption in ar->arvifs list
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38163
- f2fs: fix to do sanity check on sbi->total_valid_block_count
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38165
- bpf, sockmap: Fix panic when calling skb_linearize
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38166
- bpf: fix ktls panic with sockmap
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38293
- wifi: ath11k: fix node corruption in ar->arvifs list
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38295
- perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in
meson_ddr_pmu_create()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38167
- fs/ntfs3: handle hdr_first_de() return value
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38170
- arm64/fpsimd: Discard stale CPU state when handling SME traps
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38319
- drm/amd/pp: Fix potential NULL pointer dereference in
atomctrl_initialize_mc_reg_table
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38298
- EDAC/skx_common: Fix general protection fault
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38173
- crypto: marvell/cesa - Handle zero-length skcipher requests
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38300
- crypto: sun8i-ce-cipher - fix error handling in
sun8i_ce_cipher_prepare()
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38174
- thunderbolt: Do not double dequeue a configuration request
* Noble update: upstream stable patchset 2025-12-03 (LP: #2133786) //
CVE-2025-38265
- serial: jsm: fix NPE during jsm_uart_port_init
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301)
- i2c: designware: Uniform initialization flow for polling mode
- i2c: designware: Remove ->disable() callback
- i2c: designware: Use temporary variable for struct device
- i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
- phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
- phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
- phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver
data
- phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
- cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
- nvmem: rockchip-otp: Move read-offset into variant-data
- nvmem: rockchip-otp: add rk3576 variant data
- nvmem: core: verify cell's raw_len
- nvmem: core: update raw_len if the bit reading is required
- nvmem: qfprom: switch to 4-byte aligned reads
- scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
- intel_th: avoid using deprecated page->mapping, index fields
- dma-mapping: avoid potential unused data compilation warning
- cgroup: Fix compilation issue due to cgroup_mutex not being exported
- scsi: mpi3mr: Add level check to control event logging
- net: enetc: refactor bulk flipping of RX buffers to separate function
- ima: process_measurement() needlessly takes inode_lock() on MAY_READ
- drm/amdgpu: Allow P2P access through XGMI
- selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
- bpf: fix possible endless loop in BPF map iteration
- samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
- kconfig: merge_config: use an empty file as initfile
- s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel
log
- cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
- cifs: Fix querying and creating MF symlinks over SMB1
- cifs: Fix negotiate retry functionality
- smb: client: Store original IO parameters and prevent zero IO sizes
- fuse: Return EPERM rather than ENOSYS from link()
- NFSv4: Check for delegation validity in
nfs_start_delegation_return_locked()
- NFS: Don't allow waiting for exiting tasks
- arm64: Add support for HIP09 Spectre-BHB mitigation
- tracing: Mark binary printing functions with __printf() attribute
- ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
- mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
- mailbox: use error ret code of of_parse_phandle_with_args()
- riscv: Allow NOMMU kernels to access all of RAM
- fbdev: fsl-diu-fb: add missing device_remove_file()
- fbcon: Use correct erase colour for clearing in fbcon
- fbdev: core: tileblit: Implement missing margin clearing for tileblit
- cifs: add validation check for the fields in smb_aces
- cifs: Fix establishing NetBIOS session for SMB2+ connection
- NFSv4: Treat ENETUNREACH errors as fatal for state recovery
- SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
- SUNRPC: rpcbind should never reset the port to the value '0'
- thermal/drivers/qoriq: Power down TMU on system suspend
- dql: Fix dql->limit value when reset.
- lockdep: Fix wait context check on softirq for PREEMPT_RT
- objtool: Properly disable uaccess validation
- PCI: dwc: ep: Ensure proper iteration over outbound map windows
- tools/build: Don't pass test log files to linker
- pNFS/flexfiles: Report ENETDOWN as a connection error
- PCI: vmd: Disable MSI remapping bypass under Xen
- ext4: on a remount, only log the ro or r/w state when it has changed
- mmc: host: Wait for Vdd to settle on card power off
- wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
- wifi: mt76: mt7996: revise TXS size
- x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
- i2c: qup: Vote for interconnect bandwidth to DRAM
- i2c: pxa: fix call balance of i2c->clk handling routines
- btrfs: make btrfs_discard_workfn() block_group ref explicit
- btrfs: avoid linker error in btrfs_find_create_tree_block()
- btrfs: run btrfs_error_commit_super() early
- btrfs: fix non-empty delayed iputs list on unmount due to async workers
- btrfs: get zone unusable bytes while holding lock at
btrfs_reclaim_bgs_work()
- btrfs: send: return -ENAMETOOLONG when attempting a path that is too
long
- drm/amd/display: Guard against setting dispclk low for dcn31x
- i3c: master: svc: Fix missing STOP for master request
- dlm: make tcp still work in multi-link env
- um: Store full CSGSFS and SS register from mcontext
- um: Update min_low_pfn to match changes in uml_reserved
- ext4: reorder capability check last
- hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
- scsi: st: Tighten the page format heuristics with MODE SELECT
- scsi: st: ERASE does not change tape location
- vfio/pci: Handle INTx IRQ_NOTCONNECTED
- bpf: Return prog btf_id without capable check
- jbd2: do not try to recover wiped journal
- tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
- rtc: rv3032: fix EERD location
- thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for
retimer
- ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
- bpf: Allow pre-ordering for bpf cgroup progs
- kbuild: fix argument parsing in scripts/config
- crypto: octeontx2 - suppress auth failure screaming due to negative
tests
- dm: restrict dm device size to 2^63-512 bytes
- net/smc: use the correct ndev to find pnetid by pnetid table
- xen: Add support for XenServer 6.1 platform device
- pinctrl-tegra: Restore SFSEL bit when freeing pins
- mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
- drm/amdgpu: Update SRIOV video codec caps
- ASoC: sun4i-codec: support hp-det-gpios property
- ext4: reject the 'data_err=abort' option in nojournal mode
- ext4: do not convert the unwritten extents if data writeback fails
- RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
- posix-timers: Add cond_resched() to posix_timer_add() search loop
- timer_list: Don't use %pK through printk()
- netfilter: conntrack: Bound nf_conntrack sysctl writes
- arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
- mmc: dw_mmc: add exynos7870 DW MMC support
- usb: xhci: Don't change the status of stalled TDs on failed Stop EP
- hwmon: (dell-smm) Increment the number of fans
- printk: Check CON_SUSPEND when unblanking a console
- drm/amd/display: remove minimum Dispclk and apply oem panel timing.
- drm/amd/display: calculate the remain segments for all pipes
- drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
- gfs2: Check for empty queue in run_queue
- auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct
hd44780_common"
- ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
- iommu/amd/pgtbl_v2: Improve error handling
- watchdog: aspeed: Update bootstatus handling
- drm/amdkfd: Set per-process flags only once cik/vi
- arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
- arm64: tegra: Resize aperture for the IGX PCIe C5 slot
- powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
- ALSA: seq: Improve data consistency at polling
- tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
- rtc: ds1307: stop disabling alarms on probe
- ieee802154: ca8210: Use proper setters and getters for bitwise types
- ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
- media: c8sectpfe: Call of_node_put(i2c_bus) only once in
c8sectpfe_probe()
- drm/gem: Test for imported GEM buffers with helper
- net: phylink: use pl->link_interface in phylink_expects_phy()
- remoteproc: qcom_wcnss: Handle platforms with only single power domain
- drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
- drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
- pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
- net: ethernet: ti: cpsw_new: populate netdev of_node
- net: pktgen: fix mpls maximum labels list parsing
- perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
- ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
- ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
- drm/rockchip: vop2: Add uv swap for cluster window
- media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
- media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
- clk: imx8mp: inform CCF of maximum frequency of clocks
- hwmon: (gpio-fan) Add missing mutex locks
- ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
- drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
- fpga: altera-cvp: Increase credit timeout
- perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
- soc: apple: rtkit: Use high prio work queue
- soc: apple: rtkit: Implement OSLog buffers properly
- wifi: ath12k: Report proper tx completion status to mac80211
- PCI: brcmstb: Expand inbound window size up to 64GB
- PCI: brcmstb: Add a softdep to MIP MSI-X driver
- net/mlx5: Avoid report two health errors on same syndrome
- selftests/net: have `gro.sh -t` return a correct exit code
- drm/amdkfd: KFD release_work possible circular locking
- leds: pwm-multicolor: Add check for fwnode_property_read_u32
- net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
- net: xgene-v2: remove incorrect ACPI_PTR annotation
- bonding: report duplicate MAC address in all situations
- wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
- soc: ti: k3-socinfo: Do not use syscon helper to build regmap
- Octeontx2-af: RPM: Register driver with PCI subsys IDs
- x86/build: Fix broken copy command in genimage.sh when making isoimage
- drm/amd/display: handle max_downscale_src_width fail check
- ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
- ASoC: mediatek: mt8188: Add reference for dmic clocks
- x86/nmi: Add an emergency handler in nmi_desc & use it in
nmi_shootdown_cpus()
- vhost-scsi: Return queue full for page alloc failures during copy
- vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
- media: adv7180: Disable test-pattern control on adv7180
- media: tc358746: improve calculation of the D-PHY timing registers
- libbpf: Fix out-of-bound read
- net/mlx5: Change POOL_NEXT_SIZE define value and make it global
- crypto: ahash - Set default reqsize from ahash_alg
- crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
- MIPS: Use arch specific syscall name match function
- MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
- clocksource: mips-gic-timer: Enable counter when CPUs start
- scsi: mpt3sas: Send a diag reset if target reset fails
- wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
- wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
- wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
- wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
- EDAC/ie31200: work around false positive build warning
- i3c: master: svc: Flush FIFO before sending Dynamic Address
Assignment(DAA)
- drm/amd/display: Add support for disconnected eDP streams
- RDMA/core: Fix best page size finding when it can cross SG entries
- pmdomain: imx: gpcv2: use proper helper for property detection
- can: c_can: Use of_property_present() to test existence of DT property
- bpf: don't do clean_live_states when state->loop_entry->branches > 0
- eth: mlx4: don't try to complete XDP frames in netpoll
- PCI: Fix old_size lower bound in calculate_iosize() too
- ACPI: HED: Always initialize before evged
- vxlan: Join / leave MC group after remote changes
- media: test-drivers: vivid: don't call schedule in loop
- net/mlx5: Modify LSB bitmask in temperature event to include only the
first bit
- net/mlx5: Apply rate-limiting to high temperature warning
- firmware: arm_ffa: Reject higher major version as incompatible
- ASoC: ops: Enforce platform maximum on initial value
- ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
- ASoC: tas2764: Mark SW_RESET as volatile
- ASoC: tas2764: Power up/down amp on mute ops
- ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
- pinctrl: devicetree: do not goto err when probing hogs in
pinctrl_dt_to_map
- smack: recognize ipv4 CIPSO w/o categories
- smack: Revert "smackfs: Added check catlen"
- kunit: tool: Use qboot on QEMU x86_64
- media: i2c: imx219: Correct the minimum vblanking value
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op
- net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
- clk: qcom: ipq5018: allow it to be bulid on arm32
- [Config] clk: qcom: ipq5018: enable module on armhf
- clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
- x86/traps: Cleanup and robustify decode_bug()
- sched: Reduce the default slice to avoid tasks getting an extra tick
- serial: sh-sci: Update the suspend/resume support
- phy: core: don't require set_mode() callback for phy_get_mode() to work
- soundwire: amd: change the soundwire wake enable/disable sequence
- drm/amdgpu: Set snoop bit for SDMA for MI series
- drm/amd/display: Don't try AUX transactions on disconnected link
- drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
- drm/amd/display: Update CR AUX RD interval interpretation
- drm/amd/display: Initial psr_version with correct setting
- drm/amdgpu: enlarge the VBIOS binary size limit
- drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
- scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
- net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
- net/mlx5e: set the tx_queue_len for pfifo_fast
- net/mlx5e: reduce rep rxq depth to 256 for ECPF
- net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
- drm/v3d: Add clock handling
- wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
- wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
- net: fec: Refactor MAC reset to function
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
- arch/powerpc/perf: Check the instruction type before creating sample
with perf_mem_data_src
- ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
- r8152: add vendor/device ID pair for Dell Alienware AW1022z
- pstore: Change kmsg_bytes storage size to u32
- ext4: don't write back data before punch hole in nojournal mode
- ext4: remove writable userspace mappings before truncating page cache
- wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
- wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
- clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
- hwmon: (xgene-hwmon) use appropriate type for the latency value
- f2fs: introduce f2fs_base_attr for global sysfs entries
- media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is
available
- ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
- r8169: don't scan PHY addresses > 0
- bridge: mdb: Allow replace of a host-joined group
- ice: treat dyn_allowed only as suggestion
- rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
- rcu: handle unstable rdp in rcu_read_unlock_strict()
- rcu: fix header guard for rcu_all_qs()
- perf: Avoid the read if the count is already updated
- ice: count combined queues using Rx/Tx count
- net/mana: fix warning in the writer of client oob
- scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
- scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when
pci_irq_vector() fails
- scsi: st: Restore some drive settings after reset
- wifi: ath12k: Avoid napi_sync() before napi_enable()
- HID: usbkbd: Fix the bit shift number for LED_KANA
- arm64: zynqmp: add clock-output-names property in clock nodes
- ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
- ASoC: rt722-sdca: Add some missing readable registers
- drm/ast: Find VBIOS mode from regular display size
- bpftool: Fix readlink usage in get_fd_type
- firmware: arm_scmi: Relax duplicate name constraint across protocol ids
- perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
- perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
- wifi: rtl8xxxu: retry firmware download on error
- wifi: rtw88: Don't use static local variable in
rtw8822b_set_tx_power_index_by_rate
- wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
- spi: zynqmp-gqspi: Always acknowledge interrupts
- regulator: ad5398: Add device tree support
- wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
- accel/qaic: Mask out SR-IOV PCI resources
- wifi: ath9k: return by of_get_mac_address
- wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
- drm: bridge: adv7511: fill stream capabilities
- drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
- drm/panel-edp: Add Starry 116KHD024006
- drm: Add valid clones check
- ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
- book3s64/radix: Fix compile errors when
CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
- pinctrl: meson: define the pull up/down resistor value as 60 kOhm
- ASoC: cs42l43: Disable headphone clamps during type detection
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
- ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
- nvme-pci: add quirks for device 126f:1001
- nvme-pci: add quirks for WDC Blue SN550 15b7:5009
- io_uring/fdinfo: annotate racy sq/cq head/tail reads
- cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
- cifs: Fix changing times and read-only attr over SMB1
smb_set_file_info() function
- tools: ynl-gen: validate 0 len strings from kernel
- wifi: iwlwifi: add support for Killer on MTL
- xenbus: Allow PVH dom0 a non-local xenstore
- soundwire: bus: Fix race on the creation of the IRQ domain
- dmaengine: idxd: Fix allowing write() from different address spaces
- kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
- remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
- clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
- xfrm: Sanitize marks before insert
- dmaengine: idxd: Fix ->poll() return value
- dmaengine: fsl-edma: Fix return code for unhandled interrupts
- Bluetooth: L2CAP: Fix not checking l2cap_chan security level
- Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump
handling
- bridge: netfilter: Fix forwarding of fragmented packets
- ice: fix vf->num_mac count with port representors
- ice: Fix LACP bonds without SRIOV environment
- pinctrl: qcom: switch to devm_register_sys_off_handler()
- net: dwmac-sun8i: Use parsed internal PHY address instead of 1
- net: lan743x: Restore SGMII CTRL register on resume
- io_uring: fix overflow resched cqe reordering
- octeontx2-pf: Add AF_XDP non-zero copy support
- octeontx2-af: Set LMT_ENA bit for APR table entries
- octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
- clk: s2mps11: initialise clk_hw_onecell_data::num before accessing
::hws[] in probe()
- can: slcan: allow reception of short error messages
- ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
- ASoc: SOF: topology: connect DAI to a single DAI link
- ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback
direction
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
- llc: fix data loss when reading from a socket in llc_ui_recvmsg()
- can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
- thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
- drm/edid: fixed the bug that hdr metadata was not reset
- arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
- smb: client: Reset all search buffer pointers when releasing buffer
- Input: xpad - add more controllers
- memcg: always call cond_resched() after fn()
- mm/page_alloc.c: avoid infinite retries caused by cpuset race
- Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
- ksmbd: fix stream write failure
- spi: spi-fsl-dspi: restrict register range for regmap access
- spi: spi-fsl-dspi: Halt the module after a new message transfer
- spi: spi-fsl-dspi: Reset SR flags before sending a new message
- serial: sh-sci: Save and restore more registers
- watchdog: aspeed: fix 64-bit division
- pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
- i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
- drm/gem: Internally test import_attach for imported objects
- can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
- af_unix: Return struct unix_sock from unix_get_socket().
- af_unix: Run GC on only one CPU.
- af_unix: Try to run GC async.
- af_unix: Replace BUG_ON() with WARN_ON_ONCE().
- af_unix: Remove io_uring code for GC.
- af_unix: Remove CONFIG_UNIX_SCM.
- [Config] af_unix: remove UNIX_SCM config option
- af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
- af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
- af_unix: Link struct unix_edge when queuing skb.
- af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
- af_unix: Iterate all vertices by DFS.
- af_unix: Detect Strongly Connected Components.
- af_unix: Save listener for embryo socket.
- af_unix: Fix up unix_edge.successor for embryo socket.
- af_unix: Save O(n) setup of Tarjan's algo.
- af_unix: Skip GC if no cycle exists.
- af_unix: Avoid Tarjan's algorithm if unnecessary.
- af_unix: Assign a unique index to SCC.
- af_unix: Detect dead SCC.
- Revert "UBUNTU: SAUCE: af_unix: Fix GC compatibility with upstream OOB
refcount changes"
- af_unix: Replace garbage collection algorithm.
- af_unix: Remove lock dance in unix_peek_fds().
- af_unix: Try not to hold unix_gc_lock during accept().
- af_unix: Don't access successor in unix_del_edges() during GC.
- af_unix: Add dead flag to struct scm_fp_list.
- af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
- af_unix: Fix uninit-value in __unix_walk_scc()
- SAUCE: Revert "af_unix: Don't return OOB skb in manage_oob()."
- SAUCE: Revert "af_unix: Move spin_lock() in manage_oob()."
- SAUCE: Revert "af_unix: Rename unlinked_skb in manage_oob()."
- SAUCE: Revert "af_unix: Remove single nest in manage_oob()."
- SAUCE: Revert "af_unix: Don't call skb_get() for OOB skb."
- af_unix: Define locking order for unix_table_double_lock().
- af_unix: Define locking order for U_LOCK_SECOND in
unix_state_double_lock().
- af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in
unix_collect_skb().
- af_unix: Don't call skb_get() for OOB skb.
- af_unix: Don't leave consecutive consumed OOB skbs.
- af_unix: Remove single nest in manage_oob().
- af_unix: Rename unlinked_skb in manage_oob().
- af_unix: Move spin_lock() in manage_oob().
- af_unix: Don't return OOB skb in manage_oob().
- arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
- arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
- arm64: dts: qcom: sm8450: Add missing properties for cryptobam
- arm64: dts: qcom: sm8550: Add missing properties for cryptobam
- arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
- perf/arm-cmn: Fix REQ2/SNP2 mixup
- perf/arm-cmn: Initialise cmn->cpu earlier
- coredump: fix error handling for replace_fd()
- dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
- HID: quirks: Add ADATA XPG alpha wireless mouse support
- nfs: don't share pNFS DS connections between net namespaces
- platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
- um: let 'make clean' properly clean underlying SUBARCH as well
- drm/amd/display: fix link_set_dpms_off multi-display MST corner case
- phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
- spi: spi-sun4i: fix early activation
- nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
- NFS: Avoid flushing data while holding directory locks in nfs_rename()
- platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
- platform/x86: thinkpad_acpi: Ignore battery threshold change event
notification
- net: ethernet: ti: am65-cpsw: Lower random mac address error print to
info
- dma/mapping.c: dev_dbg support for dma_addressing_limited
- mei: vsc: Use struct vsc_tp_packet as vsc-tp tx_buf and rx_buf type
- vhost_task: fix vhost_task_create() documentation
- dma-mapping: Fix warning reported for missing prototype
- fs/buffer: split locking for pagecache lookups
- fs/buffer: introduce sleeping flavors for pagecache lookups
- fs/buffer: use sleeping version of __find_get_block()
- fs/ocfs2: use sleeping version of __find_get_block()
- fs/jbd2: use sleeping version of __find_get_block()
- fs/ext4: use sleeping version of sb_find_get_block()
- drm/amd/display: Enable urgent latency adjustment on DCN35
- iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability
- cifs: Set default Netbios RFC1001 server name to hostname in UNC
- ASoC: codecs: wsa884x: Correct VI sense channel mask
- ASoC: codecs: wsa883x: Correct VI sense channel mask
- thermal/drivers/mediatek/lvts: Start sensor interrupts disabled
- Bluetooth: btmtksdio: Prevent enabling interrupts after IRQ handler
removal
- drm/amdgpu/discovery: check ip_discovery fw file available
- drm/amdkfd: set precise mem ops caps to disabled for gfx 11 and 12
- xen/pci: Do not register devices with segments >= 0x10000
- drm/amdgpu: Skip pcie_replay_count sysfs creation for VF
- cgroup/rstat: avoid disabling irqs for O(num_cpu)
- wifi: mt76: mt7996: fix SER reset trigger on WED reset
- wifi: mt76: mt7925: load the appropriate CLC data based on hardware type
- wifi: mt76: mt7925: fix fails to enter low power mode in suspend state
- x86/headers: Replace __ASSEMBLY__ with __ASSEMBLER__ in UAPI headers
- x86/cpu/intel: Replace PAT erratum model/family magic numbers with
symbolic IFM references
- x86/smpboot: Fix INIT delay assignment for extended Intel Families
- x86/microcode/intel: Switch to new Intel CPU model defines
- x86/microcode: Update the Intel processor flag scan check
- blk-cgroup: improve policy registration error handling
- drm/amdgpu: release xcp_mgr on exit
- drm/amdgpu: adjust drm_firmware_drivers_only() handling
- s390/tlb: Use mm_has_pgste() instead of mm_alloc_pgste()
- clocksource/drivers/timer-riscv: Stop stimecmp when cpu hotplug
- erofs: initialize decompression early
- clk: qcom: lpassaudiocc-sc7280: Add support for LPASS resets for QCM6490
- posix-timers: Ensure that timer initialization is fully visible
- net: stmmac: dwmac-rk: Validate GRF and peripheral GRF during probe
- net: hsr: Fix PRP duplicate detection
- PNP: Expand length of fixup id string
- arm64/mm: Check pmd_table() in pmd_trans_huge()
- wifi: iwlwifi: mark Br device not integrated
- wifi: mac80211: fix warning on disconnect during failed ML reconf
- wifi: mac80211_hwsim: Fix MLD address translation
- badblocks: Fix a nonsense WARN_ON() which checks whether a u64 variable
< 0
- coresight-etb10: change etb_drvdata spinlock's type to raw_spinlock_t
- misc: pci_endpoint_test: Give disabled BARs a distinct error code
- drm/amdkfd: Set per-process flags only once for gfx9/10/11/12
- drm/xe: Retry BO allocation
- soc: samsung: include linux/array_size.h where needed
- usb: xhci: set page size to the xHCI-supported size
- soc: mediatek: mtk-mutex: Add DPI1 SOF/EOF to MT8188 mutex tables
- drm/amd/display: Ensure DMCUB idle before reset on DCN31/DCN35
- drm/amd/display: Fix p-state type when p-state is unsupported
- perf/core: Clean up perf_try_init_event()
- net: phy: nxp-c45-tja11xx: add match_phy_device to TJA1103/TJA1104
- dpll: Add an assertion to check freq_supported_num
- ublk: enforce ublks_max only for unprivileged devices
- scsi: logging: Fix scsi_logging_level bounds
- ublk: complete command synchronously on error
- drm/xe: xe_gen_wa_oob: replace program_invocation_short_name
- bpf: Search and add kfuncs in struct_ops prologue and epilogue
- drm/amd/display: fix dcn4x init failed
- net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode
- scsi: mpi3mr: Update timestamp only for supervisor IOCs
- scsi: scsi_debug: First fixes for tapes
- net: ipv6: Init tunnel link-netns before registering dev
- drm/amdgpu: remove all KFD fences from the BO on release
- eeprom: ee1004: Check chip before probing
- drm/amd/pm: Fetch current power limit from PMFW
- drm/amd/display: DCN35 set min dispclk to 50Mhz
- drm/amd/display: Fix DCN35 set min dispclk logic
- drm/amd/display: Guard against setting dispclk low when active
- drm/amd/display: Fix BT2020 YCbCr limited/full range input
- drm/amd/display: Read LTTPR ALPM caps during link cap retrieval
- hrtimers: Replace hrtimer_clock_to_base_table with switch-case
- firmware: arm_ffa: Handle the presence of host partition in the
partition info
- firmware: xilinx: Dont send linux address to get fpga config get status
- drm/xe: Stop ignoring errors from xe_ttm_stolen_mgr_init()
- x86/ibt: Handle FineIBT in handle_cfi_failure()
- soundwire: cadence_master: set frame shape and divider based on actual
clk freq
- net: stmmac: dwmac-loongson: Set correct {tx,rx}_fifo_size
- drm/amdkfd: fix missing L2 cache info in topology
- drm/amd/display: pass calculated dram_speed_mts to dml2
- drm/amd/pm: Skip P2S load for SMU v13.0.12
- drm/amd/display: Support multiple options during psr entry.
- drm/amdgpu: Use active umc info from discovery
- net/mlx5: XDP, Enable TX side XDP multi-buffer support
- wifi: ath12k: fix the ampdu id fetch in the HAL_RX_MPDU_START TLV
- wifi: iwlwifi: use correct IMR dump variable
- wifi: mac80211: set ieee80211_prep_tx_info::link_id upon Auth Rx
- powerpc/pseries/iommu: create DDW for devices with DMA mask less than
64-bits
- wifi: rtw89: coex: Assign value over than 0 to avoid firmware timer hang
- wifi: rtw89: fw: validate multi-firmware header before getting its size
- wifi: rtw89: fw: validate multi-firmware header before accessing
- wifi: rtw89: call power_on ahead before selecting firmware
- net: page_pool: avoid false positive warning if NAPI was never added
- media: qcom: camss: Add default case in vfe_src_pad_code
- drm/rockchip: vop2: Improve display modes handling on RK3588 HDMI0
- tools: ynl-gen: don't output external constants
- ice: init flow director before RDMA
- wifi: ath12k: Fetch regdb.bin file from board-2.bin
- drm/nouveau: fix the broken marco GSP_MSG_MAX_SIZE
- wifi: ath11k: Use dma_alloc_noncoherent for rx_tid buffer allocation
- wifi: rtw89: coex: Separated Wi-Fi connecting event from Wi-Fi scan
event
- drm/xe/sa: Always call drm_suballoc_manager_fini()
- drm/xe: Reject BO eviction if BO is bound to current VM
- smb: server: smb2pdu: check return value of xa_store()
- ACPI: platform-profile: add platform_profile_cycle()
- platform/x86: ideapad-laptop: add support for some new buttons
- ALSA: usb-audio: Fix duplicated name in MIDI substream names
- btrfs: handle empty eb->folios in num_extent_folios()
- xfrm: Fix UDP GRO handling for some corner cases
- idpf: fix idpf_vport_splitq_napi_poll()
- net: dsa: microchip: update tag_ksz masks for KSZ9477 family
- net: dsa: microchip: linearize skb for tail-tagging switches
- vmxnet3: update MTU after device quiesce
- pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
- highmem: add folio_test_partial_kmap()
- mm: mmap: map MAP_STACK to VM_NOHUGEPAGE only if THP is enabled
- nilfs2: fix deadlock warnings caused by lock dependency in init_nilfs()
- Bluetooth: btmtksdio: Check function enabled before doing close
- Bluetooth: btmtksdio: Do close if SDIO card removed without close
- platform/x86: think-lmi: Fix attribute name usage for non-compliant
items
- err.h: move IOMEM_ERR_PTR() to err.h
- gcc-15: make 'unterminated string initialization' just a warning
- gcc-15: disable '-Wunterminated-string-initialization' entirely for now
- Fix mis-uses of 'cc-option' for warning disablement
- bpf: abort verification if env->cur_state->loop_entry != NULL
- drm/amdkfd: Correct F8_MODE for gfx950
- arm64: dts: qcom: sm8650: Add missing properties for cryptobam
- arm64: dts: qcom: x1e80100-qcp: Fix vreg_l2j_1p2 voltage
- arm64: dts: qcom: x1e80100-qcp: mark l12b and l15b always-on
- arm64: dts: ti: k3-am62-main: Set eMMC clock parent to default
- arm64: dts: ti: k3-am62p-j722s-common-main: Set eMMC clock parent to
default
- arm64: dts: ti: k3-am62x: Remove clock-names property from IMX219
overlay
- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in IMX219 overlay
- arm64: dts: ti: k3-am62x: Rename I2C switch to I2C mux in OV5640 overlay
- arm64: dts: ti: k3-am65-main: Fix sdhci node properties
- arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
- arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
- arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
- arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
- drm/xe: Save the gt pointer in lrc and drop the tile
- Upstream stable to v6.6.93, v6.12.31, v6.12.32
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38053
- idpf: fix null-ptr-deref in idpf_features_check
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38055
- perf/x86/intel: Fix segfault with PEBS-via-PT with sample_freq
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38057
- espintcp: fix skb leaks
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38060
- bpf: copy_verifier_state() should copy 'loop_entry' field
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38098
- drm/amd/display: Don't treat wb connector as physical in
create_validate_stream_for_sink
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38099
- Bluetooth: Disable SCO support if READ_VOICE_SETTING is
unsupported/broken
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38073
- block: fix race between set_blocksize and read paths
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38051
- smb: client: Fix use-after-free in cifs_fill_dirent
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38077
- platform/x86: dell-wmi-sysman: Avoid buffer overflow in
current_password_store()
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38078
- ALSA: pcm: Fix race of buffer access at PCM OSS layer
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38003
- can: bcm: add missing rcu read protection for procfs content
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38004
- can: bcm: add locking for bcm_op runtime updates
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38031
- padata: do not leak refcount in reorder_work
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38079
- crypto: algif_hash - fix double free in hash_accept
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38052
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38097
- espintcp: remove encap socket caching to avoid reference leak
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38058
- __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38059
- btrfs: avoid NULL pointer dereference if no valid csum tree
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38034
- btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38035
- nvmet-tcp: don't restore null sk_state_change
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38037
- vxlan: Annotate FDB data races
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38039
- net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload
enabled
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38080
- drm/amd/display: Increase block_sequence array size
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38040
- serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38061
- net: pktgen: fix access outside of user given buffer in
pktgen_thread_write()
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38062
- genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of
iommu_cookie
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38063
- dm: fix unconditional IO throttle caused by REQ_PREFLUSH
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38043
- firmware: arm_ffa: Set dma_mask for ffa devices
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38044
- media: cx231xx: set device_caps for 417
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38065
- orangefs: Do not truncate file size
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38066
- dm cache: prevent BUG_ON by blocking retries on failed device resumes
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38068
- crypto: lzo - Fix compression buffer overrun
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38045
- wifi: iwlwifi: fix debug actions order
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38071
- x86/mm: Check return value from memblock_phys_alloc_range()
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38072
- libnvdimm/labels: Fix divide error in nd_label_data_init()
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38081
- spi-rockchip: Fix register out of bounds access
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38074
- vhost-scsi: protect vq->log_used with vq->mutex
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38048
- virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
* Noble update: upstream stable patchset 2025-11-28 (LP: #2133301) //
CVE-2025-38075
- scsi: target: iscsi: Fix timeout on deleted connection
* CAP_PERFMON insufficient to get perf data (LP: #2131046)
- SAUCE: perf/core: Allow CAP_PERFMON for paranoid level 4
* Dell AIO backlight is not working, dell_uart_backlight module is missing
(LP: #2083800)
- SAUCE: Removed sauce dell-uart-backlight driver
- Revert "UBUNTU: SAUCE: ACPI: video: Dell AIO UART backlight detection"
- platform/x86: Add new Dell UART backlight driver
- ACPI: video: Add Dell UART backlight controller detection
- SAUCE: dell_uart_backlight: size_t -> ssize_t
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
- [Config] enable CONFIG_DELL_UART_BACKLIGHT
* Ubuntu x86_64 6.8 kernels won't build if CONFIG_FB_HYPERV config option is
enabled (LP: #2127971)
- fbdev: Introduce devm_register_framebuffer()
* Run iio_info will be stucked forever (HID-
SENSOR-200011.5.auto/iio:device1) (LP: #2102077)
- HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
* kernel: sysfs: cannot create duplicate filename
'/bus/platform/devices/iTCO_wdt' (LP: #2121997)
- i2c: i801: Hide Intel Birch Stream SoC TCO WDT
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344)
- fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
- selftests/exec: load_address: conform test to TAP format output
- binfmt_elf: Leave a gap between .bss and brk
- selftests/exec: Build both static and non-static load_address tests
- binfmt_elf: Calculate total_size earlier
- binfmt_elf: Honor PT_LOAD alignment for static PIE
- binfmt_elf: Move brk for static PIE even if ASLR disabled
- platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie
14XA (GX4HRXL)
- platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
- cgroup/cpuset: Extend kthread_is_per_cpu() check to all
PF_NO_SETAFFINITY tasks
- tracing: probes: Fix a possible race in trace_probe_log APIs
- tpm: tis: Double the timeout B to 4s
- firmware: arm_scmi: Add helper to trace bad messages
- firmware: arm_scmi: Add message dump traces for bad and unexpected
replies
- firmware: arm_scmi: Add support for debug metrics at the interface
- [Config] do not enable new support for SCMI debug metrics
- firmware: arm_scmi: Track basic SCMI communication debug metrics
- iio: adc: ad7266: Fix potential timestamp alignment issue.
- iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
- iio: chemical: sps30: use aligned_s64 for timestamp
- HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
- spi: loopback-test: Do not split 1024-byte hexdumps
- Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
- tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get
operation
- tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
- mctp: no longer rely on net->dev_index_head[]
- net: mctp: Ensure keys maintain only one ref to corresponding dev
- ALSA: seq: Fix delivery of UMP events to group ports
- ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
- net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
- nvme-pci: make nvme_pci_npages_prp() __always_inline
- nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
- ALSA: sh: SND_AICA should depend on SH_DMA_API
- qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
- octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
- net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW
capability
- octeontx2-af: Fix CGX Receive counters
- tsnep: fix timestamping with a stacked DSA driver
- NFSv4/pnfs: Reset the layout state after a layoutreturn
- udf: Make sure i_lenExtents is uptodate on inode eviction
- LoongArch: Prevent cond_resched() occurring within kernel-fpu
- LoongArch: Save and restore CSR.CNTC for hibernation
- LoongArch: Fix MAX_REG_OFFSET calculation
- LoongArch: uprobes: Remove user_{en,dis}able_single_step()
- LoongArch: uprobes: Remove redundant code about resume_era
- drm/amd/display: Correct the reply value when AUX write incomplete
- drm/amd/display: Avoid flooding unnecessary info messages
- ACPI: PPTT: Fix processor subtable walk
- ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
- ALSA: usb-audio: Add sample rate quirk for Audioengine D1
- ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
- hv_netvsc: Remove rmsg_pgcnt
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
- ftrace: Fix preemption accounting for stacktrace trigger command
- ftrace: Fix preemption accounting for stacktrace filter command
- tracing: samples: Initialize trace_array_printk() with the correct
function
- phy: Fix error handling in tegra_xusb_port_init
- phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
- phy: renesas: rcar-gen3-usb2: Set timing registers only once
- scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
- smb: client: fix memory leak during error handling for POSIX mkdir
- spi: tegra114: Use value to check for invalid delays
- net: qede: Initialize qede_ll_ops with designated initializer
- dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure
instead of a local copy
- dmaengine: idxd: fix memory leak in error handling path of
idxd_setup_wqs
- dmaengine: idxd: fix memory leak in error handling path of
idxd_setup_engines
- dmaengine: idxd: fix memory leak in error handling path of
idxd_setup_groups
- dmaengine: idxd: Add missing cleanup for early error out in
idxd_setup_internals
- dmaengine: idxd: Add missing cleanups in cleanup internals
- dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove
call
- dmaengine: idxd: fix memory leak in error handling path of
idxd_pci_probe
- LoongArch: Explicitly specify code model in Makefile
- SAUCE: Revert "memblock: Accept allocated memory before use in
memblock_double_array()"
- phy: tegra: xusb: remove a stray unlock
- drivers/platform/x86/amd: pmf: Check for invalid sideloaded Smart PC
Policies
- drivers/platform/x86/amd: pmf: Check for invalid Smart PC Policies
- uio_hv_generic: Fix sysfs creation path for ring buffer
- KVM: Add member to struct kvm_gfn_range to indicate private/shared
- KVM: x86/mmu: Prevent installing hugepages when mem attributes are
changing
- iio: chemical: pms7003: use aligned_s64 for timestamp
- iio: pressure: mprls0025pa: use aligned_s64 for timestamp
- net: dsa: b53: prevent standalone from trying to forward to other ports
- netlink: specs: tc: fix a couple of attribute names
- LoongArch: Move __arch_cpu_idle() to .cpuidle.text section
- btrfs: fix discard worker infinite loop after disabling discard
- btrfs: fix folio leak in submit_one_async_extent()
- btrfs: add back warning for mount option commit values exceeding 300
- drm/amdgpu: fix incorrect MALL size for GFX1151
- gpio: pca953x: fix IRQ storm on system wake up
- kbuild: Disable -Wdefault-const-init-unsafe
- mm: userfaultfd: correct dirty flags set for both present and swap pte
- accel/ivpu: Rename ivpu_log_level to fw_log_level
- accel/ivpu: Reset fw log on cold boot
- accel/ivpu: Refactor functions in ivpu_fw_log.c
- drm/fbdev-dma: Support struct drm_driver.fbdev_probe
- Upstream stable to v6.6.92, v6.12.30
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-37968
- iio: light: opt3001: fix deadlock due to concurrent flag access
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38011
- drm/amdgpu: csa unmap use uninterruptible lock
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-21931
- hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-37960
- memblock: Accept allocated memory before use in memblock_double_array()
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-37967
- usb: typec: ucsi: displayport: Fix deadlock
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-22102
- Bluetooth: btnxpuart: Fix kernel panic during FW release
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38008
- mm/page_alloc: fix race condition in unaccepted memory handling
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38014
- dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38015
- dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38005
- dmaengine: ti: k3-udma: Add missing locking
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38009
- wifi: mt76: disable napi on driver removal
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38010
- phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38095
- dma-buf: insert memory barrier before updating num_fences
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38018
- net/tls: fix kernel panic when alloc_page failed
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38019
- mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38013
- wifi: mac80211: Set n_channels after allocating struct
cfg80211_scan_request
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38027
- regulator: max20086: fix invalid memory access
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38020
- net/mlx5e: Disable MACsec offload for uplink representor profile
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38094
- net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38006
- net: mctp: Don't access ifa_index when missing
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-37992
- net_sched: Flush gso_skb list too during ->change()
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38023
- nfs: handle failure of nfs_get_lock_context in unlock path
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38007
- HID: uclogic: Add NULL check in uclogic_input_configured()
* Noble update: upstream stable patchset 2025-10-30 (LP: #2130344) //
CVE-2025-38024
- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277)
- dm: add missing unlock on in dm_keyslot_evict()
- arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
- can: mcan: m_can_class_unregister(): fix order of unregistration calls
- can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
- ksmbd: fix memory leak in parse_lease_state()
- SAUCE: Revert "sch_htb: make htb_deactivate() idempotent"
- sch_htb: make htb_deactivate() idempotent
- gre: Fix again IPv6 link-local address generation.
- netdevice: add netdev_tx_reset_subqueue() shorthand
- net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
- can: mcp251xfd: fix TDC setting for low data bit rates
- can: gw: fix RCU/BH usage in cgw_create_job()
- net: dsa: b53: allow leaky reserved multicast
- net: dsa: b53: fix clearing PVID of a port
- net: dsa: b53: fix flushing old pvid VLAN on pvid change
- net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
- net: dsa: b53: always rejoin default untagged VLAN on bridge leave
- net: dsa: b53: fix learning on VLAN unaware bridges
- Input: cyttsp5 - ensure minimum reset pulse width
- Input: cyttsp5 - fix power control issue on wakeup
- Input: xpad - fix Share button on Xbox One controllers
- Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
- Input: synaptics - enable InterTouch on Dynabook Portege X30-D
- Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
- Input: synaptics - enable InterTouch on Dell Precision M3800
- Input: synaptics - enable SMBus for HP Elitebook 850 G1
- Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
- staging: iio: adc: ad7816: Correct conditional logic for store mode
- staging: axis-fifo: Remove hardware resets for user errors
- staging: axis-fifo: Correct handling of tx_fifo_depth for size
validation
- drm/amd/display: Shift DMUB AUX reply command if necessary
- iio: adc: ad7606: fix serial register access
- iio: adc: rockchip: Fix clock initialization sequence
- iio: adis16201: Correct inclinometer channel resolution
- drm/amd/display: Fix the checking condition in dmub aux handling
- drm/amd/display: Remove incorrect checking in dmub aux handler
- drm/amd/display: Fix wrong handling for AUX_DEFER case
- drm/amd/display: Copy AUX read reply data whenever length > 0
- usb: uhci-platform: Make the clock really optional
- xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
- clocksource/i8253: Use raw_spinlock_irqsave() in
clockevent_i8253_disable()
- x86/microcode: Consolidate the loader enablement checking
- ocfs2: switch osb->disable_recovery to enum
- ocfs2: implement handshaking with ocfs2 recovery thread
- ocfs2: stop quota recovery before disabling quotas
- usb: cdnsp: Fix issue with resuming from L1
- usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
- usb: gadget: f_ecm: Add get_status callback
- usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
- usb: gadget: Use get_status callback to set remote wakeup capability
- usb: host: tegra: Prevent host controller crash when OTG port is used
- usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
- USB: usbtmc: use interruptible sleep in usbtmc_read
- usb: usbtmc: Fix erroneous get_stb ioctl error returns
- usb: usbtmc: Fix erroneous wait_srq ioctl return
- usb: usbtmc: Fix erroneous generic_read ioctl return
- iio: accel: adxl367: fix setting odr for activity time update
- iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
- types: Complement the aligned types with signed 64-bit one
- iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
- iio: adc: dln2: Use aligned_s64 for timestamp
- MIPS: Fix MAX_REG_OFFSET
- drm/panel: simple: Update timings for AUO G101EVN010
- do_umount(): add missing barrier before refcount checks in sync case
- io_uring: always arm linked timeouts prior to issue
- arm64: insn: Add support for encoding DSB
- arm64: proton-pack: Expose whether the platform is mitigated by firmware
- arm64: proton-pack: Expose whether the branchy loop k value
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
- x86/bpf: Call branch history clearing sequence on exit
- x86/bpf: Add IBHF call at end of classic BPF
- x86/bhi: Do not set BHI_DIS_S in 32-bit mode
- x86/speculation: Simplify and make CALL_NOSPEC consistent
- x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
- x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
- Documentation: x86/bugs/its: Add ITS documentation
- x86/its: Enumerate Indirect Target Selection (ITS) bug
- x86/its: Add support for ITS-safe indirect thunk
- [Config] enable Indirect Target Selection mitigation
- x86/its: Add support for ITS-safe return thunk
- x86/its: Enable Indirect Target Selection mitigation
- x86/its: Add "vmexit" option to skip mitigation on some CPUs
- x86/its: Add support for RSB stuffing mitigation
- x86/its: Align RETs in BHB clear sequence to avoid thunking
- x86/ibt: Keep IBT disabled during alternative patching
- x86/its: Use dynamic thunks for indirect branches
- x86/its: Fix build errors when CONFIG_MODULES=n
- x86/its: FineIBT-paranoid vs ITS
- x86/its: Fix build error for its_static_thunk()
- firmware: arm_scmi: Fix timeout checks on polling path
- s390/entry: Fix last breaking event handling in case of stack corruption
- erofs: ensure the extra temporary copy is valid for shortened bvecs
- net: dsa: b53: keep CPU port always tagged again
- net: dsa: b53: do not allow to configure VLAN 0
- net: dsa: b53: do not program vlans when vlan filtering is off
- net: dsa: b53: fix toggling vlan_filtering
- net: dsa: b53: do not set learning and unicast/multicast on up
- rust: clean Rust 1.88.0's warning about `clippy::disallowed_macros`
configuration
- mm/userfaultfd: fix uninitialized output field for -EAGAIN race
- selftests/mm: compaction_test: support platform with huge mount of
memory
- selftests/mm: fix a build failure on powerpc
- io_uring: ensure deferred completions are flushed for multishot
- iio: imu: inv_mpu6050: align buffer for timestamp
- drm/xe: Add page queue multiplier
- usb: dwc3: gadget: Make gadget_wakeup asynchronous
- riscv: misaligned: Add handling for ZCB instructions
- riscv: misaligned: factorize trap handling
- riscv: misaligned: enable IRQs while handling misaligned accesses
- selftest/x86/bugs: Add selftests for ITS
- Upstream stable to v6.6.91, v6.12.29
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37960
- memblock: Accept allocated memory before use in memblock_double_array()
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37957
- KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37963
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37948
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37994
- usb: typec: ucsi: displayport: Fix NULL pointer access
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37995
- module: ensure that kobject_put() is safe for module type kobjects
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37949
- xenbus: Use kref to track req lifetime
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37954
- smb: client: Avoid race in open_cached_dir with lease breaks
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37951
- drm/v3d: Add job to pending list if the reset was skipped
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37969
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37970
- iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37972
- Input: mtk-pmic-keys - fix possible null pointer dereference
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37959
- bpf: Scrub packet on bpf_redirect_peer
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37961
- ipvs: fix uninit-value for saddr in do_output_route4
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37998
- openvswitch: Fix unsafe attribute parsing in output_userspace()
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37952
- ksmbd: Fix UAF in __close_file_table_ids
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37947
- ksmbd: prevent out-of-bounds stream writes by validating *pos
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37956
- ksmbd: prevent rename with empty string
* Noble update: upstream stable patchset 2025-10-29 (LP: #2130277) //
CVE-2025-37973
- wifi: cfg80211: fix out-of-bounds access during multi-link element
defragmentation
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559)
- ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
- ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
- btrfs: fix COW handling in run_delalloc_nocow()
- drm/fdinfo: Protect against driver unbind
- EDAC/altera: Test the correct error reg offset
- EDAC/altera: Set DDR and SDMMC interrupt mask before registration
- i2c: imx-lpi2c: Fix clock count when probe defers
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
- amd-xgbe: Fix to ensure dependent features are toggled with RX checksum
offload
- mm/memblock: pass size instead of end to memblock_set_node()
- mm/memblock: repeat setting reserved region nid if array is doubled
- mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
- spi: tegra114: Don't fail set_cs_timing when delays are zero
- tracing: Do not take trace_event_sem in print_event_fields()
- dm-integrity: fix a warning on invalid table line
- dm: always update the array size in realloc_argv on success
- iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
- platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep
cycles
- platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU
hotplug
- smb: client: fix zero length for mkdir POSIX create context
- cpufreq: Avoid using inconsistent policy->min and policy->max
- cpufreq: Fix setting policy limits when frequency tables are used
- PCI: imx6: Skip controller_id generation logic for i.MX7D
- ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
- powerpc/boot: Check for ld-option support
- drm/i915/pxp: fix undefined reference to
`intel_pxp_gsccs_is_ready_for_sessions'
- powerpc/boot: Fix dash warning
- net/mlx5: E-Switch, Initialize MAC Address for Default GID
- net/mlx5: E-switch, Fix error handling for enabling roce
- net: Rename mono_delivery_time to tstamp_type for scalabilty
- Bluetooth: L2CAP: copy RX timestamp to new fragments
- net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
- net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
- net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when
advised
- pds_core: delete VF dev on reset
- pds_core: make pdsc_auxbus_dev_del() void
- pds_core: specify auxiliary_device to be created
- nvme-pci: fix queue unquiesce check on slot_reset
- net: dlink: Correct endianness handling of led_mode
- net: mdio: mux-meson-gxl: set reversed bit when using internal phy
- igc: fix lock order in igc_ptp_reset
- net: dsa: felix: fix broken taprio gate states after clock jump
- net: ipv6: fix UDPv6 GSO segmentation with NAT
- bnxt_en: Fix coredump logic to free allocated buffer
- bnxt_en: Fix ethtool -d byte order for 32-bit values
- nvme-tcp: fix premature queue removal and I/O failover
- net: fec: ERR007885 Workaround for conventional TX
- net: hns3: store rx VLAN tag offload state for VF
- net: hns3: fix an interrupt residual problem
- net: hns3: fixed debugfs tm_qset size
- net: hns3: defer calling ptp_clock_register()
- net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
- net: vertexcom: mse102x: Fix LEN_MASK
- net: vertexcom: mse102x: Add range check for CMD_RTS
- net: vertexcom: mse102x: Fix RX error handling
- ASoC: Use of_property_read_bool()
- ASoC: soc-core: Stop using of_property_read_bool() for non-boolean
properties
- firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
- ARM: dts: opos6ul: add ksz8081 phy properties
- arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
- arm64: dts: st: Use 128kB size for aliased GIC400 register access on
stm32mp25 SoCs
- Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
- xhci: Add helper to set an interrupters interrupt moderation interval
- xhci: support setting interrupt moderation IMOD for secondary
interrupters
- xhci: Limit time spent with xHC interrupts disabled during bus resume
- kernel: param: rename locate_module_kobject
- kernel: globalize lookup_or_create_module_kobject()
- drivers: base: handle module_kobject creation
- iommu/arm-smmu-v3: Use the new rb tree helpers
- iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream
ids
- drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
- dm: fix copying after src array boundaries
- bpf: Fix BPF_INTERNAL namespace import
- binder: fix offset calculation in debug log
- perf/x86/intel: Only check the group flag for X86 leader
- drm: Select DRM_KMS_HELPER from DRM_DEBUG_DP_MST_TOPOLOGY_REFS
- iommu/arm-smmu-v3: Fix pgsize_bit for sva domains
- pinctrl: imx: Return NULL if no group is matched and found
- Bluetooth: hci_conn: Fix not setting timeout for BIG Create Sync
- idpf: fix offloads support for encapsulated packets
- drm/tests: shmem: Fix memleak
- idpf: fix potential memory leak on kcalloc() failure
- idpf: protect shutdown from reset
- ALSA: hda/realtek: Fix built-mic regression on other ASUS models
- bnxt_en: Add missing skb_mark_for_recycle() in bnxt_rx_vlan()
- nvme-tcp: select CONFIG_TLS from CONFIG_NVME_TCP_TLS
- nvmet-tcp: select CONFIG_TLS from CONFIG_NVME_TARGET_TCP_TLS
- accel/ivpu: Fix a typo
- drm/xe: Ensure fixed_slice_mode gets set after ccs_mode change
- Upstream stable to v6.6.90, v6.12.27, v6.12.28
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37920
- xsk: Fix race condition in AF_XDP generic RX path
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37900
- iommu: Fix two issues in iommu_copy_struct_from_user()
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37931
- btrfs: adjust subpage bit start based on sectorsize
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37903
- drm/amd/display: Fix slab-use-after-free in hdcp
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37905
- firmware: arm_scmi: Balance device refcount when destroying devices
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37933
- octeon_ep: Fix host hang issue during device reboot
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37909
- net: lan743x: Fix memleak issue when GSO enabled
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37911
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37935
- net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37891
- ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37912
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37913
- net_sched: qfq: Fix double list add in class with netem as child qdisc
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37914
- net_sched: ets: Fix double list add in class with netem as child qdisc
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37915
- net_sched: drr: Fix double list add in class with netem as child qdisc
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37916
- pds_core: remove write-after-free of client_id
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37917
- net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx
poll
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37918
- Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37921
- vxlan: vnifilter: Fix unlocked deletion of default FDB entry
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37897
- wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37922
- book3s64/radix : Align section vmemmap start address to PAGE_SIZE
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37923
- tracing: Fix oob write in trace_seq_to_buffer()
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37924
- ksmbd: fix use-after-free in kerberos authentication
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37927
- iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37928
- dm-bufio: don't schedule in atomic context
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37990
- wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37901
- irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37936
- perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's
value.
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37991
- parisc: Fix double SIGFPE crash
* Noble update: upstream stable patchset 2025-10-22 (LP: #2129559) //
CVE-2025-37930
- drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307)
- module: sign with sha512 instead of sha1 by default
- x86/extable: Remove unused fixup type EX_TYPE_COPY
- tracing: Add __string_len() example
- tracing: Add __print_dynamic_array() helper
- soc: qcom: ice: introduce devm_of_qcom_ice_get
- mmc: sdhci-msm: fix dev reference leaked through of_qcom_ice_get
- auxdisplay: hd44780: Convert to platform remove callback returning void
- auxdisplay: hd44780: Fix an API misuse in hd44780.c
- net: dsa: mv88e6xxx: fix internal PHYs for 6320 family
- net: dsa: mv88e6xxx: fix VTU methods for 6320 family
- ASoC: qcom: q6apm-dai: drop unused 'q6apm_dai_rtd' fields
- ASoC: q6apm-dai: schedule all available frames to avoid dsp under-runs
- ASoC: q6apm-dai: make use of q6apm_get_hw_pointer
- iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary
return value check
- iio: adc: ad7768-1: Fix conversion result sign
- arm64: tegra: Remove the Orin NX/Nano suspend key
- clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable
- clk: renesas: r9a07g043: Fix HP clock source for RZ/Five
- of: resolver: Simplify of_resolve_phandles() using __free()
- of: resolver: Fix device node refcount leakage in of_resolve_phandles()
- scsi: ufs: qcom: fix dev reference leaked through of_qcom_ice_get
- cpufreq/sched: Explicitly synchronize limits_changed flag handling
- ceph: Fix incorrect flush end position calculation
- dma/contiguous: avoid warning about unused size_bytes
- cpufreq: cppc: Fix invalid return value in .get() callback
- btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range()
- scsi: core: Clear flags for scsi_cmnd that did not complete
- net: ethernet: mtk_eth_soc: net: revise NETSYSv3 hardware configuration
- net: dsa: mt7530: sync driver-specific behavior of MT7531 variants
- pds_core: Remove unnecessary check in pds_client_adminq_cmd()
- iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
- splice: remove duplicate noinline from pipe_clear_nowait
- perf/x86: Fix non-sampling (counting) events on certain x86 platforms
- LoongArch: Select ARCH_USE_MEMTEST
- LoongArch: Make regs_irqs_disabled() more clear
- LoongArch: Make do_xyz() exception handlers more robust
- virtio_console: fix missing byte order handling for cols and rows
- crypto: atmel-sha204a - Set hwrng quality to lowest possible
- net: selftests: initialize TCP header and skb payload with zero
- net: phy: microchip: force IRQ polling mode for lan88xx
- drm/amd/display: Fix gpu reset in multidisplay config
- LoongArch: Return NULL from huge_pte_offset() for invalid PMD
- LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
- LoongArch: Remove a bogus reference to ZONE_DMA
- io_uring: fix 'sync' handling of io_fallback_tw()
- KVM: SVM: Allocate IR data using atomic allocation
- cxl/core/regs.c: Skip Memory Space Enable check for RCD and RCH Ports
- ata: libata-scsi: Improve CDL control
- ata: libata-scsi: Fix ata_mselect_control_ata_feature() return type
- ata: libata-scsi: Fix ata_msense_control_ata_feature()
- USB: storage: quirk for ADATA Portable HDD CH94
- scsi: Improve CDL control
- mei: me: add panther lake H DID
- KVM: x86: Explicitly treat routing entry type changes as changes
- char: misc: register chrdev region with all possible minors
- misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack
- serial: msm: Configure correct working mode before starting earlycon
- serial: sifive: lock port in startup()/shutdown() callbacks
- USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
- USB: serial: option: add Sierra Wireless EM9291
- USB: serial: simple: add OWON HDS200 series oscilloscope support
- usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
- usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
- USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
- usb: dwc3: xilinx: Prevent spike in reset signal
- usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
- usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
- USB: VLI disk crashes if LPM is used
- USB: wdm: handle IO errors in wdm_wwan_port_start
- USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
- USB: wdm: add annotation
- pinctrl: renesas: rza2: Fix potential NULL pointer dereference
- MIPS: cm: Detect CM quirks from device tree
- crypto: ccp - Add support for PCI device 0x1134
- clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
- parisc: PDT: Fix missing prototype warning
- s390/tty: Fix a potential memory leak bug
- bpf: bpftool: Setting error code in do_loader()
- bpf: Only fails the busy counter check in bpf_cgrp_storage_get if it
creates storage
- bpf: Reject attaching fexit/fmod_ret to __noreturn functions
- mailbox: pcc: Fix the possible race in updation of chan_in_use flag
- mailbox: pcc: Always clear the platform ack interrupt first
- usb: host: max3421-hcd: Add missing spi_device_id table
- fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
- usb: dwc3: gadget: Refactor loop to avoid NULL endpoints
- usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
- usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func
- thunderbolt: Scan retimers after device router has been enumerated
- objtool: Silence more KCOV warnings
- objtool, panic: Disable SMAP in __stack_chk_fail()
- objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in
wcd934x_slim_irq_handler()
- objtool, regulator: rk808: Remove potential undefined behavior in
rk806_set_mode_dcdc()
- objtool, lkdtm: Obfuscate the do_nothing() pointer
- ntb: reduce stack usage in idt_scan_mws
- ntb_hw_amd: Add NTB PCI ID for new gen CPU
- rtc: pcf85063: do a SW reset if POR failed
- io_uring: always do atomic put from iowq
- sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
- KVM: s390: Don't use %pK through tracepoints
- KVM: s390: Don't use %pK through debug printing
- selftests: ublk: fix test_stripe_04
- xen: Change xen-acpi-processor dom0 dependency
- ACPI: EC: Set ec_no_wakeup for Lenovo Go S
- ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
- nvme: multipath: fix return value of nvme_available_path
- objtool: Stop UNRET validation on UD2
- gpiolib: of: Move Atmel HSMCI quirk up out of the regulator comment
- selftests/mincore: Allow read-ahead pages to reach the end of the file
- x86/bugs: Use SBPB in write_ibpb() if applicable
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
- x86/bugs: Don't fill RSB on context switch with eIBRS
- nvmet-fc: take tgtport reference only once
- cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE
mode
- timekeeping: Add a lockdep override in tick_freeze()
- ext4: make block validity check resistent to sb bh corruption
- scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
- scsi: ufs: exynos: Ensure pre_link() executes before
exynos_ufs_phy_init()
- scsi: pm80xx: Set phy_attached to zero when device is gone
- x86/i8253: Call clockevent_i8253_disable() with interrupts disabled
- iomap: skip unnecessary ifs_block_is_uptodate check
- riscv: Provide all alternative macros all the time
- loop: aio inherit the ioprio of original request
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts
- spi: tegra210-quad: add rate limiting and simplify timeout error message
- ubsan: Fix panic from test_ubsan_out_of_bounds
- x86/cpu: Add CPU model number for Bartlett Lake CPUs with Raptor Cove
cores
- x86/pvh: Call C code via the kernel virtual mapping
- Revert "drivers: core: synchronize really_probe() and dev_uevent()"
- driver core: introduce device_set_driver() helper
- comedi: jr3_pci: Fix synchronous deletion of timer
- net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
- net: dsa: mv88e6xxx: enable PVT for 6321 switch
- net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
- net: dsa: mv88e6xxx: enable STU methods for 6320 family
- MIPS: cm: Fix warning if MIPS_CM is disabled
- objtool: Ignore end-of-section jumps for KCOV/GCOV
- objtool: Silence more KCOV warnings, part 2
- ALSA: hda/cirrus_scodec_test: Don't select dependencies
- ALSA: hda: improve bass speaker support for ASUS Zenbook UM5606WA
- ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130
- ALSA: hda/realtek - Fixed ASUS platform headset Mic issue
- net: ethernet: mtk_eth_soc: reapply mdc divider on reset
- riscv: Use kvmalloc_array on relocation_hashtable
- riscv: module: Allocate PLT entries for R_RISCV_PLT32
- ASoC: fsl: fsl_qmc_audio: Reset audio data pointers on TRIGGER_START
event
- dma-buf/sw_sync: Decrement refcount on error in
sw_sync_ioctl_get_deadline()
- mm/compaction: fix bug in hugetlb handling pathway
- platform/x86: amd: pmf: Fix STT limits
- drm/amd/display: Add HP Elitebook 645 to the quirk list for eDP on DP1
- drm/amd/display: Add HP Probook 445 and 465 to the quirk list for eDP on
DP1
- drm/xe/dma_buf: stop relying on placement in unmap
- drm/amdgpu: fix warning of drm_mm_clean
- arm64/sysreg: Update register fields for ID_AA64MMFR0_EL1
- arm64/sysreg: Add register fields for HDFGRTR2_EL2
- arm64/sysreg: Add register fields for HDFGWTR2_EL2
- arm64/sysreg: Add register fields for HFGITR2_EL2
- arm64/sysreg: Add register fields for HFGRTR2_EL2
- arm64/sysreg: Add register fields for HFGWTR2_EL2
- kbuild: Add '-fno-builtin-wcslen'
- drm/amd/display: Temporarily disable hostvm on DCN31
- block: remove rq_list_move
- bpf: add find_containing_subprog() utility function
- selftests/bpf: test for changing packet data from global functions
- selftests/bpf: freplace tests for tracking of changes_packet_data
- selftests/bpf: validate that tail call invalidates packet pointers
- selftests/bpf: extend changes_pkt_data with cases w/o subprograms
- media: i2c: imx214: Use subdev active state
- media: i2c: imx214: Simplify with dev_err_probe()
- media: i2c: imx214: Convert to CCI register access helpers
- media: i2c: imx214: Replace register addresses with macros
- media: i2c: imx214: Check number of lanes from device tree
- media: i2c: imx214: Fix link frequency validation
- scsi: ufs: exynos: Move UFS shareability value to drvdata
- cgroup/cpuset: Expose cpuset filesystem with cpuset v1 only
- cgroup/cpuset-v1: Add missing support for cpuset_v2_mode
- vhost-scsi: Add better resource allocation failure handling
- vhost-scsi: Fix vhost_scsi_send_bad_target()
- vhost-scsi: Fix vhost_scsi_send_status()
- scsi: ufs: mcq: Use ufshcd_mcq_req_to_hwq() to simplify updating hwq
- riscv: Replace function-like macro by static inline function
- bpf: Add namespace to BPF internal symbols
- netfilter: fib: avoid lookup if socket is available
- drm: panel: jd9365da: fix reset signal polarity in unprepare
- drm/amd/display: Force full update in gpu reset
- KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
- firmware: stratix10-svc: Add of_platform_default_populate()
- i3c: master: svc: Add support for Nuvoton npcm845 i3c
- 9p/trans_fd: mark concurrent read and writes to p9_conn->err
- x86/xen: disable CPU idle and frequency drivers for PVH dom0
- nvmet-fc: put ref when assoc->del_work is already scheduled
- scsi: ufs: exynos: Move phy calls to .exit() callback
- ASoC: fsl_asrc_dma: get codec or cpu dai from backend
- xfs: do not check NEEDSREPAIR if ro,norecovery mount.
- xfs: Do not allow norecovery mount with quotacheck
- xfs: rename xfs_iomap_swapfile_activate to xfs_vm_swap_activate
- xfs: flush inodegc before swapon
- selftests/bpf: fix bpf_map_redirect call for cpu map test
- selftests/bpf: make xdp_cpumap_attach keep redirect prog attached
- selftests/bpf: check program redirect in xdp_cpumap_attach
- selftests/bpf: Adjust data size to have ETH_HLEN
- Revert "net: dsa: mv88e6xxx: fix internal PHYs for 6320 family"
- iommu: Handle race with default domain setup
- media: i2c: imx214: Fix uninitialized variable in imx214_set_ctrl()
- usb: typec: class: Unlocked on error in typec_register_partner()
- Upstream stable to v6.6.89, v6.12.25, v6.12.26
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37986
- usb: typec: class: Invalidate USB device pointers on partner
unregistration
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37809
- usb: typec: class: Fix NULL pointer access
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37816
- mei: vsc: Fix fortify-panic caused by invalid counted_by() use
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37822
- riscv: uprobes: Add missing fence.i after building the XOL buffer
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37987
- pds_core: Prevent possible adminq overflow/stuck condition
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37826
- scsi: ufs: core: Add NULL check in ufshcd_mcq_compl_pending_transfer()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37827
- btrfs: zoned: return EIO on RAID1 block group write pointer mismatch
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37977
- scsi: ufs: exynos: Disable iocc if dma-coherent property isn't set
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37944
- wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37761
- drm/xe: Fix an out-of-bounds shift when invalidating TLB
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37763
- drm/imagination: take paired job reference
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37764
- drm/imagination: fix firmware memory leaks
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37869
- drm/xe: Use local fence in error path of xe_migrate_clear
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37978
- block: integrity: Do not call set_page_dirty_lock()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37975
- riscv: module: Fix out-of-bounds relocation access
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37872
- net: txgbe: fix memory leak in txgbe_probe() error path
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37873
- eth: bnxt: fix missing ring index trim on error path
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-22120
- ext4: goto right label 'out_mmap_sem' in ext4_setattr()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37799
- vmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37800
- driver core: fix potential NULL pointer dereference in dev_uevent()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37878
- perf/core: Fix WARN_ON(!ctx) in __free_event() for partial init
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37803
- udmabuf: fix a buf size overflow issue during udmabuf creation
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37879
- 9p/net: fix improper handling of bogus negative read/write replies
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37983
- qibfs: fix _another_ leak
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37881
- usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37805
- sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37883
- s390/sclp: Add check for get_zeroed_page()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37884
- bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37808
- crypto: null - Use spin lock instead of mutex
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37985
- USB: wdm: close race between wdm_open and wdm_wwan_port_stop
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37810
- usb: dwc3: gadget: check that event count does not exceed event buffer
length
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37811
- usb: chipidea: ci_hdrc_imx: fix usbmisc handling
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37812
- usb: cdns3: Fix deadlock when using NCM gadget
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37813
- usb: xhci: Fix invalid pointer dereference in Etron workaround
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37815
- misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler
registration
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37885
- KVM: x86: Reset IRTE to host control if *new* route isn't postable
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37817
- mcb: fix a double free bug in chameleon_parse_gdd()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37819
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37820
- xen-netfront: handle NULL returned by xdp_convert_buff_to_frame()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37886
- pds_core: make wait_context part of q_info
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37887
- pds_core: handle unsupported PDS_CORE_CMD_FW_CONTROL result
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37823
- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37988
- fix a couple of races in MNT_TREE_BENEATH handling by do_move_mount()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37824
- tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37989
- net: phy: leds: fix memory leak
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37828
- scsi: ufs: mcq: Add NULL check in ufshcd_mcq_abort()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37829
- cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37830
- cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37831
- cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate()
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-37938
- tracing: Verify event formats that have "%*p.."
* Noble update: upstream stable patchset 2025-10-21 (LP: #2129307) //
CVE-2025-39989
- x86/mce: use is_copy_from_user() to determine copy-from-user context
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-22026
- nfsd: don't ignore the return code of svc_proc_register()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37836
- PCI: Fix reference leak in pci_register_host_bridge()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37846
- arm64: mops: Do not dereference src reg for a set operation
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37942
- HID: pidff: Make sure to fetch pool before checking SIMULTANEOUS_MAX
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37856
- btrfs: harden block_group::bg_list against list_del() races
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37861
- scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37744
- wifi: ath12k: fix memory leak in ath12k_pci_remove()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37745
- PM: hibernate: Avoid deadlock in hibernate_compressor_param_set()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37945
- net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-
controlled PHY
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37759
- ublk: fix handling recovery & reissue in ublk_abort_queue()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23140
- misc: pci_endpoint_test: Avoid issue of interrupts remaining after
request_irq error
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-22126
- md: fix mddev uaf while iterating all_mddevs list
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37765
- drm/nouveau: prime: fix ttm_bo_delayed_delete oops
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37766
- drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37767
- drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37768
- drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37769
- drm/amd/pm/smu11: Prevent division by zero
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37770
- drm/amd/pm/powerplay: Prevent division by zero
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37768 // CVE-2025-37771
- drm/amd/pm: Prevent division by zero
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37772
- RDMA/cma: Fix workqueue crash in cma_netevent_work_handler
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37773
- virtiofs: add filesystem context source name check
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37775
- ksmbd: fix the warning from __kernel_write_iter
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37778
- ksmbd: Fix dangling pointer in krb_authenticate
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37863
- ovl: don't allow datadir only
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37780
- isofs: Prevent the use of too small fid
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37781
- i2c: cros-ec-tunnel: defer probe if parent EC is not present
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37979
- ASoC: qcom: Fix sc7280 lpass potential buffer overflow
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37784
- net: ti: icss-iep: Fix possible NULL pointer dereference for perout
request
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37786
- net: dsa: free routing table on probe failure
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37864
- net: dsa: clean up FDB, MDB, VLAN entries on unbind
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37865
- net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is
unsupported
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37787
- net: dsa: mv88e6xxx: avoid unregistering devlink regions which were
never registered
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37788
- cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37874
- net: ngbe: fix memory leak in ngbe_probe() error path
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37789
- net: openvswitch: fix nested key length validation in the set() action
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37980
- block: fix resource leak in blk_register_queue() error path
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37790
- net: mctp: Set SOCK_RCU_FREE
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37875
- igc: fix PTM cycle trigger logic
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37792
- Bluetooth: btrtl: Prevent potential NULL dereference
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37867
- RDMA/core: Silence oversized kvmalloc() warning
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37793
- ASoC: Intel: avs: Fix null-ptr-deref in avs_component_probe()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37982
- wifi: wl1251: fix memory leak in wl1251_tx_work
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37794
- wifi: mac80211: Purge vif txq in ieee80211_do_stop()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37796
- wifi: at76c50x: fix use after free access in at76_disconnect
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23141
- KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory
accesses
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37940
- ftrace: Add cond_resched() to ftrace_graph_set_hash()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37844
- cifs: avoid NULL pointer dereference in dbg call
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23142
- sctp: detect and prevent references to a freed transport in sendmsg
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23144
- backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37892
- mtd: inftlcore: Add error check for inftl_read_oob()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23145
- mptcp: fix NULL pointer in can_accept_new_subflow
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23146
- mfd: ene-kb3930: Fix a potential NULL pointer dereference
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37839
- jbd2: remove wrong sb->s_sequence check
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23147
- i3c: Add NULL pointer check in i3c_master_queue_ibi()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23148
- soc: samsung: exynos-chipid: Add NULL pointer check in
exynos_chipid_probe()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23149
- tpm: do not start chip while suspended
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23150
- ext4: fix off-by-one error in do_split
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23151
- bus: mhi: host: Fix race between unprepare and queue_buf
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23156
- media: venus: hfi_parser: refactor hfi packet parsing logic
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23157
- media: venus: hfi_parser: add check to avoid out of bound access
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37840
- mtd: rawnand: brcmnand: fix PM resume warning
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37849
- KVM: arm64: Tear down vGIC on failed vCPU creation
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23158
- media: venus: hfi: add check to handle incorrect queue size
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23159
- media: venus: hfi: add a check to handle OOB in sfr region
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23160
- media: mediatek: vcodec: Fix a resource leak related to the scp device
in FW initialization
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37850
- pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37851
- fbdev: omapfb: Add 'plane' value check
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23161
- PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37852
- drm/amdgpu: handle amdgpu_cgs_create_device() errors in
amd_powerplay_create()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37853
- drm/amdkfd: debugfs hang_hws skip GPU with MES
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37854
- drm/amdkfd: Fix mode1 reset crash issue
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-23163
- net: vlan: don't propagate flags on open
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37857
- scsi: st: Fix array overflow in st_setup()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37738
- ext4: ignore xattrs past end
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37739
- f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37943
- wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37740
- jfs: add sanity check for agwidth in dbMount
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37741
- jfs: Prevent copying of nlink with value 0 from disk inode
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37858
- fs/jfs: Prevent integer overflow in AG size calculation
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37742
- jfs: Fix uninit-value access of imap allocated in the diMount() function
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37859
- page_pool: avoid infinite loop to schedule delayed worker
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37862
- HID: pidff: Fix null pointer dereference in pidff_find_fields
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37841
- pm: cpupower: bench: Prevent NULL dereference on malloc failure
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37748
- iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37749
- net: ppp: Add bound checking for skb data on ppp_sync_txmung
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37754
- drm/i915/huc: Fix fence not released on early probe errors
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37755
- net: libwx: handle page_pool_dev_alloc_pages error
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37757
- tipc: fix memory leak in tipc_link_xmit
* Noble update: upstream stable patchset 2025-10-17 (LP: #2128722) //
CVE-2025-37758
- ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
* CVE-2025-37801
- spi: spi-imx: Add check for spi_imx_setupxfer()
* CVE-2025-39946
- tls: make sure to abort the stream if headers are bogus
* CVE-2025-38584
- padata: Fix pd UAF once and for all
- padata: Remove comment for reorder_work
* CVE-2025-40019
- crypto: essiv - Check ssize for decryption and in-place encryption
* CVE-2025-38561
- ksmbd: fix Preauh_HashValue race condition
* CVE-2025-39698
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure
[ Ubuntu-azure: 6.8.0-1045.51 ]
* noble/linux-azure: 6.8.0-1045.51 -proposed tracker (LP: #2138056)
[ Ubuntu: 6.8.0-94.96 ]
* noble/linux: 6.8.0-94.96 -proposed tracker (LP: #2138092)
* CVE-2025-40019
- crypto: essiv - Check ssize for decryption and in-place encryption
* CVE-2025-38561
- ksmbd: fix Preauh_HashValue race condition
* CVE-2025-39698
- io_uring/futex: ensure io_futex_wait() cleans up properly on failure
[ Ubuntu-azure: 6.8.0-1044.50 ]
* noble/linux-azure: 6.8.0-1044.50 -proposed tracker (LP: #2131747)
* Silent data corruption bug in CIFS module for write operations affecting
kernel ~[6.3-6.9] (LP: #2131951)
- SAUCE: cifs: stop writeback extension when change of size is detected
- SAUCE: cifs: Fix uncached read into ITER_KVEC iterator
[ Ubuntu: 6.8.0-90.91 ]
* noble/linux: 6.8.0-90.91 -proposed tracker (LP: #2131785)
* cifs: Fix memory leak of a folio every call to cifs_writepages_begin()
(LP: #2131213)
- cifs: fix pagecache leak when do writepages
[ Ubuntu: 6.8.0-89.90 ]
* noble/linux: 6.8.0-89.90 -proposed tracker (LP: #2131481)
* CVE-2025-39993
- media: rc: fix races with imon_disconnect()
* Audio output fails on internal speakers when using kernel 6.8.0-84 and
newer. (LP: #2130212)
- Revert "ASoC: cs35l56: Prevent races when soft-resetting using SPI
control"
* i40e driver is triggering VF resets on every link state change
(LP: #2130552)
- i40e: avoid redundant VF link state updates
* CVE-2025-40018
- ipvs: Defer ip_vs_ftp unregister during netns cleanup
* CVE-2025-39964
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
- crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
* CVE-2025-37958
- mm/huge_memory: fix dereferencing invalid pmd migration entry
* CVE-2025-38666
- net: appletalk: Fix use-after-free in AARP proxy probe
[ Ubuntu-azure: 6.8.0-1043.49 ]
* noble/linux-azure: 6.8.0-1043.49 -proposed tracker (LP: #2127583)
* Add pvpanic kernel modules to linux-modules (LP: #2126659)
- [Packaging] azure: Add pvpanic kernel modules to linux-modules
* [STORVSC] [Backport] Backport for Linux storage driver patch for fixing
performance issues (LP: #2128842)
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O
issuing CPU
* [MANA][Backport] net: mana: Reduce waiting time if HWC not responding
(LP: #2128833)
- net: mana: Reduce waiting time if HWC not responding
* Mana-IB Patches - Part 2 (LP: #2128662)
- RDMA/mana_ib: add support of multiple ports
- RDMA/mana_ib: Fix DSCP value in modify QP
- RDMA/mana_ib: Access remote atomic for MRs
- RDMA/mana_ib: support of the zero based MRs
- RDMA/mana_ib: Fix integer overflow during queue creation
- RDMA/mana_ib: Use safer allocation function()
* Mana-IB Patches - Part 1 (LP: #2127201)
- RDMA/mana_ib: Extend modify QP
- RDMA/mana_ib: Drain send wrs of GSI QP
- RDMA/mana_ib: add additional port counters
[ Ubuntu: 6.8.0-88.89 ]
* noble/linux: 6.8.0-88.89 -proposed tracker (LP: #2127619)
* Enable Xilinx PS UART configs (LP: #2121337)
- [Config] Enable Xilinx PS UART configs
* Fix ARL-U/H suspend issues (LP: #2112469)
- platform/x86/intel/pmc: Add Arrow Lake U/H support to intel_pmc_core
driver
- platform/x86/intel/pmc: Fix Arrow Lake U/H NPU PCI ID
* r8169 can not wake on LAN via SFP moudule (LP: #2123901)
- r8169: set EEE speed down ratio to 1
* Add pvpanic kernel modules to linux-modules (LP: #2126659)
- [Packaging] Add pvpanic kernel modules to linux-modules
* CVE-2025-21729
- wifi: rtw89: fix race between cancel_hw_scan and hw_scan completion
* Fix failure to build TDX module (LP: #2126698)
- x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
* Ubuntu 24.04.2: error in audit_log_object_context keep printing in the
kernel and console (LP: #2123815)
- SAUCE: fix: apparmor4.0.0 [26/90]: LSM stacking v39: Audit: Add record
for multiple object contexts
* ensure mptcp keepalives are honored when set (LP: #2125444)
- mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
* System hangs when running the memory stress test (LP: #2103680)
- mm: page_alloc: avoid kswapd thrashing due to NUMA restrictions
* UBUNTU: fan: fail to check kmalloc() return could cause a NULL pointer
dereference (LP: #2125053)
- SAUCE: fan: vxlan: check memory allocation for map
* jammy:linux-riscv-6.8 is FTBFS because of wrong include (LP: #2122592)
- SAUCE: riscv: KVM: Remove broken include
* Performance degrades rapidly when spawning more processes to run benchmark
(LP: #2122006)
- cpuidle: menu: Avoid discarding useful information
- cpuidle: governors: menu: Avoid using invalid recent intervals data
* CVE-2025-38227
- media: vidtv: Terminating the subsequent process of initialization
failure
* CVE-2025-38678
- netfilter: nf_tables: reject duplicate device on updates
* CVE-2025-38616
- tls: handle data disappearing from under the TLS ULP
* CVE-2025-37838
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol
Driver Due to Race Condition
* VMSCAPE CVE-2025-40300 (LP: #2124105) // CVE-2025-40300
- Documentation/hw-vuln: Add VMSCAPE documentation
- x86/vmscape: Enumerate VMSCAPE bug
- x86/vmscape: Add conditional IBPB mitigation
- x86/vmscape: Enable the mitigation
- x86/bugs: Move cpu_bugs_smt_update() down
- x86/vmscape: Warn when STIBP is disabled with SMT
- x86/vmscape: Add old Intel CPUs to affected list
* VMSCAPE CVE-2025-40300 (LP: #2124105)
- [Config] Enable MITIGATION_VMSCAPE config
* CVE-2025-38352
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and
posix_cpu_timer_del()
* CVE-2025-38118
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
- Bluetooth: MGMT: Fix sparse errors
[ Ubuntu-azure: 6.8.0-1042.48 ]
* noble/linux-azure: 6.8.0-1042.48 -proposed tracker (LP: #2127400)
* azure: backport "cifs: reset iface weights when we cannot find a
candidate" (LP: #2127706)
- cifs: reset iface weights when we cannot find a candidate
* azure: backport "hv_netvsc: fix loss of early receive events from host
during channel open" (LP: #2127705)
- net: hv_netvsc: fix loss of early receive events from host during
channel open.
* Backport fix for Linux SMB directory contents caching (LP: #2125686)
- smb: improve directory cache reuse for readdir operations
[ Ubuntu: 6.8.0-87.88 ]
* noble/linux: 6.8.0-87.88 -proposed tracker (LP: #2127436)
* CVE-2025-37838
- HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol
Driver Due to Race Condition
* VMSCAPE CVE-2025-40300 (LP: #2124105) // CVE-2025-40300
- Documentation/hw-vuln: Add VMSCAPE documentation
- x86/vmscape: Enumerate VMSCAPE bug
- x86/vmscape: Add conditional IBPB mitigation
- x86/vmscape: Enable the mitigation
- x86/bugs: Move cpu_bugs_smt_update() down
- x86/vmscape: Warn when STIBP is disabled with SMT
- x86/vmscape: Add old Intel CPUs to affected list
* VMSCAPE CVE-2025-40300 (LP: #2124105)
- [Config] Enable MITIGATION_VMSCAPE config
* CVE-2025-38352
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and
posix_cpu_timer_del()
* CVE-2025-38118
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
- Bluetooth: MGMT: Fix sparse errors
[ Ubuntu-azure: 6.8.0-1041.47 ]
* noble/linux-azure: 6.8.0-1041.47 -proposed tracker (LP: #2125355)
* Fix failure to build TDX module (LP: #2126698)
- x86/paravirt: Move halt paravirt calls under CONFIG_PARAVIRT
* sources list generation using dwarfdump takes up to 0.5hr in build process
(LP: #2104911)
- [Packaging] azure: Don't generate list of source files
* MANA Catchup (LP: #2125704)
- RDMA/mana_ib: Use struct mana_ib_queue for WQs
- RDMA/mana_ib: Use struct mana_ib_queue for RAW QPs
- RDMA/mana_ib: remove useless return values from dbg prints
- RDMA/mana_ib: Use num_comp_vectors of ib_device
- RDMA/mana_ib: Add EQ creation for rnic adapter
- RDMA/mana_ib: Create and destroy rnic adapter
- RDMA/mana_ib: Implement port parameters
- RDMA/mana_ib: Adding and deleting GIDs
- RDMA/mana_ib: Configure mac address in RNIC
- RDMA/mana_ib: create EQs for RNIC CQs
- RDMA/mana_ib: create and destroy RNIC cqs
- RDMA/mana_ib: introduce a helper to remove cq callbacks
- RDMA/mana_ib: implement uapi for creation of rnic cq
- RDMA/mana_ib: Create and destroy RC QP
- RDMA/mana_ib: Implement uapi to create and destroy RC QP
- RDMA/mana_ib: Modify QP state
- RDMA/mana_ib: set node_guid
- RDMA/mana_ib: extend query device
- RDMA/mana_ib: Process QP error events in mana_ib
- RDMA/mana_ib: Allow registration of DMA-mapped memory in PDs
- RDMA/mana_ib: implement get_dma_mr
- RDMA/mana_ib: helpers to allocate kernel queues
- RDMA/mana_ib: create kernel-level CQs
- RDMA/mana_ib: Create and destroy UD/GSI QP
- RDMA/mana_ib: UD/GSI QP creation for kernel
- RDMA/mana_ib: create/destroy AH
- net/mana: fix warning in the writer of client oob
- RDMA/mana_ib: UD/GSI work requests
- RDMA/mana_ib: implement req_notify_cq
- RDMA/mana_ib: extend mana QP table
- RDMA/mana_ib: polling of CQs for GSI/UD
- RDMA/mana_ib: indicate CM support
- SAUCE: mana: Removing string literal "NET_MANA" namespace
- RDMA/mana_ib: Query feature_flags bitmask from FW
- RDMA/mana_ib: request error CQEs when supported
- RDMA/mana_ib: Add port statistics support
- RDMA: Pass uverbs_attr_bundle as part of '.reg_user_mr_dmabuf' API
- RDMA/mana_ib: Implement DMABUF MR support
- RDMA/mana_ib: Fix error code in probe()
- net: mana: Probe rdma device in mana driver
- RDMA/mana_ib: Add support of 4M, 1G, and 2G pages
- RDMA/mana_ib: Add support of mana_ib for RNIC and ETH nic
- RDMA/mana_ib: unify mana_ib functions to support any gdma device
- net: mana: Add support for auxiliary device servicing events
- RDMA/mana_ib: Add device statistics support
- net: mana: Handle Reset Request from MANA NIC
[ Ubuntu: 6.8.0-86.87 ]
* noble/linux: 6.8.0-86.87 -proposed tracker (LP: #2125391)
- Fix FTBS caused by incorrect pick/backport of
"perf dso: fix dso__is_kallsyms() check"
* noble ubuntu_ftrace_smoke_test:mmiotrace timeout on aws:r5.metal
(LP: #2121673)
- mm: memcg: add NULL check to obj_cgroup_put()
- memcg: drain obj stock on cpu hotplug teardown
* [25.04 FEAT] [post announcement] [KRN2304] CPU-MF Counters for new IBM Z
hardware - perf part (LP: #2103415)
- perf list: Add IBM z17 event descriptions
* memory leaks when configuring a small rate limit in audit (LP: #2122554)
- audit: fix skb leak when audit rate limit is exceeded
* [UBUNTU 24.04] PAI/NNPA support for new IBM z17 (LP: #2121956)
- s390/pai: export number of sysfs attribute files
- s390/pai_crypto: Add support for MSA 10 and 11 pai counters
- s390/pai_ext: Update PAI extension 1 counters
* [UBUNTU 24.04] s390/pci: Don't abort recovery for user-space drivers
(LP: #2121150)
- s390/pci: Allow automatic recovery with minimal driver support
* [UBUNTU 24.04] s390/pci: Fix stale function handles in error handling
(LP: #2121149)
- s390/pci: Fix stale function handles in error handling
- s390/pci: Do not try re-enabling load/store if device is disabled
* [UBUNTU 24.04] vfio/pci: fix 8-byte PCI loads and stores (LP: #2121146)
- vfio/pci: Extract duplicated code into macro
- vfio/pci: Support 8-byte PCI loads and stores
- vfio/pci: Fix typo in macro to declare accessors
* x86 systems with PCIe BAR addresses located outside a certain range see
P2PDMA allocation failures and CUDA initialization errors (LP: #2120209)
- x86/kaslr: Reduce KASLR entropy on most x86 systems
- x86/mm/init: Handle the special case of device private pages in
add_pages(), to not increase max_pfn and trigger
dma_addressing_limited() bounce buffers
* sources list generation using dwarfdump takes up to 0.5hr in build process
(LP: #2104911)
- [Packaging] Don't generate list of source files
* [SRU] Apparmor: Unshifted uids for hardlinks and unix sockets in user
namespaces (LP: #2121257)
- apparmor: shift ouid when mediating hard links in userns
- apparmor: shift uid when mediating af_unix in userns
* UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:452:16
(LP: #2119713)
- EDAC/i10nm: Skip DIMM enumeration on a disabled memory controller
* [IdeaPad Slim 5 13ARP10 , 83J2] Microphone on AMD Ryzen 7 7735HS does not
work (LP: #2102749)
- ASoC: amd: yc: update quirk data for new Lenovo model
* Fix compilation failure because of incomplete backport (LP: #2120561)
- SAUCE: netfilter: ctnetlink: Fix -Wuninitialized in
ctnetlink_secctx_size()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716)
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
- cpufreq: scpi: compare kHz instead of Hz
- smack: dont compile ipv6 code unless ipv6 is configured
- cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
- EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald
Rapids
- x86/fpu: Fix guest FPU state buffer allocation size
- x86/fpu: Avoid copying dynamic FP state from init_task in
arch_dup_task_struct()
- x86/platform: Only allow CONFIG_EISA for 32-bit
- [Config] updateconfigs after disabling CONFIG_EISA for amd64
- x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
- lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
- PM: sleep: Adjust check before setting power.must_resume
- RISC-V: KVM: Disable the kernel perf counter during configure
- selinux: Chain up tool resolving errors in install_policy.sh
- EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
- EDAC/ie31200: Fix the DIMM size mask for several SoCs
- EDAC/ie31200: Fix the error path order of ie31200_init()
- PM: sleep: Fix handling devices with direct_complete set on errors
- lockdep: Don't disable interrupts on RT in
disable_irq_nosync_lockdep.*()
- perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
- x86/traps: Make exc_double_fault() consistently noreturn
- x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
- media: verisilicon: HEVC: Initialize start_bit field
- media: platform: allgro-dvt: unregister v4l2_device on the error path
- platform/x86: dell-ddv: Fix temperature calculation
- ASoC: cs35l41: check the return value from spi_setup()
- HID: remove superfluous (and wrong) Makefile entry for
CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
- dt-bindings: vendor-prefixes: add GOcontroll
- ALSA: hda/realtek: Always honor no_shutup_pins
- ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio
compatible
- drm/bridge: ti-sn65dsi86: Fix multiple instances
- drm/dp_mst: Fix drm RAD print
- drm: xlnx: zynqmp: Fix max dma segment size
- PCI: Use downstream bridges for distributing resources
- drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
- drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
- drm/msm/dpu: don't use active in atomic_check()
- drm/msm/dsi: Use existing per-interface slice count in DSC timing
- drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
- drm/amdkfd: Fix Circular Locking Dependency in
'svm_range_cpu_invalidate_pagetables'
- PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data
payload
- PCI: brcmstb: Use internal register to change link capability
- PCI: brcmstb: Fix potential premature regulator disabling
- PCI/portdrv: Only disable pciehp interrupts early when needed
- drm/amd/display: fix type mismatch in
CalculateDynamicMetadataParameters()
- PCI: Remove stray put_device() in pci_register_host_bridge()
- PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
- drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
- drm/amd/display: avoid NPD when ASIC does not support DMUB
- PCI: histb: Fix an error handling path in histb_pcie_probe()
- PCI: pciehp: Don't enable HPIE when resuming in poll mode
- fbdev: au1100fb: Move a variable assignment behind a null pointer check
- mdacon: rework dependency list
- fbdev: sm501fb: Add some geometry checks.
- clk: amlogic: gxbb: drop incorrect flag on 32k clock
- crypto: hisilicon/sec2 - fix for aead authsize alignment
- crypto: hisilicon/sec2 - fix for sec spec check
- of: property: Increase NR_FWNODE_REFERENCE_ARGS
- remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
- libbpf: Fix hypothetical STT_SECTION extern NULL deref case
- selftests/bpf: Fix string read in strncmp benchmark
- clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
- RDMA/mana_ib: Ensure variable err is initialized
- remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
- bpf: Use preempt_count() directly in bpf_send_signal_common()
- lib: 842: Improve error handling in sw842_compress()
- pinctrl: renesas: rza2: Fix missing of_node_put() call
- pinctrl: renesas: rzg2l: Fix missing of_node_put() call
- clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
- RDMA/mlx5: Fix calculation of total invalidated pages
- remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
- IB/mad: Check available slots before posting receive WRs
- pinctrl: tegra: Set SFIO mode to Mux Register
- clk: amlogic: g12b: fix cluster A parent data
- clk: amlogic: gxbb: drop non existing 32k clock parent
- selftests/bpf: Select NUMA_NO_NODE to create map
- clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
- clk: amlogic: g12a: fix mmc A peripheral clock
- x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
- power: supply: max77693: Fix wrong conversion of charge input threshold
value
- crypto: nx - Fix uninitialised hv_nxc on error
- pinctrl: renesas: rzv2m: Fix missing of_node_put() call
- mfd: sm501: Switch to BIT() to mitigate integer overflows
- leds: Fix LED_OFF brightness race
- x86/dumpstack: Fix inaccurate unwinding from exception stacks due to
misplaced assignment
- crypto: hisilicon/sec2 - fix for aead auth key length
- pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
- clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
- perf stat: Fix find_stat for mixed legacy/non-legacy events
- isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
- soundwire: slave: fix an OF node reference leak in soundwire slave
device
- coresight: catu: Fix number of pages while using 64k pages
- coresight-etm4x: add isb() before reading the TRCSTATR
- perf pmu: Don't double count common sysfs and json events
- ucsi_ccg: Don't show failed to get FW build information error
- iio: accel: mma8452: Ensure error return on failure to matching
oversampling ratio
- iio: accel: msa311: Fix failure to release runtime pm if direct mode
claim fails.
- perf arm-spe: Fix load-store operation checking
- perf bench: Fix perf bench syscall loop count
- usb: xhci: correct debug message page size calculation
- dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
- iio: adc: ad4130: Fix comparison of channel setups
- iio: adc: ad7124: Fix comparison of channel configs
- perf evlist: Add success path to evlist__create_syswide_maps
- perf units: Fix insufficient array space
- kernel/events/uprobes: handle device-exclusive entries correctly in
__replace_page()
- kexec: initialize ELF lowest address to ULONG_MAX
- arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
- NFSv4: Don't trigger uneccessary scans for return-on-close delegations
- fuse: fix dax truncate/punch_hole fault path
- selftests/mm/cow: fix the incorrect error handling
- um: remove copy_from_kernel_nofault_allowed
- um: hostfs: avoid issues on inode number reuse by host
- i3c: master: svc: Fix missing the IBI rules
- perf python: Fixup description of sample.id event member
- perf python: Decrement the refcount of just created event on failure
- perf python: Don't keep a raw_data pointer to consumed ring buffer space
- perf python: Check if there is space to copy all the event
- staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
- tty: n_tty: use uint for space returned by tty_write_room()
- fs/procfs: fix the comment above proc_pid_wchan()
- perf tools: annotate asm_pure_loop.S
- NFS: Shut down the nfs_client only after all the superblocks
- exfat: fix the infinite loop in exfat_find_last_cluster()
- ksmbd: fix multichannel connection failure
- net/mlx5e: SHAMPO, Make reserved size independent of page size
- ring-buffer: Fix bytes_dropped calculation issue
- objtool: Fix segfault in ignore_unreachable_insn()
- LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
- LoongArch: Rework the arch_kgdb_breakpoint() implementation
- ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states
are invalid
- octeontx2-af: Fix mbox INTR handler when num VFs > 64
- octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
- objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
- sched/smt: Always inline sched_smt_active()
- context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
- rcu-tasks: Always inline rcu_irq_work_resched()
- wifi: iwlwifi: fw: allocate chained SG tables for dump
- wifi: iwlwifi: mvm: use the right version of the rate API
- nvme-tcp: fix possible UAF in nvme_tcp_poll
- nvme-pci: clean up CMBMSC when registering CMB fails
- nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
- wifi: brcmfmac: keep power during suspend if board requires it
- affs: generate OFS sequence numbers starting at 1
- affs: don't write overlarge OFS data block size fields
- ALSA: hda/realtek: Fix Asus Z13 2025 audio
- ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
- perf/core: Fix perf_pmu_register() vs. perf_init_event()
- cifs: fix incorrect validation for num_aces field of smb_acl
- platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4
tablet
- platform/x86/intel/vsec: Add Diamond Rapids support
- HID: i2c-hid: improve i2c_hid_get_report error message
- ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using
CS35L41 HDA
- sched/deadline: Use online cpus for validating runtime
- x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
- wifi: mac80211: flush the station before moving it to UN-AUTHORIZED
state
- locking/semaphore: Use wake_q to wake up processes outside lock critical
section
- x86/hyperv: Fix output argument to hypercall that changes page
visibility
- x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
- nvme-pci: fix stuck reset on concurrent DPC and HP
- ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
- can: statistics: use atomic access in hot path
- memory: omap-gpmc: drop no compatible check
- hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
- riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
make_call_ra
- ntb: intel: Fix using link status DB's
- firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
- RISC-V: errata: Use medany for relocatable builds
- x86/uaccess: Improve performance by aligning writes to 8 bytes in
copy_user_generic(), on non-FSRM/ERMS CPUs
- ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
- riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
- netfilter: nft_set_hash: GC reaps elements with conncount for dynamic
sets only
- vsock: avoid timeout during connect() if the socket is closing
- tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
- ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
- net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
- ipv6: Start path selection from the first nexthop
- ipv6: Do not consider link down nexthops in path selection
- drm/amdgpu/gfx11: fix num_mec
- perf/core: Fix child_total_time_enabled accounting bug at task exit
- tracing: Switch trace_events_hist.c code over to use guard()
- tracing/hist: Add poll(POLLIN) support on hist file
- tracing/hist: Support POLLPRI event for poll on histogram
- tracing: Correct the refcount if the hist/hist_debug file fails to open
- LoongArch: Increase ARCH_DMA_MINALIGN up to 16
- LoongArch: BPF: Fix off-by-one error in build_prologue()
- LoongArch: BPF: Don't override subprog's return value
- LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
- x86/hyperv: Fix check of return value from snp_set_vmsa()
- x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
- ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
- platform/x86: ISST: Correct command storage data length
- ntb_perf: Delete duplicate dmaengine_unmap_put() call in
perf_copy_chunk()
- perf/x86/intel: Apply static call for drain_pebs
- perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
- x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
- ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
- mmc: omap: Fix memory leak in mmc_omap_new_slot
- mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
- mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
- tracing: Ensure module defining synth event cannot be unloaded while
tracing
- tracing: Fix synth event printk format for str fields
- tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
- ext4: don't over-report free space or inodes in statvfs
- jfs: add index corruption check to DT_GETPAGE()
- exec: fix the racy usage of fs_struct->in_exec
- NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
- tracing: Do not use PERF enums when perf is not defined
- smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label
- sched: Cancel the slice protection of the idle entity
- cpufreq: tegra194: Allow building for Tegra234
- kunit/stackinit: Use fill byte different from Clang i386 pattern
- watchdog/hardlockup/perf: Fix perf_event memory leak
- x86/entry: Add __init to ia32_emulation_override_cmdline()
- regulator: pca9450: Fix enable register for LDO5
- auxdisplay: panel: Fix an API misuse in panel.c
- ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry
- drm/ssd130x: Set SPI .id_table to prevent an SPI core warning
- drm/ssd130x: fix ssd132x encoding
- drm/ssd130x: ensure ssd132x pitch is correct
- gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines
- drm/panel: ilitek-ili9882t: fix GPIO name in error message
- drm/msm/dsi/phy: Program clock inverters in correct register
- PCI: brcmstb: Set generation limit before PCIe link up
- drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump
- powerpc/kexec: fix physical address calculation in clear_utlb_entry()
- drm/mediatek: Fix config_updating flag never false when no mbox channel
- PCI: dwc: ep: Return -ENOMEM for allocation failures
- PCI/sysfs: Demacrofy pci_dev_resource_resize_attr(n) functions
- PCI: Fix BAR resizing when VF BARs are assigned
- dummycon: fix default rows/cols
- crypto: iaa - Test the correct request flag
- crypto: qat - set parity error mask for qat_420xx
- pinctrl: renesas: rzg2l: Suppress binding attributes
- clk: renesas: r8a08g045: Check the source of the CPU PLL settings
- remoteproc: qcom: pas: add minidump_id to SC7280 WPSS
- pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw()
- s390: Remove ioremap_wt() and pgprot_writethrough()
- clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK
- RDMA/mlx5: Fix MR cache initialization error flow
- power: supply: bq27xxx_battery: do not update cached flags prematurely
- pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment
- crypto: qat - remove access to parity register for QAT GEN4
- clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable()
- perf report: Switch data file correctly in TUI
- perf debug: Avoid stack overflow in recursive error message
- NFSv4: Avoid unnecessary scans of filesystems for returning delegations
- NFSv4: Avoid unnecessary scans of filesystems for expired delegations
- NFSv4: Avoid unnecessary scans of filesystems for delayed delegations
- um: Pass the correct Rust target and options with gcc
- perf dso: fix dso__is_kallsyms() check
- staging: vchiq_arm: Register debugfs after cdev
- perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation
- LoongArch: Fix device node refcount leak in fdt_cpu_clk_init()
- net: phy: broadcom: Correct BCM5221 PHY model detection
- wifi: mac80211: Cleanup sta TXQs on flush
- wifi: mac80211: remove debugfs dir for virtual monitor
- smb: common: change the data type of num_aces to le16
- platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-
TA
- exfat: add a check for invalid data size
- ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41
HDA
- ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using
CS35L41 HDA
- ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using
CS35L41 HDA
- wifi: mac80211: fix SA Query processing in MLO
- riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator
- riscv/purgatory: 4B align purgatory_start
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
- spi: bcm2835: Do not call gpiod_put() on invalid descriptor
- spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent
- kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally
- tty: serial: fsl_lpuart: Use u32 and u8 for register variables
- tty: serial: fsl_lpuart: use port struct directly to simply code
- tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning
- tty: serial: lpuart: only disable CTS instead of overwriting the whole
UARTMODIR register
- wifi: mac80211: Fix sparse warning for monitor_sdata
- LoongArch: Increase MAX_IO_PICS up to 8
- x86/tdx: Fix arch_safe_halt() execution for TDX VMs
- x86/Kconfig: Add cmpxchg8b support back to Geode CPUs
- wifi: mt76: mt7925: remove unused acpi function for clc
- media: omap3isp: Handle ARM dma_iommu_mapping
- Remove unnecessary firmware version check for gc v9_4_2
- exfat: fix potential wrong error return from get_block
- media: subdev: Fix use of sd->enabled_streams in call_s_stream()
- media: subdev: Improve v4l2_subdev_enable/disable_streams_fallback
- media: subdev: Add v4l2_subdev_is_streaming()
- NFSD: nfsd_unlink() clobbers non-zero status returned from
fh_fill_pre_attrs()
- NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory
- platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc()
- Upstream stable to v6.6.87, v6.12.23
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22028
- media: vimc: skip .s_stream() for stopped entities
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22036
- exfat: fix random stack corruption after get_block
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22039
- ksmbd: fix overflow in dacloffset bounds check
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22062
- sctp: add mutual exclusion in proc_sctp_do_udp_port()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22065
- idpf: fix adapter NULL pointer dereference on reboot
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22068
- ublk: make sure ubq->canceling is set when queue is frozen
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22070
- fs/9p: fix NULL pointer dereference on mkdir
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-40114
- iio: light: Add check for array bounds in veml6075_read_int_time_ms
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22025
- nfsd: put dl_stid if fail to queue dl_recall
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22027
- media: streamzap: fix race between device disconnection and urb callback
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-39735
- jfs: fix slab-out-of-bounds read in ea_get()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22033
- arm64: Don't call NULL in do_compat_alignment_fixup()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22035
- tracing: Fix use-after-free in print_graph_function_flags during tracer
switching
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22038
- ksmbd: validate zero num_subauth before sub_auth is accessed
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22040
- ksmbd: fix session use-after-free in multichannel connection
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22041
- ksmbd: fix use-after-free in ksmbd_sessions_deregister()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22042
- ksmbd: add bounds check for create lease context
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22044
- acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22045
- x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22050
- usbnet:fix NPE during rx_complete
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22053
- net: ibmveth: make veth_pool_store stop hanging
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22054
- arcnet: Add NULL check in com20020pci_probe()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22055
- net: fix geneve_opt length integer overflow
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22056
- netfilter: nft_tunnel: fix geneve_opt type confusion addition
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22057
- net: decrease cached dst counters in dst_release
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22058
- udp: Fix memory accounting leak.
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22060
- net: mvpp2: Prevent parser TCAM memory corruption
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-38637
- net_sched: skbprio: Remove overly strict queue assertions
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22063
- netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22064
- netfilter: nf_tables: don't unregister hook when table is dormant
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22066
- ASoC: imx-card: Add NULL check in imx_card_probe()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2023-53034
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22071
- spufs: fix a leak in spufs_create_context()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22072
- spufs: fix gang directory lifetimes
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22073
- spufs: fix a leak on spufs_new_file() failure
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-38575
- ksmbd: use aead_request_free to match aead_request_alloc
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22075
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-37937
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22079
- ocfs2: validate l_tree_depth to avoid out-of-bounds access
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22080
- fs/ntfs3: Prevent integer overflow in hdr_first_de()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22081
- fs/ntfs3: Fix a couple integer overflows on 32bit systems
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22083
- vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22086
- RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22089
- RDMA/core: Don't expose hw_counters outside of init net namespace
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-39728
- clk: samsung: Fix UBSAN panic in samsung_clk_init()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22090
- x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-38152
- remoteproc: core: Clear table_sz when rproc_shutdown
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-38240
- drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22095
- PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-22097
- drm/vkms: Fix use after free and double free on init error
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-23136
- thermal: int340x: Add NULL check for adev
* Noble update: upstream stable patchset 2025-09-01 (LP: #2121716) //
CVE-2025-23138
- watch_queue: fix pipe accounting mismatch
* Noble update: upstream stable patchset 2025-08-18 (LP: #2120877)
- ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
- HID: hid-plantronics: Add mic mute mapping and generalize quirks
- atm: Fix NULL pointer dereference
- ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
- ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
- ARM: Remove address checking for MMUless devices
- drm/dp_mst: Factor out function to queue a topology probe work
- drm/dp_mst: Add a helper to queue a topology probe
- drm/amd/display: Don't write DP_MSTM_CTRL after LT
- mm/page_alloc: fix memory accept before watermarks gets initialized
- netfilter: socket: Lookup orig tuple for IPv6 SNAT
- ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
- counter: stm32-lptimer-cnt: fix error handling when enabling
- counter: microchip-tcb-capture: Fix undefined counter channel state on
probe
- tty: serial: 8250: Add some more device IDs
- tty: serial: 8250: Add Brainboxes XC devices
- tty: serial: fsl_lpuart: disable transmitter before changing RS485
related registers
- net: usb: qmi_wwan: add Telit Cinterion FN990B composition
- net: usb: qmi_wwan: add Telit Cinterion FE990B composition
- net: usb: usbnet: restore usb%d name exception for local mac addresses
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
- nfsd: fix legacy client tracking initialization
- tty: serial: 8250: Add some more device IDs
- tty: serial: 8250: Add Brainboxes XC devices
- perf tools: Fix up some comments and code to properly use the
event_source bus
- bcachefs: bch2_ioctl_subvolume_destroy() fixes
- Upstream stable to v6.6.86, v6.12.22
* CVE-2025-39682
- tls: fix handling of zero-length records on the rx_list
* CVE-2025-38500
- xfrm: interface: fix use-after-free after changing collect_md xfrm
interface
* TLS socket disconnection causes various issues (LP: #2120516) //
CVE-2025-37756
- net: tls: explicitly disallow disconnect
* CVE-2025-38477
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
qfq_delete_class
* CVE-2025-38618
- vsock: Do not allow binding to VMADDR_PORT_ANY
* CVE-2025-38617
- net/packet: fix a race in packet_set_ring() and packet_notifier()
* CVE-2025-37785
- ext4: fix OOB read when checking dotdot dir
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
[ Ubuntu-azure: 6.8.0-1040.46 ]
* noble/linux-azure: 6.8.0-1040.46 -proposed tracker (LP: #2125522)
* azure: backport "cifs: fix pagecache leak when do writepages"
(LP: #2122719)
- cifs: fix pagecache leak when do writepages
* azure: backport "hv_netvsc: Fix panic during namespace deletion with VF"
(LP: #2120803)
- hv_netvsc: Fix panic during namespace deletion with VF
* azure: backport various SMB multichannel fixes (LP: #2118807)
- cifs: reset connections for all channels when reconnect requested
- cifs: update dstaddr whenever channel iface is updated
- cifs: dns resolution is needed only for primary channel
- cifs: deal with the channel loading lag while picking channels
- cifs: serialize other channels when query server interfaces is pending
- cifs: do not disable interface polling on failure
- smb: client: fix potential deadlock when reconnecting channels
- smb: client: fix warning when reconnecting channel
* net: mana: Use page pool fragments for RX buffers instead of full pages to
improve memory efficiency (LP: #2121570)
- net: mana: Use page pool fragments for RX buffers instead of full pages
to improve memory efficiency.
[ Ubuntu-azure: 6.8.0-1039.45 ]
* noble/linux-azure: 6.8.0-1039.45 -proposed tracker (LP: #2125074)
[ Ubuntu: 6.8.0-85.85 ]
* noble/linux: 6.8.0-85.85 -proposed tracker (LP: #2125109)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* CVE-2025-38500
- xfrm: interface: fix use-after-free after changing collect_md xfrm
interface
* TLS socket disconnection causes various issues (LP: #2120516) //
CVE-2025-37756
- net: tls: explicitly disallow disconnect
* CVE-2025-38477
- net/sched: sch_qfq: Fix race condition on qfq_aggregate
- net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in
qfq_delete_class
* CVE-2025-38618
- vsock: Do not allow binding to VMADDR_PORT_ANY
* CVE-2025-38617
- net/packet: fix a race in packet_set_ring() and packet_notifier()
* CVE-2025-37785
- ext4: fix OOB read when checking dotdot dir
[ Ubuntu-azure: 6.8.0-1038.44 ]
[ Ubuntu: 6.8.0-84.84 ]
* Linux refcount imbalance in af_unix subsystem (LP: #2121515)
- SAUCE: af_unix: Fix GC compatibility with upstream OOB refcount changes
[ Ubuntu-azure: 6.8.0-1036.42 ]
* noble/linux-azure: 6.8.0-1036.42 -proposed tracker (LP: #2121967)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* [MANA][Backport] The big tcp enablement patch (LP: #2119958)
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE
- hv_netvsc: Use VF's tso_max_size value when data path is VF
* [storvsc][Backport] scsi: storvsc: Increase the timeouts to
storvsc_timeout (LP: #2119690)
- scsi: storvsc: Increase the timeouts to storvsc_timeout
* [MANA][Backport]net: mana: Record doorbell physical address in PF mode
(LP: #2119680)
- net: mana: Record doorbell physical address in PF mode
* MANA patch catch-up with azure-nvidia for 6.8 kernel (LP: #2119572)
- RDMA/mana_ib: Set correct device into ib
- net: mana: Change the function signature of mana_get_primary_netdev_rcu
- RDMA/mana_ib: Handle net event for pointing to the current netdev
* net: mana: Expose additional hardware counters for drop and TC via ethtool
(LP: #2119686)
- net: mana: use ethtool string helpers
- net: mana: Expose additional hardware counters for drop and TC via
ethtool.
* [MANA][Backport] net: mana: Switch to page pool for jumbo frames
(LP: #2118947)
- net: mana: Switch to page pool for jumbo frames
* [MANA][Backport] patch: net: mana: Add debug logs in MANA network driver
(LP: #2119168)
- net: mana: Add debug logs in MANA network driver
* Backporting Linux CIFS dentry leak fix: Avoid race in open_cached_dir with
lease breaks (LP: #2117524)
- smb: client: Avoid race in open_cached_dir with lease breaks
[ Ubuntu: 6.8.0-81.81 ]
* noble/linux: 6.8.0-81.81 -proposed tracker (LP: #2121671)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.08.11)
* nvme no longer detected on boot after upgrade to 6.8.0-60 (LP: #2111521)
- SAUCE: PCI: Disable RRS polling for Intel SSDPE2KX020T8 nvme
* No IP Address assigned after hot-plugging Ethernet cable on HP Platform
(LP: #2115393)
- Revert "e1000e: change k1 configuration on MTP and later platforms"
* minimal kernel lacks modules for blk disk in arm64 openstack environments
where config_drive is required (LP: #2118499)
- [Config] Enable SYM53C8XX_2 on arm64
* rcu: Eliminate deadlocks involving do_exit() and RCU tasks (LP: #2117123)
- rcu-tasks: Initialize callback lists at rcu_init() time
- rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
- rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
* BPF header file in wrong location (LP: #2118965)
- [Packaging] Install bpf header to correct location
* i915: support ARL-H gpu (LP: #2117716)
- drm/i915: Add additional ARL PCI IDs
- drm/i915/mtl: Add fake PCH for Meteor Lake
- drm/i915/mtl: Wake GT before sending H2G message
- drm/i915/xelpg: Add workaround 14019877138
- drm/i915/xelpg: Extend driver code of Xe_LPG to Xe_LPG+
- drm/i915/display: correct dual pps handling for MTL_PCH+
* Ubuntu 24.04.2: NULL pointer dereference with Ceph and selinux
(LP: #2115447)
- SAUCE: fs/ceph, selinux: fix NULL pointer dereference on CephFS write
with SELinux in permissive mode
* Noble update: upstream stable patchset 2025-08-04 (LP: #2119458)
- clockevents/drivers/i8253: Fix stop sequence for timer 0
- sched/isolation: Prevent boot crash when the boot CPU is nohz_full
- hrtimer: Use and report correct timerslack values for realtime tasks
- mm: add nommu variant of vm_insert_pages()
- io_uring: get rid of remap_pfn_range() for mapping rings/sqes
- io_uring: don't attempt to mmap larger than what the user asks for
- io_uring: fix corner case forgetting to vunmap
- io_uring: use vmap() for ring mapping
- io_uring: unify io_pin_pages()
- io_uring/kbuf: vmap pinned buffer ring
- io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
- io_uring: use unpin_user_pages() where appropriate
- io_uring: fix error pbuf checking
- rust: Disallow BTF generation with Rust + LTO
- rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
`Option<KBox<T>>`
- lib/buildid: Handle memfd_secret() files in build_id_parse()
- mm: split critical region in remap_file_pages() and invoke LSMs in
between
- stmmac: loongson: Pass correct arg to PCI function
- rust: lockdep: Remove support for dynamically allocated LockClassKeys
- netfilter: nf_tables: allow clone callbacks to sleep
- drm/amd/display: should support dmub hw lock on Replay
- drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
- KVM: arm64: Calculate cptr_el2 traps on activating traps
- KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
- KVM: arm64: Remove host FPSIMD saving for non-protected KVM
- KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
- KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
- KVM: arm64: Refactor exit handlers
- KVM: arm64: Eagerly switch ZCR_EL{1,2}
- Revert "sched/core: Reduce cost of sched_move_task when config
autogroup"
- wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version
8
- netfilter: nft_counter: Use u64_stats_t for statistic.
- firmware: imx-scu: fix OF node leak in .probe()
- arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
- arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
- xfrm: fix tunnel mode TX datapath in packet offload mode
- xfrm_output: Force software GSO only in tunnel mode
- soc: imx8m: Remove global soc_uid
- soc: imx8m: Use devm_* to simplify probe failure handling
- soc: imx8m: Unregister cpufreq and soc dev in cleanup path
- ARM: dts: bcm2711: Fix xHCI power-domain
- ARM: dts: bcm2711: PL011 UARTs are actually r1p5
- arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
- RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
- RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
- ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
- ARM: dts: bcm2711: Don't mark timer regs unconfigured
- dma-mapping: fix missing clear bdr in check_ram_in_range_map()
- RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
- RDMA/hns: Fix soft lockup during bt pages loop
- RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
- RDMA/hns: Fix a missing rollback in error path of
hns_roce_create_qp_common()
- RDMA/hns: Fix missing xa_destroy()
- RDMA/hns: Fix wrong value of max_sge_rd
- Bluetooth: Fix error code in chan_alloc_skb_cb()
- Bluetooth: hci_event: Fix connection regression between LE and non-LE
adapters
- accel/qaic: Fix possible data corruption in BOs > 2G
- ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
- ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
- ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
- devlink: fix xa_alloc_cyclic() error handling
- dpll: fix xa_alloc_cyclic() error handling
- gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
- net: atm: fix use after free in lec_send()
- net: lwtunnel: fix recursion loops
- net: ipv6: ioam6: fix lwtunnel_output() loop
- libfs: Fix duplicate directory entry in offset_dir_lookup
- net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
- i2c: omap: fix IRQ storms
- net: mana: Support holes in device list reply msg
- can: rcar_canfd: Fix page entries in the AFL list
- can: ucan: fix out of bound read in strscpy() source
- can: flexcan: only change CAN state when link up in system PM
- can: flexcan: disable transceiver during system PM
- drm/xe: Fix exporting xe buffers multiple times
- drm/v3d: Don't run jobs that have errors flagged in its fence
- riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function
definitions
- regulator: dummy: force synchronous probing
- regulator: check that dummy regulator has been probed before using it
- accel/qaic: Fix integer overflow in qaic_validate_req()
- arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to
sound card
- arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to
sound card
- arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
- mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
- mmc: atmel-mci: Add missing clk_disable_unprepare()
- mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
- mm/migrate: fix shmem xarray update during migration
- proc: fix UAF in proc_get_inode()
- ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
- ARM: shmobile: smp: Enforce shmobile_smp_* alignment
- efi/libstub: Avoid physical address 0x0 when doing random allocation
- xsk: fix an integer overflow in xp_create_and_assign_umem()
- batman-adv: Ignore own maximum aggregation size during RX
- soc: qcom: pdr: Fix the potential deadlock
- pmdomain: amlogic: fix T7 ISP secpower
- drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
- drm/sched: Fix fence reference count leak
- drm/amd/display: Fix message for support_edp0_on_dp1
- drm/amd/pm: add unique_id for gfx12
- drm/amdgpu: Remove JPEG from vega and carrizo video caps
- drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
- drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
- ksmbd: fix incorrect validation for num_aces field of smb_acl
- KVM: arm64: Mark some header functions as inline
- arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
- mptcp: Fix data stream corruption in the address announcement
- net: lwtunnel: disable BHs when required
- Upstream stable to v6.6.84, v6.6.85, v6.12.21
* Noble update: upstream stable patchset 2025-07-28 (LP: #2118927)
- drm/i915/xe2lpd: Move D2D enable/disable
- drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
- ibmvnic: Perform tx CSO during send scrq direct
- ibmvnic: Inspect header requirements before using scrq direct
- drm/amdgpu: Check extended configuration space register when system uses
large bar
- drm/amdgpu: disable BAR resize on Dell G5 SE
- net: enetc: Remove setting of RX software timestamp
- net: enetc: Replace ifdef with IS_ENABLED
- net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
- NFS: O_DIRECT writes must check and adjust the file length
- riscv: cacheinfo: remove the useless input parameter (node) of
ci_leaf_init()
- riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
- riscv: Prevent a bad reference count on CPU nodes
- riscv: cacheinfo: Use of_property_present() for non-boolean properties
- mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
- arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
- drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
- x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
- ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
- x86/boot: Sanitize boot params before parsing command line
- fbdev: hyperv_fb: iounmap() the correct memory when removing a device
- pinctrl: bcm281xx: Fix incorrect regmap max_registers value
- pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
- netfilter: nft_ct: Use __refcount_inc() for per-CPU
nft_ct_pcpu_template.
- ice: fix memory leak in aRFS after reset
- netfilter: nf_conncount: garbage collection is not skipped when jiffies
wrap around
- netfilter: nf_tables: make destruction work queue pernet
- sched: address a potential NULL pointer dereference in the GRED
scheduler.
- wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
- wifi: mac80211: don't queue sdata::work for a non-running sdata
- wifi: cfg80211: cancel wiphy_work before freeing wiphy
- Bluetooth: hci_event: Fix enabling passive scanning
- net/mlx5: Fill out devlink dev info only for PFs
- net: dsa: mv88e6xxx: Verify after ATU Load ops
- net: mctp i3c: Copy headers if cloned
- net: mctp i2c: Copy headers if cloned
- netpoll: hold rcu read lock in __netpoll_send_skb()
- drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
- fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
- fbdev: hyperv_fb: Simplify hvfb_putmem
- fbdev: hyperv_fb: Allow graceful removal of framebuffer
- Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
- net/mlx5: handle errors in mlx5_chains_create_table()
- eth: bnxt: fix truesize for mb-xdp-pass case
- eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
- net: switchdev: Convert blocking notification chain to a raw one
- net: mctp: unshare packets when reassembling
- bonding: fix incorrect MAC address setting to receive NS messages
- netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
insert_tree()
- ipvs: prevent integer overflow in do_ip_vs_get_ctl()
- netfilter: nft_exthdr: fix offset with ipv4_find_option()
- net: openvswitch: remove misbehaving actions length check
- net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
- net/mlx5: Bridge, fix the crash caused by LAG state check
- net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed
devices
- nvme-fc: go straight to connecting state when initializing
- nvme-fc: do not ignore connectivity loss during connecting
- hrtimers: Mark is_migration_base() with __always_inline
- powercap: call put_device() on an error path in
powercap_register_control_type()
- futex: Pass in task to futex_queue()
- sched/debug: Provide slice length for fair tasks
- platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
- scsi: core: Use GFP_NOIO to avoid circular locking dependency
- scsi: ufs: core: Fix error return with query response
- scsi: qla1280: Fix kernel oops when debug level > 2
- ACPI: resource: IRQ override for Eluktronics MECH-17
- smb: client: fix noisy when tree connecting to DFS interlink targets
- alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
- vboxsf: fix building with GCC 15
- HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
- HID: intel-ish-hid: Send clock sync message immediately after reset
- HID: ignore non-functional sensor in HP 5MP Camera
- HID: hid-steam: Fix issues with disabling both gamepad mode and lizard
mode
- usb: phy: generic: Use proper helper for property detection
- HID: topre: Fix n-key rollover on Realforce R3S TKL boards
- HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
- HID: apple: fix up the F6 key on the Omoton KB066 keyboard
- objtool: Ignore dangling jump table entries
- sched: Clarify wake_up_q()'s write to task->wake_q.next
- platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
- platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
- platform/x86: int3472: Use str_high_low()
- platform/x86: int3472: Use GPIO_LOOKUP() macro
- platform/x86: int3472: Use correct type for "polarity", call it
gpio_flags
- platform/x86: int3472: Call "reset" GPIO "enable" for INT347E
- s390/cio: Fix CHPID "configure" attribute caching
- thermal/cpufreq_cooling: Remove structure member documentation
- LoongArch: KVM: Set host with kernel mode when switch to VM mode
- arm64: amu: Delay allocating cpumask for AMU FIE support
- Xen/swiotlb: mark xen_swiotlb_fixup() __init
- Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
- selftests/bpf: Fix invalid flag of recv()
- ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
- ASoC: simple-card-utils.c: add missing dlc->of_node
- ALSA: hda/realtek: Limit mic boost on Positivo ARN50
- ASoC: rsnd: indicate unsupported clock rate
- ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
- ASoC: rsnd: adjust convert rate limitation
- ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
- ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
- ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
- ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
- net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
- io-wq: backoff when retrying worker creation
- nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
- nvmet-rdma: recheck queue state is LIVE in state lock in recv done
- apple-nvme: Release power domains when probe fails
- cifs: Treat unhandled directory name surrogate reparse points as mount
directory nodes
- sctp: Fix undefined behavior in left shift operation
- nvme: only allow entering LIVE from CONNECTING state
- phy: ti: gmii-sel: Simplify with dev_err_probe()
- phy: ti: gmii-sel: Do not use syscon helper to build regmap
- ASoC: tas2770: Fix volume scale
- ASoC: tas2764: Fix power control mask
- ASoC: tas2764: Set the SDOUT polarity correctly
- fuse: don't truncate cached, mutated symlink
- drm/vkms: Round fixp2int conversion in lerp_u16
- perf/x86/intel: Use better start period for frequency mode
- x86/irq: Define trace events conditionally
- mptcp: safety check before fallback
- drm/nouveau: Do not override forced connector status
- net: Handle napi_schedule() calls from non-interrupt
- block: fix 'kmem_cache of name 'bio-108' already exists'
- cifs: Validate content of WSL reparse point buffers
- cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
parse_reparse_point()
- Input: ads7846 - fix gpiod allocation
- Input: iqs7222 - preserve system status register
- Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE
controllers
- Input: xpad - add multiple supported devices
- Input: xpad - add support for ZOTAC Gaming Zone
- Input: xpad - add support for TECNO Pocket Go
- Input: xpad - rename QH controller to Legion Go S
- Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
- Input: i8042 - add required quirks for missing old boardnames
- Input: i8042 - swap old quirk combination with new quirk for several
devices
- Input: i8042 - swap old quirk combination with new quirk for more
devices
- USB: serial: ftdi_sio: add support for Altera USB Blaster 3
- USB: serial: option: add Telit Cinterion FE990B compositions
- USB: serial: option: fix Telit Cinterion FE990A name
- USB: serial: option: match on interface class for Telit FN990B
- x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
- drm/i915/cdclk: Do cdclk post plane programming later
- drm/atomic: Filter out redundant DPMS calls
- drm/dp_mst: Fix locking when skipping CSN before topology probing
- drm/amd/amdkfd: Evict all queues even HWS remove queue failed
- drm/amd/display: Disable unneeded hpd interrupts during dm_init
- drm/amd/display: Restore correct backlight brightness after a GPU reset
- drm/amd/display: Assign normalized_pix_clk when color depth = 14
- drm/amd/display: Fix slab-use-after-free on hdcp_work
- ksmbd: fix use-after-free in ksmbd_free_work_struct
- ksmbd: prevent connection release during oplock break notification
- clk: samsung: update PLL locktime for PLL142XX used on FSD platform
- clk: samsung: gs101: fix synchronous external abort in
samsung_clk_save()
- ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
- dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
- arm64: mm: Populate vmemmap at the page level if not section aligned
- Fix mmu notifiers for range-based invalidates
- qlcnic: fix memory leak issues in qlcnic_sriov_common.c
- smb: client: fix regression with guest option
- net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
- net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
- ASoC: ops: Consistently treat platform_max as control value
- rust: error: add missing newline to pr_warn! calls
- drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
- ASoC: cs42l43: Fix maximum ADC Volume
- rust: init: add missing newline to pr_info! calls
- ASoC: rt722-sdca: add missing readable registers
- drm/xe: cancel pending job timer before freeing scheduler
- drm/xe: Release guc ids before cancelling work
- ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
- scripts: generate_rust_analyzer: add missing macros deps
- scripts: generate_rust_analyzer: add missing include_dirs
- scripts: generate_rust_analyzer: add uapi crate
- cifs: Fix integer overflow while processing acregmax mount option
- cifs: Fix integer overflow while processing acdirmax mount option
- cifs: Fix integer overflow while processing actimeo mount option
- cifs: Fix integer overflow while processing closetimeo mount option
- x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
hypervisors
- i2c: ali1535: Fix an error handling path in ali1535_probe()
- i2c: ali15x3: Fix an error handling path in ali15x3_probe()
- i2c: sis630: Fix an error handling path in sis630_probe()
- mm/hugetlb: wait for hugetlb folios to be freed
- smb3: add support for IAKerb
- smb: client: Fix match_session bug preventing session reuse
- Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
- nvme-fc: rely on state transitions to handle connectivity loss
- HID: apple: disable Fn key handling on the Omoton KB066
- Input: xpad - fix two controller table values
- cifs: Ensure that all non-client-specific reparse points are processed
by the server
- wifi: cfg80211: init wiphy_work before allocating rfkill fails
- ksmbd: fix r_count dec/increment mismatch
- nvme: unblock ctrl state transition for firmware update
- Upstream stable to v6.6.83, v6.12.20
* Noble update: upstream stable patchset 2025-07-22 (LP: #2117533)
- x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
- gpio: vf610: use generic device_get_match_data()
- gpio: vf610: add locking to gpio direction functions
- cifs: Remove symlink member from cifs_open_info_data union
- smb311: failure to open files of length 1040 when mounting with SMB3.1.1
POSIX extensions
- btrfs: fix data overwriting bug during buffered write when block size <
page size
- x86/microcode/AMD: Add some forgotten models to the SHA check
- rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
- rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
- rust: introduce `.clippy.toml`
- rust: replace `clippy::dbg_macro` with `disallowed_macros`
- rust: provide proper code documentation titles
- rust: enable Clippy's `check-private-items`
- Documentation: rust: add coding guidelines on lints
- Documentation: rust: discuss `#[expect(...)]` in the guidelines
- rust: error: make conversion functions public
- rust: error: optimize error type to use nonzero
- rust: error: check for config `test` in `Error::name`
- rust: fix size_t in bindgen prototypes of C builtins
- rust: map `__kernel_size_t` and friends also to usize/isize
- tracing: tprobe-events: Fix a memory leak when tprobe with $retval
- LoongArch: Convert unreachable() to BUG()
- LoongArch: Use polling play_dead() when resuming from hibernation
- LoongArch: Set max_pfn with the PFN of the last page
- LoongArch: KVM: Add interrupt checking for AVEC
- LoongArch: KVM: Reload guest CSR registers after sleep
- LoongArch: KVM: Fix GPA size issue about VM
- HID: appleir: Fix potential NULL dereference at raw event handle
- ksmbd: fix type confusion via race condition when using
ipc_msg_send_request
- ksmbd: fix out-of-bounds in parse_sec_desc()
- ksmbd: fix use-after-free in smb2_lock
- ksmbd: fix bug on trap in smb2_lock
- gpio: rcar: Use raw_spinlock to protect register access
- ALSA: seq: Avoid module auto-load handling at event delivery
- ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
- ALSA: hda/realtek: update ALC222 depop optimize
- btrfs: fix a leaked chunk map issue in read_one_chunk()
- hwmon: (peci/dimmtemp) Do not provide fake thresholds data
- drm/amd/display: Fix null check for pipe_ctx->plane_state in
resource_build_scaling_params
- drm/imagination: avoid deadlock on fence release
- drm/imagination: Hold drm_gem_gpuva lock for unmap
- drm/imagination: only init job done fences once
- drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
- platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
- x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
- x86/cpu: Validate CPUID leaf 0x2 EDX output
- x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
- Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
- Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
- wifi: cfg80211: regulatory: improve invalid hints checking
- wifi: nl80211: reject cooked mode if it is set along with other flags
- rapidio: add check for rio_add_net() in rio_scan_alloc_net()
- rapidio: fix an API misues when rio_add_net() fails
- dma: kmsan: export kmsan_handle_dma() for modules
- s390/traps: Fix test_monitor_call() inline assembly
- NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
- userfaultfd: do not block on locking a large folio with raised refcount
- block: fix conversion of GPT partition name to 7-bit
- mm/page_alloc: fix uninitialized variable
- mm: don't skip arch_sync_kernel_mappings() in error paths
- wifi: iwlwifi: mvm: don't try to talk to a dead firmware
- wifi: iwlwifi: limit printed string from FW file
- HID: google: fix unused variable warning under !CONFIG_ACPI
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
- bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
- nvme-tcp: add basic support for the C2HTermReq PDU
- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
- net: gso: fix ownership in __udp_gso_segment
- caif_virtio: fix wrong pointer check in cfv_probe()
- perf/core: Fix pmus_lock vs. pmus_srcu ordering
- hwmon: (pmbus) Initialise page count in pmbus_identify()
- hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
- hwmon: (ad7314) Validate leading zero bits and return error
- tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
- drm/imagination: Fix timestamps in firmware traces
- ALSA: usx2y: validate nrpacks module parameter on probe
- llc: do not use skb_get() before dev_queue_xmit()
- hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
- drm/sched: Fix preprocessor guard
- be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
- net: hns3: make sure ptp clock is unregister and freed if
hclge_ptp_get_cycle returns an error
- net: ipa: Fix v4.7 resource group names
- net: ipa: Fix QSB data for v4.7
- net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
- ppp: Fix KMSAN uninit-value warning with bpf
- vlan: enforce underlying device type
- x86/sgx: Fix size overflows in sgx_encl_create()
- exfat: fix soft lockup in exfat_clear_bitmap
- exfat: short-circuit zero-byte writes in exfat_file_write_iter
- net-timestamp: support TCP GSO case for a few missing flags
- ublk: set_params: properly check if parameters can be applied
- sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
- nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
- net: dsa: mt7530: Fix traffic flooding for MMIO devices
- mctp i3c: handle NULL header address
- net: ipv6: fix dst ref loop in ila lwtunnel
- net: ipv6: fix missing dst ref drop in ila lwtunnel
- gpio: rcar: Fix missing of_node_put() call
- usb: renesas_usbhs: Call clk_put()
- usb: renesas_usbhs: Use devm_usb_get_phy()
- usb: hub: lack of clearing xHC resources
- usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card
Reader
- usb: typec: ucsi: Fix NULL pointer access
- usb: renesas_usbhs: Flush the notify_hotplug_work
- usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
- usb: atm: cxacru: fix a flaw in existing endpoint checks
- usb: dwc3: Set SUSPENDENABLE soon after phy init
- usb: dwc3: gadget: Prevent irq storm when TH re-executes
- usb: typec: ucsi: increase timeout for PPM reset operations
- usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
- usb: gadget: Set self-powered based on MaxPower and bmAttributes
- usb: gadget: Fix setting self-powered state on suspend
- usb: gadget: Check bmAttributes only if configuration is valid
- kbuild: userprogs: use correct lld when linking through clang
- xhci: pci: Fix indentation in the PCI device ID definitions
- usb: xhci: Enable the TRB overfetch quirk on VIA VL805
- KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
- KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
- KVM: SVM: Suppress DEBUGCTL.BTF on AMD
- KVM: x86: Snapshot the host's DEBUGCTL in common x86
- KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is
disabled
- KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
- KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by
KVM
- cdx: Fix possible UAF error in driver_override_show()
- mei: me: add panther lake P DID
- mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
- intel_th: pci: Add Arrow Lake support
- intel_th: pci: Add Panther Lake-H support
- intel_th: pci: Add Panther Lake-P/U support
- slimbus: messaging: Free transaction ID in delayed interrupt scenario
- bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid
deadlock
- eeprom: digsy_mtc: Make GPIO lookup table match the device
- drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
- iio: filter: admv8818: Force initialization of SDO
- iio: dac: ad3552r: clear reset status flag
- iio: adc: ad7192: fix channel select
- iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
- kbuild: hdrcheck: fix cross build with clang
- nvme-tcp: Fix a C2HTermReq error message
- docs: rust: remove spurious item in `expect` list
- Upstream stable to v6.6.82, v6.12.19
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878)
- IB/mlx5: Set and get correct qp_num for a DCT QP
- RDMA/mana_ib: Allocate PAGE aligned doorbell index
- scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
- SUNRPC: convert RPC_TASK_* constants to enum
- SUNRPC: Prevent looping due to rpc_signal_task() races
- SUNRPC: Handle -ETIMEDOUT return from tlshd
- RDMA/mlx5: Fix AH static rate parsing
- scsi: core: Clear driver private data when retrying request
- RDMA/mlx5: Fix bind QP error cleanup flow
- sunrpc: suppress warnings for unused procfs functions
- ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
- Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
- rxrpc: rxperf: Fix missing decoding of terminal magic cookie
- afs: Fix the server_list to unuse a displaced server rather than putting
it
- net: loopback: Avoid sending IP packets without an Ethernet header
- net: set the minimum for net_hotdata.netdev_budget_usecs
- net/ipv4: add tracepoint for icmp_send
- ipv4: icmp: Pass full DS field to ip_route_input()
- ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
- ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
- ipv4: Convert icmp_route_lookup() to dscp_t.
- ipv4: Convert ip_route_input() to dscp_t.
- ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos
conversion.
- net: cadence: macb: Synchronize stats calculations
- ASoC: es8328: fix route from DAC to output
- ipvs: Always clear ipvs_property flag in skb_scrub_packet()
- firmware: cs_dsp: Remove async regmap writes
- ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
- ice: add E830 HW VF mailbox message limit support
- tcp: Defer ts_recent changes until req is owned
- net: Clear old fragment checksum value in napi_reuse_skb
- net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
- net/mlx5: IRQ, Fix null string in debug print
- net: ipv6: fix dst ref loop on input in seg6 lwt
- net: ipv6: fix dst ref loop on input in rpl lwt
- net: ti: icss-iep: Remove spinlock-based synchronization
- net: ti: icss-iep: Reject perout generation request
- io_uring/net: save msg_control for compat
- x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
- phy: rockchip: naneng-combphy: compatible reset with old DT
- RISCV: KVM: Introduce mp_state_lock to avoid lock inversion
- riscv: KVM: Fix hart suspend status check
- riscv: KVM: Fix SBI IPI error generation
- riscv: KVM: Fix SBI TIME error generation
- ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
- ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
- perf/x86: Fix low freqency setting issue
- perf/core: Fix low freq setting via IOC_PERIOD
- drm/amd/display: Disable PSR-SU on eDP panels
- drm/amd/display: Fix HPD after gpu reset
- i2c: ls2x: Fix frequency division register access
- net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
- net: enetc: keep track of correct Tx BD count in
enetc_map_tx_tso_buffs()
- net: enetc: update UDP checksum when updating originTimestamp field
- net: enetc: correct the xdp_tx statistics
- net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
- phy: tegra: xusb: reset VBUS & ID OVERRIDE
- phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in
refclk
- mptcp: reset when MPTCP opts are dropped after join
- vmlinux.lds: Ensure that const vars with relocations are mapped R/O
- rcuref: Plug slowpath race in rcuref_put()
- rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
- riscv/futex: sign extend compare value in atomic cmpxchg
- riscv: signal: fix signal frame size
- rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
- rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
- amdgpu/pm/legacy: fix suspend/resume issues
- gve: set xdp redirect target only when it is available
- x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
- x86/microcode/AMD: Pay attention to the stepping dynamically
- x86/microcode/AMD: Split load_microcode_amd()
- x86/microcode/intel: Remove unnecessary cache writeback and invalidation
- x86/microcode/AMD: Flush patch buffer mapping after application
- x86/microcode/AMD: Return bool from find_blobs_in_containers()
- x86/microcode/AMD: Make __verify_patch_size() return bool
- x86/microcode/AMD: Have __apply_microcode_amd() return bool
- x86/microcode/AMD: Merge early_apply_microcode() into its single
callsite
- x86/microcode/AMD: Get rid of the _load_microcode_amd() forward
declaration
- x86/microcode/AMD: Add get_patch_level()
- x86/microcode/AMD: Load only SHA256-checksummed patches
- x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
- RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error
- RDMA/hns: Fix mbox timing out by adding retry mechanism
- RDMA/bnxt_re: Allocate dev_attr information dynamically
- RDMA/bnxt_re: Fix the statistics for Gen P7 VF
- landlock: Fix non-TCP sockets restriction
- RDMA/mlx5: Fix implicit ODP hang on parent deregistration
- scsi: ufs: core: Set default runtime/system PM levels before
ufshcd_hba_init()
- afs: Give an afs_server object a ref on the afs_cell object it points to
- ASoC: cs35l56: Prevent races when soft-resetting using SPI control
- thermal: gov_power_allocator: Fix incorrect calculation in
divvy_up_power()
- unreachable: Unify
- objtool: Remove annotate_{,un}reachable()
- objtool: Fix C jump table annotations for Clang
- riscv: KVM: Fix hart suspend_type use
- KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2
- drm/xe/regs: remove a duplicate definition for RING_CTL_SIZE(size)
- drm/xe/userptr: restore invalidation list on error
- drm/amdkfd: Preserve cp_hqd_pq_control on update_mqd
- drm/amd/display: Add option to configure mapping policy for edp0 on dp1
- drm/amd/display: add a quirk to enable eDP0 on DP1
- intel_idle: Handle older CPUs, which stop the TSC in deeper C states,
correctly
- selftests/landlock: Test that MPTCP actions are not restricted
- selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
- riscv: signal: fix signal_minsigstksz
- x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section()
signature
- x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd()
declarations
- Upstream stable to v6.6.81, v6.12.18
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21872
- efi: Don't map the entire mokvar table to determine its size
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21880
- drm/xe/userptr: fix EFAULT handling
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21890
- idpf: fix checksums set in idpf_rx_rsc()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21885
- RDMA/bnxt_re: Fix the page details for the srq created by kernel
consumers
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21888
- RDMA/mlx5: Fix a WARN during dereg_mr for DM type
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21892
- RDMA/mlx5: Fix the recovery flow of the UMR QP
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21873
- scsi: ufs: core: bsg: Fix crash when arpmb command fails
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2024-58090
- sched/core: Prevent rescheduling when interrupts are disabled
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21875
- mptcp: always handle address removal under msk socket lock
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21877
- usbnet: gl620a: fix endpoint checking in genelink_bind()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21878
- i2c: npcm: disable interrupt enable bit before devm_request_irq
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21889
- perf/core: Add RCU read lock protection to perf_iterate_ctx()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21898
- ftrace: Avoid potential division by zero in function_stat_show()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21899
- tracing: Fix bad hist from corrupting named_triggers list
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21881
- uprobes: Reject the shared zeropage in uprobe_write_opcode()
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21895
- perf/core: Order the PMU list to fix warning about unordered
pmu_ctx_list
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21883
- ice: Fix deinitializing VF in error path
* Noble update: upstream stable patchset 2025-07-14 (LP: #2116878) //
CVE-2025-21891
- ipvlan: ensure network headers are in skb linear part
* CVE-2024-57996 // CVE-2025-37752
- net_sched: sch_sfq: move the limit validation
* CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
* CVE-2025-21887
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
[ Ubuntu-azure: 6.8.0-1035.41 ]
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* Miscellaneous upstream changes
- Revert "UBUNTU: [Packaging] update variants"
[ Ubuntu-azure: 6.8.0-1035.40 ]
* noble/linux-azure: 6.8.0-1035.40 -proposed tracker (LP: #2119888)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 6.8.0-79.79 ]
* noble/linux: 6.8.0-79.79 -proposed tracker (LP: #2120415)
* CVE-2024-57996 // CVE-2025-37752
- net_sched: sch_sfq: move the limit validation
* CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
* CVE-2025-21887
- ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
[ Ubuntu-azure: 6.8.0-1034.39 ]
* noble/linux-azure: 6.8.0-1034.39 -proposed tracker (LP: #2120374)
[ Ubuntu: 6.8.0-78.78 ]
* noble/linux: 6.8.0-78.78 -proposed tracker (LP: #2120405)
* Incorrect backport for CVE-2025-21861 causes kernel hangs
(LP: #2120330) // CVE-2025-21861
- mm/migrate_device: don't add folio to be freed to LRU in
migrate_device_finalize()
* Incorrect backport for CVE-2025-21861 causes kernel hangs (LP: #2120330)
- SAUCE: Revert "mm/migrate_device: don't add folio to be freed to LRU in
migrate_device_finalize()"
- mm: migrate_device: use more folio in migrate_device_finalize()
[ Ubuntu-azure: 6.8.0-1033.38 ]
* noble/linux-azure: 6.8.0-1033.38 -proposed tracker (LP: #2117659)
* Additional MANA patch support, kernel 5.15 and later (LP: #2115356)
- net: mana: Set tx_packets to post gso processing packet count
- net: mana: Support holes in device list reply msg
- net: mana: Add support for Multi Vports on Bare metal
- net: mana: Add handler for hardware servicing events
* Additional MANA patch support, kernel 6.8 and later (LP: #2115309)
- cpumask: add cpumask_weight_andnot()
- cpumask: define cleanup function for cpumasks
- net: mana: add a function to spread IRQs per CPUs
- net: mana: Assigning IRQ affinity on HT cores
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations
- PCI: hv: Allow dynamic MSI-X vector allocation
- net: mana: explain irq_setup() algorithm
- net: mana: Allow irq_setup() to skip cpus for affinity
- net: mana: Allocate MSI-X vectors dynamically
* Noble update: upstream stable patchset 2025-06-29 (LP: #2115616)
- [Config] azure: updateconfigs for MIPI_I3C_HCI_PCI
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2025.07.14)
* vhci-hcd and usbip-core not available (LP: #2115827)
- [Config] azure: Revert to -generic config for CONFIG_USBIP_VHCI_HCD and
CONFIG_USBIP_CORE
[ Ubuntu: 6.8.0-72.72 ]
* noble/linux: 6.8.0-72.72 -proposed tracker (LP: #2117691)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.07.14)
* NVMe namespace ID mismatch on repeated map/unmap (LP: #2115209)
- nvme: requeue namespace scan on missed AENs
- nvme: re-read ANA log page after ns scan completes
- nvme: fixup scan failure for non-ANA multipath controllers
* integrated I219-LM network adapter appears to be running too fast, causing
synchronization issues when using the I219-LM PTP feature (LP: #2116072)
- e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
* intel_rapl: support ARL-H hardware (LP: #2115652)
- powercap: intel_rapl_msr: Add PL4 support for ArrowLake-H
* Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
update (LP: #2115068)
- [Config] Replace FB_HYPERV with DRM_HYPERV
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212)
- arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
- xfs: assert a valid limit in xfs_rtfind_forw
- xfs: validate inumber in xfs_iget
- xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
- xfs: fix a typo
- xfs: skip background cowblock trims on inodes open for write
- xfs: don't free cowblocks from under dirty pagecache on unshare
- xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
- xfs: return bool from xfs_attr3_leaf_add
- xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
- xfs: distinguish extra split from real ENOSPC from
xfs_attr_node_try_addname
- xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
- xfs: don't ifdef around the exact minlen allocations
- xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
- xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
- xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
- xfs: Remove empty declartion in header file
- xfs: pass the exact range to initialize to xfs_initialize_perag
- xfs: update the file system geometry after recoverying superblock
buffers
- xfs: error out when a superblock buffer update reduces the agcount
- xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
- xfs: update the pag for the last AG at recovery time
- xfs: Reduce unnecessary searches when searching for the best extents
- xfs: streamline xfs_filestream_pick_ag
- xfs: Check for delayed allocations before setting extsize
- md/md-bitmap: replace md_bitmap_status() with a new helper
md_bitmap_get_stats()
- md/md-cluster: fix spares warnings for __le64
- md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
- mm: update mark_victim tracepoints fields
- cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
- cpufreq: fix using cpufreq-dt as module
- Bluetooth: qca: Support downloading board id specific NVM for WCN7850
- Bluetooth: qca: Update firmware-name to support board specific nvm
- Bluetooth: qca: Fix poor RF performance for WCN6855
- Input: serio - define serio_pause_rx guard to pause and resume serio
ports
- ASoC: renesas: rz-ssi: Add a check for negative sample_space
- ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
- powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
- powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
- ALSA: seq: Drop UMP events when no UMP-conversion is set
- ibmvnic: Return error code on TX scrq flush fail
- ibmvnic: Introduce send sub-crq direct
- ibmvnic: Add stat for tx direct vs tx batched
- vsock/bpf: Warn on socket without transport
- tcp: adjust rcvq_space after updating scaling ratio
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- flow_dissector: Fix handling of mixed port and port-range keys
- flow_dissector: Fix port range key handling in BPF conversion
- net: Add non-RCU dev_getbyhwaddr() helper
- arp: switch to dev_getbyhwaddr() in arp_req_set_public()
- net: axienet: Set mac_managed_pm
- bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
- strparser: Add read_sock callback
- bpf: Fix wrong copied_seq calculation
- bpf: Disable non stream socket for strparser
- power: supply: da9150-fg: fix potential overflow
- nouveau/svm: fix missing folio unlock + put after
make_device_exclusive_range()
- drm/msm: Avoid rounding up to one jiffy
- nvme/ioctl: add missing space in err message
- bpf: skip non exist keys in generic_map_lookup_batch
- drm/nouveau/pmu: Fix gp10b firmware guard
- drm/msm/dpu: Disable dither in phys encoder cleanup
- drm/i915: Make sure all planes in use by the joiner have their crtc
included
- drm/i915/dp: Fix error handling during 128b/132b link training
- soc: loongson: loongson2_guts: Add check for devm_kstrdup()
- lib/iov_iter: fix import_iovec_ubuf iovec management
- ASoC: fsl_micfil: Enable default case in micfil_set_quality()
- ALSA: hda: Add error check for snd_ctl_rename_id() in
snd_hda_create_dig_out_ctls()
- ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
- ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
- acct: block access to kernel internal filesystems
- mm,madvise,hugetlb: check for 0-length range after end address
adjustment
- mtd: rawnand: cadence: fix error code in cadence_nand_init()
- mtd: rawnand: cadence: use dma_map_resource for sdma address
- mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
- EDAC/qcom: Correct interrupt enable register configuration
- ftrace: Correct preemption accounting for function tracing.
- ftrace: Do not add duplicate entries in subops manager ops
- arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1
plus lts
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
- KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base()
- KVM: x86: Inline kvm_get_apic_mode() in lapic.h
- KVM: Introduce vcpu->wants_to_run
- KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
- drm/amd/display: Refactoring if and endif statements to enable DC_LOGGER
- arm64: dts: mt8183: add dpi node to mt8183
- arm64: dts: mt8183: Add port node to dpi node
- arm64: dts: mediatek: mt8183-kukui: Disable DPI display interface
- arm64: dts: mediatek: mt8183: Disable DPI display output by default
- arm64: dts: mediatek: mt8183-pumpkin: add HDMI support
- arm64: dts: mediatek: mt8183: Disable DSI display output by default
- accel/ivpu: Limit FW version string length
- accel/ivpu: Add coredump support
- accel/ivpu: Add FW state dump on TDR
- accel/ivpu: Fix error handling in recovery/reset
- ASoC: SOF: topology: dynamically allocate and store DAI widget->private
- ASoC: SOF: topology: Parse DAI type token for dspless mode
- ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device
- vsock/virtio: fix variables initialization during resuming
- drm/msm/dpu: skip watchdog timer programming through TOP on >= SM8450
- drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields
- drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG0 updated from driver side
- drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG1 against clock driver
- drm/msm/dsi/phy: Do not overwite PHY_CMN_CLK_CFG1 when choosing bitclk
source
- nvme: tcp: Fix compilation warning with W=1
- nvme-tcp: fix connect failure on receiving partial ICResp PDU
- drm: panel: jd9365da-h3: fix reset signal polarity
- io_uring/rw: forbid multishot async reads
- arm64: dts: rockchip: Fix broken tsadc pinctrl names for rk3588
- arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
- arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
- s390/boot: Fix ESSA detection
- xfs: fix online repair probing when CONFIG_XFS_ONLINE_REPAIR=n
- smb: client: fix chmod(2) regression with ATTR_READONLY
- tracing: Fix using ret variable in tracing_set_tracer()
- selftests/mm: build with -O2
- Upstream stable to v6.6.80, v6.12.17
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21861
- mm/migrate_device: don't add folio to be freed to LRU in
migrate_device_finalize()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21868
- net: allow small head cache usage with large MAX_SKB_FRAGS values
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21869
- powerpc/code-patching: Disable KASAN report during patching via
temporary mm
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21870
- ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21844
- smb: client: Add check for next_buffer in receive_encrypted_standard()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21846
- acct: perform last write from workqueue
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21847
- ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21848
- nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21862
- drop_monitor: fix incorrect initialization order
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21871
- tee: optee: Fix supplicant wait loop
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21863
- io_uring: prevent opcode speculation
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2024-58088
- bpf: Fix deadlock when freeing cgroup storage
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21853
- bpf: avoid holding freeze_mutex during mmap operation
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21867
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21864
- tcp: drop secpath at the same time as we currently drop dst
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21854
- sockmap, vsock: For connectible sockets allow only connected
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21856
- s390/ism: add release function for struct device
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21857
- net/sched: cls_api: fix error handling causing NULL dereference
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21866
- powerpc/code-patching: Fix KASAN hit by not flagging text patching area
as VM_ALLOC
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21859
- USB: gadget: f_midi: f_midi_complete to call queue_work
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21746
- Input: synaptics - fix crash when enabling pass-through port
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2024-57977
- memcg: fix soft lockup in the OOM process
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21712
- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
* CVE-2024-58093
- PCI/ASPM: Fix link state exit during switch upstream function removal
* [SRU]Request E825-C driver into latest LTS of Ubuntu OS 24.04
(LP: #2114785)
- ice: add support for 3k signing DDP sections for E825C
- ice: Add helper function ice_is_generic_mac
- ice: introduce new E825C devices family
* [UBUNTU 22.04] kernel: Fix z17 elf platform recognition (LP: #2114450)
- s390: Add z17 elf platform
* [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
(LP: #2114258)
- s390/cpumf: Update CPU Measurement facility extended counter set support
* Noble update: upstream stable patchset 2025-06-29 (LP: #2115616)
- nfsd: clear acl_access/acl_default after releasing them
- NFSD: fix hang in nfsd4_shutdown_callback
- pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
- HID: multitouch: Add NULL check in mt_input_configured
- HID: hid-thrustmaster: fix stack-out-of-bounds read in
usb_check_int_endpoints()
- spi: sn-f-ospi: Fix division by zero
- ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
- ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
- vrf: use RCU protection in l3mdev_l3_out()
- vxlan: check vxlan_vnigroup_init() return value
- LoongArch: Fix idle VS timer enqueue
- LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
- team: better TEAM_OPTION_TYPE_STRING validation
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- cgroup: Remove steal time from usage_usec
- drm/i915/selftests: avoid using uninitialized context
- gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
- gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
- gpio: bcm-kona: Add missing newline to dev_err format string
- drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
- xen/swiotlb: relax alignment requirements
- x86/xen: allow larger contiguous memory regions in PV guests
- block: cleanup and fix batch completion adding conditions
- gpiolib: Fix crash on error in gpiochip_get_ngpios()
- tools: fix annoying "mkdir -p ..." logs when building tools in parallel
- RDMA/efa: Reset device on probe failure
- fbdev: omap: use threaded IRQ for LCD DMA
- soc/tegra: fuse: Update Tegra234 nvmem keepout list
- media: cxd2841er: fix 64-bit division on gcc-9
- media: i2c: ds90ub913: Add error handling to ub913_hw_init()
- media: i2c: ds90ub953: Add error handling for i2c reads/writes
- media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
- media: uvcvideo: Add new quirk definition for the Sonix Technology Co.
292a camera
- media: uvcvideo: Add Kurokesu C1 PRO camera
- media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
- PCI: switchtec: Add Microchip PCI100X device IDs
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- rtla/timerlat_hist: Abort event processing on second signal
- rtla/timerlat_top: Abort event processing on second signal
- vfio/pci: Enable iowrite64 and ioread64 for vfio pci
- NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
- Grab mm lock before grabbing pt lock
- selftests: gpio: gpio-sim: Fix missing chip disablements
- ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
- x86/mm/tlb: Only trim the mm_cpumask once a second
- orangefs: fix a oob in orangefs_debug_write
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
- batman-adv: fix panic during interface removal
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: Drop unmanaged ELP metric worker
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-
kernel
- KVM: nSVM: Enter guest mode before initializing nested NPT MMU
- perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
- usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI
bind retries
- usb: dwc3: Fix timeout issue during controller enter/exit from halt
state
- usb: roles: set switch registered flag early on
- usb: gadget: udc: renesas_usb3: Fix compiler warning
- usb: dwc2: gadget: remove of_node reference upon udc_stop
- USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
- usb: core: fix pipe creation for get_bMaxPacketSize0
- USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
- USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
- usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
- USB: hub: Ignore non-compliant devices with too many configs or
interfaces
- USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
- usb: cdc-acm: Check control transfer buffer size before access
- usb: cdc-acm: Fix handling of oversized fragments
- USB: serial: option: add MeiG Smart SLM828
- USB: serial: option: add Telit Cinterion FN990B compositions
- USB: serial: option: fix Telit Cinterion FN990A name
- USB: serial: option: drop MeiG Smart defines
- can: ctucanfd: handle skb allocation failure
- can: c_can: fix unbalanced runtime PM disable in error path
- can: j1939: j1939_sk_send_loop(): fix unable to send messages with data
length zero
- can: etas_es58x: fix potential NULL pointer dereference on udev->serial
- alpha: make stack 16-byte aligned (most cases)
- wifi: ath12k: fix handling of 6 GHz rules
- kbuild: userprogs: fix bitsize and target detection on clang
- efi: Avoid cold plugged memory for placing the kernel
- cgroup: fix race between fork and cgroup.kill
- serial: port: Assign ->iotype correctly when ->iobase is set
- serial: port: Always update ->iotype in __uart_read_properties()
- serial: 8250: Fix fifo underflow on flush
- alpha: align stack for page fault and user unaligned trap handlers
- gpiolib: acpi: Add a quirk for Acer Nitro ANV14
- gpio: stmpe: Check return value of stmpe_reg_read in
stmpe_gpio_irq_sync_unlock
- partitions: mac: fix handling of bogus partition table
- regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
- regmap-irq: Add missing kfree()
- arm64: Handle .ARM.attributes section in linker scripts
- mmc: mtk-sd: Fix register settings for hs400(es) mode
- igc: Set buffer type for empty frames in igc_init_empty_frame
- mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
- btrfs: fix hole expansion when writing at an offset beyond EOF
- clocksource: Use pr_info() for "Checking clocksource synchronization"
message
- clocksource: Use migrate_disable() to avoid calling get_random_u32() in
atomic context
- ipv4: add RCU protection to ip4_dst_hoplimit()
- net: add dev_net_rcu() helper
- ipv4: use RCU protection in ipv4_default_advmss()
- ipv4: use RCU protection in rt_is_expired()
- ipv4: use RCU protection in inet_select_addr()
- net: ipv4: Cache pmtu for all packet paths if multipath enabled
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- ipv4: icmp: convert to dev_net_rcu()
- flow_dissector: use RCU protection to fetch dev_net()
- ipv6: use RCU protection in ip6_default_advmss()
- ipv6: icmp: convert to dev_net_rcu()
- HID: hid-steam: Add Deck IMU support
- HID: hid-steam: Make sure rumble work is canceled on removal
- HID: hid-steam: Move hidraw input (un)registering to work
- ndisc: use RCU protection in ndisc_alloc_skb()
- neighbour: delete redundant judgment statements
- neighbour: use RCU protection in __neigh_notify()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- ndisc: extend RCU protection in ndisc_send_skb()
- ipv6: mcast: extend RCU protection in igmp6_send()
- ipv6: mcast: add RCU protection to mld_newpack()
- drm/tidss: Fix issue in irq handling causing irq-flood issue
- drm/tidss: Clear the interrupt status for interrupts being disabled
- drm/rcar-du: dsi: Fix PHY lock bit check
- drm/v3d: Stop active perfmon if it is being destroyed
- netdevsim: print human readable IP address
- selftests: rtnetlink: update netdevsim ipsec output format
- md/md-bitmap: factor behind write counters out from
bitmap_{start/end}write()
- md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
- md/md-bitmap: move bitmap_{start, end}write to md upper layer
- mm: gup: fix infinite loop within __get_longterm_locked
- alpha: replace hardcoded stack offsets with autogenerated ones
- HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
- io_uring/kbuf: reallocate buf lists on upgrade
- x86/i8253: Disable PIT timer 0 when not in use
- pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
- pinctrl: pinconf-generic: print hex value
- pinctrl: pinconf-generic: Print unsigned value if a format is registered
- idpf: fix handling rsc packet with a single segment
- idpf: call set_real_num_queues in idpf_open
- igc: Fix HW RX timestamp when passed by ZC XDP
- LoongArch: KVM: Fix typo issue about GCFG feature detection
- workqueue: Put the pwq after detaching the rescuer from the pool
- perf/x86/intel: Clean up PEBS-via-PT on hybrid
- drm/xe/client: bo->client does not need bos_lock
- io_uring/waitid: don't abuse io_tw_state
- drm: Fix DSC BPP increment decoding
- i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
- i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
- [Config] updateconfigs for MIPI_I3C_HCI_PCI
- serial: 8250_pci: Resolve WCH vendor ID ambiguity
- serial: 8250_pci: Share WCH IDs with parport_serial driver
- fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
- kbuild: suppress stdout from merge_config for silent builds
- KVM: x86: Load DR6 with guest value only before entering .vcpu_run()
loop
- perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
- USB: gadget: core: create sysfs link between udc and gadget
- usb: gadget: core: flush gadget workqueue after device removal
- include: net: add static inline dst_dev_overhead() to dst.h
- net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
- net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
- net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
- net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
- scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
- scsi: ufs: core: Prepare to introduce a new clock_gating lock
- scsi: ufs: core: Introduce a new clock_gating lock
- scsi: ufs: Fix toggling of clk_gating.state when clock gating is not
allowed
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- drm/tidss: Fix race condition while handling interrupt registers
- drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
- wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
- net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
- scsi: ufs: core: Ensure clk_gating.lock is used only after
initialization
- serial: 8250_dma: terminate correct DMA in tx_dma_flush()
- x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
- HID: hid-steam: Fix use-after-free when detaching device
- block: change blk_mq_add_to_batch() third argument type to bool
- nvme: move error logging from nvme_end_req() to __nvme_end_req()
- Upstream stable to v6.6.79, v6.12.16
* Noble update: upstream stable patchset 2025-06-17 (LP: #2114849)
- ice: Add check for devm_kzalloc()
- io_uring/rw: commit provided buffer state on async
- mptcp: pm: only set fullmesh for subflow endp
- selftests: mptcp: join: fix AF_INET6 variable
- xfs: don't lose solo dquot update transactions
- Upstream stable to v6.6.78, v6.12.15
* [Regression Updates] "PCI: Explicitly put devices into D0 when
initializing" breaks pci-pass-through in QEMU/KVM (LP: #2117494)
- PCI/PM: Set up runtime PM even for devices without PCI PM
* CVE-2025-38083
- net_sched: prio: fix a race in prio_tune()
* CVE-2025-37797
- net_sched: hfsc: Fix a UAF vulnerability in class handling
[ Ubuntu-azure: 6.8.0-1032.37 ]
* noble/linux-azure: 6.8.0-1032.37 -proposed tracker (LP: #2114637)
[ Ubuntu: 6.8.0-64.67 ]
* noble/linux: 6.8.0-64.67 -proposed tracker (LP: #2114668)
* Unexpected system reboot at loading GUI session on some AMD platforms
(LP: #2112462)
- drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174)
- s390/pci: rename lock member in struct zpci_dev
- s390/pci: introduce lock to synchronize state of zpci_dev's
- s390/pci: remove hotplug slot when releasing the device
- s390/pci: Remove redundant bus removal and disable from
zpci_release_device()
- s390/pci: Prevent self deletion in disable_slot()
- s390/pci: Allow re-add of a reserved but not yet removed device
- s390/pci: Serialize device addition and removal
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174) // CVE-2025-37946
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has
child VFs
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174) // CVE-2025-37974
- s390/pci: Fix missing check for zpci_create_device() error return
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174) // CVE-2024-56699
- s390/pci: Fix potential double remove of hotplug slot
* System will restart while resuming with SATA HDD or nvme installed with
password set (LP: #2110090)
- PCI: Explicitly put devices into D0 when initializing
* Noble update: upstream stable patchset 2025-06-12 (LP: #2114239)
- btrfs: fix assertion failure when splitting ordered extent after
transaction abort
- btrfs: fix use-after-free when attempting to join an aborted transaction
- arm64/mm: Ensure adequate HUGE_MAX_HSTATE
- exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case
- s390/stackleak: Use exrl instead of ex in __stackleak_poison()
- btrfs: fix data race when accessing the inode's disk_i_size at
btrfs_drop_extents()
- btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error
handling
- sched: Don't try to catch up excess steal time.
- locking/ww_mutex/test: Use swap() macro
- lockdep: Fix upper limit for LOCKDEP_*_BITS configs
- x86/amd_nb: Restrict init function to AMD-based systems
- drm/virtio: New fence for every plane update
- drm: Add panel backlight quirks
- drm: panel-backlight-quirks: Add Framework 13 matte panel
- drm: panel-backlight-quirks: Add Framework 13 glossy and 2.8k panels
- nvkm/gsp: correctly advance the read pointer of GSP message queue
- nvkm: correctly calculate the available space of the GSP cmdq buffer
- drm/amd/display: Populate chroma prefetch parameters, DET buffer fix
- drm/amd/display: Overwriting dualDPP UBF values before usage
- printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
- drm/connector: add mutex to protect ELD from concurrent access
- drm/bridge: anx7625: use eld_mutex to protect access to connector->eld
- drm/bridge: ite-it66121: use eld_mutex to protect access to
connector->eld
- drm/amd/display: use eld_mutex to protect access to connector->eld
- drm/exynos: hdmi: use eld_mutex to protect access to connector->eld
- drm/radeon: use eld_mutex to protect access to connector->eld
- drm/sti: hdmi: use eld_mutex to protect access to connector->eld
- drm/vc4: hdmi: use eld_mutex to protect access to connector->eld
- drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
- drm/amdgpu: Don't enable sdma 4.4.5 CTXEMPTY interrupt
- drm/amdkfd: Queue interrupt work to different CPU
- drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
- drm/bridge: it6505: fix HDCP Bstatus check
- drm/bridge: it6505: fix HDCP encryption when R0 ready
- drm/bridge: it6505: fix HDCP CTS compare V matching
- drm/bridge: it6505: fix HDCP V match check is not performed correctly
- drm/bridge: it6505: fix HDCP CTS KSV list wait timer
- safesetid: check size of policy writes
- drm/amd/display: Increase sanitizer frame larger than limit when compile
testing with clang
- drm/amd/display: Limit Scaling Ratio on DCN3.01
- wifi: rtw89: add crystal_cap check to avoid setting as overflow value
- tun: fix group permission check
- mmc: core: Respect quirk_max_rate for non-UHS SDIO card
- mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
- tomoyo: don't emit warning in tomoyo_write_control()
- mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
- wifi: rtw88: add __packed attribute to efuse layout struct
- clk: qcom: Make GCC_8150 depend on QCOM_GDSC
- HID: multitouch: Add quirk for Hantick 5288 touchpad
- HID: Wacom: Add PCI Wacom device support
- net/mlx5: use do_aux_work for PHC overflow checks
- wifi: brcmfmac: Check the return value of
of_property_read_string_index()
- wifi: iwlwifi: pcie: Add support for new device ids
- wifi: iwlwifi: avoid memory leak
- i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
- APEI: GHES: Have GHES honor the panic= setting
- Bluetooth: btusb: Add new VID/PID 13d3/3610 for MT7922
- Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925
- Bluetooth: MGMT: Fix slab-use-after-free Read in
mgmt_remove_adv_monitor_sync
- net: wwan: iosm: Fix hibernation by re-binding the driver around it
- mmc: sdhci-msm: Correctly set the load for the regulator
- octeon_ep: update tx/rx stats locally for persistence
- tipc: re-order conditions in tipc_crypto_key_rcv()
- selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
- x86/kexec: Allocate PGD for x86_64 transition page tables separately
- iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
- iommu/arm-smmu-v3: Clean up more on probe failure
- platform/x86: int3472: Check for adev == NULL
- platform/x86: acer-wmi: Add support for Acer PH14-51
- ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
- platform/x86: acer-wmi: Add support for Acer Predator PH16-72
- ASoC: amd: Add ACPI dependency to fix build error
- Input: allocate keycode for phone linking
- platform/x86: acer-wmi: add support for Acer Nitro AN515-58
- platform/x86: acer-wmi: Ignore AC events
- xfs: report realtime block quota limits on realtime directories
- xfs: don't over-report free space or inodes in statvfs
- tty: xilinx_uartps: split sysrq handling
- tty: vt: pass proper pointers from tioclinux()
- tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN
- tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
- platform/x86: serdev_helpers: Check for serial_ctrl_uid == NULL
- nvme: handle connectivity loss in nvme_set_queue_count
- firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
- gpu: drm_dp_cec: fix broken CEC adapter properties check
- ice: put Rx buffers after being done with current frame
- ice: gather page_count()'s of each frag right before XDP prog call
- ice: stop storing XDP verdict within ice_rx_buf
- nvme-fc: use ctrl state getter
- net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
- vmxnet3: Fix tx queue race condition with XDP
- tg3: Disable tg3 PCIe AER on system reboot
- udp: gso: do not drop small packets when PMTU reduces
- rxrpc: Fix the rxrpc_connection attend queue handling
- gpio: pca953x: Improve interrupt support
- net: atlantic: fix warning during hot unplug
- net: rose: lock the socket in rose_bind()
- ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
- tun: revert fix group permission check
- net: sched: Fix truncation of offloaded action statistics
- rxrpc: Fix call state set to not include the SERVER_SECURING state
- cpufreq: s3c64xx: Fix compilation warning
- leds: lp8860: Write full EEPROM, not only half of it
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
- drm/modeset: Handle tiled displays in pan_display_atomic.
- drm/client: Handle tiled displays better
- smb: client: fix order of arguments of tracepoints
- smb: client: change lease epoch type from unsigned int to __u16
- s390/futex: Fix FUTEX_OP_ANDN implementation
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
- m68k: vga: Fix I/O defines
- fs/proc: do_task_stat: Fix ESP not readable during coredump
- binfmt_flat: Fix integer overflow bug on 32 bit systems
- accel/ivpu: Fix Qemu crash when running in passthrough
- arm64/kvm: Configure HYP TCR.PS/DS based on host stage1
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu()
- KVM: arm64: timer: Always evaluate the need for a soft timer
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
- remoteproc: omap: Handle ARM dma_iommu_mapping
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
- ksmbd: fix integer overflows on 32 bit systems
- drm/amd/display: Optimize cursor position updates
- drm/amd/pm: Mark MM activity as unsupported
- drm/amdkfd: only flush the validate MES contex
- drm/i915/guc: Debug print LRC state entries only if the context is
pinned
- drm/i915: Fix page cleanup on DMA remap failure
- drm/komeda: Add check for komeda_get_layer_fourcc_list()
- drm/i915/dp: Iterate DSC BPP from high to low on all platforms
- drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
- drm/amd/display: Fix seamless boot sequence
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
- clk: sunxi-ng: a100: enable MMC clock reparenting
- clk: mmp2: call pm_genpd_init() only after genpd.name is set
- media: i2c: ds90ub960: Fix UB9702 refclk register access
- clk: qcom: clk-alpha-pll: fix alpha mode configuration
- clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8650: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
- clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
- clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
- clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
- clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
- clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
- clk: mediatek: mt2701-bdp: add missing dummy clk
- clk: mediatek: mt2701-img: add missing dummy clk
- clk: mediatek: mt2701-mm: add missing dummy clk
- blk-cgroup: Fix class @block_class's subsystem refcount leakage
- efi: libstub: Use '-std=gnu11' to fix build with GCC 15
- perf bench: Fix undefined behavior in cmpworker()
- scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
- of: Correct child specifier used as input of the 2nd nexus node
- of: Fix of_find_node_opts_by_path() handling of alias+path+options
- Input: bbnsm_pwrkey - add remove hook
- HID: hid-sensor-hub: don't use stale platform-data on remove
- ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg()
- atomic64: Use arch_spin_locks instead of raw_spin_locks
- wifi: rtlwifi: rtl8821ae: Fix media status report
- wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
- wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
- wifi: rtw88: sdio: Fix disconnection after beacon loss
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
- usb: gadget: f_tcm: Translate error to sense
- usb: gadget: f_tcm: Decrement command ref count on cleanup
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
- usb: gadget: f_tcm: Don't prepare BOT write request twice
- usbnet: ipheth: fix possible overflow in DPE length check
- usbnet: ipheth: use static NDP16 location in URB
- usbnet: ipheth: check that DPE points past NCM header
- usbnet: ipheth: refactor NCM datagram loop
- usbnet: ipheth: break up NCM header size computation
- usbnet: ipheth: fix DPE OoB read
- usbnet: ipheth: document scope of NCM implementation
- ASoC: acp: Support microphone from Lenovo Go S
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- serial: sh-sci: Drop __initdata macro for port_cfg
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[]
is in use
- MIPS: Loongson64: remove ROM Size unit in boardinfo
- LoongArch: Extend the maximum number of watchpoints
- powerpc/pseries/eeh: Fix get PE state translation
- dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
- dm-crypt: track tag_offset in convert_context
- mips/math-emu: fix emulation of the prefx instruction
- MIPS: pci-legacy: Override pci_address_to_pio
- block: don't revert iter for -EIOCBQUEUED
- firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
- ALSA: hda/realtek: Enable headset mic on Positivo C6400
- ALSA: hda: Fix headset detection failure due to unstable sort
- ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
- ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
- arm64: tegra: Fix Tegra234 PCIe interrupt-map
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar()
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
- scsi: st: Don't set pos_unknown just after device recognition
- scsi: qla2xxx: Move FCE Trace buffer allocation to user control
- scsi: ufs: qcom: Fix crypto key eviction
- scsi: ufs: core: Fix use-after free in init error and remove paths
- scsi: storvsc: Set correct data length for sending SCSI command without
payload
- scsi: core: Do not retry I/Os during depopulation
- kbuild: Move -Wenum-enum-conversion to W=2
- rust: init: use explicit ABI to clean warning in future compilers
- x86/boot: Use '-std=gnu11' to fix build with GCC 15
- ubi: Add a check for ubi_num
- ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
- ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
- arm64: dts: qcom: sm6115: Fix MPSS memory length
- arm64: dts: qcom: sm6115: Fix CDSP memory length
- arm64: dts: qcom: sm6115: Fix ADSP memory base and length
- arm64: dts: qcom: sm6350: Fix ADSP memory length
- arm64: dts: qcom: sm6350: Fix MPSS memory length
- arm64: dts: qcom: sm6350: Fix uart1 interconnect path
- arm64: dts: qcom: sm6375: Fix ADSP memory length
- arm64: dts: qcom: sm6375: Fix CDSP memory base and length
- arm64: dts: qcom: sm6375: Fix MPSS memory base and length
- arm64: dts: qcom: sm8350: Fix ADSP memory base and length
- arm64: dts: qcom: sm8350: Fix CDSP memory base and length
- arm64: dts: qcom: sm8350: Fix MPSS memory length
- arm64: dts: qcom: sm8450: Fix CDSP memory length
- arm64: dts: qcom: sm8450: Fix MPSS memory length
- arm64: dts: qcom: sm8550: Fix CDSP memory length
- arm64: dts: qcom: sm8550: Fix MPSS memory length
- arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
- arm64: dts: qcom: sm8450: Fix ADSP memory base and length
- arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
- arm64: dts: qcom: sm8550: Add dma-coherent property
- arm64: dts: qcom: sm8550: Fix ADSP memory base and length
- arm64: dts: qcom: sm8650: Fix CDSP memory length
- arm64: dts: qcom: sm8650: Fix MPSS memory length
- arm64: dts: qcom: sm8550: correct MDSS interconnects
- arm64: dts: qcom: sm8650: correct MDSS interconnects
- crypto: qce - fix priority to be less than ARMv8 CE
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
- arm64: tegra: Disable Tegra234 sce-fabric node
- parisc: Temporarily disable jump label support
- pwm: microchip-core: fix incorrect comparison with max period
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in
xfs_dax_write_iomap_end
- xfs: Add error handling for xfs_reflink_cancel_cow_range
- ACPI: PRM: Remove unnecessary strict handler address checks
- tpm: Change to kvalloc() in eventlog/acpi.c
- rv: Reset per-task monitors also for idle tasks
- hrtimers: Force migrate away hrtimers queued after
CPUHP_AP_HRTIMERS_DYING
- kfence: skip __GFP_THISNODE allocations on NUMA systems
- media: ccs: Clean up parsed CCS static data on parse failure
- mm/hugetlb: fix avoid_reserve to allow taking folio from subpool
- iio: light: as73211: fix channel handling in only-color triggered buffer
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
- soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
- soc: qcom: smem_state: fix missing of_node_put in error path
- media: mmp: Bring back registration of the device
- media: mc: fix endpoint iteration
- media: nuvoton: Fix an error check in npcm_video_ece_init()
- media: imx296: Add standby delay during probe
- media: ov5640: fix get_light_freq on auto
- media: stm32: dcmipp: correct dma_set_mask_and_coherent mask value
- media: ccs: Fix CCS static data parsing for large block sizes
- media: ccs: Fix cleanup order in ccs_probe()
- media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
- media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
- media: i2c: ds90ub960: Fix UB9702 VC map
- media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
- media: uvcvideo: Fix crash during unbind if gpio unit is in use
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events
- media: uvcvideo: Support partial control reads
- media: uvcvideo: Remove redundant NULL assignment
- media: uvcvideo: Refactor iterators
- media: uvcvideo: Only save async fh if success
- media: uvcvideo: Remove dangling pointers
- mm: kmemleak: fix upper boundary check for physical address objects
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- ata: libata-sff: Ensure that we cannot write outside the allocated
buffer
- crypto: qce - fix goto jump in error path
- crypto: qce - unregister previously registered algos in error path
- nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
- nvmem: core: improve range check for nvmem_cell_write()
- nvmem: imx-ocotp-ele: simplify read beyond device check
- nvmem: imx-ocotp-ele: fix MAC address byte order
- nvmem: imx-ocotp-ele: fix reading from non zero offset
- nvmem: imx-ocotp-ele: set word length to 1
- io_uring: fix multishots with selected buffers
- io_uring/net: don't retry connect operation on EPOLLERR
- selftests: mptcp: connect: -f: no reconnect
- pnfs/flexfiles: retry getting layout segment for reads
- ocfs2: fix incorrect CPU endianness conversion causing mount failure
- ocfs2: handle a symlink read error correctly
- nilfs2: fix possible int overflows in nilfs_fiemap()
- nfs: Make NFS_FSCACHE select NETFS_SUPPORT instead of depending on it
- NFSD: Encode COMPOUND operation status on page boundaries
- mailbox: tegra-hsp: Clear mailbox before using message
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
- mtd: onenand: Fix uninitialized retlen in do_otp_read()
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
- char: misc: deallocate static minor in error path
- misc: fastrpc: Deregister device nodes properly in error scenarios
- misc: fastrpc: Fix registered buffer page address
- misc: fastrpc: Fix copy buffer page size
- net/ncsi: wait for the last response to Deselect Package before
configuring channel
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
- maple_tree: simplify split calculation
- scripts/gdb: fix aarch64 userspace detection in get_current_task
- tracing/osnoise: Fix resetting of tracepoints
- rtla/osnoise: Distinguish missing workload option
- rtla: Add trace_instance_stop
- rtla/timerlat_hist: Stop timerlat tracer on signal
- rtla/timerlat_top: Stop timerlat tracer on signal
- pinctrl: samsung: fix fwnode refcount cleanup if
platform_get_irq_optional() fails
- ptp: Ensure info->enable callback is always set
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
- rtc: zynqmp: Fix optional clock name property
- MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
- xfs: avoid nested calls to __xfs_trans_commit
- xfs: don't lose solo superblock counter update transactions
- spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC
families
- spi: atmel-qspi: Memory barriers after memory-mapped I/O
- btrfs: avoid monopolizing a core when activating a swap file
- mptcp: prevent excessive coalescing on receive
- Revert "drm/amd/display: Fix green screen issue after suspend"
- statmount: let unset strings be empty
- arm64: dts: rockchip: add reset-names for combphy on rk3568
- ocfs2: check dir i_size in ocfs2_find_entry
- Upstream stable to v6.6.77, v6.12.14
* kvmppc_set_passthru_irq_hv: Could not assign IRQ map traces are seen when
pci device is attached to kvm guest when "xive=off" is set (LP: #2109951)
- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries KVM Guest
* Latitude 5450 is experiencing packet loss on Ethernet in Ubuntu 22.04
(LP: #2106558)
- e1000e: change k1 configuration on MTP and later platforms
* cpufreq amd-pstate: cpuinfo_max_freq reports incorrect value
(LP: #2109609)
- SAUCE: Revert "Revert "cpufreq: amd-pstate: Fix the inconsistency in max
frequency units""
* Backport pci=config_acs parameter with fix commit (LP: #2100340)
- PCI: Extend ACS configurability
- PCI: Fix pci_enable_acs() support for the ACS quirks
- PCI/ACS: Fix 'pci=config_acs=' parameter
* [UBUNTU 24.04] s390/pci: Fix zpci_bus_is_isolated_vf() for non-VF
(LP: #2111599)
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
* nvme/tcp hangs IO on arm (LP: #2106381)
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
* CVE-2025-37750
- smb: client: fix UAF in decryption with multichannel
* CVE-2025-40364
- io_uring: fix io_req_prep_async with provided buffers
* CVE-2024-49887
- f2fs: fix to handle segment allocation failure correctly
- f2fs: fix to don't panic system for no free segment fault injection
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953)
- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
- dlm: fix srcu_read_lock() return type to int
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
- afs: Fix directory format encoding struct
- afs: Fix cleanup of immediately failed async calls
- fs: fix proc_handler for sysctl_nr_open
- block: retry call probe after request_module in blk_request_module
- pstore/blk: trivial typo fixes
- nvme: Add error check for xa_store in nvme_get_effects_log
- selftests/powerpc: Fix argument order to timer_sub()
- nvme: Add error path for xa_store in nvme_init_effects
- partitions: ldm: remove the initial kernel-doc notation
- select: Fix unbalanced user_access_end()
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
- perf/core: Save raw sample data conditionally based on sample type
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
- x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
- x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
- drm/msm/dp: set safe_to_exit_level before printing it
- drm/etnaviv: Fix page property being used for non writecombine buffers
- drm/amd/pm: Fix an error handling path in
vega10_enable_se_edc_force_stall_config()
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
- drm/rockchip: vop2: Fix the windows switch between different layers
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
- drm/rockchip: vop2: include rockchip_drm_drv.h
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
- drm/msm: Check return value of of_dma_configure()
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
- drm/amdgpu: tear down ttm range manager for doorbell in
amdgpu_ttm_fini()
- genirq: Make handle_enforce_irqctx() unconditionally available
- wifi: ath11k: Fix unexpected return buffer manager error for
WCN6750/WCN6855
- wifi: rtlwifi: do not complete firmware loading needlessly
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last
step
- wifi: rtlwifi: wait for firmware loading before releasing memory
- wifi: rtlwifi: fix init_sw_vars leak when probe fails
- wifi: rtlwifi: usb: fix workqueue leak when probe fails
- net_sched: sch_sfq: annotate data-races around q->perturb_period
- net_sched: sch_sfq: handle bigger packets
- spi: zynq-qspi: Add check for clk_enable()
- dt-bindings: mmc: controller: clarify the address-cells description
- of: remove internal arguments from of_property_for_each_u32()
- clk: fix an OF node reference leak in of_clk_get_parent_name()
- dt-bindings: leds: class-multicolor: Fix path to color definitions
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory
- HID: multitouch: fix support for Goodix PID 0x01e9
- regulator: dt-bindings: mt6315: Drop regulator-compatible property
- wifi: brcmfmac: add missing header include for brcmf_dbg
- ACPI: fan: cleanup resources in the error path of .probe()
- cpupower: fix TSC MHz calculation
- dt-bindings: mfd: bd71815: Fix rsense and typos
- leds: netxbig: Fix an OF node reference leak in
netxbig_leds_get_of_pdata()
- inetpeer: remove create argument of inet_getpeer_v[46]()
- inetpeer: remove create argument of inet_getpeer()
- inetpeer: update inetpeer timestamp in inet_getpeer()
- inetpeer: do not get a refcount in inet_getpeer()
- pwm: stm32-lp: Add check for clk_enable()
- cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
- gpio: pca953x: log an error when failing to get the reset GPIO
- cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ
is not available
- cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq*
clocks
- clk: imx8mp: Fix clkout1/2 support
- dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
- clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
- clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
- regulator: of: Implement the unwind path of of_regulator_match()
- OPP: OF: Fix an OF node leak in _opp_add_static_v2()
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
- wifi: ath12k: fix tx power, max reg power update to firmware
- clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
- HID: fix generic desktop D-Pad controls
- leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
- mfd: syscon: Remove extern from function prototypes
- mfd: syscon: Add of_syscon_register_regmap() API
- mfd: syscon: Use scoped variables with memory allocators to simplify
error paths
- mfd: syscon: Fix race in device_node_get_regmap()
- samples/landlock: Fix possible NULL dereference in parse_path()
- wifi: wlcore: fix unbalanced pm_runtime calls
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
- wifi: mac80211: fix tid removal during mesh forwarding
- wifi: mac80211: Fix common size calculation for ML element
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- wifi: mt76: mt76u_vendor_request: Do not print error messages when
-EPROTO
- wifi: mt76: mt7921: fix using incorrect group cipher after
disconnection.
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link
- wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
- wifi: mt76: mt7915: improve hardware restart reliability
- wifi: mt76: mt7915: fix omac index assignment after hardware reset
- wifi: mt76: mt7915: fix register mapping
- wifi: mt76: mt7996: fix register mapping
- wifi: mt76: mt7996: add max mpdu len capability
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
- wifi: mt76: mt7996: fix HE Phy capability
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
- wifi: mt76: mt7996: fix ldpc setting
- cpufreq: ACPI: Fix max-frequency computation
- selftests: timers: clocksource-switch: Adapt progress to kselftest
framework
- selftests: harness: fix printing of mismatch values in __EXPECT()
- wifi: cfg80211: adjust allocation of colocated AP data
- inet: ipmr: fix data-races
- clk: analogbits: Fix incorrect calculation of vco rate delta
- pwm: stm32: Add check for clk_enable()
- selftests/landlock: Fix error message
- net/mlxfw: Drop hard coded max FW flash image size
- octeon_ep: remove firmware stats fetch in ndo_get_stats64
- netfilter: nf_tables: fix set size with rbtree backend
- netfilter: nft_flow_offload: update tcp state flags under lock
- tcp_cubic: fix incorrect HyStart round start detection
- libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is
missing
- tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
- libbpf: Fix segfault due to libelf functions not setting errno
- ASoC: sun4i-spdif: Add clock multiplier settings
- selftests/bpf: Fix fill_link_info selftest on powerpc
- crypto: caam - use JobR's space to access page 0 regs
- perf header: Fix one memory leakage in process_bpf_btf()
- perf header: Fix one memory leakage in process_bpf_prog_info()
- perf bpf: Fix two memory leakages when calling
perf_env__insert_bpf_prog_info()
- ASoC: renesas: rz-ssi: Use only the proper amount of dividers
- perf expr: Initialize is_test value in expr__ctx_new()
- ktest.pl: Remove unused declarations in run_bisect_test function
- crypto: hisilicon/sec2 - fix for aead icv error
- crypto: hisilicon/sec2 - fix for aead invalid authsize
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
- ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
- ALSA: seq: Make dependency on UMP clearer
- padata: fix sysfs store callback check
- perf top: Don't complain about lack of vmlinux when not resolving some
kernel samples
- perf machine: Don't ignore _etext when not a text symbol
- perf namespaces: Introduce nsinfo__set_in_pidns()
- perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
- ASoC: Intel: avs: Prefix SKL/APL-specific members
- ASoC: Intel: avs: Abstract IPC handling
- ASoC: Intel: avs: Do not readq() u32 registers
- ASoC: Intel: avs: Fix theoretical infinite loop
- perf report: Fix misleading help message about --demangle
- pinctrl: stm32: Add check for clk_enable()
- pinctrl: amd: Take suspend type into consideration which pins are non-
wake
- bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire
A115-31 laptop
- perf lock: Fix parse_lock_type which only retrieve one lock flag
- padata: add pd get/put refcnt helper
- cifs: Use cifs_autodisable_serverino() for disabling
CIFS_MOUNT_SERVER_INUM in readdir.c
- soc: atmel: fix device_node release in atmel_soc_device_init()
- ARM: at91: pm: change BU Power Switch to automatic mode
- arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
- arm64: dts: mt8183: set DMIC one-wire mode on Damu
- arm64: dts: mediatek: mt8516: fix GICv2 range
- arm64: dts: mediatek: mt8516: fix wdt irq type
- arm64: dts: mediatek: mt8516: add i2c clock-div property
- arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
- ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
- RDMA/mlx4: Avoid false error about access to uninitialized gids array
- arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
- arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
- arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
- arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
- arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
- arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
- arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
- ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
- ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan
boards
- ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
- arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
- RDMA/rxe: Improve newline in printing messages
- RDMA/rxe: Fix mismatched max_msg_sz
- arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
- arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
- RDMA/srp: Fix error handling in srp_add_port
- arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
- ARM: dts: stm32: Deduplicate serial aliases and chosen node for
STM32MP15xx DHCOM SoM
- ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage
settings
- arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
- arm64: dts: qcom: move common parts for sa8775p-ride variants into a
.dtsi
- arm64: dts: qcom: sa8775p: Update sleep_clk frequency
- arm64: dts: qcom: msm8996: Fix up USB3 interrupts
- arm64: dts: qcom: msm8994: Describe USB interrupts
- arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
- arm64: dts: qcom: msm8916: correct sleep clock frequency
- arm64: dts: qcom: msm8939: correct sleep clock frequency
- arm64: dts: qcom: msm8994: correct sleep clock frequency
- arm64: dts: qcom: qcs404: correct sleep clock frequency
- arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
- arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
- arm64: dts: qcom: sc7280: correct sleep clock frequency
- arm64: dts: qcom: sdx75: correct sleep clock frequency
- arm64: dts: qcom: sm4450: correct sleep clock frequency
- arm64: dts: qcom: sm6125: correct sleep clock frequency
- arm64: dts: qcom: sm6375: correct sleep clock frequency
- arm64: dts: qcom: sm8250: correct sleep clock frequency
- arm64: dts: qcom: sm8350: correct sleep clock frequency
- arm64: dts: qcom: sm8450: correct sleep clock frequency
- ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0
node
- arm64: dts: ti: k3-am62: Remove duplicate GICR reg
- arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
- arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
- ARM: omap1: Fix up the Retu IRQ on Nokia 770
- arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine
riser to dtso
- arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled
ov7251 camera
- arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
- arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
- arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
- arm64: dts: qcom: sc7180: change labels to lower-case
- arm64: dts: qcom: sc7180: fix psci power domain node names
- arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280
properties
- arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
- dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
- arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
- arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
- arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
- ARM: dts: mediatek: mt7623: fix IR nodename
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
- arm64: tegra: Fix DMA ID for SPI2
- i3c: dw: Add hot-join support.
- RDMA/mlx5: Fix indirect mkey ODP page count
- of: reserved-memory: Do not make kmemleak ignore freed address
- efi: sysfb_efi: fix W=1 warnings when EFI is not set
- spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
- media: rc: iguanair: handle timeouts
- media: lmedm04: Handle errors for lme2510_int_read
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
- media: marvell: Add check for clk_enable()
- media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
- media: i2c: imx412: Add missing newline to prints
- media: i2c: ov9282: Correct the exposure offset
- media: mipi-csis: Add check for clk_enable()
- media: camif-core: Add check for clk_enable()
- media: uvcvideo: Propagate buf->error to userspace
- mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
- mtd: hyperbus: hbmc-am654: fix an OF node reference leak
- media: nxp: imx8-isi: fix v4l2-compliance test errors
- watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
af9035_i2c_master_xfer
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
- scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
- scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
- ocfs2: mark dquot as inactive if failed to start trans while releasing
dquot
- module: Extend the preempt disabled section in
dereference_symbol_descriptor().
- serial: 8250: Adjust the timeout for FIFO mode
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
- tools/bootconfig: Fix the wrong format specifier
- xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver
- rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
- regulator: core: Add missing newline character
- gpio: mxc: remove dead code after switch to DT-only
- net: fec: implement TSO descriptor cleanup
- PM: hibernate: Add error handling for syscore_suspend()
- iavf: allow changing VLAN state without calling PF
- net: netdevsim: try to close UDP port harness races
- ptp: Properly handle compat ioctls
- net: stmmac: Limit the number of MTL queues to hardware capability
- net: stmmac: Limit FIFO size by hardware capability
- perf trace: Fix runtime error of index out of bounds
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
- vsock: Allow retrying on connect() failure
- bgmac: reduce max frame size to support just MTU 1500
- net: sh_eth: Fix missing rtnl lock in suspend/resume path
- genksyms: fix memory leak when the same symbol is added from source
- genksyms: fix memory leak when the same symbol is read from *.symref
file
- RISC-V: Mark riscv_v_init() as __init
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
- io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
- cifs: Fix getting and setting SACLs over SMB1
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
- kconfig: fix memory leak in sym_warn_unmet_dep()
- hexagon: fix using plain integer as NULL pointer warning in cmpxchg
- hexagon: Fix unbalanced spinlock in die()
- f2fs: Introduce linear search for dentries
- Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC
messages"
- kbuild: switch from lz4c to lz4 for compression
- selftests/rseq: Fix handling of glibc without rseq support
- ktest.pl: Check kernelrelease return in get_version
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
- usb: gadget: f_tcm: Fix Get/SetInterface return value
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
- usb: dwc3: core: Defer the probe until USB power supply ready
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to
PD_T_SENDER_RESPONSE
- usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR
PPS
- btrfs: output the reason for open_ctree() failure
- s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
- LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
- block: copy back bounce buffer to user-space correctly in case of split
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
- sched/fair: Untangle NEXT_BUDDY and pick_next_task()
- sched: Fix race between yield_to() and try_to_wake_up()
- drm/v3d: Fix performance counter source settings on V3D 7.x
- drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
- drm/rockchip: vop2: Set AXI id for rk3588
- drm/rockchip: vop2: Setup delay cycle for Esmart2/3
- drm/rockchip: vop2: Add check for 32 bpp format for rk3588
- drm/msm/dpu: provide DSPP and correct LM config for SDM670
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
- drm/msm: don't clean up priv->kms prematurely
- drm/msm/mdp4: correct LCDC regulator name
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
- selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
- selftests: ktap_helpers: Fix uninitialized variable
- inet: constify inet_sk_bound_dev_eq() net parameter
- inet: constify 'struct net' parameter of various lookup helpers
- udp: constify 'struct net' parameter of socket lookups
- inet6: constify 'struct net' parameter of various lookup helpers
- ipv6: udp: constify 'struct net' parameter of socket lookups
- dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
- dt-bindings: clock: Add i.MX91 clock support
- dt-bindings: clock: imx93: Add SPDIF IPG clk
- clk: imx93: Move IMX93_CLK_END macro to clk driver
- clk: imx: add i.MX91 clk
- clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
- arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
- clk: imx: Apply some clks only for i.MX93
- wifi: rtw89: mcc: consider time limits not divisible by 1024
- wifi: iwlwifi: cleanup uefi variables loading
- wifi: iwlwifi: fw: read STEP table from correct UEFI var
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes
- wifi: mt76: mt7996: fix definition of tx descriptor
- Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
- platform/mellanox: mlxbf-pmc: incorrect type in assignment
- platform/x86: x86-android-tablets: make platform data be static
- crypto: api - Fix boot-up self-test race
- pinctrl: nomadik: Add check for clk_enable()
- rhashtable: Fix potential deadlock by moving schedule_work outside lock
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to
'async'
- perf maps: Fix display of kernel symbols
- perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf
tarball
- ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
- tools: Sync if_xdp.h uapi tooling header
- rhashtable: Fix rhashtable_try_insert test
- ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
- arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
- arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible
property
- arm64: dts: qcom: sm8550: correct sleep clock frequency
- arm64: dts: qcom: sm8650: correct sleep clock frequency
- arm64: dts: qcom: x1e80100: correct sleep clock frequency
- ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0
node
- RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
- [Config] updateconfigs for INFINIBAND_HNS
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
- iommu: iommufd: fix WARNING in iommufd_device_unbind
- remoteproc: mtk_scp: Only populate devices for SCP cores
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
- PCI: microchip: Add support for using either Root Port 1 or 2
- PCI: microchip: Set inbound address translation for coherent or non-
coherent mode
- erofs: get rid of erofs_{find,insert}_workgroup
- erofs: move erofs_workgroup operations into zdata.c
- erofs: sunset `struct erofs_workgroup`
- erofs: fix potential return value overflow of z_erofs_shrink_scan()
- tty: mips_ejtag_fdc: fix one more u8 warning
- xfrm: Add support for per cpu xfrm state handling.
- xfrm: Cache used outbound xfrm states at the policy.
- xfrm: Add an inbound percpu state cache.
- xfrm: Don't disable preemption while looking up cache state.
- idpf: add read memory barrier when checking descriptor done bit
- net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
- tools: ynl: c: correct reverse decode of empty attrs
- selftests: mptcp: extend CFLAGS to keep options from environment
- selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from
environment
- net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts
in
- ethtool: Fix set RXNFC command with symmetric RSS hash
- tools/power turbostat: Fix forked child affinity regression
- md: add a new callback pers->bitmap_sector()
- md/raid5: implement pers->bitmap_sector()
- xfs: check for dead buffers in xfs_buf_find_insert
- xfs: don't shut down the filesystem for media failures beyond end of log
- usb: dwc3: Skip resume if pm_runtime_set_active() fails
- clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
- xfrm: Add error handling when nla_put_u32() returns an error
- xfrm: Fix acquire state insertion.
- ethtool: Fix access to uninitialized fields in set RXNFC command
- ASoC: da7213: Initialize the mutex
- drm/amd/display: Add hubp cache reset when powergating
- KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
- ethtool: ntuple: fix rss + ring_cookie check
- Upstream stable to v6.6.76, v6.12.13
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57975
- btrfs: do proper folio cleanup when run_delalloc_nocow() failed
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21714
- RDMA/mlx5: Fix implicit ODP use after free
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21801
- net: ravb: Fix missing rtnl lock in suspend/resume path
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21809
- rxrpc, afs: Fix peer hash locking vs RCU callback
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58057
- idpf: convert workqueues to unbound
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57953
- rtc: tps6594: Fix integer overflow on 32bit systems
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57982
- xfrm: state: fix out-of-bounds read during lookup
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21721
- nilfs2: handle errors that nilfs_prepare_chunk() may return
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21722
- nilfs2: do not force clear folio if buffer is referenced
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21798
- firewire: test: Fix potential null dereference in firewire kunit test
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21723
- scsi: mpi3mr: Fix possible crash when setting up bsg fails
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21724
- iommufd/iova_bitmap: Fix shift-out-of-bounds in
iova_bitmap_offset_to_index()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21825
- bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57990
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57974
- udp: Deal with race between UDP socket address change and rehash
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57994
- ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57999
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58054
- staging: media: max96712: fix kernel oops when removing module
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58055
- usb: gadget: f_tcm: Don't free command immediately
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57979
- pps: Fix a use-after-free
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57980
- media: uvcvideo: Fix double free in error path
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58056
- remoteproc: core: Fix ida_free call while not allocated
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21705
- mptcp: handle fastopen disconnect correctly
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21707
- mptcp: consolidate suboption status
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57981
- usb: xhci: Fix NULL pointer dereference on certain command aborts
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21708
- net: usb: rtl8150: enable basic endpoint checking
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21826
- netfilter: nf_tables: reject mismatching sum of field_len with set key
length
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21808
- net: xdp: Disallow attaching device-bound programs in generic mode
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21710
- tcp: correct handling of extreme memory squeeze
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21715
- net: davicom: fix UAF in dm9000_drv_remove
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21716
- vxlan: Fix uninit-value in vxlan_vnifilter_dump()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21718
- net: rose: fix timer races against user threads
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21719
- ipmr: do not call mr_mfc_uses_dev() for unres entries
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21802
- net: hns3: fix oops when unload drivers paralleling
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58058
- ubifs: skip dumping tnc tree when zroot is null
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58069
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21720
- xfrm: delete intermediate secpath entry in packet offload mode
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21803
- LoongArch: Fix warnings during S3 suspend
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21810
- driver core: class: Fix wild pointer dereferences in API
class_dev_iter_next()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21811
- nilfs2: protect access to buffers with no active references
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21804
- PCI: rcar-ep: Fix incorrect variable used when calling
devm_request_mem_region()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21829
- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57984
- i3c: dw: Fix use-after-free in dw_i3c_master driver due to race
condition
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58034
- memory: tegra20-emc: fix an OF node reference bug in
tegra_emc_find_node_by_ram_code()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57973
- rdma/cxgb4: Prevent potential integer overflow on 32bit
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21725
- smb: client: fix oops due to unset link speed
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21726
- padata: avoid UAF for reorder_work
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21727
- padata: fix UAF in padata_reorder
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21728
- bpf: Send signals asynchronously if !preemptible
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58070
- bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21711
- net/rose: prevent integer overflows in rose_setsockopt()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21799
- net: ethernet: ti: am65-cpsw: fix freeing IRQ in
am65_cpsw_nuss_remove_tx_chns()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21806
- net: let net.core.dev_weight always be non-zero
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21830
- landlock: Handle weird files
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21828
- wifi: mac80211: don't flush non-uploaded STAs
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58061
- wifi: mac80211: prohibit deactivating all links
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57993
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding
endpoint check
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21812
- ax25: rcu protect dev->ax25_ptr
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58071
- team: prevent adding a device which is already a team device lower
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58063
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58072
- wifi: rtlwifi: remove unused check_buddy_priv
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58053
- rxrpc: Fix handling of received connection abort
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57996
- net_sched: sch_sfq: don't allow 1 packet limit
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57997
- wifi: wcn36xx: fix channel survey memory allocation size
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58051
- ipmi: ipmb: Add check devm_kasprintf() returned value
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58068
- OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57998
- OPP: add index check to assert to avoid buffer overflow in _read_freq()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58052
- drm/amdgpu: Fix potential NULL pointer dereference in
atomctrl_get_smc_sclk_range_table
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57986
- HID: core: Fix assumption that Resolution Multipliers must be in Logical
Collections
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21731
- nbd: don't allow reconnect after disconnect
* CVE-2025-37798
- sch_htb: make htb_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_ets: make est_qlen_notify() idempotent
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
* CVE-2025-37997
- netfilter: ipset: fix region locking in hash types
* CVE-2025-22088
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
* CVE-2025-37890
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
qdisc
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
* raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
- md/raid1: Add check for missing source disk in process_checks()
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update annotations scripts
[ Ubuntu-azure: 6.8.0-1031.36 ]
* noble/linux-azure: 6.8.0-1031.36 -proposed tracker (LP: #2114312)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
* Request to allow variable-sized MANA indirection table (LP: #2100902)
- net: mana: Allow variable size indirection table
* [Arm64] High reboot time for 96 core Linux VMs (LP: #2114218)
- arm64: mm: Don't remap pgtables per-cont(pte|pmd) block
- arm64: mm: Batch dsb and isb when populating pgtables
- arm64: mm: Don't remap pgtables for allocate vs populate
* Backport of [hv_netvsc]Fix error "nvsp_rndis_pkt_complete error status: 2"
(LP: #2112423)
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
- hv_netvsc: Remove rmsg_pgcnt
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
* Backport request of tools: hv: Enable debug logs for hv_kvp_daemon
(LP: #2112609)
- tools: hv: Enable debug logs for hv_kvp_daemon
* KVM-AMD Crash in GitHub Actions (LP: #2106673)
- SAUCE (no-up): KVM: SVM: Workaround overly strict CR3 check by Hyper-V
[ Ubuntu: 6.8.0-63.66 ]
* noble/linux: 6.8.0-63.66 -proposed tracker (LP: #2114341)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update annotations scripts
* CVE-2025-37798
- sch_htb: make htb_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_ets: make est_qlen_notify() idempotent
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
* CVE-2025-37997
- netfilter: ipset: fix region locking in hash types
* CVE-2025-22088
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
* CVE-2025-37890
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
qdisc
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
* raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
- md/raid1: Add check for missing source disk in process_checks()
[ Ubuntu-azure: 6.8.0-1030.35 ]
* noble/linux-azure: 6.8.0-1030.35 -proposed tracker (LP: #2110705)
[ Ubuntu: 6.8.0-62.65 ]
* noble/linux: 6.8.0-62.65 -proposed tracker (LP: #2110737)
* Rotate the Canonical Livepatch key (LP: #2111244)
- [Config] Prepare for Canonical Livepatch key rotation
* KVM bug causes Firecracker crash when it runs the vCPU for the first time
(LP: #2109859)
- vhost: return task creation error instead of NULL
- kvm: retry nx_huge_page_recovery_thread creation
* CVE-2025-2312 cifs.upcall could access incorrect kerberos credentials cache
(LP: #2099914) // CVE-2025-2312
- CIFS: New mount option for cifs.upcall namespace resolution
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640)
- ASoC: wm8994: Add depends on MFD core
- ASoC: samsung: Add missing selects for MFD_WM8994
- seccomp: Stub for !CONFIG_SECCOMP
- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
- of/unittest: Add test that of_address_to_resource() fails on non-
translatable address
- irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
- hwmon: (drivetemp) Set scsi command timeout to 10s
- ASoC: samsung: Add missing depends on I2C
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
- Revert "libfs: fix infinite directory reads for offset dir"
- libfs: Replace simple_offset end-of-directory detection
- Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
- ALSA: usb-audio: Add delay quirk for USB Audio Device
- Input: xpad - add support for Nacon Pro Compact
- Input: atkbd - map F23 key to support default copilot shortcut
- Input: xpad - add unofficial Xbox 360 wireless receiver clone
- Input: xpad - add QH Electronics VID/PID
- Input: xpad - improve name of 8BitDo controller 2dc8:3106
- Input: xpad - add support for Nacon Evol-X Xbox One Controller
- Input: xpad - add support for wooting two he (arm)
- ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK
- ASoC: cs42l43: Add codec force suspend/resume ops
- ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5
- libfs: Return ENOSPC when the directory offset range is exhausted
- Revert "libfs: Add simple_offset_empty()"
- libfs: Use d_children list to iterate simple_offset directories
- wifi: rtl8xxxu: add more missing rtl8192cu USB IDs
- HID: wacom: Initialize brightness of LED trigger
- Upstream stable to v6.6.75, v6.12.12
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21689
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21690
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21691
- cachestat: fix page cache statistics permission checking
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21692
- net: sched: fix ets qdisc OOB Indexing
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21699
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2024-50157
- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
* rtw89: Support hardware rfkill (LP: #2077384)
- wifi: rtw89: add support for hardware rfkill
* Introduce configfs-based interface for gpio-aggregator (LP: #2103496)
- gpio: introduce utilities for synchronous fake device creation
- bitmap: Define a cleanup function for bitmaps
- gpio: aggregator: simplify aggr_parse() with scoped bitmap
- gpio: aggregator: protect driver attr handlers against module unload
- gpio: aggregator: reorder functions to prepare for configfs introduction
- gpio: aggregator: unify function naming
- gpio: aggregator: add gpio_aggregator_{alloc, free}()
- gpio: aggregator: introduce basic configfs interface
- [Config] Enable DEV_SYNC_PROBE as module
- SAUCE: gpio: aggregator: Fix error code in gpio_aggregator_activate()
- gpio: aggregator: rename 'name' to 'key' in gpio_aggregator_parse()
- gpio: aggregator: expose aggregator created via legacy sysfs to configfs
- SAUCE: gpio: aggregator: fix "_sysfs" prefix check in
gpio_aggregator_make_group()
- SAUCE: gpio: aggregator: Fix gpio_aggregator_line_alloc() checking
- SAUCE: gpio: aggregator: Return an error if there are no GPIOs in
gpio_aggregator_parse()
- SAUCE: gpio: aggregator: Fix leak in gpio_aggregator_parse()
- gpio: aggregator: cancel deferred probe for devices created via configfs
- Documentation: gpio: document configfs interface for gpio-aggregator
- selftests: gpio: add test cases for gpio-aggregator
- SAUCE: selftests: gpio: gpio-aggregator: add a test case for _sysfs prefix
reservation
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
- net: add exit_batch_rtnl() method
- gtp: use exit_batch_rtnl() method
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
- gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
- net: xilinx: axienet: Fix IRQ coalescing packet count overflow
- net/mlx5: Fix RDMA TX steering prio
- net/mlx5e: Rely on reqid in IPsec tunnel mode
- net/mlx5e: Always start IPsec sequence number from 1
- drm/vmwgfx: Add new keep_resv BO param
- drm/v3d: Assign job pointer to NULL before signaling the fence
- soc: ti: pruss: Fix pruss APIs
- hwmon: (tmp513) Fix division of negative numbers
- i2c: mux: demux-pinctrl: check initial mux selection, too
- i2c: rcar: fix NACK handling when being a target
- hfs: Sanity check the root record
- fs: fix missing declaration of init_files
- kheaders: Ignore silly-rename files
- cachefiles: Parse the "secctx" immediately
- scsi: ufs: core: Honor runtime/system PM levels if set by host controller
drivers
- selftests: tc-testing: reduce rshift value
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and
.poll()
- RDMA/bnxt_re: Fix to export port num to ib_query_qp
- nvmet: propagate npwg topology
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
- i2c: atr: Fix client detach
- mptcp: be sure to send ack when mptcp-level window re-opens
- mptcp: fix spurious wake-up on under memory pressure
- selftests: mptcp: avoid spurious errors on disconnect
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
- vsock/virtio: cancel close work in the destructor
- vsock: reset socket state when de-assigning the transport
- nouveau/fence: handle cross device fences properly
- irqchip: Plug a OF node reference leak in platform_irqchip_probe()
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- drm/i915/fb: Relax clear color alignment to 64 bytes
- drm/amdgpu: always sync the GFX pipe on ctx switch
- ocfs2: fix deadlock in ocfs2_get_system_file_inode
- nfsd: add list_head nf_gc to struct nfsd_file
- x86/xen: fix SLS mitigation in xen_hypercall_iret()
- efi/zboot: Limit compression options to GZIP and ZSTD
- [Config] updateconfigs for HAVE_KERNEL_(LZ4|LZMA|LZO|XZ)
- net: ravb: Fix max TX frame size for RZ/V2M
- net/mlx5: SF, Fix add port error handling
- drm/vmwgfx: Unreserve BO on error
- i2c: testunit: on errors, repeat NACK until STOP
- hwmon: (ltc2991) Fix mixed signed/unsigned in DIV_ROUND_CLOSEST
- fs/qnx6: Fix building with GCC 15
- gpio: sim: lock up configfs that an instantiated device depends on
- gpio: sim: lock hog configfs items if present
- platform/x86: ISST: Add Clearwater Forest to support list
- drm/nouveau/disp: Fix missing backlight control on Macbook 5,1
- net/ncsi: fix locking in Get MAC Address handling
- drm/amd/display: Do not elevate mem_type change to full update
- drm/xe: Mark ComputeCS read mode as UC on iGPU
- drm/amdgpu/smu13: update powersave optimizations
- drm/amdgpu: fix fw attestation for MP0_14_0_{2/3}
- drm/amdgpu: disable gfxoff with the compute workload on gfx12
- drm/amd/display: Fix PSR-SU not support but still call the
amdgpu_dm_psr_enable
- Upstream stable to v6.6.73, v6.6.74, v6.12.11
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21672
- afs: Fix merge preference rule failure condition
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21682
- eth: bnxt: always recalculate features after XDP clearing, fix null-deref
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-53124
- net: fix data-races around sk->sk_forward_alloc
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57924
- fs: relax assertions on failure to encode file handles
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57951
- hrtimers: Handle CPU state correctly on hotplug
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57949
- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21668
- pmdomain: imx8mp-blk-ctrl: add missing loop break condition
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21684
- gpio: xilinx: Convert gpio_lock to raw spinlock
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21694
- fs/proc: fix softlockup in __read_vmcore (part 2)
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21665
- filemap: avoid truncating 64-bit offset to 32 bits
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21666
- vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21669
- vsock/virtio: discard packets if the transport changes
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21670
- vsock/bpf: return early if transport is not assigned
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21667
- iomap: avoid avoid truncating 64-bit offset to 32 bits
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57948
- mac802154: check local interfaces before deleting sdata list
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21673
- smb: client: fix double free of TCP_Server_Info::hostname
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21697
- drm/v3d: Ensure job pointer is set to NULL after job completion
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21674
- net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21675
- net/mlx5: Clear port select structure when fail to create
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21676
- net: fec: handle page_pool_dev_alloc_pages error
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21678
- gtp: Destroy device along with udp socket's netns dismantle.
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21680
- pktgen: Avoid out-of-bounds access in get_imix_entries
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21681
- openvswitch: fix lockup on tx to unregistering netdev with carrier
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21683
- bpf: Fix bpf_sk_select_reuseport() memory leak
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
[ Ubuntu-azure: 6.8.0-1029.34 ]
* noble/linux-azure: 6.8.0-1029.34 -proposed tracker (LP: #2107108)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2025.04.14)
* azure: include MANA modules in linux-modules (LP: #2106181)
- [Packaging] azure: include MANA modules in linux-modules
[ Ubuntu: 6.8.0-60.63 ]
* noble/linux: 6.8.0-60.63 -proposed tracker (LP: #2107138)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.04.14)
* Missing upstream commits for LP: #2102181 (LP: #2107336)
- libperf cpumap: Add any, empty and min helpers
- libperf cpumap: Ensure empty cpumap is NULL from alloc
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770)
- memblock: use numa_valid_node() helper to check for invalid node ID
- jbd2: increase IO priority for writing revoke records
- jbd2: flush filesystem device before updating tail sequence
- dm array: fix unreleased btree blocks on closing a faulty array cursor
- dm array: fix cursor index when skipping across block boundaries
- exfat: fix the infinite loop in __exfat_free_cluster()
- erofs: fix PSI memstall accounting
- ASoC: rt722: add delay time to wait for the calibration procedure
- ASoC: mediatek: disable buffer pre-allocation
- selftests/alsa: Fix circular dependency involving global-timer
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
- net: 802: LLC+SNAP OID:PID lookup on start of skb data
- tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero
- net: libwx: fix firmware mailbox abnormal return
- pds_core: limit loop over fw name list
- bnxt_en: Fix possible memory leak when hwrm_req_replace fails
- cxgb4: Avoid removal of uninserted tid
- ice: fix incorrect PHY settings for 100 GB/s
- igc: return early when failing to read EECD register
- tls: Fix tls_sw_sendmsg error handling
- eth: gve: use appropriate helper to set xdp_features
- Bluetooth: hci_sync: Fix not setting Random Address when required
- Bluetooth: MGMT: Fix Add Device to responding before completing
- Bluetooth: btnxpuart: Fix driver sending truncated data
- tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
- riscv: Fix early ftrace nop patching
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
- netfilter: nf_tables: imbalance in flowtable binding
- drm/mediatek: stop selecting foreign drivers
- [Config] updateconfigs for MTK_SMI
- drm/mediatek: Fix YCbCr422 color format issue for DP
- drm/mediatek: Fix mode valid issue for dp
- drm/mediatek: Add return value check when reading DPCD
- cpuidle: riscv-sbi: fix device node release in early exit of
for_each_possible_cpu
- scsi: ufs: qcom: Power off the PHY if it was already powered on in
ufs_qcom_power_up_sequence()
- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
- ksmbd: Implement new SMB3 POSIX type
- thermal: of: fix OF node leak in of_thermal_zone_find()
- smb: client: sync the root session and superblock context passwords before
automounting
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
- drm/amd/display: increase MAX_SURFACES to the value supported by hw
- io_uring/timeout: fix multishot updates
- dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
- USB: serial: option: add MeiG Smart SRM815
- USB: serial: option: add Neoway N723-EA support
- staging: iio: ad9834: Correct phase range check
- staging: iio: ad9832: Correct phase range check
- usb-storage: Add max sectors quirk for Nokia 208
- USB: serial: cp210x: add Phoenix Contact UPS Device
- usb: dwc3: gadget: fix writing NYET threshold
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set
config
- tty: serial: 8250: Fix another runtime PM usage counter underflow
- usb: dwc3-am62: Disable autosuspend during remove
- USB: usblp: return error when setting unsupported protocol
- USB: core: Disable LPM only for non-suspended ports
- usb: fix reference leak in usb_new_device()
- usb: gadget: midi2: Reverse-select at the right place
- usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in
the error path of .probe()
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
- usb: typec: tcpm/tcpci_maxim: fix error code in
max_contaminant_read_resistance_kohm()
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev
- iio: gyro: fxas21002c: Fix missing data update in trigger handler
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
- iio: inkern: call iio_device_put() only on mapped devices
- iio: adc: ad7124: Disable all channels at probe time
- riscv: kprobes: Fix incorrect address calculation
- ARM: dts: imxrt1050: Fix clocks for mmc
- arm64: dts: rockchip: add hevc power domain clock to rk3328
- pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
- pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
- workqueue: Add rcu lock check at the end of work item execution
- workqueue: Update lock debugging code
- mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
- riscv: Fix text patching when IPI are used
- drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
- ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
- net: don't dump Tx and uninitialized NAPIs
- ice: fix max values for dpll pin phase adjust
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev->features configuration too early
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- mctp i3c: fix MCTP I3C driver multi-thread issue
- drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
- drm/mediatek: Add support for 180-degree rotation in the display driver
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
- platform/x86: intel/pmc: Fix ioremap() of bad address
- riscv: module: remove relocation_head rel_entry member allocation
- cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
- fs: kill MNT_ONRB
- gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
- drm/amd/pm: fix BUG: scheduling while atomic
- drm/amdkfd: wq_release signals dma_fence only when available
- drm/amd/display: fix divide error in DM plane scale calcs
- drm/amd/display: fix page fault due to max surface definition mismatch
- serial: stm32: use port lock wrappers for break control
- usb: host: xhci-plat: set skip_phy_initialization if software node has
XHCI_SKIP_PHY_INIT property
- iio: imu: inv_icm42600: add register caching in the regmap
- iio: imu: inv_icm42600: fix spi burst write not supported
- Upstream stable to v6.6.71, v6.6.72, v6.12.10
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21659
- netdev: prevent accessing NAPI instances from another namespace
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21634
- cgroup/cpuset: remove kernfs active break
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21635
- rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21643
- netfs: Fix kernel async DIO
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21649
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21650
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21651
- net: hns3: don't auto enable misc vector
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21654
- ovl: support encoding fid from inode with no alias
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57883
- mm: hugetlb: independent PMD page table shared count
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57888
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from
!WQ_MEM_RECLAIM worker
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21631
- block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21656
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21655
- io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57904
- iio: adc: at91: call input_free_device() on allocated iio_dev
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57906
- iio: adc: ti-ads8688: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57907
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57908
- iio: imu: kmx61: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57910
- iio: light: vcnl4035: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57911
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered
buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57912
- iio: pressure: zpa2326: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57913
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21632
- x86/fpu: Ensure shadow stack is active before "getting" registers
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57916
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57917
- topology: Keep the cpumask unchanged when printing cpumap
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57939
- riscv: Fix sleeping in invalid context in die()
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21636
- sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21637
- sctp: sysctl: udp_port: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21638
- sctp: sysctl: auth_enable: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21639
- sctp: sysctl: rto_min/max: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21640
- sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21642
- mptcp: sysctl: sched: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe list first function
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57945
- riscv: mm: Fix the out of bound issue of vmemmap address
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21660
- ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21645
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled
it
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21646
- afs: Fix the maximum cell name length
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57925
- ksmbd: fix a missing return value check bug
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57926
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind
returns err
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21662
- net/mlx5: Fix variable not being completed when function returns
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21663
- net: stmmac: dwmac-tegra: Read iommu stream id from device tree
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21647
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21648
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21652
- ipvlan: Fix use-after-free in ipvlan_get_iflink().
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21658
- btrfs: avoid NULL pointer dereference if no valid extent tree
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21653
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-47736
- erofs: handle overlapped pclusters out of crafted images properly
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57940
- exfat: fix the infinite loop in exfat_readdir()
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57929
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
* intel_idle: add Granite Rapids Xeon (D) support (LP: #2106638)
- intel_idle: add Granite Rapids Xeon support
- intel_idle: add Granite Rapids Xeon D support
* [SRU] Enable speaker/mic mute LEDs on Lenovo ideapad and thinkbook
(LP: #2106449)
- ALSA: hda: Support for Ideapad hotkey mute LEDs
- platform/x86:lenovo-wmi-hotkey-utilities.c: Support for mic and audio mute
LEDs
- [Config] Enable Lenovo wmi hotkey driver
* Backport "PCI: Wait for device readiness with Configuration RRS" to N/O
(LP: #2106251)
- PCI: Wait for device readiness with Configuration RRS
- PCI: Avoid FLR for Mediatek MT7922 WiFi
* Enable OOB P-state control for Intel Sierra Forest/Granite Rapids
(LP: #2106275)
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
* mptcp BUG 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
(LP: #2101120)
- mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
* CVE-2025-21971
- net_sched: Prevent creation of classes with TC_H_ROOT
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632)
- smb/client: rename cifs_ntsd to smb_ntsd
- smb/client: rename cifs_sid to smb_sid
- smb/client: rename cifs_acl to smb_acl
- smb/client: rename cifs_ace to smb_ace
- fs/smb/client: implement chmod() for SMB3 POSIX Extensions
- smb: client: stop flooding dmesg in smb2_calc_signature()
- media: uvcvideo: Force UVC version to 1.0a for 0408:4033
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
- watchdog: rzg2l_wdt: Remove reset de-assert from probe
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
- ALSA: ump: Use guard() for locking
- ALSA: ump: Don't open legacy substream for an inactive group
- scsi: mpi3mr: Use ida to manage mrioc ID
- scsi: mpi3mr: Start controller indexing from 0
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- x86/ptrace: Cleanup the definition of the pt_regs structure
- x86/ptrace: Add FRED additional information to the pt_regs structure
- Bluetooth: btusb: add callback function in btusb suspend/resume
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
- platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
- mmc: sdhci-msm: fix crypto key eviction
- tracing: Handle old buffer mappings for event strings and functions
- tracing: Fix trace_check_vprintf() when tp_printk is used
- tracing: Check "%s" dereference via the field and not the TP_printk format
- RDMA/bnxt_re: Allow MSN table capability check
- RDMA/bnxt_re: Remove always true dattr validity check
- RDMA/mlx5: Enforce same type port association for multiport RoCE
- RDMA/bnxt_re: Avoid initializing the software queue for user queues
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
- nvme-pci: 512 byte aligned dma pool segment quirk
- RDMA/bnxt_re: Fix the check for 9060 condition
- RDMA/bnxt_re: Add check for path mtu in modify_qp
- RDMA/bnxt_re: Fix reporting hw_ver in query_device
- RDMA/bnxt_re: Fix max_qp_wrs reported
- RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
- RDMA/bnxt_re: Disable use of reserved wqes
- RDMA/bnxt_re: Add send queue size check for variable wqe
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly
- net: dsa: microchip: Fix KSZ9477 set_ageing_time function
- net: dsa: microchip: Fix LAN937X set_ageing_time function
- RDMA/hns: Refactor mtr find
- RDMA/hns: Remove unused parameters and variables
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix missing flush CQE for DWQE
- ip_tunnel: annotate data-races around t->parms.link
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
- net: Fix netns for ip_tunnel_init_flow()
- net/mlx5: DR, select MSIX vector 0 for completion queue creation
- net/mlx5e: macsec: Maintain TX SA from encoding_sa
- drm/i915/dg1: Fix power gate sequence.
- net: llc: reset skb->transport_header
- ALSA: usb-audio: US16x08: Initialize array before use
- eth: bcmsysport: fix call balance of priv->clk handling routines
- net: mv643xx_eth: fix an OF node reference leak
- net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
- net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
- wifi: mac80211: wake the queues in case of failure in resume
- ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
- sound: usb: enable DSD output for ddHiFi TC44C
- sound: usb: format: don't warn that raw DSD is unsupported
- bpf: fix potential error return
- ksmbd: retry iterate_dir in smb2_query_dir
- smb: client: destroy cfid_put_wq on module exit
- net: usb: qmi_wwan: add Telit FE910C04 compositions
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
- ARC: build: Try to guess GCC variant of cross compiler
- RDMA/bnxt_re: Fix the max WQE size for static WQE support
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
- modpost: fix the missed iteration for the max bit in do_input()
- ALSA: seq: Check UMP support for midi_version change
- ALSA hda/realtek: Add quirk for Framework F111:000C
- kcov: mark in_softirq_really() as __always_inline
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
- sky2: Add device ID 11ab:4373 for Marvell 88E8075
- drm: adv7511: Drop dsi single lane support
- dt-bindings: display: adi,adv7533: Drop single lane support
- fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
- mm/readahead: fix large folio support in async readahead
- mptcp: fix recvbuffer adjust on sleeping rcvmsg
- mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
- RDMA/bnxt_re: Fix max SGEs for the Work Request
- scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
- platform/x86: hp-wmi: Add thermal profile support for 8BAD boards
- platform/x86: hp-wmi: Fix platform profile option switch bug on Omen and
Victus laptops
- platform/x86: hp-wmi: Fix implementation of the platform_profile_omen_get
function
- platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- net: phy: micrel: Dynamically control external clock of KSZ PHY
- netdev-genl: avoid empty messages in napi get
- net: stmmac: restructure the error path of stmmac_probe_config_dt()
- net/mlx5e: Fix netif state handling
- net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
- drm/i915/cx0_phy: Fix C10 pll programming sequence
- RDMA/bnxt_re: Fix error recovery sequence
- btrfs: allow swap activation to be interruptible
- perf/x86/intel: Add Arrow Lake U support
- ALSA: hda: cs35l56: Remove calls to
cs35l56_force_sync_asp1_registers_from_cache()
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
- spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
- ARC: build: disallow invalid PAE40 + 4K page config
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- bpf: consider that tail calls invalidate packet pointers
- maple_tree: reload mas before the second call for mas_empty_area
- io_uring/rw: fix downgraded mshot read
- wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
- net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
- gve: process XSK TX descriptors as part of RX NAPI
- gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
- mm: reinstate ability to map write-sealed memfd mappings read-only
- Upstream stable to v6.6.70, v6.12.9
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57898
- wifi: cfg80211: clear link ID from bitmap during link delete after clean up
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57882
- mptcp: fix TCP options overflow.
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57885
- mm/kmemleak: fix sleeping function called from invalid context at print
message
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57932
- gve: guard XDP xmit NDO on existence of xdp queues
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57933
- gve: guard XSK operations on the existence of queues
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57887
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57938
- net/sctp: Prevent autoclose integer overflow in sctp_association_init()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57889
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57890
- RDMA/uverbs: Prevent integer overflow issue
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57892
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57893
- ALSA: seq: oss: Fix races at processing SysEx messages
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57895
- ksmbd: set ATTR_CTIME flags when setting mtime
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57896
- btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57897
- drm/amdkfd: Correct the migration DMA map direction
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57899
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57900
- ila: serialize calls to nf_register_net_hooks()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57901
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57902
- af_packet: fix vlan_get_tci() vs MSG_PEEK
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57903
- net: restrict SO_REUSEPORT to inet sockets
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-36476
- RDMA/rtrs: Ensure 'ib_sge list' is accessible
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-39282
- net: wwan: t7xx: Fix FSM command timeout issue
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57801
- net/mlx5e: Skip restore TC rules for vport rep without loaded flag
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57802
- netrom: check buffer length before accessing it
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57841
- net: fix memory leak in tcp_conn_request()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57931
- selinux: ignore unknown extended permissions
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-56761
- x86/fred: Clear WFE in missing-ENDBRANCH #CPs
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-53179
- smb: client: fix use-after-free of signing key
* uprobe-related panics during profiling (LP: #2104210)
- uprobes: Fix race in uprobe_free_utask
* ubuntu_bpf failed to build on Noble / Oracular (LP: #2069407)
- selftests/bpf: Fix compilation failure when CONFIG_NET_FOU!=y
* nfsd hangs and never recovers after NFS4ERR_DELAY and a connection loss
(LP: #2103564)
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
* thermal: Fix temperature readings on intel hardware (LP: #2103427)
- thermal: intel: intel_tcc: Add model checks for temperature registers
- thermal: intel: intel_tcc_cooling: Use a model-specific bitmask for TCC
offset
- hwmon: (coretemp) Extend the bitmask to read temperature to 0xff
* [SRU] Fix Lenovo M70/90 gen6 micmute key and led (LP: #2101811)
- ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
- ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869)
- ceph: allocate sparse_ext map only for sparse reads
- mm/vmstat: fix a W=1 clang compiler warning
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
- bpf: Check negative offsets in __bpf_skb_min_len()
- mtd: diskonchip: Cast an operand to prevent potential overflow
- mtd: rawnand: arasan: Fix double assertion of chip-select
- mtd: rawnand: arasan: Fix missing de-registration of NAND
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
- phy: core: Fix an OF node refcount leakage in _of_phy_get()
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
- phy: core: Fix that API devm_phy_put() fails to release the phy
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to
unregister the phy provider
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
- phy: usb: Toggle the PHY power during init
- phy: rockchip: naneng-combphy: fix phy reset
- dmaengine: mv_xor: fix child node refcount handling in early exit
- dmaengine: dw: Select only supported masters for ACPI devices
- dmaengine: tegra: Return correct DMA status when paused
- dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
- dmaengine: apple-admac: Avoid accessing registers in probe
- stddef: make __struct_group() UAPI C++-friendly
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
- watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040
- udf: Skip parent dir link count update if corrupted
- ALSA: hda/conexant: fix Z60MR100 startup pop issue
- ALSA: sh: Use standard helper for buffer accesses
- smb: server: Fix building with GCC 15
- regmap: Use correct format specifier for logging range errors
- LoongArch: Fix reserving screen info memory for above-4G firmware
- LoongArch: BPF: Adjust the parameter of emit_jirl()
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
- spi: intel: Add Panther Lake SPI controller support
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
as an error
- spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
- blk-mq: register cpuhp callback after hctx is added to xarray table
- blk-mq: move cpuhp callback registering out of q->sysfs_lock
- MIPS: Probe toolchain support of -msym32
- MIPS: mipsregs: Set proper ISA level for virt extensions
- freezer, sched: Report frozen tasks as 'D' instead of 'R'
- tracing: Constify string literal data member in struct trace_event_call
- io_uring/sqpoll: fix sqpoll error handling races
- i2c: microchip-core: actually use repeated sends
- i2c: imx: add imx7d compatible string for applying erratum ERR007805
- i2c: microchip-core: fix "ghost" detections
- btrfs: sysfs: fix direct super block member reads
- ALSA: sh: Fix wrong argument order for copy_from_iter()
- block: avoid to reuse `hctx` not removed from cpuhp callback list
- fork: avoid inappropriate uprobe access to invalid mm
- ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
- power: supply: bq24190: Fix BQ24296 Vbus regulator support
- udf: Verify inode link counts before performing rename
- ALSA: ump: Indicate the inactive group in legacy substream names
- ALSA: ump: Update legacy substream names upon FB info update
- scsi: mpi3mr: Synchronize access to ioctl data buffer
- scsi: mpi3mr: Handling of fault code for insufficient power
- objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns
- dmaengine: loongson2-apb: Change GENMASK to GENMASK_ULL
- perf/x86/intel/ds: Add PEBS format 6
- btrfs: add and use helper to verify the calling task has locked the inode
- btrfs: fix race with memory mapped writes when activating swap file
- btrfs: fix swap file activation failure due to extents that used to be
shared
- ALSA: ump: Shut up truncated string warning
- Upstream stable to v6.6.69, v6.12.8
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56758
- btrfs: check folio mapping after unlock in relocate_one_folio()
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56759
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57806
- btrfs: fix transaction atomicity bug when enabling simple quotas
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57793
- virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56764
- ublk: detach gendisk from ublk device if add_disk() fails
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57804
- scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57792
- power: supply: gpio-charger: Fix set charge current limits
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56760
- PCI/MSI: Handle lack of irqdomain gracefully
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56763
- tracing: Prevent bad count for tracing_cpumask_write
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57946
- virtio-blk: don't keep queue frozen during system suspend
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57807
- scsi: megaraid_sas: Fix for a potential deadlock
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56767
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56769
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
- PCI: vmd: Create domain symlink before pci_bus_add_devices()
- PCI: Add ACS quirk for Broadcom BCM5760X NIC
- usb: cdns3-ti: Add workaround for Errata i2409
- MIPS: Loongson64: DTS: Fix msi node for ls7a
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
- usb: cdns3: Add quirk flag to enable suspend residency
- platform/x86: p2sb: Make p2sb_get_devfn() return void
- p2sb: Factor out p2sb_read_from_cache()
- p2sb: Introduce the global flag p2sb_hidden_by_bios
- p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
- p2sb: Do not scan and remove the P2SB device when it is unhidden
- i2c: pnx: Fix timeout in wait functions
- xfs: fix the contact address for the sysfs ABI documentation
- xfs: verify buffer, inode, and dquot items every tx commit
- xfs: use consistent uid/gid when grabbing dquots for inodes
- xfs: declare xfs_file.c symbols in xfs_file.h
- xfs: create a new helper to return a file's allocation unit
- xfs: Fix xfs_flush_unmap_range() range for RT
- xfs: Fix xfs_prepare_shift() range for RT
- xfs: convert comma to semicolon
- xfs: fix file_path handling in tracepoints
- xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
- xfs: attr forks require attr, not attr2
- xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
- xfs: Fix the owner setting issue for rmap query in xfs fsmap
- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
- xfs: take m_growlock when running growfsrt
- xfs: reset rootdir extent size hint after growfsrt
- tools: hv: change permissions of NetworkManager configuration file
- cxl/pci: Fix potential bogus return value upon successful probing
- cxl/region: Fix region creation for greater than x2 switches
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- ionic: use ee->offset when returning sprom data
- net: renesas: rswitch: rework ts tags management
- net: hinic: Fix cleanup in create_rxqs/txqs()
- net: ethernet: bgmac-platform: fix an OF node reference leak
- ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
- netfilter: ipset: Fix for recursive locking warning
- selftests: openvswitch: fix tcpdump execution
- net: mdiobus: fix an OF node reference leak
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
- mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
- EDAC/amd64: Simplify ECC check on unified memory controllers
- chelsio/chtls: prevent potential integer overflow on 32bit
- i2c: riic: Always round-up when calculating bus period
- efivarfs: Fix error on non-existent file
- hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
- USB: serial: option: add TCL IK512 MBIM & ECM
- USB: serial: option: add MeiG Smart SLM770A
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
- USB: serial: option: add MediaTek T7XX compositions
- USB: serial: option: add Telit FE910C04 rmnet compositions
- thunderbolt: Improve redrive mode handling
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
- i915/guc: Reset engine utilization buffer before registration
- i915/guc: Ensure busyness counter increases motonically
- i915/guc: Accumulate active runtime on gt reset
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
- hwmon: (tmp513) Fix Current Register value interpretation
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
- zram: refuse to use zero sized block device as backing device
- zram: fix uninitialized ZRAM not releasing backing device
- zram: fix potential UAF of zram table
- vmalloc: fix accounting with i915
- btrfs: tree-checker: reject inline extent items with 0 ref count
- smb: client: fix TCP timers deadlock after rmmod
- tracing: Fix test_event_printk() to process entire print argument
- tracing: Add missing helper functions in event pointer dereference check
- tracing: Add "%s" check in test_event_printk()
- tracing: Have process_string() also allow arrays
- selftests/memfd: run sysctl tests when PID namespace support is enabled
- selftests/bpf: Use asm constraint "m" for LoongArch
- io_uring: Fix registered ring file refcount leak
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget
- of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
- udmabuf: also check for F_SEAL_FUTURE_WRITE
- of: Fix error path in of_parse_phandle_with_args_map()
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
- ceph: validate snapdirname option length when mounting
- ceph: improve error handling and short/overflow-read logic in
__ceph_sync_read()
- ceph: fix memory leaks in __ceph_sync_read()
- epoll: Add synchronous wakeup support for ep_poll_callback
- io_uring/rw: avoid punting to io-wq directly
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
- xfs: sb_spino_align is not verified
- xfs: fix sparse inode limits on runt AG
- xfs: fix sb_spino_align checks for large fsblock sizes
- xfs: fix zero byte checking in the superblock scrubber
- netdev: fix repeated netlink messages in queue dump
- team: Fix feature exposure when no ports are present
- can: m_can: fix missed interrupts with m_can_pci
- netdev-genl: avoid empty messages in queue dump
- KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
- KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable
- net: mctp: handle skb cleanup on sock_queue failures
- xhci: retry Stop Endpoint on buggy NEC controllers
- usb: xhci: Limit Stop Endpoint retries
- usb: xhci: Avoid queuing redundant Stop Endpoint commands
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
- thunderbolt: Add support for Intel Panther Lake-M/P
- thunderbolt: Don't display nvm_version unless upgrade supported
- drm/panel: st7701: Add prepare_prev_first flag to drm_panel
- drm/panel: synaptics-r63353: Fix regulator unbalance
- drm/amdgpu/nbio7.11: fix IP version check
- drm/amdgpu/nbio7.7: fix IP version check
- fgraph: Still initialize idle shadow stacks when starting
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation
- ocfs2: fix the space leak in LA when releasing LA
- of: property: fw_devlink: Do not use interrupt-parent directly
- of: address: Preserve the flags portion on 1:1 dma-ranges mapping
- Upstream stable to v6.6.68, v6.12.7
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56710
- ceph: fix memory leak in ceph_direct_read_write()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-53685
- ceph: give up on paths longer than PATH_MAX
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-54193
- accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-54455
- accel/ivpu: Fix general protection fault in ivpu_bo_list()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-53690
- nilfs2: prevent use of deleted inode
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56709
- io_uring: check if iowq is killed before queuing
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-55881
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-55916
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56369
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56372
- net: tun: fix tun_napi_alloc_frags()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56715
- ionic: Fix netdev notifier unregister on failure
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56716
- netdevsim: prevent bad user input in nsim_dev_health_break_write()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56717
- net: mscc: ocelot: fix incorrect IFH SRC_PORT field in
ocelot_ifh_set_basic()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-57791
- net/smc: check return value of sock_recvmsg when draining clc data
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-47408
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-49568
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-49571
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
msg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56718
- net/smc: protect link down work from execute after lgr freed
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-41013
- xfs: don't walk off the end of a directory data block
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181)
- perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
- ksmbd: fix racy issue from session lookup and expire
- splice: do not checksum AF_UNIX sockets
- tcp: check space before adding MPTCP SYN options
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
- usb: host: max3421-hcd: Correctly abort a USB request.
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
- usb: dwc2: Fix HCD resume
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
- usb: dwc2: Fix HCD port connection race
- scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
- usb: gadget: midi2: Fix interpretation of is_midi1 bits
- usb: ehci-hcd: fix call balance of clocks handling routines
- usb: typec: anx7411: fix fwnode_handle reference leak
- usb: typec: anx7411: fix OF node reference leaks in
anx7411_typec_switch_probe()
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
- drm/i915: Fix memory leak by correcting cache object name in error handler
- xfs: update btree keys correctly when _insrec splits an inode root block
- xfs: don't drop errno values when we fail to ficlone the entire range
- xfs: return from xfs_symlink_verify early on V4 filesystems
- xfs: fix scrub tracepoints when inode-rooted btrees are involved
- xfs: only run precommits once per transaction object
- bpf: Check size for BTF-based ctx access of pointer members
- bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
- bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
- bpf, sockmap: Fix update element with same
- wifi: mac80211: init cnt before accessing elem in
ieee80211_copy_mbssid_beacon
- wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
- wifi: mac80211: fix station NSS capability initialization order
- batman-adv: Do not send uninitialized TT changes
- batman-adv: Remove uninitialized data in full table TT response
- batman-adv: Do not let TT changes list grows indefinitely
- wifi: cfg80211: sme: init n_channels before channels[] access
- selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
- selftests: mlxsw: sharedbuffer: Remove duplicate test cases
- selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
- ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
- net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
- net: mscc: ocelot: improve handling of TX timestamp for unknown skb
- net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-
safe
- net: mscc: ocelot: be resilient to loss of PTP packets during transmission
- net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
- net: sparx5: fix FDMA performance issue
- net: sparx5: fix the maximum frame length register
- ACPI: resource: Fix memory resource type union access
- cxgb4: use port number to set mac addr
- qca_spi: Fix clock speed for multiple QCA7000
- qca_spi: Make driver probing reliable
- ASoC: amd: yc: Fix the wrong return value
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value
- net: renesas: rswitch: fix race window between tx start and complete
- net: renesas: rswitch: fix leaked pointer on error path
- net: renesas: rswitch: handle stop vs interrupt race
- net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
- netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
- ACPICA: events/evxfregn: don't release the ContextMutex that was never
acquired
- Bluetooth: iso: Fix recursive locking warning
- Bluetooth: SCO: Add support for 16 bits transparent voice setting
- net: renesas: rswitch: fix initial MPIC register setting
- net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
- kselftest/arm64: abi: fix SVCR detection
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
- selftests/bpf: remove use of __xlated()
- xen/netfront: fix crash when removing device
- x86: make get_cpu_vendor() accessible from Xen code
- objtool/x86: allow syscall instruction
- x86/static-call: provide a way to do very early static-call updates
- x86/xen: don't do PV iret hypercall through hypercall page
- x86/xen: add central hypercall functions
- x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
- x86/xen: add FRAME_END to xen_hypercall_hvm()
- x86/xen: use new hypercall functions instead of hypercall page
- x86/xen: remove hypercall page
- x86/static-call: fix 32-bit build
- x86/asm: Make serialize() always_inline
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
- serial: sh-sci: Check if TX data was written to device in .tx_empty()
- gpio: ljca: Initialize num before accessing item in ljca_gpio_config
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
- drm/amdkfd: Use device based logging for errors
- drm/amdkfd: pause autosuspend when creating pdd
- drm/amdkfd: fixed page fault when enable MES shader debugger
- drm/i915/color: Stop using non-posted DSB writes for legacy LUT
- drm/amd/pm: Set SMU v13.0.7 default workload type
- xfs: return a 64-bit block count from xfs_btree_count_blocks
- perf machine: Initialize machine->env to address a segfault
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
- net: renesas: rswitch: fix possible early skb release
- Bluetooth: Improve setsockopt() handling of malformed user input
- libperf: evlist: Fix --cpu argument on hybrid platform
- selftests: netfilter: Stabilize rpath.sh
- net, team, bonding: Add netdev_base_features helper
- bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
- team: Fix initial vlan_feature set in __team_compute_features
- drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
- Upstream stable to v6.6.67, v6.12.6
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56652
- drm/xe/reg_sr: Remove register pool
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-54460
- Bluetooth: iso: Fix circular lock in iso_listen_bis
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-57879
- Bluetooth: iso: Always release hdev at the end of iso_listen_bis
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56656
- bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-53125
- bpf: sync_linked_regs() must preserve subreg_def
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56654
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56770
- net/sched: netem: account for backlog updates from child qdisc
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-54683
- netfilter: IDLETIMER: Fix for possible ABBA deadlock
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-55639
- net: renesas: rswitch: avoid use-after-put for a device tree node
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56657
- ALSA: control: Avoid WARN() for symlink errors
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56659
- net: lapb: increase LAPB_HEADER_LEN
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56660
- net/mlx5: DR, prevent potential error pointer dereference
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56662
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56664
- bpf, sockmap: Fix race between element replace and close()
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56667
- drm/i915: Fix NULL pointer dereference in capture_engine
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56670
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
accessing null pointer
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-53687
- riscv: Fix IPIs usage in kfence_protect_page()
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56675
- bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
* Noble update: upstream stable patchset 2025-02-04 (LP: #2097393)
- selftests: net: Remove executable bits from library scripts
* CVE-2024-56653
- Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
[ Ubuntu-azure: 6.8.0-1028.33 ]
* noble/linux-azure: 6.8.0-1028.33 -proposed tracker (LP: #2107047)
* azure: backport "RDMA/mana_ib: Fix missing ret value" (LP: #2105678)
- RDMA/mana_ib: Fix missing ret value
* Apply missing MANA cleanup patch (LP: #2105912)
- net: mana: cleanup mana struct after debugfs_remove()
* Remove unnecessary hyper-v patch (LP: #2104836)
- Revert "UBUNTU: SAUCE: clocksource: hyper-v: Use InvariantTSC and enable TSC
page for a TDX VM without paravisor"
[ Ubuntu: 6.8.0-59.61 ]
* noble/linux: 6.8.0-59.61 -proposed tracker (LP: #2107076)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
* CVE-2024-56653
- Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
[ Ubuntu-azure: 6.8.0-1027.32 ]
* noble/linux-azure: 6.8.0-1027.32 -proposed tracker (LP: #2102498)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2025.03.17)
* wdat_wdt.ko should be pulled in by linux-image-virtual (LP: #2098554)
- [Packaging]: azure: wdat_wdt.ko is moved from "linux-modules-
extra-*-generic" to "linux-modules-*-generic"
[ Ubuntu: 6.8.0-58.60 ]
* noble/linux: 6.8.0-58.60 -proposed tracker (LP: #2102529)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.03.17)
* wdat_wdt.ko should be pulled in by linux-image-virtual (LP: #2098554)
- [Packaging]: wdat_wdt.ko is moved from "linux-modules-extra-*-generic" to
"linux-modules-*-generic"
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118)
- openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix()
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
- watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
- watchdog: apple: Actually flush writes after requesting watchdog restart
- watchdog: mediatek: Make sure system reset gets asserted in
mtk_wdt_restart()
- can: gs_usb: add VID/PID for Xylanta SAINT3 product family
- can: gs_usb: add usb endpoint address detection at driver probe step
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
- can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- selftests: hid: fix typo and exit code
- ptp: Add error handling for adjfine callback in ptp_clock_adjtime
- net/sched: tbf: correct backlog statistic for GSO packets
- net: hsr: fix fill_frame_info() regression vs VLAN packets
- platform/x86: asus-wmi: add support for vivobook fan profiles
- platform/x86: asus-wmi: Fix inconsistent use of thermal policies
- platform/x86: asus-wmi: Ignore return value when writing thermal policy
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: refactoring initialization of smc sock
- net/qed: allow old cards not supporting "num_images" to work
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
- ixgbe: downgrade logging of unsupported VF API version to debug
- net: sched: fix erspan_opt settings in cls_flower
- netfilter: nft_set_hash: skip duplicated elements pending gc run
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- ethtool: Fix wrong mod state in case of verbose and no_mask bitset
- mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
- mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
- net/mlx5e: Remove workaround to avoid syndrome for internal port
- xhci: Allow RPM on the USB controller (1022:43f7) by default
- gpio: grgpio: use a helper variable to store the address of ofdev->dev
- usb: dwc3: gadget: Rewrite endpoint allocation flow
- usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
- usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
- mmc: mtk-sd: use devm_mmc_alloc_host
- mmc: mtk-sd: Fix error handle of probe function
- mmc: mtk-sd: fix devm_clk_get_optional usage
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
- zram: do not mark idle slots that cannot be idle
- zram: clear IDLE flag in mark_idle()
- powerpc/vdso: Refactor CFLAGS for CVDSO build
- powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
- ntp: Remove invalid cast in time offset math
- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link
- driver core: fw_devlink: Stop trying to optimize cycle detection logic
- drivers: core: fix device leak in __fw_devlink_relax_cycles()
- i3c: master: support to adjust first broadcast address speed
- i3c: master: svc: use slow speed for first broadcast address
- i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
- i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
- i3c: master: Extend address status bit to 4 and add
I3C_ADDR_SLOT_EXT_DESIRED
- i3c: master: Fix dynamic address leak when 'assigned-address' is present
- i3c: master: Fix missing 'ret' assignment in set_speed()
- drm/bridge: it6505: update usleep_range for RC circuit charge time
- drm/bridge: it6505: Fix inverted reset polarity
- scsi: ufs: core: Always initialize the UIC done completion
- scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
- bpf, vsock: Fix poll() missing a queue
- bpf, vsock: Invoke proto::close on close()
- xsk: always clear DMA mapping information when unmapping the pool
- bpftool: fix potential NULL pointer dereferencing in prog_dump()
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter
- ALSA: seq: ump: Use automatic cleanup of kfree()
- ALSA: ump: Update substream name from assigned FB names
- ALSA: seq: ump: Fix seq port updates per FB info notify
- ALSA: usb-audio: Notify xrun for low-latency mode
- tools: Override makefile ARCH variable if defined, but empty
- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
- ASoC: SOF: ipc3-topology: fix resource leaks in
sof_ipc3_widget_setup_comp_dai()
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- scsi: scsi_debug: Fix hrtimer support for ndelay
- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
- drm/v3d: Enable Performance Counters before clearing them
- scatterlist: fix incorrect func name in kernel-doc
- iio: magnetometer: yas530: use signed integer type for clamp limits
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Fix exact match conditions in trie_get_next_key()
- x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
- watchdog: rti: of: honor timeout-sec property
- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit
ASIDs
- ALSA: usb-audio: add mixer mapping for Corsair HS80
- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
- scsi: qla2xxx: Fix abort in bsg timeout
- scsi: qla2xxx: Fix NVMe and NPIV connect issue
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
- scsi: ufs: core: Add missing post notify for power mode change
- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
- drm/dp_mst: Verify request type in the corresponding down message reply
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP
- modpost: Add .irqentry.text to OTHER_SECTIONS
- x86/kexec: Restore GDT on return from ::preserve_context kexec
- dma-buf: fix dma_fence_array_signaled v4
- dma-fence: Fix reference leak on fence merge failure path
- dma-fence: Use kernel's sort for merging fences
- regmap: detach regmap from dev on regmap_exit
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10
tablet
- mmc: core: Further prevent card detect during shutdown
- ocfs2: update seq_file index in ocfs2_dlm_seq_next
- lib: stackinit: hide never-taken branch from compiler
- kasan: make report_lock a raw spinlock
- x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
- epoll: annotate racy check
- kselftest/arm64: Log fp-stress child startup errors to stdout
- btrfs: avoid unnecessary device path update for the same device
- btrfs: do not clear read-only when adding sprout device
- kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
- perf/x86/amd: Warn only on new bits set
- spi: spi-fsl-lpspi: Adjust type of scldiv
- HID: add per device quirk to force bind to hid-generic
- media: uvcvideo: RealSense D421 Depth module metadata
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
- mmc: core: Add SD card quirk for broken poweroff notification
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
- regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
- selftests/resctrl: Protect against array overflow when reading strings
- drm/vc4: hdmi: Avoid log spam for audio start failure
- drm/vc4: hvs: Set AXI panic modes for the HVS
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
- drm/bridge: it6505: Enable module autoloading
- drm/mcde: Enable module autoloading
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
- drm/display: Fix building with GCC 15
- ALSA: hda: Use own quirk lookup helper
- ALSA: hda/conexant: Use the new codec SSID matching
- r8169: don't apply UDP padding quirk on RTL8126A
- samples/bpf: Fix a resource leak
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t
- net: ethernet: fs_enet: Use %pa to format resource_size_t
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- wifi: ath5k: add PCI ID for SX76X
- wifi: ath5k: add PCI ID for Arcadyan devices
- fanotify: allow reporting errors on failure to open fd
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
- net: sfp: change quirks for Alcatel Lucent G-010S-P
- net: stmmac: Programming sequence for VLAN packets with split header
- drm/sched: memset() 'job' in drm_sched_job_init()
- amdgpu/uvd: get ring reference from rq scheduler
- drm/amdgpu: don't access invalid sched
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
- drm/amdgpu: Dereference the ATCS ACPI buffer
- netlink: specs: Add missing bitset attrs to ethtool spec
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
- fsl/fman: Validate cell-index value obtained from Device Tree
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
- ALSA: usb-audio: Make mic volume workarounds globally applicable
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment
- dsa: qca8k: Use nested lock to avoid splat
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
- Bluetooth: Add new quirks for ATS2851
- Bluetooth: Support new quirks for ATS2851
- Bluetooth: Set quirks for ATS2851
- ASoC: hdmi-codec: reorder channel allocation list
- rocker: fix link status detection in rocker_carrier_init()
- net/neighbor: clear error in case strict check is not set
- netpoll: Use rcu_access_pointer() in __netpoll_setup
- pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
- tracing/ftrace: disable preemption in syscall probe
- tracing: Use atomic64_inc_return() in trace_clock_counter()
- tools/rtla: fix collision with glibc sched_attr/sched_set_attr
- rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
- scsi: ufs: core: Make DMA mask configuration more flexible
- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
- clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
- clk: qcom: rpmh: add support for SAR2130P
- clk: qcom: tcsrcc-sm8550: add SAR2130P support
- scsi: st: Don't modify unknown block number in MTIOCGET
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
- pinctrl: qcom-pmic-gpio: add support for PM8937
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
- nvdimm: rectify the illogical code within nd_dax_probe()
- smb: client: memcpy() with surrounding object base address
- verification/dot2: Improve dot parser robustness
- KMSAN: uninit-value in inode_go_dump (5)
- PCI: qcom: Add support for IPQ9574
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates
- PCI: Detect and trust built-in Thunderbolt chips
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge
- PCI: Add ACS quirk for Wangxun FF5xxx NICs
- f2fs: print message if fscorrupted was found in f2fs_new_node_page()
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
- fs/ntfs3: Fix case when unmarked clusters intersect with zone
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set
- iio: light: ltr501: Add LTER0303 to the supported devices
- ASoC: amd: yc: fix internal mic on Redmi G 2022
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
- drm/amdgpu/vcn: reset fw_shared under SRIOV
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6
21M1CTO1WW
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
- rtc: cmos: avoid taking rtc_lock for extended period of time
- serial: 8250_dw: Add Sophgo SG2044 quirk
- smb: client: don't try following DFS links in cifs_tree_connect()
- setlocalversion: work around "git describe" performance
- sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
- sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning
busy
- sched/core: Prevent wakeup of ksoftirqd during idle load balance
- btrfs: fix missing snapshot drew unlock when root is dead during swap
activation
- clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
- tracing/eprobe: Fix to release eprobe when failed to add dyn_event
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
- Revert "unicode: Don't special case ignorable code points"
- vfio/mlx5: Align the page tracking max message size with the device
capability
- selftests/ftrace: adjust offset for kprobe syntax error test
- KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from
kvm_faultin_pfn()
- jffs2: Fix rtime decompressor
- mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
- iio: invensense: fix multiple odr switch when FIFO is off
- ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
- ALSA: hda: Fix build error without CONFIG_SND_DEBUG
- usb: dwc3: ep0: Don't reset resource alloc flag
- ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
- platform/x86: asus-wmi: Fix thermal profile initialization
- i3c: master: svc: fix possible assignment of the same address to two devices
- btrfs: drop unused parameter file_offset from
btrfs_encoded_read_regular_fill_pages()
- md/raid5: Wait sync io to finish before changing group cnt
- media: platform: rga: fix 32-bit DMA limitation
- net: phy: dp83869: fix status reporting for 1000base-x autonegotiation
- remoteproc: qcom_q6v5_pas: disable auto boot for wpss
- mtd: spinand: winbond: Fix 512GW and 02JW OOB layout
- PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
- dt-bindings: net: fec: add pps channel property
- net: fec: refactor PPS channel configuration
- net: fec: make PPS channel configurable
- drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs
- drm/xe/migrate: use XE_BO_FLAG_PAGETABLE
- drm/amd: Add some missing straps from NBIO 7.11.0
- drm/amd: Fix initialization mistake for NBIO 7.11 devices
- drm/amdgpu/pm: Don't use OD table on Arcturus
- drm/amd/pm: Remove arcturus min power limit
- drm/amd/display: update pipe selection policy to check head pipe
- drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto
- Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs"
- ipv6: avoid possible NULL deref in modify_prefix_route()
- net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on
LAN7800/7850
- ice: fix PHY Clock Recovery availability check
- vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
- vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
- mmc: core Convert UNSTUFF_BITS macro to inline function
- mmc: sd: SDUC Support Recognition
- mmc: core: Adjust ACMD22 to SDUC
- mmc: core: Use GFP_NOIO in ACMD22
- f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
- f2fs: fix to adjust appropriate length for fiemap
- f2fs: fix to requery extent which cross boundary of inquiry
- drm/amd/display: calculate final viewport before TAP optimization
- drm/amd/display: Ignore scalar validation failure if pipe is phantom
- pmdomain: core: Add missing put_device()
- pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
- pmdomain: core: add dummy release function to genpd device
- bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
- bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
- LoongArch: KVM: Protect kvm_check_requests() with SRCU
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
- ALSA: usb-audio: Add extra PID for RME Digiface USB
- ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
- scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
- io_uring/cmd: document some uring_cmd related helpers
- io_uring: Change res2 parameter type in io_uring_cmd_done
- selftests/damon: add _damon_sysfs.py to TEST_FILES
- drm/amd/display: Correct prefetch calculation
- drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
- drm/amdgpu/hdp6.0: do a posting read when flushing HDP
- drm/amdgpu/hdp4.0: do a posting read when flushing HDP
- drm/amdgpu/hdp5.0: do a posting read when flushing HDP
- x86/cpu/intel: Switch to new Intel CPU model defines
- x86/cpu/intel: Drop stray FAM6 check with new Intel CPU model defines
- x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
- mm/damon: fix order of arguments in damos_before_apply tracepoint
- mm: respect mmap hint address when aligning for THP
- scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
- memblock: allow zero threshold in validate_numa_converage()
- s390/pci: Sort PCI functions prior to creating virtual busses
- s390/pci: Use topology ID for multi-function devices
- s390/pci: Ignore RID for isolated VFs
- s390/pci: Fix SR-IOV for PFs initially in standby
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
- s390/pci: Fix handling of isolated VFs
- ext4: partial zero eof block on unaligned inode size extension
- crypto: ecdsa - Convert byte arrays with key coordinates to digits
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
- crypto: ecdsa - Rename keylen to bufsize where necessary
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
- crypto: ecdsa - Avoid signed integer overflow on signature decoding
- ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
- cleanup: Adjust scoped_guard() macros to avoid potential warning
- gpio: free irqs that are still requested when the chip is being removed
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035
- media: uvcvideo: Force UVC version to 1.0a for 0408:4033
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
- drm/amd/display: skip disable CRTC in seemless bootup case
- drm/amd/display: disable SG displays on cyan skillfish
- wifi: mac80211: Add non-atomic station iterator
- accel/qaic: Add AIC080 support
- mptcp: annotate data-races around subflow->fully_established
- net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
- drm/amd/display: Prune Invalid Modes For HDMI Output
- i2c: i801: Add support for Intel Arrow Lake-H
- i2c: i801: Add support for Intel Panther Lake
- Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
- Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
- Bluetooth: btusb: Add 3 HWIDs for MT7925
- rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
- ring-buffer: Correct stale comments related to non-consuming readers
- ring-buffer: Limit time with disabled interrupts in rb_check_pages()
- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up
FDMI
- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback
- clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
- clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
- mailbox: pcc: Check before sending MCTP PCC response ACK
- remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
- remoteproc: qcom: pas: enable SAR2130P audio DSP support
- fs/ntfs3: Implement fallocate for compressed files
- fs/ntfs3: Fix warning in ni_fiemap
- regulator: qcom-rpmh: Update ranges for FTSMPS525
- usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
- usb: chipidea: udc: limit usb request length to max 16KB
- usb: chipidea: udc: create bounce buffer for problem sglist entries if
possible
- iio: adc: ad7192: Convert from of specific to fwnode property handling
- iio: adc: ad7192: properly check spi_get_device_match_data()
- usb: typec: ucsi: add callback for connector status updates
- usb: typec: ucsi: glink: move GPIO reading into connector_status callback
- usb: typec: ucsi: add update_connector callback
- usb: typec: ucsi: glink: set orientation aware if supported
- usb: typec: ucsi: glink: be more precise on orientation-aware ports
- usb: typec: ucsi: glink: fix off-by-one in connector_status
- usb: typec: ucsi: Set orientation as none when connector is unplugged
- nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
- Revert "nvme: make keep-alive synchronous operation"
- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack
- irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
- [Config] updateconfigs for HISILICON_ERRATUM_162100801
- drm/amd/display: Add option to retrieve detile buffer size
- btrfs: drop unused parameter options from open_ctree()
- btrfs: drop unused parameter data from btrfs_fill_super()
- btrfs: fix mount failure due to remount races
- net/mlx5: unique names for per device caches
- s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
- ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
- softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
- Upstream stable to v6.6.65, v6.6.66, v6.12.4, v6.12.5
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-41932
- sched: fix warning in sched_setaffinity
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57872
- scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56588
- scsi: hisi_sas: Create all dump files during debugfs initialization
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47794
- bpf: Prevent tailcall infinite loop caused by freplace
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56599
- wifi: ath10k: avoid NULL pointer error during sdio remove
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56607
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56608
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56609
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56782
- ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48876
- stackdepot: fix stack_depot_save_flags() in NMI context
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56620
- scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56621
- scsi: ufs: core: Cancel RTC work during ufshcd_remove()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-49569
- nvme-rdma: unquiesce admin_q before destroy it
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56632
- nvme-tcp: fix the memleak while create new ctrl failed
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56647
- net: Fix icmp host relookup triggering ip_rt_bug
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56775
- drm/amd/display: Fix handling of plane refcount
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56561
- PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56550
- s390/stacktrace: Use break instead of return statement
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56771
- mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56568
- iommu/arm-smmu: Defer probe of clients after smmu device bound
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56772
- kunit: string-stream: Fix a UAF bug in kunit_init_suite()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56773
- kunit: Fix potential null dereference in kunit_device_driver_test()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56580
- media: qcom: camss: fix error path on configuration of power domains
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56583
- sched/deadline: Fix warning in migrate_enable for boosted tasks
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56611
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a
MM
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56613
- sched/numa: fix memory leak due to the overwritten vma->numab_state
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56584
- io_uring/tctx: work around xa_store() allocation error issue
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56781
- powerpc/prom_init: Fixup missing powermac #size-cells
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56785
- MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56585
- LoongArch: Fix sleeping in atomic context for PREEMPT_RT
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-41935
- f2fs: fix to shrink read extent node in batches
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-43098
- i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to
avoid deadlock
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-45828
- i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56586
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56587
- leds: class: Protect brightness_show() with led_cdev->led_access mutex
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56786
- bpf: put bpf_link's program when link is safe to be deallocated
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47141
- pinmux: Use sequential access to access desc->pinmux data
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56589
- scsi: hisi_sas: Add cond_resched() for no forced preemption model
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56590
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56592
- bpf: Call free_htab_elem() after htab_unlock_bucket()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56593
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in
brcmf_sdiod_sglist_rw()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56594
- drm/amdgpu: set the right AMDGPU sg segment limitation
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57843
- virtio-net: fix overflow inside virtnet_rq_alloc
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56596
- jfs: fix array-index-out-of-bounds in jfs_readdir
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47143
- dma-debug: fix a possible deadlock on radix_lock
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56601
- net: inet: do not leave a dangling sk pointer in inet_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56602
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56603
- net: af_can: do not leave a dangling sk pointer in can_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56604
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56605
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in
l2cap_sock_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56606
- af_packet: avoid erroring out after sock_init_data() in packet_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47809
- dlm: fix possible lkb_resource null dereference
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48873
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
* Missing support for USB-C Apple Magic Trackpad (LP: #2098063) // Noble
update: upstream stable patchset 2025-03-12 (LP: #2102118)
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56787
- soc: imx8m: Probe the SoC driver as platform driver
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56610
- kcsan: Turn report_filterlist_lock into a raw_spinlock
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48875
- btrfs: don't take dev_replace rwsem on task already holding it
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57849
- s390/cpum_sf: Handle CPU hotplug remove during sampling
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57876
- drm/dp_mst: Fix resetting msg rx state after topology removal
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56616
- drm/dp_mst: Fix MST sideband message body length check
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48881
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56619
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56622
- scsi: ufs: core: sysfs: Prevent div by zero
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56623
- scsi: qla2xxx: Fix use after free on unload
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57874
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56625
- can: dev: can_set_termination(): allow sleeping GPIOs
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56626
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56628
- LoongArch: Add architecture specific huge_pte_clear()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56629
- HID: wacom: fix when get product name maybe null pointer
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56631
- scsi: sg: Fix slab-use-after-free read in sg_release()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-50051
- spi: mpc52xx: Add cancel_work_sync before module remove
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56633
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56565
- f2fs: fix to drop all discards after creating snapshot on lvm device
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56634
- gpio: grgpio: Add NULL check in grgpio_probe
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56635
- net: avoid potential UAF in default_operstate()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56636
- geneve: do not assume mac header is set in geneve_xmit_skb()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56637
- netfilter: ipset: Hold module reference while requesting a module
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56638
- netfilter: nft_inner: incorrect percpu area handling under softirq
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-52332
- igb: Fix potential invalid memory access in igb_init_module()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56640
- net/smc: fix LGR and link use-after-free issue
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56641
- net/smc: initialize close_work early to avoid warning
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56643
- dccp: Fix memory leak in dccp_feat_change_recv
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56644
- net/ipv6: release expired exception dst cached in socket
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56645
- can: j1939: j1939_session_new(): fix skb reference counting
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56648
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56649
- net: enetc: Do not configure preemptible TCs if SIs do not support
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56783
- netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56650
- netfilter: x_tables: fix LED ID check in led_tg_check()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915)
- wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings
- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
- ASoC: Intel: sst: Support LPE0F28 ACPI HID
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
- mac80211: fix user-power when emulating chanctx
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
- bpf: fix filed access without lock
- net: usb: qmi_wwan: add Quectel RG650V
- soc: qcom: Add check devm_kasprintf() returned value
- firmware: arm_scmi: Reject clear channel request on A2P
- regulator: rk808: Add apply_bit for BUCK3 on RK809
- platform/x86: dell-smbios-base: Extends support to Alienware products
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
- ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
- tools/lib/thermal: Remove the thermal.h soft link when doing make clean
- can: j1939: fix error in J1939 documentation.
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect
fan speed
- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less
strict
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
- LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
- ARM: 9420/1: smp: Fix SMP for xip kernels
- ipmr: Fix access to mfc_cache_list without lock held
- mptcp: fix possible integer overflow in mptcp_reset_tout_timer
- arm64: probes: Disable kprobes/uprobes on MOPS instructions
- kselftest/arm64: mte: fix printf type warnings about __u64
- kselftest/arm64: mte: fix printf type warnings about longs
- s390/cio: Do not unregister the subchannel based on DNV
- s390/pageattr: Implement missing kernel_page_present()
- ext4: avoid remount errors with 'abort' mount option
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT
- m68k: mvme147: Fix SCSI controller IRQ numbers
- m68k: mvme147: Reinstate early console
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
- cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
- block: fix bio_split_rw_at to take zone_write_granularity into account
- s390/syscalls: Avoid creation of arch/arch/ directory
- ext4: remove calls to to set/clear the folio error flag
- ext4: pipeline buffer reads in mext_page_mkuptodate()
- ext4: remove array of buffer_heads from mext_page_mkuptodate()
- ext4: fix race in buffer_head read fault injection
- nvme-pci: reverse request order in nvme_queue_rqs
- virtio_blk: reverse request order in virtio_queue_rqs
- crypto: qat - remove check after debugfs_create_dir()
- firmware: google: Unregister driver_info on failure
- crypto: qat - remove faulty arbiter config reset
- thermal: core: Initialize thermal zones before registering them
- EDAC/fsl_ddr: Fix bad bit shift operations
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- crypto: cavium - Fix the if condition to exit loop after timeout
- amd-pstate: Set min_perf to nominal_perf for active mode performance gov
- crypto: hisilicon/qm - disable same error report before resetting
- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
- doc: rcu: update printed dynticks counter bits
- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
- hwmon: (pmbus/core) clear faults after setting smbalert mask
- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
- ACPI: CPPC: Fix _CPC register setting issue
- crypto: caam - add error check to caam_rsa_set_priv_key_form
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
- rcuscale: Do a proper cleanup if kfree_scale_init() fails
- tools/lib/thermal: Make more generic the command encoding function
- thermal/lib: Fix memory leak on error in thermal_genl_auto()
- x86/unwind/orc: Fix unwind for newly forked tasks
- time: Partially revert cleanup on msecs_to_jiffies() documentation
- time: Fix references to _msecs_to_jiffies() handling of values
- kcsan, seqlock: Support seqcount_latch_t
- kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
- clocksource/drivers:sp804: Make user selectable
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling
- spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
- microblaze: Export xmb_manager functions
- arm64: dts: mt8195: Fix dtbs_check error for mutex node
- arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
- arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
- ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
- mmc: mmc_spi: drop buggy snprintf()
- openrisc: Implement fixmap to fix earlycon
- efi/libstub: fix efi_parse_options() ignoring the default command line
- tpm: fix signed/unsigned bug when checking event logs
- media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
- arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
- arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
- arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
trackpad
- Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
- cgroup/bpf: only cgroup v2 can be attached by bpf programs
- regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
- arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
- pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
- arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible
- arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
- arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
- arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
- arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
- um: Unconditionally call unflatten_device_tree()
- x86/of: Unconditionally call unflatten_and_copy_device_tree()
- of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
- riscv: Fix wrong usage of __pa() on a fixmap address
- pmdomain: ti-sci: Add missing of_node_put() for args.np
- spi: tegra210-quad: Avoid shift-out-of-bounds
- spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time
- regmap: irq: Set lockdep class for hierarchical IRQ domains
- arm64: dts: renesas: hihope: Drop #sound-dai-cells
- arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
- arm64: dts: mediatek: mt6358: fix dtbs_check error
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
regulators
- selftests/resctrl: Split fill_buf to allow tests finer-grained control
- selftests/resctrl: Refactor fill_buf functions
- selftests/resctrl: Fix memory overflow due to unhandled wraparound
- selftests/resctrl: Protect against array overrun during iMC config parsing
- arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
- platform/x86: panasonic-laptop: Return errno correctly in show callback
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
- drm/vc4: hvs: Don't write gamma luts on 2711
- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
- drm/vc4: hvs: Correct logic on stopping an HVS channel
- drm/omap: Fix possible NULL dereference
- drm/omap: Fix locking in omap_gem_new_dmabuf()
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/v3d: Address race-condition in MMU flush
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
- ASoC: fsl_micfil: fix regmap_write_bits usage
- ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
- drm/bridge: anx7625: Drop EDID cache on bridge power off
- drm/bridge: it6505: Drop EDID cache on bridge power off
- libbpf: Fix expected_attach_type set handling in program load callback
- libbpf: Fix output .symtab byte-order during linking
- bpf: Fix the xdp_adjust_tail sample prog issue
- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
- ice: consistently use q_idx in ice_vc_cfg_qs_msg()
- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
- libbpf: fix sym_is_subprog() logic for weak global subprogs
- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
- libbpf: never interpret subprogs in .text as entry programs
- netdevsim: copy addresses for both in and out paths
- drm/bridge: tc358767: Fix link properties discovery
- selftests/bpf: Fix msg_verify_data in test_sockmap
- selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
- drm: fsl-dcu: enable PIXCLK on LS1021A
- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
- drm/msm/dpu: drop LM_3 / LM_4 on SDM845
- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
- selftests/bpf: fix test_spin_lock_fail.c's global vars usage
- drm/panfrost: Remove unused id_mask from struct panfrost_model
- bpf, arm64: Remove garbage frame for struct_ops trampoline
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/msm/gpu: Check the status of registration to PM QoS
- drm/etnaviv: Request pages from DMA32 zone on addressing_limited
- drm/etnaviv: hold GPU lock across perfmon sampling
- wifi: wfx: Fix error handling in wfx_core_init()
- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
- bpf, bpftool: Fix incorrect disasm pc
- drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
- drm: use ATOMIC64_INIT() for atomic64_t
- netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
- netfilter: nf_tables: must hold rcu read lock while iterating expression
type list
- netfilter: nf_tables: skip transaction if update object is not implemented
- netfilter: nf_tables: must hold rcu read lock while iterating object type
list
- netlink: typographical error in nlmsg_type constants definition
- selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
- selftests/bpf: Fix SENDPAGE data logic in test_sockmap
- selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
- selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
- bpf, sockmap: Several fixes to bpf_msg_push_data
- bpf, sockmap: Fix sk_msg_reset_curr
- sock_diag: add module pointer to "struct sock_diag_handler"
- sock_diag: allow concurrent operations
- sock_diag: allow concurrent operation in sock_diag_rcv_msg()
- net: use unrcu_pointer() helper
- selftests: net: really check for bg process completion
- drm/amdkfd: Fix wrong usage of INIT_WORK()
- bpf: Force uprobe bpf program to always return 0
- net: rfkill: gpio: Add check for clk_enable()
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock
- wireguard: selftests: load nf_conntrack if not present
- cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
- clk: mediatek: drop two dead config options
- [Config] drop COMMON_CLK_MT8195_AUDSYS and COMMON_CLK_MT8195_MSDC
- trace/trace_event_perf: remove duplicate samples on the first tracepoint
event
- pinctrl: zynqmp: drop excess struct member description
- scsi: hisi_sas: Enable all PHYs that are not disabled by user during
controller reset
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
- mfd: da9052-spi: Change read-mask to write-mask
- cpufreq: loongson2: Unregister platform_driver on failure
- powerpc/fadump: Refactor and prepare fadump_cma_init for late init
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
- mtd: rawnand: atmel: Fix possible memory leak
- mtd: rawnand: fix double free in atmel_pmecc_create_user()
- mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in
RD_ANY_REG_OP
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
- RDMA/rxe: Set queue pair cur_qp_state when being queried
- RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
- clk: imx: lpcg-scu: SW workaround for errata (e10858)
- clk: imx: fracn-gppll: correct PLL initialization flow
- clk: imx: fracn-gppll: fix pll power up
- clk: imx: clk-scu: fix clk enable state save and restore
- clk: imx: imx8-acm: Fix return value check in
clk_imx_acm_attach_pm_domains()
- iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
- iommu/vt-d: Fix checks and print in pgtable_walk()
- checkpatch: check for missing Fixes tags
- checkpatch: always parse orig_commit in fixes tag
- mfd: rt5033: Fix missing regmap_del_irq_chip()
- fs/proc/kcore.c: fix coccinelle reported ERROR instances
- scsi: fusion: Remove unused variable 'rc'
- scsi: sg: Enable runtime power management
- x86/tdx: Introduce wrappers to read and write TD metadata
- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
- x86/tdx: Dynamically disable SEPT violations from causing #VEs
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- dax: delete a stale directory pmem
- KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending
doorbells
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
- powerpc/kexec: Fix return of uninitialized variable
- IB/mlx5: Allocate resources just before first QP/SRQ is created
- clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
- clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
- dt-bindings: clock: axi-clkgen: include AXI clk
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock
- arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
- pinctrl: k210: Undef K210_PC_DEFAULT
- smb: cached directories can be more than root file handle
- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
- perf cs-etm: Don't flush when packet_queue fills up
- gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
- gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
- gfs2: Allow immediate GLF_VERIFY_DELETE work
- gfs2: Fix unlinked inode cleanup
- perf stat: Close cork_fd when create_perf_stat_counter() failed
- perf stat: Fix affinity memory leaks on error path
- perf trace: Keep exited threads for summary
- perf test attr: Add back missing topdown events
- f2fs: compress: fix inconsistent update of i_blocks in
release_compress_blocks and reserve_compress_blocks
- perf probe: Fix libdw memory leak
- perf probe: Correct demangled symbols in C++ program
- rust: macros: fix documentation of the paste! macro
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
- PCI: cpqphp: Fix PCIBIOS_* return value confusion
- perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
- f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
- f2fs: check curseg->inited before write_sum_page in change_curseg
- f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or
GC_URGENT_MID
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
- PCI: cadence: Set cdns_pcie_host_init() global
- PCI: j721e: Add reset GPIO to struct j721e_pcie
- PCI: j721e: Use T_PERST_CLK_US macro
- PCI: j721e: Add suspend and resume support
- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
- f2fs: fix to avoid forcing direct write to use buffered IO on inline_data
inode
- perf trace: avoid garbage when not printing a trace event's arguments
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
- m68k: coldfire/device.c: only build FEC when HW macros are defined
- perf list: Fix topic and pmu_name argument order
- perf trace: Fix tracing itself, creating feedback loops
- perf trace: Do not lose last events in a race
- perf trace: Avoid garbage when not printing a syscall's arguments
- remoteproc: qcom: pas: add minidump_id to SM8350 resources
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
- remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
- NFSD: Fix nfsd4_shutdown_copy()
- hwmon: (tps23861) Fix reporting of negative temperatures
- vdpa/mlx5: Fix suboptimal range on iotlb iteration
- selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
- gpio: zevio: Add missed label initialisation
- fs_parser: update mount_api doc to match function signature
- LoongArch: Fix build failure with GCC 15 (-std=gnu23)
- LoongArch: BPF: Sign-extend return values
- power: supply: core: Remove might_sleep() from power_supply_put()
- power: supply: bq27xxx: Fix registers of bq27426
- power: supply: rt9471: Fix wrong WDT function regfield declaration
- power: supply: rt9471: Use IC status regfield to report real charger status
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
configuration
- net: microchip: vcap: Add typegroup table terminators in kunit tests
- net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
- net: mdio-ipq4019: add missing error check
- marvell: pxa168_eth: fix call balance of pep->clk handling routines
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
- octeontx2-af: RPM: Fix mismatch in lmac type
- octeontx2-af: RPM: Fix low network performance
- octeontx2-pf: Reset MAC stats during probe
- octeontx2-af: RPM: fix stale RSFEC counters
- octeontx2-af: RPM: fix stale FCFEC counters
- octeontx2-af: Quiesce traffic before NIX block reset
- spi: atmel-quadspi: Fix register name in verbose logging function
- net: hsr: fix hsr_init_sk() vs network/transport headers.
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- bnxt_en: Refactor bnxt_ptp_init()
- bnxt_en: Unregister PTP during PCI shutdown and suspend
- llc: Improve setsockopt() handling of malformed user input
- rxrpc: Improve setsockopt() handling of malformed user input
- tcp: Fix use-after-free of nreq in reqsk_timer_handler().
- ip6mr: fix tables suspicious RCU usage
- ipmr: fix tables suspicious RCU usage
- iio: light: al3010: Fix an error handling path in al3010_probe()
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
- usb: yurex: make waiting on yurex_write interruptible
- USB: chaoskey: fail open after removal
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock
- misc: apds990x: Fix missing pm_runtime_disable()
- counter: stm32-timer-cnt: Add check for clk_enable()
- counter: ti-ecap-capture: Add check for clk_enable()
- ALSA: hda/realtek: Update ALC256 depop procedure
- drm/radeon: add helper rdev_to_drm(rdev)
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
- drm/radeon: Fix spurious unplug event on radeon HDMI
- apparmor: fix 'Do simple duplicate message elimination'
- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
- gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru
- gfs2: Remove and replace gfs2_glock_queue_work
- f2fs: fix fiemap failure issue when page size is 16KB
- usb: ehci-spear: fix call balance of sehci clk handling routines
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
- ext4: fix FS_IOC_GETFSMAP handling
- jfs: xattr: check invalid xattr size more strictly
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5
21MES00B00
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
- perf/x86/intel/pt: Fix buffer full but size is 0 case
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit
- KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
- KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
- fsnotify: fix sending inotify event with unexpected filename
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
- locking/lockdep: Avoid creating new name string literals in
lockdep_set_subclass()
- tools/nolibc: s390: include std.h
- pinctrl: qcom: spmi: fix debugfs drive strength
- dt-bindings: iio: dac: ad3552r: fix maximum spi speed
- exfat: fix uninit-value in __exfat_get_dentry_set
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
- Compiler Attributes: disable __counted_by for clang < 19.1.3
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- ARM: dts: omap36xx: declare 1GHz OPP as turbo again
- wifi: brcmfmac: release 'root' node in all execution paths
- Revert "usb: gadget: composite: fix OS descriptors w_value logic"
- gpio: exar: set value when external pull-up or pull-down is present
- spi: Fix acpi deferred irq probe
- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
- cifs: support mounting with alternate password to allow password rotation
- parisc/ftrace: Fix function graph tracing disablement
- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
- ubi: wl: Put source PEB into correct list if trying locking LEB failed
- dt-bindings: serial: rs485: Fix rs485-rts-delay property
- serial: 8250_fintek: Add support for F81216E
- serial: 8250: omap: Move pm_runtime_get_sync
- iio: gts: Fix uninitialized symbol 'ret'
- ublk: fix ublk_ch_mmap() for 64K page size
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
- block: fix missing dispatching request when queue is started or unquiesced
- block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding
- blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
- media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
- ALSA: ump: Fix evaluation of MIDI 1.0 FB info
- ALSA: hda/realtek: Update ALC225 depop procedure
- ALSA: hda/realtek: Fixup ALC225 depop procedure
- ALSA: hda/realtek: Set PCBeep to default value for ALC274
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
- ALSA: hda/realtek: Apply quirk for Medion E15433
- smb3: request handle caching when caching directories
- smb: client: handle max length for SMB symlinks
- cifs: Add tracing for the cifs_tcon struct refcounting
- usb: dwc3: gadget: Fix checking for number of TRBs left
- ublk: fix error code for unsupported command
- lib: string_helpers: silence snprintf() output truncation warning
- um: Fix the return value of elf_core_copy_task_fpregs
- um: Always dump trace for specified task in show_stack
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
- rtc: abx80x: Fix WDT bit position of the status register
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubifs: Correct the total block count by deducting journal reservation
- jffs2: fix use of uninitialized variable
- rtc: rzn1: fix BCD to rtc_time conversion errors
- nvme-multipath: prepare for "queue-depth" iopolicy
- nvme-multipath: implement "queue-depth" iopolicy
- nvme-multipath: avoid hang on inaccessible namespaces
- nvme/multipath: Fix RCU list traversal to use SRCU primitive
- block: return unsigned int from bdev_io_min
- 9p/xen: fix init sequence
- perf/arm-smmuv3: Fix lockdep assert in ->event_init()
- perf/arm-cmn: Ensure port and device id bits are set properly
- smb: client: disable directory caching when dir_cache_timeout is zero
- cifs: Fix parsing native symlinks relative to the export
- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE
session
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
- init/modpost: conditionally check section mismatch to __meminit*
- Rename .data.unlikely to .data..unlikely
- Rename .data.once to .data..once to fix resetting WARN*_ONCE
- modpost: remove incorrect code in do_eisa_entry()
- cifs: during remount, make sure passwords are in sync
- cifs: unlock on error in smb3_reconfigure()
- nfs: ignore SB_RDONLY when mounting nfs
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
- xfs: remove unknown compat feature check in superblock write validation
- btrfs: don't loop for nowait writes when checking for cross references
- md/md-bitmap: Add missing destroy_work_on_stack()
- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
- arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
- media: verisilicon: av1: Fix reference video buffer pointer assignment
- media: platform: exynos4-is: Fix an OF node reference leak in
fimc_md_is_isp_available
- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
- media: uvcvideo: Stop stream during unregister
- maple_tree: refine mas_store_root() on storing NULL
- vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
- zram: clear IDLE flag after recompression
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
- leds: lp55xx: Remove redundant test for invalid channel number
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3
- ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
- ARM: 9430/1: entry: Do a dummy read from VMAP shadow
- ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
- ceph: extract entity name from device id
- util_macros.h: fix/rework find_closest() macros
- scsi: ufs: exynos: Fix hibern8 notify callbacks
- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
- PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
- PCI: keystone: Add link up check to ks_pcie_other_map_bus()
- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
- fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful
iov_iter_zero
- thermal: int3400: Fix reading of current_uuid for active policy
- leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error
paths
- ovl: properly handle large files in ovl_security_fileattr
- dm: Fix typo in error message
- dm thin: Add missing destroy_work_on_stack()
- PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
- PCI: rockchip-ep: Fix address translation unit programming
- iio: accel: kx022a: Fix raw read format
- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
- iio: gts: fix infinite loop for gain_to_scaletables()
- powerpc: Fix stack protector Kconfig test for clang
- powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
- udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap
- drm/mediatek: Fix child node refcount handling in early exit
- drm/etnaviv: flush shader L1 cache after user commandstream
- drm: xlnx: zynqmp_dpsub: fix hotplug detection
- drm/amdkfd: Use the correct wptr size
- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu
v13.0.7
- posix-timers: Target group sigqueue to current task only if not exiting
- wifi: cfg80211: Add wiphy_delayed_work_pending()
- wifi: mac80211: Convert color collision detection to wiphy work
- spi: stm32: fix missing device mode capability in stm32mp25
- usb: typec: use cleanup facility for 'altmodes_node'
- platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
- integrity: Avoid -Wflex-array-member-not-at-end warnings
- integrity: Use static_assert() to check struct sizes
- ASoC: max9768: Fix event generation for playback mute
- ARM: 9434/1: cfi: Fix compilation corner case
- drm/amd/display: Skip Invalid Streams from DSC Policy
- drm/amd/display: Fix DSC-re-computing
- drm/amd/display: Fix incorrect DSC recompute trigger
- s390/facilities: Fix warning about shadow of global variable
- cachefiles: Fix incorrect length return value in
cachefiles_ondemand_fd_write_iter()
- thermal: core: Drop thermal_zone_device_is_enabled()
- thermal: core: Synchronize suspend-prepare and post-suspend actions
- thermal: core: Rearrange PM notification code
- thermal: core: Represent suspend-related thermal zone flags as bits
- thermal: core: Mark thermal zones as initializing to start with
- thermal: core: Fix race between zone registration and system suspend
- crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
- sched/cpufreq: Ensure sd is rebuilt for EAS check
- cleanup: Remove address space of returned pointer
- ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash
- arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy
- scripts/kernel-doc: Do not track section counter across processed files
- arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region
- scripts/kernel-doc: add modeline for vim users
- scripts/kernel-doc: simplify function printing
- scripts/kernel-doc: separate out function signature
- scripts/kernel-doc: simplify signature printing
- doc: kerneldoc.py: fix indentation
- kernel-doc: allow object-like macros in ReST output
- arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status
- arm64: dts: rockchip: Remove 'enable-active-low' from two boards
- arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers
- dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries
- pwm: Assume a disabled PWM to emit a constant inactive output
- drm/imagination: Convert to use time_before macro
- drm/imagination: Use pvr_vm_context_get()
- drm/v3d: Flush the MMU before we supply more memory to the binner
- drm/amdgpu: Fix JPEG v4.0.3 register write
- ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios
- wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled
- selftests/bpf: netns_new() and netns_free() helpers.
- selftests/bpf: Fix backtrace printing for selftests crashes
- selftests/bpf: add missing header include for htons
- drm/vc4: hdmi: Increase audio MAI fifo dreq threshold
- drm/vc4: Introduce generation number enum
- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
- drm/vc4: Correct generation check in vc4_hvs_lut_load
- bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable
- drm/panfrost: Add missing OPP table refcnt decremental
- selftests: netfilter: Fix missing return values in conntrack_dump_flush
- Bluetooth: btintel: Do no pass vendor events to stack
- Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
- Bluetooth: ISO: Use kref to track lifetime of iso_conn
- Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending
- Bluetooth: hci_conn: Use __counted_by() to avoid -Wfamnae warning
- Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync()
- Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending
- Bluetooth: ISO: Send BIG Create Sync via hci_sync
- Bluetooth: iso: Fix circular lock in iso_conn_big_sync
- net: txgbe: remove GPIO interrupt controller
- net: txgbe: fix null pointer to pcs
- RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages
- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset
- iommu/amd: Remove amd_iommu_domain_update() from page table freeing
- iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Modify debugfs name
- leds: max5970: Fix unreleased fwnode_handle in probe function
- kasan: move checks to do_strncpy_from_user
- kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- rust: kernel: add srctree-relative doclinks
- rust: kernel: fix THIS_MODULE header path in ThisModule doc comment
- i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
- remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()
- remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS
- f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow
- vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()
- exfat: fix file being changed by unaligned direct write
- bnxt_en: Set backplane link modes correctly for ethtool
- devres: Fix page faults when tracing devres from unloaded modules
- usb: gadget: uvc: wake pump everytime we update the free list
- drm/xe/ufence: Wake up waiters after setting ufence->signalled
- net_sched: sch_fq: don't follow the fast path if Tx is behind now
- ASoC: da7213: Populate max_register to regmap_config
- KVM: x86: switch hugepage recovery thread to vhost_task
- kvm: defer huge page recovery vhost task to later
- KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking
- KVM: arm64: Change kvm_handle_mmio_return() return polarity
- dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with
fallbacks
- xhci: Fix control transfer error on Etron xHCI host
- xhci: Combine two if statements for Etron xHCI host
- xhci: Don't perform Soft Retry for Etron xHCI host
- xhci: Don't issue Reset Device command to Etron xHCI host
- mtd: spi-nor: core: replace dummy buswidth from addr to data
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
- RISC-V: Scalar unaligned access emulated on hotplug CPUs
- serial: amba-pl011: Fix RX stall when DMA is used
- serial: amba-pl011: fix build regression
- i40e: Fix handling changed priv flags
- netdev-genl: Hold rcu_read_lock in napi_get
- usb: misc: ljca: set small runtime autosuspend delay
- usb: misc: ljca: move usb_autopm_put_interface() after wait for response
- blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs
- block: model freeze & enter queue as lock for supporting lockdep
- block: always verify unfreeze lock on the owner task
- x86/Documentation: Update algo in init_size description of boot protocol
- kbuild: deb-pkg: Don't fail if modules.order is missing
- tools/power turbostat: Fix trailing '\n' parsing
- block: don't verify IO lock for freeze/unfreeze in elevator_init_mq()
- zram: permit only one post-processing operation at a time
- perf jevents: Don't stop at the first matched pmu when searching a events
table
- docs: media: update location of the media patches
- Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of
setup_vmcs_config()"
- soc: fsl: cpm1: qmc: Fix blank line and spaces
- soc: fsl: cpm1: qmc: Re-order probe() operations
- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
- x86/mm: Carve out INVLPG inline asm for use by others
- ALSA: hda/realtek: Enable mic on Vaio VJFH52
- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing
logic
- sched: Initialize idle tasks only once
- Upstream stable to v6.6.64, v6.11.11, v6.12.1, v6.12.2, v6.12.3
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53222
- zram: fix NULL pointer in comp_algorithm_show()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53169
- nvme-fabrics: fix kernel crash while shutting down controller
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56721
- x86/CPU/AMD: Terminate the erratum_1386_microcode array
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53187
- io_uring: check for overflows in io_pin_pages
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53147
- exfat: fix out-of-bounds access of directory entries
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53196
- KVM: arm64: Don't retire aborted MMIO instruction
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56685
- ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53201
- drm/amd/display: Fix null check for pipe_ctx->plane_state in
dcn20_program_pipe
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53203
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53209
- bnxt_en: Fix receive ring space parameters when XDP is active
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56742
- vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53216
- nfsd: release svc_expkey/svc_export with rcu_work
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53219
- virtiofs: use pages instead of pointer for kernel direct IO
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53221
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53228
- riscv: kvm: Fix out-of-bounds array access
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53232
- iommu/s390: Implement blocking domain
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53236
- xsk: Free skb when TX metadata options are invalid
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56703
- ipv6: Fix soft lockups in fib6_select_path under high next hop churn
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56540
- accel/ivpu: Prevent recovery invocation during probe and resume
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53163
- crypto: qat/qat_420xx - fix off by one in uof_get_name()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56755
- netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56549
- cachefiles: Fix NULL pointer dereference in object->file
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56551
- drm/amdgpu: fix usage slab after free
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56776
- drm/sti: avoid potential dereference of error pointers
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56777
- drm/sti: avoid potential dereference of error pointers in
sti_gdp_atomic_check
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56778
- drm/sti: avoid potential dereference of error pointers in
sti_hqvdp_atomic_check
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56557
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56779
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56558
- nfsd: make sure exp active before svc_export_show
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56562
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56566
- mm/slub: Avoid list corruption when removing a slab from the full list
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-57838
- s390/entry: Mark IRQ entries to fix stack depot warnings
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56567
- ad7780: fix division by zero in ad7780_write_raw()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56569
- ftrace: Fix regression with module command in stack_trace_filter
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56570
- ovl: Filter invalid inodes with missing lookup function
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56572
- media: platform: allegro-dvt: Fix possible memory leak in
allocate_buffers_internal()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56573
- efi/libstub: Free correct pointer on failure
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56574
- media: ts2020: fix null-ptr-deref in ts2020_probe()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56575
- media: imx-jpeg: Ensure power suppliers be suspended before detach them
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56576
- media: i2c: tc358743: Fix crash in the probe error path when using polling
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56577
- media: mtk-jpeg: Fix null-ptr-deref during unload module
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56578
- media: imx-jpeg: Set video drvdata before register video device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56579
- media: amphion: Set video drvdata before register video device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56581
- btrfs: ref-verify: fix use-after-free after invalid ref action
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56774
- btrfs: add a sanity check for btrfs root in btrfs_search_slot()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56780
- quota: flush quota_release_work upon quota writeback
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53168
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56688
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56729
- smb: Initialize cfid->tcon before performing network ops
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56704
- 9p/xen: fix release of IRQ
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53171
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53172
- ubi: fastmap: Fix duplicate slab cache names while attaching
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56739
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53173
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53145
- um: Fix potential integer overflow during physmem setup
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53174
- SUNRPC: make sure cache entry active before cache_show
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53146
- NFSD: Prevent a potential integer overflow
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53175
- ipc: fix memleak if msg_init_ns failed in create_ipc_ns
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56692
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56698
- usb: dwc3: gadget: Fix looping of queued SG entries
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56687
- usb: musb: Fix hardware lockup on first Rx endpoint request
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53176
- smb: During unmount, ensure all cached dir instances drop their dentry
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53177
- smb: prevent use-after-free due to open_cached_dir error paths
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53178
- smb: Don't leak cfid when reconnect races with open_cached_dir
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53180
- ALSA: pcm: Add sanity NULL check for the default mmap fault handler
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56700
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2022-49034
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53181
- um: vector: Do not use drvdata in release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53183
- um: net: Do not use drvdata in release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53184
- um: ubd: Do not use drvdata in release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53185
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53188
- wifi: ath12k: fix crash when unbinding
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53190
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of
failures
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53191
- wifi: ath12k: fix warning when unbinding
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56741
- apparmor: test: Fix memory leak for aa_unpack_strdup()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53148
- comedi: Flush partial mappings in error case
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53194
- PCI: Fix use-after-free of slot->bus on hot remove
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53195
- KVM: arm64: Get rid of userspace_irqchip_in_use
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53197
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
devices
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-42122
- drm/amd/display: Add NULL pointer check for kzalloc
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-49906
- drm/amd/display: Check null pointer before try to access it
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53150
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53198
- xen: Fix the issue of resource not being properly released in
xenbus_dev_probe()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53200
- drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53202
- firmware_loader: Fix possible resource leak in fw_log_firmware_info()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53208
- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53210
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53213
- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53214
- vfio/pci: Properly hide first-in-list PCIe extended capability
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53215
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53217
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56689
- PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53151
- svcrdma: Address an integer overflow
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53218
- f2fs: fix race in concurrent f2fs_stop_gc_thread
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56744
- f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53220
- f2fs: fix to account dirty data in __get_secs_required()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56745
- PCI: Fix reset_method_store() memory leak
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53223
- clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53154
- clk: clk-apple-nco: Add NULL check in applnco_probe
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53224
- RDMA/mlx5: Move events notifier registration to be after device registration
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56746
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53155
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53226
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56747
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56748
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53229
- RDMA/rxe: Fix the qp flush warnings in req
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56722
- RDMA/hns: Fix cpu stuck caused by printings during reset
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53230
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53231
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56701
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56678
- powerpc/mm/fault: Fix kfence page fault reporting
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56677
- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56723
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56724
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56691
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53233
- unicode: Fix utf8_load() error path
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56694
- bpf: fix recursive lock when verdict program return SK_PASS
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53234
- erofs: handle NONHEAD !delta[1] lclusters gracefully
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53239
- ALSA: 6fire: Release resources at card release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56531
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56532
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56533
- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56751
- ipv6: release nexthop on device removal
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56720
- bpf, sockmap: Several fixes to bpf_msg_pop_data
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56538
- drm: zynqmp_kms: Unplug DRM device before removal
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56752
- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56725
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56707
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56726
- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56727
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56728
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56679
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_config_scan()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56543
- wifi: ath12k: Skip Rx TID cleanup for self peer
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56683
- drm/vc4: hdmi: Avoid hang with debug registers when suspended
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56545
- HID: hyperv: streamline driver probe to avoid devres issues
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56705
- media: atomisp: Add check for rgby_data memory allocation failure
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53157
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53158
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56546
- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56681
- crypto: bcm - add error check in the ahash_hmac_init function
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53160
- rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56708
- EDAC/igen6: Avoid segmentation fault on module unload
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56690
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
-EBUSY
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53161
- EDAC/bluefield: Fix potential integer overflow
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53162
- crypto: qat/qat_4xxx - fix off by one in uof_get_name()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56754
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56756
- nvme-pci: fix freeing of the HMB descriptor table
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53142
- initramfs: avoid filename buffer overrun
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56693
- brd: defer automatic disk creation until module initialization succeeds
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-44955
- drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-49899
- drm/amd/display: Initialize denominators' default to 1
* Noble update: upstream stable patchset 2025-03-06 (LP: #2101042)
- sctp: fix possible UAF in sctp_v6_available()
- net: vertexcom: mse102x: Fix tx_bytes calculation
- drm/rockchip: vop: Fix a dereferenced before check warning
- mptcp: error out earlier on disconnect
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
- net/mlx5: fs, lock FTE when checking if active
- net/mlx5e: kTLS, Fix incorrect page refcounting
- net/mlx5e: clear xdp features on non-uplink representors
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
- virtio/vsock: Fix accept_queue memory leak
- Bluetooth: btintel: Direct exception event to bluetooth stack
- net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
hnodes.
- samples: pktgen: correct dev to DEV
- net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
- net: Make copy_safe_from_sockptr() match documentation
- stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
- net: ti: icssg-prueth: Fix 1 PPS sync
- bonding: add ns target multicast address to slave device
- ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
- x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
- ocfs2: uncache inode which has failed entering the group
- vdpa: solidrun: Fix UB bug with devres
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
- vp_vdpa: fix id_table array not null terminated error
- ima: fix buffer overrun in ima_eventdigest_init_common
- KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
- KVM: x86: Unconditionally set irr_pending when updating APICv state
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
CONFIG_BROKEN
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- nommu: pass NULL argument to vma_iter_prealloc()
- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
- ocfs2: fix UBSAN warning in ocfs2_verify_volume()
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- LoongArch: Fix early_numa_add_cpu() usage for FDT systems
- LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
- LoongArch: Make KASAN work with 5-level page-tables
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
- mmc: sunxi-mmc: Fix A100 compatible description
- drm/bridge: tc358768: Fix DSI command tx
- pmdomain: imx93-blk-ctrl: correct remove path
- nouveau: fw: sync dma after setup is called.
- drm/amd: Fix initialization mistake for NBIO 7.7.0
- drm/amd/display: Adjust VSDB parser for replay feature
- lib/buildid: Fix build ID parsing logic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- mptcp: add userspace_pm_lookup_addr_by_id helper
- mptcp: update local address flags when setting it
- mptcp: hold pm lock when deleting entry
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: pm: use _rcu variant under rcu_read_lock
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- mm: unconditionally close VMAs on error
- mm: refactor map_deny_write_exec()
- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
- mm: resolve faulty mmap_region() error path behaviour
- net/mlx5: Fix msix vectors to respect platform limit
- vsock: Fix sk_error_queue memory leak
- virtio/vsock: Improve MSG_ZEROCOPY error handling
- net: phylink: ensure PHY momentary link-fails are handled
- drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
- ARM: fix cacheflush with PAN
- drm/amd/display: Run idle optimizations at end of vblank handler
- drm/amd/display: Change some variable name of psr
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- x86/stackprotector: Work around strict Clang TLS symbol requirements
- sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
- fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
- mm/mremap: fix address wraparound in move_page_tables()
- KVM: selftests: Disable strict aliasing
- mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
- LoongArch: Add WriteCombine shadow mapping in KASAN
- drm/xe: handle flat ccs during hibernation on igpu
- pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
- pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
- nouveau: handle EBUSY and EAGAIN for GSP aux errors.
- nouveau/dp: handle retries for AUX CH transfers with GSP.
- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
- drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
- drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
- drm/amd/display: Handle dml allocation failure to avoid crash
- drm/amd/display: Fix failure to read vram info due to static BP_RESULT
- drm/xe: Restore system memory GGTT mappings
- drm/xe: improve hibernation on igpu
- net: sched: u32: Add test case for systematic hnode IDR leaks
- Upstream stable to v6.6.63, v6.11.10
* Noble update: upstream stable patchset 2025-03-04 (LP: #2100894)
- 9p: v9fs_fid_find: also lookup by inode if not found dentry
- 9p: Avoid creating multiple slab caches with the same name
- selftests/bpf: Verify that sync_linked_regs preserves subreg_def
- irqchip/ocelot: Fix trigger register address
- nvme: tcp: avoid race between queue_lock lock and destroy
- block: Fix elevator_get_default() checking for NULL q->tag_set
- HID: multitouch: Add support for B2402FVA track point
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
- iommu/arm-smmu: Clarify MMU-500 CPRE workaround
- nvme: disable CC.CRIME (NVME_CC_CRIME)
- bpf: use kvzmalloc to allocate BPF verifier environment
- crypto: api - Fix liveliness check in crypto_alg_tested
- crypto: marvell/cesa - Disable hash algorithms
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
- drm/vmwgfx: Limit display layout ioctl array size to
VMWGFX_NUM_DISPLAY_UNITS
- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
- nvme-multipath: defer partition scanning
- drm/amdkfd: Accounting pdd vram_usage for svm
- powerpc/powernv: Free name on error in opal_event_init()
- net: phy: mdio-bcm-unimac: Add BCM6846 support
- nvme-loop: flush off pending I/O while shutting down loop controller
- smb: client: Fix use-after-free of network namespace.
- nvme/host: Fix RCU list traversal to use SRCU primitive
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling
- bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
- bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
- RISCV: KVM: use raw_spinlock for critical section in imsic
- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
- LoongArch: Use "Exception return address" to comment ERA
- ASoC: fsl_micfil: Add sample rate constraint
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
- bpf: Check validity of link->type in bpf_link_show_fdinfo()
- mm: support order-1 folios in the page cache
- mm: always initialise folio->_deferred_list
- mm: refactor folio_undo_large_rmappable()
- mm/thp: fix deferred split unqueue naming and locking
- 9p: fix slab cache name creation for real
- nvmet-passthru: clear EUID/NGUID/UUID while using loop target
- pinctrl: intel: platform: Add Panther Lake to the list of supported
- s390/ap: Fix CCA crypto card behavior within protected execution environment
- selftests/bpf: Assert link info uprobe_multi count & path_size if unset
- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
- drm/xe/query: Increase timestamp width
- nvme: make keep-alive synchronous operation
- samples/landlock: Fix port parsing in sandboxer
- ASoC: Intel: avs: Update stream status in a separate thread
- ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
- netfs: Downgrade i_rwsem for a buffered write
- afs: Fix lock recursion
- HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
- LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
- drm/xe: Don't restart parallel queues multiple times on GT reset
- Upstream stable to v6.6.62, v6.11.9
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
excavator
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- ARM: dts: rockchip: fix rk3036 acodec node
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- net: enetc: set MAC address to the VF net_device
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- can: c_can: fix {rx,tx}_errors statistics
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation
fails
- ice: change q_index variable type to s16 to store -1 value
- e1000e: Remove Meteor Lake SMBUS workarounds
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: do not defer rule destruction via call_rcu
- net: arc: rockchip: fix emac mdio node support
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- media: stb0899_algo: initialize cfr before using it
- media: dvb_frontend: don't play tricks with underflow values
- media: adv7604: prevent underflow condition when reporting colorspace
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- tools/lib/thermal: Fix sampling handler context ptr
- thermal/of: support thermal zones w/o trips subnode
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
- ksmbd: count all requests in req_running counter
- ksmbd: fix broken transfers when exceeding max simultaneous operations
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- rpmsg: glink: Handle rejected intent request better
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- dm cache: correct the number of origin blocks to match the target length
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
overflow
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- mptcp: use sock_kfree_s instead of kfree
- arm64: Kconfig: Make SME depend on BROKEN for now
- [Config] updateconfigs for ARM64_SME
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- Revert "wifi: mac80211: fix RCU list iterations"
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- usb: dwc3: fix fault at system suspend if device was already runtime
suspended
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: option: add Quectel RG650V
- irqchip/gic-v3: Force propagation of the active state with a read-back
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- arm64: dts: rockchip: Designate Turing RK1's system power controller
- EDAC/qcom: Make irq configuration optional
- arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
- net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
- virtio_net: Sync rss config to device when virtnet_probe
- drm/xe: Set mask bits for CCS_MODE register
- drm/amd/display: Fix brightness level not retained over reboot
- drm/imagination: Add a per-file PVR context list
- mptcp: no admin perm to list endpoints
- btrfs: fix the length of reserved qgroup to free
- btrfs: fix per-subvolume RO/RW flags with new mount API
- clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
- clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
- objpool: fix to make percpu slot allocation more robust
- mm/damon/core: handle zero {aggregation,ops_update} intervals
- mm/damon/core: handle zero schemes apply interval
- mm/mlock: set the correct prev on failure
- clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
- staging: vchiq_arm: Get the rid off struct vchiq_2835_state
- staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
- drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
- drm/xe: Move LNL scheduling WA to xe_device.h
- drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
- drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
- xtensa: Emulate one-byte cmpxchg
- Upstream stable to v6.6.61, v6.11.8
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50270
- mm/damon/core: avoid overflow in damon_feed_loop_next_input()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50274
- idpf: avoid vport access in idpf_get_link_ksettings
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53067
- scsi: ufs: core: Start the RTC update work later
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53084
- drm/imagination: Break an object reference loop
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53085
- tpm: Lock TPM chip in tpm_pm_suspend() first
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53086
- drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53087
- drm/xe: Fix possible exec queue leak in exec IOCTL
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50288
- media: vivid: fix buffer overwrite when using > 32 buffers
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50289
- media: av7110: fix a spectre vulnerability
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53062
- media: mgb4: protect driver against spectre
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50291
- media: dvb-core: add missing buffer index check
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50297
- net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50267
- USB: serial: io_edgeport: fix use after free in debug printk
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50268
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53083
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50269
- usb: musb: sunxi: Fix accessing an released usb phy
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50271
- signal: restore the override_rlimit logic
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50272
- filemap: Fix bounds checking in filemap_read()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50273
- btrfs: reinitialize delayed ref list after deleting it from the list
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50275
- arm64/sve: Discard stale CPU state when handling SVE traps
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50276
- net: vertexcom: mse102x: Fix possible double free of TX skb
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53066
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50278
- dm cache: fix potential out-of-bounds access on the first resume
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50279
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50280
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53060
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50282
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50283
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50284
- ksmbd: Fix the missing xa_store error check
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50285
- ksmbd: check outstanding simultaneous SMB operations
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50286
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50287
- media: v4l2-tpg: prevent the risk of a division by zero
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50290
- media: cx24116: prevent overflows on SNR calculus
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53061
- media: s5p-jpeg: prevent buffer overflows
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53081
- media: ar0521: don't overflow when checking PLL values
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50292
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50294
- rxrpc: Fix missing locking causing hanging calls
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50295
- net: arc: fix the device for dma_map_single/dma_unmap_single
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53082
- virtio_net: Add hash_key_length check
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50296
- net: hns3: fix kernel crash when uninstalling driver
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53088
- i40e: fix race condition by adding filter's intermediate sync state
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50298
- net: enetc: allocate vf_state during PF probes
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50299
- sctp: properly validate chunk size in sctp_sf_ootb()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50300
- regulator: rtq2208: Fix uninitialized use of regulator_config
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50301
- security/keys: fix slab-out-of-bounds in key_task_permission
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53072
- platform/x86/amd/pmc: Detect when STB is not available
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53068
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996)
- Input: xpad - sort xpad_device by vendor and product ID
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- cgroup: Fix potential overflow issue when checking max_depth
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- RDMA/cxgb4: Dump vendor specific QP details
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the locking while accessing the QP table
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
- net: stmmac: fix TSO DMA API usage causing oops
- gtp: allow -1 to be specified as file description from userspace
- bpf: Force checkpoint when jmp history is too long
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- iomap: improve shared block detection in iomap_unshare_iter
- iomap: don't bother unsharing delalloc extents
- iomap: share iomap_unshare_iter predicate code with fsdax
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: turn iomap_want_unshare_iter into an inline function
- kasan: Fix Software Tag-Based KASAN with GCC
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
- afs: Fix missing subdir edit when renamed between parent dirs
- smb: client: set correct device number on nfs reparse points
- cxl/events: Fix Trace DRAM Event Record
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Stale inode instead of bad
- scsi: scsi_transport_fc: Allow setting rport state to current state
- cifs: Fix creating native symlinks pointing to current or parent directory
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- net: amd: mvme147: Fix probe banner message
- NFS: remove revoked delegation from server's delegation list
- misc: sgi-gru: Don't disable preemption in GRU driver
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- USB: gadget: dummy-hcd: Fix "task hung" problem
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- usbip: tools: Fix detach_port() invalid port error path
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- xhci: Fix Link TRB DMA in command ring stopped completion event
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- Revert "driver core: Fix uevent_show() vs driver detach race"
- iio: light: veml6030: fix microlux value calculation
- RISC-V: ACPI: fix early_ioremap to early_memremap
- tools/mm: -Werror fixes in page-types/slabinfo
- tools/mm: fix compile error
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- block: fix sanity checks in blk_rq_map_user_bvec
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- Input: edt-ft5x06 - fix regmap leak when probe fails
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- riscv: efi: Set NX compat flag in PE/COFF header
- riscv: Use '%u' to format the output of 'cpu'
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Remove duplicated GET_RM
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- mei: use kvmalloc for read buffer
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- x86/traps: Enable UBSAN traps on x86
- x86/traps: move kmsan check after instrumentation_begin
- kasan: remove vmalloc_percpu test
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring: always lock __io_cqring_overflow_flush
- mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
- mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
- perf trace: Fix non-listed archs in the syscalltbl routines
- dpll: add Embedded SYNC feature for a pin
- ice: add callbacks for Embedded SYNC enablement on dpll pins
- bpf: Add bpf_mem_alloc_check_size() helper
- net: ethernet: mtk_wed: fix path of MT7988 WO firmware
- drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
- drm/mediatek: Fix get efuse issue for MT8188 DPTX
- ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
- powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
- usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
- mm: shrinker: avoid memleak in alloc_shrinker_info
- firmware: microchip: auto-update: fix poll_complete() to not report spurious
timeout errors
- soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
- cxl/port: Fix CXL port initialization order when the subsystem is built-in
- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
- mm/ksm: remove redundant code in ksm_fork
- nvme: re-fix error-handling for io_uring nvme-passthrough
- btrfs: fix extent map merging not happening for adjacent extents
- btrfs: fix defrag not merging contiguous extents due to merged extent maps
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
- mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
- mm: shrink skip folio mapped by an exiting process
- mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
- drm/i915: Skip programming FIA link enable bits for MTL+
- drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
- drm/i915/dp: Clear VSC SDP during post ddi disable routine
- drm/i915/pps: Disable DPLS_GATING around pps sequence
- drm/i915: move rawclk from runtime to display runtime info
- drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
- drm/xe: Support 'nomodeset' kernel command-line option
- drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
- drm/amdgpu/swsmu: fix ordering for setting workload_mask
- drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
- drm/amdgpu: handle default profile on on devices without fullscreen 3D
- MIPS: export __cmpxchg_small()
- rcu/kvfree: Add kvfree_rcu_barrier() API
- rcu/kvfree: Refactor kvfree_rcu_queue_batch()
- Upstream stable to v6.6.60, v6.11.7
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53050
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53051
- drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50303
- resource,kexec: walk_system_ram_res_rev must retain resource flags
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50263
- fork: only invoke khugepaged, ksm hooks if no error
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50220
- fork: do not invoke uffd on fork if error occurs
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50221
- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53053
- scsi: ufs: core: Fix another deadlock during RTC update
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50225
- btrfs: fix error propagation of split bios
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50230
- nilfs2: fix kernel bug due to missing clearing of checked flag
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50238
- phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53044
- net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50304
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53048
- ice: fix crash on probe for DPLL enabled E810 LOM
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53045
- ASoC: dapm: fix bounds checker error in dapm_widget_list_create
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53055
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53046
- arm64: dts: imx8ulp: correct the flexspi compatible string
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53052
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50215
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50216
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53043
- mctp i2c: handle NULL header address
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50218
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53047
- mptcp: init: protect sched with rcu_read_lock
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50222
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50223
- sched/numa: Fix the potential null pointer dereference in task_numa_work()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50224
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50226
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50231
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53076
- iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50232
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50234
- wifi: iwlegacy: Clear stale interrupts before resuming device
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50235
- wifi: cfg80211: clear wdev->cqm_config pointer on free
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50236
- wifi: ath10k: Fix memory leak in management tx
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50237
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50239
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50240
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50242
- fs/ntfs3: Additional check in ntfs_file_release
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50243
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50244
- fs/ntfs3: Additional check in ni_clear()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50245
- fs/ntfs3: Fix possible deadlock in mi_read
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50246
- fs/ntfs3: Add rough attr alloc_size check
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50247
- fs/ntfs3: Check if more than chunk-size bytes are written
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50250
- fsdax: dax_unshare_iter needs to copy entire blocks
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50251
- netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50252
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50255
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50257
- netfilter: Fix use-after-free in get_info()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50258
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50262
- bpf: Fix out-of-bounds write in trie_get_next_key()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50259
- netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53042
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53058
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50261
- macsec: Fix use-after-free while sending the offloading packet
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53059
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
* Noble update: upstream stable patchset 2025-02-07 (LP: #2097575)
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- xfs: fix error returns from xfs_bmapi_write
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item
recovery
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: fix missing check for invalid attr flags
- xfs: check shortform attr entry flags specifically
- xfs: validate recovered name buffers when recovering xattr items
- xfs: enforce one namespace per attribute
- xfs: revert commit 44af6c7e59b12
- xfs: use dontcache for grabbing inodes during scrub
- xfs: match lock mode in xfs_buffered_write_iomap_begin()
- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
- xfs: convert delayed extents to unwritten when zeroing post eof blocks
- xfs: allow symlinks with short remote targets
- xfs: make sure sb_fdblocks is non-negative
- xfs: fix unlink vs cluster buffer instantiation race
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: join: test for prohibited MPC to port-based endp
- selftests: mptcp: remove duplicated variables
- iio: accel: bma400: Fix uninitialized variable field_value in tap event
handling.
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- bpf: devmap: provide rxq after redirect
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- bpf: Fix memory leak in bpf_core_apply
- RDMA/bnxt_re: Fix a possible memory leak
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Add a check for memory allocation
- x86/resctrl: Avoid overflow in MB settings in bw_validate()
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- bpf: Add cookie to perf_event bpf_link_info records
- bpf: fix unpopulated name_len field in perf_event link info
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: fix perf_event link info name_len assertion
- s390/pci: Handle PCI error codes other than 0x3a
- bpf: fix kfunc btf caching for modules
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- selftests/bpf: Fix cross-compiling urandom_read
- task_work: Add TWA_NMI_CURRENT as an additional notify mode.
- sched/core: Disable page allocation in task_tick_mm_cid()
- ALSA: hda/cs8409: Fix possible NULL dereference
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/srpt: Make slab cache names unique
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Fix the GID table length
- accel/qaic: Fix the for loop used to walk SG table
- drm/msm/dpu: make sure phys resources are properly initialized
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- net/smc: Fix memory leak when using percpu refs
- net: usb: usbnet: fix race in probe failure
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- octeontx2-af: Fix potential integer overflows on integer shifts
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- macsec: don't increment counters for an unrelated SA
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- net: ethernet: aeroflex: fix potential memory leak in
greth_start_xmit_gbit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- irqchip/renesas-rzg2l: Fix missing put_device
- drm/msm/dpu: don't always program merge_3d block
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- genetlink: hold RCU in genlmsg_mcast()
- ravb: Remove setting of RX software timestamp
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix OOBs when building SMB2_IOCTL request
- usb: typec: altmode should keep reference to parent
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- bpf: Fix link info netfilter flags to populate defrag flag
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- net/mlx5: Check for invalid vector index on EQ creation
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Unregister notifier on eswitch init failure
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- vsock: Update rx_bytes on read_skb()
- vsock: Update msg_count on read_skb()
- bpf, vsock: Drop static vsock_bpf_prot initialization
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- bpf: Fix iter/task tid filtering
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- khugepaged: inline hpage_collapse_alloc_folio()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: remove hpage from collapse_file()
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace
point
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- xhci: dbgtty: remove kfifo_out() wrapper
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbc: honor usb transfer size boundaries.
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/probes: Support $argN in return probe (kprobe and fprobe)
- uprobes: encapsulate preparation of uprobe args buffer
- uprobes: prepare uprobe args buffer lazily
- uprobes: prevent mutex_lock() under rcu_read_lock()
- uprobe: avoid out-of-bounds memory access of fetching args
- exec: don't WARN for racy path_noexec check
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
default regs values
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- arm64: Force position-independent veneers
- udf: refactor udf_current_aext() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor inode_bmap() to handle error
- udf: fix uninit-value use in udf_get_fileshortad
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- cifs: Validate content of NFS reparse point buffer
- platform/x86: dell-sysman: add support for alienware products
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- jfs: Fix sanity check in dbMount
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- tracing: Consider the NULL character when validating the event length
- xfrm: extract dst lookup parameters into a struct
- xfrm: respect ip protocols rules criteria when performing dst lookups
- netfilter: bpf: must hold reference on net namespace
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- net: plip: fix break; causing plip to never transmit
- octeon_ep: Implement helper for iterating packets in Rx queue
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- fsl/fman: Save device references taken in mac_probe()
- fsl/fman: Fix refcount handling of fman-related devices
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- net: wwan: fix global oob in wwan_rtnl_policy
- net/sched: adjust device watchdog timer to detect stopped queue at right
time
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net: usb: usbnet: fix name regression
- bpf: Add MEM_WRITE attribute
- bpf: Fix overloading of MEM_UNINIT's meaning
- bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
created by classifiers
- net: sched: fix use-after-free in taprio_change()
- net: sched: use RCU read-side critical section in taprio_dump()
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- net: dsa: mv88e6xxx: group cycle counter coefficients
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control
types
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- ALSA: hda/realtek: Update default depop procedure
- smb: client: Handle kstrdup failures for passwords
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
detection issue
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: arm64: Don't eagerly teardown the vgic on init error
- x86/lam: Disable ADDRESS_MASKING in most cases
- [Config] disable ADDRESS_MASKING
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- LoongArch: Get correct cores_per_package for SMT systems
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Make KASAN usable for variable cpu_vabits
- xfrm: fix one more kernel-infoleak in algo dumping
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- selinux: improve error checking in sel_write_load()
- net: phy: dp83822: Fix reset pin definitions
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- platform/x86: dell-wmi: Ignore suspend notifications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- tracing: probes: Fix to zero initialize a local variable
- task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- bpf: Use raw_spinlock_t in ringbuf
- reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
- bpf: Fix unpopulated path_size when uprobe_multi fields unset
- RDMA/bnxt_re: Fix incorrect dereference of srq in async event
- RDMA/bnxt_re: Get the toggle bits from SRQ events
- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
- ring-buffer: Fix reader locking when changing the sub buffer order
- drm/msm/dpu: Don't always set merge_3d pending flush
- drm/msm/a6xx+: Insert a fence wait before SMMU table update
- drm/xe: Take job list lock in xe_sched_add_pending_job
- drm/xe: Use bookkeep slots for external BO's in exec IOCTL
- net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
- net/mlx5e: Don't call cleanup on profile rollback failure
- bpf: Fix print_reg_state's constant scalar dump
- fsnotify: optimize the case of no parent watcher
- fsnotify: Avoid data race between fsnotify_recalc_mask() and
fsnotify_object_watched()
- drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
- objpool: fix choosing allocation for percpu slots
- bnxt_en: replace ptp_lock with irqsave variant
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
- ASoC: topology: Bump minimal topology ABI version
- fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
- btrfs: qgroup: set a more sane default value for subtree drop threshold
- btrfs: clear force-compress on remount when compress mount option is given
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
- x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
- btrfs: reject ro->rw reconfiguration if there are hard ro requirements
- xfs: don't fail repairs on metadata files with no attr fork
- drm/bridge: Fix assignment of the of_node of the parent to aux bridge
- platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
addresses
- fgraph: Fix missing unlock in register_ftrace_graph()
- fgraph: Change the name of cpuhp state to "fgraph:online"
- ASoC: SOF: Intel: hda: Always clean up link DMA during stop
- ASoC: dapm: avoid container_of() to get component
- ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
- ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
- soundwire: intel_ace2x: Send PDI stream number during prepare
- x86: support user address masking instead of non-speculative conditional
- ASoC: qcom: Select missing common Soundwire module code on SDM845
- SAUCE: Revert "iio: adc: ti-lmp92064: add missing select
IIO_(TRIGGERED_)BUFFER in Kconfig"
- Upstream stable to v6.6.58, v6.6.59, v6.11.6
* CVE-2025-21756
- vsock: Keep the binding until socket destruction
- vsock: Orphan socket after transport release
* Fix NIC name changes for ice (LP: #2100264)
- ice: Remove ndo_get_phys_port_name
* CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
* CVE-2025-21702
- pfifo_tail_enqueue: Drop new packet when sch->limit == 0
* CVE-2024-50167
- be2net: fix potential memory leak in be_xmit()
* Fix line-out playback on some platforms with Cirrus Logic “Dolphin” hardware
(LP: #2099880)
- ALSA: hda/cirrus: Correct the full scale volume set logic
* Enable Large Language Model (LLM) workloads using Intel NPU (LP: #2098972)
- accel/ivpu: Increase DMA address range
* Patchset for TUXEDO devices (LP: #2098104)
- wifi: ath12k: add fallback board name without variant while searching
board-2.bin
- wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT
- wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850
- wifi: ath12k: support default regdb while searching board-2.bin for WCN7850
- ACPI: resource: Use IRQ override on Maibenben X565
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
- nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
- nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
* Introduce and use sendpages_ok() instead of sendpage_ok() in nvme-tcp and
drbd (LP: #2093871)
- net: introduce helper sendpages_ok()
- nvme-tcp: use sendpages_ok() instead of sendpage_ok()
- drbd: use sendpages_ok() instead of sendpage_ok()
* CVE-2024-56765
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
* CVE-2025-21700
- net: sched: Disallow replacing of child qdisc from one parent to another
* CVE-2024-56615
- bpf: fix OOB devmap writes when deleting elements
* CVE-2024-56651
- can: hi311x: hi3110_can_ist(): fix potential use-after-free
* CVE-2024-56627
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
* CVE-2024-56600
- net: inet6: do not leave a dangling sk pointer in inet6_create()
* CVE-2024-56661
- tipc: fix NULL deref in cleanup_bearer()
* CVE-2024-56642
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
* CVE-2024-53227
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
* CVE-2024-53237
- Bluetooth: fix use-after-free in device_for_each_child()
* CVE-2024-53166
- block, bfq: fix bfqq uaf in bfq_limit_depth()
* CVE-2024-50265
- ocfs2: remove entry once instead of null-ptr-dereference in
ocfs2_xa_remove()
* CVE-2024-50249
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
* iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
* [Ubuntu 24.04] MultiVM - L2 guest(s) running stress-ng getting stuck at
booting after triggering crash (LP: #2077722)
- KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
spurious interrupts
* btrfs will WARN_ON() in btrfs_remove_qgroup() unnecessarily (LP: #2091719)
- btrfs: improve the warning and error message for btrfs_remove_qgroup()
* CVE-2024-50248
- ntfs3: Add bounds checking to mi_enum_attr()
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
* CVE-2025-21701
- net: avoid race between device unregistration and ethnl ops
* CVE-2024-57798
- drm/dp_mst: Ensure mst_primary pointer is valid in
drm_dp_mst_handle_up_req()
* CVE-2024-56672
- blk-cgroup: Fix UAF in blkcg_unpin_online()
* CVE-2024-56658
- net: defer final 'struct net' free in netns dismantle
* CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
* CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
* CVE-2024-53140
- netlink: terminate outstanding dump on socket close
* CVE-2024-53063
- media: dvbdev: prevent the risk of out of memory access
* CVE-2024-50302
- HID: core: zero-initialize the report buffer
[ Ubuntu-azure: 6.8.0-1026.31 ]
* noble/linux-azure: 6.8.0-1026.31 -proposed tracker (LP: #2102445)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
[ Ubuntu: 6.8.0-57.59 ]
* noble/linux: 6.8.0-57.59 -proposed tracker (LP: #2102490)
* CVE-2024-57798
- drm/dp_mst: Ensure mst_primary pointer is valid in
drm_dp_mst_handle_up_req()
* CVE-2024-56672
- blk-cgroup: Fix UAF in blkcg_unpin_online()
* CVE-2024-56658
- net: defer final 'struct net' free in netns dismantle
* CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
* CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
* CVE-2024-53140
- netlink: terminate outstanding dump on socket close
* CVE-2024-53063
- media: dvbdev: prevent the risk of out of memory access
* CVE-2024-50302
- HID: core: zero-initialize the report buffer
[ Ubuntu-azure: 6.8.0-1025.30 ]
* noble/linux-azure: 6.8.0-1025.30 -proposed tracker (LP: #2101848)
[ Ubuntu-azure: 6.8.0-1024.29 ]
* noble/linux-azure: 6.8.0-1024.29 -proposed tracker (LP: #2098215)
* Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
- [Config] azure: config updates from removal of DRM_DW_HDMI depends
* azure: Enable erofs compression configs (LP: #2098178)
- [Config] azure: Enable erofs compression configs
* Hyper-V and MANA enhancements (LP: #2098508)
- net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- net: netvsc: Update default VMBus channels
- net: mana: Enable debugfs files for MANA device
- net: mana: Cleanup "mana" debugfs dir after cleanup of all children
- net: mana: Add get_link and get_link_ksettings in ethtool
- scsi: storvsc: Set correct data length for sending SCSI command without
payload
[ Ubuntu: 6.8.0-56.58 ]
* noble/linux: 6.8.0-56.58 -proposed tracker (LP: #2098244)
* Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
- Revert "drm: Make drivers depends on DRM_DW_HDMI"
- Revert "UBUNTU: [Config] Drivers now depend on DRM_DW_HDMI"
* drm/amd/display: Add check for granularity in dml ceil/floor helpers
(LP: #2098080)
- drm/amd/display: Add check for granularity in dml ceil/floor helpers
* optimized default EPP for GNR family (LP: #2097554)
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
* Incorrect LAPIC/x2APIC parsing order (LP: #2097455)
- x86/acpi: Fix LAPIC/x2APIC parsing order
* MGLRU: page allocation failure on NUMA-enabled systems (LP: #2097214)
- mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
* Upstream commit 65357e2c164a: "RDMA/mana_ib: set node_guid" applied
incorrectly (LP: #2096885)
- Revert "RDMA/mana_ib: set node_guid"
* AppArmor early policy load not funcitoning (LP: #2095370)
- SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [67/90]: userns - add the
ability to reference a global variable for a feature value"
* apparmor unconfined profile blocks pivot_root (LP: #2067900)
- SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [81/90]: apparmor: convert easy
uses of unconfined() to label_mediates()"
* CVE-2024-50117
- drm/amd: Guard against bad data for ATIF ACPI method
* CVE-2024-56582
- btrfs: fix use-after-free in btrfs_encoded_read_endio()
* CVE-2024-53165
- sh: intc: Fix use-after-free bug in register_intc_controller()
* CVE-2024-53156
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
* CVE-2024-56663
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
* CVE-2024-56614
- xsk: fix OOB map writes when deleting elements
* VM boots slowly with large-BAR GPU Passthrough due to pci/probe.c redundancy
(LP: #2097389)
- PCI: Batch BAR sizing operations
* Noble update: upstream stable patchset 2025-02-04 (LP: #2097393)
- Revert "PCI/MSI: Provide stubs for IMS functions"
- gfs2: Revert "introduce qd_bh_get_or_undo"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "ignore negated quota changes"
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- tracing: Have saved_cmdlines arrays all in one allocation
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- ata: ahci: Add mask_port_map module parameter
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- scsi: sd: Do not repeat the starting disk message
- bootconfig: Fix the kerneldoc of _xbc_exit()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to
perf_sched__replay()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Move curr_pid and cpu_last_switched initialization to
perf_sched__{lat|map|replay}()
- libsubcmd: Don't free the usage string
- selftests: Introduce Makefile variable to list shared bash scripts
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2
compat
- drm/amd/display: Remove a redundant check in authenticated_dp
- drm/amd/display: Revert "Check HDCP returned status"
- zram: don't free statically defined names
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- rtnetlink: change nlk->cb_mutex role
- rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
- mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
- phonet: no longer hold RTNL in route_dumpit()
- rcu/nocb: Make IRQs disablement symmetric
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: asus: add ROG Z13 lightbar
- hid-asus: add ROG Ally X prod ID to quirk list
- scsi: Revert "scsi: sd: Do not repeat the starting disk message"
- btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- ksmbd: fix user-after-free from session log off
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: add missing static descriptor and inline keyword
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- udp: Compute L4 checksum as usual when not segmenting the skb
- arm64: probes: Remove broken LDR (literal) uprobe support
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Fix uprobes for big-endian kernels
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
link PHY
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- maple_tree: correct tree corruption on spanning store
- nilfs2: propagate directory read errors from nilfs_find_entry()
- fat: fix uninitialized variable
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/damon/tests/sysfs-kunit.h: fix memory leak in
damon_sysfs_test_add_targets()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- net: fec: Move `fec_ptp_read()` to the top of the file
- net: fec: Remove duplicated code
- mptcp: prevent MPC handshake on port-based signal endpoints
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- s390/sclp: Deactivate sclp after all its users
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- KVM: s390: gaccess: Check if guest address is in memslot
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/bugs: Skip RSB fill at VMEXIT
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- io_uring/sqpoll: close race on waiting for sqring entries
- blk-mq: setup queue ->tag_set before initializing hctx
- ublk: don't allow user copy for unprivileged device
- selftest: hid: add the missing tests directory
- Input: xpad - add support for MSI Claw A1M
- scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add()
- scsi: mpi3mr: Validate SAS port assignments
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Requeue aborted request
- drm/radeon: Fix encoder->possible_clones
- drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
- drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible
mode
- drm/xe/xe_sync: initialise ufence.signalled
- drm/xe/ufence: ufence can be signaled right after wait_woken
- drm/vmwgfx: Cleanup kms setup without 3d
- drm/vmwgfx: Handle surface check failure correctly
- drm/amdgpu/pm: Fix code alignment issue
- drm/amdgpu/smu13: always apply the powersave optimization
- drm/amdgpu/swsmu: Only force workload setup on init
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: hid-sensors: Fix an error handling path in
_hid_sensor_set_report_latency()
- iio: light: veml6030: fix ALS sensor resolution
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: opt3001: add missing full-scale range value
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: resolver: ad2s1210 add missing select REGMAP in Kconfig
- iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- Bluetooth: Call iso_exit() on module unload
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: btusb: Fix not being able to reconnect after suspend
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- vt: prevent kernel-infoleak in con_font_get()
- xhci: tegra: fix checked USB2 port number
- xhci: Fix incorrect stream context type macro
- xhci: Mitigate failed set dequeue pointer commands
- USB: serial: option: add support for Quectel EG916Q-GL
- USB: serial: option: add Telit FN920C04 MBIM compositions
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM
device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- serial: imx: Update mctrl old_status on RTSD interrupt
- parport: Proper fix for array out-of-bounds access
- x86/resctrl: Annotate get_mem_config() functions as __init
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- x86/bugs: Use code segment selector for VERW operand
- pinctrl: intel: platform: fix error path in device_for_each_child_node()
- pinctrl: ocelot: fix system hang on level based interrupts
- pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: apple: check devm_kasprintf() returned value
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- serial: qcom-geni: fix polled console initialisation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix shutdown race
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: fix receiver enable
- mm: vmscan.c: fix OOM on swap stress test
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
1000 G2
- Upstream stable to v6.6.57, v6.11.5
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301)
- Revert "perf callchain: Fix stitch LBR memory leaks"
- ASoC: amd: acp: add ZSC control register programming sequence
- virtio: rename virtio_config_enabled to virtio_config_core_enabled
- virtio: allow driver to disable the configure change notification
- virtio-net: synchronize operstate with admin state on up/down
- virtio-net: synchronize probe with ndo_set_features
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
- af_unix: Don't call skb_get() for OOB skb.
- af_unix: Remove single nest in manage_oob().
- af_unix: Rename unlinked_skb in manage_oob().
- af_unix: Move spin_lock() in manage_oob().
- iommu/amd: Move allocation of the top table into v1_alloc_pgtable
- iommu/amd: Set the pgsize_bitmap correctly
- drm/xe: Move and export xe_hw_engine lookup.
- drm/msm/dp: rename wide_bus_en to wide_bus_supported
- drm/msm/dp: enable widebus on all relevant chipsets
- bpf, arm64: Fix tailcall hierarchy
- libbpf: Don't take direct pointers into BTF data from st_ops
- s390/entry: Move early program check handler to entry.S
- selftests/bpf: fix to avoid __msg tag de-duplication by clang
- libbpf: Ensure new BTF objects inherit input endianness
- PCI: dwc: ep: Rename dw_pcie_ep_exit() to dw_pcie_ep_deinit()
- PCI: qcom-ep: Enable controller resources like PHY only after refclk is
available
- net: ravb: Fix maximum TX frame size for GbEth devices
- ravb: Make it clear the information relates to maximum frame size
- net: ravb: Fix R-Car RX frame size limit
- netfilter: nf_tables: missing objects with no memcg accounting
- PCI: dra7xx: Fix error handling when IRQ request fails in probe
- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- wifi: mt76: mt7925: fix a potential association failure upon resuming
- cifs: Remove intermediate object of failed create reparse call
- drm/amd/display: Disable replay if VRR capability is false
- drm/amd/display: Fix VRR cannot enable
- l2tp: free sessions using rcu
- net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
- nvme: fix metadata handling in nvme-passthrough
- wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
- x86/apic: Remove logical destination mode for 64-bit
- pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
- drm/xe: Name and document Wa_14019789679
- drm/xe: Add timeout to preempt fences
- drm/amd/display: Fix possible overflow in integer multiplication
- ext4: fix error message when rejecting the default hash
- power: supply: Drop use_cnt check from power_supply_property_is_writeable()
- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
- drm/xe: Generate oob before compiling anything
- clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
- drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- pmdomain: core: Reduce debug summary table width
- fs/ntfs3: Do not call file_modified if collapse range failed
- fs/ntfs3: Optimize large writes into sparse file
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- virtio_console: fix misc probe bugs
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- bpf: Call the missed btf_record_free() when map creation fails
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Check percpu map value size first
- s390/facility: Disable compile time optimization for decompressor code
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- bpf, x64: Fix a jit convergence issue
- ext4: nested locking for xattr inode
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ktest.pl: Avoid false positives with grub2 skip regex
- soundwire: intel_bus_common: enable interrupts before exiting reset
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- clk: bcm: bcm53573: fix OF node leak in init
- PCI: Add ACS quirk for Qualcomm SA8775P
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs
- mfd: intel-lpss: Rename SPI intel_lpss_platform_info structs
- mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
- riscv: Omit optimized string routines when using KASAN
- riscv: avoid Imbalance in RAS
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
- PCI: endpoint: Assign PCI domain number for endpoint controllers
- soundwire: cadence: re-check Peripheral status with delayed_work
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
unknown
- media: videobuf2-core: clear memory related fields in
__vb2_plane_dmabuf_put()
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- usb: chipidea: udc: enable suspend interrupt after usb reset
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
Crashkernel Scenario
- xhci: dbc: Fix STALL transfer event handling
- usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
- comedi: ni_routing: tools: Check when the file could not be opened
- LoongArch: Fix memleak in pci_acpi_scan_root()
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir
clash
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- tools/iio: Add memory allocation failure check for trigger_name
- staging: vme_user: added bound check to geoid
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus
attribute
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
lpfc_els_flush_cmd()
- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
KERN_WARNING
- NFSD: Mark filecache "down" if init fails
- nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net()
failed
- ice: set correct dst VSI in only LAN filters
- ice: clear port vlan config during reset
- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
- ice: fix VLAN replay after reset
- SUNRPC: Fix integer overflow in decode_rc_list()
- tcp: fix to allow timestamp undo if no retransmits were sent
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids()
test
- Bluetooth: btusb: Don't fail external suspend requests
- net: phy: bcm84881: Fix some error handling paths
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- net: ethernet: adi: adin1110: Fix some error handling path in
adin1110_read_fifo()
- net: dsa: b53: fix jumbo frame mtu check
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix jumbo frames on 10/100 ports
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- nouveau/dmem: Fix privileged error in copy engine channel
- gpio: aspeed: Add the flush write to ensure the write complete.
- gpio: aspeed: Use devm_clk api to manage clock source
- powercap: intel_rapl_tpmi: Ignore minor version change
- ice: Fix netif_is_ice() in Safe Mode
- ice: Flush FDB entries before reset
- e1000e: change I219 (19) devices to ADP
- net: ibm: emac: mal: fix wrong goto
- btrfs: zoned: fix missing RCU locking in error message when loading zone
info
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- netfilter: fib: check correct rtable in vrf setups
- net: ibm: emac: mal: add dcr_unmap to _remove
- net: dsa: refuse cross-chip mirroring operations
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- vxlan: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- mctp: Handle error of rtnl_register_module().
- mpls: Handle error of rtnl_register_module().
- phonet: Handle error of rtnl_register_module().
- rcu/nocb: Fix rcuog wake-up from offline softirq
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
- HID: plantronics: Workaround for an unexcepted opposite volume key
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- usb: dwc3: core: Stop processing of pending events if controller is halted
- usb: xhci: Fix problem with xhci resume from suspend
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: dwc3: re-enable runtime PM after failed resume
- usb: gadget: core: force synchronous registration
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
ish_fw_xfer_direct_dma
- ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
- ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
- drm/amdkfd: Fix an eviction fence leak
- drm/amd/display: fix hibernate entry for DCN35+
- drm/xe/guc_submit: fix xa_store() error checking
- drm/i915/hdcp: fix connector refcounting
- drm/xe/ct: fix xa_store() error checking
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
- mptcp: fallback when MPTCP opts are dropped after 1st data
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- OPP: fix error code in dev_pm_opp_set_config()
- net: dsa: lan9303: ensure chip reset and wait for READY status
- mptcp: pm: do not remove closing subflows
- powercap: intel_rapl_tpmi: Fix bogus register reading
- selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
- selftests/rseq: Fix mm_cid test failure
- btrfs: split remaining space to discard in chunks
- btrfs: add cancellation points to trim loops
- fs/proc/kcore.c: allow translation of physical memory addresses
- io_uring/rw: fix cflags posting for single issue multishot read
- Upstream stable to v6.6.56, v6.11.1, v6.11.2, v6.11.3, v6.11.4
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50182
- secretmem: disable memfd_secret() if arch cannot set direct map
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50019
- kthread: unpark only parked kthread
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50096
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50020
- ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50021
- ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50022
- device-dax: correct pgoff align in dax_set_mapping()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50185
- mptcp: handle consistently DSS corruption
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50023
- net: phy: Remove LED entry from LEDs list on unregister
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50024
- net: Fix an unsafe loop on the list
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50186
- net: explicitly clear the sk pointer, when pf->create fails
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50025
- scsi: fnic: Move flush_work initialization out of if block
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50026
- scsi: wd33c93: Don't use stale scsi_pointer value
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50027
- thermal: core: Free tzp copy along with the thermal zone
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50028
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50029
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50030
- drm/xe/ct: prevent UAF in send_recv()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50187
- drm/vc4: Stop the active perfmon before being destroyed
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50031
- drm/v3d: Stop the active perfmon before being destroyed
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50189
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50035
- ppp: fix ppp_async_encode() illegal access
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50038
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50039
- net/sched: accept TCA_STAB only for root qdisc
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50040
- igb: Do not bring the device up after non-fatal error
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50042
- ice: Fix increasing MSI-X on VF
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50093
- thermal: intel: int340x: processor: Fix warning during module unload
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50045
- netfilter: br_netfilter: fix panic with metadata_dst skb
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50188
- net: phy: dp83869: fix memory corruption when enabling fiber
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50046
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50180
- fbdev: sisfb: Fix strbuf array overflow
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50047
- smb: client: fix UAF in async decryption
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50048
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50049
- drm/amd/display: Check null pointer before dereferencing se
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50090
- drm/xe/oa: Fix overflow in oa batch buffer
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50183
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
instance
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50184
- virtio_pmem: Check device status before requesting flush
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50057
- usb: typec: tipd: Free IRQ only if it was requested before
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50058
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50181
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
switchtec_ntb_remove due to race condition
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50061
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
Driver Due to Race Condition
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50062
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50095
- RDMA/mad: Improve handling of timed out WRs of mad agent
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50063
- bpf: Prevent tail call between progs attached to different hooks
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50191
- ext4: don't set SB_RDONLY after filesystem errors
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50064
- zram: free secondary algorithms names
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50089
- unicode: Don't special case ignorable code points
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49865
- drm/xe/vm: move xa_alloc to prevent UAF
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49968
- ext4: filesystems without casefold feature cannot be mounted with siphash
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49893
- drm/amd/display: Check stream_status before it is used
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49972
- drm/amd/display: Deallocate DML memory if allocation fails
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49914
- drm/amd/display: Add null check for pipe_ctx->plane_state in
dcn20_program_pipe
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49920
- drm/amd/display: Check null pointers before multiple uses
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49921
- drm/amd/display: Check null pointers before used
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50009
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-47726
- f2fs: fix to wait dio completion
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-47711
- af_unix: Don't return OOB skb in manage_oob().
* CVE-2024-53170
- block: fix uaf for flush rq while iterating tags
* CVE-2024-50148
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
* CVE-2024-50134
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
VLA
* CVE-2024-50171
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
* CVE-2024-50229
- nilfs2: fix potential deadlock with newly created symlinks
* CVE-2024-50233
- staging: iio: frequency: ad9832: fix division by zero in
ad9832_calc_freqreg()
* [Lenovo Ubuntu 24.04 Bug] dmesg show "spi-nor: probe of spi0.0 failed with
error -95" (LP: #2070339)
- mtd: core: Don't fail mtd_otp_nvmem_add() if OTP is unsupported
- mtd: core: Align comment with an action in mtd_otp_nvmem_add()
* python perf module missing in realtime kernel (LP: #2089411)
- [Packaging] linux-tools: Add missing python perf symlink
- [Packaging] linux-tools: Fix python perf library packaging
- [Packaging] linux-tools: Fall back to old python perf path
* CVE-2024-53104
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
[ Ubuntu-azure: 6.8.0-1023.28 ]
* noble/linux-azure: 6.8.0-1023.28 -proposed tracker (LP: #2097952)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
* Backport "CIFS: New mount option for cifs.upcall namespace resolution"
(LP: #2097564)
- CIFS: New mount option for cifs.upcall namespace resolution
[ Ubuntu: 6.8.0-55.57 ]
* noble/linux: 6.8.0-55.57 -proposed tracker (LP: #2097981)
* python perf module missing in realtime kernel (LP: #2089411)
- [Packaging] linux-tools: Add missing python perf symlink
- [Packaging] linux-tools: Fix python perf library packaging
- [Packaging] linux-tools: Fall back to old python perf path
* CVE-2024-53104
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
[ Ubuntu: 6.8.0-54.56 ]
* CVE-2025-0927
- SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key
[ Ubuntu-azure: 6.8.0-1022.26 ]
* noble/linux-azure: 6.8.0-1022.26 -proposed tracker (LP: #2093648)
* Add list of source files to linux-buildinfo (LP: #2086606)
- [Packaging] Add dwarfdump package in the Build-Depends
- [Packaging] azure: Sort build dependencies alphabetically
* Azure: backport SMB lease key fixes (LP: #2090880)
- smb: client: reuse file lease key in compound operations
- smb: client: do not defer close open handles to deleted files
- smb: client: retry compound request without reusing lease
- cifs: fixes for get_inode_info
- smb: client: fix NULL ptr deref in cifs_mark_open_handles_for_deleted_file()
- smb: client: fix double put of @cfile in smb2_set_path_size()
- smb: client: fix double put of @cfile in smb2_rename_path()
* linux-azure: Enable erofs.ko to linux-modules package (LP: #2081613)
- UBUNTU [Packaging]: Azure: Include erofs in linux-modules instead of linux-
modules-extra
* Miscellaneous Ubuntu changes
- [Config] azure: Enabling CONFIG_NVME_KEYRING as built-in
[ Ubuntu: 6.8.0-53.54 ]
* noble/linux: 6.8.0-53.54 -proposed tracker (LP: #2093677)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.01.13)
* Unable to boot as a guest on VMware ESX (LP: #2091941)
- ptp/vmware: Use VMware hypercall API
- input/vmmouse: Use VMware hypercall API
- drm/vmwgfx: Use VMware hypercall API
- x86/vmware: Use VMware hypercall API
- x86/vmware: Correct macro names
- x86/vmware: Remove legacy VMWARE_HYPERCALL* macros
* When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744)
- [Packaging] disable hv-kvp-daemon if needed
* Backport "netkit: Add option for scrubbing skb meta data" to 6.8
(LP: #2091184)
- netkit: Add option for scrubbing skb meta data
* KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
Exit (LP: #2093146)
- KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
* [SRU] add support of QCA BT 0489:e0fc (LP: #2085406)
- Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x
* ice driver RTNL assertion failed warning on shutdown/reboot (LP: #2091107)
- ice: Remove and readd netdev during devlink reload
* vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
- SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
- SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"
* [SRU] Fix error of resume on rtl8168fp (LP: #2087507)
- r8169: avoid unsolicited interrupts
* [SRU] power: intel_pstate: HWP interrupt support for maximum ratio changed
(LP: #2090852)
- x86/cpufeatures: Add HWP highest perf change feature flag
- cpufreq: intel_pstate: Support highest performance change interrupt
* Noble update: upstream stable patchset 2024-11-29 (LP: #2089884)
- static_call: Handle module init failure correctly in
static_call_del_module()
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- jump_label: Fix static_key_slow_dec() yet again
- scsi: st: Fix input/output error on empty drive reset
- scsi: pm8001: Do not overwrite PCI queue mapping
- drm/amdgpu: Fix get each xcp macro
- mailbox: rockchip: fix a typo in module autoloading
- mailbox: bcm2835: Fix timeout during suspend mode
- ceph: remove the incorrect Fw reference check when dirtying pages
- ieee802154: Fix build error
- net: sparx5: Fix invalid timestamps
- net/mlx5: Fix error path in multi-packet WQE transmit
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- Bluetooth: MGMT: Fix possible deadlocks
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: hci_core: Fix calling mgmt_device_connected
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- net: Add netif_get_gro_max_size helper for GRO
- net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
- net: ethernet: lantiq_etop: fix memory disclosure
- net: fec: Restart PPS after link state change
- net: fec: Reload PTP registers after link-state change
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- iomap: constrain the file range passed to iomap_file_unshare
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- i2c: xiic: improve error message when transfer fails to start
- i2c: xiic: Try re-initialization on bus busy timeout
- loop: don't set QUEUE_FLAG_NOMERGES
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
uninitialized
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- cifs: Fix buffer overflow when parsing NFS reparse points
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- crypto: octeontx - Fix authenc setkey
- crypto: octeontx2 - Fix authenc setkey
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and
ice_sched_add_node()
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: cfg80211: Set correct chandef when starting CAC
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- net: hisilicon: hip04: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPI: PAD: fix crash in exit_round_robin()
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- e1000e: avoid failing the system during pm_suspend
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- ACPI: CPPC: Add support for setting EPP register in FFH
- blk_iocost: fix more out of bound shifts
- wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: rtw88: select WANT_DEV_COREDUMP
- ACPI: EC: Do not release locks during operation region accesses
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
acpi_db_convert_to_package()
- tipc: guard against string buffer overrun
- net: mvpp2: Increase size of queue_name buffer
- bnxt_en: Extend maximum length of version string by 1 byte
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- net: atlantic: Avoid warning about potential string truncation
- crypto: simd - Do not call crypto_alloc_tfm during registration
- netpoll: Ensure clean state on setup failures
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- wifi: iwlwifi: mvm: use correct key iteration
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- ACPICA: iasl: handle empty connection_node
- proc: add config & param to block forcing mem writes
- [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- can: netlink: avoid call to do_set_data_bittiming callback with stale
can_priv::ctrlmode
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_cmd_802_11_scan_ext()
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- ALSA: usb-audio: Add input value sanity checks for standard types
- x86/ioapic: Handle allocation failures gracefully
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Add logitech Audio profile quirk
- ASoC: codecs: wsa883x: Handle reading version failure
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- x86/pkeys: Restore altstack access in sigreturn()
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- ALSA: asihpi: Fix potential OOB array access
- ALSA: hdsp: Break infinite MIDI input flush loop
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- selftests/nolibc: avoid passing NULL to printf("%s")
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- fbdev: efifb: Register sysfs groups through driver core
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- rcuscale: Provide clear error when async specified without primitives
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- iommu/vt-d: Always reserve a domain ID for identity setup
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- drm/stm: Avoid use-after-free issues with crtc and plane
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- drm/amd/display: Add null check for top_pipe_to_program in
commit_planes_for_stream
- ata: pata_serverworks: Do not use the term blacklist
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- HID: Ignore battery for all ELAN I2C-HID devices
- drm/amd/display: Handle null 'stream_status' in
'planes_changed_for_existing_stream'
- drm/amd/display: Check null pointers before using dc->clk_mgr
- drm/amd/display: Add null check for 'afb' in
amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: fix double free issue during amdgpu module unload
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- scsi: smartpqi: correct stream detection
- drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
- jfs: Fix uninit-value access of new_ea in ea_buffer
- drm/amdgpu: add raven1 gfxoff quirk
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdkfd: Fix resource leak in criu restore queue
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- platform/x86: touchscreen_dmi: add nanote-next quirk
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/amd/display: Check stream before comparing them
- drm/amd/display: Check link_res->hpo_dp_link_enc before using it
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
translation
- drm/amd/display: Fix index out of bounds in degamma hardware format
translation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/printer: Allow NULL data in devcoredump printer
- perf,x86: avoid missing caller address in stack traces captured in uprobe
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- perf: Fix event_function_call() locking
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amd/pm: ensure the fw_info is not null before using it
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: fix use-after-free in SMB request handling
- bpf: Make the pointer returned by iter next method valid
- ext4: ext4_search_dir should return a proper error
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- iomap: handle a post-direct I/O invalidate race in
iomap_write_delalloc_release
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftests: breakpoints: use remaining time to check if suspend succeed
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- perf: Really fix event_function_call() locking
- selftests: vDSO: fix vDSO name for powerpc
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- powerpc/vdso: Flag VDSO64 entry points as functions
- selftests/mm: fix charge_reserved_hugetlb.sh test
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests: vDSO: fix ELF hash table entry size for s390x
- selftests: vDSO: fix vdso_config for s390
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: designware: fix controller is holding SCL low while ENABLE bit is
disabled
- rust: sync: require `T: Sync` for `LockedBy::access`
- ovl: fail if trusted xattrs are needed but caller lacks permission
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- memory: tegra186-emc: drop unused to_tegra186_emc()
- dt-bindings: clock: exynos7885: Fix duplicated binding
- spi: bcm63xx: Fix module autoloading
- spi: bcm63xx: Fix missing pm_runtime_disable()
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- perf/core: Fix small negative period being ignored
- parisc: Fix itlb miss handler for 64-bit programs
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- ALSA: core: add isascii() check to card ID generator
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: fix double brelse() the buffer of the extents path
- ext4: fix timer use-after-free on failed mount
- ext4: update orig_path in ext4_find_extent()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- parisc: Fix 64-bit userspace syscall path
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- drm/rockchip: vop: clear DMA stop bit on RK3066
- of: address: Report error on resource bounds overflow
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- resource: fix region_intersects() vs add_memory_driver_managed()
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- mm: krealloc: consider spare memory for __GFP_ZERO
- mm: krealloc: Fix MTE false alarm in __do_krealloc
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- [Config] updateconfigs to set ILLEGAL_POINTER_VALUE for riscv64
- exfat: fix memory leak in exfat_load_bitmap()
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- perf hist: Update hist symbol when updating maps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- NFSD: Fix NFSv4's PUTPUBFH operation
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver
Due to Race Condition
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- riscv: Fix kernel stack size when KASAN is enabled
- aoe: fix the potential use-after-free problem in more places
- media: ov5675: Fix power on/off delay timings
- clk: rockchip: fix error for unknown clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- media: venus: fix use after free bug in venus_remove due to race condition
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: qcom: camss: Remove use_count guard in stop_streaming
- media: qcom: camss: Fix ordering of pm_runtime_enable
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- smb: client: use actual path when queryfs
- smb3: fix incorrect mode displayed for read-only files
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- gso: fix udp gso fraglist segmentation after pull from frag_list
- tomoyo: fallback to realpath if symlink's pathname does not exist
- net: stmmac: Fix zero-division error when disabling tc cbs
- rtc: at91sam9: fix OF node leak in probe() error path
- Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- cachefiles: fix dentry leak in cachefiles_open_file()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: send: fix invalid clone operation for file that got its size
decreased
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- cpufreq: Avoid a bad reference count on CPU node
- gpio: davinci: fix lazy disable
- net: pcs: xpcs: fix the wrong register that was written back
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- ceph: fix cap ref leak via netfs init_request
- tracing/hwlat: Fix a race during cpuhp processing
- tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- rtla: Fix the help text in osnoise and timerlat top tools
- drm/i915/gem: fix bitwise and logical AND mixup
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/amd/display: Add HDR workaround for specific eDP
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- kconfig: qconf: fix buffer overflow in debug links
- platform/x86: x86-android-tablets: Fix use after free on
platform_device_register() errors
- i2c: core: Lock address during client device instantiation
- i2c: synquacer: Remove a clk reference from struct synquacer_i2c
- i2c: synquacer: Deal with optional PCLK correctly
- arm64: cputype: Add Neoverse-N3 definitions
- arm64: errata: Expand speculative SSBS workaround once more
- io_uring/net: harden multishot termination case for recv
- uprobes: fix kernel info leak via "[uprobes]" vma
- mm: z3fold: deprecate CONFIG_Z3FOLD
- [Config] updateconfigs for deprecated CONFIG_Z3FOLD
- drm/amd/display: Allow backlight to go below
`AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- build-id: require program headers to be right after ELF header
- lib/buildid: harden build ID parsing logic
- sched: psi: fix bogus pressure spikes from aggregation race
- net: mana: Enable MANA driver on ARM64 with 4K page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- [Config] updateconfigs for MICROSOFT_MANA
- RDMA/mana_ib: use the correct page table index based on hardware page size
- media: imx335: Fix reset-gpio handling
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- remoteproc: k3-r5: Delay notification of wakeup event
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- r8169: add tally counter fields added with RTL8125
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- ACPI: battery: Simplify battery hook locking
- ACPI: battery: Fix possible crash when unregistering a battery hook
- btrfs: drop the backref cache during relocation if we commit
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- rxrpc: Fix a race between socket set up and I/O thread creation
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- crypto: octeontx* - Select CRYPTO_AUTHENC
- drm/amd/display: Revert Avoid overflow assignment
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc
before using it
- Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"
- perf python: Allow checking for the existence of warning options in clang
- drm/i915/dp: Fix AUX IO power enabling for eDP PSR
- drm/amd/display: handle nulled pipe context in DCE110's set_drr()
- selftests: netfilter: Add missing return value
- afs: Fix the setting of the server responding flag
- net: dsa: improve shutdown sequence
- bridge: mcast: Fail MDB get request on empty entry
- net/ncsi: Disable the ncsi work before freeing the associated structure
- drm/xe: Restore pci state upon resume
- drm/xe: Resume TDR after GT reset
- drm/xe: Prevent null pointer access in xe_migrate_copy
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
- nvme-keyring: restrict match length for version '1' identifiers
- nvme-tcp: sanitize TLS key handling
- nvme-fabrics: typo in nvmf_parse_key()
- nvme-tcp: check for invalidated or revoked key
- net: fec: don't save PTP state if PTP is unsupported
- wifi: mac80211: fix RCU list iterations
- netdev-genl: Set extack and fix error on napi-get
- block: fix integer overflow in BLKSECDISCARD
- arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
- net: phy: Check for read errors in SIOCGMIIREG
- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
- x86/bugs: Add missing NO_SSB flag
- x86/bugs: Fix handling when SRSO mitigation is disabled
- net: napi: Prevent overflow of napi_defer_hard_irqs
- crypto: hisilicon - fix missed error branch
- ALSA: usb-audio: Add quirk for RME Digiface USB
- ALSA: usb-audio: Add mixer quirk for RME Digiface USB
- ALSA: control: Use automatic cleanup of kfree()
- ALSA: control: Fix unannotated kfree() cleanup
- ALSA: control: Use guard() for locking
- ALSA: control: Take power_ref lock primarily
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- ASoC: Intel: boards: always check the result of
acpi_dev_get_first_match_dev()
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Fix access non-existent percpu rtpcp variable in
rcu_tasks_need_gpcb()
- pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
- iommu/vt-d: Unconditionally flush device TLB for pasid table updates
- iommu/arm-smmu-v3: Do not use devm for the cd table allocations
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- drm/amd/display: Check null pointers before using them
- drm/amd/display: Add null check for head_pipe in
dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
- scsi: smartpqi: Add new controller PCI IDs
- drm/amd/display: Add NULL check for function pointer in
dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in
dcn32_set_output_transfer_func
- scsi: smartpqi: add new controller PCI IDs
- drm/amd/display: Check null-initialized variables
- drm/amd/display: Check phantom_stream before it is used
- drm/amdgpu/gfx9: properly handle error ints on all pipes
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
paths
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
topology
- drm/amdgpu: check PS, WS index
- drm/amdgpu: fix wrong sizeof argument
- drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
- drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
- drm/xe: Invert page fault queue head / tail
- drm/xe: Add helper macro to loop each DSS
- drm/xe: fix multicast support for Xe_LP platforms
- drm/xe: Use topology to determine page fault queue size
- drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
- ovl: fsync after metadata copy-up
- HID: i2c-hid: ensure various commands do not interfere with each other
- platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types
- platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up
- platform/mellanox: mlxbf-pmc: fix signedness bugs
- platform/mellanox: mlxbf-pmc: fix lockdep warning
- bpf: Fix a sdiv overflow issue
- ALSA: control: Fix power_ref lock order for compat code, too
- perf callchain: Fix stitch LBR memory leaks
- drm/xe: fixup xe_alloc_pf_queue
- drm/xe: Fix memory leak on xe_alloc_pf_queue failure
- nvme-tcp: fix link failure for TCP auth
- f2fs: fix zoned block device information initialization
- f2fs: add write priority option based on zone UFS
- f2fs: make BG GC more aggressive for zoned devices
- f2fs: introduce migration_window_granularity
- f2fs: increase BG GC migration window granularity when boosted for zoned
devices
- f2fs: do FG_GC when GC boosting is required for zoned devices
- f2fs: forcibly migrate to secure space for zoned device file pinning
- mm, slub: avoid zeroing kmalloc redzone
- drm/v3d: Prevent out of bounds access in performance query extensions
- ext4: fix access to uninitialised lock in fc replay path
- ext4: fix off by one issue in alloc_flex_gd()
- scripts/gdb: add iteration function for rbtree
- scripts/gdb: fix lx-mounts command error
- sched/deadline: Comment sched_dl_entity::dl_server variable
- sched/core: Add clearing of ->dl_server in put_prev_task_balance()
- sched/core: Clear prev->dl_server in CFS pick fast path
- drivers/perf: riscv: Align errno for unsupported perf event
- ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
- ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus ExpertBook B2502CVA to
irq1_level_low_skip_override[]
- firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
- close_range(): fix the logics in descriptor table trimming
- drm/sched: Fix dynamic job-flow control race
- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
- drm/sched: Always increment correct scheduler score
- drm/xe: Delete unused GuC submission_state.suspend
- drm/xe: Use ordered wq for preempt fence waiting
- drm/xe: fix UAF around queue destruction
- sunrpc: change sp_nrthreads from atomic_t to unsigned int.
- NFSD: Async COPY result needs to return a write verifier
- NFSD: Limit the number of concurrent async COPY operations
- NFSD: Initialize struct nfsd4_copy earlier
- NFSD: Never decrement pending_async_copies on error
- drm/sched: revert "Always increment correct scheduler score"
- ALSA: control: Fix leftover snd_power_unref()
- Upstream stable to v6.6.55, v6.10.14
* By always inlining _compound_head(), clone() sees 3%+ performance increase
(LP: #2089327)
- mm: always inline _compound_head() with
CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
* Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+
(LP: #2086587)
- SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx
* Add list of source files to linux-buildinfo (LP: #2086606)
- [Packaging] Sort build dependencies alphabetically
- [Packaging] Add list of used source files to buildinfo package
* UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
- ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
* Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983)
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
* Noble update: upstream stable patchset 2024-11-22 (LP: #2089340)
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- wifi: rtw88: always wait for both firmware loading attempts
- crypto: xor - fix template benchmarking
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- wifi: brcmfmac: export firmware interface functions
- wifi: brcmfmac: introducing fwil query functions
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix invalid AMPDU factor calculation in
ath12k_peer_assoc_h_he()
- net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: rtw88: remove CPT execution branch never used
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- mount: handle OOM on mnt_warn_timestamp_expiry
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- powercap: intel_rapl: Fix off by one in get_rpi()
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- wifi: mac80211: don't use rate mask for offchannel TX either
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- padata: Honor the caller's alignment in case of chunk_size 0
- drivers/perf: hisi_pcie: Record hardware counts correctly
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- can: j1939: use correct function name in comment
- ACPI: CPPC: Fix MASK_VAL() usage
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: remove annotation to access set timeout while holding
lock
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Ensure dtm_idx is big enough
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix EHT beamforming capability check
- x86/sgx: Fix deadlock in SGX NUMA node search
- pm:cpupower: Add missing powercap_set_enabled() stub function
- crypto: hisilicon/hpre - mask cluster timeout error
- crypto: hisilicon/qm - reset device before enabling it
- crypto: hisilicon/qm - inject error before stopping queue
- wifi: mt76: mt7603: fix mixed declarations and code
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: wilc1000: fix potential RCU dereference issue in
wilc_parse_join_bss_param
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- sock_map: Add a cond_resched() in sock_hash_free()
- can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
- can: m_can: enable NAPI before enabling interrupts
- can: m_can: m_can_close(): stop clocks after device has been shut down
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- bareudp: Pull inner IP header on xmit.
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- net: tipc: avoid possible garbage value
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- ublk: move zone report data out of request pdu
- nbd: fix race between timeout and normal completion
- block, bfq: fix possible UAF for bfqq->bic with merge chain
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: don't break merge chain in bfq_split_bfqq()
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- erofs: fix incorrect symlink detection in fast symlink
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- block, bfq: fix procress reference leakage for bfqq in merge chain
- io_uring/io-wq: do not allow pinning outside of cpuset
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- block: fix potential invalid pointer dereference in blk_add_partition
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- firmware: arm_scmi: Fix double free in OPTEE transport
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- regulator: Return actual error in of_regulator_bulk_get_all()
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- ARM: dts: microchip: sama7g5: Fix RTT clock
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: versatile: fix OF node leak in CPUs prepare
- reset: berlin: fix OF node leak in probe() error path
- reset: k210: fix OF node leak in probe() error path
- clocksource/drivers/qcom: Add missing iounmap() on errors in
msm_dt_timer_init()
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- x86/mm: Use IPIs to synchronize LAM enablement
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781-i2c: Get the right GPIO line
- selftests/ftrace: Add required dependency for kprobe tests
- ALSA: hda: cs35l41: fix module autoloading
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ASoC: loongson: fix error release
- hwmon: (max16065) Fix overflows seen when writing limits
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix alarm attributes
- mtd: slram: insert break after errors in parsing the map
- hwmon: (ntc_thermistor) fix module autoloading
- power: supply: axp20x_battery: Remove design from min and max voltage
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- iommu/amd: Do not set the D bit on AMD v2 table entries
- mtd: powernv: Add check devm_kasprintf() returned value
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Fix init error path
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- pmdomain: core: Harden inter-column space in debug summary
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/amd/display: Add null check for set_output_gamma in
dcn30_set_output_transfer_func
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/radeon: properly handle vbios fake edid sizing
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- scsi: NCR5380: Check for phase match during PDMA fixup
- drm/amd/amdgpu: Properly tune the size of struct
- drm/rockchip: vop: Allow 4096px width scaling
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- powerpc/8xx: Fix initial memory mapping
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/vdso: Inconditionally use CFUNC macro
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- drm/msm: fix %s null argument error
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- xen: use correct end address of kernel for conflict checking
- HID: wacom: Support sequence numbers smaller than 16-bit
- HID: wacom: Do not warn about dropped packets for first packet
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- minmax: avoid overly complex min()/max() macro arguments in xen
- xen: introduce generic helper checking for memory map conflicts
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: add capability to remap non-RAM pages to different PFNs
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen/swiotlb: add alignment check for dma buffers
- xen/swiotlb: fix allocated size
- tpm: Clean up TPM space after command failure
- sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
- selftests/bpf: Workaround strict bpf_lsm return value check.
- selftests/bpf: Fix error linking uprobe_multi on mips
- bpf: Use -Wno-error in certain tests when building with GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- selftests/bpf: Add CFLAGS per source file and runner
- selftests/bpf: Fix wrong binary in Makefile log output
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Use pid_t consistently in test_progs.c
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Fix include of <sys/fcntl.h>
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- samples/bpf: Fix compilation errors with cf-protection option
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- xz: cleanup CRC32 edits from 2018
- kthread: fix task state in kthread worker if being frozen
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: return error on ext4_find_inline_entry
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: check stripe size compatibility on remount as well
- sched/numa: Fix the vma scan starving issue
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Fix helper writes to read-only maps
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- perf mem: Free the allocated sort string, fixing a leak
- perf inject: Fix leader sampling inserting additional samples
- perf report: Fix --total-cycles --stdio output error
- perf sched timehist: Fix missing free of session in perf_sched__timehist()
- perf stat: Display iostat headers correctly
- perf sched timehist: Fixed timestamp error when unable to confirm event
sched_in time
- perf time-utils: Fix 32-bit nsec parsing
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite()
after error detection
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- remoteproc: imx_rproc: Initialize workqueue earlier
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- Input: ilitek_ts_i2c - add report id message validation
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- PCI: Wait for Link before restoring Downstream Buses
- firewire: core: correct range of block for case of switch statement
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- leds: leds-pca995x: Add support for NXP PCA9956B
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: pca995x: Fix device child node usage in pca995x_probe()
- x86/PCI: Check pcie_find_root_port() return for NULL
- nvdimm: Fix devs leaks in scan_labels()
- PCI: xilinx-nwl: Fix register misspelling
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- pinctrl: single: fix missing error code in pcs_probe()
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- clk: ti: dra7-atl: Fix leak of of_nodes
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync()
usage
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- nfsd: fix refcount leak when file is unhashed after being found
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- IB/core: Fix ib_cache_setup_one error flow cleanup
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- RDMA/erdma: Return QP state in erdma_query_qp
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/hns: Don't modify rq next block addr in HIP09 QPC
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/mlx5: Obtain upper net device only when needed
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/cxgb4: Added NULL check for lookup_atid
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb_perf: Fix printk format
- ntb: Force physically contiguous allocation of rx ring buffers
- nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: return -EINVAL when namelen is 0
- crypto: caam - Pad SG length when allocating hash edesc
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- f2fs: atomic: fix to avoid racing w/ GC
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: support .shutdown in f2fs_sops
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: get rid of online repaire on corrupted directory
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- lib/sbitmap: define swap_lock as raw_spinlock_t
- spi: atmel-quadspi: Avoid overwriting delay register settings
- nvme-multipath: system fails to create generic nvme device
- iio: adc: ad7606: fix oversampling gpio array
- iio: adc: ad7606: fix standby gpio state to match the documentation
- driver core: Fix error handling in driver API device_rename()
- ABI: testing: fix admv8818 attr description
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- serial: 8250: omap: Cleanup on error in request_irq
- coresight: tmc: sg: Do not leak sg_table
- interconnect: icc-clk: Add missed num_nodes initialization
- cxl/pci: Fix to record only non-zero ranges
- vhost_vdpa: assign irq bypass producer token correctly
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- Revert "dm: requeue IO if mapping table not yet available"
- net: xilinx: axienet: Schedule NAPI in two steps
- net: xilinx: axienet: Fix packet counting
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
Condition
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: qrtr: Update packets cloning when broadcasting
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- virtio_net: Fix mismatched buf address when unmapping for small packets
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- netfilter: ctnetlink: compile ctnetlink_label_size with
CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump
path
- io_uring/sqpoll: do not allow pinning outside of cpuset
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- Revert "net: libwx: fix alloc msix vectors failed"
- xen: move checks for e820 conflicts further up
- xen: allow mapping ACPI data using a different physical address
- io_uring/sqpoll: retain test for whether the CPU is valid
- io_uring/sqpoll: do not put cpumask on stack
- Remove *.orig pattern from .gitignore
- PCI: Revert to the original speed after PCIe failed link retraining
- PCI: Clear the LBMS bit after a link retrain
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: Use an error code with PCIe failed link retraining
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- soc: versatile: integrator: fix OF node leak in probe() error path
- Revert "media: tuners: fix error return code of
hybrid_tuner_request_state()"
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Input: adp5588-keys - fix check on return code
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Validate backlight caps are sane
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- powerpc/atomic: Use YZ constraints for DS-form instructions
- fs: Create a generic is_dot_dotdot() utility
- ksmbd: make __dir_empty() compatible with POSIX
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: handle caseless file creation
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Disallow bus errors during PDMA send
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- usbnet: fix cyclical race on disconnect with work queue
- USB: appledisplay: close race between probe and completion handler
- USB: misc: cypress_cy7c63: check for short transfer
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- usb: cdnsp: Fix incorrect usb_request status
- usb: dwc2: drd: fix clock gating on USB role switch
- bus: integrator-lm: fix OF node leak in probe()
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- firmware_loader: Block path traversal
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- serial: qcom-geni: fix fifo polling timeout
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- ACPI: sysfs: validate return type of _STR method
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- perf/x86/intel/pt: Fix sampling synchronization
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- debugobjects: Fix conditions in fill_pool()
- btrfs: tree-checker: fix the wrong output of data backref objectid
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- f2fs: fix several potential integer overflows in file offsets
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- hwrng: mtk - Use devm_pm_runtime_enable
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- vfs: fix race between evice_inodes() and find_inode()&iput()
- fs: Fix file_set_fowner LSM hook inconsistencies
- nfs: fix memory leak in error path of nfs4_do_reclaim
- EDAC/igen6: Fix conversion of system address to physical memory address
- icmp: change the order of rate limits
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing
of_node_put
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- soc: versatile: realview: fix memory leak during device remove
- soc: versatile: realview: fix soc_dev leak during device remove
- USB: misc: yurex: fix race between read and write
- xhci: Add a quirk for writing ERST in high-low order
- usb: xhci: fix loss of data on Cadence xHC
- pps: remove usage of the deprecated ida_simple_xx() API
- pps: add an error check in parport_attach
- serial: don't use uninitialized value in uart_poll_init()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- lib/bitmap: add bitmap_{read,write}()
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- btrfs: fix race setting file private on concurrent lseek using same fd
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- dm-verity: restart or panic on an I/O error
- lockdep: fix deadlock issue between lockdep and rcu
- mm: only enforce minimum stack gap size if it's sensible
- spi: fspi: add support for imx8ulp
- module: Fix KCOV-ignored file name
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu
read lock
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- i2c: isch: Add missed 'else'
- Documentation: KVM: fix warning in "make htmldocs"
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- wifi: brcmfmac: add linefeed at end of file
- x86/tdx: Fix "in-kernel MMIO" check
- spi: atmel-quadspi: Fix wrong register value written to MR
- Revert: "dm-verity: restart or panic on an I/O error"
- wifi: ath11k: use work queue to process beacon tx event
- crypto: qat - disable IOV in adf_dev_stop()
- crypto: qat - fix recovery flow for VFs
- crypto: qat - ensure correct order in VF restarting handler
- crypto: iaa - Fix potential use after free bug
- autofs: fix missing fput for FSCONFIG_SET_FD
- arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI
first
- thermal: core: Fold two functions into their respective callers
- thermal: core: Fix rounding of delay jiffies
- perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
- perf/dwc_pcie: Always register for PCIe bus notifier
- ACPI: video: force native for some T2 macbooks
- ACPI: video: force native for Apple MacbookPro9,2
- wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
- wifi: mac80211: fix the comeback long retry times
- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
- ACPICA: executer/exsystem: Don't nag user about every Stall() violating the
spec
- netfilter: nft_dynset: annotate data-races around set timeout
- wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
- crypto: ccp - do not request interrupt on cmd completion when irqs disabled
- wifi: mt76: connac: fix checksum offload fields of connac3 RXD
- net: hsr: Use the seqnr lock for frames received via interlink port.
- crypto: n2 - Set err to EINVAL if snprintf fails for hmac
- firmware: qcom: scm: Disable SDI and write no dump to dump mode
- arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
- arm64: tegra: Correct location of power-sensors for IGX Orin
- arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
- selftests/ftrace: Fix eventfs ownership testcase to find mount point
- iommu/amd: Introduce struct protection_domain.pd_mode
- iommu/amd: Allocate the page table root using GFP_KERNEL
- iommu/amd: Convert comma to semicolon
- platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
- kselftest: dt: Ignore nodes that have ancestors disabled
- bpf, x64: Fix tailcall hierarchy
- bpf, lsm: Add check for BPF LSM return value
- bpf: Fix compare error in function retval_range_within
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta
- selftests/bpf: Support checks against a regular expression
- selftests/bpf: no need to track next_match_pos in struct test_loader
- selftests/bpf: extract test_loader->expect_msgs as a data structure
- selftests/bpf: allow checking xlated programs in verifier_* tests
- selftests/bpf: __arch_* macro to limit test cases to specific archs
- libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
- s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
- sched/deadline: Fix schedstats vs deadline servers
- perf scripts python cs-etm: Restore first sample log in verbose mode
- perf lock contention: Change stack_id type to s32
- quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
- media: staging: media: starfive: camss: Drop obsolete return value
documentation
- leds: gpio: Set num_leds after allocation
- iommufd/selftest: Fix buffer read overrrun in the dirty test
- iommufd: Check the domain owner of the parent before creating a nesting
domain
- RDMA/mlx5: Fix counter update on MR cache mkey creation
- RDMA/mlx5: Drop redundant work canceling from clean_keys()
- RDMA/mlx5: Fix MR cache temp entries cleanup
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Coresight: Set correct cs_mode for TPDM to fix disable issue
- Coresight: Set correct cs_mode for dummy source to fix disable issue
- interconnect: qcom: sm8250: Enable sync_state
- vdpa/mlx5: Fix invalid mr resource destroy
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- selftests: netfilter: Avoid hanging ipvs.sh
- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
- mm: migrate: annotate data-race in migrate_folio_unmap()
- selftests/bpf: correctly move 'log' upon successful match
- soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
- drm/amdgpu/vcn: enable AV1 on both instances
- drm/amd/display: Clean up dsc blocks in accelerated mode
- drm/amd/display: Skip to enable dsc if it has been off
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
- serial: qcom-geni: fix false console tx restart
- crypto: qcom-rng - fix support for ACPI-based systems
- ACPI: resource: Do IRQ override on MECHREV GM7XG0M
- perf/x86/intel: Allow to setup LBR for counting event for BPF
- f2fs: check discard support for conventional zones
- netfs: Delete subtree of 'fs/netfs' when netfs module exits
- md: Don't flush sync_work in md_write_start()
- tools/nolibc: include arch.h from string.h
- KVM: x86: Make x2APIC ID 100% readonly
- x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails
- x86/mm: Make x86_platform.guest.enc_status_change_*() return an error
- x86/tdx: Account shared memory
- x86/mm: Add callbacks to prepare encrypted memory for kexec
- x86/tdx: Convert shared memory back to private on kexec
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
- idpf: stop using macros for accessing queue descriptors
- fs_parse: add uid & gid option option parsing helpers
- compiler.h: specify correct attribute for .rodata..c_jump_table
- exfat: resolve memory leak from exfat_create_upcase_table()
- s390/ftrace: Avoid calling unwinder in ftrace_return_address()
- fbdev: xen-fbfront: Assign fb_info->device
- [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10
- Upstream stable to v6.6.54, v6.10.13
* Backport some AppArmor complain-mode profile bugfixes from Oracular
(LP: #2086210)
- SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside
aa_alloc_null
- SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure
for complain mode profiles
* generate and ship vmlinux.h to allow packages to build BPF CO-RE
(LP: #2050083)
- [Packaging] add linux-bpf-dev package
* Noble update: upstream stable patchset 2024-11-08 (LP: #2087519)
- ASoC: SOF: mediatek: Add missing board compatible
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: allow module autoloading for table db1200_pids
- ASoC: allow module autoloading for table board_ids
- scsi: lpfc: Fix overflow build issue
- pinctrl: at91: make it work with current gpiolib
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- microblaze: don't treat zero reserved memory regions as error
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match
less strict
- net: ftgmac100: Ensure tx descriptor updates are visible
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- wifi: iwlwifi: lower message level for FW buffer destination
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: clear trans->state earlier upon error
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- ASoC: intel: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: fix module autoloading
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- ALSA: hda: add HDMI codec ID for Intel PTL
- drm: komeda: Fix an issue related to normalized zpos
- spi: bcm63xx: Enable module autoloading
- smb: client: fix hang in wait_for_response() for negproto
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- tools: hv: rm .*.cmd when make clean
- spi: spidev: Add missing spi_device_id for jg10309-01
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- drm: Use XArray instead of IDR for minors
- accel: Use XArray instead of IDR for minors
- drm: Expand max DRM device number to full MINORBITS
- powercap/intel_rapl: Add support for AMD family 1Ah
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in
nft_socket_cgroup_subtree_level()
- nvme-pci: qdepth 1 quirk
- x86/mm: Switch to new Intel CPU model defines
- can: mcp251xfd: properly indent labels
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into
mcp251xfd_chip_start/stop()
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- USB: usbtmc: prevent kernel-usb-infoleak
- platform/x86: asus-wmi: Fix spurious rfkill on UX8406MA
- ASoC: mediatek: mt8188-mt6359: Modify key
- clk: qcom: gcc-sm8650: Don't use shared clk_ops for QUPs
- ice: check for XDP rings instead of bpf program when unconfiguring
- powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs
- powercap: intel_rapl: Change an error pointer to NULL
- Upstream stable to v6.6.53, v6.10.12
[ Ubuntu-azure: 6.8.0-1021.25 ]
* noble/linux-azure: 6.8.0-1021.25 -proposed tracker (LP: #2093490)
[ Ubuntu: 6.8.0-52.53 ]
* noble/linux: 6.8.0-52.53 -proposed tracker (LP: #2093521)
* CVE-2024-53164
- net: sched: fix ordering of qlen adjustment
* CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
* CVE-2024-53103
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
[ Ubuntu-azure: 6.8.0-1020.23 ]
* noble/linux-azure: 6.8.0-1020.23 -proposed tracker (LP: #2090334)
[ Ubuntu: 6.8.0-51.52 ]
* noble/linux: 6.8.0-51.52 -proposed tracker (LP: #2090369)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] update variants
* MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure
(LP: #2087886)
- mm/mglru: only clear kswapd_failures if reclaimable
* CVE-2024-50264
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
* CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
* CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
[ Ubuntu-azure: 6.8.0-1019.22 ]
* noble/linux-azure: 6.8.0-1019.22 -proposed tracker (LP: #2086273)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2024.10.28)
* Azure: miscellaneous MANA fixes for Oracular/Noble (LP: #2086863)
- net: mana: Implement get_ringparam/set_ringparam for mana
- net: mana: Improve mana_set_channels() in low mem conditions
[ Ubuntu: 6.8.0-50.51 ]
* noble/linux: 6.8.0-50.51 -proposed tracker (LP: #2086301)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2024.10.28)
* Noble update: upstream stable patchset 2024-10-31 (LP: #2086138)
- device property: Add cleanup.h based fwnode_handle_put() scope based
cleanup.
- device property: Introduce device_for_each_child_node_scoped()
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- ksmbd: override fsids for share path check
- ksmbd: override fsids for smb2_query_info()
- usbnet: ipheth: remove extraneous rx URB length check
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- net: ethernet: use ip_hdrlen() instead of bit shift
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- net: phy: vitesse: repair vsc73xx autonegotiation
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- net: hns3: use correct release function during uninitialization
- btrfs: update target inode's ctime on unlink
- Input: ads7846 - ratelimit the spi_sync error message
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- HID: multitouch: Add support for GT7868Q
- scripts: kconfig: merge_config: config files: add a trailing newline
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- drm/msm/adreno: Fix error return if missing firmware-name
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- smb/server: fix return value of smb2_open()
- NFSv4: Fix clearing of layout segments in layoutreturn
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- mptcp: pm: Fix uaf in __timer_delete_sync
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on
RK3399 Puma
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399
Puma
- minmax: reduce min/max macro expansion in atomisp driver
- net: tighten bad gso csum offset check in virtio_net_hdr
- dm-integrity: fix a race condition when accessing recalc_sector
- x86/hyperv: fix kexec crash due to VP assist page corruption
- mm: avoid leaving partial pfn mappings around in error case
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- drm/amd/display: Disable error correction if it's not supported
- drm/amd/display: Fix FEC_READY write on DP LT
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- cxl/core: Fix incorrect vendor debug UUID define
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >=
1.2
- ice: Fix lldp packets dropping after changing the number of channels
- ice: fix accounting for filters shared by multiple VSIs
- ice: fix VSI lists confusion when adding VLANs
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- net/mlx5: Update the list of the PCI supported devices
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Fix bridge mode operations when there are no VFs
- fou: fix initialization of grc
- octeontx2-af: Modify SMQ flush sequence to drop packets
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- selftests: net: csum: Fix checksums for packets with non-zero padding
- netfilter: nft_socket: fix sk refcount leaks
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- net: dpaa: Pad packets to ETH_ZLEN
- tracing/osnoise: Fix build when timerlat is not enabled
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- drm/nouveau/fb: restore init() for ramgp102
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- spi: geni-qcom: Fix incorrect free_irq() sequence
- drm/i915/guc: prevent a possible int overflow in wq offsets
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- cifs: Fix signature miscalculation
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/mediatek: Set sensible cursor width/height values to fix crash
- Input: edt-ft5x06 - add support for FocalTech FT5452 and FT8719
- Input: edt-ft5x06 - add support for FocalTech FT8201
- cgroup/cpuset: Eliminate unncessary sched domains rebuilds in hotplug
- spi: zynqmp-gqspi: Scale timeout by data size
- drm/xe: use devm instead of drmm for managed bo
- net: libwx: fix number of Rx and Tx descriptors
- clocksource: hyper-v: Use lapic timer in a TDX VM without paravisor
- bcachefs: Fix bch2_extents_match() false positive
- bcachefs: Don't delete open files in online fsck
- firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()
- riscv: dts: starfive: jh7110-common: Fix lower rate of CPUfreq by setting
PLL0 rate to 1.5GHz
- cxl: Restore XOR'd position bits during address translation
- netlink: specs: mptcp: fix port endianness
- drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct()
- drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct()
- drm/amd/amdgpu: apply command submission parser for JPEG v2+
- drm/xe/client: fix deadlock in show_meminfo()
- drm/xe/client: remove bogus rcu list usage
- drm/xe/client: add missing bo locking in show_meminfo()
- tracing/kprobes: Fix build error when find_module() is not available
- drm/xe/display: fix compat IS_DISPLAY_STEP() range end
- Upstream stable to v6.6.52, v6.10.11
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849)
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius
devices
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/kaslr: Expose and use the end of the physical memory address space
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- rust: types: Make Opaque::get const
- rust: macros: provide correct provenance when constructing THIS_MODULE
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- mmc: core: apply SD quirks earlier during probe
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: cqhci: Fix checking of CQHCI_HALT state
- fuse: update stats for pages in dropped aux writeback list
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: fix memory leak in fuse_create_open
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Add interface_lock around clearing of kthread in
stop_kthread()
- net: mctp-serial: Fix missing escapes on transmit
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- x86/apic: Make x2apic_disable() work correctly
- drm/i915: Do not attempt to load the GSC multiple times
- ALSA: control: Apply sanity check of input values for user elements
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- smack: unix sockets: fix accept()ed socket label
- bpf, verifier: Correct tail_call_reachable for bpf prog
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- x86/kmsan: Fix hook for unaligned accesses
- iommu: sun50i: clear bypass register
- netfilter: nf_conncount: fix wrong variable type
- fs/ntfs3: One more reason to mark inode bad
- riscv: kprobes: Use patch_text_nosync() for insn slots
- media: vivid: fix wrong sizeimage value for mplane
- leds: spi-byte: Call of_node_put() on error path
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- usb: uas: set host status byte on data completion error
- drm/amd/display: Check HDCP returned status
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- vfio/spapr: Always clear TCEs before unsetting the window
- ice: Check all ice_vsi_rebuild() errors in function
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- pcmcia: Use resource_size function on resource object
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- can: m_can: Release irq on error in m_can_open
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD
mode
- rust: kbuild: fix export of bss symbols
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- igb: Fix not clearing TimeSync interrupts for 82580
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- igc: Unlock on error in igc_io_resume()
- ice: do not bring the VSI up, if it was down before the XDP setup
- usbnet: modern method to get random MAC
- bpf, net: Fix a potential race in do_sock_getsockopt()
- bareudp: Fix device stats updates.
- r8152: fix the firmware doesn't work
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- selftests: net: enable bind tests
- firmware: cs_dsp: Don't allow writes to read-only controls
- phy: zynqmp: Take the phy mutex in xlate
- ASoC: topology: Properly initialize soc_enum values
- dm init: Handle minors larger than 255
- iommu/vt-d: Handle volatile descriptor status read
- cgroup: Protect css->cgroup write under css_set_lock
- devres: Initialize an uninitialized struct member
- virtio_ring: fix KMSAN error for premapped mode
- crypto: qat - fix unintentional re-enabling of error interrupts
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially
broken alignment
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- ext4: fix possible tid_t sequence overflows
- jbd2: avoid mount failed when commit block is partial submitted
- dma-mapping: benchmark: Don't starve others when doing the test
- drm/amdgpu: reject gang submit on reserved VMIDs
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- fs/ntfs3: Check more cases when directory is corrupted
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- cxl/region: Verify target positions using the ordered target list
- riscv: set trap vector earlier
- tcp: Don't drop SYN+ACK for simultaneous connect().
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- regmap: maple: work around gcc-14.1 false-positive warning
- vfs: Fix potential circular locking through setxattr() and removexattr()
- i3c: master: svc: resend target address when get NACK
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- btrfs: initialize location to fix -Wmaybe-uninitialized in
btrfs_lookup_dentry()
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- usbnet: ipheth: race between ipheth_close and error handling
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- ata: pata_macio: Use WARN instead of BUG
- NFSv4: Add missing rescheduling points in
nfs_client_return_marked_delegations
- ACPI: CPPC: Add helper to get the highest performance value
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- cpufreq: amd-pstate: fix the highest frequency issue which limits
performance
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- iio: buffer-dmaengine: fix releasing dma channel on error
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: adc: ad7124: fix config comparison
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix chip ID mismatch
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- usb: cdns2: Fix controller reset issue
- usb: dwc3: Avoid waking up gadget during startxfer
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/timer-of: Remove percpu irq related code
- uprobes: Use kzalloc to allocate xol area
- Revert "mm: skip CMA pages when they are not available"
- workqueue: wq_watchdog_touch is always called with valid CPU
- workqueue: Improve scalability of workqueue watchdog touch
- ACPI: processor: Return an error if acpi_processor_get_info() fails in
processor_add()
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate
function
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- drm/amd: Add gfx12 swizzle mode defs
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- ata: libata-scsi: Remove redundant sense_buffer memsets
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- crypto: starfive - Align rsa input data to 32-bit
- crypto: starfive - Fix nent assignment in rsa dec
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- powerpc/64e: remove unused IBM HTW code
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: Define mmu_pte_psize static
- powerpc/vdso: Don't discard rela sections
- ASoC: tegra: Fix CBB error during probe()
- nvme-pci: allocate tagset on reset if necessary
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- gpio: rockchip: fix OF node leak in probe()
- gpio: modepin: Enable module autoloading
- riscv: Fix toolchain vector detection
- riscv: Do not restrict memory size because of linear mapping on nommu
- membarrier: riscv: Add full memory barrier in switch_mm()
- [Config] updateconfigs for ARCH_HAS_MEMBARRIER_CALLBACKS
- x86/mm: Fix PTI for i386 some more
- btrfs: fix race between direct IO write and fsync when using same fd
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx
- ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15
X1504VAP
- fuse: clear PG_uptodate when using a stolen page
- riscv: misaligned: remove CONFIG_RISCV_M_MODE specific code
- parisc: Delay write-protection until mark_rodata_ro() call
- pinctrl: qcom: x1e80100: Bypass PDC wakeup parent for now
- maple_tree: remove rcu_read_lock() from mt_validate()
- Revert "wifi: ath11k: restore country code during resume"
- btrfs: qgroup: don't use extent changeset when not needed
- btrfs: zoned: handle broken write pointer on zones
- drm/xe/gsc: Do not attempt to load the GSC multiple times
- drm/amdgpu: always allocate cleared VRAM for GEM allocations
- drm/amd/display: Lock DC and exit IPS when changing backlight
- ALSA: hda/realtek: extend quirks for Clevo V5[46]0
- cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition
- virt: sev-guest: Mark driver struct with __refdata to prevent section
mismatch
- media: b2c2: flexcop-usb: fix flexcop_usb_memory_req
- gve: Add adminq mutex lock
- wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware
- drm/amdgpu: add missing error handling in function
amdgpu_gmc_flush_gpu_tlb_pasid
- crypto: qat - initialize user_input.lock for rate_limiting
- locking: Add rwsem_assert_held() and rwsem_assert_held_write()
- fs: don't copy to userspace under namespace semaphore
- fs: relax permissions for statmount()
- seccomp: release task filters when the task exits
- drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported
- can: m_can: Remove m_can_rx_peripheral indirection
- can: m_can: Do not cancel timer from within timer
- mm: Provide a means of invalidation without using launder_folio
- cifs: Fix copy offload to flush destination region
- hwmon: ltc2991: fix register bits defines
- scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum
- ptp: ocp: convert serial ports to array
- ptp: ocp: adjust sysfs entries to expose tty information
- ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset
- ice: remove ICE_CFG_BUSY locking from AF_XDP code
- net: xilinx: axienet: Fix race in axienet_stop
- iommu/vt-d: Remove control over Execute-Requested requests
- block: don't call bio_uninit from bio_endio
- tracing/kprobes: Add symbol counting check when module loads
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- PCI: qcom: Override NO_SNOOP attribute for SA8775P RC
- staging: vchiq_core: Bubble up wait_event_interruptible() return value
- watchdog: imx7ulp_wdt: keep already running watchdog enabled
- btrfs: slightly loosen the requirement for qgroup removal
- drm/amdgpu: add PSP RAS address query command
- drm/amdgpu: add mutex to protect ras shared memory
- s390/boot: Do not assume the decompressor range is reserved
- drm/amdgpu: Fix two reset triggered in a row
- drm/amdgpu: Add reset_context flag for host FLR
- drm/amdgpu: Fix amdgpu_device_reset_sriov retry logic
- fs: only copy to userspace on success in listmount()
- iio: adc: ad7124: fix DT configuration parsing
- nvmem: u-boot-env: error if NVMEM device is too small
- mm: zswap: rename is_zswap_enabled() to zswap_is_enabled()
- mm/memcontrol: respect zswap.writeback setting from parent cg too
- path: add cleanup helper
- fs: simplify error handling
- fs: relax permissions for listmount()
- hid: bpf: add BPF_JIT dependency
- net/mlx5e: SHAMPO, Use KSMs instead of KLMs
- net/mlx5e: SHAMPO, Fix page leak
- drm/xe/xe2: Add workaround 14021402888
- drm/xe/xe2lpg: Extend workaround 14021402888
- clk: qcom: gcc-x1e80100: Fix USB 0 and 1 PHY GDSC pwrsts flags
- clk: qcom: gcc-x1e80100: Don't use parking clk_ops for QUPs
- nouveau: fix the fwsec sb verification register.
- riscv: Add tracepoints for SBI calls and returns
- riscv: Improve sbi_ecall() code generation by reordering arguments
- riscv: Fix RISCV_ALTERNATIVE_EARLY
- cifs: Fix zero_point init on inode initialisation
- nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err
- nvme: fix status magic numbers
- nvme: rename CDR/MORE/DNR to NVME_STATUS_*
- nvmet: Identify-Active Namespace ID List command should reject invalid nsid
- drm/i915/display: Add mechanism to use sink model when applying quirk
- drm/i915/display: Increase Fast Wake Sync length as a quirk
- LoongArch: Use accessors to page table entries instead of direct dereference
- Upstream stable to v6.6.51, v6.10.10
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46823
- kunit/overflow: Fix UB in overflow_allocation_test
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46834
- ethtool: fail closed if we can't get max channel used in indirection tables
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46753
- btrfs: handle errors from btrfs_dec_ref() properly
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46841
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in
walk_down_proc()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46754
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46824
- iommufd: Require drivers to supply the cache_invalidate_user ops
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46842
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46766
- ice: move netif_queue_set_napi to rtnl-protected sections
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46772
- drm/amd/display: Check denominator crb_pipes before used
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46774
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46775
- drm/amd/display: Validate function returns
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46778
- drm/amd/display: Check UnboundedRequestEnabled's value
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46779
- drm/imagination: Free pvr_vm_gpuva after unlink
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46792
- riscv: misaligned: Restrict user access to kernel memory
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46793
- ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46735
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46737
- nvmet-tcp: fix kernel crash if commands allocation fails
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46822
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46713
- perf/aux: Fix AUX buffer serialization
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46739
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46740
- binder: fix UAF caused by offsets overwrite
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46741
- misc: fastrpc: Fix double free of 'buf' in error path
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47663
- staging: iio: frequency: ad9834: Validate frequency parameter value
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46832
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47668
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46744
- Squashfs: sanity check symbolic link size
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46745
- Input: uinput - reject requests with unreasonable number of slots
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46746
- HID: amd_sfh: free driver_data after destroying hid device
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47664
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the
firmware
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47665
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46749
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46752
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46840
- btrfs: clean up our handling of refs == 0 in snapshot delete
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47666
- scsi: pm80xx: Set phy->enable_completion only when we wait for it
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46843
- scsi: ufs: core: Remove SCSI host only if added
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46760
- wifi: rtw88: usb: schedule rx work after everything is set up
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46844
- um: line: always fill *error_out in setup_one_line()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46762
- xen: privcmd: Fix possible access to a freed kirqfd instance
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46763
- fou: Fix null-ptr-deref in GRO.
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46765
- ice: protect XDP configuration with a mutex
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46767
- net: phy: Fix missing of_node_put() for leds
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46768
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46770
- ice: Add netif_device_attach/detach into PF reset flow
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46771
- can: bcm: Remove proc entry when dev is unregistered.
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46773
- drm/amd/display: Check denominator pbn_div before used
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47667
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46835
- drm/amdgpu: Fix smatch static checker warning
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46776
- drm/amd/display: Run DC_LOG_DC after checking link->link_enc
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46836
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46777
- udf: Avoid excessive partition lengths
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46825
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46826
- ELF: fix kernel.randomize_va_space double read
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46827
- wifi: ath12k: fix firmware crash due to invalid peer nss
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46780
- nilfs2: protect references to superblock parameters exposed in sysfs
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46781
- nilfs2: fix missing cleanup on rollforward recovery error
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46828
- sched: sch_cake: fix bulk flow accounting logic for host fairness
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46782
- ila: call nf_unregister_net_hooks() sooner
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46783
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46786
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46787
- userfaultfd: fix checks for huge PMDs
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46838
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46845
- tracing/timerlat: Only clear timer if a kthread exists
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46788
- tracing/osnoise: Use a cpumask to know what threads are kthreads
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46846
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46847
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46791
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46829
- rtmutex: Drop rt_mutex::wait_lock before scheduling
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46848
- perf/x86/intel: Limit the period on Haswell
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46794
- x86/tdx: Fix data leak in mmio_read()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46795
- ksmbd: unset the binding mark of a reused connection
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46797
- powerpc/qspinlock: Fix deadlock in MCS queue
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46830
- KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46798
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46831
- net: microchip: vcap: Fix use-after-free error in kunit test
* Navi24 RX6300 light up issue on 6.8 kernel (LP: #2084513)
- drm/amd/display: Ensure populate uclk in bb construction
* Noble update: upstream stable patchset 2024-10-18 (LP: #2084941)
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- scsi: ufs: core: Check LSDBS cap when !mcq
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- btrfs: tree-checker: validate dref root and objectid
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ASoC: amd: yc: Support mic on HP 14-em0002la
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- i2c: Fix conditional for substituting empty ACPI functions
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- ASoC: codecs: ES8326: button detect issue
- selftests: mptcp: userspace pm create id 0 subflow
- selftests: mptcp: dump userspace addrs list
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: add mptcp_lib_events helper
- selftests: mptcp: join: validate event numbers
- selftests: mptcp: join: check re-re-adding ID 0 signal
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amd/pm: fix uninitialized variable warning
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: Fix negative array index read
- drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within
construct_integrated_info
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
dal_gpio_service_create
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Skip inactive planes within
ModeSupportAndSystemConfiguration
- drm/amd/display: Fix index may exceed array range within
fpu_update_bw_bounding_box
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdkfd: Reconcile the definition and use of oem_id in struct
kfd_topology_device
- apparmor: fix possible NULL pointer dereference
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy
SOCs
- drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix the waring dereferencing hive
- drm/amd/pm: check specific index for aldebaran
- drm/amd/pm: check specific index for smu13
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amd/pm: check negtive return for table entries
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- wifi: iwlwifi: remove fw_running op
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- PCI: al: Check IORESOURCE_BUS existence during probe
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- hwspinlock: Introduce hwspin_lock_bust()
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- RDMA/efa: Properly handle unexpected AQ completions
- ionic: fix potential irq name truncation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- rcu/nocb: Remove buggy bypass lock contention mitigation
- media: v4l2-cci: Always assign *val
- usbip: Don't submit special requests twice
- usb: typec: ucsi: Fix null pointer dereference in trace
- fsnotify: clear PARENT_WATCHED flags lazily
- net: remove NULL-pointer net parameter in ip_metrics_convert
- drm/amdgu: fix Unintentional integer overflow for mall size
- regmap: spi: Fix potential off-by-one when calculating reserved size
- smack: tcp: ipv4, fix incorrect labeling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- net/mlx5e: SHAMPO, Fix incorrect page release
- drm/meson: plane: Add error handling
- crypto: stm32/cryp - call finalize with bh disabled
- gfs2: Revert "Add quota_change type"
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event
via IRQ
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking
callbacks
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- hwmon: (k10temp) Check return value of amd_smn_read()
- wifi: cfg80211: make hash table duplicates more survivable
- f2fs: fix to do sanity check on blocks for inline_data inode
- driver: iio: add missing checks on iio_info's callback access
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- drm/amdgpu: add skip_hw_access checks for sriov
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- media: uvcvideo: Enforce alignment of frame and interval
- virtio_net: Fix napi_skb_cache_put warning
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- btrfs: factor out stripe length calculation into a helper
- btrfs: scrub: update last_physical after scrubbing one stripe
- btrfs: fix qgroup reserve leaks in cow_file_range
- virtio-net: check feature before configuring the vq coalescing command
- drm/amd/display: Handle the case which quad_part is equal 0
- drm/amdgpu: Handle sg size limit for contiguous allocation
- drm/amd/pm: fix uninitialized variable warning for smu_v13
- drm/amdgpu: fix uninitialized scalar variable warning
- drm/amd/display: Ensure array index tg_inst won't be -1
- drm/amd/display: handle invalid connector indices
- drm/amd/display: Increase MAX_LINKS by 2
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than
max_links
- drm/amd/display: Fix incorrect size calculation for loop
- drm/amd/display: Use kcalloc() instead of kzalloc()
- drm/amd/display: Add missing NULL pointer check within
dpcd_extend_address_range
- drm/amd/display: Release state memory if amdgpu_dm_create_color_properties
fail
- drm/amd/display: Check link_index before accessing dc->links[]
- drm/amd/display: Add otg_master NULL check within
resource_log_pipe_topology_update
- drm/amd/display: Release clck_src memory if clk_src_construct fails
- drm/amd/display: Fix writeback job lock evasion within dm_crtc_high_irq
- drm/xe: Demote CCS_MODE info to debug only
- drm/drm-bridge: Drop conditionals around of_node pointers
- drm/amdgpu: fix uninitialized variable warning for amdgpu_xgmi
- drm/amdgpu: fix uninitialized variable warning for jpeg_v4
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_info_ioctl
- wifi: ath12k: initialize 'ret' in ath12k_dp_rxdma_ring_sel_config_wcn7850()
- drm/amdgpu/pm: Check input value for power profile setting on smu11, smu13
and smu14
- drm/xe: Fix the warning conditions
- drm/amd/display: Fix pipe addition logic in calc_blocks_to_ungate DCN35
- wifi: cfg80211: restrict operation during radar detection
- remoteproc: qcom_q6v5_pas: Add hwspinlock bust on stop
- tcp: annotate data-races around tw->tw_ts_recent and tw->tw_ts_recent_stamp
- drm/xe: Don't overmap identity VRAM mapping
- net: tcp/dccp: prepare for tw_timer un-pinning
- drm/xe: Ensure caller uses sole domain for xe_force_wake_assert_held
- drm/xe: Check valid domain is passed in xe_force_wake_ref
- thermal: trip: Use READ_ONCE() for lockless access to trip properties
- drm/xe: Add GuC state asserts to deregister_exec_queue
- drm/amdgpu: fix overflowed constant warning in mmhub_set_clockgating()
- drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection
- drm/amd/display: Disable DMCUB timeout for DCN35
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- pinctrl: core: reset gpio_device in loop in pinctrl_pins_show()
- Upstream stable to v6.6.50, v6.10.9
* CVE-2024-46747
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
* CVE-2024-46725
- drm/amdgpu: Fix out-of-bounds write warning
* CVE-2024-46724
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
* [SRU] Fix AST DP output after resume (LP: #2083022)
- drm/ast: Inline drm_simple_encoder_init()
- drm/ast: Implement atomic enable/disable for encoders
- drm/ast: Program mode for AST DP in atomic_mode_set
- drm/ast: Move mode-setting code into mode_set_nofb CRTC helper
- drm/ast: Handle primary-plane format setup in atomic_update
- drm/ast: Remove gamma LUT updates from DPMS code
- drm/ast: Only set VGA SCREEN_DISABLE bit in CRTC code
- drm/ast: Inline ast_crtc_dpms() into callers
- drm/ast: Use drm_atomic_helper_commit_tail() helper
* UBSAN array-index-out-of-bounds reported with N-6.8 on P9 node baltar
(LP: #2078038)
- scripts/kernel-doc: reindent
- compiler_types: add Endianness-dependent __counted_by_{le, be}
- scsi: aacraid: union aac_init: Replace 1-element array with flexible array
- scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with
flexible array
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- scsi: aacraid: struct {user, }sgmap{, 64, raw}: Replace 1-element arrays
with flexible arrays
* r8169: transmit queue 0 timed out error when re-plugging the Ethernet cable
(LP: #2084526)
- r8169: disable ALDPS per default for RTL8125
* [SRU] cpufreq: intel_pstate: Support Emerald Rapids OOB mode (LP: #2084834)
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
* CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
* CVE-2024-46743
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
* CVE-2024-46757
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
* [SRU] Ubuntu 24.04 - GPU cannot be installed with DL380a Gen12 (2P, SRF-SP)
(LP: #2081079)
- perf/x86/uncore: Save the unit control address of all units
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
* Noble update: upstream stable patchset 2024-10-11 (LP: #2084225)
- ALSA: seq: Skip event type filtering for UMP events
- LoongArch: Remove the unused dma-direct.h
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: run delayed iputs when flushing delalloc
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- wifi: wfx: repair open network AP mode
- wifi: mwifiex: duplicate static structs used in driver instances
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- mptcp: close subflow when receiving TCP+FIN
- mptcp: sched: check both backup in retrans
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: ADD_ADDR 0 is not a new address
- selftests: mptcp: join: check removing ID 0 endpoint
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check re-re-adding ID 0 endp
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/vmwgfx: Fix prime with external buffers
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister
existing source caps before re-registration"
- ASoC: amd: acp: fix module autoloading
- ASoC: SOF: amd: Fix for acp init sequence
- pinctrl: mediatek: common-v2: Fix broken bias-disable for
PULL_PU_PD_RSEL_TYPE
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev
register
- ovl: pass string to ovl_parse_layer()
- ovl: fix wrong lowerdir number check for parameter Opt_lowerdir
- ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err
- mm: Fix missing folio invalidation calls during truncation
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- iommufd: Do not allow creating areas without READ or WRITE
- phy: fsl-imx8mq-usb: fix tuning parameter name
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw: Add peripheral bus width verification
- dmaengine: dw: Add memory bus width verification
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: hci_core: Fix not handling hibernation actions
- iommu: Do not return 0 from map_pages if it doesn't do anything
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- ethtool: check device is present when getting link settings
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress
validation
- selftests: forwarding: no_forwarding: Down ports on cleanup
- selftests: forwarding: local_termination: Down ports on cleanup
- bonding: implement xdo_dev_state_free and call it after deletion
- bonding: extract the use of real_device into local variable
- bonding: change ipsec_lock from spin lock to mutex
- gtp: fix a potential NULL pointer dereference
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- drm/amd/display: avoid using null object of framebuffer
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- nfc: pn533: Add poll mod list filling check
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: pmic_glink: Fix race during initialization
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- USB: serial: option: add MeiG Smart SRM825L
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- usb: dwc3: omap: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: add missing depopulate in probe error path
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
remove_power_attributes()
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: cdnsp: fix for Link TRB with TC
- ARM: dts: omap3-n900: correct the accelerometer orientation
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- scsi: aacraid: Fix double-free on probe failure
- apparmor: fix policy_unpack_test on big endian systems
- mptcp: pr_debug: add missing \n at the end
- mptcp: make pm_remove_addrs_and_subflows static
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: avoid duplicated SUB_CLOSED events
- drm/i915/dsi: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/vmwgfx: Disable coherent dumb buffers without 3d
- firmware/sysfb: Set firmware-framebuffer parent device
- firmware/sysfb: Create firmware device only for enabled PCI devices
- video/aperture: optionally match the device in sysfb_disable()
- drm/xe: Prepare display for D3Cold
- drm/xe/display: Make display suspend/resume work on discrete
- drm/xe/vm: Simplify if condition
- drm/xe/exec_queue: Rename xe_exec_queue::compute to xe_exec_queue::lr
- drm/xe: prevent UAF around preempt fence
- pinctrl: qcom: x1e80100: Update PDC hwirq map
- ASoC: SOF: amd: move iram-dram fence register programming sequence
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out
- backing-file: convert to using fops->splice_write
- pinctrl: qcom: x1e80100: Fix special pin offsets
- afs: Fix post-setattr file edit to do truncation correctly
- netfs: Fix netfs_release_folio() to say no if folio dirty
- netfs: Fix missing iterator reset on retry of short read
- dmaengine: ti: omap-dma: Initialize sglen after allocation
- pktgen: use cpus_read_lock() in pg_net_init()
- net_sched: sch_fq: fix incorrect behavior for small weights
- tcp: fix forever orphan socket caused by tcp_abort
- drm/xe/hwmon: Fix WRITE_I1 param from u32 to u16
- usb: typec: fsa4480: Relax CHIP_ID check
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- usb: gadget: uvc: queue pump work in uvcg_video_enable()
- usb: dwc3: xilinx: add missing depopulate in probe error path
- usb: typec: ucsi: Move unregister out of atomic section
- firmware: microchip: fix incorrect error report of programming:timeout on
success
- Upstream stable to v6.6.49, v6.10.8
* Fix blank screen on external display after reconnecting the USB type-C
(LP: #2081786) // Noble update: upstream stable patchset 2024-10-11
(LP: #2084225)
- drm/i915/display: add intel_display -> drm_device backpointer
- drm/i915/display: add generic to_intel_display() macro
- drm/i915/dp_mst: Fix MST state after a sink reset
* Noble update: upstream stable patchset 2024-10-09 (LP: #2084005)
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: atmel_serial: use the correct RTS flag.
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- selinux: revert our use of vma_is_initial_heap()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- char: xillybus: Don't destroy workqueue from work item running on it
- char: xillybus: Refine workqueue handling
- char: xillybus: Check USB endpoints when probing device
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- thunderbolt: Mark XDomain as unplugged when router is removed
- ALSA: hda/tas2781: fix wrong calibrated data order
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- KVM: s390: fix validity interception issue when gisa is switched off
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- i2c: tegra: Do not mark ACPI devices as irq safe
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
NUMA_NO_NODE
- dm resume: don't return EINVAL when signalled
- dm persistent data: fix memory allocation failure
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -> idset_bitmap_size()
- btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
- bitmap: introduce generic optimized bitmap_size()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- rtla/osnoise: Prevent NULL dereference in error handling
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- net: mana: Fix doorbell out of order violation and avoid unnecessary
doorbell rings
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- selinux: fix potential counting error in avc_add_xperms_decision()
- selinux: add the processing of the failure of avc_add_xperms_decision()
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- btrfs: zoned: properly take lock to read/update block group's zoned
variables
- btrfs: tree-checker: add dev extent item checks
- drm/amdgpu: Actually check flags for all context ops.
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu/jpeg2: properly set atomics vmid field
- drm/amdgpu/jpeg4: properly set atomics vmid field
- s390/uv: Panic for set and remove shared access UVC errors
- bpf: Fix updating attached freplace prog in prog_array map
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- igc: Fix qbv_config_change_errors logics
- igc: Fix reset adapter logics when tx mode change
- net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Correctly report errors for ethtool rx flows
- net: axienet: Fix register defines comment description
- net: dsa: vsc73xx: pass value in phy_write operation
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: ethernet: mtk_wed: fix use-after-free panic in
mtk_wed_setup_tc_block_cb()
- mlxbf_gige: disable RX filters until RX path initialized
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- tcp: Update window clamping condition
- netfilter: allow ipv6 fragments to arrive on different devices
- netfilter: flowtable: initialise extack before use
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- vsock: fix recursive ->recvmsg calls
- selftests: net: lib: ignore possible errors
- selftests: net: lib: kill PIDs before del netns
- net: hns3: fix wrong use of semaphore up
- net: hns3: use the user's cfg after reset
- net: hns3: fix a deadlock problem when config TC during resetting
- gpio: mlxbf3: Support shutdown() function
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- rust: work around `bindgen` 0.69.0 issue
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- cpu/SMT: Enable SMT only if a core is online
- powerpc/topology: Check if a core is online
- arm64: Fix KASAN random tag seed initialization
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- quota: Remove BUG_ON from dqget()
- riscv: blacklist assembly symbols for kprobe
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- media: pci: cx23885: check cx23885_vdev_init() return
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- media: drivers/media/dvb-core: copy user arrays safely
- wifi: iwlwifi: mvm: avoid garbage iPN
- net/sun3_82586: Avoid reading past buffer in debug output
- drm/lima: set gp bus_stop bit before hard reset
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- hrtimer: Select housekeeping CPU during migration
- virtiofs: forbid newlines in tags
- accel/habanalabs: fix debugfs files permissions
- clocksource/drivers/arm_global_timer: Guard against division by zero
- tick: Move got_idle_tick away from common flags
- netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
- md: clean up invalid BUG_ON in md_ioctl
- x86: Increase brk randomness entropy for 64-bit systems
- memory: stm32-fmc2-ebi: check regmap_read return value
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- rxrpc: Don't pick values out of the wire header when setting up security
- f2fs: stop checkpoint when get a out-of-bounds segment
- powerpc/boot: Handle allocation failure in simple_realloc()
- powerpc/boot: Only free if realloc() succeeds
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: push errors up from add_async_extent()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: delete pointless BUG_ON check on quota root in
btrfs_qgroup_account_extent()
- f2fs: fix to do sanity check in update_sit_entry
- usb: gadget: fsl: Increase size of name buffer for endpoints
- nvme: clear caller pointer on identify failure
- Bluetooth: bnep: Fix out-of-bound access
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- rtc: nct3018y: fix possible NULL dereference
- net: hns3: add checking for vf id of mailbox
- nvmet-tcp: do not continue for invalid icreq
- NFS: avoid infinite loop in pnfs_update_layout.
- openrisc: Call setup_memory() earlier in the init sequence
- s390/iucv: fix receive buffer virtual vs physical address confusion
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- platform/x86: lg-laptop: fix %s null argument warning
- usb: dwc3: core: Skip setting event buffers for host only controllers
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- ext4: set the type of max_zeroout to unsigned int to avoid overflow
- nvmet-rdma: fix possible bad dereference when freeing rsps
- selftests/bpf: Fix a few tests for GCC related warnings.
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- nvme: use srcu for iterating namespace list
- drm/amdgpu: fix dereference null return value for the function
amdgpu_vm_pt_parent
- hrtimer: Prevent queuing of hrtimer without a function callback
- nvme: fix namespace removal list
- gtp: pull network headers in gtp_dev_xmit()
- riscv: entry: always initialize regs->a0 to -ENOSYS
- smb3: fix lock breakage for cached writes
- dm suspend: return -ERESTARTSYS instead of -EINTR
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order
fallback to order 0
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- drm/amd/amdgpu: command submission parser for JPEG
- platform/surface: aggregator: Fix warning when controller is destroyed in
probe
- ALSA: hda/tas2781: Use correct endian conversion
- Bluetooth: hci_core: Fix LE quote calculation
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and
register injection
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: serialize access to the injection/extraction groups
- tc-testing: don't access non-existent variable on exception
- selftests: udpgro: report error when receive failed
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- net: mctp: test: Use correct skb for route input check
- kcm: Serialise kcm_sendmsg() for the same socket.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- ip6_tunnel: Fix broken GRO
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix xfrm state handling when clearing active slave
- ice: fix page reuse when PAGE_SIZE is over 8k
- ice: fix ICE_LAST_OFFSET formula
- ice: fix truesize operations for PAGE_SIZE >= 8192
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- igb: cope with large MAX_SKB_FRAGS
- net: dsa: mv88e6xxx: Fix out-of-bound access
- udp: fix receiving fraglist GSO packets
- ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: prevent possible UAF in ip6_xmit()
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- netfilter: flowtable: validate vlan header
- octeontx2-af: Fix CPT AF register offset calculation
- net: xilinx: axienet: Always disable promiscuous mode
- net: xilinx: axienet: Fix dangling multicast addresses
- net: ovs: fix ovs_drop_reasons error
- drm/msm/dpu: don't play tricks with debug macros
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm: fix the highest_bank_bit for sc7180
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Bluetooth: MGMT: Add error handling to pair_device()
- scsi: core: Fix the return value of scsi_logical_block_count()
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- drm/amdgpu: Validate TA binary size
- net: dsa: microchip: fix PTP config failure when using multiple ports
- MIPS: Loongson64: Set timer mode in cpu-probe
- HID: wacom: Defer calculation of resolution until resolution_code is known
- Input: i8042 - add forcenorestore quirk to leave controller untouched even
on s3
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk
combination
- cxgb4: add forgotten u64 ivlan cast before shift
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- mmc: dw_mmc: allow biu and ciu clocks to defer
- smb3: fix broken cached reads when posix locks
- pmdomain: imx: scu-pd: Remove duplicated clocks
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- nouveau/firmware: use dma non-coherent allocator
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: avoid possible UaF when selecting endp
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- selftests: mptcp: join: check re-using ID of closed subflow
- tcp: do not export tcp_twsk_purge()
- drm/msm/mdss: specify cfg bandwidth for SDM670
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- igc: Fix qbv tx latency by setting gtxoffset
- ALSA: timer: Relax start tick time check for slave timer elements
- bpf: Fix a kernel verifier crash in stacksafe()
- selftests/bpf: Add a test to verify previous stacksafe() fix
- Revert "s390/dasd: Establish DMA alignment"
- Input: MT - limit max slots
- tools: move alignment-related macros to new <linux/align.h>
- Revert "serial: 8250_omap: Set the console genpd always on if no console
suspend"
- usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[]
- usb: xhci: Check for xhci->interrupters being allocated in
xhci_mem_clearup()
- vfs: Don't evict inode under the inode lru traversing context
- tracing: Return from tracing_buffers_read() if the file has been closed
- mm: fix endless reclaim on machines with unaccepted memory
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- mm/numa: no task_numa_fault() call if PMD is changed
- mm/numa: no task_numa_fault() call if PTE is changed
- btrfs: check delayed refs when we're checking if a ref exists
- drm/amd/display: Adjust cursor position
- drm/amd/display: fix s2idle entry for DCN3.5+
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: fix cursor offset on rotation 180
- netfs: Fault in smaller chunks for non-large folio mappings
- libfs: fix infinite directory reads for offset dir
- kallsyms: Avoid weak references for kallsyms symbols
- kbuild: avoid unneeded kallsyms step 3
- kbuild: refactor variables in scripts/link-vmlinux.sh
- kbuild: remove PROVIDE() for kallsyms symbols
- kallsyms: get rid of code for absolute kallsyms
- [Config] Remove CONFIG_KALLSYMS_BASE_RELATIVE
- kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols
- bpf: Replace deprecated strncpy with strscpy
- kallsyms: replace deprecated strncpy with strscpy
- kallsyms: rework symbol lookup return codes
- kallsyms: Match symbols exactly with CONFIG_LTO_CLANG
- drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()`
- drm/amd/display: Don't register panel_power_savings on OLED panels
- wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850
- kbuild: merge temporary vmlinux for BTF and kallsyms
- kbuild: avoid scripts/kallsyms parsing /dev/null
- Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in
- net/mlx5: Fix IPsec RoCE MPV trace call
- selftests: udpgro: no need to load xdp for gro
- ice: use internal pf id instead of function number
- drm/msm/dpu: limit QCM2290 to RGB formats only
- drm/msm/dpu: relax YUV requirements
- spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume
- drm/xe/display: stop calling domains_driver_remove twice
- drm/xe: Fix opregion leak
- drm/xe/mmio: move mmio_fini over to devm
- drm/xe: reset mmio mappings with devm
- drm/xe: Fix tile fini sequence
- drm/xe: Fix missing workqueue destroy in xe_gt_pagefault
- drm/xe: Free job before xe_exec_queue_put
- thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir()
- nvme: move stopping keep-alive into nvme_uninit_ctrl()
- drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1
- s390/ap: Refine AP bus bindings complete processing
- net: ngbe: Fix phy mode set to external phy
- iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace()
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if
cpus.exclusive not set
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put()
handling
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- thermal: of: Fix OF node leak in thermal_of_zone_register()
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- Upstream stable to v6.6.48, v6.10.7
* Unable to list directories using CIFS on 6.8 kernel (LP: #2082423) // Noble
update: upstream stable patchset 2024-10-09 (LP: #2084005)
- smb: client: ignore unhandled reparse tags
* CVE-2024-46759
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
* CVE-2024-46758
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
* CVE-2024-46756
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
* CVE-2024-46738
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
* CVE-2024-46722
- drm/amdgpu: fix mc_data out-of-bounds read warning
* LXD fan bridge causes blocked tasks (LP: #2064176)
- SAUCE: fan: release rcu_read_lock on skb discard path
- SAUCE: fan: fix racy device stat update
* x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (LP: #2081863)
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
* UBSAN: array-index-out-of-bounds in module mt76 (LP: #2081785)
- wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc
* The system hangs after resume with thunderbolt monitor(AMD GPU [1002:1900])
(LP: #2083182)
- SAUCE: drm/amd/display: Fix system hang while resume with TBT monitor
* [SRU] GPU: support additional device ids for DG2 driver (LP: #2083701)
- drm/i915: Add new PCI IDs to DG2 platform in driver
* [SRU]Intel Arrow Lake IBECC feature backport request for ubuntu 22.04.5 and
24.04.1 server (LP: #2077861)
- EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support
* Noble update: upstream stable patchset 2024-10-07 (LP: #2083794)
- ASoC: topology: Clean up route loading
- ASoC: topology: Fix route memory corruption
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- sunrpc: don't change ->sv_stats if it doesn't exist
- nfsd: stop setting ->pg_stats for unused stats
- sunrpc: pass in the sv_stats struct through svc_create_pooled
- sunrpc: remove ->pg_stats from svc_program
- nfsd: remove nfsd_stats, make th_cnt a global counter
- nfsd: make svc_stat per-network namespace instead of global
- mm: gup: stop abusing try_grab_folio
- nvme/pci: Add APST quirk for Lenovo N60z laptop
- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails
- quota: Detect loops in quota tree
- bpf: Replace bpf_lpm_trie_key 0-length array with flexible array
- fs: Annotate struct file_handle with __counted_by() and use struct_size()
- mISDN: fix MISDN_TIME_STAMP handling
- mm/page_table_check: support userfault wr-protect entries
- bpf, net: Use DEV_STAT_INC()
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- f2fs: fix to cover read extent cache access with lock
- fou: remove warn in gue_gro_receive on unsupported protocol
- jfs: fix null ptr deref in dtInsertEntry
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- fs/ntfs3: Do copy_to_user out of run_lock
- ALSA: usb: Fix UBSAN warning in parse_audio_unit()
- binfmt_flat: Fix corruption when not offsetting data start
- mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick
- KVM: arm64: Don't defer TLB invalidation when zapping table entries
- KVM: arm64: Don't pass a TLBI level hint when zapping table entries
- drm/amd/display: Defer handling mst up request in resume
- drm/amd/display: Guard cursor idle reallow by DC debug option
- drm/amd/display: Separate setting and programming of cursor
- drm/amd/display: Prevent IPX From Link Detect and Set Mode
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value
- platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled
- platform/x86: ideapad-laptop: introduce a generic notification chain
- platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
- platform/x86: ideapad-laptop: add a mutex to synchronize VPC commands
- drm/amd/display: Solve mst monitors blank out problem after resume
- drm/amdgpu/display: Fix null pointer dereference in
dc_stream_program_cursor_position
- Upstream stable to v6.6.47, v6.10.6
* Noble update: upstream stable patchset 2024-10-04 (LP: #2083656)
- irqchip/mbigen: Fix mbigen node address layout
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- jump_label: Fix the fix, brown paper bags galore
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- x86/mm: Fix pti_clone_entry_text() for i386
- smb: client: move most of reparse point handling code to common file
- smb: client: set correct d_type for reparse DFS/DFSR and mount point
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- net: usb: qmi_wwan: fix memory leak for not ip packets
- net: bridge: mcast: wait for previous gc cycles when removing port
- net: linkwatch: use system_unbound_wq
- ice: Fix reset handler
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
- Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv
monitor
- net/smc: add the max value of fallback reason count
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- l2tp: fix lockdep splat
- net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities
- net: fec: Stop PPS on driver remove
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu
- rcutorture: Fix rcu_torture_fwd_cb_cr() data race
- md: do not delete safemode_timer in mddev_suspend
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- block: change rq_integrity_vec to respect the iterator
- rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation
- clocksource/drivers/sh_cmt: Address race condition for clock events
- ACPI: battery: create alarm sysfs attribute atomically
- ACPI: SBS: manage alarm sysfs attribute through psy core
- xen: privcmd: Switch from mutex to spinlock for irqfds
- wifi: nl80211: disallow setting special AP channel widths
- wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup()
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink
- selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
- af_unix: Don't retry after unix_state_lock_nested() in
unix_stream_connect().
- PCI: Add Edimax Vendor ID to pci_ids.h
- udf: prevent integer overflow in udf_bitmap_free_blocks()
- wifi: nl80211: don't give key data to userspace
- can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index
erratum
- can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of
mcp2518fd
- net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on
sa8775p-ride-r3
- btrfs: do not clear page dirty inside extent_write_locked_range()
- btrfs: fix invalid mapping of extent xarray state
- btrfs: fix bitmap leak when loading free space cache on duplicate entry
- Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver
unloading
- drm/amd/display: Add delay to improve LTTPR UHBR interop
- drm/amdgpu: fix potential resource leak warning
- drm/amdgpu/pm: Fix the param type of set_power_profile_mode
- drm/amdgpu/pm: Fix the null pointer dereference for smu7
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- drm/admgpu: fix dereferencing null pointer context
- drm/amdgpu: Add lock around VF RLCG interface
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- media: amphion: Remove lock in s_ctrl callback
- drm/amd/display: Add null checker before passing variables
- media: uvcvideo: Ignore empty TS packets
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x
- media: xc2028: avoid use-after-free in load_firmware_cb()
- ext4: fix uninitialized variable in ext4_inlinedir_to_tree
- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
- s390/sclp: Prevent release of buffer in I/O
- SUNRPC: Fix a race to wake a sync task
- profiling: remove profile=sleep support
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to
'raw_spinlock_t'
- irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq()
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- net: drop bad gso csum_start and offset in virtio_net_hdr
- arm64: Add Neoverse-V2 part
- arm64: barrier: Restore spec_bar() macro
- arm64: cputype: Add Cortex-X4 definitions
- arm64: cputype: Add Neoverse-V3 definitions
- arm64: errata: Add workaround for Arm errata 3194386 and 3312417
- arm64: cputype: Add Cortex-X3 definitions
- arm64: cputype: Add Cortex-A720 definitions
- arm64: cputype: Add Cortex-X925 definitions
- arm64: errata: Unify speculative SSBS errata logic
- [Config] Set ARM64_ERRATUM_3194386=y
- arm64: errata: Expand speculative SSBS workaround
- arm64: cputype: Add Cortex-X1C definitions
- arm64: cputype: Add Cortex-A725 definitions
- arm64: errata: Expand speculative SSBS workaround (again)
- i2c: smbus: Improve handling of stuck alerts
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask
- ASoC: codecs: wsa881x: Correct Soundwire ports mask
- ASoC: codecs: wsa883x: parse port-mapping information
- ASoC: codecs: wsa883x: Correct Soundwire ports mask
- ASoC: codecs: wsa884x: parse port-mapping information
- ASoC: codecs: wsa884x: Correct Soundwire ports mask
- ASoC: sti: add missing probe entry for player and reader
- spi: spidev: Add missing spi_device_id for bh2228fv
- ASoC: SOF: Remove libraries from topology lookups
- i2c: smbus: Send alert notifications to all devices if source not found
- bpf: kprobe: remove unused declaring of bpf_kprobe_override
- kprobes: Fix to check symbol prefixes correctly
- i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- spi: spi-fsl-lpspi: Fix scldiv calculation
- ALSA: usb-audio: Re-add ScratchAmp quirk entries
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT
- cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath
- module: warn about excessively long module waits
- module: make waiting for a concurrent module loader interruptible
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- drm/amdgpu: Forward soft recovery errors to userspace
- drm/i915/gem: Adjust vma offset for framebuffer mmap offset
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- ALSA: line6: Fix racy access to midibuf
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
- usb: vhci-hcd: Do not drop references before new references are gained
- USB: serial: debug: do not echo input by default
- usb: gadget: core: Check for unset descriptor
- usb: gadget: midi2: Fix the response for FB info with block 0xff
- usb: gadget: u_serial: Set start_delayed during suspend
- usb: gadget: u_audio: Check return codes from usb_ep_enable and
config_ep_by_speed.
- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES
- scsi: ufs: core: Do not set link to OFF state while waking up from
hibernation
- scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
- tick/broadcast: Move per CPU pointer access into the atomic section
- vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
- ntp: Clamp maxerror and esterror to operating range
- clocksource: Scale the watchdog read retries automatically
- clocksource: Fix brown-bag boolean thinko in cs_watchdog_read()
- driver core: Fix uevent_show() vs driver detach race
- tracefs: Fix inode allocation
- tracefs: Use generic inode RCU for synchronizing freeing
- ntp: Safeguard against time_constant overflow
- timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex()
- serial: core: check uartclk for zero to avoid divide by zero
- memcg: protect concurrent access to mem_cgroup_idr
- parisc: fix unaligned accesses in BPF
- parisc: fix a possible DMA corruption
- ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx
- kcov: properly check for softirq context
- irqchip/xilinx: Fix shift out of bounds
- genirq/irqdesc: Honor caller provided affinity in alloc_desc()
- LoongArch: Enable general EFI poweroff method
- power: supply: qcom_battmgr: return EAGAIN when firmware service is not up
- power: supply: axp288_charger: Fix constant_charge_voltage writes
- power: supply: axp288_charger: Round constant_charge_voltage writes down
- tracing: Fix overflow in get_free_elt()
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- smb3: fix setting SecurityFlags when encryption is required
- eventfs: Don't return NULL in eventfs_create_dir()
- eventfs: Use SRCU for freeing eventfs_inodes
- selftests: mm: add s390 to ARCH check
- btrfs: avoid using fixed char array size for tree names
- x86/paravirt: Fix incorrect virt spinlock setting on bare metal
- x86/mtrr: Check if fixed MTRRs exist before saving them
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/core: Introduce sched_set_rq_on/offline() helper
- sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate()
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions
- drm/dp_mst: Skip CSN if topology probing is not done yet
- drm/lima: Mark simple_ondemand governor as softdep
- drm/mgag200: Set DDC timeout in milliseconds
- drm/mgag200: Bind I2C lifetime to DRM device
- drm/radeon: Remove __counted_by from StateArray.states[]
- mptcp: fully established after ADD_ADDR echo on MPJ
- mptcp: pm: deny endp with signal + subflow + port
- block: use the right type for stub rq_integrity_vec()
- btrfs: fix corruption after buffer fault in during direct IO append write
- tools headers arm64: Sync arm64's cputype.h with the kernel sources
- mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio()
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- mptcp: pm: reduce indentation blocks
- mptcp: pm: don't try to create sf if alloc failed
- mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set
- selftests: mptcp: join: ability to invert ADD_ADDR check
- selftests: mptcp: join: test both signal & subflow
- Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky"
- btrfs: fix double inode unlock for direct IO sync writes
- perf/x86/intel/cstate: Switch to new Intel CPU model defines
- perf/x86/intel/cstate: Add Arrowlake support
- perf/x86/intel/cstate: Add Lunarlake support
- perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest
- platform/x86: intel-vbtn: Protect ACPI notify handler against recursion
- perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c
- perf/x86/intel: Support the PEBS event mask
- perf/x86: Support counter mask
- perf/x86: Fix smp_processor_id()-in-preemptible warnings
- virtio-net: unbreak vq resizing when coalescing is not negotiated
- net: dsa: microchip: Fix Wake-on-LAN check to not return an error
- net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897.
- regmap: kunit: Use a KUnit action to call regmap_exit()
- regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc
- regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap()
- debugobjects: Annotate racy debug variables
- nvme: apple: fix device reference counting
- cpufreq: amd-pstate: Allow users to write 'default' EPP string
- cpufreq: amd-pstate: auto-load pstate driver by default
- soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances
- ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU
- ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ
- thermal: intel: hfi: Give HFI instances package scope
- wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early
- wifi: rtlwifi: handle return value of usb init TX/RX
- wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory
accesses
- mlxsw: pci: Lock configuration space of upstream bridge during reset
- btrfs: do not BUG_ON() when freeing tree block after error
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: fix data race when accessing the last_trans field of a root
- drm/xe/preempt_fence: enlarge the fence critical section
- drm/amd/display: Handle HPD_IRQ for internal link
- drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map()
- drm/xe/xe_guc_submit: Fix exec queue stop race condition
- drm/amd/display: Add null checks for 'stream' and 'plane' before
dereferencing
- drm/amd/display: Wake DMCUB before sending a command for replay feature
- drm/amd/display: reduce ODM slice count to initial new dc state only when
needed
- of: Add cleanup.h based auto release via __free(device_node) markings
- media: i2c: ov5647: replacing of_node_put with __free(device_node)
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- mm, slub: do not call do_slab_free for kfence object
- ASoC: cs35l56: Revert support for dual-ownership of ASP registers
- drm/atomic: allow no-op FB_ID updates for async flips
- drm/amd/display: Replace dm_execute_dmub_cmd with
dc_wake_and_execute_dmub_cmd
- drm/xe/rtp: Fix off-by-one when processing rules
- drm/xe: Use dma_fence_chain_free in chain fence unused as a sync
- drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write
- drm/xe: Move lrc snapshot capturing to xe_lrc.c
- drm/xe: Minor cleanup in LRC handling
- drm/test: fix the gem shmem test to map the sg table.
- usb: typec: pd: no opencoding of FIELD_GET
- usb: typec: fsa4480: Check if the chip is really there
- PM: runtime: Simplify pm_runtime_get_if_active() usage
- scsi: ufs: core: Fix deadlock during RTC update
- serial: sc16is7xx: fix invalid FIFO access with special register set
- tracing: Have format file honor EVENT_FILE_FL_FREED
- mm: list_lru: fix UAF for memory cgroup
- net/tcp: Disable TCP-AO static key after RCU grace period
- Revert "drm/amd/display: Handle HPD_IRQ for internal link"
- idpf: fix memleak in vport interrupt configuration
- drm/amd/display: Add null check in resource_log_pipe_topology_update
- Upstream stable to v6.6.46, v6.10.5
* Noble update: upstream stable patchset 2024-10-02 (LP: #2083488)
- sysctl: allow change system v ipc sysctls inside ipc namespace
- sysctl: allow to change limits for posix messages queues
- sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table)
- ext4: factor out a common helper to query extent map
- ext4: check the extent status again before inserting delalloc block
- leds: trigger: Store brightness set by led_trigger_event()
- leds: trigger: Call synchronize_rcu() before calling trig->activate()
- KVM: VMX: Move posted interrupt descriptor out of VMX code
- fbdev/vesafb: Replace references to global screen_info by local pointer
- video: Add helpers for decoding screen_info
- [Config] Update CONFIG_SCREEN_INFO
- video: Provide screen_info_get_pci_dev() to find screen_info's PCI device
- firmware/sysfb: Update screen_info for relocated EFI framebuffers
- mm: page_alloc: control latency caused by zone PCP draining
- mm/page_alloc: fix pcp->count race between drain_pages_zone() vs
__rmqueue_pcplist()
- f2fs: fix to avoid use SSR allocate when do defragment
- f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid
- dmaengine: fsl-edma: add address for channel mux register in fsl_edma_chan
- dmaengine: fsl-edma: add i.MX8ULP edma support
- perf: imx_perf: fix counter start and config sequence
- MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a
- MIPS: dts: loongson: Fix liointc IRQ polarity
- MIPS: dts: loongson: Fix ls2k1000-rtc interrupt
- ARM: 9406/1: Fix callchain_trace() return value
- HID: amd_sfh: Move sensor discovery before HID device initialization
- perf tool: fix dereferencing NULL al->maps
- drm/nouveau: prime: fix refcount underflow
- drm/vmwgfx: Fix overlay when using Screen Targets
- drm/vmwgfx: Trigger a modeset when the screen moves
- sched: act_ct: take care of padding in struct zones_ht_key
- wifi: cfg80211: fix reporting failed MLO links status with
cfg80211_connect_done
- net: phy: realtek: add support for RTL8366S Gigabit PHY
- ALSA: hda: conexant: Fix headset auto detect fail in the polling mode
- Bluetooth: btintel: Fail setup on error
- Bluetooth: hci_sync: Fix suspending with wrong filter policy
- tcp: annotate data-races around tp->window_clamp
- tcp: Adjust clamping window for applications specifying SO_RCVBUF
- net: axienet: start napi before enabling Rx/Tx
- rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in
rtnl_dellink().
- i915/perf: Remove code to update PWR_CLK_STATE for gen12
- ice: respect netif readiness in AF_XDP ZC related ndo's
- ice: don't busy wait for Rx queue disable in ice_qp_dis()
- ice: replace synchronize_rcu with synchronize_net
- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog
- drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro
- net: mvpp2: Don't re-use loop iterator
- net: phy: micrel: Fix the KSZ9131 MDI-X status issue
- ALSA: hda: Conditionally use snooping for AMD HDMI
- netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
- netfilter: iptables: Fix potential null-ptr-deref in
ip6table_nat_table_init().
- net/mlx5: Always drain health in shutdown callback
- net/mlx5: Fix error handling in irq_pool_request_irq
- net/mlx5: Lag, don't use the hardcoded value of the first port
- net/mlx5: Fix missing lock on sync reset reload
- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio
capability
- net/mlx5e: Fix CT entry update leaks of modify header context
- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
- igc: Fix double reset adapter triggered from a single taprio cmd
- ipv6: fix ndisc_is_useropt() handling for PIO
- perf: riscv: Fix selecting counters in legacy mode
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- riscv: Fix linear mapping checks for non-contiguous memory regions
- arm64: jump_label: Ensure patched jump_labels are visible to all CPUs
- rust: SHADOW_CALL_STACK is incompatible with Rust
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version
- HID: wacom: Modify pen IDs
- btrfs: zoned: fix zone_unusable accounting on making block group read-write
again
- btrfs: do not subtract delalloc from avail bytes
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- mptcp: sched: check both directions for backup
- ALSA: usb-audio: Correct surround channels in UAC1 channel map
- ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
- ALSA: seq: ump: Optimize conversions from SysEx to UMP
- Revert "ALSA: firewire-lib: obsolete workqueue for period update"
- Revert "ALSA: firewire-lib: operate for period elapse event in process
context"
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- drm/virtio: Fix type of dma-fence context variable
- drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll()
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
- r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
- mptcp: fix user-space PM announced address accounting
- mptcp: distinguish rcv vs sent backup flag in requests
- mptcp: fix NL PM announced address accounting
- mptcp: mib: count MPJ with backup flag
- mptcp: fix bad RCVPRUNED mib accounting
- mptcp: pm: only set request_bkup flag when sending MP_PRIO
- mptcp: fix duplicate data handling
- selftests: mptcp: always close input's FD if opened
- selftests: mptcp: join: validate backup in MPJ
- selftests: mptcp: join: check backup support in signal endp
- mm/huge_memory: mark racy access onhuge_anon_orders_always
- mm: fix khugepaged activation policy
- x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86
- perf/x86/intel: Switch to new Intel CPU model defines
- perf/x86/intel: Add a distinct name for Granite Rapids
- drm/gpuvm: fix missing dependency to DRM_EXEC
- netlink: specs: correct the spec of ethtool
- ethtool: rss: echo the context number back
- wifi: cfg80211: correct S1G beacon length calculation
- ethtool: fix setting key and resetting indir at once
- ice: modify error handling when setting XSK pool in ndo_bpf
- ice: toggle netif_carrier when setting up XSK pool
- ice: improve updating ice_{t,r}x_ring::xsk_pool
- ice: xsk: fix txq interrupt mapping
- drm/atomic: Allow userspace to use explicit sync with atomic async flips
- drm/atomic: Allow userspace to use damage clips with async flips
- riscv/purgatory: align riscv_kernel_entry
- perf arch events: Fix duplicate RISC-V SBI firmware event name
- RISC-V: Enable the IPI before workqueue_online_cpu()
- ceph: force sending a cap update msg back to MDS for revoke op
- drm/vmwgfx: Remove unused code
- drm/vmwgfx: Fix handling of dumb buffers
- drm/v3d: Prevent out of bounds access in performance query extensions
- drm/v3d: Fix potential memory leak in the timestamp extension
- drm/v3d: Fix potential memory leak in the performance extension
- drm/v3d: Validate passed in drm syncobj handles in the timestamp extension
- drm/v3d: Validate passed in drm syncobj handles in the performance extension
- nouveau: set placement to original placement on uvmm validate.
- wifi: ath12k: fix soft lockup on suspend
- mptcp: pm: fix backup support in signal endpoints
- selftests: mptcp: fix error path
- Upstream stable to v6.6.45, v6.10.4
* [SRU] Fix AST DP output after resume (LP: #2083022) // Noble update:
upstream stable patchset 2024-10-02 (LP: #2083488)
- drm/ast: astdp: Wake up during connector status detection
- drm/ast: Fix black screen after resume
* [SRU]Fail to locate the LED of NVME disk behind Intel VMD (LP: #2077287) //
Noble update: upstream stable patchset 2024-10-02 (LP: #2083488)
- PCI: pciehp: Retain Power Indicator bits for userspace indicators
* Noble update: upstream stable patchset 2024-09-30 (LP: #2083196)
- powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
- spi: spi-microchip-core: Fix the number of chip selects supported
- spi: atmel-quadspi: Add missing check for clk_prepare
- EDAC, i10nm: make skx_common.o a separate module
- rcu/tasks: Fix stale task snaphot for Tasks Trace
- platform/chrome: cros_ec_debugfs: fix wrong EC message version
- ubd: refactor the interrupt handler
- ubd: untagle discard vs write zeroes not support handling
- block: initialize integrity buffer to zero before writing it to media
- x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
- hfsplus: fix to avoid false alarm of circular locking
- x86/of: Return consistent error type from x86_of_pci_irq_enable()
- x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
- x86/pci/xen: Fix PCIBIOS_* return code handling
- x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- hwmon: (adt7475) Fix default duty on fan is disabled
- block: Call .limit_depth() after .hctx has been set
- block/mq-deadline: Fix the tag reservation code
- md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
- pwm: stm32: Always do lazy disabling
- nvmet-auth: fix nvmet_auth hash error handling
- drm/meson: fix canvas release in bind function
- pwm: atmel-tcb: Fix race condition and convert to guards
- hwmon: (max6697) Fix underflow when writing limit attributes
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms
- arm64: dts: qcom: sc8180x: Correct PCIe slave ports
- arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
- arm64: dts: qcom: sdm845: add power-domain to UFS PHY
- arm64: dts: qcom: sm6115: add power-domain to UFS PHY
- arm64: dts: qcom: sm6350: add power-domain to UFS PHY
- arm64: dts: qcom: sm8250: add power-domain to UFS PHY
- arm64: dts: qcom: sm8350: add power-domain to UFS PHY
- arm64: dts: qcom: sm8450: add power-domain to UFS PHY
- arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
- arm64: dts: qcom: msm8998: enable adreno_smmu by default
- soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
- soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data()
callers
- arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
- arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
- arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
- arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
- arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
- arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
- soc: xilinx: rename cpu_number1 to dummy_cpu_number
- ARM: dts: sunxi: remove duplicated entries in makefile
- ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
- arm64: dts: qcom: qrb4210-rb2: make L9A always-on
- cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
- OPP: ti: Fix ti_opp_supply_probe wrong return values
- memory: fsl_ifc: Make FSL_IFC config visible and selectable
- arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
- arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
- arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
- arm64: dts: qcom: qdu1000: Add secure qfprom node
- soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
- soc: qcom: pdr: protect locator_addr with the main mutex
- soc: qcom: pdr: fix parsing of domains lists
- arm64: dts: rockchip: Increase VOP clk rate on RK3328
- arm64: dts: amlogic: sm1: fix spdif compatibles
- ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
- ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
- ARM: dts: imx6qdl-kontron-samx6i: fix board reset
- ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
- ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
- arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
- arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
- arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for
pp3300_mipibrdg
- arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
- arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate`
mismatch
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
- arm64: dts: amlogic: gx: correct hdmi clocks
- arm64: dts: amlogic: add power domain to hdmitx
- arm64: dts: amlogic: setup hdmi system clock
- arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
- arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
- arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
- arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
- m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
- arm64: dts: imx8mp: Fix pgc_mlmix location
- arm64: dts: imx8mp: add HDMI power-domains
- arm64: dts: imx8mp: Fix pgc vpu locations
- x86/xen: Convert comma to semicolon
- arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
- arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
- arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC
systems
- m68k: cmpxchg: Fix return value for default case in __arch_xchg()
- ARM: spitz: fix GPIO assignment for backlight
- vmlinux.lds.h: catch .bss..L* sections into BSS")
- firmware: turris-mox-rwtm: Do not complete if there are no waiters
- firmware: turris-mox-rwtm: Fix checking return value of
wait_for_completion_timeout()
- firmware: turris-mox-rwtm: Initialize completion before mailbox
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
- wifi: ath12k: Correct 6 GHz frequency value in rx status
- wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
- bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
- selftests/bpf: Fix prog numbers in test_sockmap
- net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
- wifi: ath12k: change DMA direction while mapping reinjected packets
- wifi: ath12k: fix invalid memory access while processing fragmented packets
- wifi: ath12k: fix firmware crash during reo reinject
- wifi: ath11k: fix wrong definition of CE ring's base address
- wifi: ath12k: fix wrong definition of CE ring's base address
- tcp: add tcp_done_with_error() helper
- tcp: fix race in tcp_write_err()
- tcp: fix races in tcp_v[46]_err()
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when
CONFIG_ARCH_NO_SG_CHAIN is defined
- selftests/bpf: Check length of recv in test_sockmap
- udf: Fix lock ordering in udf_evict_inode()
- lib: objagg: Fix general protection fault
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
- perf/x86: Serialize set_attr_rdpmc()
- jump_label: Fix concurrency issues in static_key_slow_dec()
- wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
- wifi: cfg80211: handle 2x996 RU allocation in
cfg80211_calculate_bitrate_he()
- udf: Fix bogus checksum computation in udf_rename()
- net: fec: Refactor: #define magic constants
- net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
- libbpf: Checking the btf_type kind when fixing variable offsets
- xfrm: Fix unregister netdevice hang on hardware offload.
- ipvs: Avoid unnecessary calls to skb_is_gso_sctp
- netfilter: nf_tables: rise cap on SELinux secmark context
- wifi: rtw89: 8852b: fix definition of KIP register number
- wifi: rtl8xxxu: 8188f: Limit TX power index
- xfrm: Export symbol xfrm_dev_state_delete.
- bpftool: Mount bpffs when pinmaps path not under the bpffs
- perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
- perf: Fix perf_aux_size() for greater-than 32-bit size
- perf: Prevent passing zero nr_pages to rb_alloc_aux()
- perf: Fix default aux_watermark calculation
- perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
- xfrm: fix netdev reference count imbalance
- xfrm: call xfrm_dev_policy_delete when kill policy
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
- wifi: virt_wifi: don't use strlen() in const context
- locking/rwsem: Add __always_inline annotation to __down_write_common() and
inlined callers
- selftests/bpf: Close fd in error path in drop_on_reuseport
- selftests/bpf: Null checks for links in bpf_tcp_ca
- selftests/bpf: Close obj in error path in xdp_adjust_tail
- selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
- selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of
loops
- bpf: annotate BTF show functions with __printf
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
- bpf: Fix null pointer dereference in resolve_prog_type() for
BPF_PROG_TYPE_EXT
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- Bluetooth: hci_bcm4377: Use correct unit for timeouts
- Bluetooth: btintel: Refactor btintel_set_ppag()
- Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
- xdp: fix invalid wait context of page_pool_destroy()
- net: bridge: mst: Check vlan state for egress decision
- drm/rockchip: vop2: Fix the port mux of VP2
- drm/arm/komeda: Fix komeda probe failing if there are no links in the
secondary pipeline
- drm/amdkfd: Fix CU Masking for GFX 9.4.3
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
- drm/amd/pm: Fix aldebaran pcie speed reporting
- drm/amdgpu: Fix memory range calculation
- drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
- drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
- drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on()
better
- drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before
regulators
- drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
- drm/bridge: Fixed a DP link training bug
- drm/bridge: it6505: fix hibernate to resume no display issue
- media: pci: ivtv: Add check for DMA map result
- media: imon: Fix race getting ictx->lock
- media: i2c: Fix imx412 exposure control
- media: v4l: async: Fix NULL pointer dereference in adding ancillary links
- s390/mm: Convert make_page_secure to use a folio
- s390/mm: Convert gmap_make_secure to use a folio
- s390/uv: Don't call folio_wait_writeback() without a folio reference
- media: mediatek: vcodec: Handle invalid decoder vsi
- x86/shstk: Make return uprobe work with shadow stack
- ipmi: ssif_bmc: prevent integer overflow on 32bit systems
- saa7134: Unchecked i2c_transfer function result fixed
- media: i2c: imx219: fix msr access command sequence
- media: uvcvideo: Disable autosuspend for Insta360 Link
- media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
- media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
- media: uvcvideo: Override default flags
- drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
- drm: zynqmp_kms: Fix AUX bus not getting unregistered
- media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
- media: rcar-csi2: Disable runtime_pm in probe error
- media: rcar-csi2: Cleanup subdevice in remove()
- media: renesas: vsp1: Fix _irqsave and _irq mix
- media: renesas: vsp1: Store RPF partition configuration per RPF instance
- drm/mediatek: Add missing plane settings when async update
- drm/mediatek: Use 8-bit alpha in ETHDR
- drm/mediatek: Fix XRGB setting error in OVL
- drm/mediatek: Fix XRGB setting error in Mixer
- drm/mediatek: Fix destination alpha error in OVL
- drm/mediatek: Turn off the layers with zero width or height
- drm/mediatek: Add OVL compatible name for MT8195
- media: imx-jpeg: Drop initial source change event if capture has been setup
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
- drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
- perf test: Make test_arm_callgraph_fp.sh more robust
- perf pmus: Fixes always false when compare duplicates aliases
- perf report: Fix condition in sort__sym_cmp()
- drm/etnaviv: fix DMA direction handling for cached RW buffers
- drm/qxl: Add check for drm_cvt_mode
- Revert "leds: led-core: Fix refcount leak in of_led_get()"
- drm/mediatek: Remove less-than-zero comparison of an unsigned value
- ext4: fix infinite loop when replaying fast_commit
- drm/mediatek/dp: switch to ->edid_read callback
- drm/mediatek/dp: Fix spurious kfree()
- media: venus: flush all buffers in output plane streamoff
- perf intel-pt: Fix aux_watermark calculation for 64-bit size
- perf intel-pt: Fix exclude_guest setting
- mfd: rsmu: Split core code into separate module
- mfd: omap-usb-tll: Use struct_size to allocate tll
- xprtrdma: Fix rpcrdma_reqs_reset()
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
- ext4: don't track ranges in fast_commit if inode has inlined data
- ext4: avoid writing unitialized memory to disk in EA inodes
- leds: flash: leds-qcom-flash: Test the correct variable in init
- sparc64: Fix incorrect function signature and add prototype for
prom_cif_init
- SUNRPC: Fixup gss_status tracepoint error output
- iio: Fix the sorting functionality in iio_gts_build_avail_time_table
- PCI: Fix resource double counting on remove & rescan
- PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
- PCI: keystone: Don't enable BAR 0 for AM654x
- PCI: keystone: Fix NULL pointer dereference in case of DT error in
ks_pcie_setup_rc_app_regs()
- PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
- scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
- clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
- clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
- iio: frequency: adrf6780: rm clk provider include
- coresight: Fix ref leak when of_coresight_parse_endpoint() fails
- RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
- ASoc: tas2781: Enable RCA-based playback without DSP firmware download
- ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
- usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and
remove
- RDMA/cache: Release GID table even if leak is detected
- clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
- clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
- clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
- clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
- clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
- Input: qt1050 - handle CHIP_ID reading error
- RDMA/mlx4: Fix truncated output warning in mad.c
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c
- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
- RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
- ASoC: qcom: Adjust issues in case of DT error in
asoc_qcom_lpass_cpu_platform_probe()
- scsi: lpfc: Fix a possible null pointer dereference
- hwrng: core - Fix wrong quality calculation at hw rng registration
- powerpc/prom: Add CPU info to hardware description string later
- ASoC: max98088: Check for clk_prepare_enable() error
- mtd: make mtd_test.c a separate module
- RDMA/device: Return error earlier if port in not valid
- Input: elan_i2c - do not leave interrupt disabled on suspend failure
- ASoC: amd: Adjust error handling in case of absent codec device
- PCI: endpoint: Clean up error handling in vpci_scan_bus()
- PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
- vhost/vsock: always initialize seqpacket_allow
- net: missing check virtio
- nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
- crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
- clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
- clk: qcom: Park shared RCGs upon registration
- clk: en7523: fix rate divider for slic and spi clocks
- MIPS: Octeron: remove source file executable bit
- PCI: qcom-ep: Disable resources unconditionally during PERST# assert
- PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
- powerpc/xmon: Fix disassembly CPU feature checks
- macintosh/therm_windtunnel: fix module unload.
- RDMA/hns: Check atomic wr length
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix insufficient extend DB for VFs.
- iommu/vt-d: Fix identity map bounds in si_domain_init()
- RDMA/core: Remove NULL check before dev_{put, hold}
- RDMA: Fix netdev tracker in ib_device_set_netdev
- bnxt_re: Fix imm_data endianness
- netfilter: ctnetlink: use helper function to calculate expect ID
- netfilter: nf_set_pipapo: fix initial map fill
- ipvs: properly dereference pe in ip_vs_add_service
- gve: Fix XDP TX completion handling when counters overflow
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix incorrect TOS in route get reply
- ipv4: Fix incorrect TOS in fibmatch route get reply
- net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
- net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
- fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
- fs/ntfs3: Fix transform resident to nonresident for compressed files
- fs/ntfs3: Deny getting attr data block in compressed frame
- fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
- fs/ntfs3: Fix getting file type
- fs/ntfs3: Add missing .dirty_folio in address_space_operations
- pinctrl: rockchip: update rk3308 iomux routes
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable()
fails
- pinctrl: freescale: mxs: Fix refcount of child
- fs/ntfs3: Replace inode_trylock with inode_lock
- fs/ntfs3: Correct undo if ntfs_create_inode failed
- fs/ntfs3: Drop stray '\' (backslash) in formatting string
- fs/ntfs3: Fix field-spanning write in INDEX_HDR
- pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
- pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
- pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
- pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
- pinctrl: renesas: r8a779g0: Fix IRQ suffixes
- pinctrl: renesas: r8a779g0: FIX PWM suffixes
- pinctrl: renesas: r8a779g0: Fix TCLK suffixes
- pinctrl: renesas: r8a779g0: Fix TPU suffixes
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
- fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
- fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped
THPs
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
- rtc: interface: Add RTC offset to alarm after fix-up
- fs/ntfs3: Fix the format of the "nocase" mount option
- fs/ntfs3: Missed error return
- fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
- powerpc/8xx: fix size given to set_huge_pte_at()
- s390/dasd: fix error checks in dasd_copy_pair_store()
- sbitmap: use READ_ONCE to access map->word
- sbitmap: fix io hung due to race on sbitmap_word::cleared
- LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
- landlock: Don't lose track of restrictions on cred_transfer
- hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
- mm/hugetlb: fix possible recursive locking detected warning
- mm/mglru: fix div-by-zero in vmpressure_calc_level()
- mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
- mm/mglru: fix overshooting shrinker memory
- x86/efistub: Avoid returning EFI_SUCCESS on error
- x86/efistub: Revert to heap allocated boot_params for PE entrypoint
- exfat: fix potential deadlock on __exfat_get_dentry_set
- dt-bindings: thermal: correct thermal zone node name limit
- tick/broadcast: Make takeover of broadcast hrtimer reliable
- net: netconsole: Disable target before netpoll cleanup
- af_packet: Handle outgoing VLAN packets without hardware offloading
- btrfs: fix extent map use-after-free when adding pages to compressed bio
- kernel: rerun task_work while freezing in get_signal()
- ipv4: fix source address selection with route leak
- ipv6: take care of scope when choosing the src addr
- NFSD: Support write delegations in LAYOUTGET
- sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE
tasks
- fuse: verify {g,u}id mount options correctly
- ata: libata-scsi: Fix offsets for the fixed format sense data
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
- media: venus: fix use after free in vdec_close
- ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- ext2: Verify bitmap and itable block numbers before using them
- io_uring/io-wq: limit retrying worker initialisation
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- scsi: qla2xxx: Fix optrom version displayed in FDMI
- drm/amd/display: Check for NULL pointer
- apparmor: use kvfree_sensitive to free data->data
- cifs: fix potential null pointer use in destroy_workqueue in init_cifs error
path
- cifs: fix reconnect with SMB1 UNIX Extensions
- cifs: mount with "unix" mount option for SMB1 incorrectly handled
- task_work: s/task_work_cancel()/task_work_cancel_func()/
- task_work: Introduce task_work_cancel() again
- udf: Avoid using corrupted block bitmap buffer
- m68k: amiga: Turn off Warp1260 interrupts during boot
- ext4: check dot and dotdot of dx_root before making dir indexed
- ext4: make sure the first directory block is not a hole
- io_uring: tighten task exit cancellations
- trace/pid_list: Change gfp flags in pid_list_fill_irq()
- selftests/landlock: Add cred_transfer test
- wifi: mwifiex: Fix interface type change
- wifi: rtw88: usb: Fix disconnection after beacon loss
- drivers: soc: xilinx: check return status of get_api_version()
- leds: ss4200: Convert PCIBIOS_* return codes to errnos
- leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
- media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
- jbd2: make jbd2_journal_get_max_txn_bufs() internal
- jbd2: precompute number of transaction descriptor blocks
- jbd2: avoid infinite transaction commit loop
- media: uvcvideo: Fix integer overflow calculating timestamp
- KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
- KVM: nVMX: Request immediate exit iff pending nested event needs injection
- ALSA: ump: Don't update FB name for static blocks
- ALSA: ump: Force 1 Group for MIDI1 FBs
- ALSA: usb-audio: Fix microphone sound on HD webcam.
- ALSA: usb-audio: Move HD Webcam quirk to the right place
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
- tools/memory-model: Fix bug in lock.cat
- hwrng: amd - Convert PCIBIOS_* return codes to errnos
- parisc: Fix warning at drivers/pci/msi/msi.h:121
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
- PCI: dw-rockchip: Fix initial PERST# GPIO value
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
- PCI: loongson: Enable MSI in LS7A Root Complex
- binder: fix hang of unregistered readers
- hostfs: fix dev_t handling
- efi/libstub: Zero initialize heap allocated struct screen_info
- fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
- ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
- f2fs: fix to force buffered IO on inline_data inode
- f2fs: fix to don't dirty inode for readonly filesystem
- f2fs: fix return value of f2fs_convert_inline_inode()
- f2fs: use meta inode for GC of atomic file
- f2fs: use meta inode for GC of COW file
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
- ubi: eba: properly rollback inside self_check_eba
- block: fix deadlock between sd_remove & sd_release
- mm: fix old/young bit handling in the faulting path
- decompress_bunzip2: fix rare decompression failure
- kbuild: Fix '-S -c' in x86 stack protector scripts
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
- kobject_uevent: Fix OOB access within zap_modalias_env()
- gve: Fix an edge case for TSO skb validity check
- ice: Add a per-VF limit on number of FDIR filters
- devres: Fix devm_krealloc() wasting memory
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- irqdomain: Fixed unbalanced fwnode get and put
- irqchip/imx-irqsteer: Handle runtime power management correctly
- mm/numa_balancing: teach mpol_to_str about the balancing mode
- rtc: cmos: Fix return value of nvmem callbacks
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE
state
- scsi: qla2xxx: During vport delete send async logout explicitly
- scsi: qla2xxx: Unable to act on RSCN for port online
- scsi: qla2xxx: Fix for possible memory corruption
- scsi: qla2xxx: Use QP lock to search for bsg
- scsi: qla2xxx: Reduce fabric scan duplicate code
- scsi: qla2xxx: Fix flash read failure
- scsi: qla2xxx: Complete command early within lock
- scsi: qla2xxx: validate nvme_local_port correctly
- perf: Fix event leak upon exit
- perf: Fix event leak upon exec and file release
- perf stat: Fix the hard-coded metrics calculation on the hybrid
- perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel/pt: Fix topa_entry base length
- perf/x86/intel/pt: Fix a topa_entry base address calculation
- drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
- drm/udl: Remove DRM_CONNECTOR_POLL_HPD
- drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
- drm/amdgpu: reset vm state machine after gpu reset(vram lost)
- drm/amd/amdgpu: Fix uninitialized variable warnings
- drm/i915/dp: Reset intel_dp->link_trained before retraining the link
- drm/i915/dp: Don't switch the LTTPR mode on an active link
- rtc: isl1208: Fix return value of nvmem callbacks
- rtc: abx80x: Fix return value of nvmem callback on read
- watchdog/perf: properly initialize the turbo mode timestamp and rearm
counter
- platform: mips: cpu_hwmon: Disable driver on unsupported hardware
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- selftests/sigaltstack: Fix ppc64 GCC build
- dm-verity: fix dm_is_verity_target() when dm-verity is builtin
- rbd: don't assume rbd_is_lock_owner() for exclusive mappings
- remoteproc: stm32_rproc: Fix mailbox interrupts queuing
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
- MIPS: dts: loongson: Add ISA node
- MIPS: ip30: ip30-console: Add missing include
- MIPS: dts: loongson: Fix GMAC phy node
- MIPS: Loongson64: env: Hook up Loongsson-2K
- MIPS: Loongson64: Remove memory node for builtin-dtb
- MIPS: Loongson64: reset: Prioritise firmware service
- MIPS: Loongson64: Test register availability before use
- drm/etnaviv: don't block scheduler when GPU is still active
- drm/panfrost: Mark simple_ondemand governor as softdep
- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
- lib/build_OID_registry: don't mention the full path of the script in output
- video: logo: Drop full path of the input filename in generated file
- Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
- minmax: scsi: fix mis-use of 'clamp()' in sr.c
- mm/mglru: fix ineffective protection calculation
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- f2fs: fix to truncate preallocated blocks in f2fs_file_open()
- kdb: address -Wformat-security warnings
- kdb: Use the passed prompt in kdb_position_cursor()
- dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
- phy: cadence-torrent: Check return value on register read
- phy: zynqmp: Enable reference clock correctly
- um: time-travel: fix time-travel-start option
- um: time-travel: fix signal blocking race/hang
- f2fs: fix start segno of large section
- watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
- watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
- f2fs: fix to update user block counts in block_operations()
- kbuild: avoid build error when single DTB is turned into composite DTB
- selftests/bpf: fexit_sleep: Fix stack allocation for arm64
- libbpf: Fix no-args func prototype BTF dumping syntax
- af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
- dma: fix call order in dmam_free_coherent
- bpf, events: Use prog to emit ksymbol event for main program
- tools/resolve_btfids: Fix comparison of distinct pointer types warning in
resolve_btfids
- MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
- ipv4: Fix incorrect source address in Record Route option
- net: bonding: correctly annotate RCU in bond_should_notify_peers()
- ice: Fix recipe read procedure
- netfilter: nft_set_pipapo_avx2: disable softinterrupts
- net: stmmac: Correct byte order of perfect_match
- net: nexthop: Initialize all fields in dumped nexthops
- bpf: Fix a segment issue when downgrading gso_size
- apparmor: Fix null pointer deref when receiving skb during sock creation
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
- lirc: rc_dev_get_from_fd(): fix file leak
- auxdisplay: ht16k33: Drop reference after LED registration
- ASoC: SOF: imx8m: Fix DSP control regmap retrieval
- spi: microchip-core: fix the issues in the isr
- spi: microchip-core: defer asserting chip select until just before write to
TX FIFO
- spi: microchip-core: only disable SPI controller when register value change
requires it
- spi: microchip-core: fix init function not setting the master and motorola
modes
- spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
- nvme-pci: Fix the instructions for disabling power management
- ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
- spi: spidev: add correct compatible for Rohm BH2228FV
- ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
- ASoC: TAS2781: Fix tasdev_load_calibrated_data()
- ceph: fix incorrect kmalloc size of pagevec mempool
- s390/pci: Refactor arch_setup_msi_irqs()
- s390/pci: Allow allocation of more than 1 MSI interrupt
- s390/cpum_cf: Fix endless loop in CF_DIAG event stop
- iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
- io_uring: fix io_match_task must_hold
- nvme-pci: add missing condition check for existence of mapped data
- fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
- md/raid0: don't free conf on raid0_run failure
- md/raid1: don't free conf on raid0_run failure
- io_uring: Fix probe of disabled operations
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains()
calls
- cgroup/cpuset: Fix remote root partition creation problem
- x86/syscall: Mark exit[_group] syscall handlers __noreturn
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- md/raid5: recheck if reshape has finished with device_lock held
- hwmon: (ltc2991) re-order conditions to fix off by one bug
- arm64: smp: Fix missing IPI statistics
- arm64: dts: qcom: sc7280: Remove CTS/RTS configuration
- ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly
- OPP: Fix missing cleanup on error in _opp_attach_genpd()
- arm64: dts: qcom: sc8280xp-*: Remove thermal zone polling delays
- arm64: dts: ti: k3-am62-main: Fix the reg-range for main_pktdma
- arm64: dts: ti: k3-am62a-main: Fix the reg-range for main_pktdma
- arm64: dts: ti: k3-am62p-main: Fix the reg-range for main_pktdma
- arm64: dts: ti: k3-am62a7: Drop McASP AFIFOs
- arm64: dts: ti: k3-am62p5: Drop McASP AFIFOs
- arm64: dts: ti: k3-am62p5-sk: Fix pinmux for McASP1 TX
- arm64: dts: qcom: sc7180-trogdor: Disable pwmleds node where unused
- arm64: dts: mediatek: mt8192: Fix GPU thermal zone name for SVS
- arm64: dts: mediatek: mt8183-pico6: Fix wake-on-X event node names
- arm64: dts: renesas: r9a08g045: Add missing hypervisor virtual timer IRQ
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons
- wifi: mac80211: cancel multi-link reconf work on disconnect
- wifi: ath11k: refactor setting country code logic
- wifi: ath11k: restore country code during resume
- net: ethernet: cortina: Restore TSO support
- tcp: fix races in tcp_abort()
- hns3: avoid linking objects into multiple modules
- sched/core: Move preempt_model_*() helpers from sched.h to preempt.h
- sched/core: Drop spinlocks on contention iff kernel is preemptible
- net: dsa: ksz_common: Allow only up to two HSR HW offloaded ports for
KSZ9477
- libbpf: Skip base btf sanity checks
- wifi: mac80211: add ieee80211_tdls_sta_link_id()
- wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant()
- wifi: ath12k: advertise driver capabilities for MBSSID and EMA
- riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
- perf/x86/amd/uncore: Avoid PMU registration if counters are unavailable
- perf/x86/amd/uncore: Fix DF and UMC domain identification
- NFSD: Fix nfsdcld warning
- net: page_pool: fix warning code
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- Bluetooth: hci_event: Set QoS encryption from BIGInfo report
- Bluetooth: hci_core, hci_sync: cleanup struct discovery_state
- Bluetooth: Fix usage of __hci_cmd_sync_status
- tcp: Don't access uninit tcp_rsk(req)->ao_keyid in
tcp_create_openreq_child().
- drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators
- drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare()
- drm/amd/display: Move 'struct scaler_data' off stack
- media: i2c: hi846: Fix V4L2_SUBDEV_FORMAT_TRY get_selection()
- drm/msm/dpu: fix encoder irq wait skip
- drm/msm/dpu: drop duplicate drm formats from wb2_formats arrays
- drm/msm/dp: fix runtime_pm handling in dp_wait_hpd_asserted
- perf maps: Switch from rbtree to lazily sorted array for addresses
- perf maps: Fix use after free in __maps__fixup_overlap_and_insert
- drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll
- drm/i915/psr: Print Panel Replay status instead of frame lock status
- drm/mediatek: Set DRM mode configs accordingly
- drm/msm/dsi: set video mode widebus enable bit when widebus is enabled
- tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load
- drm/amd/display: Add null check before access structs
- nfs: pass explicit offset/count to trace events
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in
pci_epf_test_core_init()
- PCI: tegra194: Set EP alignment restriction for inbound ATU
- riscv: smp: fail booting up smp if inconsistent vlen is detected
- clk: meson: s4: fix fixed_pll_dco clock
- clk: meson: s4: fix pwm_j_div parent clock
- usb: typec-mux: ptn36502: unregister typec switch on probe error and remove
- mtd: spi-nor: winbond: fix w25q128 regression
- iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps
- iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps
- iommufd/selftest: Add tests for <= u8 bitmap sizes
- iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes
- iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead
- clk: qcom: gcc-x1e80100: Fix halt_check for all pipe clocks
- dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
- kvm: s390: Reject memory region operations for ucontrol VMs
- eeprom: ee1004: Call i2c_new_scanned_device to instantiate thermal sensor
- clk: qcom: gcc-x1e80100: Set parent rate for USB3 sec and tert PHY pipe clks
- workqueue: Introduce from_work() helper for cleaner callback declarations
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- crypto: mxs-dcp - Ensure payload is zero when using key slot
- RDMA/mana_ib: Enable RoCE on port 1
- RDMA/mana_ib: set node_guid
- rtc: tps6594: Fix memleak in probe
- selftests/damon/access_memory: use user-defined region size
- md-cluster: fix hanging issue while a new disk adding
- power: supply: ab8500: Fix error handling when calling
iio_read_channel_processed()
- power: supply: ingenic: Fix some error handling paths in
ingenic_battery_get_property()
- remoteproc: mediatek: Don't attempt to remap l1tcm memory if missing
- remoteproc: k3-r5: Fix IPC-only mode detection
- mailbox: imx: fix TXDB_V2 channel race condition
- mailbox: mtk-cmdq: Move devm_mbox_controller_register() after
devm_pm_runtime_enable()
- mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit
machines
- mm/huge_memory: avoid PMD-size page cache if needed
- thermal/drivers/broadcom: Fix race between removal and clock disable
- workqueue: Always queue work items to the newest PWQ for order workqueues
- ipv6: fix source address selection with route leak
- drm/xe: Use write-back caching mode for system memory on DGFX
- md/raid5: fix spares errors about rcu usage
- media: stm32: dcmipp: correct error handling in dcmipp_create_subdevs
- tpm_tis_spi: add missing attpm20p SPI device ID entry
- sysctl: always initialize i_uid/i_gid
- media: i2c: Kconfig: Fix missing firmware upload config select
- genirq: Set IRQF_COND_ONESHOT in request_irq()
- cpufreq: qcom-nvmem: fix memory leaks in probe error paths
- leds: triggers: Flush pending brightness before activating trigger
- media: i2c: alvium: Move V4L2_CID_GAIN to V4L2_CID_ANALOG_GAIN
- KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector
- KVM: nVMX: Check for pending posted interrupts when looking for nested
events
- ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models
- fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes
- drm/fbdev-dma: Fix framebuffer mode for big endian devices
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL
- dmaengine: fsl-edma: clean up unused "fsl,imx8qm-adma" compatible string
- dmaengine: fsl-edma: change the memory access from local into remote mode in
i.MX 8QM
- clk: samsung: fix getting Exynos4 fin_pll rate from external clocks
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin
format
- arch: um: rust: Use the generated target.json again
- f2fs: fix null reference error when checking end of zone
- selftests: forwarding: skip if kernel not support setting bridge fdb
learning limit
- xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len
- drm/xe/exec: Fix minor bug related to xe_sync_entry_cleanup
- thermal: trip: Split thermal_zone_device_set_mode()
- apparmor: unpack transition table if dfa is not present
- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1
- selinux,smack: remove the capability checks in the removexattr hooks
- selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- Upstream stable to v6.6.44, v6.10.3
* Noble update: upstream stable patchset 2024-09-30 (LP: #2083196) //
CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
* CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
* CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
* CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
[ Ubuntu-azure: 6.8.0-1018.21 ]
* noble/linux-azure: 6.8.0-1018.21 -proposed tracker (LP: #2085915)
[ Ubuntu: 6.8.0-49.49 ]
* noble/linux: 6.8.0-49.49 -proposed tracker (LP: #2085942)
* CVE-2024-46800
- sch/netem: fix use after free in netem_dequeue
* mm/folios: xfs hangs with hung task timeouts with corrupted folio pointer
lists (LP: #2085495)
- lib/xarray: introduce a new helper xas_get_order
- mm/filemap: return early if failed to allocate memory for split
- mm/filemap: optimize filemap folio adding
* CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
[ Ubuntu-azure: 6.8.0-1017.20 ]
* noble/linux-azure: 6.8.0-1017.20 -proposed tracker (LP: #2082405)
* perf build disables tracepoint support (LP: #2076190)
- [Packaging] azure: update dependencies for perf
* Noble update: upstream stable patchset 2024-09-02 (LP: #2078304)
- [Config] azure: Update CONFIG_SERIAL_MULTI_INSTANTIATE
* RDMA/mana_ib patches (LP: #2084052)
- RDMA/mana_ib: use the correct page table index based on hardware page size
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
[ Ubuntu: 6.8.0-48.48 ]
* noble/linux: 6.8.0-48.48 -proposed tracker (LP: #2082437)
* [SRU][Noble] Bad EPP defaults cause performance regressions on select Intel
CPUs (LP: #2077470)
- x86/cpu/vfm: Update arch/x86/include/asm/intel-family.h
- cpufreq: intel_pstate: Allow model specific EPPs
- cpufreq: intel_pstate: Update default EPPs for Meteor Lake
- cpufreq: intel_pstate: Switch to new Intel CPU model defines
- cpufreq: intel_pstate: Update Meteor Lake EPPs
- cpufreq: intel_pstate: Use Meteor Lake EPPs for Arrow Lake
- cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids
* power: Enable intel_rapl driver (LP: #2078834)
- powercap: intel_rapl: Add support for ArrowLake-H platform
* x86/vmware: Add TDX hypercall support (LP: #2077729)
- x86/vmware: Introduce VMware hypercall API
- x86/vmware: Add TDX hypercall support
* Guest crashes post migration with migrate_misplaced_folio+0x4cc/0x5d0
(LP: #2076866)
- mm/mempolicy: use numa_node_id() instead of cpu_to_node()
- mm/numa_balancing: allow migrate on protnone reference with
MPOL_PREFERRED_MANY policy
- mm: convert folio_estimated_sharers() to folio_likely_mapped_shared()
- mm: factor out the numa mapping rebuilding into a new helper
- mm: support multi-size THP numa balancing
- mm/migrate: make migrate_misplaced_folio() return 0 on success
- mm/migrate: move NUMA hinting fault folio isolation + checks under PTL
- mm: fix possible OOB in numa_rebuild_large_mapping()
* Add 'mm: hold PTL from the first PTE while reclaiming a large folio' to fix
L2 Guest hang during LTP Test (LP: #2076147)
- mm: hold PTL from the first PTE while reclaiming a large folio
* KOP L2 guest fails to boot with 1 core - SMT8 topology (LP: #2070329)
- KVM: PPC: Book3S HV nestedv2: Add DPDES support in helper library for Guest
state buffer
- KVM: PPC: Book3S HV nestedv2: Fix doorbell emulation
* L2 Guest migration: continuously dumping while running NFS guest migration
(LP: #2076406)
- KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3
- KVM: PPC: Book3S HV: Fix the get_one_reg of SDAR
- KVM: PPC: Book3S HV: Add one-reg interface for DEXCR register
- KVM: PPC: Book3S HV nestedv2: Keep nested guest DEXCR in sync
- KVM: PPC: Book3S HV: Add one-reg interface for HASHKEYR register
- KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHKEYR in sync
- KVM: PPC: Book3S HV: Add one-reg interface for HASHPKEYR register
- KVM: PPC: Book3S HV nestedv2: Keep nested guest HASHPKEYR in sync
* perf build disables tracepoint support (LP: #2076190)
- [Packaging] perf: reenable libtraceevent
* Please backport the more restrictive XSAVES deactivation for Zen1/2 arch
(LP: #2077321)
- x86/CPU/AMD: Improve the erratum 1386 workaround
* Fix alsa scarlett2 driver in 6.8 (LP: #2076402)
- ALSA: scarlett2: Move initialisation code lower in the source
- ALSA: scarlett2: Implement handling of the ACK notification
* rtw89: reset IDMEM mode to prevent download firmware failure (LP: #2077396)
- wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
* CVE-2024-43858
- jfs: Fix array-index-out-of-bounds in diFree
* CVE-2024-42280
- mISDN: Fix a use after free in hfcmulti_tx()
* CVE-2024-42271
- net/iucv: fix use after free in iucv_sock_close()
* [Ubuntu-24.04] FADump with recommended crash size is making the L1 hang
(LP: #2060039)
- powerpc/64s/radix/kfence: map __kfence_pool at page granularity
* Noble update: upstream stable patchset 2024-09-09 (LP: #2079945)
- ocfs2: add bounds checking to ocfs2_check_dir_entry()
- jfs: don't walk off the end of ealist
- fs/ntfs3: Add a check for attr_names and oatbl
- fs/ntfs3: Validate ff offset
- usb: gadget: midi2: Fix incorrect default MIDI2 protocol setup
- ALSA: hda/realtek: Enable headset mic on Positivo SU C1400
- ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360
- arm64: dts: qcom: qrb4210-rb2: switch I2C2 to i2c-gpio
- arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: sm6350: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: ipq6018: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB
- ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused
- ALSA: seq: ump: Skip useless ports for static blocks
- filelock: Fix fcntl/close race recovery compat path
- tun: add missing verification for short frame
- tap: add missing verification for short frame
- s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
- ALSA: hda/tas2781: Add new quirk for Lenovo Hera2 Laptop
- arm64: dts: qcom: sc7180: Disable SuperSpeed instances in park mode
- arm64: dts: qcom: sc7280: Disable SuperSpeed instances in park mode
- arm64: dts: qcom: qrb2210-rb1: switch I2C2 to i2c-gpio
- arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB
- arm64: dts: qcom: sdm845: Disable SS instance in Parkmode for USB
- Upstream stable to v6.6.43, v6.9.12
* Noble update: upstream stable patchset 2024-09-02 (LP: #2078304)
- filelock: Remove locks reliably when fcntl/close race is detected
- scsi: core: alua: I/O errors for ALUA state transitions
- scsi: sr: Fix unintentional arithmetic wraparound
- scsi: qedf: Don't process stag work during unload and recovery
- scsi: qedf: Wait for stag work during unload
- scsi: qedf: Set qed_slowpath_params to zero before use
- efi/libstub: zboot.lds: Discard .discard sections
- ACPI: EC: Abort address space access upon error
- ACPI: EC: Avoid returning AE_OK on errors in address space handler
- tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs
- wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata
- wifi: mac80211: apply mcast rate only if interface is up
- wifi: mac80211: handle tasklet frames before stopping
- wifi: cfg80211: fix 6 GHz scan request building
- wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup
- wifi: iwlwifi: mvm: remove stale STA link data during restart
- wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd
- wifi: iwlwifi: mvm: handle BA session teardown in RF-kill
- wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option
- wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill
- wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan()
- selftests: cachestat: Fix build warnings on ppc64
- selftests/openat2: Fix build warnings on ppc64
- selftests/futex: pass _GNU_SOURCE without a value to the compiler
- of/irq: Factor out parsing of interrupt-map parent phandle+args from
of_irq_parse_raw()
- Input: silead - Always support 10 fingers
- net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input()
- ila: block BH in ila_output()
- arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process
- null_blk: fix validation of block size
- kconfig: gconf: give a proper initial state to the Save button
- kconfig: remove wrong expr_trans_bool()
- input: Add event code for accessibility key
- input: Add support for "Do Not Disturb"
- HID: Ignore battery for ELAN touchscreens 2F2C and 4116
- NFSv4: Fix memory leak in nfs4_set_security_label
- nfs: propagate readlink errors in nfs_symlink_filler
- nfs: Avoid flushing many pages with NFS_FILE_SYNC
- nfs: don't invalidate dentries on transient errors
- cachefiles: add consistency check for copen/cread
- cachefiles: Set object to close if ondemand_id < 0 in copen
- cachefiles: make on-demand read killable
- fs/file: fix the check in find_next_fd()
- mei: demote client disconnect warning on suspend to debug
- iomap: Fix iomap_adjust_read_range for plen calculation
- drm/exynos: dp: drop driver owner initialization
- drm: panel-orientation-quirks: Add quirk for Aya Neo KUN
- drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time
- nvme: avoid double free special payload
- nvmet: always initialize cqe.result
- ALSA: hda: cs35l56: Fix lifecycle of codec pointer
- wifi: cfg80211: wext: add extra SIOCSIWSCAN data check
- ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5
- KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group()
- drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency
- ALSA: hda/realtek: Add more codec ID to no shutup pins list
- spi: Fix OCTAL mode support
- cpumask: limit FORCE_NR_CPUS to just the UP case
- [Config] Remove FORCE_NR_CPUS
- selftests: openvswitch: Set value to nla flags.
- drm/amdgpu: Indicate CU havest info to CP
- ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE
- mips: fix compat_sys_lseek syscall
- Input: elantech - fix touchpad state on resume for Lenovo N24
- Input: i8042 - add Ayaneo Kun to i8042 quirk table
- ASoC: rt722-sdca-sdw: add silence detection register as volatile
- Input: xpad - add support for ASUS ROG RAIKIRI PRO
- ASoC: topology: Fix references to freed memory
- ASoC: topology: Do not assign fields that are already set
- bytcr_rt5640 : inverse jack detect for Archos 101 cesium
- ALSA: dmaengine: Synchronize dma channel after drop()
- ASoC: ti: davinci-mcasp: Set min period size using FIFO config
- ASoC: ti: omap-hdmi: Fix too long driver name
- ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback
- ASoC: rt722-sdca-sdw: add debounce time for type detection
- nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA.
- Input: ads7846 - use spi_device_id table
- can: kvaser_usb: fix return value for hif_usb_send_regout
- gpio: pca953x: fix pca953x_irq_bus_sync_unlock race
- octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver
- s390/sclp: Fix sclp_init() cleanup on failure
- platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources
- platform/x86: wireless-hotkey: Add support for LG Airplane Button
- platform/x86: lg-laptop: Remove LGEX0815 hotkey handling
- platform/x86: lg-laptop: Change ACPI device id
- platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB
- btrfs: qgroup: fix quota root leak after quota disable failure
- ibmvnic: Add tx check to prevent skb leak
- ALSA: PCM: Allow resume only for suspended streams
- ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx
- ALSA: dmaengine_pcm: terminate dmaengine before synchronize
- ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA
- net: usb: qmi_wwan: add Telit FN912 compositions
- net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and
DEV_STATS_ADD()
- powerpc/pseries: Whitelist dtl slub object for copying to userspace
- powerpc/eeh: avoid possible crash when edev->pdev changes
- scsi: libsas: Fix exp-attached device scan after probe failure scanned in
again after probe failed
- tee: optee: ffa: Fix missing-field-initializers warning
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- Bluetooth: btnxpuart: Enable Power Save feature on startup
- bluetooth/l2cap: sync sock recv cb and release
- erofs: ensure m_llen is reset to 0 if metadata is invalid
- drm/amd/display: Add refresh rate range check
- drm/amd/display: Account for cursor prefetch BW in DML1 mode support
- drm/amd/display: Fix refresh rate range for some panel
- drm/radeon: check bo_va->bo is non-NULL before using it
- fs: better handle deep ancestor chains in is_subdir()
- wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK
- drivers/perf: riscv: Reset the counter to hpmevent mapping while starting
cpus
- riscv: stacktrace: fix usage of ftrace_graph_ret_addr()
- spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices
- ksmbd: return FILE_DEVICE_DISK instead of super magic
- ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by
MAX_BDL_ENTRIES
- selftest/timerns: fix clang build failures for abs() calls
- selftests/vDSO: fix clang build errors and warnings
- hfsplus: fix uninit-value in copy_name
- selftests/bpf: Extend tcx tests to cover late tcx_entry release
- spi: mux: set ctlr->bits_per_word_mask
- ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE
- [Config] Update CONFIG_SERIAL_MULTI_INSTANTIATE
- cifs: fix noisy message on copy_file_range
- Bluetooth: L2CAP: Fix deadlock
- of/irq: Disable "interrupt-map" parsing for PASEMI Nemo
- wifi: cfg80211: wext: set ssids=NULL for passive scans
- wifi: mac80211: disable softirqs for queued frame handling
- wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL
- cachefiles: fix slab-use-after-free in fscache_withdraw_volume()
- cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie()
- btrfs: ensure fast fsync waits for ordered extents after a write failure
- PNP: Hide pnp_bus_type from the non-PNP code
- ACPI: AC: Properly notify powermanagement core about changes
- selftests/overlayfs: Fix build error on ppc64
- nvme-fabrics: use reserved tag for reg read/write command
- LoongArch: Fix GMAC's phy-mode definitions in dts
- io_uring: fix possible deadlock in io_register_iowq_max_workers()
- vfio: Create vfio_fs_type with inode per device
- vfio/pci: Use unmap_mapping_range()
- parport: amiga: Mark driver struct with __refdata to prevent section
mismatch
- drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time
- vfio/pci: Insert full vma on mmap'd MMIO fault
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5
- ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4
- ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4
- wifi: mac80211: Avoid address calculations via out of bounds array indexing
- drm/amd/display: change dram_clock_latency to 34us for dcn35
- closures: Change BUG_ON() to WARN_ON()
- ASoC: codecs: ES8326: Solve headphone detection issue
- ASoC: Intel: avs: Fix route override
- net: mvpp2: fill-in dev_port attribute
- btrfs: scrub: handle RST lookup error correctly
- clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs
- drm/amd/display: Update efficiency bandwidth for dcn351
- drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport
- btrfs: fix uninitialized return value in the ref-verify tool
- spi: davinci: Unset POWERDOWN bit when releasing resources
- mm: page_ref: remove folio_try_get_rcu()
- ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x
Gen4
- netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume()
- Upstream stable to v6.6.42, v6.9.11
* CVE-2024-27022
- Revert "Revert "fork: defer linking file vma until vma is fully
initialized""
* UBSAN: array-index-out-of-bounds in /build/linux-Z1RxaK/linux-
6.8.0/drivers/gpu/drm/amd/amdgpu/../pm/powerplay/hwmgr/processpptables.c:124
9:61 (LP: #2078041)
- drm/amdgpu/pptable: convert some variable sized arrays to [] style
- drm/amdgpu: convert some variable sized arrays to [] style
- drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds
* alsa: Headphone and Speaker couldn't output sound intermittently
(LP: #2077690)
- ALSA: hda/realtek - Fixed ALC256 headphone no sound
- ALSA: hda/realtek - FIxed ALC285 headphone no sound
* Fix ethernet performance on JSL and EHL (LP: #2077858)
- intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
* Noble update: upstream stable patchset 2024-08-29 (LP: #2078289)
- Revert "usb: xhci: prevent potential failure in handle_tx_event() for
Transfer events without TRB"
- Compiler Attributes: Add __uninitialized macro
- mm: prevent derefencing NULL ptr in pfn_section_valid()
- scsi: ufs: core: Fix ufshcd_clear_cmd racing issue
- scsi: ufs: core: Fix ufshcd_abort_one racing issue
- vfio/pci: Init the count variable in collecting hot-reset devices
- cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop
- cachefiles: stop sending new request when dropping object
- cachefiles: cancel all requests for the object that is being dropped
- cachefiles: wait for ondemand_object_worker to finish when dropping object
- cachefiles: cyclic allocation of msg_id to avoid reuse
- cachefiles: add missing lock protection when polling
- dsa: lan9303: Fix mapping between DSA port number and PHY address
- filelock: fix potential use-after-free in posix_lock_inode
- fs/dcache: Re-use value stored to dentry->d_flags instead of re-reading
- vfs: don't mod negative dentry count when on shrinker list
- net: bcmasp: Fix error code in probe()
- tcp: fix incorrect undo caused by DSACK of TLP retransmit
- bpf: Fix too early release of tcx_entry
- net: phy: microchip: lan87xx: reinit PHY after cable test
- skmsg: Skip zero length skb in sk_msg_recvmsg
- octeontx2-af: Fix incorrect value output on error path in
rvu_check_rsrc_availability()
- net: fix rc7's __skb_datagram_iter()
- i40e: Fix XDP program unloading while removing the driver
- net: ethernet: lantiq_etop: fix double free in detach
- bpf: fix order of args in call to bpf_map_kvcalloc
- bpf: make timer data struct more generic
- bpf: replace bpf_timer_init with a generic helper
- bpf: Fail bpf_timer_cancel when callback is being cancelled
- net: ethernet: mtk-star-emac: set mac_managed_pm when probing
- ppp: reject claimed-as-LCP but actually malformed packets
- ethtool: netlink: do not return SQI value if link is down
- udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port().
- net, sunrpc: Remap EPERM in case of connection failure in
xs_tcp_setup_socket
- s390: Mark psw in __load_psw_mask() as __unitialized
- arm64: dts: qcom: sc8180x: Fix LLCC reg property again
- firmware: cs_dsp: Fix overflow checking of wmfw header
- firmware: cs_dsp: Return error if block header overflows file
- firmware: cs_dsp: Validate payload length before processing block
- firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers
- ASoC: SOF: Intel: hda: fix null deref on system suspend entry
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files
- ARM: davinci: Convert comma to semicolon
- octeontx2-af: replace cpt slot with lf id on reg write
- octeontx2-af: fix a issue with cpt_lf_alloc mailbox
- octeontx2-af: fix detection of IP layer
- octeontx2-af: fix issue with IPv6 ext match for RSS
- octeontx2-af: fix issue with IPv4 match for RSS
- cifs: fix setting SecurityFlags to true
- Revert "sched/fair: Make sure to try to detach at least one movable task"
- tcp: avoid too many retransmit packets
- net: ks8851: Fix deadlock with the SPI chip variant
- net: ks8851: Fix potential TX stall after interface reopen
- USB: serial: option: add Telit generic core-dump composition
- USB: serial: option: add Telit FN912 rmnet compositions
- USB: serial: option: add Fibocom FM350-GL
- USB: serial: option: add support for Foxconn T99W651
- USB: serial: option: add Netprisma LCUK54 series modules
- USB: serial: option: add Rolling RW350-GL variants
- USB: serial: mos7840: fix crash on resume
- USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k
- usb: dwc3: pci: add support for the Intel Panther Lake
- usb: gadget: configfs: Prevent OOB read/write in usb_string_copy()
- USB: core: Fix duplicate endpoint bug by clearing reserved bits in the
descriptor
- misc: microchip: pci1xxxx: Fix return value of nvmem callbacks
- hpet: Support 32-bit userspace
- xhci: always resume roothubs if xHC was reset during resume
- s390/mm: Add NULL pointer check to crst_table_free() base_crst_free()
- mm: vmalloc: check if a hash-index is in cpu_possible_mask
- mm/filemap: skip to create PMD-sized page cache if needed
- mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray
- ksmbd: discard write access to the directory open
- iio: trigger: Fix condition for own trigger
- arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical
timer
- arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on
- nvmem: rmem: Fix return value of rmem_read()
- nvmem: meson-efuse: Fix return value of nvmem callbacks
- nvmem: core: only change name to fram for current attribute
- platform/x86: toshiba_acpi: Fix array out-of-bounds access
- tty: serial: ma35d1: Add a NULL check for of_node
- ALSA: hda/realtek: add quirk for Clevo V5[46]0TU
- ALSA: hda/realtek: Enable Mute LED on HP 250 G7
- ALSA: hda/realtek: Limit mic boost on VAIO PRO PX
- Fix userfaultfd_api to return EINVAL as expected
- pmdomain: qcom: rpmhpd: Skip retention level for Power Domains
- libceph: fix race between delayed_work() and ceph_monc_stop()
- ACPI: processor_idle: Fix invalid comparison with insertion sort for latency
- cpufreq: ACPI: Mark boost policy as enabled when setting boost
- cpufreq: Allow drivers to advertise boost enabled
- wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU
- wireguard: allowedips: avoid unaligned 64-bit memory accesses
- wireguard: queueing: annotate intentional data race in cpu round robin
- wireguard: send: annotate intentional data race in checking empty queue
- misc: fastrpc: Fix DSP capabilities request
- misc: fastrpc: Avoid updating PD type for capability request
- misc: fastrpc: Copy the complete capability structure to user
- misc: fastrpc: Fix memory leak in audio daemon attach operation
- misc: fastrpc: Fix ownership reassignment of remote heap
- misc: fastrpc: Restrict untrusted app to attach to privileged PD
- mm/shmem: disable PMD-sized page cache if needed
- mm/damon/core: merge regions aggressively when max_nr_regions is unmet
- selftests/net: fix gro.c compilation failure due to non-existent
opt_ipproto_off
- ext4: avoid ptr null pointer dereference
- sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath
- i2c: rcar: bring hardware to known state when probing
- i2c: mark HostNotify target address as used
- i2c: rcar: ensure Gen3+ reset does not disturb local targets
- i2c: testunit: avoid re-issued work after read message
- i2c: rcar: clear NO_RXDMA flag after resetting
- x86/bhi: Avoid warning in #DB handler due to BHI mitigation
- kbuild: Make ld-version.sh more robust against version string changes
- spi: axi-spi-engine: fix sleep calculation
- minixfs: Fix minixfs_rename with HIGHMEM
- bpf: Defer work in bpf_timer_cancel_and_free
- netfilter: nf_tables: prefer nft_chain_validate
- arm64: dts: qcom: x1e80100-*: Allocate some CMA buffers
- arm64: dts: qcom: sm6115: add iommu for sdhc_1
- arm64: dts: qcom: qdu1000: Fix LLCC reg property
- net: ethtool: Fix RSS setting
- nilfs2: fix kernel bug on rename operation of broken directory
- cachestat: do not flush stats in recency check
- mm: fix crashes from deferred split racing folio migration
- nvmem: core: limit cell sysfs permissions to main attribute ones
- serial: imx: ensure RTS signal is not left active after shutdown
- mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE
- mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length
- mm/readahead: limit page cache size in page_cache_ra_order()
- Revert "dt-bindings: cache: qcom,llcc: correct QDU1000 reg entries"
- sched/deadline: Fix task_struct reference leak
- Upstream stable to v6.6.40, v6.6.41, v6.9.10
* [SRU][HPE 24.04] Intel FVL NIC FW flash fails with inbox driver, causing
driver not detected (LP: #2076675) // Noble update: upstream stable patchset
2024-08-29 (LP: #2078289)
- i40e: fix: remove needless retries of NVM update
* CVE-2024-41022
- drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq()
* Deadlock occurs while suspending md raid (LP: #2073695)
- md: change the return value type of md_write_start to void
- md: fix deadlock between mddev_suspend and flush bio
* Lenovo X12 Detachable Gen 2 unresponsive under light load (LP: #2076361)
- drm/i915: Enable Wa_16019325821
- drm/i915/guc: Add support for w/a KLVs
- drm/i915/guc: Enable Wa_14019159160
* Regression: unable to reach low idle states on Tiger Lake (LP: #2072679)
- SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of
- SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain
* Noble update: upstream stable patchset 2024-08-22 (LP: #2077600)
- locking/mutex: Introduce devm_mutex_init()
- leds: an30259a: Use devm_mutex_init() for mutex initialization
- crypto: hisilicon/debugfs - Fix debugfs uninit process issue
- drm/lima: fix shared irq handling on driver remove
- powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
- media: dvb: as102-fe: Fix as10x_register_addr packing
- media: dvb-usb: dib0700_devices: Add missing release_firmware()
- IB/core: Implement a limit on UMAD receive List
- scsi: qedf: Make qedf_execute_tmf() non-preemptible
- selftests/bpf: adjust dummy_st_ops_success to detect additional error
- selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops
- selftests/bpf: dummy_st_ops should reject 0 for non-nullable params
- RISC-V: KVM: Fix the initial sample period value
- crypto: aead,cipher - zeroize key buffer after use
- media: mediatek: vcodec: Only free buffer VA that is not NULL
- drm/amdgpu: Fix uninitialized variable warnings
- drm/amdgpu: Initialize timestamp for some legacy SOCs
- drm/amd/display: Check index msg_id before read or write
- drm/amd/display: Check pipe offset before setting vblank
- drm/amd/display: Skip finding free audio for unknown engine_id
- drm/amd/display: Fix uninitialized variables in DM
- drm/amdgpu: fix uninitialized scalar variable warning
- drm/amdgpu: fix the warning about the expression (int)size - len
- media: dw2102: Don't translate i2c read into write
- riscv: Apply SiFive CIP-1200 workaround to single-ASID sfence.vma
- sctp: prefer struct_size over open coded arithmetic
- firmware: dmi: Stop decoding on broken entry
- Input: ff-core - prefer struct_size over open coded arithmetic
- wifi: mt76: replace skb_put with skb_put_zero
- wifi: mt76: mt7996: add sanity checks for background radar trigger
- thermal/drivers/mediatek/lvts_thermal: Check NULL ptr on lvts_data
- media: dvb-frontends: tda18271c2dd: Remove casting during div
- media: s2255: Use refcount_t instead of atomic_t for num_channels
- media: dvb-frontends: tda10048: Fix integer overflow
- i2c: i801: Annotate apanel_addr as __ro_after_init
- powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
- orangefs: fix out-of-bounds fsid access
- kunit: Fix timeout message
- powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
- selftests/net: fix uninitialized variables
- igc: fix a log entry using uninitialized netdev
- bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
- serial: imx: Raise TX trigger level to 8
- jffs2: Fix potential illegal address access in jffs2_free_inode
- s390/pkey: Wipe sensitive data on failure
- btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation
warning
- cdrom: rearrange last_media_change check to avoid unintentional overflow
- tools/power turbostat: Remember global max_die_id
- vhost: Use virtqueue mutex for swapping worker
- vhost: Release worker mutex during flushes
- vhost_task: Handle SIGKILL by flushing work and exiting
- mac802154: fix time calculation in ieee802154_configure_durations()
- net: phy: phy_device: Fix PHY LED blinking code comment
- UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
- net/mlx5: E-switch, Create ingress ACL when needed
- net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
- Bluetooth: hci_event: Fix setting of unicast qos interval
- Bluetooth: Ignore too large handle values in BIG
- Bluetooth: ISO: Check socket flag instead of hcon
- bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX
- KVM: s390: fix LPSWEY handling
- e1000e: Fix S0ix residency on corporate systems
- gpiolib: of: fix lookup quirk for MIPS Lantiq
- net: allow skb_datagram_iter to be called from any context
- net: txgbe: initialize num_q_vectors for MSI/INTx interrupts
- net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from
__netif_rx()
- gpio: mmio: do not calculate bgpio_bits via "ngpios"
- wifi: wilc1000: fix ies_len type in connect path
- riscv: kexec: Avoid deadlock in kexec crash path
- netfilter: nf_tables: unconditionally flush pending work before notifier
- bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
- selftests: fix OOM in msg_zerocopy selftest
- selftests: make order checking verbose in msg_zerocopy selftest
- inet_diag: Initialize pad field in struct inet_diag_req_v2
- mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI
file
- gpiolib: of: add polarity quirk for TSC2005
- cpu: Fix broken cmdline "nosmp" and "maxcpus=0"
- platform/x86: toshiba_acpi: Fix quickstart quirk handling
- Revert "igc: fix a log entry using uninitialized netdev"
- nilfs2: fix inode number range checks
- nilfs2: add missing check for inode numbers on directory entries
- mm: optimize the redundant loop of mm_update_owner_next()
- mm: avoid overflows in dirty throttling logic
- btrfs: fix adding block group to a reclaim list and the unused list during
reclaim
- scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
- Bluetooth: hci_bcm4377: Fix msgid release
- Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
- can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
- fsnotify: Do not generate events for O_PATH file descriptors
- Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(),
again"
- drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
- drm/amdgpu/atomfirmware: silence UBSAN warning
- drm: panel-orientation-quirks: Add quirk for Valve Galileo
- clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag
- clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common
- powerpc/pseries: Fix scv instruction crash with kexec
- powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0
- mtd: rawnand: Ensure ECC configuration is propagated to upper layers
- mtd: rawnand: Fix the nand_read_data_op() early check
- mtd: rawnand: Bypass a couple of sanity checks during NAND identification
- mtd: rawnand: rockchip: ensure NVDDR timings are rejected
- net: stmmac: dwmac-qcom-ethqos: fix error array size
- arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
- media: dw2102: fix a potential buffer overflow
- clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
- clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs
- clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
- i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
- fs/ntfs3: Mark volume as dirty if xattr is broken
- ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
- vhost-scsi: Handle vhost_vq_work_queue failures for events
- nvme-multipath: find NUMA path only for online numa-node
- dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
- connector: Fix invalid conversion in cn_proc.h
- nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
- regmap-i2c: Subtract reg size from max_write
- platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6"
tablet
- platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
- nvmet: fix a possible leak when destroy a ctrl during qp establishment
- kbuild: fix short log for AS in link-vmlinux.sh
- nfc/nci: Add the inconsistency check between the input data length and count
- spi: cadence: Ensure data lines set to low during dummy-cycle period
- ALSA: ump: Set default protocol when not given explicitly
- drm/amdgpu: silence UBSAN warning
- null_blk: Do not allow runt zone with zone capacity smaller then zone size
- nilfs2: fix incorrect inode allocation from reserved inodes
- leds: mlxreg: Use devm_mutex_init() for mutex initialization
- net: dql: Avoid calling BUG() when WARN() is enough
- drm/xe: Add outer runtime_pm protection to xe_live_ktest at xe_dma_buf
- bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable
- drm/amdgpu: fix double free err_addr pointer warnings
- drm/amd/display: Fix overlapping copy within dml_core_mode_programming
- drm/amd/display: update pipe topology log to support subvp
- drm/amd/display: Do not return negative stream id for array
- drm/amd/display: ASSERT when failing to find index by plane/stream id
- usb: xhci: prevent potential failure in handle_tx_event() for Transfer
events without TRB
- media: i2c: st-mipid02: Use the correct div function
- media: tc358746: Use the correct div_ function
- crypto: hisilicon/sec2 - fix for register offset
- s390/pkey: Use kfree_sensitive() to fix Coccinelle warnings
- s390/pkey: Wipe copies of clear-key structures on failure
- s390/pkey: Wipe copies of protected- and secure-keys
- wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values
- wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP
- net: txgbe: remove separate irq request for MSI and INTx
- net: txgbe: add extra handle for MSI/INTx into thread irq handle
- net: txgbe: free isb resources at the right time
- btrfs: always do the basic checks for btrfs_qgroup_inherit structure
- net: phy: aquantia: add missing include guards
- drm/fbdev-generic: Fix framebuffer on big endian devices
- net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only
- net: rswitch: Avoid use-after-free in rswitch_poll()
- ice: use proper macro for testing bit
- drm/xe/mcr: Avoid clobbering DSS steering
- tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO.
- btrfs: zoned: fix calc_available_free_space() for zoned mode
- btrfs: fix folio refcount in __alloc_dummy_extent_buffer()
- Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report
- drm/xe: fix error handling in xe_migrate_update_pgtables
- drm/ttm: Always take the bo delayed cleanup path for imported bos
- fs: don't misleadingly warn during thaw operations
- drm/amdkfd: Let VRAM allocations go to GTT domain on small APUs
- drm/amdgpu: correct hbm field in boot status
- Upstream stable to v6.6.38, v6.6.39, v6.9.9
* Panels show garbage or flickering when i915.psr2 enabled (LP: #2069993)
- SAUCE: drm/i915/display/psr: add a psr2 disable quirk table
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x93_0x15
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8b_0x07
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x78_0x07
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x30_0xe4_0x8c_0x07
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0x9a_0xf9
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x4d_0x10_0x8f_0x15
- SAUCE: drm/i915/display/psr: disable psr2 for panel_0x06_0xaf_0xa3_0xc3
* Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux
6.8 (LP: #2062951)
- SAUCE: iommu/intel: disable DMAR for SKL integrated gfx
* [SRU][22.04.5]: mpi3mr driver update (LP: #2073583)
- scsi: mpi3mr: HDB allocation and posting for hardware and firmware buffers
- scsi: mpi3mr: Trigger support
- scsi: mpi3mr: Add ioctl support for HDB
- scsi: mpi3mr: Support PCI Error Recovery callback handlers
- scsi: mpi3mr: Prevent PCI writes from driver during PCI error recovery
- scsi: mpi3mr: Driver version update
* Fix power consumption while using HW accelerated video decode on AMD
platforms (LP: #2073282)
- drm/amdgpu/vcn: identify unified queue in sw init
- drm/amdgpu/vcn: not pause dpg for unified queue
* Noble update: upstream stable patchset 2024-08-09 (LP: #2076435)
- usb: typec: ucsi: Never send a lone connector change ack
- usb: typec: ucsi: Ack also failed Get Error commands
- Input: ili210x - fix ili251x_read_touch_data() return value
- pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
- pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
- pinctrl: rockchip: use dedicated pinctrl type for RK3328
- pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
- MIPS: pci: lantiq: restore reset gpio polarity
- ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
- ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision
- ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init
- workqueue: Increase worker desc's length to 32
- ASoC: q6apm-lpass-dai: close graph on prepare errors
- bpf: Add missed var_off setting in set_sext32_default_val()
- bpf: Add missed var_off setting in coerce_subreg_to_size_sx()
- s390/pci: Add missing virt_to_phys() for directed DIBV
- ASoC: amd: acp: add a null check for chip_pdev structure
- ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
- ASoC: fsl-asoc-card: set priv->pdev before using it
- net: dsa: microchip: fix initial port flush problem
- openvswitch: get related ct labels from its master if it is not confirmed
- mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
- ibmvnic: Free any outstanding tx skbs during scrq reset
- net: phy: micrel: add Microchip KSZ 9477 to the device table
- net: dsa: microchip: use collision based back pressure mode
- ice: Rebuild TC queues on VSI queue reconfiguration
- xdp: Remove WARN() from __xdp_reg_mem_model()
- netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when
CONFIG_SYSCTL=n
- btrfs: use NOFS context when getting inodes during logging and log replay
- Fix race for duplicate reqsk on identical SYN
- ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages
- net: dsa: microchip: fix wrong register write when masking interrupt
- sparc: fix old compat_sys_select()
- sparc: fix compat recv/recvfrom syscalls
- parisc: use correct compat recv/recvfrom syscalls
- powerpc: restore some missing spu syscalls
- tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
- ALSA: seq: Fix missing MSB in MIDI2 SPP conversion
- netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data
registers
- net: mana: Fix possible double free in error handling path
- drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
- vduse: validate block features only with block devices
- vduse: Temporarily fail if control queue feature requested
- x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
- mtd: partitions: redboot: Added conversion of operands to a larger type
- wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
- bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
- RDMA/restrack: Fix potential invalid address access
- net/iucv: Avoid explicit cpumask var allocation on stack
- net/dpaa2: Avoid explicit cpumask var allocation on stack
- crypto: ecdh - explicitly zeroize private_key
- ALSA: emux: improve patch ioctl data validation
- media: dvbdev: Initialize sbuf
- irqchip/loongson: Select GENERIC_IRQ_EFFECTIVE_AFF_MASK if SMP for
IRQ_LOONGARCH_CPU
- soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
- gfs2: Fix NULL pointer dereference in gfs2_log_flush
- drm/radeon/radeon_display: Decrease the size of allocated memory
- nvme: fixup comment for nvme RDMA Provider Type
- drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
- gpio: davinci: Validate the obtained number of IRQs
- RISC-V: fix vector insn load/store width mask
- drm/amdgpu: Fix pci state save during mode-1 reset
- riscv: stacktrace: convert arch_stack_walk() to noinstr
- gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
- randomize_kstack: Remove non-functional per-arch entropy filtering
- x86: stop playing stack games in profile_pc()
- parisc: use generic sys_fanotify_mark implementation
- Revert "MIPS: pci: lantiq: restore reset gpio polarity"
- pinctrl: qcom: spmi-gpio: drop broken pm8008 support
- ocfs2: fix DIO failure due to insufficient transaction credits
- nfs: drop the incorrect assertion in nfs_swap_rw()
- mm: fix incorrect vbq reference in purge_fragmented_block
- mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos
- mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
- mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
- mmc: sdhci: Do not invert write-protect twice
- mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
- iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
- counter: ti-eqep: enable clock at probe
- kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates
- kbuild: Fix build target deb-pkg: ln: failed to create hard link
- i2c: testunit: don't erase registers after STOP
- i2c: testunit: discard write requests while old command is running
- ata: libata-core: Fix null pointer dereference on error
- ata,scsi: libata-core: Do not leak memory for ata_port struct members
- iio: adc: ad7266: Fix variable checking bug
- iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
- iio: chemical: bme680: Fix pressure value output
- iio: chemical: bme680: Fix calibration data variable
- iio: chemical: bme680: Fix overflows in compensate() functions
- iio: chemical: bme680: Fix sensor data read operation
- net: usb: ax88179_178a: improve link status logs
- usb: gadget: printer: SS+ support
- usb: gadget: printer: fix races against disable
- usb: musb: da8xx: fix a resource leak in probe()
- usb: atm: cxacru: fix endpoint checking in cxacru_bind()
- usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to
avoid deadlock
- usb: gadget: aspeed_udc: fix device address configuration
- usb: typec: ucsi: glink: fix child node release in probe function
- usb: ucsi: stm32: fix command completion handling
- usb: dwc3: core: Add DWC31 version 2.00a controller
- usb: dwc3: core: Workaround for CSR read timeout
- Revert "serial: core: only stop transmit when HW fifo is empty"
- serial: 8250_omap: Implementation of Errata i2310
- serial: imx: set receiver level before starting uart
- serial: core: introduce uart_port_tx_limited_flags()
- serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited()
- tty: mcf: MCF54418 has 10 UARTS
- net: can: j1939: Initialize unused data in j1939_send_one()
- net: can: j1939: recover socket queue on CAN bus error during BAM
transmission
- net: can: j1939: enhanced error handling for tightly received RTS messages
in xtp_rx_rts_session_new
- PCI/MSI: Fix UAF in msi_capability_init
- cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
- irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node()
- cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
- irqchip/loongson-liointc: Set different ISRs for different cores
- kbuild: Install dtb files as 0644 in Makefile.dtbinst
- sh: rework sync_file_range ABI
- btrfs: zoned: fix initial free space detection
- csky, hexagon: fix broken sys_sync_file_range
- hexagon: fix fadvise64_64 calling conventions
- drm/drm_file: Fix pid refcounting race
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
- drm/fbdev-dma: Only set smem_start is enable per module option
- drm/amdgpu: avoid using null object of framebuffer
- drm/i915/gt: Fix potential UAF by revoke of fence registers
- drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
- drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is
present
- drm/amdgpu/atomfirmware: fix parsing of vram_info
- batman-adv: Don't accept TT entries for out-of-spec VIDs
- can: mcp251xfd: fix infinite loop when xmit fails
- ata: ahci: Clean up sysfs file on error
- ata: libata-core: Fix double free on error
- ftruncate: pass a signed offset
- syscalls: fix compat_sys_io_pgetevents_time64 usage
- syscalls: fix sys_fanotify_mark prototype
- Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
- mm/page_alloc: Separate THP PCP into movable and non-movable categories
- arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
- arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
- arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on
rk3399-gru
- ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
- arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A
- arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
- arm64: dts: rockchip: Add sound-dai-cells for RK3368
- cxl/region: Move cxl_dpa_to_region() work to the region driver
- cxl/region: Avoid null pointer dereference in region lookup
- cxl/region: check interleave capability
- serial: imx: only set receiver level if it is zero
- serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
- tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
- pwm: stm32: Improve precision of calculation in .apply()
- pwm: stm32: Fix for settings using period > UINT32_MAX
- pwm: stm32: Calculate prescaler with a division instead of a loop
- pwm: stm32: Refuse too small period requests
- ASoC: cs42l43: Increase default type detect time and button delay
- ASoC: amd: acp: move chip->flag variable assignment
- bonding: fix incorrect software timestamping report
- mlxsw: pci: Fix driver initialization with Spectrum-4
- vxlan: Pull inner IP header in vxlan_xmit_one().
- ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link
- af_unix: Stop recv(MSG_PEEK) at consumed OOB skb.
- af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head.
- af_unix: Don't stop recv() at consumed ex-OOB skb.
- af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head.
- bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
- bpf: Take return from set_memory_rox() into account with
bpf_jit_binary_lock_ro()
- drm/xe: Fix potential integer overflow in page size calculation
- drm/xe: Add a NULL check in xe_ttm_stolen_mgr_init
- drm/amd/display: correct hostvm flag
- drm/amd/display: Skip pipe if the pipe idx not set properly
- bpf: Add a check for struct bpf_fib_lookup size
- drm/xe/xe_devcoredump: Check NULL before assignments
- iommu/arm-smmu-v3: Do not allow a SVA domain to be set on the wrong PASID
- evm: Enforce signatures on unsupported filesystem for EVM_INIT_X509
- drm/xe: Check pat.ops before dumping PAT settings
- nvmet: do not return 'reserved' for empty TSAS values
- nvmet: make 'tsas' attribute idempotent for RDMA
- iommu/amd: Fix GT feature enablement again
- gpiolib: cdev: Ignore reconfiguration without direction
- kasan: fix bad call to unpoison_slab_object
- mm/memory: don't require head page for do_set_pmd()
- SUNRPC: Fix backchannel reply, again
- Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment"
- Revert "usb: gadget: u_ether: Replace netif_stop_queue with
netif_device_detach"
- tty: serial: 8250: Fix port count mismatch with the device
- tty: mxser: Remove __counted_by from mxser_board.ports[]
- nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[]
- ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models
- bcachefs: Fix sb_field_downgrade validation
- bcachefs: Fix sb-downgrade validation
- bcachefs: Fix bch2_sb_downgrade_update()
- bcachefs: Fix setting of downgrade recovery passes/errors
- bcachefs: btree_gc can now handle unknown btrees
- pwm: stm32: Fix calculation of prescaler
- pwm: stm32: Fix error message to not describe the previous error path
- cxl/region: Convert cxl_pmem_region_alloc to scope-based resource management
- cxl/mem: Fix no cxl_nvd during pmem region auto-assembling
- arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B
- netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
- netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait
- Upstream stable to v6.6.37, v6.9.8
* [UBUNTU 22.04] s390/cpum_cf: make crypto counters upward compatible
(LP: #2074380)
- s390/cpum_cf: make crypto counters upward compatible across machine types
* CVE-2024-45016
- netem: fix return value if duplicate enqueue fails
[ Ubuntu-azure: 6.8.0-1016.18 ]
* noble/linux-azure: 6.8.0-1016.18 -proposed tracker (LP: #2082092)
* Revert fix for "Kernel fails to enable XSAVE when running in a “v5” AMD SEV-
SNP VM" (LP: #2079841)
- Revert "UBUNTU: SAUCE: x86/hyperv: temporarily disable CET SS on SEV-SNP due
to a paravisor bug"
* net: mana: Fix RX buf alloc_size alignment and atomic op panic
(LP: #2079854)
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
* Backport "net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response"
(LP: #2078001)
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
[ Ubuntu: 6.8.0-47.47 ]
* noble/linux: 6.8.0-47.47 -proposed tracker (LP: #2082118)
* CVE-2024-45016
- netem: fix return value if duplicate enqueue fails
[ Ubuntu-azure: 6.8.0-1015.17 ]
* noble/linux-azure: 6.8.0-1015.17 -proposed tracker (LP: #2078074)
[ Ubuntu: 6.8.0-45.45 ]
* noble/linux: 6.8.0-45.45 -proposed tracker (LP: #2078100)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/s2024.08.05)
* Noble update: upstream stable patchset 2024-08-09 (LP: #2076435) //
CVE-2024-41009
- bpf: Fix overrunning reservations in ringbuf
* CVE-2024-42160
- f2fs: check validation of fault attrs in f2fs_build_fault_attr()
- f2fs: Add inline to f2fs_build_fault_attr() stub
* Noble update: upstream stable patchset 2024-08-22 (LP: #2077600) //
CVE-2024-42224
- net: dsa: mv88e6xxx: Correct check for empty list
* Noble update: upstream stable patchset 2024-08-22 (LP: #2077600) //
CVE-2024-42154
- tcp_metrics: validate source addr length
* CVE-2024-42228
- drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc
* CVE-2024-42159
- scsi: mpi3mr: Sanitise num_phys
[ Ubuntu-azure: 6.8.0-1014.16 ]
* noble/linux-azure: 6.8.0-1014.16 -proposed tracker (LP: #2076621)
* Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
- [Config] azure: Drivers now depend on DRM_DW_HDMI
- [Config] azure: Update CONFIG_AD9467, CONFIG_ADI_AXI_ADC, CONFIG_IIO_BACKEND
* kernel panic was caused by a fatal exception due to a null pointer
dereference in the iptable_nat module (LP: #2076291)
- netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
[ Ubuntu: 6.8.0-44.44 ]
* noble/linux: 6.8.0-44.44 -proposed tracker (LP: #2076647)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2024.08.05)
* Disable PCI_DYNAMIC_OF_NODES in Ubuntu (LP: #2074376)
- [Config] Disable PCI_DYNAMIC_OF_NODES
* [SRU] Turbostat support for Arrow Lake H (LP: #2074372)
- tools/power turbostat: Enhance ARL/LNL support
- x86/cpu: Add model number for another Intel Arrow Lake mobile processor
- tools/power turbostat: Add ARL-H support
* Noble update: upstream stable patchset 2024-07-30 (LP: #2075154)
- fs/writeback: bail out if there is no more inodes for IO and queued once
- padata: Disable BH when taking works lock on MT path
- crypto: hisilicon/sec - Fix memory leak for sec resource release
- crypto: hisilicon/qm - Add the err memory release process to qm uninit
- io_uring/sqpoll: work around a potential audit memory leak
- rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
- rcutorture: Make stall-tasks directly exit when rcutorture tests end
- rcutorture: Fix invalid context warning when enable srcu barrier testing
- block/ioctl: prefer different overflow check
- ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
- selftests/bpf: Prevent client connect before server bind in
test_tc_tunnel.sh
- selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
- batman-adv: bypass empty buckets in batadv_purge_orig_ref()
- wifi: ath9k: work around memset overflow warning
- af_packet: avoid a false positive warning in packet_setsockopt()
- ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets
- drop_monitor: replace spin_lock by raw_spin_lock
- scsi: qedi: Fix crash while reading debugfs attribute
- net: sfp: add quirk for ATS SFP-GE-T 1000Base-TX module
- net/sched: fix false lockdep warning on qdisc root lock
- kselftest: arm64: Add a null pointer check
- net: dsa: realtek: keep default LED state in rtl8366rb
- netpoll: Fix race condition in netpoll_owner_active
- wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
- HID: Add quirk for Logitech Casa touchpad
- HID: asus: fix more n-key report descriptors if n-key quirked
- ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7
- Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
- drm/amd/display: Exit idle optimizations before HDCP execution
- platform/x86: toshiba_acpi: Add quirk for buttons on Z830
- ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0C0F
- drm/lima: add mask irq callback to gp and pp
- drm/lima: mask irqs in timeout path before hard reset
- ALSA: hda/realtek: Add quirks for Lenovo 13X
- powerpc/pseries: Enforce hcall result buffer validity and size
- media: intel/ipu6: Fix build with !ACPI
- media: mtk-vcodec: potential null pointer deference in SCP
- powerpc/io: Avoid clang null pointer arithmetic warnings
- platform/x86: p2sb: Don't init until unassigned resources have been assigned
- power: supply: cros_usbpd: provide ID table for avoiding fallback match
- iommu/arm-smmu-v3: Free MSIs in case of ENOMEM
- ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()
- kprobe/ftrace: bail out if ftrace was killed
- usb: gadget: uvc: configfs: ensure guid to be valid before set
- f2fs: remove clear SB_INLINECRYPT flag in default_options
- usb: misc: uss720: check for incompatible versions of the Belkin F5U002
- Avoid hw_desc array overrun in dw-axi-dmac
- usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga
Tab2 1380
- usb: typec: ucsi_glink: drop special handling for CCI_BUSY
- udf: udftime: prevent overflow in udf_disk_stamp_to_time()
- PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
- f2fs: don't set RO when shutting down f2fs
- MIPS: Octeon: Add PCIe link status check
- serial: imx: Introduce timeout when waiting on transmitter empty
- serial: exar: adding missing CTI and Exar PCI ids
- usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API
- tty: add the option to have a tty reject a new ldisc
- vfio/pci: Collect hot-reset devices to local buffer
- cpufreq: amd-pstate: fix memory leak on CPU EPP exit
- ACPI: EC: Install address space handler at the namespace root
- PCI: Do not wait for disconnected devices when resuming
- ALSA: hda: cs35l41: Possible null pointer dereference in
cs35l41_hda_unbind()
- ALSA: seq: ump: Fix missing System Reset message handling
- MIPS: Routerboard 532: Fix vendor retry check code
- mips: bmips: BCM6358: make sure CBR is correctly set
- tracing: Build event generation tests only as modules
- ALSA: hda/realtek: Remove Framework Laptop 16 from quirks
- ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option
- ice: avoid IRQ collision to fix init failure on ACPI S3 resume
- btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes
- net: mvpp2: use slab_build_skb for oversized frames
- cipso: fix total option length computation
- ALSA: hda: cs35l56: Component should be unbound before deconstruction
- ALSA: hda: tas2781: Component should be unbound before deconstruction
- bpf: Avoid splat in pskb_pull_reason
- ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM
- netrom: Fix a memory leak in nr_heartbeat_expiry()
- ipv6: prevent possible NULL deref in fib6_nh_init()
- ipv6: prevent possible NULL dereference in rt6_probe()
- xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
- netns: Make get_net_ns() handle zero refcount net
- qca_spi: Make interrupt remembering atomic
- net: lan743x: disable WOL upon resume to restore full data path operation
- net: lan743x: Support WOL at both the PHY and MAC appropriately
- net: phy: mxl-gpy: Remove interrupt mask clearing from config_init
- net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
- tipc: force a dst refcount before doing decryption
- sched: act_ct: add netns into the key of tcf_ct_flow_table
- ptp: fix integer overflow in max_vclocks_store
- selftests: openvswitch: Use bash as interpreter
- net: stmmac: No need to calculate speed divider when offload is disabled
- virtio_net: checksum offloading handling fix
- virtio_net: fixing XDP for fully checksummed packets handling
- octeontx2-pf: Add error handling to VLAN unoffload handling
- octeontx2-pf: Fix linking objects into multiple modules
- netfilter: ipset: Fix suspicious rcu_dereference_protected()
- seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6
behaviors
- netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core
- ice: Fix VSI list rule with ICE_SW_LKUP_LAST type
- bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
- net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
- RDMA/bnxt_re: Fix the max msix vectors macro
- spi: cs42l43: Correct SPI root clock speed
- RDMA/rxe: Fix responder length checking for UD request packets
- regulator: core: Fix modpost error "regulator_get_regmap" undefined
- dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
- dmaengine: ioatdma: Fix leaking on version mismatch
- dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
- dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
- dmaengine: fsl-edma: avoid linking both modules
- dmaengine: ioatdma: Fix missing kmem_cache_destroy()
- regulator: bd71815: fix ramp values
- thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse
data
- arm64: dts: imx8mp: Fix TC9595 input clock on DH i.MX8M Plus DHCOM SoM
- arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix BT shutdown GPIO
- arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property
- arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin
- ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is
fine."
- spi: spi-imx: imx51: revert burst length calculation back to bits_per_word
- io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed
- firmware: psci: Fix return value from psci_system_suspend()
- RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init
- RDMA/mlx5: Add check for srq max_sge attribute
- RDMA/mana_ib: Ignore optional access flags for MRs
- ACPI: EC: Evaluate orphan _REG under EC device
- arm64: defconfig: enable the vf610 gpio driver
- ext4: avoid overflow when setting values via sysfs
- ext4: fix slab-out-of-bounds in ext4_mb_find_good_group_avg_frag_lists()
- net: stmmac: Assign configured channel value to EXTTS event
- net: usb: ax88179_178a: improve reset check
- net: do not leave a dangling sk pointer, when socket creation fails
- btrfs: retry block group reclaim without infinite loop
- scsi: ufs: core: Free memory allocated for model before reinit
- cifs: fix typo in module parameter enable_gcm_256
- LoongArch: Fix watchpoint setting error
- LoongArch: Trigger user-space watchpoints correctly
- LoongArch: Fix multiple hardware watchpoint issues
- KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
- KVM: arm64: Disassociate vcpus from redistributor region on teardown
- KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
- RDMA/rxe: Fix data copy for IB_SEND_INLINE
- RDMA/mlx5: Remove extra unlock on error path
- RDMA/mlx5: Follow rb_key.ats when creating new mkeys
- ovl: fix encoding fid for lower only root
- ALSA: hda/realtek: Limit mic boost on N14AP7
- ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9
- drm/i915/mso: using joiner is not possible with eDP MSO
- drm/radeon: fix UBSAN warning in kv_dpm.c
- drm/amdgpu: fix UBSAN warning in kv_dpm.c
- dt-bindings: dma: fsl-edma: fix dma-channels constraints
- ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty()
- ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()
- gcov: add support for GCC 14
- kcov: don't lose track of remote references during softirqs
- efi/x86: Free EFI memory map only when installing a new one.
- serial: 8250_dw: Revert "Move definitions to the shared header"
- mm: mmap: allow for the maximum number of bits for randomizing mmap_base by
default
- tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
- mm/page_table_check: fix crash on ZONE_DEVICE
- i2c: ocores: set IACK bit after core is enabled
- dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema
- dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller
schema
- spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup()
- arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
- spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4
- perf: script: add raw|disasm arguments to --insn-trace option
- nbd: Improve the documentation of the locking assumptions
- nbd: Fix signal handling
- tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
- x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
- x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
- drm/amd/display: revert Exit idle optimizations before HDCP execution
- ASoC: Intel: sof-sdw: really remove FOUR_SPEAKER quirk
- net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
- kprobe/ftrace: fix build error due to bad function definition
- hid: asus: asus_report_fixup: fix potential read out of bounds
- Revert "mm: mmap: allow for the maximum number of bits for randomizing
mmap_base by default"
- platform/chrome: cros_usbpd_logger: provide ID table for avoiding fallback
match
- platform/chrome: cros_usbpd_notify: provide ID table for avoiding fallback
match
- ubsan: Avoid i386 UBSAN handler crashes with Clang
- arm64: defconfig: select INTERCONNECT_QCOM_SM6115 as built-in
- bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie.
- devlink: use kvzalloc() to allocate devlink instance resources
- wifi: rtw89: 8852c: add quirk to set PCI BER for certain platforms
- clocksource: Make watchdog and suspend-timing multiplication overflow safe
- ACPI: resource: Do IRQ override on GMxBGxx (XMG APEX 17 M23)
- wifi: ath12k: add string type to search board data in board-2.bin for
WCN7850
- wifi: ath12k: add firmware-2.bin support
- wifi: ath12k: fix kernel crash during resume
- arm64/sysreg: Update PIE permission encodings
- ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MV
- wifi: ath12k: fix the problem that down grade phy mode operation
- bpf: avoid uninitialized warnings in verifier_global_subprogs.c
- selftests: net: fix timestamp not arriving in cmsg_time.sh
- net: ena: Add validation for completion descriptors consistency
- drm/amd/display: Workaround register access in idle race with cursor
- cgroup/cpuset: Make cpuset hotplug processing synchronous
- platform/x86: x86-android-tablets: Unregister devices in reverse order
- platform/x86: x86-android-tablets: Add Lenovo Yoga Tablet 2 Pro 1380F/L data
- ALSA: hda/realtek: Add quirks for HP Omen models using CS35L41
- ext4: fold quota accounting into ext4_xattr_inode_lookup_create()
- ext4: do not create EA inode under buffer lock
- f2fs: fix to detect inconsistent nat entry during truncation
- usb: typec: ucsi_glink: rework quirks implementation
- xhci: remove XHCI_TRUST_TX_LENGTH quirk
- clk: Add a devm variant of clk_rate_exclusive_get()
- clk: Provide !COMMON_CLK dummy for devm_clk_rate_exclusive_get()
- i2c: lpi2c: Avoid calling clk_get_rate during transfer
- cxl: Add post-reset warning if reset results in loss of previously committed
HDM decoders
- OPP: Fix required_opp_tables for multiple genpds using same table
- wifi: iwlwifi: mvm: fix ROC version check
- wifi: mac80211: Recalc offload when monitor stop
- ice: fix 200G link speed message log
- ice: implement AQ download pkg retry
- bpf: Fix reg_set_min_max corruption of fake_reg
- ALSA: hda: cs35l41: Component should be unbound before deconstruction
- netdev-genl: fix error codes when outputting XDP features
- arm64: dts: freescale: imx8mm-verdin: Fix GPU speed
- phy: qcom-qmp: qserdes-txrx: Add missing registers offsets
- phy: qcom-qmp: pcs: Add missing v6 N4 register offsets
- phy: qcom: qmp-combo: Switch from V6 to V6 N4 register offsets
- powerpc/crypto: Add generated P8 asm to .gitignore
- spi: Exctract spi_dev_check_cs() helper
- spi: Fix SPI slave probe failure
- net: phy: dp83tg720: wake up PHYs in managed mode
- net: phy: dp83tg720: get master/slave configuration in link down state
- RDMA/mlx5: Ensure created mkeys always have a populated rb_key
- drm/amdgpu: fix locking scope when flushing tlb
- drm/amd/display: Remove redundant idle optimization check
- drm/amd/display: Attempt to avoid empty TUs when endpoint is DPIA
- ata: ahci: Do not enable LPM if no LPM states are supported by the HBA
- dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()
- net/tcp_ao: Don't leak ao_info on error-path
- mm: shmem: fix getting incorrect lruvec when replacing a shmem folio
- selftests: mptcp: print_test out of verify_listener_events
- selftests: mptcp: userspace_pm: fixed subtest names
- ima: Avoid blocking in RCU read-side critical section
- virt: guest_memfd: fix reference leak on hwpoisoned page
- thermal: int340x: processor_thermal: Support shared interrupts
- thermal: core: Change PM notifier priority to the minimum
- wifi: ath12k: check M3 buffer size as well whey trying to reuse it
- Upstream stable to v6.6.36, v6.9.7
* [SRU] Add Dynamic Tuning Technology (DTT) support for Lunar Lake
(LP: #2073961)
- thermal: int340x: processor_thermal: Add Lunar Lake-M PCI ID
* Kubuntu 24.04 freezes after plugging in ethernet cable (LP: #2073358)
- e1000e: move force SMBUS near the end of enable_ulp function
- e1000e: fix force smbus during suspend flow
* Noble update: upstream stable patchset 2024-07-25 (LP: #2074091)
- wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
- wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
- wifi: cfg80211: fully move wiphy work to unbound workqueue
- wifi: cfg80211: Lock wiphy in cfg80211_get_station
- wifi: cfg80211: pmsr: use correct nla_get_uX functions
- wifi: iwlwifi: mvm: don't initialize csa_work twice
- wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
- wifi: iwlwifi: mvm: set properly mac header
- wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
- wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
- wifi: iwlwifi: mvm: don't read past the mfuart notifcation
- wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
- scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort()
- RISC-V: KVM: No need to use mask when hart-index-bit is 0
- RISC-V: KVM: Fix incorrect reg_subtype labels in
kvm_riscv_vcpu_set_reg_isa_ext function
- ax25: Fix refcount imbalance on inbound connections
- ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
- net/ncsi: Fix the multi thread manner of NCSI driver
- net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume
- bpf: Fix a potential use-after-free in bpf_link_free()
- KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent
- KVM: SEV-ES: Delegate LBR virtualization to the processor
- vmxnet3: disable rx data ring on dma allocation failure
- ipv6: ioam: block BH from ioam6_output()
- ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
- net: tls: fix marking packets as decrypted
- bpf: Set run context for rawtp test_run callback
- octeontx2-af: Always allocate PF entries from low prioriy zone
- net/smc: avoid overwriting when adjusting sock bufsizes
- net: phy: Micrel KSZ8061: fix errata solution not taking effect problem
- net: sched: sch_multiq: fix possible OOB write in multiq_tune()
- vxlan: Fix regression when dropping packets due to invalid src addresses
- tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
- mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB
- net/mlx5: Stop waiting for PCI if pci channel is offline
- net/mlx5: Always stop health timer during driver removal
- net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
- net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
- ptp: Fix error message on failed pin verification
- ice: fix iteration of TLVs in Preserved Fields Area
- ice: remove af_xdp_zc_qps bitmap
- ice: add flag to distinguish reset from .ndo_bpf in XDP rings config
- net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
- af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted
peer.
- af_unix: Annodate data-races around sk->sk_state for writers.
- af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
- af_unix: Annotate data-races around sk->sk_state in unix_write_space() and
poll().
- af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
- af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
- af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
- af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
- af_unix: Annotate data-races around sk->sk_sndbuf.
- af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
- af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
- af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
- af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
- af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
- ipv6: fix possible race in __fib6_drop_pcpu_from()
- net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool()
- selftests/mm: log a consistent test name for check_compaction
- irqchip/riscv-intc: Allow large non-standard interrupt number
- irqchip/riscv-intc: Introduce Andes hart-level interrupt controller
- eventfs: Update all the eventfs_inodes from the events descriptor
- io_uring/rsrc: don't lock while !TASK_RUNNING
- io_uring: check for non-NULL file pointer in io_file_can_poll()
- USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
- USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected
- usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
- usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
- mei: me: release irq in mei_me_pci_resume error path
- tty: n_tty: Fix buffer offsets when lookahead is used
- serial: port: Don't block system suspend even if bytes are left to xmit
- landlock: Fix d_parent walk
- jfs: xattr: fix buffer overflow for invalid xattr
- xhci: Set correct transferred length for cancelled bulk transfers
- xhci: Apply reset resume quirk to Etron EJ188 xHCI host
- xhci: Handle TD clearing for multiple streams case
- xhci: Apply broken streams quirk to Etron EJ188 xHCI host
- thunderbolt: debugfs: Fix margin debugfs node creation condition
- scsi: core: Disable CDL by default
- scsi: mpi3mr: Fix ATA NCQ priority support
- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
- scsi: sd: Use READ(16) when reading block zero on large capacity disks
- gve: Clear napi->skb before dev_kfree_skb_any()
- powerpc/uaccess: Fix build errors seen with GCC 13/14
- HID: nvidia-shield: Add missing check for input_ff_create_memless
- cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c
- cxl/region: Fix memregion leaks in devm_cxl_add_region()
- cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
- cachefiles: remove requests from xarray during flushing requests
- cachefiles: add spin_lock for cachefiles_ondemand_info
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
- cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
- cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()
- cachefiles: never get a new anonymous fd if ondemand_id is valid
- cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
- cachefiles: flush all requests after setting CACHEFILES_DEAD
- selftests/ftrace: Fix to check required event file
- clk: sifive: Do not register clkdevs for PRCI clocks
- NFSv4.1 enforce rootpath check in fs_location query
- SUNRPC: return proper error from gss_wrap_req_priv
- NFS: add barriers when testing for NFS_FSDATA_BLOCKED
- selftests/tracing: Fix event filter test to retry up to 10 times
- nvme: fix nvme_pr_* status code parsing
- drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation
- platform/x86: dell-smbios: Fix wrong token data in sysfs
- gpio: tqmx86: fix typo in Kconfig label
- gpio: tqmx86: introduce shadow register for GPIO output value
- gpio: tqmx86: store IRQ trigger type and unmask status separately
- gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type
- HID: core: remove unnecessary WARN_ON() in implement()
- iommu/amd: Fix sysfs leak in iommu init
- iommu: Return right value in iommu_sva_bind_device()
- io_uring/io-wq: Use set_bit() and test_bit() at worker->flags
- io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue()
- HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
- drm/vmwgfx: Refactor drm connector probing for display modes
- drm/vmwgfx: Filter modes which exceed graphics memory
- drm/vmwgfx: 3D disabled should not effect STDU memory limits
- drm/vmwgfx: Remove STDU logic from generic mode_valid function
- drm/vmwgfx: Don't memcmp equivalent pointers
- af_unix: Annotate data-race of sk->sk_state in unix_accept().
- modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o
- net: sfp: Always call `sfp_sm_mod_remove()` on remove
- net: hns3: fix kernel crash problem in concurrent scenario
- net: hns3: add cond_resched() to hns3 ring buffer init process
- liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
- net: stmmac: dwmac-qcom-ethqos: Configure host DMA width
- drm/komeda: check for error-valued pointer
- drm/bridge/panel: Fix runtime warning on panel bridge release
- tcp: fix race in tcp_v6_syn_recv_sock()
- net dsa: qca8k: fix usages of device_get_named_child_node()
- geneve: Fix incorrect inner network header offset when innerprotoinherit is
set
- net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN)
packets
- Bluetooth: fix connection setup in l2cap_connect
- netfilter: nft_inner: validate mandatory meta and payload
- netfilter: ipset: Fix race between namespace cleanup and gc in the list:set
type
- x86/asm: Use %c/%n instead of %P operand modifier in asm templates
- x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking
- scsi: ufs: core: Quiesce request queues before checking pending cmds
- net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP
- gve: ignore nonrelevant GSO type bits when processing TSO headers
- net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs
parameters
- block: sed-opal: avoid possible wrong address reference in
read_sed_opal_key()
- block: fix request.queuelist usage in flush
- nvmet-passthru: propagate status from id override functions
- net/ipv6: Fix the RT cache flush via sysctl using a previous delay
- net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
- net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
- ionic: fix use after netif_napi_del()
- af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
- bnxt_en: Adjust logging of firmware messages in case of released token in
__hwrm_send()
- misc: microchip: pci1xxxx: fix double free in the error handling of
gp_aux_bus_probe()
- ksmbd: move leading slash check to smb2_get_name()
- ksmbd: fix missing use of get_write in in smb2_set_ea()
- x86/boot: Don't add the EFI stub to targets, again
- iio: adc: ad9467: fix scan type sign
- iio: dac: ad5592r: fix temperature channel scaling value
- iio: invensense: fix odr switching to same value
- iio: imu: inv_icm42600: delete unneeded update watermark call
- drivers: core: synchronize really_probe() and dev_uevent()
- parisc: Try to fix random segmentation faults in package builds
- ACPI: x86: Force StorageD3Enable on more products
- drm/exynos/vidi: fix memory leak in .get_modes()
- drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
- mptcp: ensure snd_una is properly initialized on connect
- mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
- mptcp: pm: update add_addr counters after connect
- clkdev: Update clkdev id usage to allow for longer names
- irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
- x86/kexec: Fix bug with call depth tracking
- x86/amd_nb: Check for invalid SMN reads
- perf/core: Fix missing wakeup when waiting for context reference
- perf auxtrace: Fix multiple use of --itrace option
- riscv: fix overlap of allocated page and PTR_ERR
- tracing/selftests: Fix kprobe event name test for .isra. functions
- kheaders: explicitly define file modes for archived headers
- null_blk: Print correct max open zones limit in null_init_zoned_dev()
- sock_map: avoid race between sock_map_close and sk_psock_put
- dma-buf: handle testing kthreads creation failure
- vmci: prevent speculation leaks by sanitizing event in event_deliver()
- spmi: hisi-spmi-controller: Do not override device identifier
- knfsd: LOOKUP can return an illegal error value
- fs/proc: fix softlockup in __read_vmcore
- ocfs2: use coarse time for new created files
- ocfs2: fix races between hole punching and AIO+DIO
- PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
- dmaengine: axi-dmac: fix possible race in remove()
- remoteproc: k3-r5: Wait for core0 power-up before powering up core1
- remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs
- iio: adc: axi-adc: make sure AXI clock is enabled
- iio: invensense: fix interrupt timestamp alignment
- riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
- rtla/timerlat: Simplify "no value" printing on top
- rtla/auto-analysis: Replace \t with spaces
- drm/i915/gt: Disarm breadcrumbs if engines are already idle
- drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE)
- drm/i915/dpt: Make DPT object unshrinkable
- drm/i915: Fix audio component initialization
- intel_th: pci: Add Meteor Lake-S support
- pmdomain: ti-sci: Fix duplicate PD referrals
- btrfs: zoned: fix use-after-free due to race with dev replace
- xfs: fix imprecise logic in xchk_btree_check_block_owner
- xfs: fix scrub stats file permissions
- xfs: fix SEEK_HOLE/DATA for regions with active COW extents
- xfs: shrink failure needs to hold AGI buffer
- xfs: ensure submit buffers on LSN boundaries in error handlers
- xfs: allow sunit mount option to repair bad primary sb stripe values
- xfs: don't use current->journal_info
- xfs: allow cross-linking special files without project quota
- swiotlb: Enforce page alignment in swiotlb_alloc()
- swiotlb: Reinstate page-alignment for mappings >= PAGE_SIZE
- swiotlb: extend buffer pre-padding to alloc_align_mask if necessary
- tick/nohz_full: Don't abuse smp_call_function_single() in
tick_setup_device()
- mm/huge_memory: don't unpoison huge_zero_folio
- serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
- Revert "fork: defer linking file vma until vma is fully initialized"
- remoteproc: k3-r5: Jump to error handling labels in start/stop errors
- greybus: Fix use-after-free bug in gb_interface_release due to race
condition.
- ima: Fix use-after-free on a dentry's dname.name
- serial: core: Add UPIO_UNKNOWN constant for unknown port type
- serial: port: Introduce a common helper to read properties
- serial: 8250_dw: Switch to use uart_read_port_properties()
- serial: 8250_dw: Replace ACPI device check by a quirk
- serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw
- usb-storage: alauda: Check whether the media is initialized
- misc: microchip: pci1xxxx: Fix a memory leak in the error handling of
gp_aux_bus_probe()
- i2c: at91: Fix the functionality flags of the slave-only interface
- i2c: designware: Fix the functionality flags of the slave-only interface
- zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
- wifi: ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs
- cpufreq: amd-pstate: Unify computation of
{max,min,nominal,lowest_nonlinear}_freq
- cpufreq: amd-pstate: Add quirk for the pstate CPPC capabilities missing
- cpufreq: amd-pstate: remove global header file
- virtio_net: fix possible dim status unrecoverable
- net: ethernet: mtk_eth_soc: handle dma buffer size soc specific
- ice: fix reads from NVM Shadow RAM on E830 and E825-C devices
- ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors()
- x86/cpu: Get rid of an unnecessary local variable in get_cpu_address_sizes()
- x86/cpu: Provide default cache line size if not enumerated
- selftests/mm: ksft_exit functions do not return
- selftests/mm: compaction_test: fix bogus test success and reduce probability
of OOM-killer invocation
- .editorconfig: remove trim_trailing_whitespace option
- kcov, usb: disable interrupts in kcov_remote_start_usb_softirq
- ata: libata-scsi: Set the RMB bit only for removable media devices
- powerpc/85xx: fix compile error without CONFIG_CRASH_DUMP
- kselftest/alsa: Ensure _GNU_SOURCE is defined
- thermal: core: Do not fail cdev registration because of invalid initial
state
- Bluetooth: hci_sync: Fix not using correct handle
- net/sched: initialize noop_qdisc owner
- tcp: use signed arithmetic in tcp_rtx_probe0_timed_out()
- drm/nouveau: don't attempt to schedule hpd_work on headless cards
- drm/xe/xe_gt_idle: use GT forcewake domain assertion
- drm/xe: flush engine buffers before signalling user fence on all engines
- drm/xe: Remove mem_access from guc_pc calls
- drm/xe: move disable_c6 call
- bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response
- iio: imu: bmi323: Fix trigger notification in case of error
- iio: pressure: bmp280: Fix BMP580 temperature reading
- iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe()
- thermal: ACPI: Invalidate trip points with temperature of 0 or below
- x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node()
- memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
- perf script: Show also errors for --insn-trace option
- wifi: cfg80211: validate HE operation element parsing
- wifi: rtlwifi: Ignore IEEE80211_CONF_CHANGE_RETRY_LIMITS
- locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc
- ata: ahci: Do not apply Intel PCS quirk on Intel Alder Lake
- ata: libata-core: Add ATA_HORKAGE_NOLPM for Apacer AS340
- ata: libata-core: Add ATA_HORKAGE_NOLPM for Crucial CT240BX500SSD1
- ata: libata-core: Add ATA_HORKAGE_NOLPM for AMD Radeon S3 SSD
- kexec: fix the unexpected kexec_dprintk() macro
- ocfs2: update inode fsync transaction id in ocfs2_unlink and ocfs2_link
- dm-integrity: set discard_granularity to logical block size
- drm/bridge: aux-hpd-bridge: correct devm_drm_dp_hpd_bridge_add() stub
- iio: temperature: mcp9600: Fix temperature reading for negative values
- drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2
- riscv: force PAGE_SIZE linear mapping if debug_pagealloc is enabled
- drm/xe: Properly handle alloc_guc_id() failure
- wifi: iwlwifi: mvm: support iwl_dev_tx_power_cmd_v8
- wifi: iwlwifi: mvm: fix a crash on 7265
- mei: vsc: Fix wrong invocation of ACPI SID method
- Upstream stable to v6.6.35, v6.9.6
* [SRU] Add support for intel trace hub for last platforms (LP: #2073926) //
Noble update: upstream stable patchset 2024-07-25 (LP: #2074091)
- intel_th: pci: Add Granite Rapids support
- intel_th: pci: Add Granite Rapids SOC support
- intel_th: pci: Add Sapphire Rapids SOC support
- intel_th: pci: Add Lunar Lake support
* Fix L2CAP/LE/CPU/BV-02-C bluetooth certification failure (LP: #2072858) //
Noble update: upstream stable patchset 2024-07-25 (LP: #2074091)
- Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
* Noble update: upstream stable patchset 2024-07-22 (LP: #2073788)
- drm/i915/hwmon: Get rid of devm
- afs: Don't cross .backup mountpoint from backup volume
- erofs: avoid allocating DEFLATE streams before mounting
- vxlan: Fix regression when dropping packets due to invalid src addresses
- drm/sun4i: hdmi: Convert encoder to atomic
- drm/sun4i: hdmi: Move mode_set into enable
- f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
- media: lgdt3306a: Add a check against null-pointer-def
- drm/amdgpu: add error handle to avoid out-of-bounds
- wifi: rtw89: correct aSIFSTime for 6GHz band
- ata: pata_legacy: make legacy_exit() work again
- fsverity: use register_sysctl_init() to avoid kmemleak warning
- proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission
operation
- platform/chrome: cros_ec: Handle events during suspend after resume
completion
- thermal/drivers/qcom/lmh: Check for SCM availability at probe
- soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
- arm64: tegra: Correct Tegra132 I2C alias
- arm64: dts: qcom: qcs404: fix bluetooth device address
- md/raid5: fix deadlock that raid5d() wait for itself to clear
MD_SB_CHANGE_PENDING
- wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
- wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
- wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
- wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
- arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
- arm64: dts: hi3798cv200: fix the size of GICR
- arm64: dts: ti: verdin-am62: Set memory size to 2gb
- media: mc: Fix graph walk in media_pipeline_start
- media: mc: mark the media devnode as registered from the, start
- media: mxl5xx: Move xpt structures off stack
- media: v4l2-core: hold videodev_lock until dev reg, finishes
- media: v4l: async: Properly re-initialise notifier entry in unregister
- media: v4l: async: Don't set notifier's V4L2 device if registering fails
- media: v4l: async: Fix notifier list entry init
- mmc: core: Add mmc_gpiod_set_cd_config() function
- mmc: sdhci: Add support for "Tuning Error" interrupts
- mmc: sdhci-acpi: Sort DMI quirks alphabetically
- mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
- mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
- mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus
T100TA
- drm/fbdev-generic: Do not set physical framebuffer address
- fbdev: savage: Handle err return when savagefb_check_var failed
- drm/amdgpu/atomfirmware: add intergrated info v2.3 table
- 9p: add missing locking around taking dentry fid list
- drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms
- Revert "drm/amdkfd: fix gfx_target_version for certain 11.0.3 devices"
- KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
- KVM: arm64: Fix AArch32 register narrowing on userspace write
- KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
- KVM: arm64: AArch32: Fix spurious trapping of conditional instructions
- LoongArch: Add all CPUs enabled by fdt to NUMA node 0
- LoongArch: Override higher address bits in JUMP_VIRT_ADDR
- clk: bcm: dvp: Assign ->num before accessing ->hws
- clk: bcm: rpi: Assign ->num before accessing ->hws
- clk: qcom: clk-alpha-pll: fix rate setting for Stromer PLLs
- crypto: ecdsa - Fix module auto-load on add-key
- crypto: ecrdsa - Fix module auto-load on add_key
- crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
- kbuild: Remove support for Clang's ThinLTO caching
- mm: fix race between __split_huge_pmd_locked() and GUP-fast
- filemap: add helper mapping_max_folio_size()
- iomap: fault in smaller chunks for non-large folio mappings
- i2c: acpi: Unbind mux adapters before delete
- HID: i2c-hid: elan: fix reset suspend current leakage
- scsi: core: Handle devices which return an unusually large VPD page count
- net/ipv6: Fix route deleting failure when metric equals 0
- net/9p: fix uninit-value in p9_client_rpc()
- mm/ksm: fix ksm_pages_scanned accounting
- mm/ksm: fix ksm_zero_pages accounting
- kmsan: do not wipe out origin when doing partial unpoisoning
- tpm_tis: Do *not* flush uninitialized work
- intel_th: pci: Add Meteor Lake-S CPU support
- rtla/timerlat: Fix histogram report when a cpu count is 0
- sparc64: Fix number of online CPUs
- mm/cma: drop incorrect alignment check in cma_init_reserved_mem
- mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid
- mm: /proc/pid/smaps_rollup: avoid skipping vma after getting mmap_lock again
- mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
- selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
- selftests/mm: fix build warnings on ppc64
- watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
- bonding: fix oops during rmmod
- wifi: ath10k: fix QCOM_RPROC_COMMON dependency
- kdb: Fix buffer overflow during tab-complete
- kdb: Use format-strings rather than '\0' injection in kdb_read()
- kdb: Fix console handling when editing and tab-completing commands
- kdb: Merge identical case statements in kdb_read()
- kdb: Use format-specifiers rather than memset() for padding in kdb_read()
- sparc: move struct termio to asm/termios.h
- drm/amdkfd: handle duplicate BOs in reserve_bo_and_cond_vms
- ext4: Fixes len calculation in mpage_journal_page_buffers
- ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
- ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
- riscv: dts: starfive: Remove PMIC interrupt info for Visionfive 2 board
- ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
- ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
- ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
- parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA
- parisc: Define sigset_t in parisc uapi header
- s390/ap: Fix crash in AP internal function modify_bitmap()
- s390/cpacf: Split and rework cpacf query functions
- s390/cpacf: Make use of invalid opcode produce a link error
- i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
- genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after()
- ASoC: SOF: ipc4-topology: Fix input format query of process modules without
base extension
- ALSA: ump: Don't clear bank selection after sending a program change
- ALSA: ump: Don't accept an invalid UMP protocol number
- EDAC/amd64: Convert PCIBIOS_* return codes to errnos
- EDAC/igen6: Convert PCIBIOS_* return codes to errnos
- nfs: fix undefined behavior in nfs_block_bits()
- NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
- eventfs: Fix a possible null pointer dereference in eventfs_find_events()
- eventfs: Keep the directories from having the same inode number as files
- tracefs: Clear EVENT_INODE flag in tracefs_drop_inode()
- btrfs: fix crash on racing fsync and size-extending write into prealloc
- btrfs: fix leak of qgroup extent records after transaction abort
- ALSA: seq: Fix incorrect UMP type for system messages
- powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH
- smb: client: fix deadlock in smb2_find_smb_tcon()
- smp: Provide 'setup_max_cpus' definition on UP too
- drm/xe/bb: assert width in xe_bb_create_job()
- crypto: starfive - Do not free stack buffer
- btrfs: qgroup: fix initialization of auto inherit array
- wifi: rtl8xxxu: enable MFP support with security flag of RX descriptor
- media: mgb4: Fix double debugfs remove
- media: ov2740: Fix LINK_FREQ and PIXEL_RATE control value reporting
- firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails
- LoongArch: Fix built-in DTB detection
- LoongArch: Fix entry point in kernel image header
- clk: qcom: apss-ipq-pll: use stromer ops for IPQ5018 to fix boot failure
- net/tcp: Don't consider TCP_CLOSE in TCP_AO_ESTABLISHED
- selftests: net: lib: support errexit with busywait
- selftests: net: lib: avoid error removing empty netns name
- cpufreq: amd-pstate: Fix the inconsistency in max frequency units
- mm/memory-failure: fix handling of dissolved but not taken off from buddy
pages
- selftests/mm: compaction_test: fix bogus test success on Aarch64
- irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails
- Revert "perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES
event"
- hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt()
- riscv: enable HAVE_ARCH_HUGE_VMAP for XIP kernel
- btrfs: qgroup: update rescan message levels and error codes
- btrfs: qgroup: fix qgroup id collision across mounts
- btrfs: cache folio size and shift in extent_buffer
- btrfs: protect folio::private when attaching extent buffer folios
- bpf: fix multi-uprobe PID filtering logic
- powerpc/64/bpf: fix tail calls for PCREL addressing
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
- Upstream stable to v6.6.34, v6.9.5
* Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
- perf record: Delete session after stopping sideband thread
- perf probe: Add missing libgen.h header needed for using basename()
- iio: core: Leave private pointer NULL when no private data supplied
- greybus: lights: check return of get_channel_from_mode
- phy: qcom: qmp-combo: fix duplicate return in qmp_v4_configure_dp_phy
- f2fs: multidev: fix to recognize valid zero block address
- f2fs: fix to wait on page writeback in __clone_blkaddrs()
- fpga: manager: add owner module and take its refcount
- fpga: bridge: add owner module and take its refcount
- counter: linux/counter.h: fix Excess kernel-doc description warning
- perf annotate: Get rid of duplicate --group option item
- usb: typec: ucsi: always register a link to USB PD device
- usb: typec: ucsi: simplify partner's PD caps registration
- perf stat: Do not fail on metrics on s390 z/VM systems
- soundwire: cadence: fix invalid PDI offset
- dmaengine: idma64: Add check for dma_set_max_seg_size
- firmware: dmi-id: add a release callback function
- perf annotate: Fix annotation_calc_lines() to pass correct address to
get_srcline()
- serial: max3100: Lock port->lock when calling uart_handle_cts_change()
- serial: max3100: Update uart_driver_registered on driver removal
- serial: max3100: Fix bitwise types
- greybus: arche-ctrl: move device table to its right location
- PCI: tegra194: Fix probe path for Endpoint mode
- serial: sc16is7xx: add proper sched.h include for sched_set_fifo()
- module: don't ignore sysfs_create_link() failures
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc QoS port assignment
- arm64: dts: meson: fix S4 power-controller node
- perf tests: Make "test data symbol" more robust on Neoverse N1
- perf tests: Apply attributes to all events in object code reading test
- perf record: Fix debug message placement for test consumption
- dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties
- perf bench uprobe: Remove lib64 from libc.so.6 binary path
- f2fs: compress: fix to relocate check condition in
f2fs_{release,reserve}_compress_blocks()
- f2fs: compress: fix to relocate check condition in
f2fs_ioc_{,de}compress_file()
- f2fs: fix to relocate check condition in f2fs_fallocate()
- f2fs: fix to check pinfile flag in f2fs_move_file_range()
- iio: adc: stm32: Fixing err code to not indicate success
- riscv: dts: starfive: visionfive 2: Remove non-existing TDM hardware
- coresight: etm4x: Fix unbalanced pm_runtime_enable()
- perf docs: Document bpf event modifier
- perf test shell arm_coresight: Increase buffer size for Coresight basic
tests
- iio: pressure: dps310: support negative temperature values
- iio: buffer-dmaengine: export buffer alloc and free functions
- iio: add the IIO backend framework
- [CONFIG] Update CONFIG_IIO_BACKEND
- iio: adc: ad9467: convert to backend framework
- [Config] Update CONFIG_AD9467
- iio: adc: adi-axi-adc: move to backend framework
- [Config] Update CONFIG_ADI_AXI_ADC
- iio: adc: adi-axi-adc: only error out in major version mismatch
- coresight: etm4x: Do not hardcode IOMEM access for register restore
- coresight: etm4x: Do not save/restore Data trace control registers
- coresight: etm4x: Safe access for TRCQCLTR
- coresight: etm4x: Fix access to resource selector registers
- vfio/pci: fix potential memory leak in vfio_intx_enable()
- fpga: region: add owner module and take its refcount
- udf: Remove GFP_NOFS allocation in udf_expand_file_adinicb()
- udf: Convert udf_expand_file_adinicb() to use a folio
- microblaze: Remove gcc flag for non existing early_printk.c file
- microblaze: Remove early printk call from cpuinfo-static.c
- PCI: Wait for Link Training==0 before starting Link retrain
- perf intel-pt: Fix unassigned instruction op (discovered by MemorySanitizer)
- leds: pwm: Disable PWM when going to suspend
- ovl: remove upper umask handling from ovl_create_upper()
- PCI: of_property: Return error for int_map allocation failure
- VMCI: Fix an error handling path in vmci_guest_probe_device()
- dt-bindings: pinctrl: mediatek: mt7622: fix array properties
- pinctrl: qcom: pinctrl-sm7150: Fix sdc1 and ufs special pins regs
- watchdog: cpu5wdt.c: Fix use-after-free bug caused by cpu5wdt_trigger
- watchdog: bd9576: Drop "always-running" property
- watchdog: sa1100: Fix PTR_ERR_OR_ZERO() vs NULL check in sa1100dog_probe()
- dt-bindings: phy: qcom,sc8280xp-qmp-ufs-phy: fix msm899[68] power-domains
- dt-bindings: phy: qcom,usb-snps-femto-v2: use correct fallback for sc8180x
- dmaengine: idxd: Avoid unnecessary destruction of file_ida
- usb: gadget: u_audio: Fix race condition use of controls after free during
gadget unbind.
- usb: gadget: u_audio: Clear uac pointer when freed.
- stm class: Fix a double free in stm_register_device()
- ppdev: Add an error check in register_device
- i2c: cadence: Avoid fifo clear after start
- i2c: synquacer: Fix an error handling path in synquacer_i2c_probe()
- perf bench internals inject-build-id: Fix trap divide when collecting just
one DSO
- perf ui browser: Don't save pointer to stack memory
- extcon: max8997: select IRQ_DOMAIN instead of depending on it
- dt-bindings: spmi: hisilicon,hisi-spmi-controller: fix binding references
- PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3
- PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3
- f2fs: support printk_ratelimited() in f2fs_printk()
- f2fs: use BLKS_PER_SEG, BLKS_PER_SEC, and SEGS_PER_SEC
- f2fs: separate f2fs_gc_range() to use GC for a range
- f2fs: kill heap-based allocation
- f2fs: support file pinning for zoned devices
- f2fs: fix block migration when section is not aligned to pow2
- perf ui browser: Avoid SEGV on title
- perf report: Avoid SEGV in report__setup_sample_type()
- perf thread: Fixes to thread__new() related to initializing comm
- perf symbols: Fix ownership of string in dso__load_vmlinux()
- f2fs: compress: fix to update i_compr_blocks correctly
- f2fs: deprecate io_bits
- f2fs: introduce get_available_block_count() for cleanup
- f2fs: compress: fix error path of inc_valid_block_count()
- f2fs: compress: fix to cover {reserve,release}_compress_blocks() w/ cp_rwsem
lock
- f2fs: fix to release node block count in error path of f2fs_new_node_page()
- f2fs: compress: don't allow unaligned truncation on released compress inode
- serial: sh-sci: protect invalidating RXDMA on shutdown
- libsubcmd: Fix parse-options memory leak
- perf daemon: Fix file leak in daemon_session__control
- f2fs: fix to add missing iput() in gc_data_segment()
- usb: fotg210: Add missing kernel doc description
- perf stat: Don't display metric header for non-leader uncore events
- perf tools: Use pmus to describe type from attribute
- perf tools: Add/use PMU reverse lookup from config to name
- perf pmu: Assume sysfs events are always the same case
- perf pmu: Count sys and cpuid JSON events separately
- LoongArch: Fix callchain parse error with kernel tracepoint events again
- s390/vdso64: filter out munaligned-symbols flag for vdso
- s390/vdso: Generate unwind information for C modules
- s390/vdso: Create .build-id links for unstripped vdso files
- s390/vdso: Use standard stack frame layout
- s390/ipl: Fix incorrect initialization of len fields in nvme reipl block
- s390/ipl: Fix incorrect initialization of nvme dump block
- s390/boot: Remove alt_stfle_fac_list from decompressor
- dt-bindings: PCI: rockchip,rk3399-pcie: Add missing maxItems to ep-gpios
- gpiolib: acpi: Fix failed in acpi_gpiochip_find() by adding parent node
match
- eventfs: Do not differentiate the toplevel events directory
- eventfs: Create eventfs_root_inode to store dentry
- eventfs/tracing: Add callback for release of an eventfs_inode
- eventfs: Free all of the eventfs_inode after RCU
- eventfs: Have "events" directory get permissions from its parent
- dt-bindings: adc: axi-adc: update bindings for backend framework
- dt-bindings: adc: axi-adc: add clocks property
- Input: ims-pcu - fix printf string overflow
- mmc: sdhci_am654: Add tuning algorithm for delay chain
- mmc: sdhci_am654: Write ITAPDLY for DDR52 timing
- mmc: sdhci_am654: Add OTAP/ITAP delay enable
- mmc: sdhci_am654: Add ITAPDLYSEL in sdhci_j721e_4bit_set_clock
- mmc: sdhci_am654: Fix ITAPDLY for HS400 timing
- Input: pm8xxx-vibrator - correct VIB_MAX_LEVELS calculation
- media: v4l: Don't turn on privacy LED if streamon fails
- media: ov2680: Clear the 'ret' variable on success
- media: ov2680: Allow probing if link-frequencies is absent
- media: ov2680: Do not fail if data-lanes property is absent
- drm/msm/dsi: Print dual-DSI-adjusted pclk instead of original mode pclk
- drm/msm/dpu: Always flush the slave INTF on the CTL
- drm/mediatek: dp: Fix mtk_dp_aux_transfer return value
- drm/meson: gate px_clk when setting rate
- um: Fix return value in ubd_init()
- um: vector: fix bpfflash parameter evaluation
- fs/ntfs3: Check 'folio' pointer for NULL
- fs/ntfs3: Use 64 bit variable to avoid 32 bit overflow
- fs/ntfs3: Use variable length array instead of fixed size
- drm/msm/dpu: Add callback function pointer check before its call
- drm/bridge: tc358775: fix support for jeida-18 and jeida-24
- media: stk1160: fix bounds checking in stk1160_copy_video()
- Input: cyapa - add missing input core locking to suspend/resume functions
- drm/amdgpu: init microcode chip name from ip versions
- drm/amdgpu: Fix buffer size in gfx_v9_4_3_init_ cp_compute_microcode() and
rlc_microcode()
- media: mediatek: vcodec: fix possible unbalanced PM counter
- tools/arch/x86/intel_sdsi: Fix maximum meter bundle length
- tools/arch/x86/intel_sdsi: Fix meter_show display
- tools/arch/x86/intel_sdsi: Fix meter_certificate decoding
- platform/x86: thinkpad_acpi: Take hotkey_mutex during hotkey_exit()
- media: flexcop-usb: fix sanity check of bNumEndpoints
- powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp
- um: Fix the -Wmissing-prototypes warning for __switch_mm
- um: Fix the -Wmissing-prototypes warning for get_thread_reg
- um: Fix the declaration of kasan_map_memory
- cxl/trace: Correct DPA field masks for general_media & dram events
- cxl/region: Fix cxlr_pmem leaks
- media: sunxi: a83-mips-csi2: also select GENERIC_PHY
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
- media: cec: cec-api: add locking in cec_release()
- media: cec: core: avoid recursive cec_claim_log_addrs
- media: cec: core: avoid confusing "transmit timed out" message
- Revert "drm/bridge: ti-sn65dsi83: Fix enable error path"
- drm: zynqmp_dpsub: Always register bridge
- selftests/powerpc/dexcr: Add -no-pie to hashchk tests
- drm/msm/a6xx: Avoid a nullptr dereference when speedbin setting fails
- ASoC: tas2781: Fix a warning reported by robot kernel test
- null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION()
- ALSA: hda/cs_dsp_ctl: Use private_free for control cleanup
- ALSA: hda: cs35l56: Fix lifetime of cs_dsp instance
- ASoC: mediatek: mt8192: fix register configuration for tdm
- drm/nouveau: use tile_mode and pte_kind for VM_BIND bo allocations
- blk-cgroup: fix list corruption from resetting io stat
- blk-cgroup: fix list corruption from reorder of WRITE ->lqueued
- blk-cgroup: Properly propagate the iostat update up the hierarchy
- regulator: bd71828: Don't overwrite runtime voltages
- xen/x86: add extra pages to unpopulated-alloc if available
- perf/arm-dmc620: Fix lockdep assert in ->event_init()
- x86/kconfig: Select ARCH_WANT_FRAME_POINTERS again when
UNWINDER_FRAME_POINTER=y
- [Config] Update CONFIG_ARCH_WANT_FRAME_POINTERS
- net: Always descend into dsa/ folder with CONFIG_NET_DSA enabled
- ipv6: sr: fix missing sk_buff release in seg6_input_core
- selftests: net: kill smcrouted in the cleanup logic in amt.sh
- nfc: nci: Fix uninit-value in nci_rx_work
- ASoC: tas2552: Add TX path for capturing AUDIO-OUT data
- ASoC: tas2781: Fix wrong loading calibrated data sequence
- NFSv4: Fixup smatch warning for ambiguous return
- nfs: keep server info for remounts
- sunrpc: fix NFSACL RPC retry on soft mount
- rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL
- regulator: pickable ranges: don't always cache vsel
- regulator: tps6287x: Force writing VSEL bit
- af_unix: Update unix_sk(sk)->oob_skb under sk_receive_queue lock.
- ipv6: sr: fix memleak in seg6_hmac_init_algo
- regulator: tps6594-regulator: Correct multi-phase configuration
- tcp: Fix shift-out-of-bounds in dctcp_update_alpha().
- pNFS/filelayout: fixup pNfs allocation modes
- openvswitch: Set the skbuff pkt_type for proper pmtud support.
- arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY
- rv: Update rv_en(dis)able_monitor doc to match kernel-doc
- net: lan966x: Remove ptp traps in case the ptp is not enabled.
- virtio: delete vq in vp_find_vqs_msix() when request_irq() fails
- i3c: master: svc: change ENXIO to EAGAIN when IBI occurs during start frame
- Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI"
- net: fec: avoid lock evasion when reading pps_enable
- tls: fix missing memory barrier in tls_init
- net: relax socket state check at accept time.
- nfc: nci: Fix handling of zero-length payload packets in nci_rx_work()
- drivers/xen: Improve the late XenStore init protocol
- ice: Interpret .set_channels() input differently
- kasan, fortify: properly rename memintrinsics
- tracing/probes: fix error check in parse_btf_field()
- tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer
- netfilter: nfnetlink_queue: acquire rcu_read_lock() in
instance_destroy_rcu()
- netfilter: ipset: Add list flush to cancel_gc
- netfilter: nft_payload: restore vlan q-in-q match support
- spi: Don't mark message DMA mapped when no transfer in it is
- dma-mapping: benchmark: fix up kthread-related error handling
- dma-mapping: benchmark: fix node id validation
- dma-mapping: benchmark: handle NUMA_NO_NODE correctly
- nvme-multipath: fix io accounting on failover
- nvmet: fix ns enable/disable possible hang
- drm/amd/display: Enable colorspace property for MST connectors
- net: phy: micrel: set soft_reset callback to genphy_soft_reset for KSZ8061
- net/mlx5: Lag, do bond only if slaves agree on roce state
- net/mlx5: Fix MTMP register capability offset in MCAM register
- net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules
- net/mlx5e: Fix IPsec tunnel mode offload feature check
- net/mlx5e: Use rx_missed_errors instead of rx_dropped for reporting buffer
exhaustion
- net/mlx5e: Fix UDP GSO for encapsulated packets
- dma-buf/sw-sync: don't enable IRQ from sync_print_obj()
- bpf: Fix potential integer overflow in resolve_btfids
- ALSA: jack: Use guard() for locking
- ALSA: core: Remove debugfs at disconnection
- ALSA: hda/realtek: Adjust G814JZR to use SPI init for amp
- enic: Validate length of nl attributes in enic_set_vf_port
- af_unix: Annotate data-race around unix_sk(sk)->addr.
- af_unix: Read sk->sk_hash under bindlock during bind().
- Octeontx2-pf: Free send queue buffers incase of leaf to inner
- net: usb: smsc95xx: fix changing LED_SEL bit value updated from EEPROM
- ASoC: cs42l43: Only restrict 44.1kHz for the ASP
- bpf: Allow delete from sockmap/sockhash only if update is allowed
- net:fec: Add fec_enet_deinit()
- net: micrel: Fix lan8841_config_intr after getting out of sleep mode
- ice: fix accounting if a VLAN already exists
- selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky
- selftests: mptcp: add ms units for tc-netem delay
- selftests: mptcp: join: mark 'fail' tests as flaky
- ALSA: seq: Fix missing bank setup between MIDI1/MIDI2 UMP conversion
- ALSA: seq: Don't clear bank selection at event -> UMP MIDI2 conversion
- net: ti: icssg-prueth: Fix start counter for ft1 filter
- netfilter: nft_payload: skbuff vlan metadata mangle support
- netfilter: tproxy: bail out if IP has been disabled on the device
- netfilter: nft_fib: allow from forward/input without iif selector
- net/sched: taprio: make q->picos_per_byte available to fill_sched_entry()
- net/sched: taprio: extend minimum interval restriction to entire cycle too
- kconfig: fix comparison to constant symbols, 'm', 'n'
- drm/i915/guc: avoid FIELD_PREP warning
- kheaders: use `command -v` to test for existence of `cpio`
- spi: stm32: Don't warn about spurious interrupts
- net: dsa: microchip: fix RGMII error in KSZ DSA driver
- net: ena: Reduce lines with longer column width boundary
- net: ena: Fix redundant device NUMA node override
- ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound
- ALSA: seq: Fix yet another spot for system message conversion
- powerpc/pseries/lparcfg: drop error message from guest name lookup
- drm/panel: sitronix-st7789v: fix timing for jt240mhqs_hwt_ek_e3 panel
- drm/panel: sitronix-st7789v: tweak timing for jt240mhqs_hwt_ek_e3 panel
- drm/panel: sitronix-st7789v: fix display size for jt240mhqs_hwt_ek_e3 panel
- hwmon: (intel-m10-bmc-hwmon) Fix multiplier for N6000 board power sensor
- hwmon: (shtc1) Fix property misspelling
- ALSA: seq: ump: Fix swapped song position pointer data
- ALSA: timer: Set lower bound of start tick time
- x86/efistub: Omit physical KASLR when memory reservations exist
- efi: libstub: only free priv.runtime_map when allocated
- x86/pci: Skip early E820 check for ECAM region
- KVM: x86: Don't advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID
- genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline
- platform/x86/intel/tpmi: Handle error from tpmi_process_info()
- platform/x86/intel-uncore-freq: Don't present root domain on error
- perf sched timehist: Fix -g/--call-graph option failure
- f2fs: write missing last sum blk of file pinning section
- f2fs: use f2fs_{err,info}_ratelimited() for cleanup
- SUNRPC: Fix loop termination condition in gss_free_in_token_pages()
- riscv: prevent pt_regs corruption for secondary idle threads
- riscv: stacktrace: fixed walk_stackframe()
- perf build: Fix out of tree build related to installation of sysreg-defs
- dt-bindings: pinctrl: qcom: update functions to match with driver
- usb: typec: ucsi: allow non-partner GET_PDOS for Qualcomm devices
- perf report: Fix PAI counter names for s390 virtual machines
- PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host
- perf map: Remove kernel map before updating start and end addresses
- riscv: dts: starfive: visionfive 2: Remove non-existing I2S hardware
- pinctrl: renesas: rzg2l: Limit 2.5V power supply to Ethernet interfaces
- riscv: Flush the instruction cache during SMP bringup
- usb: xhci: check if 'requested segments' exceeds ERST capacity
- spmi: pmic-arb: Replace three IS_ERR() calls by null pointer checks in
spmi_pmic_arb_probe()
- perf symbols: Remove map from list before updating addresses
- perf symbols: Update kcore map before merging in remaining symbols
- s390/ftrace: Use unwinder instead of __builtin_return_address()
- s390/stacktrace: Merge perf_callchain_user() and arch_stack_walk_user()
- s390/stacktrace: Skip first user stack frame
- s390/stacktrace: Improve detection of invalid instruction pointers
- s390/vdso: Introduce and use struct stack_frame_vdso_wrapper
- s390/stackstrace: Detect vdso stack frames
- s390/ap: Fix bind complete udev event sent after each AP bus scan
- ocfs2: correctly use ocfs2_find_next_zero_bit()
- mailbox: mtk-cmdq: Fix pm_runtime_get_sync() warning in mbox shutdown
- Input: ioc3kbd - add device table
- phy: qcom: qmp-combo: fix sm8650 voltage swing table
- media: ti: j721e-csi2rx: Fix races while restarting DMA
- drm/msm/dpu: Allow configuring multiple active DSC blocks
- drm: Make drivers depends on DRM_DW_HDMI
- [Config] Drivers now depend on DRM_DW_HDMI
- string: Prepare to merge strscpy_kunit.c into string_kunit.c
- string: Prepare to merge strcat KUnit tests into string_kunit.c
- drm/msm/adreno: fix CP cycles stat retrieval on a7xx
- printk: Fix LOG_CPU_MAX_BUF_SHIFT when BASE_SMALL is enabled
- powerpc/bpf/32: Fix failing test_bpf tests
- KVM: PPC: Book3S HV nestedv2: Cancel pending DEC exception
- KVM: PPC: Book3S HV nestedv2: Fix an error handling path in
gs_msg_ops_kvmhv_nestedv2_config_fill_info()
- KVM: arm64: Destroy mpidr_data for 'late' vCPU creation
- Bluetooth: ISO: Handle PA sync when no BIGInfo reports are generated
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- ubsan: Restore dependency on ARCH_HAS_UBSAN
- selftests: forwarding: Have RET track kselftest framework constants
- selftests: forwarding: Convert log_test() to recognize RET values
- selftests: net: Unify code of busywait() and slowwait()
- selftests/net: use tc rule to filter the na packet
- virtio_balloon: Give the balloon its own wakeup source
- riscv: cpufeature: Fix thead vector hwcap removal
- riscv: cpufeature: Fix extension subset checking
- riscv: selftests: Add hwprobe binaries to .gitignore
- idpf: Interpret .set_channels() input differently
- null_blk: fix null-ptr-dereference while configuring 'power' and
'submit_queues'
- netfs: Fix setting of BDP_ASYNC from iocb flags
- cifs: Set zero_point in the copy_file_range() and remap_file_range()
- cifs: Fix missing set of remote_i_size
- selftests: net: lib: set 'i' as local
- nvme: fix multipath batched completion accounting
- netkit: Fix setting mac address in l2 mode
- netkit: Fix pkt_type override upon netkit pass verdict
- null_blk: Fix return value of nullb_device_power_store()
- idpf: don't enable NAPI and interrupts prior to allocating Rx buffers
- selftests: mptcp: join: mark 'fastclose' tests as flaky
- drm/xe: Add dbg messages on the suspend resume functions.
- drm/xe: check pcode init status only on root gt of root tile
- drm/xe: Change pcode timeout to 50msec while polling again
- drm/xe: Only use reserved BCS instances for usm migrate exec queue
- sd: also set max_user_sectors when setting max_sectors
- block: stack max_user_sectors
- ipv6: introduce dst_rt6_info() helper
- inet: introduce dst_rtable() helper
- net: fix __dst_negative_advice() race
- ice: fix 200G PHY types to link speed mapping
- x86/topology/intel: Unlock CPUID before evaluating anything
- Upstream stable to v6.6.33, v6.9.4
* Reenable CONFIG_UBSAN for noble (LP: #2076650)
- ubsan: Remove CONFIG_UBSAN_SANITIZE_ALL
- [Config] Remove CONFIG_UBSAN_SANITIZE_ALL
* Dangling symlink to linux-lib-rust when Rust is disabled (LP: #2072592)
- [Packaging] Check do_lib_rust before linking Rust lib files
* kdump doesn't work with UEFI secure boot and kernel lockdown enabled on
ARM64 (LP: #2033007)
- [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG on arm64
* net/sched: Fix conntrack use-after-free (LP: #2073092)
- net/sched: Fix UAF when resolving a clash
* No sound on Huawei Matebook D14 AMD since Linux 6.8.0-38 [regression]
(LP: #2073049)
- ASoC: amd: acp: fix for acp platform device creation failure
* i915: Fixup regressions introduced with enabling single CCS engine
(LP: #2072755)
- drm/i915/gt: Fix CCS id's calculation for CCS mode setting
* [Ubuntu 24.04] FW1060.00 (NH1060_026) sosreport is running to Kernel OOPS
crash (LP: #2070358)
- nfsd: initialise nfsd_info.mutex early.
* 6.8 generic & amdpgu / polaris (LP: #2072428)
- drm/amdgpu: Adjust logic in amdgpu_device_partner_bandwidth()
* md: nvme over tcp with a striped underlying md raid device leads to data
corruption (LP: #2075110)
- md/md-bitmap: fix writing non bitmap pages
* Linux 6.8 fails to boot on ARM64 if any param is more than 146 chars
(LP: #2069534)
- SAUCE: arm64: v6.8: cmdline param >= 146 chars kills kernel
* CVE-2024-39484
- mmc: davinci: Don't strip remove function when driver is builtin
* CVE-2024-39292
- um: Add winch to winch_handlers before registering winch IRQ
* Miscellaneous upstream changes
- bnx2x: Fix multiple UBSAN array-index-out-of-bounds
[ Ubuntu-azure: 6.8.0-1013.15 ]
* noble/linux-azure: 6.8.0-1013.15 -proposed tracker (LP: #2075585)
[ Ubuntu: 6.8.0-41.41 ]
* noble/linux: 6.8.0-41.41 -proposed tracker (LP: #2075611)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/s2024.07.08)
* md: nvme over tcp with a striped underlying md raid device leads to data
corruption (LP: #2075110)
- md/md-bitmap: fix writing non bitmap pages
* Linux 6.8 fails to boot on ARM64 if any param is more than 146 chars
(LP: #2069534)
- SAUCE: arm64: v6.8: cmdline param >= 146 chars kills kernel
* CVE-2024-39484
- mmc: davinci: Don't strip remove function when driver is builtin
* CVE-2024-39292
- um: Add winch to winch_handlers before registering winch IRQ
[ Ubuntu-azure: 6.8.0-1012.14 ]
* noble/linux-azure: 6.8.0-1012.14 -proposed tracker (LP: #2072175)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/2024.07.08)
* Noble update: v6.8.9 upstream stable release (LP: #2070337)
- [Config] azure: updateconfigs to drop CONSTRUCTORS for rust
* Ubuntu 24.04 for Azure unable to run 32bit binaries (LP: #2071445)
- [Config] azure: Revert "UBUNTU: [Config] azure: Disable
CONFIG_COMPAT_32BIT_TIME"
[ Ubuntu: 6.8.0-40.40 ]
* noble/linux: 6.8.0-40.40 -proposed tracker (LP: #2072201)
* FPS of glxgear with fullscreen is too low on MTL platform (LP: #2069380)
- drm/i915: Bypass LMEMBAR/GTTMMADR for MTL stolen memory access
* a critical typo in the code managing the ASPM settings for PCI Express
devices (LP: #2071889)
- PCI/ASPM: Restore parent state to parent, child state to child
* [UBUNTU 24.04] IOMMU DMA mode changed in kernel config causes massive
throughput degradation for PCI-related network workloads (LP: #2071471)
- [Config] Set IOMMU_DEFAULT_DMA_STRICT=n and IOMMU_DEFAULT_DMA_LAZY=yes for
s390x
* UBSAN: array-index-out-of-bounds in
/build/linux-D15vQj/linux-6.5.0/drivers/md/bcache/bset.c:1098:3
(LP: #2039368)
- bcache: fix variable length array abuse in btree_iter
* Mute/mic LEDs and speaker no function on EliteBook 645/665 G11
(LP: #2071296)
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665
G11.
* failed to enable IPU6 camera sensor on kernel >= 6.8: ivsc_ace
intel_vsc-5db76cf6-0a68-4ed6-9b78-0361635e2447: switch camera to host
failed: -110 (LP: #2067364)
- mei: vsc: Don't stop/restart mei device during system suspend/resume
- SAUCE: media: ivsc: csi: don't count privacy on as error
- SAUCE: media: ivsc: csi: add separate lock for v4l2 control handler
- SAUCE: media: ivsc: csi: remove privacy status in struct mei_csi
- SAUCE: mei: vsc: Enhance IVSC chipset stability during warm reboot
- SAUCE: mei: vsc: Enhance SPI transfer of IVSC rom
- SAUCE: mei: vsc: Utilize the appropriate byte order swap function
- SAUCE: mei: vsc: Prevent timeout error with added delay post-firmware
download
* failed to probe camera sensor on Dell XPS 9315: ov01a10 i2c-OVTI01A0:00:
failed to check hwcfg: -22 (LP: #2070251)
- ACPI: utils: Make acpi_handle_path() not static
- ACPI: property: Ignore bad graph port nodes on Dell XPS 9315
- ACPI: property: Polish ignoring bad data nodes
- ACPI: scan: Ignore camera graph port nodes on all Dell Tiger, Alder and
Raptor Lake models
* Update amd_sfh for AMD strix series (LP: #2058331)
- HID: amd_sfh: Increase sensor command timeout
- HID: amd_sfh: Improve boot time when SFH is available
- HID: amd_sfh: Extend MP2 register access to SFH
- HID: amd_sfh: Set the AMD SFH driver to depend on x86
* RFIM and SAGV Linux Support for G10 models (LP: #2070158)
- drm/i915/display: Add meaningful traces for QGV point info error handling
- drm/i915/display: Extract code required to calculate max qgv/psf gv point
- drm/i915/display: extract code to prepare qgv points mask
- drm/i915/display: Disable SAGV on bw init, to force QGV point recalculation
- drm/i915/display: handle systems with duplicate psf gv points
- drm/i915/display: force qgv check after the hw state readout
* Update amd-pmf for AMD strix series (LP: #2058330)
- platform/x86/amd/pmf: Differentiate PMF ACPI versions
- platform/x86/amd/pmf: Disable debugfs support for querying power thermals
- platform/x86/amd/pmf: Add support to get sbios requests in PMF driver
- platform/x86/amd/pmf: Add support to notify sbios heart beat event
- platform/x86/amd/pmf: Add support to get APTS index numbers for static
slider
- platform/x86/amd/pmf: Add support to get sps default APTS index values
- platform/x86/amd/pmf: Update sps power thermals according to the platform-
profiles
* noble:linux: ADT ubuntu-regression-suite misses fakeroot dependency
(LP: #2070042)
- [DEP-8] Add missing fakeroot dependency
* Noble update: v6.8.12 upstream stable release (LP: #2071621)
- sunrpc: use the struct net as the svc proc private
- x86/tsc: Trust initial offset in architectural TSC-adjust MSRs
- selftests/ftrace: Fix BTFARG testcase to check fprobe is enabled correctly
- ftrace: Fix possible use-after-free issue in ftrace_location()
- Revert "arm64: fpsimd: Implement lazy restore for kernel mode FPSIMD"
- arm64/fpsimd: Avoid erroneous elide of user state reload
- Reapply "arm64: fpsimd: Implement lazy restore for kernel mode FPSIMD"
- tty: n_gsm: fix missing receive state reset after mode switch
- speakup: Fix sizeof() vs ARRAY_SIZE() bug
- serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
- serial: 8250_bcm7271: use default_mux_rate if possible
- serial: 8520_mtk: Set RTS on shutdown for Rx in-band wakeup
- Input: try trimming too long modalias strings
- io_uring: fail NOP if non-zero op flags is passed in
- Revert "r8169: don't try to disable interrupts if NAPI is, scheduled
already"
- r8169: Fix possible ring buffer corruption on fragmented Tx packets.
- ring-buffer: Fix a race between readers and resize checks
- net: mana: Fix the extra HZ in mana_hwc_send_request
- tools/latency-collector: Fix -Wformat-security compile warns
- tools/nolibc/stdlib: fix memory error in realloc()
- net: ti: icssg_prueth: Fix NULL pointer dereference in prueth_probe()
- net: lan966x: remove debugfs directory in probe() error path
- net: smc91x: Fix m68k kernel compilation for ColdFire CPU
- nilfs2: fix use-after-free of timer for log writer thread
- nilfs2: fix unexpected freezing of nilfs_segctor_sync()
- nilfs2: fix potential hang in nilfs_detach_log_writer()
- fs/ntfs3: Remove max link count info display during driver init
- fs/ntfs3: Taking DOS names into account during link counting
- fs/ntfs3: Fix case when index is reused during tree transformation
- fs/ntfs3: Break dir enumeration if directory contents error
- ksmbd: avoid to send duplicate oplock break notifications
- ksmbd: ignore trailing slashes in share paths
- ALSA: core: Fix NULL module pointer assignment at card init
- ALSA: Fix deadlocks with kctl removals at disconnection
- KEYS: asymmetric: Add missing dependency on CRYPTO_SIG
- [Config] updateconfigs for CRYPTO_SIG
- KEYS: asymmetric: Add missing dependencies of FIPS_SIGNATURE_SELFTEST
- HID: nintendo: Fix N64 controller being identified as mouse
- dmaengine: xilinx: xdma: Clarify kdoc in XDMA driver
- wifi: mac80211: don't use rate mask for scanning
- wifi: mac80211: ensure beacon is non-S1G prior to extracting the beacon
timestamp field
- wifi: cfg80211: fix the order of arguments for trace events of the tx_rx_evt
class
- dt-bindings: rockchip: grf: Add missing type to 'pcie-phy' node
- HID: mcp-2221: cancel delayed_work only when CONFIG_IIO is enabled
- net: usb: qmi_wwan: add Telit FN920C04 compositions
- drm/amd/display: Set color_mgmt_changed to true on unsuspend
- drm/amdgpu: Update BO eviction priorities
- drm/amd/pm: Restore config space after reset
- drm/amdkfd: Add VRAM accounting for SVM migration
- drm/amdgpu: Fix the ring buffer size for queue VM flush
- Revert "net: txgbe: fix i2c dev name cannot match clkdev"
- Revert "net: txgbe: fix clk_name exceed MAX_DEV_ID limits"
- cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n
- LoongArch: Lately init pmu after smp is online
- drm/etnaviv: fix tx clock gating on some GC7000 variants
- selftests: sud_test: return correct emulated syscall value on RISC-V
- riscv: thead: Rename T-Head PBMT to MAE
- [Config] updateconfigs for ERRATA_THEAD_MAE
- riscv: T-Head: Test availability bit before enabling MAE errata
- sched/isolation: Fix boot crash when maxcpus < first housekeeping CPU
- ASoC: Intel: bytcr_rt5640: Apply Asus T100TA quirk to Asus T100TAM too
- regulator: irq_helpers: duplicate IRQ name
- ALSA: hda: cs35l56: Exit cache-only after cs35l56_wait_for_firmware_boot()
- ASoC: SOF: ipc4-pcm: Use consistent name for snd_sof_pcm_stream pointer
- ASoC: SOF: ipc4-pcm: Use consistent name for sof_ipc4_timestamp_info pointer
- ASoC: SOF: ipc4-pcm: Introduce generic sof_ipc4_pcm_stream_priv
- ASoC: SOF: pcm: Restrict DSP D0i3 during S0ix to IPC3
- ASoC: acp: Support microphone from device Acer 315-24p
- ASoC: rt5645: Fix the electric noise due to the CBJ contacts floating
- ASoC: dt-bindings: rt5645: add cbj sleeve gpio property
- ASoC: rt722-sdca: modify channel number to support 4 channels
- ASoC: rt722-sdca: add headset microphone vrefo setting
- regulator: qcom-refgen: fix module autoloading
- regulator: vqmmc-ipq4019: fix module autoloading
- ASoC: cs35l41: Update DSP1RX5/6 Sources for DSP config
- ASoC: rt715: add vendor clear control register
- ASoC: rt715-sdca: volume step modification
- KVM: selftests: Add test for uaccesses to non-existent vgic-v2 CPUIF
- Input: xpad - add support for ASUS ROG RAIKIRI
- btrfs: take the cleaner_mutex earlier in qgroup disable
- EDAC/versal: Do not register for NOC errors
- fpga: dfl-pci: add PCI subdevice ID for Intel D5005 card
- bpf, x86: Fix PROBE_MEM runtime load check
- ALSA: emu10k1: make E-MU FPGA writes potentially more reliable
- softirq: Fix suspicious RCU usage in __do_softirq()
- platform/x86: ISST: Add Grand Ridge to HPM CPU list
- ASoC: da7219-aad: fix usage of device_get_named_child_node()
- ASoC: cs35l56: fix usages of device_get_named_child_node()
- ALSA: hda: intel-dsp-config: harden I2C/I2S codec detection
- Input: amimouse - mark driver struct with __refdata to prevent section
mismatch
- drm/amdgpu: Fix VRAM memory accounting
- drm/amd/display: Ensure that dmcub support flag is set for DCN20
- drm/amd/display: Add dtbclk access to dcn315
- drm/amd/display: Allocate zero bw after bw alloc enable
- drm/amd/display: Add VCO speed parameter for DCN31 FPU
- drm/amd/display: Fix DC mode screen flickering on DCN321
- drm/amd/display: Disable seamless boot on 128b/132b encoding
- drm/amdkfd: Flush the process wq before creating a kfd_process
- x86/mm: Remove broken vsyscall emulation code from the page fault code
- nvme: find numa distance only if controller has valid numa id
- nvmet-auth: return the error code to the nvmet_auth_host_hash() callers
- nvmet-auth: replace pr_debug() with pr_err() to report an error.
- nvme: cancel pending I/O if nvme controller is in terminal state
- nvmet-tcp: fix possible memory leak when tearing down a controller
- nvmet: fix nvme status code when namespace is disabled
- nvme-tcp: strict pdu pacing to avoid send stalls on TLS
- epoll: be better about file lifetimes
- nvmet: prevent sprintf() overflow in nvmet_subsys_nsid_exists()
- openpromfs: finish conversion to the new mount API
- crypto: bcm - Fix pointer arithmetic
- firmware: qcom: qcm: fix unused qcom_scm_qseecom_allowlist
- mm/slub, kunit: Use inverted data to corrupt kmem cache
- firmware: raspberrypi: Use correct device for DMA mappings
- ecryptfs: Fix buffer size for tag 66 packet
- nilfs2: fix out-of-range warning
- parisc: add missing export of __cmpxchg_u8()
- crypto: ccp - drop platform ifdef checks
- crypto: x86/nh-avx2 - add missing vzeroupper
- crypto: x86/sha256-avx2 - add missing vzeroupper
- crypto: x86/sha512-avx2 - add missing vzeroupper
- s390/cio: fix tracepoint subchannel type field
- io_uring: use the right type for work_llist empty check
- rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow
- rcu: Fix buffer overflow in print_cpu_stall_info()
- ARM: configs: sunxi: Enable DRM_DW_HDMI
- jffs2: prevent xattr node from overflowing the eraseblock
- libfs: Re-arrange locking in offset_iterate_dir()
- libfs: Define a minimum directory offset
- libfs: Add simple_offset_empty()
- maple_tree: Add mtree_alloc_cyclic()
- libfs: Convert simple directory offsets to use a Maple Tree
- libfs: Fix simple_offset_rename_exchange()
- libfs: Add simple_offset_rename() API
- shmem: Fix shmem_rename2()
- io-wq: write next_work before dropping acct_lock
- mm/userfaultfd: Do not place zeropages when zeropages are disallowed
- s390/mm: Re-enable the shared zeropage for !PV and !skeys KVM guests
- crypto: octeontx2 - add missing check for dma_map_single
- crypto: qat - improve error message in adf_get_arbiter_mapping()
- crypto: qat - improve error logging to be consistent across features
- soc: qcom: pmic_glink: don't traverse clients list without a lock
- soc: qcom: pmic_glink: notify clients about the current state
- firmware: qcom: scm: Fix __scm and waitq completion variable initialization
- soc: mediatek: cmdq: Fix typo of CMDQ_JUMP_RELATIVE
- null_blk: Fix missing mutex_destroy() at module removal
- crypto: qat - validate slices count returned by FW
- hwrng: stm32 - use logical OR in conditional
- hwrng: stm32 - put IP into RPM suspend on failure
- hwrng: stm32 - repair clock handling
- kunit/fortify: Fix mismatched kvalloc()/vfree() usage
- io_uring/net: remove dependency on REQ_F_PARTIAL_IO for sr->done_io
- io_uring/net: fix sendzc lazy wake polling
- soc: qcom: pmic_glink: Make client-lock non-sleeping
- lkdtm: Disable CFI checking for perms functions
- md: fix resync softlockup when bitmap size is less than array size
- crypto: qat - specify firmware files for 402xx
- block: refine the EOF check in blkdev_iomap_begin
- block: fix and simplify blkdevparts= cmdline parsing
- block: support to account io_ticks precisely
- wifi: ath10k: poll service ready message before failing
- wifi: brcmfmac: pcie: handle randbuf allocation failure
- wifi: ath11k: don't force enable power save on non-running vdevs
- bpftool: Fix missing pids during link show
- libbpf: Prevent null-pointer dereference when prog to load has no BTF
- wifi: ath12k: use correct flag field for 320 MHz channels
- wifi: mt76: mt7915: workaround too long expansion sparse warnings
- x86/boot: Ignore relocations in .notes sections in walk_relocs() too
- wifi: ieee80211: fix ieee80211_mle_basic_sta_prof_size_ok()
- wifi: iwlwifi: mvm: Do not warn on invalid link on scan complete
- wifi: iwlwifi: mvm: allocate STA links only for active links
- wifi: mac80211: don't select link ID if not provided in scan request
- wifi: iwlwifi: implement can_activate_links callback
- wifi: iwlwifi: mvm: fix active link counting during recovery
- wifi: iwlwifi: mvm: select STA mask only for active links
- wifi: iwlwifi: reconfigure TLC during HW restart
- wifi: iwlwifi: mvm: fix check in iwl_mvm_sta_fw_id_mask
- sched/fair: Add EAS checks before updating root_domain::overutilized
- ACPI: bus: Indicate support for _TFP thru _OSC
- ACPI: bus: Indicate support for more than 16 p-states thru _OSC
- ACPI: bus: Indicate support for the Generic Event Device thru _OSC
- ACPI: Fix Generic Initiator Affinity _OSC bit
- ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC
- enetc: avoid truncating error message
- qed: avoid truncating work queue length
- mlx5: avoid truncating error message
- mlx5: stop warning for 64KB pages
- bitops: add missing prototype check
- dlm: fix user space lock decision to copy lvb
- wifi: carl9170: re-fix fortified-memset warning
- bpftool: Mount bpffs on provided dir instead of parent dir
- bpf: Pack struct bpf_fib_lookup
- bpf: prevent r10 register from being marked as precise
- x86/microcode/AMD: Avoid -Wformat warning with clang-15
- scsi: ufs: qcom: Perform read back after writing reset bit
- scsi: ufs: qcom: Perform read back after writing REG_UFS_SYS1CLK_1US
- scsi: ufs: qcom: Perform read back after writing unipro mode
- scsi: ufs: qcom: Perform read back after writing CGC enable
- scsi: ufs: cdns-pltfrm: Perform read back after writing HCLKDIV
- scsi: ufs: core: Perform read back after writing UTP_TASK_REQ_LIST_BASE_H
- scsi: ufs: core: Perform read back after disabling interrupts
- scsi: ufs: core: Perform read back after disabling UIC_COMMAND_COMPL
- ACPI: LPSS: Advertise number of chip selects via property
- EDAC/skx_common: Allow decoding of SGX addresses
- locking/atomic/x86: Correct the definition of __arch_try_cmpxchg128()
- irqchip/alpine-msi: Fix off-by-one in allocation error path
- irqchip/loongson-pch-msi: Fix off-by-one on allocation error path
- ACPI: disable -Wstringop-truncation
- gfs2: Don't forget to complete delayed withdraw
- gfs2: Fix "ignore unlock failures after withdraw"
- arm64: Remove unnecessary irqflags alternative.h include
- x86/boot/64: Clear most of CR4 in startup_64(), except PAE, MCE and LA57
- selftests/bpf: Fix umount cgroup2 error in test_sockmap
- tcp: increase the default TCP scaling ratio
- cpufreq: exit() callback is optional
- x86/pat: Introduce lookup_address_in_pgd_attr()
- x86/pat: Restructure _lookup_address_cpa()
- x86/pat: Fix W^X violation false-positives when running as Xen PV guest
- udp: Avoid call to compute_score on multiple sites
- openrisc: traps: Don't send signals to kernel mode threads
- cppc_cpufreq: Fix possible null pointer dereference
- wifi: iwlwifi: mvm: init vif works only once
- scsi: libsas: Fix the failure of adding phy with zero-address to port
- scsi: hpsa: Fix allocation size for Scsi_Host private data
- x86/purgatory: Switch to the position-independent small code model
- wifi: ath12k: fix out-of-bound access of qmi_invoke_handler()
- thermal/drivers/mediatek/lvts_thermal: Add coeff for mt8192
- thermal/drivers/tsens: Fix null pointer dereference
- dt-bindings: thermal: loongson,ls2k-thermal: Add Loongson-2K0500 compatible
- dt-bindings: thermal: loongson,ls2k-thermal: Fix incorrect compatible
definition
- wifi: ath10k: Fix an error code problem in
ath10k_dbg_sta_write_peer_debug_trigger()
- gfs2: Remove ill-placed consistency check
- gfs2: Fix potential glock use-after-free on unmount
- gfs2: finish_xmote cleanup
- gfs2: do_xmote fixes
- thermal/debugfs: Avoid excessive updates of trip point statistics
- selftests/bpf: Fix a fd leak in error paths in open_netns
- scsi: ufs: core: mcq: Fix ufshcd_mcq_sqe_search()
- cpufreq: brcmstb-avs-cpufreq: ISO C90 forbids mixed declarations
- wifi: ath10k: populate board data for WCN3990
- net: dsa: mv88e6xxx: Add support for model-specific pre- and post-reset
handlers
- net: dsa: mv88e6xxx: Avoid EEPROM timeout without EEPROM on 88E6250-family
switches
- tcp: avoid premature drops in tcp_add_backlog()
- thermal/debugfs: Create records for cdev states as they get used
- thermal/debugfs: Pass cooling device state to thermal_debug_cdev_add()
- pwm: sti: Prepare removing pwm_chip from driver data
- pwm: sti: Simplify probe function using devm functions
- drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group
- drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group
- drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset()
- net: give more chances to rcu in netdev_wait_allrefs_any()
- macintosh/via-macii: Fix "BUG: sleeping function called from invalid
context"
- wifi: carl9170: add a proper sanity check for endpoints
- bpf: Fix verifier assumptions about socket->sk
- selftests/bpf: Run cgroup1_hierarchy test in own mount namespace
- wifi: ar5523: enable proper endpoint verification
- pwm: Drop useless member .of_pwm_n_cells of struct pwm_chip
- pwm: Let the of_xlate callbacks accept references without period
- pwm: Drop duplicate check against chip->npwm in of_pwm_xlate_with_flags()
- pwm: Reorder symbols in core.c
- pwm: Provide an inline function to get the parent device of a given chip
- pwm: meson: Change prototype of a few helpers to prepare further changes
- pwm: meson: Make use of pwmchip_parent() accessor
- pwm: meson: Add check for error from clk_round_rate()
- pwm: meson: Use mul_u64_u64_div_u64() for frequency calculating
- bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
- sh: kprobes: Merge arch_copy_kprobe() into arch_prepare_kprobe()
- Revert "sh: Handle calling csum_partial with misaligned data"
- wifi: mt76: mt7603: fix tx queue of loopback packets
- wifi: mt76: mt7603: add wpdma tx eof flag for PSE client reset
- wifi: mt76: mt7996: fix size of txpower MCU command
- wifi: mt76: mt7925: ensure 4-byte alignment for suspend & wow command
- wifi: mt76: mt7996: fix uninitialized variable in mt7996_irq_tasklet()
- wifi: mt76: mt7996: fix potential memory leakage when reading chip
temperature
- libbpf: Fix error message in attach_kprobe_multi
- wifi: nl80211: Avoid address calculations via out of bounds array indexing
- wifi: rtw89: wow: refine WoWLAN flows of HCI interrupts and low power mode
- selftests/binderfs: use the Makefile's rules, not Make's implicit rules
- selftests/resctrl: fix clang build failure: use LOCAL_HDRS
- selftests: default to host arch for LLVM builds
- kunit: Fix kthread reference
- kunit: unregister the device on error
- kunit: bail out early in __kunit_test_suites_init() if there are no suites
to test
- selftests/bpf: Fix pointer arithmetic in test_xdp_do_redirect
- HID: intel-ish-hid: ipc: Add check for pci_alloc_irq_vectors
- scsi: bfa: Ensure the copied buf is NUL terminated
- scsi: qedf: Ensure the copied buf is NUL terminated
- scsi: qla2xxx: Fix debugfs output for fw_resource_count
- gpio: nuvoton: Fix sgpio irq handle error
- x86/numa: Fix SRAT lookup of CFMWS ranges with numa_fill_memblks()
- wifi: mwl8k: initialize cmd->addr[] properly
- HID: amd_sfh: Handle "no sensors" in PM operations
- usb: aqc111: stop lying about skb->truesize
- net: usb: sr9700: stop lying about skb->truesize
- m68k: Fix spinlock race in kernel thread creation
- m68k: mac: Fix reboot hang on Mac IIci
- dm-delay: fix workqueue delay_timer race
- dm-delay: fix hung task introduced by kthread mode
- dm-delay: fix max_delay calculations
- ptp: ocp: fix DPLL functions
- net: ipv6: fix wrong start position when receive hop-by-hop fragment
- eth: sungem: remove .ndo_poll_controller to avoid deadlocks
- selftests: net: add missing config for amt.sh
- selftests: net: move amt to socat for better compatibility
- net: ethernet: mediatek: split tx and rx fields in mtk_soc_data struct
- net: ethernet: mediatek: use ADMAv1 instead of ADMAv2.0 on MT7981 and MT7986
- ice: Fix package download algorithm
- net: ethernet: cortina: Locking fixes
- af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg
- net: usb: smsc95xx: stop lying about skb->truesize
- net: openvswitch: fix overwriting ct original tuple for ICMPv6
- ipv6: sr: add missing seg6_local_exit
- ipv6: sr: fix incorrect unregister order
- ipv6: sr: fix invalid unregister error path
- net/mlx5: Fix peer devlink set for SF representor devlink port
- net/mlx5: Reload only IB representors upon lag disable/enable
- net/mlx5: Add a timeout to acquire the command queue semaphore
- net/mlx5: Discard command completions in internal error
- s390/bpf: Emit a barrier for BPF_FETCH instructions
- riscv, bpf: make some atomic operations fully ordered
- ax25: Use kernel universal linked list to implement ax25_dev_list
- ax25: Fix reference count leak issues of ax25_dev
- ax25: Fix reference count leak issue of net_device
- dpll: fix return value check for kmemdup
- net: fec: remove .ndo_poll_controller to avoid deadlocks
- mptcp: SO_KEEPALIVE: fix getsockopt support
- mptcp: cleanup writer wake-up
- mptcp: avoid some duplicate code in socket option handling
- mptcp: implement TCP_NOTSENT_LOWAT support
- mptcp: cleanup SOL_TCP handling
- mptcp: fix full TCP keep-alive support
- net: stmmac: Offload queueMaxSDU from tc-taprio
- net: stmmac: est: Per Tx-queue error count for HLBF
- net: stmmac: Report taprio offload status
- net: stmmac: move the EST lock to struct stmmac_priv
- net: micrel: Fix receiving the timestamp in the frame for lan8841
- Bluetooth: compute LE flow credits based on recvbuf space
- Bluetooth: qca: Fix error code in qca_read_fw_build_info()
- Bluetooth: ISO: Add hcon for listening bis sk
- Bluetooth: ISO: Clean up returns values in iso_connect_ind()
- Bluetooth: ISO: Make iso_get_sock_listen generic
- Bluetooth: Remove usage of the deprecated ida_simple_xx() API
- Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS
- Bluetooth: HCI: Remove HCI_AMP support
- ice: make ice_vsi_cfg_rxq() static
- ice: make ice_vsi_cfg_txq() static
- overflow: Change DEFINE_FLEX to take __counted_by member
- Bluetooth: hci_conn, hci_sync: Use __counted_by() to avoid -Wfamnae warnings
- Bluetooth: hci_core: Fix not handling hdev->le_num_of_adv_sets=1
- drm/bridge: Fix improper bridge init order with pre_enable_prev_first
- drm/ci: update device type for volteer devices
- drm/nouveau/dp: Fix incorrect return code in r535_dp_aux_xfer()
- drm/omapdrm: Fix console by implementing fb_dirty
- drm/omapdrm: Fix console with deferred ops
- printk: Let no_printk() use _printk()
- dev_printk: Add and use dev_no_printk()
- drm/lcdif: Do not disable clocks on already suspended hardware
- drm/dp: Don't attempt AUX transfers when eDP panels are not powered
- drm/panel: atna33xc20: Fix unbalanced regulator in the case HPD doesn't
assert
- drm/amd/display: Fix potential index out of bounds in color transformation
function
- drm/amd/display: Remove redundant condition in dcn35_calc_blocks_to_gate()
- ASoC: Intel: Disable route checks for Skylake boards
- ASoC: Intel: avs: ssm4567: Do not ignore route checks
- mtd: core: Report error if first mtd_otp_size() call fails in
mtd_otp_nvmem_add()
- mtd: rawnand: hynix: fixed typo
- drm/imagination: avoid -Woverflow warning
- ASoC: mediatek: Assign dummy when codec not specified for a DAI link
- drm/panel: ltk050h3146w: add MIPI_DSI_MODE_VIDEO to LTK050H3148W flags
- drm/panel: ltk050h3146w: drop duplicate commands from LTK050H3148W init
- fbdev: shmobile: fix snprintf truncation
- ASoC: kirkwood: Fix potential NULL dereference
- drm/meson: vclk: fix calculation of 59.94 fractional rates
- drm/mediatek: Add 0 size check to mtk_drm_gem_obj
- drm/mediatek: Init `ddp_comp` with devm_kcalloc()
- ASoC: SOF: Intel: hda-dai: fix channel map configuration for aggregated
dailink
- powerpc/fsl-soc: hide unused const variable
- ASoC: SOF: Intel: mtl: Correct rom_status_reg
- ASoC: SOF: Intel: lnl: Correct rom_status_reg
- ASoC: SOF: Intel: mtl: Disable interrupts when firmware boot failed
- ASoC: SOF: Intel: mtl: Implement firmware boot state check
- fbdev: sisfb: hide unused variables
- selftests: cgroup: skip test_cgcore_lesser_ns_open when cgroup2 mounted
without nsdelegate
- ASoC: Intel: avs: Restore stream decoupling on prepare
- ASoC: Intel: avs: Fix ASRC module initialization
- ASoC: Intel: avs: Fix potential integer overflow
- ASoC: Intel: avs: Test result of avs_get_module_entry()
- media: ngene: Add dvb_ca_en50221_init return value check
- staging: media: starfive: Remove links when unregistering devices
- media: rcar-vin: work around -Wenum-compare-conditional warning
- media: radio-shark2: Avoid led_names truncations
- drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference
- platform/x86: xiaomi-wmi: Fix race condition when reporting key events
- drm/msm/dp: allow voltage swing / pre emphasis of 3
- drm/msm/dp: Avoid a long timeout for AUX transfer if nothing connected
- media: ipu3-cio2: Request IRQ earlier
- media: dt-bindings: ovti,ov2680: Fix the power supply names
- media: i2c: et8ek8: Don't strip remove function when driver is builtin
- media: v4l2-subdev: Fix stream handling for crop API
- fbdev: sh7760fb: allow modular build
- media: atomisp: ssh_css: Fix a null-pointer dereference in
load_video_binaries
- drm/arm/malidp: fix a possible null pointer dereference
- drm: vc4: Fix possible null pointer dereference
- ASoC: tracing: Export SND_SOC_DAPM_DIR_OUT to its value
- drm/bridge: anx7625: Don't log an error when DSI host can't be found
- drm/bridge: icn6211: Don't log an error when DSI host can't be found
- drm/bridge: lt8912b: Don't log an error when DSI host can't be found
- drm/bridge: lt9611: Don't log an error when DSI host can't be found
- drm/bridge: lt9611uxc: Don't log an error when DSI host can't be found
- drm/bridge: tc358775: Don't log an error when DSI host can't be found
- drm/bridge: dpc3433: Don't log an error when DSI host can't be found
- drm/panel: novatek-nt35950: Don't log an error when DSI host can't be found
- drm/bridge: anx7625: Update audio status while detecting
- drm/panel: simple: Add missing Innolux G121X1-L03 format, flags, connector
- ALSA: hda: cs35l41: Remove Speaker ID for Lenovo Legion slim 7 16ARHA7
- drm/mipi-dsi: use correct return type for the DSC functions
- media: uvcvideo: Add quirk for Logitech Rally Bar
- drm/rockchip: vop2: Do not divide height twice for YUV
- drm/edid: Parse topology block for all DispID structure v1.x
- media: cadence: csi2rx: configure DPHY before starting source stream
- clk: samsung: exynosautov9: fix wrong pll clock id value
- RDMA/mlx5: Uncacheable mkey has neither rb_key or cache_ent
- RDMA/mlx5: Change check for cacheable mkeys
- RDMA/mlx5: Adding remote atomic access flag to updatable flags
- clk: mediatek: pllfh: Don't log error for missing fhctl node
- iommu: Undo pasid attachment only for the devices that have succeeded
- RDMA/hns: Fix return value in hns_roce_map_mr_sg
- RDMA/hns: Fix deadlock on SRQ async events.
- RDMA/hns: Fix UAF for cq async event
- RDMA/hns: Fix GMV table pagesize
- RDMA/hns: Use complete parentheses in macros
- RDMA/hns: Modify the print level of CQE error
- clk: mediatek: mt8365-mm: fix DPI0 parent
- clk: rs9: fix wrong default value for clock amplitude
- clk: qcom: clk-alpha-pll: remove invalid Stromer register offset
- RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt
- RDMA/rxe: Allow good work requests to be executed
- RDMA/rxe: Fix incorrect rxe_put in error path
- IB/mlx5: Use __iowrite64_copy() for write combining stores
- clk: renesas: r8a779a0: Fix CANFD parent clock
- clk: renesas: r9a07g043: Add clock and reset entry for PLIC
- lib/test_hmm.c: handle src_pfns and dst_pfns allocation failure
- mm/ksm: fix ksm exec support for prctl
- clk: qcom: dispcc-sm8450: fix DisplayPort clocks
- clk: qcom: dispcc-sm6350: fix DisplayPort clocks
- clk: qcom: dispcc-sm8550: fix DisplayPort clocks
- clk: qcom: dispcc-sm8650: fix DisplayPort clocks
- clk: qcom: mmcc-msm8998: fix venus clock issue
- x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map
- x86/insn: Add VEX versions of VPDPBUSD, VPDPBUSDS, VPDPWSSD and VPDPWSSDS
- ext4: avoid excessive credit estimate in ext4_tmpfile()
- RDMA/mana_ib: Introduce helpers to create and destroy mana queues
- RDMA/mana_ib: Use struct mana_ib_queue for CQs
- RDMA/mana_ib: boundary check before installing cq callbacks
- virt: acrn: stop using follow_pfn
- drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map()
- sunrpc: removed redundant procp check
- nfsd: don't create nfsv4recoverydir in nfsdfs when not used.
- ext4: fix potential unnitialized variable
- ext4: remove the redundant folio_wait_stable()
- clk: qcom: Fix SC_CAMCC_8280XP dependencies
- [Config] updateconfigs for SC_CAMCC_8280XP
- clk: qcom: Fix SM_GPUCC_8650 dependencies
- [Config] updateconfigs for SM_GPUCC_8650
- clk: qcom: apss-ipq-pll: fix PLL rate for IPQ5018
- of: module: add buffer overflow check in of_modalias()
- bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
- SUNRPC: Fix gss_free_in_token_pages()
- selftests/damon/_damon_sysfs: check errors from nr_schemes file reads
- selftests/kcmp: remove unused open mode
- RDMA/IPoIB: Fix format truncation compilation errors
- RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use
siw
- samples/landlock: Fix incorrect free in populate_ruleset_net
- tracing/user_events: Prepare find/delete for same name events
- tracing/user_events: Fix non-spaced field matching
- modules: Drop the .export_symbol section from the final modules
- net: bridge: xmit: make sure we have at least eth header len bytes
- selftests: net: bridge: increase IGMP/MLD exclude timeout membership
interval
- net: bridge: mst: fix vlan use-after-free
- net: qrtr: ns: Fix module refcnt
- selftests/net/lib: no need to record ns name if it already exist
- idpf: don't skip over ethtool tcp-data-split setting
- netrom: fix possible dead-lock in nr_rt_ioctl()
- af_packet: do not call packet_read_pending() from tpacket_destruct_skb()
- sched/fair: Allow disabling sched_balance_newidle with
sched_relax_domain_level
- sched/core: Fix incorrect initialization of the 'burst' parameter in
cpu_max_write()
- net: wangxun: fix to change Rx features
- net: wangxun: match VLAN CTAG and STAG features
- net: txgbe: move interrupt codes to a separate file
- net: txgbe: use irq_domain for interrupt controller
- net: txgbe: fix to control VLAN strip
- l2tp: fix ICMP error handling for UDP-encap sockets
- io_uring/net: ensure async prep handlers always initialize ->done_io
- pwm: Fix setting period with #pwm-cells = <1> and of_pwm_single_xlate()
- net: txgbe: fix to clear interrupt status after handling IRQ
- net: txgbe: fix GPIO interrupt blocking
- Linux 6.8.12
* Noble update: v6.8.11 upstream stable release (LP: #2070355)
- drm/amd/display: Fix division by zero in setup_dsc_config
- net: ks8851: Fix another TX stall caused by wrong ISR flag handling
- ice: pass VSI pointer into ice_vc_isvalid_q_id
- ice: remove unnecessary duplicate checks for VF VSI ID
- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()
- Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
- KEYS: trusted: Fix memory leak in tpm2_key_encode()
- erofs: get rid of erofs_fs_context
- erofs: reliably distinguish block based and fscache mode
- binder: fix max_thread type inconsistency
- usb: dwc3: Wait unconditionally after issuing EndXfer command
- net: usb: ax88179_178a: fix link status when link is set to down/up
- usb: typec: ucsi: displayport: Fix potential deadlock
- usb: typec: tipd: fix event checking for tps25750
- usb: typec: tipd: fix event checking for tps6598x
- serial: kgdboc: Fix NMI-safety problems from keyboard reset code
- remoteproc: mediatek: Make sure IPI buffer fits in L2TCM
- KEYS: trusted: Do not use WARN when encode fails
- admin-guide/hw-vuln/core-scheduling: fix return type of PR_SCHED_CORE_GET
- docs: kernel_include.py: Cope with docutils 0.21
- Docs/admin-guide/mm/damon/usage: fix wrong example of DAMOS filter matching
sysfs file
- block: add a disk_has_partscan helper
- block: add a partscan sysfs attribute for disks
- Linux 6.8.11
* Noble update: v6.8.10 upstream stable release (LP: #2070349)
- rust: module: place generated init_module() function in .init.text
- rust: macros: fix soundness issue in `module!` macro
- wifi: nl80211: don't free NULL coalescing rule
- pinctrl: pinctrl-aspeed-g6: Fix register offset for pinconf of GPIOR-T
- pinctrl/meson: fix typo in PDM's pin name
- pinctrl: core: delete incorrect free in pinctrl_enable()
- pinctrl: mediatek: paris: Fix PIN_CONFIG_INPUT_SCHMITT_ENABLE readback
- pinctrl: mediatek: paris: Rework support for
PIN_CONFIG_{INPUT,OUTPUT}_ENABLE
- sunrpc: add a struct rpc_stats arg to rpc_create_args
- nfs: expose /proc/net/sunrpc/nfs in net namespaces
- nfs: make the rpc_stat per net namespace
- nfs: Handle error of rpc_proc_register() in nfs_net_init().
- pinctrl: baytrail: Fix selecting gpio pinctrl state
- power: rt9455: hide unused rt9455_boost_voltage_values
- power: supply: mt6360_charger: Fix of_match for usb-otg-vbus regulator
- pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map()
- nfsd: rename NFSD_NET_* to NFSD_STATS_*
- nfsd: expose /proc/net/sunrpc/nfsd in net namespaces
- nfsd: make all of the nfsd stats per-network namespace
- NFSD: add support for CB_GETATTR callback
- NFSD: Fix nfsd4_encode_fattr4() crasher
- regulator: mt6360: De-capitalize devicetree regulator subnodes
- regulator: change stubbed devm_regulator_get_enable to return Ok
- regulator: change devm_regulator_get_enable_optional() stub to return Ok
- bpf, kconfig: Fix DEBUG_INFO_BTF_MODULES Kconfig definition
- bpf, skmsg: Fix NULL pointer dereference in sk_psock_skb_ingress_enqueue
- regmap: Add regmap_read_bypassed()
- ASoC: SOF: Intel: add default firmware library path for LNL
- nvme: fix warn output about shared namespaces without CONFIG_NVME_MULTIPATH
- bpf: Fix a verifier verbose message
- spi: axi-spi-engine: use common AXI macros
- spi: axi-spi-engine: fix version format string
- spi: hisi-kunpeng: Delete the dump interface of data registers in debugfs
- bpf, arm64: Fix incorrect runtime stats
- riscv, bpf: Fix incorrect runtime stats
- ASoC: Intel: avs: Set name of control as in topology
- ASoC: codecs: wsa881x: set clk_stop_mode1 flag
- s390/mm: Fix storage key clearing for guest huge pages
- s390/mm: Fix clearing storage keys for huge pages
- arm32, bpf: Reimplement sign-extension mov instruction
- xdp: use flags field to disambiguate broadcast redirect
- efi/unaccepted: touch soft lockup during memory accept
- ice: ensure the copied buf is NUL terminated
- bna: ensure the copied buf is NUL terminated
- octeontx2-af: avoid off-by-one read from userspace
- thermal/debugfs: Free all thermal zone debug memory on zone removal
- thermal/debugfs: Fix two locking issues with thermal zone debug
- nsh: Restore skb->{protocol,data,mac_header} for outer header in
nsh_gso_segment().
- net l2tp: drop flow hash on forward
- thermal/debugfs: Prevent use-after-free from occurring after cdev removal
- s390/vdso: Add CFI for RA register to asm macro vdso_func
- Fix a potential infinite loop in extract_user_to_sg()
- ALSA: emu10k1: fix E-MU card dock presence monitoring
- ALSA: emu10k1: factor out snd_emu1010_load_dock_firmware()
- ALSA: emu10k1: move the whole GPIO event handling to the workqueue
- ALSA: emu10k1: fix E-MU dock initialization
- net: qede: sanitize 'rc' in qede_add_tc_flower_fltr()
- net: qede: use return from qede_parse_flow_attr() for flower
- net: qede: use return from qede_parse_flow_attr() for flow_spec
- net: qede: use return from qede_parse_actions()
- vxlan: Fix racy device stats updates.
- vxlan: Add missing VNI filter counter update in arp_reduce().
- ASoC: meson: axg-fifo: use FIELD helpers
- ASoC: meson: axg-fifo: use threaded irq to check periods
- ASoC: meson: axg-card: make links nonatomic
- ASoC: meson: axg-tdm-interface: manage formatters in trigger
- ASoC: meson: cards: select SND_DYNAMIC_MINORS
- ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node()
- s390/cio: Ensure the copied buf is NUL terminated
- cxgb4: Properly lock TX queue for the selftest.
- net: dsa: mv88e6xxx: Fix number of databases for 88E6141 / 88E6341
- drm/amdgpu: fix doorbell regression
- spi: fix null pointer dereference within spi_sync
- net: bridge: fix multicast-to-unicast with fraglist GSO
- net: core: reject skb_copy(_expand) for fraglist GSO skbs
- rxrpc: Clients must accept conn from any address
- tipc: fix a possible memleak in tipc_buf_append
- vxlan: Pull inner IP header in vxlan_rcv().
- s390/qeth: Fix kernel panic after setting hsuid
- drm/panel: ili9341: Correct use of device property APIs
- [Config] updateconfigs for DRM_PANEL_ILITEK_ILI9341
- drm/panel: ili9341: Respect deferred probe
- drm/panel: ili9341: Use predefined error codes
- ipv4: Fix uninit-value access in __ip_make_skb()
- net: gro: fix udp bad offset in socket lookup by adding
{inner_}network_offset to napi_gro_cb
- net: gro: add flush check in udp_gro_receive_segment
- drm/xe/display: Fix ADL-N detection
- clk: qcom: smd-rpm: Restore msm8976 num_clk
- clk: sunxi-ng: h6: Reparent CPUX during PLL CPUX rate change
- powerpc/pseries: make max polling consistent for longer H_CALLs
- powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE
- EDAC/versal: Do not log total error counts
- swiotlb: initialise restricted pool list_head when SWIOTLB_DYNAMIC=y
- KVM: arm64: vgic-v2: Check for non-NULL vCPU in vgic_v2_parse_attr()
- exfat: fix timing of synchronizing bitmap and inode
- firmware: microchip: don't unconditionally print validation success
- scsi: ufs: core: Fix MCQ MAC configuration
- scsi: lpfc: Move NPIV's transport unregistration to after resource clean up
- scsi: lpfc: Remove IRQF_ONESHOT flag from threaded IRQ handling
- scsi: lpfc: Update lpfc_ramp_down_queue_handler() logic
- scsi: lpfc: Replace hbalock with ndlp lock in lpfc_nvme_unregister_port()
- scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up()
- scsi: lpfc: Use a dedicated lock for ras_fwlog state
- gfs2: Fix invalid metadata access in punch_hole
- fs/9p: fix uninitialized values during inode evict
- wifi: mac80211: fix ieee80211_bss_*_flags kernel-doc
- wifi: cfg80211: fix rdev_dump_mpp() arguments order
- wifi: mac80211: fix prep_connection error path
- wifi: iwlwifi: read txq->read_ptr under lock
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal
- net: mark racy access on sk->sk_rcvbuf
- drm/xe: Fix END redefinition
- scsi: mpi3mr: Avoid memcpy field-spanning write WARNING
- scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload
- btrfs: return accurate error code on open failure in open_fs_devices()
- drm/amdkfd: Check cgroup when returning DMABuf info
- drm/amdkfd: range check cp bad op exception interrupts
- bpf: Check bloom filter map value size
- selftests/ftrace: Fix event filter target_func selection
- kbuild: Disable KCSAN for autogenerated *.mod.c intermediaries
- ASoC: SOF: Intel: hda-dsp: Skip IMR boot on ACE platforms in case of S3
suspend
- regulator: tps65132: Add of_match table
- OSS: dmasound/paula: Mark driver struct with __refdata to prevent section
mismatch
- scsi: ufs: core: WLUN suspend dev/link state error recovery
- scsi: libsas: Align SMP request allocation to ARCH_DMA_MINALIGN
- scsi: ufs: core: Fix MCQ mode dev command timeout
- ALSA: line6: Zero-initialize message buffers
- block: fix overflow in blk_ioctl_discard()
- ASoC: codecs: ES8326: Solve error interruption issue
- ASoC: codecs: ES8326: modify clock table
- net: bcmgenet: Reset RBUF on first open
- vboxsf: explicitly deny setlease attempts
- ata: sata_gemini: Check clk_enable() result
- firewire: ohci: mask bus reset interrupts between ISR and bottom half
- tools/power turbostat: Fix added raw MSR output
- tools/power turbostat: Increase the limit for fd opened
- tools/power turbostat: Fix Bzy_MHz documentation typo
- tools/power turbostat: Do not print negative LPI residency
- tools/power turbostat: Expand probe_intel_uncore_frequency()
- tools/power turbostat: Print ucode revision only if valid
- tools/power turbostat: Fix warning upon failed /dev/cpu_dma_latency read
- btrfs: make btrfs_clear_delalloc_extent() free delalloc reserve
- btrfs: always clear PERTRANS metadata during commit
- memblock tests: fix undefined reference to `early_pfn_to_nid'
- memblock tests: fix undefined reference to `panic'
- memblock tests: fix undefined reference to `BIT'
- nouveau/gsp: Avoid addressing beyond end of rpc->entries
- scsi: target: Fix SELinux error when systemd-modules loads the target module
- scsi: hisi_sas: Handle the NCQ error returned by D2H frame
- blk-iocost: avoid out of bounds shift
- accel/ivpu: Remove d3hot_after_power_off WA
- accel/ivpu: Improve clarity of MMU error messages
- accel/ivpu: Fix missed error message after VPU rename
- platform/x86: acer-wmi: Add support for Acer PH18-71
- gpu: host1x: Do not setup DMA for virtual devices
- MIPS: scall: Save thread_info.syscall unconditionally on entry
- tools/power/turbostat: Fix uncore frequency file string
- net: add copy_safe_from_sockptr() helper
- nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies
- drm/amdgpu: Refine IB schedule error logging
- drm/amd/display: add DCN 351 version for microcode load
- drm/amdgpu: add smu 14.0.1 discovery support
- drm/amdgpu: implement IRQ_STATE_ENABLE for SDMA v4.4.2
- drm/amd/display: Skip on writeback when it's not applicable
- drm/amd/pm: fix the high voltage issue after unload
- drm/amdgpu: Fix VCN allocation in CPX partition
- amd/amdkfd: sync all devices to wait all processes being evicted
- selftests: timers: Fix valid-adjtimex signed left-shift undefined behavior
- Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails
- Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
- hv_netvsc: Don't free decrypted memory
- uio_hv_generic: Don't free decrypted memory
- Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
- drm/xe/xe_migrate: Cast to output precision before multiplying operands
- drm/xe: Label RING_CONTEXT_CONTROL as masked
- smb3: fix broken reconnect when password changing on the server by allowing
password rotation
- iommu: mtk: fix module autoloading
- fs/9p: only translate RWX permissions for plain 9P2000
- fs/9p: translate O_TRUNC into OTRUNC
- fs/9p: fix the cache always being enabled on files with qid flags
- 9p: explicitly deny setlease attempts
- powerpc/crypto/chacha-p10: Fix failure on non Power10
- gpio: wcove: Use -ENOTSUPP consistently
- gpio: crystalcove: Use -ENOTSUPP consistently
- clk: Don't hold prepare_lock when calling kref_put()
- fs/9p: remove erroneous nlink init from legacy stat2inode
- fs/9p: drop inodes immediately on non-.L too
- gpio: lpc32xx: fix module autoloading
- drm/nouveau/dp: Don't probe eDP ports twice harder
- platform/x86/amd: pmf: Decrease error message to debug
- platform/x86: ISST: Add Granite Rapids-D to HPM CPU list
- drm/radeon: silence UBSAN warning (v3)
- net:usb:qmi_wwan: support Rolling modules
- blk-iocost: do not WARN if iocg was already offlined
- SUNRPC: add a missing rpc_stat for TCP TLS
- qibfs: fix dentry leak
- xfrm: Preserve vlan tags for transport mode software GRO
- ARM: 9381/1: kasan: clear stale stack poison
- tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
- tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().
- Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout
- Bluetooth: msft: fix slab-use-after-free in msft_do_close()
- arm64: dts: mediatek: mt8183-pico6: Fix bluetooth node
- Bluetooth: HCI: Fix potential null-ptr-deref
- Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout
- net: ks8851: Queue RX packets in IRQ handler instead of disabling BHs
- rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation
- hwmon: (corsair-cpro) Use a separate buffer for sending commands
- hwmon: (corsair-cpro) Use complete_all() instead of complete() in
ccp_raw_event()
- hwmon: (corsair-cpro) Protect ccp->wait_input_report with a spinlock
- phonet: fix rtm_phonet_notify() skb allocation
- netlink: specs: Add missing bridge linkinfo attrs
- nfc: nci: Fix kcov check in nci_rx_work()
- net: bridge: fix corrupted ethernet header on multicast-to-unicast
- ipv6: Fix potential uninit-value access in __ip6_make_skb()
- selftests: test_bridge_neigh_suppress.sh: Fix failures due to duplicate MAC
- rxrpc: Fix the names of the fields in the ACK trailer struct
- rxrpc: Fix congestion control algorithm
- rxrpc: Only transmit one ACK per jumbo packet received
- dt-bindings: net: mediatek: remove wrongly added clocks and SerDes
- ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action()
- net-sysfs: convert dev->operstate reads to lockless ones
- hsr: Simplify code for announcing HSR nodes timer setup
- ipv6: annotate data-races around cnf.disable_ipv6
- ipv6: prevent NULL dereference in ip6_output()
- net/smc: fix neighbour and rtable leak in smc_ib_find_route()
- net: hns3: using user configure after hardware reset
- net: hns3: direct return when receive a unknown mailbox message
- net: hns3: change type of numa_node_mask as nodemask_t
- net: hns3: release PTP resources if pf initialization failed
- net: hns3: use appropriate barrier function after setting a bit value
- net: hns3: fix port vlan filter not disabled issue
- net: hns3: fix kernel crash when devlink reload during initialization
- net: dsa: mv88e6xxx: add phylink_get_caps for the mv88e6320/21 family
- drm/meson: dw-hdmi: power up phy on device init
- drm/meson: dw-hdmi: add bandgap setting for g12
- drm/connector: Add \n to message about demoting connector force-probes
- dm/amd/pm: Fix problems with reboot/shutdown for some SMU 13.0.4/13.0.11
users
- gpiolib: cdev: Fix use after free in lineinfo_changed_notify
- gpiolib: cdev: fix uninitialised kfifo
- drm/amdgpu: Fix comparison in amdgpu_res_cpu_visible
- drm/amdgpu: once more fix the call oder in amdgpu_ttm_move() v2
- firewire: nosy: ensure user_length is taken into account when fetching
packet contents
- Reapply "drm/qxl: simplify qxl_fence_wait"
- usb: typec: ucsi: Check for notifications after init
- usb: typec: ucsi: Fix connector check on init
- usb: Fix regression caused by invalid ep0 maxpacket in virtual SuperSpeed
device
- usb: ohci: Prevent missed ohci interrupts
- USB: core: Fix access violation during port device removal
- usb: gadget: composite: fix OS descriptors w_value logic
- usb: gadget: uvc: use correct buffer size when parsing configfs lists
- usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
- usb: gadget: f_fs: Fix a race condition when processing setup packets.
- usb: xhci-plat: Don't include xhci.h
- usb: dwc3: core: Prevent phy suspend during init
- usb: typec: tcpm: clear pd_event queue in PORT_RESET
- usb: typec: tcpm: unregister existing source caps before re-registration
- usb: typec: tcpm: Check for port partner validity before consuming it
- ALSA: hda/realtek: Fix mute led of HP Laptop 15-da3001TU
- ALSA: hda/realtek: Fix conflicting PCI SSID 17aa:386f for Lenovo Legion
models
- firewire: ohci: fulfill timestamp for some local asynchronous transaction
- mm/slub: avoid zeroing outside-object freepointer for single free
- btrfs: add missing mutex_unlock in btrfs_relocate_sys_chunks()
- btrfs: set correct ram_bytes when splitting ordered extent
- btrfs: qgroup: do not check qgroup inherit if qgroup is disabled
- btrfs: make sure that WRITTEN is set on all metadata blocks
- maple_tree: fix mas_empty_area_rev() null pointer dereference
- mm/slab: make __free(kfree) accept error pointers
- mptcp: ensure snd_nxt is properly initialized on connect
- mptcp: only allow set existing scheduler for net.mptcp.scheduler
- workqueue: Fix selection of wake_cpu in kick_pool()
- dt-bindings: iio: health: maxim,max30102: fix compatible check
- iio:imu: adis16475: Fix sync mode setting
- iio: pressure: Fixes BME280 SPI driver data
- iio: pressure: Fixes SPI support for BMP3xx devices
- iio: accel: mxc4005: Interrupt handling fixes
- iio: accel: mxc4005: Reset chip on probe() and resume()
- kmsan: compiler_types: declare __no_sanitize_or_inline
- e1000e: change usleep_range to udelay in PHY mdic access
- tipc: fix UAF in error path
- xtensa: fix MAKE_PC_FROM_RA second argument
- net: bcmgenet: synchronize EXT_RGMII_OOB_CTRL access
- net: bcmgenet: synchronize use of bcmgenet_set_rx_mode()
- net: bcmgenet: synchronize UMAC_CMD access
- ASoC: tegra: Fix DSPK 16-bit playback
- ASoC: ti: davinci-mcasp: Fix race condition during probe
- dyndbg: fix old BUG_ON in >control parser
- slimbus: qcom-ngd-ctrl: Add timeout for wait operation
- clk: samsung: Revert "clk: Use device_get_match_data()"
- clk: sunxi-ng: common: Support minimum and maximum rate
- clk: sunxi-ng: a64: Set minimum and maximum rate for PLL-MIPI
- mei: me: add lunar lake point M DID
- drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()
- Revert "drm/nouveau/firmware: Fix SG_DEBUG error with nvkm_firmware_ctor()"
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
- drm/ttm: Print the memory decryption status just once
- drm/vmwgfx: Fix Legacy Display Unit
- drm/vmwgfx: Fix invalid reads in fence signaled events
- drm/imagination: Ensure PVR_MIPS_PT_PAGE_COUNT is never zero
- drm/amd/display: Fix idle optimization checks for multi-display and dual eDP
- drm/nouveau/gsp: Use the sg allocator for level 2 of radix3
- drm/i915/gt: Automate CCS Mode setting during engine resets
- drm/i915/bios: Fix parsing backlight BDB data
- drm/amd/display: Handle Y carry-over in VCP X.Y calculation
- drm/amd/display: Fix incorrect DSC instance for MST
- arm64: dts: qcom: sa8155p-adp: fix SDHC2 CD pin configuration
- iommu/arm-smmu: Use the correct type in nvidia_smmu_context_fault()
- net: fix out-of-bounds access in ops_init
- hwmon: (pmbus/ucd9000) Increase delay from 250 to 500us
- misc/pvpanic-pci: register attributes via pci_driver
- x86/apic: Don't access the APIC when disabling x2APIC
- selftests/mm: fix powerpc ARCH check
- mm: use memalloc_nofs_save() in page_cache_ra_order()
- mm/userfaultfd: reset ptes when close() for wr-protected ones
- iommu/amd: Enhance def_domain_type to handle untrusted device
- fs/proc/task_mmu: fix loss of young/dirty bits during pagemap scan
- fs/proc/task_mmu: fix uffd-wp confusion in pagemap_scan_pmd_entry()
- nvme-pci: Add quirk for broken MSIs
- regulator: core: fix debugfs creation regression
- spi: microchip-core-qspi: fix setting spi bus clock rate
- ksmbd: off ipv6only for both ipv4/ipv6 binding
- ksmbd: avoid to send duplicate lease break notifications
- ksmbd: do not grant v2 lease if parent lease key and epoch are not set
- tracefs: Reset permissions on remount if permissions are options
- tracefs: Still use mount point as default permissions for instances
- eventfs: Do not treat events directory different than other directories
- Bluetooth: qca: fix invalid device address check
- Bluetooth: qca: fix wcn3991 device address check
- Bluetooth: qca: add missing firmware sanity checks
- Bluetooth: qca: fix NVM configuration parsing
- Bluetooth: qca: generalise device address check
- Bluetooth: qca: fix info leak when fetching board id
- Bluetooth: qca: fix info leak when fetching fw build id
- Bluetooth: qca: fix firmware check error path
- keys: Fix overwrite of key expiration on instantiation
- Linux 6.8.10
* Noble update: v6.8.9 upstream stable release (LP: #2070337)
- cifs: Fix reacquisition of volume cookie on still-live connection
- smb: client: fix rename(2) regression against samba
- cifs: reinstate original behavior again for forceuid/forcegid
- HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
- HID: logitech-dj: allow mice to use all types of reports
- arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f
- arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
- arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
- arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
- arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi CM5
- arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
- arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
- arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex
- arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys
- arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex
- arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex1
- arm64: dts: mediatek: cherry: Describe CPU supplies
- arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for
MT6315
- arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for
MT6315
- arm64: dts: mediatek: mt8183-kukui: Use default min voltage for MT6358
- arm64: dts: mediatek: mt7622: fix clock controllers
- arm64: dts: mediatek: mt7622: fix IR nodename
- arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
- arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
- arm64: dts: mediatek: mt7986: reorder properties
- arm64: dts: mediatek: mt7986: drop invalid properties from ethsys
- arm64: dts: mediatek: mt7986: drop "#reset-cells" from Ethernet controller
- arm64: dts: mediatek: mt7986: reorder nodes
- arm64: dts: mediatek: mt7986: drop invalid thermal block clock
- arm64: dts: mediatek: mt7986: prefix BPI-R3 cooling maps with "map-"
- arm64: dts: mediatek: mt2712: fix validation errors
- arm64: dts: rockchip: mark system power controller and fix typo on
orangepi-5-plus
- arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro
- block: fix module reference leakage from bdev_open_by_dev error path
- arm64: dts: qcom: Fix type of "wdog" IRQs for remoteprocs
- arm64: dts: qcom: x1e80100: Fix the compatible for cluster idle states
- arm64: dts: qcom: sc8180x: Fix ss_phy_irq for secondary USB controller
- gpio: tangier: Use correct type for the IRQ chip data
- ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
- wifi: mac80211: clean up assignments to pointer cache.
- wifi: mac80211: split mesh fast tx cache into local/proxied/forwarded
- wifi: iwlwifi: mvm: remove old PASN station when adding a new one
- wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
- drm/gma500: Remove lid code
- wifi: mac80211_hwsim: init peer measurement result
- wifi: mac80211: remove link before AP
- wifi: mac80211: fix unaligned le16 access
- net: libwx: fix alloc msix vectors failed
- vxlan: drop packets from invalid src-address
- net: bcmasp: fix memory leak when bringing down interface
- mlxsw: core: Unregister EMAD trap using FORWARD action
- mlxsw: core_env: Fix driver initialization with old firmware
- mlxsw: pci: Fix driver initialization with old firmware
- ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with
the valid property
- icmp: prevent possible NULL dereferences from icmp_build_probe()
- bridge/br_netlink.c: no need to return void function
- bnxt_en: refactor reset close code
- bnxt_en: Fix the PCI-AER routines
- bnxt_en: Fix error recovery for 5760X (P7) chips
- cxl/core: Fix potential payload size confusion in cxl_mem_get_poison()
- net: dsa: mv88e6xx: fix supported_interfaces setup in
mv88e6250_phylink_get_caps()
- NFC: trf7970a: disable all regulators on removal
- netfs: Fix writethrough-mode error handling
- ax25: Fix netdev refcount issue
- soc: mediatek: mtk-svs: Append "-thermal" to thermal zone names
- tools: ynl: don't ignore errors in NLMSG_DONE messages
- net: usb: ax88179_178a: stop lying about skb->truesize
- tcp: Fix Use-After-Free in tcp_ao_connect_init
- net: gtp: Fix Use-After-Free in gtp_dellink
- net: phy: mediatek-ge-soc: follow netdev LED trigger semantics
- gpio: tegra186: Fix tegra186_gpio_is_accessible() check
- drm/xe: Remove sysfs only once on action add failure
- drm/xe: call free_gsc_pkt only once on action add failure
- Bluetooth: hci_event: Use HCI error defines instead of magic values
- Bluetooth: hci_conn: Only do ACL connections sequentially
- Bluetooth: Remove pending ACL connection attempts
- Bluetooth: hci_conn: Always use sk_timeo as conn_timeout
- Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
- Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
- Bluetooth: hci_sync: Attempt to dequeue connection attempt
- Bluetooth: ISO: Reassemble PA data for bcast sink
- Bluetooth: hci_sync: Use advertised PHYs on hci_le_ext_create_conn_sync
- Bluetooth: btusb: Fix triggering coredump implementation for QCA
- Bluetooth: hci_event: Fix sending HCI_OP_READ_ENC_KEY_SIZE
- Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
- Bluetooth: btusb: mediatek: Fix double free of skb in coredump
- Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
- Bluetooth: qca: set power_ctrl_enabled on NULL returned by
gpiod_get_optional()
- ipvs: Fix checksumming on GSO of SCTP packets
- net: openvswitch: Fix Use-After-Free in ovs_ct_exit
- mlxsw: Use refcount_t for reference counting
- mlxsw: spectrum_acl_tcam: Fix race in region ID allocation
- mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
- mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
- mlxsw: spectrum_acl_tcam: Rate limit error message
- mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
- mlxsw: spectrum_acl_tcam: Fix warning during rehash
- mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
- mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
- eth: bnxt: fix counting packets discarded due to OOM and netpoll
- ARM: dts: imx6ull-tarragon: fix USB over-current polarity
- netfilter: nf_tables: honor table dormant flag from netdev release event
path
- net: phy: dp83869: Fix MII mode failure
- net: ti: icssg-prueth: Fix signedness bug in prueth_init_rx_chns()
- i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
- i40e: Report MFS in decimal base instead of hex
- iavf: Fix TC config comparison with existing adapter TC config
- ice: fix LAG and VF lock dependency in ice_reset_vf()
- net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
- octeontx2-af: fix the double free in rvu_npc_freemem()
- dpll: check that pin is registered in __dpll_pin_unregister()
- dpll: fix dpll_pin_on_pin_register() for multiple parent pins
- tls: fix lockless read of strp->msg_ready in ->poll
- af_unix: Suppress false-positive lockdep splat for spin_lock() in
__unix_gc().
- netfs: Fix the pre-flush when appending to a file in writethrough mode
- drm/amd/display: Check DP Alt mode DPCS state via DMUB
- Revert "drm/amd/display: fix USB-C flag update after enc10 feature init"
- xhci: move event processing for one interrupter to a separate function
- usb: xhci: correct return value in case of STS_HCE
- KVM: x86/pmu: Zero out PMU metadata on AMD if PMU is disabled
- KVM: x86/pmu: Set enable bits for GP counters in PERF_GLOBAL_CTRL at "RESET"
- drm: add drm_gem_object_is_shared_for_memory_stats() helper
- drm/amdgpu: add shared fdinfo stats
- drm/amdgpu: fix visible VRAM handling during faults
- Revert "UBUNTU: SAUCE: selftests/seccomp: fix check of fds being assigned"
- selftests/seccomp: user_notification_addfd check nextfd is available
- selftests/seccomp: Change the syscall used in KILL_THREAD test
- selftests/seccomp: Handle EINVAL on unshare(CLONE_NEWPID)
- x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range
- x86/cpu: Fix check for RDPKRU in __show_regs()
- rust: phy: implement `Send` for `Registration`
- rust: kernel: require `Send` for `Module` implementations
- rust: don't select CONSTRUCTORS
- [Config] updateconfigs to drop CONSTRUCTORS for rust
- rust: init: remove impl Zeroable for Infallible
- rust: make mutually exclusive with CFI_CLANG
- kbuild: rust: remove unneeded `@rustc_cfg` to avoid ICE
- kbuild: rust: force `alloc` extern to allow "empty" Rust files
- rust: remove `params` from `module` macro example
- Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
- Bluetooth: qca: fix NULL-deref on non-serdev suspend
- Bluetooth: qca: fix NULL-deref on non-serdev setup
- mtd: rawnand: qcom: Fix broken OP_RESET_DEVICE command in
qcom_misc_cmd_type_exec()
- mm/hugetlb: fix missing hugetlb_lock for resv uncharge
- mmc: sdhci-msm: pervent access to suspended controller
- mmc: sdhci-of-dwcmshc: th1520: Increase tuning loop count to 128
- mm: create FOLIO_FLAG_FALSE and FOLIO_TYPE_OPS macros
- mm: support page_mapcount() on page_has_type() pages
- mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio()
- smb: client: Fix struct_group() usage in __packed structs
- smb3: missing lock when picking channel
- smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
- btrfs: fallback if compressed IO fails for ENOSPC
- btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
- btrfs: scrub: run relocation repair when/only needed
- btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
- x86/tdx: Preserve shared bit on mprotect()
- cpu: Re-enable CPU mitigations by default for !X86 architectures
- [Config] updateconfigs for CPU_MITIGATIONS
- eeprom: at24: fix memory corruption race condition
- LoongArch: Fix callchain parse error with kernel tracepoint events
- LoongArch: Fix access error when read fault on a write-only VMA
- arm64: dts: qcom: sc8280xp: add missing PCIe minimum OPP
- arm64: dts: qcom: sm8450: Fix the msi-map entries
- arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
- dmaengine: Revert "dmaengine: pl330: issue_pending waits until WFP state"
- dmaengine: xilinx: xdma: Fix wrong offsets in the buffers addresses in dma
descriptor
- dmaengine: xilinx: xdma: Fix synchronization issue
- drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
- drm/amdgpu: Assign correct bits for SDMA HDP flush
- drm/atomic-helper: fix parameter order in drm_format_conv_state_copy() call
- drm/amdgpu/pm: Remove gpu_od if it's an empty directory
- drm/amdgpu/umsch: don't execute umsch test when GPU is in reset/suspend
- drm/amdgpu: Fix leak when GPU memory allocation fails
- drm/amdkfd: Fix rescheduling of restore worker
- drm/amdkfd: Fix eviction fence handling
- irqchip/gic-v3-its: Prevent double free on error
- ACPI: CPPC: Use access_width over bit_width for system memory accesses
- ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
- ACPI: CPPC: Fix access width used for PCC registers
- net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec
- ethernet: Add helper for assigning packet type when dest address does not
match device address
- net: b44: set pause params only when interface is up
- macsec: Enable devices to advertise whether they update sk_buff md_dst
during offloads
- macsec: Detect if Rx skb is macsec-related for offloading devices that
update md_dst
- stackdepot: respect __GFP_NOLOCKDEP allocation flag
- fbdev: fix incorrect address computation in deferred IO
- udp: preserve the connected status if only UDP cmsg
- mtd: limit OTP NVMEM cell parse to non-NAND devices
- mtd: diskonchip: work around ubsan link failure
- firmware: qcom: uefisecapp: Fix memory related IO errors and crashes
- phy: qcom: qmp-combo: Fix register base for QSERDES_DP_PHY_MODE
- phy: qcom: qmp-combo: Fix VCO div offset on v3
- mm: turn folio_test_hugetlb into a PageType
- mm: zswap: fix shrinker NULL crash with cgroup_disable=memory
- dmaengine: owl: fix register access functions
- dmaengine: tegra186: Fix residual calculation
- idma64: Don't try to serve interrupts when device is powered off
- soundwire: amd: fix for wake interrupt handling for clockstop mode
- phy: marvell: a3700-comphy: Fix hardcoded array size
- phy: freescale: imx8m-pcie: fix pcie link-up instability
- phy: rockchip-snps-pcie3: fix bifurcation on rk3588
- phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
- phy: rockchip: naneng-combphy: Fix mux on rk3588
- phy: qcom: m31: match requested regulator name with dt schema
- dmaengine: idxd: Convert spinlock to mutex to lock evl workqueue
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
- riscv: Fix TASK_SIZE on 64-bit NOMMU
- riscv: Fix loading 64-bit NOMMU kernels past the start of RAM
- phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
- dt-bindings: eeprom: at24: Fix ST M24C64-D compatible schema
- sched/eevdf: Always update V if se->on_rq when reweighting
- sched/eevdf: Fix miscalculation in reweight_entity() when se is not curr
- riscv: hwprobe: fix invalid sign extension for RISCV_HWPROBE_EXT_ZVFHMIN
- RISC-V: selftests: cbo: Ensure asm operands match constraints, take 2
- phy: qcom: qmp-combo: fix VCO div offset on v5_5nm and v6
- bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
- Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
- Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
- Linux 6.8.9
* amdgpu hangs on DCN 3.5 at bootup: RIP:
0010:dcn35_clk_mgr_construct+0x183/0x2210 [amdgpu] (LP: #2066233)
- drm/amd/display: Atom Integrated System Info v2_2 for DCN35
* [MTL] ACPI: PM: s2idle: Backport Linux ACPI s2idle patches to fix
suspend/resume issue (LP: #2069231)
- ACPI: PM: s2idle: Enable Low-Power S0 Idle MSFT UUID for non-AMD systems
- ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions
* Removing legacy virtio-pci devices causes kernel panic (LP: #2067862)
- virtio-pci: Check if is_avq is NULL
* Mute/mic LEDs no function on ProBook 445/465 G11 (LP: #2069664)
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11.
* Mute/mic LEDs no function on ProBook 440/460 G11 (LP: #2067669)
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 440/460 G11.
* rtw89_8852ce - Lost WIFI connection after suspend (LP: #2065128)
- wifi: rtw89: reset AFEDIG register in power off sequence
- wifi: rtw89: 8852c: refine power sequence to imporve power consumption
* CVE-2024-25742
- x86/sev: Harden #VC instruction emulation somewhat
- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
* Noble update: v6.8.9 upstream stable release (LP: #2070337) //
CVE-2024-35984
- i2c: smbus: fix NULL function pointer dereference
* Noble update: v6.8.9 upstream stable release (LP: #2070337) //
CVE-2024-35990
- dma: xilinx_dpdma: Fix locking
* Noble update: v6.8.9 upstream stable release (LP: #2070337) //
CVE-2024-35997
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
* CVE-2024-36016
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
* CVE-2024-36008
- ipv4: check for NULL idev in ip_route_use_hint()
* CVE-2024-35992
- phy: marvell: a3700-comphy: Fix out of bounds read
[ Ubuntu-azure: 6.8.0-1011.11 ]
* noble/linux-azure: 6.8.0-1011.11 -proposed tracker (LP: #2071956)
* net: mana: Add support for page sizes other than 4KB on ARM64 (LP: #2070402)
- net: mana: Add support for page sizes other than 4KB on ARM64
* Request to enable VDPA kernel config (LP: #2069362)
- [Config] azure: Enabling VDPA kernel config options
[ Ubuntu: 6.8.0-39.39 ]
* noble/linux: 6.8.0-39.39 -proposed tracker (LP: #2071983)
* CVE-2024-25742
- x86/sev: Harden #VC instruction emulation somewhat
- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler
* Noble update: v6.8.9 upstream stable release (LP: #2070337) //
CVE-2024-35984
- i2c: smbus: fix NULL function pointer dereference
* Noble update: v6.8.9 upstream stable release (LP: #2070337) //
CVE-2024-35990
- dma: xilinx_dpdma: Fix locking
* Noble update: v6.8.9 upstream stable release (LP: #2070337) //
CVE-2024-35997
- HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
* CVE-2024-36016
- tty: n_gsm: fix possible out-of-bounds in gsm0_receive()
* CVE-2024-36008
- ipv4: check for NULL idev in ip_route_use_hint()
* CVE-2024-35992
- phy: marvell: a3700-comphy: Fix out of bounds read
[ Ubuntu-azure: 6.8.0-1010.10 ]
* noble/linux-azure: 6.8.0-1010.10 -proposed tracker (LP: #2068298)
* Kernel fails to enable XSAVE when running in a “v5” AMD SEV-SNP VM
(LP: #2069204)
- SAUCE: x86/hyperv: temporarily disable CET SS on SEV-SNP due to a paravisor
bug
[ Ubuntu: 6.8.0-38.38 ]
* noble/linux: 6.8.0-38.38 -proposed tracker (LP: #2068318)
* race_sched in ubuntu_stress_smoke_test will cause kernel panic on 6.8 with
Azure Standard_A2_v2 instance (LP: #2068024)
- sched/eevdf: Prevent vlag from going out of bounds in reweight_eevdf()
* Noble: btrfs: re-introduce 'norecovery' mount option (LP: #2068591)
- btrfs: re-introduce 'norecovery' mount option
* Fix system hang while entering suspend with AMD Navi3x graphics
(LP: #2063417)
- drm/amdgpu/mes: fix use-after-free issue
* Noble update: v6.8.8 upstream stable release (LP: #2068087)
- io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64()
failure
- drm/i915/cdclk: Fix voltage_level programming edge case
- Revert "vmgenid: emit uevent when VMGENID updates"
- SUNRPC: Fix rpcgss_context trace event acceptor field
- selftests/ftrace: Limit length in subsystem-enable tests
- random: handle creditable entropy from atomic process context
- scsi: core: Fix handling of SCMD_FAIL_IF_RECOVERING
- net: usb: ax88179_178a: avoid writing the mac address before first reading
- btrfs: do not wait for short bulk allocation
- btrfs: zoned: do not flag ZEROOUT on non-dirty extent buffer
- r8169: fix LED-related deadlock on module removal
- r8169: add missing conditional compiling for call to r8169_remove_leds
- scsi: ufs: qcom: Add missing interconnect bandwidth values for Gear 5
- netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
- netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
- netfilter: br_netfilter: skip conntrack input hook for promisc packets
- netfilter: nft_set_pipapo: constify lookup fn args where possible
- netfilter: nft_set_pipapo: walk over current view on netlink dump
- netfilter: flowtable: validate pppoe header
- netfilter: flowtable: incorrect pppoe tuple
- af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
- af_unix: Don't peek OOB data without MSG_OOB.
- net: sparx5: flower: fix fragment flags handling
- net/mlx5: Lag, restore buckets number to default after hash LAG deactivation
- net/mlx5: Restore mistakenly dropped parts in register devlink flow
- net/mlx5e: Prevent deadlock while disabling aRFS
- net: change maximum number of UDP segments to 128
- octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation
- selftests/tcp_ao: Make RST tests less flaky
- selftests/tcp_ao: Zero-init tcp_ao_info_opt
- selftests/tcp_ao: Fix fscanf() call for format-security
- selftests/tcp_ao: Printing fixes to confirm with format-security
- net: stmmac: Apply half-duplex-less constraint for DW QoS Eth only
- net: stmmac: Fix max-speed being ignored on queue re-init
- net: stmmac: Fix IP-cores specific MAC capabilities
- ice: tc: check src_vsi in case of traffic from VF
- ice: tc: allow zero flags in parsing tc flower
- ice: Fix checking for unsupported keys on non-tunnel device
- tun: limit printing rate when illegal packet received by tun dev
- net: dsa: mt7530: fix mirroring frames received on local port
- net: dsa: mt7530: fix port mirroring for MT7988 SoC switch
- s390/ism: Properly fix receive message buffer allocation
- netfilter: nf_tables: missing iterator type in lookup walk
- netfilter: nf_tables: restore set elements when delete set fails
- gpiolib: swnode: Remove wrong header inclusion
- netfilter: nf_tables: fix memleak in map from abort path
- net/sched: Fix mirred deadlock on device recursion
- net: ethernet: mtk_eth_soc: fix WED + wifi reset
- ravb: Group descriptor types used in Rx ring
- net: ravb: Count packets instead of descriptors in R-Car RX path
- net: ravb: Allow RX loop to move past DMA mapping errors
- net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
- NFSD: fix endianness issue in nfsd4_encode_fattr4
- RDMA/rxe: Fix the problem "mutex_destroy missing"
- RDMA/cm: Print the old state when cm_destroy_id gets timeout
- RDMA/mlx5: Fix port number for counter query in multi-port configuration
- perf annotate: Make sure to call symbol__annotate2() in TUI
- perf lock contention: Add a missing NULL check
- s390/qdio: handle deferred cc1
- s390/cio: fix race condition during online processing
- iommufd: Add missing IOMMUFD_DRIVER kconfig for the selftest
- iommufd: Add config needed for iommufd_fail_nth
- drm: nv04: Fix out of bounds access
- drm/v3d: Don't increment `enabled_ns` twice
- userfaultfd: change src_folio after ensuring it's unpinned in UFFDIO_MOVE
- thunderbolt: Introduce tb_port_reset()
- thunderbolt: Introduce tb_path_deactivate_hop()
- thunderbolt: Make tb_switch_reset() support Thunderbolt 2, 3 and USB4
routers
- thunderbolt: Reset topology created by the boot firmware
- drm/panel: visionox-rm69299: don't unregister DSI device
- drm/radeon: make -fstrict-flex-arrays=3 happy
- ALSA: hda/realtek: Fix volumn control of ThinkBook 16P Gen4
- thermal/debugfs: Add missing count increment to thermal_debug_tz_trip_up()
- platform/x86/amd/pmc: Extend Framework 13 quirk to more BIOSes
- interconnect: qcom: x1e80100: Remove inexistent ACV_PERF BCM
- interconnect: Don't access req_list while it's being manipulated
- clk: Remove prepare_lock hold assertion in __clk_release()
- clk: Initialize struct clk_core kref earlier
- clk: Get runtime PM before walking tree during disable_unused
- clk: Get runtime PM before walking tree for clk_summary
- clk: mediatek: Do a runtime PM get on controllers during probe
- clk: mediatek: mt7988-infracfg: fix clocks for 2nd PCIe port
- selftests/powerpc/papr-vpd: Fix missing variable initialization
- x86/bugs: Fix BHI retpoline check
- x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
- block: propagate partition scanning errors to the BLKRRPART ioctl
- net/mlx5: E-switch, store eswitch pointer before registering devlink_param
- ALSA: seq: ump: Fix conversion from MIDI2 to MIDI1 UMP messages
- ALSA: hda/tas2781: correct the register for pow calibrated data
- ALSA: hda/realtek: Add quirks for Huawei Matebook D14 NBLB-WAX9N
- ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
- usb: misc: onboard_usb_hub: Disable the USB hub clock on failure
- misc: rtsx: Fix rts5264 driver status incorrect when card removed
- thunderbolt: Avoid notify PM core about runtime PM resume
- thunderbolt: Fix wake configurations after device unplug
- thunderbolt: Do not create DisplayPort tunnels on adapters of the same
router
- comedi: vmk80xx: fix incomplete endpoint checking
- serial: mxs-auart: add spinlock around changing cts state
- serial/pmac_zilog: Remove flawed mitigation for rx irq flood
- serial: 8250_dw: Revert: Do not reclock if already at correct rate
- serial: stm32: Return IRQ_NONE in the ISR if no handling happend
- serial: stm32: Reset .throttled state in .startup()
- serial: core: Fix regression when runtime PM is not enabled
- serial: core: Clearing the circular buffer before NULLifying it
- serial: core: Fix missing shutdown and startup for serial base port
- USB: serial: option: add Fibocom FM135-GL variants
- USB: serial: option: add support for Fibocom FM650/FG650
- USB: serial: option: add Lonsung U8300/U9300 product
- USB: serial: option: support Quectel EM060K sub-models
- USB: serial: option: add Rolling RW101-GL and RW135-GL support
- USB: serial: option: add Telit FN920C04 rmnet compositions
- Revert "usb: cdc-wdm: close race between read and workqueue"
- usb: dwc2: host: Fix dereference issue in DDMA completion flow.
- usb: Disable USB3 LPM at shutdown
- usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport
error
- usb: typec: tcpm: Correct the PDO counting in pd_set
- mei: me: disable RPL-S on SPS and IGN firmwares
- speakup: Avoid crash on very long word
- fs: sysfs: Fix reference leak in sysfs_break_active_protection()
- sched: Add missing memory barrier in switch_mm_cid
- KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
- KVM: x86/pmu: Disable support for adaptive PEBS
- KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
- KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes
- KVM: x86/mmu: Write-protect L2 SPTEs in TDP MMU when clearing dirty status
- arm64/head: Disable MMU at EL2 before clearing HCR_EL2.E2H
- arm64: hibernate: Fix level3 translation fault in swsusp_save()
- init/main.c: Fix potential static_command_line memory overflow
- mm/madvise: make MADV_POPULATE_(READ|WRITE) handle VM_FAULT_RETRY properly
- mm/userfaultfd: allow hugetlb change protection upon poison entry
- mm,swapops: update check in is_pfn_swap_entry for hwpoison entries
- mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
- mm/shmem: inline shmem_is_huge() for disabled transparent hugepages
- fuse: fix leaked ENOSYS error on first statx call
- drm/amdkfd: Fix memory leak in create_process failure
- drm/amdgpu: remove invalid resource->start check v2
- drm/ttm: stop pooling cached NUMA pages v2
- drm/xe: Fix bo leak in intel_fb_bo_framebuffer_init
- drm/vmwgfx: Fix prime import/export
- drm/vmwgfx: Sort primary plane formats by order of preference
- drm/vmwgfx: Fix crtc's atomic check conditional
- nouveau: fix instmem race condition around ptr stores
- bootconfig: use memblock_free_late to free xbc memory to buddy
- Squashfs: check the inode number is not the invalid value of zero
- nilfs2: fix OOB in nilfs_set_de_type
- fork: defer linking file vma until vma is fully initialized
- net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
- net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
- ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
- ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
- ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
- ksmbd: common: use struct_group_attr instead of struct_group for
network_open_info
- thunderbolt: Reset only non-USB4 host routers in resume
- Linux 6.8.8
* Fix inaudible HDMI/DP audio on USB-C MST dock (LP: #2064689)
- drm/i915/audio: Fix audio time stamp programming for DP
* Add Cirrus Logic CS35L56 amplifier support (LP: #2062135)
- ALSA: hda: realtek: Re-work CS35L41 fixups to re-use for other amps
- ALSA: hda/realtek: Add quirks for HP G11 Laptops using CS35L56
* net:fib_rule_tests.sh in ubuntu_kselftests_net fails on Noble (LP: #2066332)
- Revert "UBUNTU: SAUCE: selftests: net: fix "from" match test in
fib_rule_tests.sh"
* mtk_t7xx WWAN module fails to probe with: Invalid device status 0x1
(LP: #2049358)
- Revert "UBUNTU: SAUCE: net: wwan: t7xx: PCIe reset rescan"
- Revert "UBUNTU: SAUCE: net: wwan: t7xx: Add AP CLDMA"
- net: wwan: t7xx: Add AP CLDMA
- wwan: core: Add WWAN fastboot port type
- net: wwan: t7xx: Add sysfs attribute for device state machine
- net: wwan: t7xx: Infrastructure for early port configuration
- net: wwan: t7xx: Add fastboot WWAN port
* Pull-request to address TPM bypass issue (LP: #2037688)
- [Config]: Configure TPM drivers as builtins for arm64 in annotations
* re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
- SAUCE: fan: add VXLAN implementation
- SAUCE: fan: Fix NULL pointer dereference
- SAUCE: fan: support vxlan strict length validation
* update for V3 kernel bits and improved multiple fan slice support
(LP: #1470091) // re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
- SAUCE: fan: tunnel multiple mapping mode (v3)
* TCP memory leak, slow network (arm64) (LP: #2045560)
- net: make SK_MEMORY_PCPU_RESERV tunable
- net: fix sk_memory_allocated_{add|sub} vs softirqs
* panel flickering after the i915.psr2 is enabled (LP: #2046315)
- drm/i915/alpm: Add ALPM register definitions
- drm/i915/psr: Add alpm_parameters struct
- drm/i915/alpm: Calculate ALPM Entry check
- drm/i915/alpm: Alpm aux wake configuration for lnl
- drm/i915/display: Make intel_dp_aux_fw_sync_len available for PSR code
- drm/i915/psr: Improve fast and IO wake lines calculation
- drm/i915/psr: Calculate IO wake and fast wake lines for DISPLAY_VER < 12
- drm/i915/display: Increase number of fast wake precharge pulses
* I2C HID device sometimes fails to initialize causing touchpad to not work
(LP: #2061040)
- HID: i2c-hid: Revert to await reset ACK before reading report descriptor
* Fix the RTL8852CE BT FW Crash based on SER false alarm (LP: #2060904)
- wifi: rtw89: disable txptctrl IMR to avoid flase alarm
- wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of
firmware command
* [X13s] Fingerprint reader is not working (LP: #2065376)
- SAUCE: arm64: dts: qcom: sc8280xp: Add USB DWC3 Multiport controller
- SAUCE: arm64: dts: qcom: sc8280xp-x13s: enable USB MP and fingerprint reader
* Fix random HuC/GuC initialization failure of Intel i915 driver
(LP: #2061049)
- drm/i915/huc: Allow for very slow HuC loading
* Add support of TAS2781 amp of audio (LP: #2064064)
- ALSA: hda/tas2781: Add new vendor_id and subsystem_id to support ThinkPad
ICE-1
* Noble update: v6.8.7 upstream stable release (LP: #2065912)
- smb3: fix Open files on server counter going negative
- ata: libata-core: Allow command duration limits detection for ACS-4 drives
- ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
- drm/amdgpu/vpe: power on vpe when hw_init
- batman-adv: Avoid infinite loop trying to resize local TT
- ceph: redirty page before returning AOP_WRITEPAGE_ACTIVATE
- ceph: switch to use cap_delay_lock for the unlink delay list
- virtio_net: Do not send RSS key if it is not supported
- arm64: tlb: Fix TLBI RANGE operand
- ARM: dts: imx7s-warp: Pass OV2680 link-frequencies
- raid1: fix use-after-free for original bio in raid1_write_request()
- ring-buffer: Only update pages_touched when a new page is touched
- Bluetooth: Fix memory leak in hci_req_sync_complete()
- drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
- platform/chrome: cros_ec_uart: properly fix race condition
- ACPI: scan: Do not increase dep_unmet for already met dependencies
- PM: s2idle: Make sure CPUs will wakeup directly on resume
- media: cec: core: remove length check of Timer Status
- btrfs: tests: allocate dummy fs_info and root in test_find_delalloc()
- ARM: OMAP2+: fix bogus MMC GPIO labels on Nokia N8x0
- ARM: OMAP2+: fix N810 MMC gpiod table
- mmc: omap: fix broken slot switch lookup
- mmc: omap: fix deferred probe
- mmc: omap: restore original power up/down steps
- ARM: OMAP2+: fix USB regression on Nokia N8x0
- firmware: arm_ffa: Fix the partition ID check in ffa_notification_info_get()
- firmware: arm_scmi: Make raw debugfs entries non-seekable
- cxl/mem: Fix for the index of Clear Event Record Handle
- cxl/core/regs: Fix usage of map->reg_type in cxl_decode_regblock() before
assigned
- arm64: dts: freescale: imx8mp-venice-gw72xx-2x: fix USB vbus regulator
- arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix USB vbus regulator
- drm/msm: Add newlines to some debug prints
- drm/msm/dpu: don't allow overriding data from catalog
- drm/msm/dpu: make error messages at dpu_core_irq_register_callback() more
sensible
- dt-bindings: display/msm: sm8150-mdss: add DP node
- arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
- cxl/core: Fix initialization of mbox_cmd.size_out in get event
- Revert "drm/qxl: simplify qxl_fence_wait"
- nouveau: fix function cast warning
- drm/msm/adreno: Set highest_bank_bit for A619
- scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
- scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
- net: openvswitch: fix unwanted error log on timeout policy probing
- u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
- xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
- octeontx2-pf: Fix transmit scheduler resource leak
- block: fix q->blkg_list corruption during disk rebind
- lib: checksum: hide unused expected_csum_ipv6_magic[]
- geneve: fix header validation in geneve[6]_xmit_skb
- s390/ism: fix receive message buffer allocation
- bnxt_en: Fix possible memory leak in bnxt_rdma_aux_device_init()
- bnxt_en: Fix error recovery for RoCE ulp client
- bnxt_en: Reset PTP tx_avail after possible firmware reset
- ACPI: bus: allow _UID matching for integer zero
- base/node / ACPI: Enumerate node access class for 'struct access_coordinate'
- ACPI: HMAT: Introduce 2 levels of generic port access class
- ACPI: HMAT / cxl: Add retrieval of generic port coordinates for both access
classes
- cxl: Split out combine_coordinates() for common shared usage
- cxl: Split out host bridge access coordinates
- cxl: Remove checking of iter in cxl_endpoint_get_perf_coordinates()
- cxl: Fix retrieving of access_coordinates in PCIe path
- net: ks8851: Inline ks8851_rx_skb()
- net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
- af_unix: Clear stale u->oob_skb.
- octeontx2-af: Fix NIX SQ mode and BP config
- ipv6: fib: hide unused 'pn' variable
- ipv4/route: avoid unused-but-set-variable warning
- ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
- pds_core: use pci_reset_function for health reset
- pds_core: Fix pdsc_check_pci_health function to use work thread
- Bluetooth: ISO: Align broadcast sync_timeout with connection timeout
- Bluetooth: ISO: Don't reject BT_ISO_QOS if parameters are unset
- Bluetooth: hci_sync: Use QoS to determine which PHY to scan
- Bluetooth: hci_sync: Fix using the same interval and window for Coded PHY
- Bluetooth: SCO: Fix not validating setsockopt user input
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- Bluetooth: ISO: Fix not validating setsockopt user input
- Bluetooth: hci_sock: Fix not validating setsockopt user input
- Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit
- netfilter: complete validation of user input
- net/mlx5: SF, Stop waiting for FW as teardown was called
- net/mlx5: Register devlink first under devlink lock
- net/mlx5: offset comp irq index in name by one
- net/mlx5: Properly link new fs rules into the tree
- net/mlx5: Correctly compare pkt reformat ids
- net/mlx5e: RSS, Block changing channels number when RXFH is configured
- net/mlx5e: Fix mlx5e_priv_init() cleanup flow
- net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
- net/mlx5e: Do not produce metadata freelist entries in Tx port ts WQE xmit
- net: sparx5: fix wrong config being used when reconfiguring PCS
- Revert "s390/ism: fix receive message buffer allocation"
- net: dsa: mt7530: trap link-local frames regardless of ST Port State
- af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
- af_unix: Fix garbage collector racing against connect()
- net: ena: Fix potential sign extension issue
- net: ena: Wrong missing IO completions check order
- net: ena: Fix incorrect descriptor free behavior
- net: ena: Set tx_info->xdpf value to NULL
- drm/xe/display: Fix double mutex initialization
- drm/xe/hwmon: Cast result to output precision on left shift of operand
- tracing: hide unused ftrace_event_id_fops
- iommu/vt-d: Fix wrong use of pasid config
- iommu/vt-d: Allocate local memory for page request queue
- iommu/vt-d: Fix WARN_ON in iommu probe path
- io_uring: refactor DEFER_TASKRUN multishot checks
- io_uring: disable io-wq execution of multishot NOWAIT requests
- btrfs: qgroup: correctly model root qgroup rsv in convert
- btrfs: qgroup: fix qgroup prealloc rsv leak in subvolume operations
- btrfs: record delayed inode root in transaction
- btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
- io_uring/net: restore msg_control on sendzc retry
- kprobes: Fix possible use-after-free issue on kprobe registration
- fs/proc: remove redundant comments from /proc/bootconfig
- fs/proc: Skip bootloader comment if no embedded kernel parameters
- scsi: sg: Avoid sg device teardown race
- scsi: sg: Avoid race in error handling & drop bogus warn
- accel/ivpu: Check return code of ipc->lock init
- accel/ivpu: Fix PCI D0 state entry in resume
- accel/ivpu: Put NPU back to D3hot after failed resume
- accel/ivpu: Return max freq for DRM_IVPU_PARAM_CORE_CLOCK_RATE
- accel/ivpu: Fix deadlock in context_xa
- drm/vmwgfx: Enable DMA mappings with SEV
- drm/i915/vrr: Disable VRR when using bigjoiner
- drm/amdkfd: Reset GPU on queue preemption failure
- drm/ast: Fix soft lockup
- drm/panfrost: Fix the error path in panfrost_mmu_map_fault_addr()
- drm/client: Fully protect modes[] with dev->mode_config.mutex
- drm/msm/dp: fix runtime PM leak on disconnect
- drm/msm/dp: fix runtime PM leak on connect failure
- drm/amdgpu/umsch: reinitialize write pointer in hw init
- arm64: dts: imx8qm-ss-dma: fix can lpcg indices
- arm64: dts: imx8-ss-dma: fix can lpcg indices
- arm64: dts: imx8-ss-dma: fix adc lpcg indices
- arm64: dts: imx8-ss-conn: fix usb lpcg indices
- arm64: dts: imx8-ss-dma: fix pwm lpcg indices
- arm64: dts: imx8-ss-lsio: fix pwm lpcg indices
- arm64: dts: imx8-ss-dma: fix spi lpcg indices
- vhost: Add smp_rmb() in vhost_vq_avail_empty()
- vhost: Add smp_rmb() in vhost_enable_notify()
- perf/x86: Fix out of range data
- x86/cpu: Actually turn off mitigations by default for
SPECULATION_MITIGATIONS=n
- selftests/timers/posix_timers: Reimplement check_timer_distribution()
- selftests: timers: Fix posix_timers ksft_print_msg() warning
- selftests: timers: Fix abs() warning in posix_timers test
- selftests: kselftest: Mark functions that unconditionally call exit() as
__noreturn
- x86/apic: Force native_apic_mem_read() to use the MOV instruction
- irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
- selftests: kselftest: Fix build failure with NOLIBC
- kernfs: annotate different lockdep class for of->mutex of writable files
- x86/bugs: Fix return type of spectre_bhi_state()
- x86/bugs: Fix BHI documentation
- x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
- x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
- x86/bugs: Fix BHI handling of RRSBA
- x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
- [Config] updateconfigs to remove obsolete SPECTRE_BHI_AUTO
- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with
CONFIG_MITIGATION_SPECTRE_BHI
- [Config] updateconfigs to enable new MITIGATION_SPECTRE_BHI
- drm/i915/cdclk: Fix CDCLK programming order when pipes are active
- drm/i915/psr: Disable PSR when bigjoiner is used
- drm/i915: Disable port sync when bigjoiner is used
- drm/i915: Disable live M/N updates when using bigjoiner
- drm/amdgpu: Reset dGPU if suspend got aborted
- drm/amdgpu: always force full reset for SOC21
- drm/amdgpu: fix incorrect number of active RBs for gfx11
- drm/amdgpu: differentiate external rev id for gfx 11.5.0
- drm/amd/display: Program VSC SDP colorimetry for all DP sinks >= 1.4
- drm/amd/display: Set VSC SDP Colorimetry same way for MST and SST
- drm/amd/display: Do not recursively call manual trigger programming
- drm/amd/display: Return max resolution supported by DWB
- drm/amd/display: always reset ODM mode in context when adding first plane
- drm/amd/display: fix disable otg wa logic in DCN316
- Linux 6.8.7
* Noble update: v6.8.6 upstream stable release (LP: #2065899)
- amdkfd: use calloc instead of kzalloc to avoid integer overflow
- wifi: ath9k: fix LNA selection in ath_ant_try_scan()
- wifi: rtw89: fix null pointer access when abort scan
- bnx2x: Fix firmware version string character counts
- net: stmmac: dwmac-starfive: Add support for JH7100 SoC
- net: phy: phy_device: Prevent nullptr exceptions on ISR
- wifi: rtw89: pci: validate RX tag for RXQ and RPQ
- wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
- VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
- wifi: iwlwifi: pcie: Add the PCI device id for new hardware
- arm64: dts: qcom: qcm6490-idp: Add definition for three LEDs
- net: dsa: qca8k: put MDIO controller OF node if unavailable
- arm64: dts: qcom: qrb2210-rb1: disable cluster power domains
- printk: For @suppress_panic_printk check for other CPU in panic
- panic: Flush kernel log buffer at the end
- dump_stack: Do not get cpu_sync for panic CPU
- wifi: iwlwifi: pcie: Add new PCI device id and CNVI
- cpuidle: Avoid potential overflow in integer multiplication
- ARM: dts: rockchip: fix rk3288 hdmi ports node
- ARM: dts: rockchip: fix rk322x hdmi ports node
- arm64: dts: rockchip: fix rk3328 hdmi ports node
- arm64: dts: rockchip: fix rk3399 hdmi ports node
- net: add netdev_lockdep_set_classes() to virtual drivers
- arm64: dts: qcom: qcs6490-rb3gen2: Declare GCC clocks protected
- pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
- pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain
- ACPI: resource: Add IRQ override quirk for ASUS ExpertBook B2502FBA
- ionic: set adminq irq affinity
- net: skbuff: add overflow debug check to pull/push helpers
- firmware: tegra: bpmp: Return directly after a failed kzalloc() in
get_filename()
- wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
- wifi: mt76: mt7915: add locking for accessing mapped registers
- wifi: mt76: mt7996: disable AMSDU for non-data frames
- wifi: mt76: mt7996: add locking for accessing mapped registers
- ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of
CONFIG_X86_ANDROID_TABLETS
- ACPI: x86: Add DELL0501 handling to acpi_quirk_skip_serdev_enumeration()
- pstore/zone: Add a null pointer check to the psz_kmsg_read
- tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
- net: pcs: xpcs: Return EINVAL in the internal methods
- dma-direct: Leak pages on dma_set_decrypted() failure
- wifi: ath11k: decrease MHI channel buffer length to 8KB
- iommu/arm-smmu-v3: Hold arm_smmu_asid_lock during all of attach_dev
- cpufreq: Don't unregister cpufreq cooling on CPU hotplug
- overflow: Allow non-type arg to type_max() and type_min()
- wifi: iwlwifi: Add missing MODULE_FIRMWARE() for *.pnvm
- wifi: cfg80211: check A-MSDU format more carefully
- btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
- btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
- btrfs: send: handle path ref underflow in header iterate_inode_ref()
- ice: use relative VSI index for VFs instead of PF VSI number
- net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
- netdev: let netlink core handle -EMSGSIZE errors
- Bluetooth: btintel: Fix null ptr deref in btintel_read_version
- Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
- Bluetooth: Add new quirk for broken read key length on ATS2851
- drm/vc4: don't check if plane->state->fb == state->fb
- drm/ci: uprev mesa version: fix kdl commit fetch
- drm/amdgpu: Skip do PCI error slot reset during RAS recovery
- Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
- drm: panel-orientation-quirks: Add quirk for GPD Win Mini
- ASoC: SOF: amd: Optimize quirk for Valve Galileo
- drm/ttm: return ENOSPC from ttm_bo_mem_space v3
- scsi: ufs: qcom: Avoid re-init quirk when gears match
- drm/amd/display: increased min_dcfclk_mhz and min_fclk_mhz
- pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
- sysv: don't call sb_bread() with pointers_lock held
- scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
- drm/amd/display: Disable idle reallow as part of command/gpint execution
- isofs: handle CDs with bad root inode but good Joliet root directory
- ASoC: Intel: sof_rt5682: dmi quirk cleanup for mtl boards
- ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710)
laptops
- rcu/nocb: Fix WARN_ON_ONCE() in the rcu_nocb_bypass_lock()
- rcu-tasks: Repair RCU Tasks Trace quiescence check
- Julia Lawall reported this null pointer dereference, this should fix it.
- media: sta2x11: fix irq handler cast
- ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block
counter
- drm/panel: simple: Add BOE BP082WX1-100 8.2" panel
- x86/vdso: Fix rethunk patching for vdso-image-{32,64}.o
- ASoC: Intel: avs: Populate board selection with new I2S entries
- ext4: add a hint for block bitmap corrupt state in mb_groups
- ext4: forbid commit inconsistent quota data when errors=remount-ro
- drm/amd/display: Fix nanosec stat overflow
- accel/habanalabs: increase HL_MAX_STR to 64 bytes to avoid warnings
- i2c: designware: Fix RX FIFO depth define on Wangxun 10Gb NIC
- HID: input: avoid polling stylus battery on Chromebook Pompom
- drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()
- drm: Check output polling initialized before disabling
- drm: Check polling initialized before enabling in
drm_helper_probe_single_connector_modes
- SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned
int
- PCI: Disable D3cold on Asus B1400 PCI-NVMe bridge
- Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
- libperf evlist: Avoid out-of-bounds access
- crypto: iaa - Fix async_disable descriptor leak
- input/touchscreen: imagis: Correct the maximum touch area value
- drivers/perf: hisi: Enable HiSilicon Erratum 162700402 quirk for HIP09
- block: prevent division by zero in blk_rq_stat_sum()
- RDMA/cm: add timeout to cm_destroy_id wait
- Input: imagis - use FIELD_GET where applicable
- Input: allocate keycode for Display refresh rate toggle
- platform/x86: acer-wmi: Add support for Acer PH16-71
- platform/x86: acer-wmi: Add predator_v4 module parameter
- platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi
Vi8 tablet
- perf/x86/amd/lbr: Discard erroneous branch entries
- ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
- ktest: force $buildonly = 1 for 'make_warnings_file' test type
- Input: xpad - add support for Snakebyte GAMEPADs
- ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent
environment
- tools: iio: replace seekdir() in iio_generic_buffer
- bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
- kernfs: RCU protect kernfs_nodes and avoid kernfs_idr_lock in
kernfs_find_and_get_node_by_id()
- usb: typec: ucsi: Add qcm6490-pmic-glink as needing PDOS quirk
- thunderbolt: Calculate DisplayPort tunnel bandwidth after DPRX capabilities
read
- usb: gadget: uvc: refactor the check for a valid buffer in the pump worker
- usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
- usb: typec: ucsi: Limit read size on v1.2
- serial: 8250_of: Drop quirk fot NPCM from 8250_port
- thunderbolt: Keep the domain powered when USB4 port is in redrive mode
- usb: typec: tcpci: add generic tcpci fallback compatible
- usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
- ASoC: amd: yc: Fix non-functional mic on ASUS M7600RE
- thermal/of: Assume polling-delay(-passive) 0 when absent
- ASoC: soc-core.c: Skip dummy codec when adding platforms
- x86/xen: attempt to inflate the memory balloon on PVH
- fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
- io_uring: clear opcode specific data for an early failure
- modpost: fix null pointer dereference
- drivers/nvme: Add quirks for device 126f:2262
- fbmon: prevent division by zero in fb_videomode_from_videomode()
- ALSA: hda/realtek: Add quirks for some Clevo laptops
- drm/amdgpu: Init zone device and drm client after mode-1 reset on reload
- gcc-plugins/stackleak: Avoid .head.text section
- media: mediatek: vcodec: Fix oops when HEVC init fails
- media: mediatek: vcodec: adding lock to protect decoder context list
- media: mediatek: vcodec: adding lock to protect encoder context list
- randomize_kstack: Improve entropy diffusion
- platform/x86/intel/hid: Don't wake on 5-button releases
- platform/x86: intel-vbtn: Update tablet mode switch at end of probe
- nouveau: fix devinit paths to only handle display on GSP.
- Bluetooth: btintel: Fixe build regression
- net: mpls: error out if inner headers are not set
- VMCI: Fix possible memcpy() run-time warning in
vmci_datagram_invoke_guest_handler()
- x86/vdso: Fix rethunk patching for vdso-image-x32.o too
- Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in
amdgpu_device_init()"
- Linux 6.8.6
* Noble update: v6.8.5 upstream stable release (LP: #2065400)
- scripts/bpf_doc: Use silent mode when exec make cmd
- xsk: Don't assume metadata is always requested in TX completion
- s390/bpf: Fix bpf_plt pointer arithmetic
- bpf, arm64: fix bug in BPF_LDX_MEMSX
- dma-buf: Fix NULL pointer dereference in sanitycheck()
- arm64: bpf: fix 32bit unconditional bswap
- nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
- nfsd: Fix error cleanup path in nfsd_rename()
- tools: ynl: fix setting presence bits in simple nests
- mlxbf_gige: stop PHY during open() error paths
- wifi: iwlwifi: mvm: pick the version of SESSION_PROTECTION_NOTIF
- wifi: iwlwifi: mvm: rfi: fix potential response leaks
- wifi: iwlwifi: mvm: include link ID when releasing frames
- ALSA: hda: cs35l56: Set the init_done flag before component_add()
- ice: Refactor FW data type and fix bitmap casting issue
- ice: fix memory corruption bug with suspend and rebuild
- ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
- igc: Remove stale comment about Tx timestamping
- drm/xe: Remove unused xe_bo->props struct
- drm/xe: Add exec_queue.sched_props.job_timeout_ms
- drm/xe/guc_submit: use jiffies for job timeout
- drm/xe/queue: fix engine_class bounds check
- drm/xe/device: fix XE_MAX_GT_PER_TILE check
- drm/xe/device: fix XE_MAX_TILES_PER_DEVICE check
- dpll: indent DPLL option type by a tab
- s390/qeth: handle deferred cc1
- net: hsr: hsr_slave: Fix the promiscuous mode in offload mode
- tcp: properly terminate timers for kernel sockets
- net: wwan: t7xx: Split 64bit accesses to fix alignment issues
- drm/rockchip: vop2: Remove AR30 and AB30 format support
- selftests: vxlan_mdb: Fix failures with old libnet
- gpiolib: Fix debug messaging in gpiod_find_and_request()
- ACPICA: debugger: check status of acpi_evaluate_object() in
acpi_db_walk_for_fields()
- net: hns3: fix index limit to support all queue stats
- net: hns3: fix kernel crash when devlink reload during pf initialization
- net: hns3: mark unexcuted loopback test result as UNEXECUTED
- tls: recv: process_rx_list shouldn't use an offset with kvec
- tls: adjust recv return with async crypto and failed copy to userspace
- tls: get psock ref after taking rxlock to avoid leak
- mlxbf_gige: call request_irq() after NAPI initialized
- drm/amd/display: Update P010 scaling cap
- drm/amd/display: Send DTBCLK disable message on first commit
- bpf: Protect against int overflow for stack access size
- cifs: Fix duplicate fscache cookie warnings
- netfilter: nf_tables: reject destroy command to remove basechain hooks
- netfilter: nf_tables: reject table flag and netdev basechain updates
- netfilter: nf_tables: skip netdev hook unregistration if table is dormant
- iommu: Validate the PASID in iommu_attach_device_pasid()
- net: bcmasp: Bring up unimac after PHY link up
- net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
- Octeontx2-af: fix pause frame configuration in GMP mode
- inet: inet_defrag: prevent sk release while still in use
- drm/i915: Stop doing double audio enable/disable on SDVO and g4x+ DP
- drm/i915/display: Disable AuxCCS framebuffers if built for Xe
- drm/i915/xelpg: Extend some workarounds/tuning to gfx version 12.74
- drm/i915/mtl: Update workaround 14018575942
- drm/i915: Do not print 'pxp init failed with 0' when it succeed
- dm integrity: fix out-of-range warning
- modpost: do not make find_tosym() return NULL
- kbuild: make -Woverride-init warnings more consistent
- mm/treewide: replace pud_large() with pud_leaf()
- Revert "x86/mm/ident_map: Use gbpages only where full GB page should be
mapped."
- gpio: cdev: sanitize the label before requesting the interrupt
- RISC-V: KVM: Fix APLIC setipnum_le/be write emulation
- RISC-V: KVM: Fix APLIC in_clrip[x] read emulation
- KVM: arm64: Fix host-programmed guest events in nVHE
- KVM: arm64: Fix out-of-IPA space translation fault handling
- selinux: avoid dereference of garbage after mount failure
- r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
- x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
- x86/bpf: Fix IP after emitting call depth accounting
- Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
- arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
- Bluetooth: qca: fix device-address endianness
- Bluetooth: add quirk for broken address properties
- Bluetooth: hci_event: set the conn encrypted before conn establishes
- Bluetooth: Fix TOCTOU in HCI debugfs implementation
- netfilter: nf_tables: release batch on table validation from abort path
- netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
- selftests: mptcp: join: fix dev in check_endpoint
- net/rds: fix possible cp null dereference
- net: usb: ax88179_178a: avoid the interface always configured as random
address
- net: mana: Fix Rx DMA datasize and skb_over_panic
- vsock/virtio: fix packet delivery to tap device
- netfilter: nf_tables: reject new basechain after table flag update
- netfilter: nf_tables: flush pending destroy work before exit_net release
- netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
- netfilter: nf_tables: discard table flag update with pending basechain
deletion
- netfilter: validate user input for expected length
- vboxsf: Avoid an spurious warning if load_nls_xxx() fails
- bpf, sockmap: Prevent lock inversion deadlock in map delete elem
- mptcp: prevent BPF accessing lowat from a subflow socket.
- x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for
!SRSO
- KVM: arm64: Use TLBI_TTL_UNKNOWN in __kvm_tlb_flush_vmid_range()
- KVM: arm64: Ensure target address is granule-aligned for range TLBI
- net/sched: act_skbmod: prevent kernel-infoleak
- net: dsa: sja1105: Fix parameters order in sja1110_pcs_mdio_write_c45()
- net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
- net: stmmac: fix rx queue priority assignment
- net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
- net: txgbe: fix i2c dev name cannot match clkdev
- net: fec: Set mac_managed_pm during probe
- net: phy: micrel: Fix potential null pointer dereference
- net: dsa: mv88e6xxx: fix usable ports on 88e6020
- selftests: net: gro fwd: update vxlan GRO test expectations
- gro: fix ownership transfer
- idpf: fix kernel panic on unknown packet types
- ice: fix enabling RX VLAN filtering
- i40e: Fix VF MAC filter removal
- tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-
wildcard addresses.
- erspan: make sure erspan_base_hdr is present in skb->head
- selftests: reuseaddr_conflict: add missing new line at the end of the output
- tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-
wildcard addresses.
- ax25: fix use-after-free bugs caused by ax25_ds_del_timer
- e1000e: Workaround for sporadic MDI error on Meteor Lake systems
- ipv6: Fix infinite recursion in fib6_dump_done().
- mlxbf_gige: stop interface during shutdown
- r8169: skip DASH fw status checks when DASH is disabled
- udp: do not accept non-tunnel GSO skbs landing in a tunnel
- udp: do not transition UDP GRO fraglist partial checksums to unnecessary
- udp: prevent local UDP tunnel packets from being GROed
- octeontx2-af: Fix issue with loading coalesced KPU profiles
- octeontx2-pf: check negative error code in otx2_open()
- octeontx2-af: Add array index check
- i40e: fix i40e_count_filters() to count only active/new filters
- i40e: fix vf may be used uninitialized in this function warning
- i40e: Enforce software interrupt during busy-poll exit
- drm/amd: Flush GFXOFF requests in prepare stage
- e1000e: Minor flow correction in e1000_shutdown function
- e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue
- mean_and_variance: Drop always failing tests
- net: ravb: Let IP-specific receive function to interrogate descriptors
- net: ravb: Always process TX descriptor ring
- net: ravb: Always update error counters
- KVM: SVM: Use unsigned integers when dealing with ASIDs
- KVM: SVM: Add support for allowing zero SEV ASIDs
- selftests: mptcp: connect: fix shellcheck warnings
- selftests: mptcp: use += operator to append strings
- mptcp: don't account accept() of non-MPC client as fallback to TCP
- 9p: Fix read/write debug statements to report server reply
- ASoC: wm_adsp: Fix missing mutex_lock in wm_adsp_write_ctl()
- ASoC: cs42l43: Correct extraction of data pointer in suspend/resume
- riscv: mm: Fix prototype to avoid discarding const
- riscv: hwprobe: do not produce frtace relocation
- drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
- block: count BLK_OPEN_RESTRICT_WRITES openers
- RISC-V: Update AT_VECTOR_SIZE_ARCH for new AT_MINSIGSTKSZ
- ASoC: amd: acp: fix for acp pdm configuration check
- regmap: maple: Fix cache corruption in regcache_maple_drop()
- ALSA: hda: cs35l56: Add ACPI device match tables
- drm/panfrost: fix power transition timeout warnings
- nouveau/uvmm: fix addr/range calcs for remap operations
- drm/prime: Unbreak virtgpu dma-buf export
- ASoC: rt5682-sdw: fix locking sequence
- ASoC: rt711-sdca: fix locking sequence
- ASoC: rt711-sdw: fix locking sequence
- ASoC: rt712-sdca-sdw: fix locking sequence
- ASoC: rt722-sdca-sdw: fix locking sequence
- ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
- spi: s3c64xx: Extract FIFO depth calculation to a dedicated macro
- spi: s3c64xx: sort headers alphabetically
- spi: s3c64xx: explicitly include <linux/bits.h>
- spi: s3c64xx: remove else after return
- spi: s3c64xx: define a magic value
- spi: s3c64xx: allow full FIFO masks
- spi: s3c64xx: determine the fifo depth only once
- spi: s3c64xx: Use DMA mode from fifo size
- ASoC: amd: acp: fix for acp_init function error handling
- regmap: maple: Fix uninitialized symbol 'ret' warnings
- ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
- scsi: mylex: Fix sysfs buffer lengths
- scsi: sd: Unregister device if device_add_disk() failed in sd_probe()
- Revert "ALSA: emu10k1: fix synthesizer sample playback position and caching"
- drm/i915/dp: Fix DSC state HW readout for SST connectors
- cifs: Fix caching to try to do open O_WRONLY as rdwr on server
- spi: mchp-pci1xxx: Fix a possible null pointer dereference in
pci1xxx_spi_probe
- s390/pai: fix sampling event removal for PMU device driver
- thermal: gov_power_allocator: Allow binding without cooling devices
- thermal: gov_power_allocator: Allow binding without trip points
- drm/i915/gt: Limit the reserved VM space to only the platforms that need it
- ata: sata_mv: Fix PCI device ID table declaration compilation warning
- ASoC: SOF: amd: fix for false dsp interrupts
- SUNRPC: Fix a slow server-side memory leak with RPC-over-TCP
- riscv: use KERN_INFO in do_trap
- riscv: Fix warning by declaring arch_cpu_idle() as noinstr
- riscv: Disable preemption when using patch_map()
- nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
- lib/stackdepot: move stack_record struct definition into the header
- stackdepot: rename pool_index to pool_index_plus_1
- x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
- Revert "drm/amd/display: Send DTBCLK disable message on first commit"
- gpio: cdev: check for NULL labels when sanitizing them for irqs
- gpio: cdev: fix missed label sanitizing in debounce_setup()
- ksmbd: don't send oplock break if rename fails
- ksmbd: validate payload size in ipc response
- ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
- ALSA: hda: Add pplcllpl/u members to hdac_ext_stream
- ALSA: hda/realtek - Fix inactive headset mic jack
- ALSA: hda/realtek: Add sound quirks for Lenovo Legion slim 7 16ARHA7 models
- ALSA: hda/realtek: cs35l41: Support ASUS ROG G634JYR
- ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with
microphone
- io_uring/kbuf: get rid of lower BGID lists
- io_uring/kbuf: get rid of bl->is_ready
- io_uring/kbuf: protect io_buffer_list teardown with a reference
- io_uring/rw: don't allow multishot reads without NOWAIT support
- io_uring: use private workqueue for exit work
- io_uring/kbuf: hold io_buffer_list reference over mmap
- ASoC: SOF: Add dsp_max_burst_size_in_ms member to snd_sof_pcm_stream
- ASoC: SOF: ipc4-topology: Save the DMA maximum burst size for PCMs
- ASoC: SOF: Intel: hda-pcm: Use dsp_max_burst_size_in_ms to place constraint
- ASoC: SOF: Intel: hda: Implement get_stream_position (Linear Link Position)
- ASoC: SOF: Intel: mtl/lnl: Use the generic get_stream_position callback
- ASoC: SOF: Introduce a new callback pair to be used for PCM delay reporting
- ASoC: SOF: Intel: Set the dai/host get frame/byte counter callbacks
- ASoC: SOF: Intel: hda-common-ops: Do not set the get_stream_position
callback
- ASoC: SOF: ipc4-pcm: Use the snd_sof_pcm_get_dai_frame_counter() for
pcm_delay
- ASoC: SOF: Remove the get_stream_position callback
- ASoC: SOF: ipc4-pcm: Move struct sof_ipc4_timestamp_info definition locally
- ASoC: SOF: ipc4-pcm: Combine the SOF_IPC4_PIPE_PAUSED cases in pcm_trigger
- ASoC: SOF: ipc4-pcm: Invalidate the stream_start_offset in PAUSED state
- ASoC: SOF: sof-pcm: Add pointer callback to sof_ipc_pcm_ops
- ASoC: SOF: ipc4-pcm: Correct the delay calculation
- ASoC: SOF: Intel: hda: Compensate LLP in case it is not reset
- driver core: Introduce device_link_wait_removal()
- of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
- of: module: prevent NULL pointer dereference in vsnprintf()
- x86/mm/pat: fix VM_PAT handling in COW mappings
- x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
- x86/coco: Require seeding RNG with RDRAND on CoCo systems
- perf/x86/intel/ds: Don't clear ->pebs_data_cfg for the last PEBS event
- riscv: Fix vector state restore in rt_sigreturn()
- arm64/ptrace: Use saved floating point state type to determine SVE layout
- mm/secretmem: fix GUP-fast succeeding on secretmem folios
- selftests/mm: include strings.h for ffsl
- s390/entry: align system call table on 8 bytes
- riscv: Fix spurious errors from __get/put_kernel_nofault
- riscv: process: Fix kernel gp leakage
- smb: client: fix UAF in smb2_reconnect_server()
- smb: client: guarantee refcounted children from parent session
- smb: client: refresh referral without acquiring refpath_lock
- smb: client: handle DFS tcons in cifs_construct_tcon()
- smb: client: serialise cifs_construct_tcon() with cifs_mount_mutex
- smb3: retrying on failed server close
- smb: client: fix potential UAF in cifs_debug_files_proc_show()
- smb: client: fix potential UAF in cifs_stats_proc_write()
- smb: client: fix potential UAF in cifs_stats_proc_show()
- smb: client: fix potential UAF in cifs_dump_full_key()
- smb: client: fix potential UAF in smb2_is_valid_oplock_break()
- smb: client: fix potential UAF in smb2_is_valid_lease_break()
- smb: client: fix potential UAF in is_valid_oplock_break()
- smb: client: fix potential UAF in smb2_is_network_name_deleted()
- smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
- drm/i915/mst: Limit MST+DSC to TGL+
- drm/i915/mst: Reject FEC+MST on ICL
- drm/i915/dp: Fix the computation for compressed_bpp for DISPLAY < 13
- drm/i915/gt: Disable HW load balancing for CCS
- drm/i915/gt: Do not generate the command streamer for all the CCS
- drm/i915/gt: Enable only one CCS for compute workload
- drm/xe: Use ring ops TLB invalidation for rebinds
- drm/xe: Rework rebinding
- Revert "x86/mpparse: Register APIC address only once"
- bpf: put uprobe link's path and task in release callback
- bpf: support deferring bpf_link dealloc to after RCU grace period
- efi/libstub: Add generic support for parsing mem_encrypt=
- x86/boot: Move mem_encrypt= parsing to the decompressor
- x86/sme: Move early SME kernel encryption handling into .head.text
- x86/sev: Move early startup code into .head.text section
- Linux 6.8.5
* CVE-2024-26926
- binder: check offset alignment in binder_get_object()
* CVE-2024-26922
- drm/amdgpu: validate the parameters of bo mapping operations more clearly
* CVE-2024-26924
- netfilter: nft_set_pipapo: do not free live element
[ Ubuntu-azure: 6.8.0-1009.9 ]
* noble/linux-azure: 6.8.0-1009.9 -proposed tracker (LP: #2068134)
* Azure: net: mana: Enable MANA driver on ARM64 with 4K page size
(LP: #2066982)
- net: mana: Enable MANA driver on ARM64 with 4K page size
* Azure: net: mana: Fix Rx DMA datasize and skb_over_panic (LP: #2066992)
- net: mana: Fix Rx DMA datasize and skb_over_panic
[ Ubuntu: 6.8.0-36.36 ]
* noble/linux: 6.8.0-36.36 -proposed tracker (LP: #2068150)
* CVE-2024-26924
- netfilter: nft_set_pipapo: do not free live element
[ Ubuntu: 6.8.0-35.35 ]
* noble/linux: 6.8.0-35.35 -proposed tracker (LP: #2065886)
* CVE-2024-21823
- VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist
- dmaengine: idxd: add a new security check to deal with a hardware erratum
- dmaengine: idxd: add a write() method for applications to submit work
[ Ubuntu-azure: 6.8.0-1008.8 ]
* noble/linux-azure: 6.8.0-1008.8 -proposed tracker (LP: #2064327)
* Azure: Fix hibernation failure (LP: #2064740)
- drm: Check output polling initialized before disabling
- drm: Check polling initialized before enabling in
drm_helper_probe_single_connector_modes
[ Ubuntu: 6.8.0-34.34 ]
* noble/linux: 6.8.0-34.34 -proposed tracker (LP: #2065167)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2024.04.29)
[ Ubuntu: 6.8.0-32.32 ]
* noble/linux: 6.8.0-32.32 -proposed tracker (LP: #2064344)
* Packaging resync (LP: #1786013)
- [Packaging] drop getabis data
- [Packaging] update variants
- [Packaging] update annotations scripts
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2024.04.29)
* Enable Nezha board (LP: #1975592)
- [Config] Enable CONFIG_REGULATOR_FIXED_VOLTAGE on riscv64
* Enable Nezha board (LP: #1975592) // Enable StarFive VisionFive 2 board
(LP: #2013232)
- [Config] Enable CONFIG_SERIAL_8250_DW on riscv64
* RISC-V kernel config is out of sync with other archs (LP: #1981437)
- [Config] Sync riscv64 config with other architectures
* obsolete out-of-tree ivsc dkms in favor of in-tree one (LP: #2061747)
- ACPI: scan: Defer enumeration of devices with a _DEP pointing to IVSC device
- Revert "mei: vsc: Call wake_up() in the threaded IRQ handler"
- mei: vsc: Unregister interrupt handler for system suspend
- media: ipu-bridge: Add ov01a10 in Dell XPS 9315
- SAUCE: media: ipu-bridge: Support more sensors
* Fix after-suspend-mediacard/sdhc-insert test failed (LP: #2042500)
- PCI/ASPM: Move pci_configure_ltr() to aspm.c
- PCI/ASPM: Always build aspm.c
- PCI/ASPM: Move pci_save_ltr_state() to aspm.c
- PCI/ASPM: Save L1 PM Substates Capability for suspend/resume
- PCI/ASPM: Call pci_save_ltr_state() from pci_save_pcie_state()
- PCI/ASPM: Disable L1 before configuring L1 Substates
- PCI/ASPM: Update save_state when configuration changes
* RTL8852BE fw security fail then lost WIFI function during suspend/resume
cycle (LP: #2063096)
- wifi: rtw89: download firmware with five times retry
* intel_rapl_common: Add support for ARL and LNL (LP: #2061953)
- powercap: intel_rapl: Add support for Lunar Lake-M paltform
- powercap: intel_rapl: Add support for Arrow Lake
* Kernel panic during checkbox stress_ng_test on Grace running noble 6.8
(arm64+largemem) kernel (LP: #2058557)
- aio: Fix null ptr deref in aio_complete() wakeup
* Avoid creating non-working backlight sysfs knob from ASUS board
(LP: #2060422)
- platform/x86: asus-wmi: Consider device is absent when the read is ~0
* Include cifs.ko in linux-modules package (LP: #2042546)
- [Packaging] Replace fs/cifs with fs/smb/client in inclusion list
* Add Real-time Linux Analysis tool (rtla) to linux-tools (LP: #2059080)
- SAUCE: rtla: fix deb build
- [Packaging] add Real-time Linux Analysis tool (rtla) to linux-tools
- [Packaging] update dependencies for rtla
* Noble update: v6.8.4 upstream stable release (LP: #2060533)
- Revert "workqueue: Shorten events_freezable_power_efficient name"
- Revert "workqueue: Don't call cpumask_test_cpu() with -1 CPU in
wq_update_node_max_active()"
- Revert "workqueue: Implement system-wide nr_active enforcement for unbound
workqueues"
- Revert "workqueue: Introduce struct wq_node_nr_active"
- Revert "workqueue: RCU protect wq->dfl_pwq and implement accessors for it"
- Revert "workqueue: Make wq_adjust_max_active() round-robin pwqs while
activating"
- Revert "workqueue: Move nr_active handling into helpers"
- Revert "workqueue: Replace pwq_activate_inactive_work() with
[__]pwq_activate_work()"
- Revert "workqueue: Factor out pwq_is_empty()"
- Revert "workqueue: Move pwq->max_active to wq->max_active"
- Revert "workqueue.c: Increase workqueue name length"
- Linux 6.8.4
* Noble update: v6.8.3 upstream stable release (LP: #2060531)
- drm/vmwgfx: Unmap the surface before resetting it on a plane state
- wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
- wifi: brcmfmac: avoid invalid list operation when vendor attach fails
- media: staging: ipu3-imgu: Set fields before media_entity_pads_init()
- arm64: dts: qcom: sc7280: Add additional MSI interrupts
- remoteproc: virtio: Fix wdg cannot recovery remote processor
- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
- smack: Set SMACK64TRANSMUTE only for dirs in smack_inode_setxattr()
- smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()
- arm: dts: marvell: Fix maxium->maxim typo in brownstone dts
- drm/vmwgfx: Fix possible null pointer derefence with invalid contexts
- arm64: dts: qcom: sm8450-hdk: correct AMIC4 and AMIC5 microphones
- serial: max310x: fix NULL pointer dereference in I2C instantiation
- drm/vmwgfx: Fix the lifetime of the bo cursor memory
- pci_iounmap(): Fix MMIO mapping leak
- media: xc4000: Fix atomicity violation in xc4000_get_frequency
- media: mc: Add local pad to pipeline regardless of the link state
- media: mc: Fix flags handling when creating pad links
- media: nxp: imx8-isi: Check whether crossbar pad is non-NULL before access
- media: mc: Add num_links flag to media_pad
- media: mc: Rename pad variable to clarify intent
- media: mc: Expand MUST_CONNECT flag to always require an enabled link
- media: nxp: imx8-isi: Mark all crossbar sink pads as MUST_CONNECT
- md: use RCU lock to protect traversal in md_spares_need_change()
- KVM: Always flush async #PF workqueue when vCPU is being destroyed
- arm64: dts: qcom: sm8550-qrd: correct WCD9385 TX port mapping
- arm64: dts: qcom: sm8550-mtp: correct WCD9385 TX port mapping
- cpufreq: amd-pstate: Fix min_perf assignment in amd_pstate_adjust_perf()
- thermal/intel: Fix intel_tcc_get_temp() to support negative CPU temperature
- powercap: intel_rapl: Fix a NULL pointer dereference
- powercap: intel_rapl: Fix locking in TPMI RAPL
- powercap: intel_rapl_tpmi: Fix a register bug
- powercap: intel_rapl_tpmi: Fix System Domain probing
- powerpc/smp: Adjust nr_cpu_ids to cover all threads of a core
- powerpc/smp: Increase nr_cpu_ids to include the boot CPU
- sparc64: NMI watchdog: fix return value of __setup handler
- sparc: vDSO: fix return value of __setup handler
- selftests/mqueue: Set timeout to 180 seconds
- pinctrl: qcom: sm8650-lpass-lpi: correct Kconfig name
- ext4: correct best extent lstart adjustment logic
- drm/amdgpu/display: Address kdoc for 'is_psr_su' in 'fill_dc_dirty_rects'
- block: Clear zone limits for a non-zoned stacked queue
- kasan/test: avoid gcc warning for intentional overflow
- bounds: support non-power-of-two CONFIG_NR_CPUS
- fat: fix uninitialized field in nostale filehandles
- fuse: fix VM_MAYSHARE and direct_io_allow_mmap
- mfd: twl: Select MFD_CORE
- ubifs: Set page uptodate in the correct place
- ubi: Check for too small LEB size in VTBL code
- ubi: correct the calculation of fastmap size
- ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
- mtd: rawnand: meson: fix scrambling mode value in command macro
- md/md-bitmap: fix incorrect usage for sb_index
- x86/nmi: Fix the inverse "in NMI handler" check
- parisc/unaligned: Rewrite 64-bit inline assembly of emulate_ldd()
- parisc: Avoid clobbering the C/B bits in the PSW with tophys and tovirt
macros
- parisc: Fix ip_fast_csum
- parisc: Fix csum_ipv6_magic on 32-bit systems
- parisc: Fix csum_ipv6_magic on 64-bit systems
- parisc: Strip upper 32 bit of sum in csum_ipv6_magic for 64-bit builds
- md/raid5: fix atomicity violation in raid5_cache_count
- iio: adc: rockchip_saradc: fix bitmask for channels on SARADCv2
- iio: adc: rockchip_saradc: use mask for write_enable bitfield
- docs: Restore "smart quotes" for quotes
- cpufreq: Limit resolving a frequency to policy min/max
- PM: suspend: Set mem_sleep_current during kernel command line setup
- vfio/pds: Always clear the save/restore FDs on reset
- clk: qcom: gcc-ipq5018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq6018: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq8074: fix terminating of frequency table arrays
- clk: qcom: gcc-ipq9574: fix terminating of frequency table arrays
- clk: qcom: camcc-sc8280xp: fix terminating of frequency table arrays
- clk: qcom: mmcc-apq8084: fix terminating of frequency table arrays
- clk: qcom: mmcc-msm8974: fix terminating of frequency table arrays
- usb: xhci: Add error handling in xhci_map_urb_for_dma
- powerpc/fsl: Fix mfpmr build errors with newer binutils
- USB: serial: ftdi_sio: add support for GMC Z216C Adapter IR-USB
- USB: serial: add device ID for VeriFone adapter
- USB: serial: cp210x: add ID for MGP Instruments PDS100
- wifi: mac80211: track capability/opmode NSS separately
- USB: serial: option: add MeiG Smart SLM320 product
- KVM: x86/xen: inject vCPU upcall vector when local APIC is enabled
- USB: serial: cp210x: add pid/vid for TDK NC0110013M and MM0110113M
- PM: sleep: wakeirq: fix wake irq warning in system suspend
- mmc: tmio: avoid concurrent runs of mmc_request_done()
- fuse: replace remaining make_bad_inode() with fuse_make_bad()
- fuse: fix root lookup with nonzero generation
- fuse: don't unhash root
- usb: typec: ucsi: Clean up UCSI_CABLE_PROP macros
- usb: dwc3-am62: fix module unload/reload behavior
- usb: dwc3-am62: Disable wakeup at remove
- serial: core: only stop transmit when HW fifo is empty
- serial: Lock console when calling into driver before registration
- btrfs: qgroup: always free reserved space for extent records
- btrfs: fix off-by-one chunk length calculation at contains_pending_extent()
- wifi: rtw88: Add missing VID/PIDs for 8811CU and 8821CU
- docs: Makefile: Add dependency to $(YNL_INDEX) for targets other than
htmldocs
- PCI/PM: Drain runtime-idle callbacks before driver removal
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake Root Ports
- Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
- md: don't clear MD_RECOVERY_FROZEN for new dm-raid until resume
- md: export helpers to stop sync_thread
- md: export helper md_is_rdwr()
- md: add a new helper reshape_interrupted()
- dm-raid: really frozen sync_thread during suspend
- md/dm-raid: don't call md_reap_sync_thread() directly
- dm-raid: add a new helper prepare_suspend() in md_personality
- dm-raid456, md/raid456: fix a deadlock for dm-raid456 while io concurrent
with reshape
- dm-raid: fix lockdep waring in "pers->hot_add_disk"
- powerpc: xor_vmx: Add '-mhard-float' to CFLAGS
- mac802154: fix llsec key resources release in mac802154_llsec_key_del
- mm: swap: fix race between free_swap_and_cache() and swapoff()
- mmc: core: Fix switch on gp3 partition
- Bluetooth: btnxpuart: Fix btnxpuart_close
- leds: trigger: netdev: Fix kernel panic on interface rename trig notify
- drm/etnaviv: Restore some id values
- landlock: Warn once if a Landlock action is requested while disabled
- io_uring: fix mshot read defer taskrun cqe posting
- hwmon: (amc6821) add of_match table
- io_uring: fix io_queue_proc modifying req->flags
- ext4: fix corruption during on-line resize
- nvmem: meson-efuse: fix function pointer type mismatch
- slimbus: core: Remove usage of the deprecated ida_simple_xx() API
- phy: tegra: xusb: Add API to retrieve the port number of phy
- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic
- speakup: Fix 8bit characters from direct synth
- debugfs: fix wait/cancellation handling during remove
- PCI/AER: Block runtime suspend when handling errors
- io_uring/net: correctly handle multishot recvmsg retry setup
- io_uring: fix mshot io-wq checks
- PCI: qcom: Disable ASPM L0s for sc8280xp, sa8540p and sa8295p
- sparc32: Fix parport build with sparc32
- nfs: fix UAF in direct writes
- NFS: Read unlock folio on nfs_page_create_from_folio() error
- kbuild: Move -Wenum-{compare-conditional,enum-conversion} into W=1
- PCI: qcom: Enable BDF to SID translation properly
- PCI: dwc: endpoint: Fix advertised resizable BAR size
- PCI: hv: Fix ring buffer size calculation
- cifs: prevent updating file size from server if we have a read/write lease
- cifs: allow changing password during remount
- thermal/drivers/mediatek: Fix control buffer enablement on MT7896
- vfio/pci: Disable auto-enable of exclusive INTx IRQ
- vfio/pci: Lock external INTx masking ops
- vfio/platform: Disable virqfds on cleanup
- vfio/platform: Create persistent IRQ handlers
- vfio/fsl-mc: Block calling interrupt handler without trigger
- tpm,tpm_tis: Avoid warning splat at shutdown
- ksmbd: replace generic_fillattr with vfs_getattr
- ksmbd: retrieve number of blocks using vfs_getattr in
set_file_allocation_info
- platform/x86/intel/tpmi: Change vsec offset to u64
- io_uring/rw: return IOU_ISSUE_SKIP_COMPLETE for multishot retry
- io_uring: clean rings on NO_MMAP alloc fail
- ring-buffer: Do not set shortest_full when full target is hit
- ring-buffer: Fix full_waiters_pending in poll
- ring-buffer: Use wait_event_interruptible() in ring_buffer_wait()
- tracing/ring-buffer: Fix wait_on_pipe() race
- dlm: fix user space lkb refcounting
- soc: fsl: qbman: Always disable interrupts when taking cgr_lock
- soc: fsl: qbman: Use raw spinlock for cgr_lock
- s390/zcrypt: fix reference counting on zcrypt card objects
- drm/probe-helper: warn about negative .get_modes()
- drm/panel: do not return negative error codes from drm_panel_get_modes()
- drm/exynos: do not return negative values from .get_modes()
- drm/imx/ipuv3: do not return negative values from .get_modes()
- drm/vc4: hdmi: do not return negative values from .get_modes()
- clocksource/drivers/timer-riscv: Clear timer interrupt on timer
initialization
- memtest: use {READ,WRITE}_ONCE in memory scanning
- Revert "block/mq-deadline: use correct way to throttling write requests"
- lsm: use 32-bit compatible data types in LSM syscalls
- lsm: handle the NULL buffer case in lsm_fill_user_ctx()
- f2fs: mark inode dirty for FI_ATOMIC_COMMITTED flag
- f2fs: truncate page cache before clearing flags when aborting atomic write
- nilfs2: fix failure to detect DAT corruption in btree and direct mappings
- nilfs2: prevent kernel bug at submit_bh_wbc()
- cifs: make sure server interfaces are requested only for SMB3+
- cifs: reduce warning log level for server not advertising interfaces
- cifs: open_cached_dir(): add FILE_READ_EA to desired access
- mtd: rawnand: Fix and simplify again the continuous read derivations
- mtd: rawnand: Add a helper for calculating a page index
- mtd: rawnand: Ensure all continuous terms are always in sync
- mtd: rawnand: Constrain even more when continuous reads are enabled
- cpufreq: dt: always allocate zeroed cpumask
- io_uring/futex: always remove futex entry for cancel all
- io_uring/waitid: always remove waitid entry for cancel all
- x86/CPU/AMD: Update the Zenbleed microcode revisions
- ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16()
- net: esp: fix bad handling of pages from page_pool
- NFSD: Fix nfsd_clid_class use of __string_len() macro
- drm/i915: Add missing ; to __assign_str() macros in tracepoint code
- net: hns3: tracing: fix hclgevf trace event strings
- cxl/trace: Properly initialize cxl_poison region name
- ksmbd: fix potencial out-of-bounds when buffer offset is invalid
- virtio: reenable config if freezing device failed
- LoongArch: Change __my_cpu_offset definition to avoid mis-optimization
- LoongArch: Define the __io_aw() hook as mmiowb()
- LoongArch/crypto: Clean up useless assignment operations
- wireguard: netlink: check for dangling peer via is_dead instead of empty
list
- wireguard: netlink: access device through ctx instead of peer
- wireguard: selftests: set RISCV_ISA_FALLBACK on riscv{32,64}
- ahci: asm1064: asm1166: don't limit reported ports
- drm/amd/display: Change default size for dummy plane in DML2
- drm/amdgpu: amdgpu_ttm_gart_bind set gtt bound flag
- drm/amdgpu/pm: Fix NULL pointer dereference when get power limit
- drm/amdgpu/pm: Check the validity of overdiver power limit
- drm/amd/display: Override min required DCFCLK in dml1_validate
- drm/amd/display: Allow dirty rects to be sent to dmub when abm is active
- drm/amd/display: Init DPPCLK from SMU on dcn32
- drm/amd/display: Update odm when ODM combine is changed on an otg master
pipe with no plane
- drm/amd/display: Fix idle check for shared firmware state
- drm/amd/display: Amend coasting vtotal for replay low hz
- drm/amd/display: Lock all enabled otg pipes even with no planes
- drm/amd/display: Implement wait_for_odm_update_pending_complete
- drm/amd/display: Return the correct HDCP error code
- drm/amd/display: Add a dc_state NULL check in dc_state_release
- drm/amd/display: Fix noise issue on HDMI AV mute
- dm snapshot: fix lockup in dm_exception_table_exit
- x86/pm: Work around false positive kmemleak report in msr_build_context()
- wifi: brcmfmac: add per-vendor feature detection callback
- wifi: brcmfmac: cfg80211: Use WSEC to set SAE password
- wifi: brcmfmac: Demote vendor-specific attach/detach messages to info
- drm/ttm: Make sure the mapped tt pages are decrypted when needed
- drm/amd/display: Unify optimize_required flags and VRR adjustments
- drm/amd/display: Add more checks for exiting idle in DC
- btrfs: add set_folio_extent_mapped() helper
- btrfs: replace sb::s_blocksize by fs_info::sectorsize
- btrfs: add helpers to get inode from page/folio pointers
- btrfs: add helpers to get fs_info from page/folio pointers
- btrfs: add helper to get fs_info from struct inode pointer
- btrfs: qgroup: validate btrfs_qgroup_inherit parameter
- vfio: Introduce interface to flush virqfd inject workqueue
- vfio/pci: Create persistent INTx handler
- drm/bridge: add ->edid_read hook and drm_bridge_edid_read()
- drm/bridge: lt8912b: use drm_bridge_edid_read()
- drm/bridge: lt8912b: clear the EDID property on failures
- drm/bridge: lt8912b: do not return negative values from .get_modes()
- drm/amd/display: Remove pixle rate limit for subvp
- drm/amd/display: Revert Remove pixle rate limit for subvp
- workqueue: Shorten events_freezable_power_efficient name
- drm/amd/display: Use freesync when `DRM_EDID_FEATURE_CONTINUOUS_FREQ` found
- netfilter: nf_tables: reject constant set with timeout
- Revert "crypto: pkcs7 - remove sha1 support"
- x86/efistub: Call mixed mode boot services on the firmware's stack
- ASoC: amd: yc: Revert "Fix non-functional mic on Lenovo 21J2"
- ASoC: amd: yc: Revert "add new YC platform variant (0x63) support"
- Fix memory leak in posix_clock_open()
- wifi: rtw88: 8821cu: Fix connection failure
- x86/Kconfig: Remove CONFIG_AMD_MEM_ENCRYPT_ACTIVE_BY_DEFAULT
- x86/sev: Fix position dependent variable references in startup code
- clocksource/drivers/arm_global_timer: Fix maximum prescaler value
- ARM: 9352/1: iwmmxt: Remove support for PJ4/PJ4B cores
- ARM: 9359/1: flush: check if the folio is reserved for no-mapping addresses
- entry: Respect changes to system call number by trace_sys_enter()
- swiotlb: Fix double-allocation of slots due to broken alignment handling
- swiotlb: Honour dma_alloc_coherent() alignment in swiotlb_alloc()
- swiotlb: Fix alignment checks when both allocation and DMA masks are present
- iommu/dma: Force swiotlb_max_mapping_size on an untrusted device
- printk: Update @console_may_schedule in console_trylock_spinning()
- irqchip/renesas-rzg2l: Flush posted write in irq_eoi()
- irqchip/renesas-rzg2l: Rename rzg2l_tint_eoi()
- irqchip/renesas-rzg2l: Rename rzg2l_irq_eoi()
- irqchip/renesas-rzg2l: Prevent spurious interrupts when setting trigger type
- kprobes/x86: Use copy_from_kernel_nofault() to read from unsafe address
- efi/libstub: fix efi_random_alloc() to allocate memory at alloc_min or
higher address
- x86/mpparse: Register APIC address only once
- x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD
- efi: fix panic in kdump kernel
- pwm: img: fix pwm clock lookup
- selftests/mm: Fix build with _FORTIFY_SOURCE
- btrfs: handle errors returned from unpin_extent_cache()
- btrfs: fix warning messages not printing interval at unpin_extent_range()
- btrfs: do not skip re-registration for the mounted device
- mfd: intel-lpss: Switch to generalized quirk table
- mfd: intel-lpss: Introduce QUIRK_CLOCK_DIVIDER_UNITY for XPS 9530
- drm/i915: Replace a memset() with zero initialization
- drm/i915: Try to preserve the current shared_dpll for fastset on type-c
ports
- drm/i915: Include the PLL name in the debug messages
- drm/i915: Suppress old PLL pipe_mask checks for MG/TC/TBT PLLs
- crypto: iaa - Fix nr_cpus < nr_iaa case
- drm/amd/display: Prevent crash when disable stream
- ALSA: hda/tas2781: remove digital gain kcontrol
- ALSA: hda/tas2781: add locks to kcontrols
- mm: zswap: fix writeback shinker GFP_NOIO/GFP_NOFS recursion
- init: open /initrd.image with O_LARGEFILE
- x86/efistub: Add missing boot_params for mixed mode compat entry
- efi/libstub: Cast away type warning in use of max()
- x86/efistub: Reinstate soft limit for initrd loading
- prctl: generalize PR_SET_MDWE support check to be per-arch
- ARM: prctl: reject PR_SET_MDWE on pre-ARMv6
- tmpfs: fix race on handling dquot rbtree
- btrfs: validate device maj:min during open
- btrfs: fix race in read_extent_buffer_pages()
- btrfs: zoned: don't skip block groups with 100% zone unusable
- btrfs: zoned: use zone aware sb location for scrub
- btrfs: zoned: fix use-after-free in do_zone_finish()
- wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes
- wifi: cfg80211: add a flag to disable wireless extensions
- wifi: iwlwifi: mvm: disable MLO for the time being
- wifi: iwlwifi: fw: don't always use FW dump trig
- wifi: iwlwifi: mvm: handle debugfs names more carefully
- Revert "drm/amd/display: Fix sending VSC (+ colorimetry) packets for DP/eDP
displays without PSR"
- fbdev: Select I/O-memory framebuffer ops for SBus
- exec: Fix NOMMU linux_binprm::exec in transfer_args_to_stack()
- hexagon: vmlinux.lds.S: handle attributes section
- mm: cachestat: fix two shmem bugs
- selftests/mm: sigbus-wp test requires UFFD_FEATURE_WP_HUGETLBFS_SHMEM
- selftests/mm: fix ARM related issue with fork after pthread_create
- mmc: sdhci-omap: re-tuning is needed after a pm transition to support emmc
HS200 mode
- mmc: core: Initialize mmc_blk_ioc_data
- mmc: core: Avoid negative index with array access
- sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove()
- block: Do not force full zone append completion in req_bio_endio()
- thermal: devfreq_cooling: Fix perf state when calculate dfc res_util
- Revert "thermal: core: Don't update trip points inside the hysteresis range"
- nouveau/dmem: handle kcalloc() allocation failure
- net: ll_temac: platform_get_resource replaced by wrong function
- net: wan: framer: Add missing static inline qualifiers
- net: phy: qcom: at803x: fix kernel panic with at8031_probe
- drm/xe/query: fix gt_id bounds check
- drm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau
- drm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed
- drm/amdkfd: fix TLB flush after unmap for GFX9.4.2
- drm/amdgpu: fix deadlock while reading mqd from debugfs
- drm/amd/display: Remove MPC rate control logic from DCN30 and above
- drm/amd/display: Set DCN351 BB and IP the same as DCN35
- drm/i915/hwmon: Fix locking inversion in sysfs getter
- drm/i915/vma: Fix UAF on destroy against retire race
- drm/i915/bios: Tolerate devdata==NULL in
intel_bios_encoder_supports_dp_dual_mode()
- drm/i915/vrr: Generate VRR "safe window" for DSB
- drm/i915/dsi: Go back to the previous INIT_OTP/DISPLAY_ON order, mostly
- drm/i915/dsb: Fix DSB vblank waits when using VRR
- drm/i915: Do not match JSL in ehl_combo_pll_div_frac_wa_needed()
- drm/i915: Pre-populate the cursor physical dma address
- drm/i915/gt: Reset queue_priority_hint on parking
- drm/amd/display: Fix bounds check for dcn35 DcfClocks
- Bluetooth: hci_sync: Fix not checking error on hci_cmd_sync_cancel_sync
- mtd: spinand: Add support for 5-byte IDs
- Revert "usb: phy: generic: Get the vbus supply"
- usb: cdc-wdm: close race between read and workqueue
- usb: misc: ljca: Fix double free in error handling path
- USB: UAS: return ENODEV when submit urbs fail with device not attached
- vfio/pds: Make sure migration file isn't accessed after reset
- ring-buffer: Make wake once of ring_buffer_wait() more robust
- btrfs: fix extent map leak in unexpected scenario at unpin_extent_cache()
- ALSA: sh: aica: reorder cleanup operations to avoid UAF bugs
- scsi: ufs: qcom: Provide default cycles_in_1us value
- scsi: sd: Fix TCG OPAL unlock on system resume
- scsi: core: Fix unremoved procfs host directory regression
- staging: vc04_services: changen strncpy() to strscpy_pad()
- staging: vc04_services: fix information leak in create_component()
- genirq: Introduce IRQF_COND_ONESHOT and use it in pinctrl-amd
- usb: dwc3: Properly set system wakeup
- USB: core: Fix deadlock in usb_deauthorize_interface()
- USB: core: Add hub_get() and hub_put() routines
- USB: core: Fix deadlock in port "disable" sysfs attribute
- usb: dwc2: host: Fix remote wakeup from hibernation
- usb: dwc2: host: Fix hibernation flow
- usb: dwc2: host: Fix ISOC flow in DDMA mode
- usb: dwc2: gadget: Fix exiting from clock gating
- usb: dwc2: gadget: LPM flow fix
- usb: udc: remove warning when queue disabled ep
- usb: typec: ucsi: Fix race between typec_switch and role_switch
- usb: typec: tcpm: fix double-free issue in tcpm_port_unregister_pd()
- usb: typec: tcpm: Correct port source pdo array in pd_set callback
- usb: typec: tcpm: Update PD of Type-C port upon pd_set
- usb: typec: Return size of buffer if pd_set operation succeeds
- usb: typec: ucsi: Clear EVENT_PENDING under PPM lock
- usb: typec: ucsi: Ack unsupported commands
- usb: typec: ucsi_acpi: Refactor and fix DELL quirk
- usb: typec: ucsi: Clear UCSI_CCI_RESET_COMPLETE before reset
- scsi: qla2xxx: Prevent command send on chip reset
- scsi: qla2xxx: Fix N2N stuck connection
- scsi: qla2xxx: Split FCE|EFT trace control
- scsi: qla2xxx: Update manufacturer detail
- scsi: qla2xxx: NVME|FCP prefer flag not being honored
- scsi: qla2xxx: Fix command flush on cable pull
- scsi: qla2xxx: Fix double free of the ha->vp_map pointer
- scsi: qla2xxx: Fix double free of fcport
- scsi: qla2xxx: Change debug message during driver unload
- scsi: qla2xxx: Delay I/O Abort on PCI error
- x86/bugs: Fix the SRSO mitigation on Zen3/4
- crash: use macro to add crashk_res into iomem early for specific arch
- drm/amd/display: fix IPX enablement
- x86/bugs: Use fixed addressing for VERW operand
- Revert "x86/bugs: Use fixed addressing for VERW operand"
- usb: dwc3: pci: Drop duplicate ID
- scsi: lpfc: Correct size for cmdwqe/rspwqe for memset()
- scsi: lpfc: Correct size for wqe for memset()
- scsi: libsas: Add a helper sas_get_sas_addr_and_dev_type()
- scsi: libsas: Fix disk not being scanned in after being removed
- perf/x86/amd/core: Update and fix stalled-cycles-* events for Zen 2 and
later
- x86/sev: Skip ROM range scans and validation for SEV-SNP guests
- tools/resolve_btfids: fix build with musl libc
- drm/amdgpu: fix use-after-free bug
- drm/sched: fix null-ptr-deref in init entity
- Linux 6.8.3
- [Config] updateconfigs following v6.8.3 import
* Noble update: v6.8.3 upstream stable release (LP: #2060531) //
[Ubuntu-24.04] Hugepage memory is not getting released even after destroying
the guest! (LP: #2062556)
- block: Fix page refcounts for unaligned buffers in __bio_release_pages()
* [SPR][EMR][GNR] TDX: efi: TD Measurement support for kernel cmdline/initrd
sections from EFI stub (LP: #2060130)
- efi/libstub: Use TPM event typedefs from the TCG PC Client spec
- efi/tpm: Use symbolic GUID name from spec for final events table
- efi/libstub: Add Confidential Computing (CC) measurement typedefs
- efi/libstub: Measure into CC protocol if TCG2 protocol is absent
- efi/libstub: Add get_event_log() support for CC platforms
- x86/efistub: Remap kernel text read-only before dropping NX attribute
* Fix acpi_power_meter accessing IPMI region before it's ready (LP: #2059263)
- ACPI: IPMI: Add helper to wait for when SMI is selected
- hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems
* Drop fips-checks script from trees (LP: #2055083)
- [Packaging] Remove fips-checks script
* alsa/realtek: adjust max output valume for headphone on 2 LG machines
(LP: #2058573)
- ALSA: hda/realtek: fix the hp playback volume issue for LG machines
* Noble update: v6.8.2 upstream stable release (LP: #2060097)
- do_sys_name_to_handle(): use kzalloc() to fix kernel-infoleak
- workqueue.c: Increase workqueue name length
- workqueue: Move pwq->max_active to wq->max_active
- workqueue: Factor out pwq_is_empty()
- workqueue: Replace pwq_activate_inactive_work() with [__]pwq_activate_work()
- workqueue: Move nr_active handling into helpers
- workqueue: Make wq_adjust_max_active() round-robin pwqs while activating
- workqueue: RCU protect wq->dfl_pwq and implement accessors for it
- workqueue: Introduce struct wq_node_nr_active
- workqueue: Implement system-wide nr_active enforcement for unbound
workqueues
- workqueue: Don't call cpumask_test_cpu() with -1 CPU in
wq_update_node_max_active()
- iomap: clear the per-folio dirty bits on all writeback failures
- fs: Fix rw_hint validation
- io_uring: remove looping around handling traditional task_work
- io_uring: remove unconditional looping in local task_work handling
- s390/dasd: Use dev_*() for device log messages
- s390/dasd: fix double module refcount decrement
- fs/hfsplus: use better @opf description
- md: fix kmemleak of rdev->serial
- rcu/exp: Fix RCU expedited parallel grace period kworker allocation failure
recovery
- rcu/exp: Handle RCU expedited grace period kworker allocation failure
- fs/select: rework stack allocation hack for clang
- block: fix deadlock between bd_link_disk_holder and partition scan
- md: Don't clear MD_CLOSING when the raid is about to stop
- kunit: Setup DMA masks on the kunit device
- ovl: Always reject mounting over case-insensitive directories
- kunit: test: Log the correct filter string in executor_test
- lib/cmdline: Fix an invalid format specifier in an assertion msg
- lib: memcpy_kunit: Fix an invalid format specifier in an assertion msg
- time: test: Fix incorrect format specifier
- rtc: test: Fix invalid format specifier.
- net: test: Fix printf format specifier in skb_segment kunit test
- drm/xe/tests: Fix printf format specifiers in xe_migrate test
- drm: tests: Fix invalid printf format specifiers in KUnit tests
- md/raid1: factor out helpers to add rdev to conf
- md/raid1: record nonrot rdevs while adding/removing rdevs to conf
- md/raid1: fix choose next idle in read_balance()
- io_uring/net: unify how recvmsg and sendmsg copy in the msghdr
- io_uring/net: move receive multishot out of the generic msghdr path
- io_uring/net: fix overflow check in io_recvmsg_mshot_prep()
- nvme: host: fix double-free of struct nvme_id_ns in ns_update_nuse()
- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
- x86/mm: Ensure input to pfn_to_kaddr() is treated as a 64-bit type
- x86/resctrl: Remove hard-coded memory bandwidth limit
- x86/resctrl: Read supported bandwidth sources from CPUID
- x86/resctrl: Implement new mba_MBps throttling heuristic
- x86/sme: Fix memory encryption setting if enabled by default and not
overridden
- timekeeping: Fix cross-timestamp interpolation on counter wrap
- timekeeping: Fix cross-timestamp interpolation corner case decision
- timekeeping: Fix cross-timestamp interpolation for non-x86
- x86/asm: Remove the __iomem annotation of movdir64b()'s dst argument
- sched/fair: Take the scheduling domain into account in select_idle_smt()
- sched/fair: Take the scheduling domain into account in select_idle_core()
- wifi: ath10k: fix NULL pointer dereference in
ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev()
- wifi: b43: Stop/wake correct queue in DMA Tx path when QoS is disabled
- wifi: b43: Stop/wake correct queue in PIO Tx path when QoS is disabled
- wifi: b43: Stop correct queue in DMA worker when QoS is disabled
- wifi: b43: Disable QoS for bcm4331
- wifi: wilc1000: fix declarations ordering
- wifi: wilc1000: fix RCU usage in connect path
- wifi: ath11k: add support to select 6 GHz regulatory type
- wifi: ath11k: store cur_regulatory_info for each radio
- wifi: ath11k: fix a possible dead lock caused by ab->base_lock
- wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work
- wifi: wilc1000: do not realloc workqueue everytime an interface is added
- wifi: wilc1000: fix multi-vif management when deleting a vif
- wifi: mwifiex: debugfs: Drop unnecessary error check for
debugfs_create_dir()
- ARM: dts: renesas: r8a73a4: Fix external clocks and clock rate
- arm64: dts: qcom: x1e80100: drop qcom,drv-count
- arm64: dts: qcom: sc8180x: Hook up VDD_CX as GCC parent domain
- arm64: dts: qcom: sc8180x: Fix up big CPU idle state entry latency
- arm64: dts: qcom: sc8180x: Add missing CPU off state
- arm64: dts: qcom: sc8180x: Fix eDP PHY power-domains
- arm64: dts: qcom: sc8180x: Don't hold MDP core clock at FMAX
- arm64: dts: qcom: sc8180x: Require LOW_SVS vote for MMCX if DISPCC is on
- arm64: dts: qcom: sc8180x: Add missing CPU<->MDP_CFG path
- arm64: dts: qcom: sc8180x: Shrink aoss_qmp register space size
- cpufreq: brcmstb-avs-cpufreq: add check for cpufreq_cpu_get's return value
- cpufreq: mediatek-hw: Wait for CPU supplies before probing
- sock_diag: annotate data-races around sock_diag_handlers[family]
- inet_diag: annotate data-races around inet_diag_table[]
- bpftool: Silence build warning about calloc()
- selftests/bpf: Fix potential premature unload in bpf_testmod
- libbpf: Apply map_set_def_max_entries() for inner_maps on creation
- selftest/bpf: Add map_in_maps with BPF_MAP_TYPE_PERF_EVENT_ARRAY values
- bpftool: Fix wrong free call in do_show_link
- wifi: ath12k: Fix issues in channel list update
- selftests/bpf: Fix the flaky tc_redirect_dtime test
- selftests/bpf: Wait for the netstamp_needed_key static key to be turned on
- wifi: cfg80211: add RNR with reporting AP information
- wifi: mac80211: use deflink and fix typo in link ID check
- wifi: iwlwifi: change link id in time event to s8
- af_unix: Annotate data-race of gc_in_progress in wait_for_unix_gc().
- arm64: dts: qcom: sm8450: Add missing interconnects to serial
- soc: qcom: socinfo: rename PM2250 to PM4125
- arm64: dts: qcom: sc7280: Add static properties to cryptobam
- arm64: dts: qcom: qcm6490-fairphone-fp5: Add missing reserved-memory
- arm64: dts: qcom: sdm845-oneplus-common: improve DAI node naming
- arm64: dts: qcom: rename PM2250 to PM4125
- cpufreq: mediatek-hw: Don't error out if supply is not found
- libbpf: Fix faccessat() usage on Android
- libbpf: fix __arg_ctx type enforcement for perf_event programs
- pmdomain: qcom: rpmhpd: Drop SA8540P gfx.lvl
- arm64: dts: qcom: sa8540p: Drop gfx.lvl as power-domain for gpucc
- arm64: dts: renesas: r8a779g0: Restore sort order
- arm64: dts: renesas: r8a779g0: Add missing SCIF_CLK2
- selftests/bpf: Disable IPv6 for lwt_redirect test
- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S i.MX8MM
- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL i.MX8MM
- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL
OSM-S board
- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals on BL
board
- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL
OSM-S board
- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card signals on BL
board
- arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM module
- arm64: dts: imx8qm: Align edma3 power-domains resources indentation
- arm64: dts: imx8qm: Correct edma3 power-domains and interrupt numbers
- libbpf: Add missing LIBBPF_API annotation to libbpf_set_memlock_rlim API
- wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete
- wifi: ath11k: change to move WMI_VDEV_PARAM_SET_HEMU_MODE before
WMI_PEER_ASSOC_CMDID
- wifi: ath12k: fix fetching MCBC flag for QCN9274
- wifi: iwlwifi: mvm: report beacon protection failures
- wifi: iwlwifi: dbg-tlv: ensure NUL termination
- wifi: iwlwifi: acpi: fix WPFC reading
- wifi: iwlwifi: mvm: initialize rates in FW earlier
- wifi: iwlwifi: fix EWRD table validity check
- wifi: iwlwifi: mvm: d3: fix IPN byte order
- wifi: iwlwifi: always have 'uats_enabled'
- wifi: iwlwifi: mvm: fix the TLC command after ADD_STA
- wifi: iwlwifi: read BIOS PNVM only for non-Intel SKU
- gpio: vf610: allow disabling the vf610 driver
- selftests/bpf: trace_helpers.c: do not use poisoned type
- bpf: make sure scalar args don't accept __arg_nonnull tag
- bpf: don't emit warnings intended for global subprogs for static subprogs
- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS
- pwm: atmel-hlcdc: Fix clock imbalance related to suspend support
- net: blackhole_dev: fix build warning for ethh set but not used
- spi: consolidate setting message->spi
- spi: move split xfers for CS_WORD emulation
- arm64: dts: ti: k3-am62p5-sk: Enable CPSW MDIO node
- arm64: dts: ti: k3-j721s2: Fix power domain for VTM node
- arm64: dts: ti: k3-j784s4: Fix power domain for VTM node
- wifi: ath11k: initialize rx_mcs_80 and rx_mcs_160 before use
- wifi: libertas: fix some memleaks in lbs_allocate_cmd_buffer()
- arm64: dts: ti: k3-am69-sk: remove assigned-clock-parents for unused VP
- libbpf: fix return value for PERF_EVENT __arg_ctx type fix up check
- arm64: dts: ti: k3-am62p-mcu/wakeup: Disable MCU and wakeup R5FSS nodes
- arm64: dts: qcom: x1e80100-qcp: Fix supplies for LDOs 3E and 2J
- libbpf: Use OPTS_SET() macro in bpf_xdp_query()
- wifi: wfx: fix memory leak when starting AP
- arm64: dts: qcom: qcm2290: declare VLS CLAMP register for USB3 PHY
- arm64: dts: qcom: sm6115: declare VLS CLAMP register for USB3 PHY
- arm64: dts: qcom: sm8650: Fix UFS PHY clocks
- wifi: ath12k: fix incorrect logic of calculating vdev_stats_id
- printk: nbcon: Relocate 32bit seq macros
- printk: ringbuffer: Do not skip non-finalized records with prb_next_seq()
- printk: Wait for all reserved records with pr_flush()
- printk: Add this_cpu_in_panic()
- printk: ringbuffer: Cleanup reader terminology
- printk: ringbuffer: Skip non-finalized records in panic
- printk: Disable passing console lock owner completely during panic()
- pwm: sti: Fix capture for st,pwm-num-chan < st,capture-num-chan
- tools/resolve_btfids: Refactor set sorting with types from btf_ids.h
- tools/resolve_btfids: Fix cross-compilation to non-host endianness
- wifi: iwlwifi: support EHT for WH
- wifi: iwlwifi: properly check if link is active
- wifi: iwlwifi: mvm: fix erroneous queue index mask
- wifi: iwlwifi: mvm: don't set the MFP flag for the GTK
- wifi: iwlwifi: mvm: don't set replay counters to 0xff
- s390/pai: fix attr_event_free upper limit for pai device drivers
- s390/vdso: drop '-fPIC' from LDFLAGS
- arm64: dts: qcom: qcm6490-idp: Correct the voltage setting for vph_pwr
- arm64: dts: qcom: qcs6490-rb3gen2: Correct the voltage setting for vph_pwr
- selftests: forwarding: Add missing config entries
- selftests: forwarding: Add missing multicast routing config entries
- arm64: dts: qcom: sm6115: drop pipe clock selection
- ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down()
- arm64: dts: mt8183: Move CrosEC base detection node to kukui-based DTs
- arm64: dts: mediatek: mt7986: fix reference to PWM in fan node
- arm64: dts: mediatek: mt7986: drop crypto's unneeded/invalid clock name
- arm64: dts: mediatek: mt7986: fix SPI bus width properties
- arm64: dts: mediatek: mt7986: fix SPI nodename
- arm64: dts: mediatek: mt7986: drop "#clock-cells" from PWM
- arm64: dts: mediatek: mt7986: add "#reset-cells" to infracfg
- arm64: dts: mediatek: mt8192-asurada: Remove CrosEC base detection node
- arm64: dts: mediatek: mt8192: fix vencoder clock name
- arm64: dts: mediatek: mt8186: fix VENC power domain clocks
- arm64: dts: mediatek: mt7622: add missing "device_type" to memory nodes
- can: m_can: Start/Cancel polling timer together with interrupts
- wifi: iwlwifi: mvm: Fix the listener MAC filter flags
- bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
- arm64: dts: qcom: sdm845: Use the Low Power Island CX/MX for SLPI
- soc: qcom: llcc: Check return value on Broadcast_OR reg read
- ARM: dts: qcom: msm8974: correct qfprom node size
- arm64: dts: mediatek: mt8186: Add missing clocks to ssusb power domains
- arm64: dts: mediatek: mt8186: Add missing xhci clock to usb controllers
- arm64: dts: ti: am65x: Fix dtbs_install for Rocktech OLDI overlay
- cpufreq: qcom-hw: add CONFIG_COMMON_CLK dependency
- wifi: wilc1000: prevent use-after-free on vif when cleaning up all
interfaces
- pwm: dwc: use pm_sleep_ptr() macro
- arm64: dts: ti: k3-am69-sk: fix PMIC interrupt number
- arm64: dts: ti: k3-j721e-sk: fix PMIC interrupt number
- arm64: dts: ti: k3-am62-main: disable usb lpm
- ACPI: processor_idle: Fix memory leak in acpi_processor_power_exit()
- bus: tegra-aconnect: Update dependency to ARCH_TEGRA
- iommu/amd: Mark interrupt as managed
- wifi: brcmsmac: avoid function pointer casts
- arm64: dts: qcom: sdm845-db845c: correct PCIe wake-gpios
- arm64: dts: qcom: sm8150: correct PCIe wake-gpios
- powercap: dtpm_cpu: Fix error check against freq_qos_add_request()
- net: ena: Remove ena_select_queue
- arm64: dts: ti: k3-j7200-common-proc-board: Modify Pinmux for wkup_uart0 and
mcu_uart0
- arm64: dts: ti: k3-j7200-common-proc-board: Remove clock-frequency from
mcu_uart0
- arm64: dts: ti: k3-j721s2-common-proc-board: Remove Pinmux for CTS and RTS
in wkup_uart0
- arm64: dts: ti: k3-j784s4-evm: Remove Pinmux for CTS and RTS in wkup_uart0
- arm64: dts: ti: k3-am64-main: Fix ITAP/OTAP values for MMC
- arm64: dts: mt8195-cherry-tomato: change watchdog reset boot flow
- arm64: dts: ti: Add common1 register space for AM65x SoC
- arm64: dts: ti: Add common1 register space for AM62x SoC
- firmware: arm_scmi: Fix double free in SMC transport cleanup path
- wifi: cfg80211: set correct param change count in ML element
- arm64: dts: ti: k3-j721e: Fix mux-reg-masks in hbmc_mux
- arm64: dts: ti: k3-j784s4-main: Fix mux-reg-masks in serdes_ln_ctrl
- arm64: dts: ti: k3-am62p: Fix memory ranges for DMSS
- wifi: wilc1000: revert reset line logic flip
- ARM: dts: arm: realview: Fix development chip ROM compatible value
- memory: tegra: Correct DLA client names
- wifi: mt76: mt7996: fix fw loading timeout
- wifi: mt76: mt7925: fix connect to 80211b mode fail in 2Ghz band
- wifi: mt76: mt7925: fix SAP no beacon issue in 5Ghz and 6Ghz band
- wifi: mt76: mt7925: fix mcu query command fail
- wifi: mt76: mt7925: fix wmm queue mapping
- wifi: mt76: mt7925: fix fw download fail
- wifi: mt76: mt7925: fix WoW failed in encrypted mode
- wifi: mt76: mt7925: fix the wrong header translation config
- wifi: mt76: mt7925: add flow to avoid chip bt function fail
- wifi: mt76: mt7925: add support to set ifs time by mcu command
- wifi: mt76: mt7925: update PCIe DMA settings
- wifi: mt76: mt7996: check txs format before getting skb by pid
- wifi: mt76: mt7996: fix TWT issues
- wifi: mt76: mt7996: fix incorrect interpretation of EHT MCS caps
- wifi: mt76: mt7996: fix HE beamformer phy cap for station vif
- wifi: mt76: mt7996: fix efuse reading issue
- wifi: mt76: mt7996: fix HIF_TXD_V2_1 value
- wifi: mt76: mt792x: fix ethtool warning
- wifi: mt76: mt7921e: fix use-after-free in free_irq()
- wifi: mt76: mt7925e: fix use-after-free in free_irq()
- wifi: mt76: mt7921: fix incorrect type conversion for CLC command
- wifi: mt76: mt792x: fix a potential loading failure of the 6Ghz channel
config from ACPI
- wifi: mt76: fix the issue of missing txpwr settings from ch153 to ch177
- arm64: dts: renesas: rzg2l: Add missing interrupts to IRQC nodes
- arm64: dts: renesas: r9a08g045: Add missing interrupts to IRQC node
- arm64: dts: renesas: rzg3s-smarc-som: Guard Ethernet IRQ GPIO hogs
- arm64: dts: renesas: r8a779a0: Correct avb[01] reg sizes
- arm64: dts: renesas: r8a779g0: Correct avb[01] reg sizes
- net: mctp: copy skb ext data when fragmenting
- pstore: inode: Only d_invalidate() is needed
- arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF
- ARM: dts: imx6dl-yapp4: Fix typo in the QCA switch register address
- ARM: dts: imx6dl-yapp4: Move the internal switch PHYs under the switch node
- arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M Plus eDM
SBC
- arm64: dts: imx8mp-evk: Fix hdmi at 3d node
- regulator: userspace-consumer: add module device table
- gpiolib: Pass consumer device through to core in
devm_fwnode_gpiod_get_index()
- arm64: dts: marvell: reorder crypto interrupts on Armada SoCs
- ACPI: resource: Do IRQ override on Lunnen Ground laptops
- ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override
- ACPI: scan: Fix device check notification handling
- arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu
- arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller
- arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s
- objtool: Fix UNWIND_HINT_{SAVE,RESTORE} across basic blocks
- x86, relocs: Ignore relocations in .notes section
- SUNRPC: fix a memleak in gss_import_v2_context
- SUNRPC: fix some memleaks in gssx_dec_option_array
- arm64: dts: qcom: sm8550: Fix SPMI channels size
- arm64: dts: qcom: sm8650: Fix SPMI channels size
- mmc: wmt-sdmmc: remove an incorrect release_mem_region() call in the .remove
function
- ACPI: CPPC: enable AMD CPPC V2 support for family 17h processors
- btrfs: fix race when detecting delalloc ranges during fiemap
- wifi: rtw88: 8821cu: Fix firmware upload fail
- wifi: rtw88: 8821c: Fix beacon loss and disconnect
- wifi: rtw88: 8821c: Fix false alarm count
- wifi: brcm80211: handle pmk_op allocation failure
- riscv: dts: starfive: jh7100: fix root clock names
- PCI: Make pci_dev_is_disconnected() helper public for other drivers
- iommu/vt-d: Don't issue ATS Invalidation request when device is disconnected
- iommu/vt-d: Use rbtree to track iommu probed devices
- iommu/vt-d: Improve ITE fault handling if target device isn't present
- iommu/vt-d: Use device rbtree in iopf reporting path
- iommu: Add static iommu_ops->release_domain
- iommu/vt-d: Fix NULL domain on device release
- igc: Fix missing time sync events
- igb: Fix missing time sync events
- ice: fix stats being updated by way too large values
- Bluetooth: Remove HCI_POWER_OFF_TIMEOUT
- Bluetooth: mgmt: Remove leftover queuing of power_off work
- Bluetooth: Remove superfluous call to hci_conn_check_pending()
- Bluetooth: Remove BT_HS
- Bluetooth: hci_event: Fix not indicating new connection for BIG Sync
- Bluetooth: hci_qca: don't use IS_ERR_OR_NULL() with gpiod_get_optional()
- Bluetooth: hci_core: Cancel request on command timeout
- Bluetooth: hci_sync: Fix overwriting request callback
- Bluetooth: hci_h5: Add ability to allocate memory for private data
- Bluetooth: btrtl: fix out of bounds memory access
- Bluetooth: hci_core: Fix possible buffer overflow
- Bluetooth: msft: Fix memory leak
- Bluetooth: btusb: Fix memory leak
- Bluetooth: af_bluetooth: Fix deadlock
- Bluetooth: fix use-after-free in accessing skb after sending it
- sr9800: Add check for usbnet_get_endpoints
- s390/cache: prevent rebuild of shared_cpu_list
- bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
- bpf: Fix hashtab overflow check on 32-bit arches
- bpf: Fix stackmap overflow check on 32-bit arches
- net: dsa: microchip: make sure drive strength configuration is not lost by
soft reset
- dpll: spec: use proper enum for pin capabilities attribute
- iommu: Fix compilation without CONFIG_IOMMU_INTEL
- ipv6: fib6_rules: flush route cache when rule is changed
- net: ip_tunnel: make sure to pull inner header in ip_tunnel_rcv()
- octeontx2-af: Fix devlink params
- net: phy: fix phy_get_internal_delay accessing an empty array
- dpll: fix dpll_xa_ref_*_del() for multiple registrations
- net: hns3: fix wrong judgment condition issue
- net: hns3: fix kernel crash when 1588 is received on HIP08 devices
- net: hns3: fix port duplex configure error in IMP reset
- Bluetooth: Fix eir name length
- net: phy: dp83822: Fix RGMII TX delay configuration
- erofs: fix lockdep false positives on initializing erofs_pseudo_mnt
- OPP: debugfs: Fix warning around icc_get_name()
- tcp: fix incorrect parameter validation in the do_tcp_getsockopt() function
- ipmr: fix incorrect parameter validation in the ip_mroute_getsockopt()
function
- l2tp: fix incorrect parameter validation in the pppol2tp_getsockopt()
function
- udp: fix incorrect parameter validation in the udp_lib_getsockopt() function
- net: kcm: fix incorrect parameter validation in the kcm_getsockopt) function
- net/x25: fix incorrect parameter validation in the x25_getsockopt() function
- devlink: Fix length of eswitch inline-mode
- r8152: fix unknown device for choose_configuration
- nfp: flower: handle acti_netdevs allocation failure
- bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes()
- dm raid: fix false positive for requeue needed during reshape
- dm: call the resume method on internal suspend
- fbdev/simplefb: change loglevel when the power domains cannot be parsed
- drm/tegra: dsi: Add missing check for of_find_device_by_node
- drm/tegra: dpaux: Fix PM disable depth imbalance in tegra_dpaux_probe
- drm/tegra: dsi: Fix some error handling paths in tegra_dsi_probe()
- drm/tegra: dsi: Fix missing pm_runtime_disable() in the error handling path
of tegra_dsi_probe()
- drm/tegra: hdmi: Fix some error handling paths in tegra_hdmi_probe()
- drm/tegra: rgb: Fix some error handling paths in tegra_dc_rgb_probe()
- drm/tegra: rgb: Fix missing clk_put() in the error handling paths of
tegra_dc_rgb_probe()
- drm/tegra: output: Fix missing i2c_put_adapter() in the error handling paths
of tegra_output_probe()
- drm/rockchip: inno_hdmi: Fix video timing
- drm: Don't treat 0 as -1 in drm_fixp2int_ceil
- drm/vkms: Avoid reading beyond LUT array
- drm/vmwgfx: fix a memleak in vmw_gmrid_man_get_node
- drm/rockchip: lvds: do not overwrite error code
- drm/rockchip: lvds: do not print scary message when probing defer
- drm/panel-edp: use put_sync in unprepare
- drm/lima: fix a memleak in lima_heap_alloc
- ASoC: amd: acp: Add missing error handling in sof-mach
- ASoC: SOF: amd: Fix memory leak in amd_sof_acp_probe()
- ASoC: SOF: core: Skip firmware test for custom loaders
- ASoC: SOF: amd: Compute file paths on firmware load
- soundwire: stream: add missing const to Documentation
- dmaengine: tegra210-adma: Update dependency to ARCH_TEGRA
- media: tc358743: register v4l2 async device only after successful setup
- media: cadence: csi2rx: use match fwnode for media link
- PCI/DPC: Print all TLP Prefixes, not just the first
- perf record: Fix possible incorrect free in record__switch_output()
- perf record: Check conflict between '--timestamp-filename' option and pipe
mode before recording
- HID: lenovo: Add middleclick_workaround sysfs knob for cptkbd
- drm/amd/display: Fix a potential buffer overflow in 'dp_dsc_clock_en_read()'
- perf pmu: Treat the msr pmu as software
- crypto: qat - avoid memcpy() overflow warning
- ALSA: hda: cs35l41: Set Channel Index correctly when system is missing _DSD
- drm/amd/display: Fix potential NULL pointer dereferences in
'dcn10_set_output_transfer_func()'
- ASoC: sh: rz-ssi: Fix error message print
- drm/vmwgfx: Fix vmw_du_get_cursor_mob fencing of newly-created MOBs
- clk: renesas: r8a779g0: Fix PCIe clock name
- pinctrl: renesas: rzg2l: Fix locking in rzg2l_dt_subnode_to_map()
- pinctrl: renesas: r8a779g0: Add missing SCIF_CLK2 pin group/function
- clk: samsung: exynos850: Propagate SPI IPCLK rate change
- media: v4l2: cci: print leading 0 on error
- perf evsel: Fix duplicate initialization of data->id in
evsel__parse_sample()
- perf bpf: Clean up the generated/copied vmlinux.h
- clk: meson: Add missing clocks to axg_clk_regmaps
- media: em28xx: annotate unchecked call to media_device_register()
- media: v4l2-tpg: fix some memleaks in tpg_alloc
- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
- media: dt-bindings: techwell,tw9900: Fix port schema ref
- mtd: spinand: esmt: Extend IDs to 5 bytes
- media: edia: dvbdev: fix a use-after-free
- pinctrl: mediatek: Drop bogus slew rate register range for MT8186
- pinctrl: mediatek: Drop bogus slew rate register range for MT8192
- drm/amdgpu: Fix potential out-of-bounds access in
'amdgpu_discovery_reg_base_init()'
- clk: qcom: reset: Commonize the de/assert functions
- clk: qcom: reset: Ensure write completion on reset de/assertion
- quota: Fix potential NULL pointer dereference
- quota: Fix rcu annotations of inode dquot pointers
- quota: Properly annotate i_dquot arrays with __rcu
- ASoC: Intel: ssp-common: Add stub for sof_ssp_get_codec_name
- PCI/P2PDMA: Fix a sleeping issue in a RCU read section
- PCI: switchtec: Fix an error handling path in switchtec_pci_probe()
- crypto: xilinx - call finalize with bh disabled
- drivers/ps3: select VIDEO to provide cmdline functions
- perf thread_map: Free strlist on normal path in thread_map__new_by_tid_str()
- perf srcline: Add missed addr2line closes
- dt-bindings: msm: qcom, mdss: Include ommited fam-b compatible
- drm/msm/dpu: fix the programming of INTF_CFG2_DATA_HCTL_EN
- drm/msm/dpu: Only enable DSC_MODE_MULTIPLEX if dsc_merge is enabled
- drm/radeon/ni: Fix wrong firmware size logging in ni_init_microcode()
- drm/amd/display: fix NULL checks for adev->dm.dc in amdgpu_dm_fini()
- clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks
- clk: renesas: r8a779f0: Correct PFC/GPIO parent clock
- clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1
mux
- ALSA: seq: fix function cast warnings
- perf expr: Fix "has_event" function for metric style events
- perf stat: Avoid metric-only segv
- perf metric: Don't remove scale from counts
- ASoC: meson: aiu: fix function pointer type mismatch
- ASoC: meson: t9015: fix function pointer type mismatch
- powerpc: Force inlining of arch_vmap_p{u/m}d_supported()
- ASoC: SOF: Add some bounds checking to firmware data
- drm: ci: use clk_ignore_unused for apq8016
- NTB: fix possible name leak in ntb_register_device()
- media: cedrus: h265: Fix configuring bitstream size
- media: sun8i-di: Fix coefficient writes
- media: sun8i-di: Fix power on/off sequences
- media: sun8i-di: Fix chroma difference threshold
- staging: media: starfive: Set 16 bpp for capture_raw device
- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
- media: go7007: add check of return value of go7007_read_addr()
- media: pvrusb2: remove redundant NULL check
- media: videobuf2: Add missing doc comment for waiting_in_dqbuf
- media: pvrusb2: fix pvr2_stream_callback casts
- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
- drm/amd/display: Add 'replay' NULL check in 'edp_set_replay_allow_active()'
- drm/panel: boe-tv101wum-nl6: make use of prepare_prev_first
- drm/msm/dpu: finalise global state object
- drm/mediatek: dsi: Fix DSI RGB666 formats and definitions
- PCI: Mark 3ware-9650SE Root Port Extended Tags as broken
- drm/bridge: adv7511: fix crash on irq during probe
- pinctrl: renesas: Allow the compiler to optimize away sh_pfc_pm
- clk: hisilicon: hi3519: Release the correct number of gates in
hi3519_clk_unregister()
- clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
- clk: mediatek: mt8135: Fix an error handling path in
clk_mt8135_apmixed_probe()
- clk: mediatek: mt7622-apmixedsys: Fix an error handling path in
clk_mt8135_apmixed_probe()
- clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF
- clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical
- drm/tegra: put drm_gem_object ref on error in tegra_fb_create
- tty: mips_ejtag_fdc: Fix passing incompatible pointer type warning
- media: ivsc: csi: Swap SINK and SOURCE pads
- media: i2c: imx290: Fix IMX920 typo
- mfd: syscon: Call of_node_put() only when of_parse_phandle() takes a ref
- mfd: altera-sysmgr: Call of_node_put() only when of_parse_phandle() takes a
ref
- perf print-events: make is_event_supported() more robust
- crypto: arm/sha - fix function cast warnings
- crypto: ccp - Avoid discarding errors in psp_send_platform_access_msg()
- crypto: qat - remove unused macros in qat_comp_alg.c
- crypto: qat - removed unused macro in adf_cnv_dbgfs.c
- crypto: qat - avoid division by zero
- crypto: qat - remove double initialization of value
- crypto: qat - fix ring to service map for dcc in 4xxx
- crypto: qat - fix ring to service map for dcc in 420xx
- crypto: jitter - fix CRYPTO_JITTERENTROPY help text
- drm/tidss: Fix initial plane zpos values
- drm/tidss: Fix sync-lost issue with two displays
- clk: imx: imx8mp: Fix SAI_MCLK_SEL definition
- mtd: maps: physmap-core: fix flash size larger than 32-bit
- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
- mtd: rawnand: brcmnand: exec_op helper functions return type fixes
- ASoC: meson: axg-tdm-interface: fix mclk setup without mclk-fs
- ASoC: meson: axg-tdm-interface: add frame rate constraint
- drm/msm/a6xx: specify UBWC config for sc7180
- drm/msm/a7xx: Fix LLC typo
- dt-bindings: arm-smmu: fix SM8[45]50 GPU SMMU if condition
- perf pmu: Fix a potential memory leak in perf_pmu__lookup()
- HID: amd_sfh: Update HPD sensor structure elements
- HID: amd_sfh: Avoid disabling the interrupt
- drm/amdgpu: Fix missing break in ATOM_ARG_IMM Case of atom_get_src_int()
- media: pvrusb2: fix uaf in pvr2_context_set_notify
- media: dvb-frontends: avoid stack overflow warnings with clang
- media: go7007: fix a memleak in go7007_load_encoder
- media: ttpci: fix two memleaks in budget_av_attach
- media: mediatek: vcodec: avoid -Wcast-function-type-strict warning
- arm64: ftrace: Don't forbid CALL_OPS+CC_OPTIMIZE_FOR_SIZE with Clang
- drm/tests: helpers: Include missing drm_drv header
- drm/amd/pm: Fix esm reg mask use to get pcie speed
- gpio: nomadik: fix offset bug in nmk_pmx_set()
- drm/mediatek: Fix a null pointer crash in mtk_drm_crtc_finish_page_flip
- mfd: cs42l43: Fix wrong register defaults
- powerpc/32: fix ADB_CUDA kconfig warning
- powerpc/pseries: Fix potential memleak in papr_get_attr()
- powerpc/hv-gpci: Fix the H_GET_PERF_COUNTER_INFO hcall return value checks
- clk: qcom: gcc-ipq5018: fix 'enable_reg' offset of 'gcc_gmac0_sys_clk'
- clk: qcom: gcc-ipq5018: fix 'halt_reg' offset of 'gcc_pcie1_pipe_clk'
- clk: qcom: gcc-ipq5018: fix register offset for GCC_UBI0_AXI_ARES reset
- perf vendor events amd: Fix Zen 4 cache latency events
- drm/msm/dpu: allow certain formats for CDM for DP
- drm/msm/dpu: add division of drm_display_mode's hskew parameter
- media: usbtv: Remove useless locks in usbtv_video_free()
- drm/xe: Fix ref counting leak on page fault
- drm/xe: Replace 'grouped target' in Makefile with pattern rule
- lib/stackdepot: fix first entry having a 0-handle
- lib/stackdepot: off by one in depot_fetch_stack()
- modules: wait do_free_init correctly
- mfd: cs42l43: Fix wrong GPIO_FN_SEL and SPI_CLK_CONFIG1 defaults
- power: supply: mm8013: fix "not charging" detection
- powerpc/embedded6xx: Fix no previous prototype for avr_uart_send() etc.
- powerpc/4xx: Fix warp_gpio_leds build failure
- RISC-V: KVM: Forward SEED CSR access to user space
- leds: aw2013: Unlock mutex before destroying it
- leds: sgm3140: Add missing timer cleanup and flash gpio control
- backlight: hx8357: Fix potential NULL pointer dereference
- backlight: ktz8866: Correct the check for of_property_read_u32
- backlight: lm3630a: Initialize backlight_properties on init
- backlight: lm3630a: Don't set bl->props.brightness in get_brightness
- backlight: da9052: Fully initialize backlight_properties during probe
- backlight: lm3639: Fully initialize backlight_properties during probe
- backlight: lp8788: Fully initialize backlight_properties during probe
- sparc32: Use generic cmpdi2/ucmpdi2 variants
- mtd: maps: sun_uflash: Declare uflash_devinit static
- sparc32: Do not select GENERIC_ISA_DMA
- sparc32: Fix section mismatch in leon_pci_grpci
- clk: Fix clk_core_get NULL dereference
- clk: zynq: Prevent null pointer dereference caused by kmalloc failure
- PCI: brcmstb: Fix broken brcm_pcie_mdio_write() polling
- cifs: Fix writeback data corruption
- ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
- ALSA: hda/tas2781: use dev_dbg in system_resume
- ALSA: hda/tas2781: add lock to system_suspend
- ALSA: hda/tas2781: do not reset cur_* values in runtime_suspend
- ALSA: hda/tas2781: do not call pm_runtime_force_* in system_resume/suspend
- ALSA: hda/tas2781: restore power state after system_resume
- ALSA: scarlett2: Fix Scarlett 4th Gen 4i4 low-voltage detection
- ALSA: scarlett2: Fix Scarlett 4th Gen autogain status values
- ALSA: scarlett2: Fix Scarlett 4th Gen input gain range
- ALSA: scarlett2: Fix Scarlett 4th Gen input gain range again
- mips: cm: Convert __mips_cm_l2sync_phys_base() to weak function
- platform/x86/intel/pmc/lnl: Remove SSRAM support
- platform/x86/intel/pmc/arl: Put GNA device in D3
- platform/x86/amd/pmf: Do not use readl() for policy buffer access
- ALSA: usb-audio: Stop parsing channels bits when all channels are found.
- phy: qcom: qmp-usb: split USB-C PHY driver
- phy: qcom: qmp-usbc: add support for the Type-C handling
- phy: qcom: qmp-usbc: handle CLAMP register in a correct way
- scsi: hisi_sas: Fix a deadlock issue related to automatic dump
- RDMA/irdma: Remove duplicate assignment
- RDMA/srpt: Do not register event handler until srpt device is fully setup
- f2fs: compress: fix to guarantee persisting compressed blocks by CP
- f2fs: compress: fix to cover normal cluster write with cp_rwsem
- f2fs: compress: fix to check unreleased compressed cluster
- f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode
- f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic
- f2fs: zone: fix to wait completion of last bio in zone correctly
- f2fs: fix NULL pointer dereference in f2fs_submit_page_write()
- f2fs: compress: fix to cover f2fs_disable_compressed_file() w/ i_sem
- f2fs: fix to avoid potential panic during recovery
- scsi: csiostor: Avoid function pointer casts
- i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling
- RDMA/hns: Fix mis-modifying default congestion control algorithm
- RDMA/device: Fix a race between mad_client and cm_client init
- RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store()
- scsi: bfa: Fix function pointer type mismatch for hcb_qe->cbfn
- f2fs: fix to create selinux label during whiteout initialization
- f2fs: compress: fix to check zstd compress level correctly in mount option
- net: sunrpc: Fix an off by one in rpc_sockaddr2uaddr()
- NFSv4.2: fix nfs4_listxattr kernel BUG at mm/usercopy.c:102
- NFSv4.2: fix listxattr maximum XDR buffer size
- f2fs: compress: fix to check compress flag w/ .i_sem lock
- f2fs: check number of blocks in a current section
- watchdog: starfive: Check pm_runtime_enabled() before decrementing usage
counter
- watchdog: stm32_iwdg: initialize default timeout
- f2fs: fix to use correct segment type in f2fs_allocate_data_block()
- f2fs: ro: compress: fix to avoid caching unaligned extent
- RDMA/mana_ib: Fix bug in creation of dma regions
- RDMA/mana_ib: Introduce mdev_to_gc helper function
- RDMA/mana_ib: Introduce mana_ib_get_netdev helper function
- RDMA/mana_ib: Introduce mana_ib_install_cq_cb helper function
- RDMA/mana_ib: Use virtual address in dma regions for MRs
- Input: iqs7222 - add support for IQS7222D v1.1 and v1.2
- NFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt
- NFS: Fix an off by one in root_nfs_cat()
- NFSv4.1/pnfs: fix NFS with TLS in pnfs
- ACPI: HMAT: Remove register of memory node for generic target
- f2fs: compress: relocate some judgments in f2fs_reserve_compress_blocks
- f2fs: compress: fix reserve_cblocks counting error when out of space
- f2fs: fix to truncate meta inode pages forcely
- f2fs: zone: fix to remove pow2 check condition for zoned block device
- cxl: Fix the incorrect assignment of SSLBIS entry pointer initial location
- perf/x86/amd/core: Avoid register reset when CPU is dead
- afs: Revert "afs: Hide silly-rename files from userspace"
- afs: Don't cache preferred address
- afs: Fix occasional rmdir-then-VNOVNODE with generic/011
- f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
- nfs: fix panic when nfs4_ff_layout_prepare_ds() fails
- ovl: relax WARN_ON in ovl_verify_area()
- io_uring/net: correct the type of variable
- remoteproc: stm32: Fix incorrect type in assignment for va
- remoteproc: stm32: Fix incorrect type assignment returned by
stm32_rproc_get_loaded_rsc_tablef
- iio: pressure: mprls0025pa fix off-by-one enum
- usb: phy: generic: Get the vbus supply
- tty: vt: fix 20 vs 0x20 typo in EScsiignore
- serial: max310x: fix syntax error in IRQ error message
- tty: serial: samsung: fix tx_empty() to return TIOCSER_TEMT
- arm64: dts: broadcom: bcmbca: bcm4908: drop invalid switch cells
- coresight: Fix issue where a source device's helpers aren't disabled
- coresight: etm4x: Set skip_power_up in etm4_init_arch_data function
- xhci: Add interrupt pending autoclear flag to each interrupter
- xhci: make isoc_bei_interval variable interrupter specific.
- xhci: remove unnecessary event_ring_deq parameter from xhci_handle_event()
- xhci: update event ring dequeue pointer position to controller correctly
- coccinelle: device_attr_show: Remove useless expression STR
- kconfig: fix infinite loop when expanding a macro at the end of file
- iio: gts-helper: Fix division loop
- bus: mhi: ep: check the correct variable in mhi_ep_register_controller()
- hwtracing: hisi_ptt: Move type check to the beginning of
hisi_ptt_pmu_event_init()
- rtc: mt6397: select IRQ_DOMAIN instead of depending on it
- rtc: max31335: fix interrupt status reg
- serial: 8250_exar: Don't remove GPIO device on suspend
- staging: greybus: fix get_channel_from_mode() failure path
- mei: vsc: Call wake_up() in the threaded IRQ handler
- mei: vsc: Don't use sleeping condition in wait_event_timeout()
- usb: gadget: net2272: Use irqflags in the call to net2272_probe_fin
- char: xilinx_hwicap: Fix NULL vs IS_ERR() bug
- x86/hyperv: Use per cpu initial stack for vtl context
- ASoC: tlv320adc3xxx: Don't strip remove function when driver is builtin
- thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in an error
handling path
- thermal/drivers/qoriq: Fix getting tmu range
- io_uring: don't save/restore iowait state
- spi: lpspi: Avoid potential use-after-free in probe()
- spi: Restore delays for non-GPIO chip select
- ASoC: rockchip: i2s-tdm: Fix inaccurate sampling rates
- nouveau: reset the bo resource bus info after an eviction
- tcp: Fix NEW_SYN_RECV handling in inet_twsk_purge()
- rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
- octeontx2-af: Use matching wake_up API variant in CGX command interface
- s390/vtime: fix average steal time calculation
- net/sched: taprio: proper TCA_TAPRIO_TC_ENTRY_INDEX check
- devlink: Fix devlink parallel commands processing
- riscv: Only check online cpus for emulated accesses
- soc: fsl: dpio: fix kcalloc() argument order
- cpufreq: Fix per-policy boost behavior on SoCs using cpufreq_boost_set_sw()
- io_uring: Fix release of pinned pages when __io_uaddr_map fails
- tcp: Fix refcnt handling in __inet_hash_connect().
- vmxnet3: Fix missing reserved tailroom
- hsr: Fix uninit-value access in hsr_get_node()
- net: txgbe: fix clk_name exceed MAX_DEV_ID limits
- spi: spi-mem: add statistics support to ->exec_op() calls
- spi: Fix error code checking in spi_mem_exec_op()
- nvme: fix reconnection fail due to reserved tag allocation
- drm/xe: Invalidate userptr VMA on page pin fault
- drm/xe: Skip VMAs pin when requesting signal to the last XE_EXEC
- net: mediatek: mtk_eth_soc: clear MAC_MCR_FORCE_LINK only when MAC is up
- net: ethernet: mtk_eth_soc: fix PPE hanging issue
- io_uring: fix poll_remove stalled req completion
- ASoC: SOF: amd: Move signed_fw_image to struct acp_quirk_entry
- ASoC: SOF: amd: Skip IRAM/DRAM size modification for Steam Deck OLED
- riscv: Fix compilation error with FAST_GUP and rv32
- xen/evtchn: avoid WARN() when unbinding an event channel
- xen/events: increment refcnt only if event channel is refcounted
- packet: annotate data-races around ignore_outgoing
- xfrm: Allow UDP encapsulation only in offload modes
- net: veth: do not manipulate GRO when using XDP
- net: dsa: mt7530: prevent possible incorrect XTAL frequency selection
- spi: spi-imx: fix off-by-one in mx51 CPU mode burst length
- drm: Fix drm_fixp2int_round() making it add 0.5
- virtio: uapi: Drop __packed attribute in linux/virtio_pci.h
- vdpa_sim: reset must not run
- vdpa/mlx5: Allow CVQ size changes
- virtio: packed: fix unmap leak for indirect desc table
- net: move dev->state into net_device_read_txrx group
- wireguard: receive: annotate data-race around receiving_counter.counter
- rds: introduce acquire/release ordering in acquire/release_in_xmit()
- hsr: Handle failures in module init
- ipv4: raw: Fix sending packets from raw sockets via IPsec tunnels
- nouveau/gsp: don't check devinit disable on GSP.
- ceph: stop copying to iter at EOF on sync reads
- net: phy: fix phy_read_poll_timeout argument type in genphy_loopback
- dm-integrity: fix a memory leak when rechecking the data
- net/bnx2x: Prevent access to a freed page in page_pool
- devlink: fix port new reply cmd type
- octeontx2: Detect the mbox up or down message via register
- octeontx2-pf: Wait till detach_resources msg is complete
- octeontx2-pf: Use default max_active works instead of one
- octeontx2-pf: Send UP messages to VF only when VF is up.
- octeontx2-af: Use separate handlers for interrupts
- drm/amdgpu: add MMHUB 3.3.1 support
- drm/amdgpu: fix mmhub client id out-of-bounds access
- drm/amdgpu: drop setting buffer funcs in sdma442
- netfilter: nft_set_pipapo: release elements in clone only from destroy path
- netfilter: nf_tables: do not compare internal table flags on updates
- rcu: add a helper to report consolidated flavor QS
- net: report RCU QS on threaded NAPI repolling
- bpf: report RCU QS in cpumap kthread
- net: dsa: mt7530: fix link-local frames that ingress vlan filtering ports
- net: dsa: mt7530: fix handling of all link-local frames
- netfilter: nf_tables: Fix a memory leak in nf_tables_updchain
- spi: spi-mt65xx: Fix NULL pointer access in interrupt handler
- selftests: forwarding: Fix ping failure due to short timeout
- dm io: Support IO priority
- dm-integrity: align the outgoing bio in integrity_recheck
- x86/efistub: Clear decompressor BSS in native EFI entrypoint
- x86/efistub: Don't clear BSS twice in mixed mode
- printk: Adjust mapping for 32bit seq macros
- printk: Use prb_first_seq() as base for 32bit seq macros
- Linux 6.8.2
- [Config] updateconfig following v6.8.2 import
* Provide python perf module (LP: #2051560)
- [Packaging] enable perf python module
- [Packaging] provide a wrapper module for python-perf
* To support AMD Adaptive Backlight Management (ABM) for power profiles daemon
>= 2.0 (LP: #2056716)
- drm/amd/display: add panel_power_savings sysfs entry to eDP connectors
- drm/amdgpu: respect the abmlevel module parameter value if it is set
* Miscellaneous Ubuntu changes
- [Config] Disable StarFive JH7100 support
- [Config] Disable Renesas RZ/Five support
- [Config] Disable BINFMT_FLAT for riscv64
[ Ubuntu: 6.8.0-31.31 ]
* noble/linux: 6.8.0-31.31 -proposed tracker (LP: #2062933)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/d2024.04.04)
[ Ubuntu: 6.8.0-30.30 ]
* noble/linux: 6.8.0-30.30 -proposed tracker (LP: #2061893)
* System unstable, kernel ring buffer flooded with "BUG: Bad page state in
process swapper/0" (LP: #2056706)
- xen-netfront: Add missing skb_mark_for_recycle
[ Ubuntu: 6.8.0-29.29 ]
* noble/linux: 6.8.0-29.29 -proposed tracker (LP: #2061888)
* [24.04 FEAT] [SEC2353] zcrypt: extend error recovery to deal with device
scans (LP: #2050019)
- s390/zcrypt: harmonize debug feature calls and defines
- s390/zcrypt: introduce dynamic debugging for AP and zcrypt code
- s390/pkey: harmonize pkey s390 debug feature calls
- s390/pkey: introduce dynamic debugging for pkey
- s390/ap: add debug possibility for AP messages
- s390/zcrypt: add debug possibility for CCA and EP11 messages
- s390/ap: rearm APQNs bindings complete completion
- s390/ap: clarify AP scan bus related functions and variables
- s390/ap: rework ap_scan_bus() to return true on config change
- s390/ap: introduce mutex to lock the AP bus scan
- s390/zcrypt: introduce retries on in-kernel send CPRB functions
- s390/zcrypt: improve zcrypt retry behavior
- s390/pkey: improve pkey retry behavior
* [24.04 FEAT] Memory hotplug vmem pages (s390x) (LP: #2051835)
- mm/memory_hotplug: introduce MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers
- s390/mm: allocate vmemmap pages from self-contained memory range
- s390/sclp: remove unhandled memory notifier type
- s390/mm: implement MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers
- s390: enable MHP_MEMMAP_ON_MEMORY
- [Config] enable CONFIG_ARCH_MHP_MEMMAP_ON_MEMORY_ENABLE and
CONFIG_MHP_MEMMAP_ON_MEMORY for s390x
[ Ubuntu: 6.8.0-28.28 ]
* noble/linux: 6.8.0-28.28 -proposed tracker (LP: #2061867)
* linux-gcp 6.8.0-1005.5 (+ others) Noble kernel regression iwth new apparmor
profiles/features (LP: #2061851)
- SAUCE: apparmor4.0.0 [92/90]: fix address mapping for recvfrom
[ Ubuntu: 6.8.0-25.25 ]
* noble/linux: 6.8.0-25.25 -proposed tracker (LP: #2061083)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/d2024.04.04)
* Apply mitigations for the native BHI hardware vulnerabilty (LP: #2060909)
- x86/cpufeatures: Add new word for scattered features
- x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
- x86/syscall: Don't force use of indirect calls for system calls
- x86/bhi: Add support for clearing branch history at syscall entry
- x86/bhi: Define SPEC_CTRL_BHI_DIS_S
- x86/bhi: Enumerate Branch History Injection (BHI) bug
- x86/bhi: Add BHI mitigation knob
- x86/bhi: Mitigate KVM by default
- KVM: x86: Add BHI_NO
- x86: set SPECTRE_BHI_ON as default
- [Config] enable spectre_bhi=auto by default
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [01/90]: LSM stacking v39: integrity: disassociate
ima_filter_rule from security_audit_rule
- SAUCE: apparmor4.0.0 [02/90]: LSM stacking v39: SM: Infrastructure
management of the sock security
- SAUCE: apparmor4.0.0 [03/90]: LSM stacking v39: LSM: Add the lsmblob data
structure.
- SAUCE: apparmor4.0.0 [04/90]: LSM stacking v39: IMA: avoid label collisions
with stacked LSMs
- SAUCE: apparmor4.0.0 [05/90]: LSM stacking v39: LSM: Use lsmblob in
security_audit_rule_match
- SAUCE: apparmor4.0.0 [06/90]: LSM stacking v39: LSM: Add lsmblob_to_secctx
hook
- SAUCE: apparmor4.0.0 [07/90]: LSM stacking v39: Audit: maintain an lsmblob
in audit_context
- SAUCE: apparmor4.0.0 [08/90]: LSM stacking v39: LSM: Use lsmblob in
security_ipc_getsecid
- SAUCE: apparmor4.0.0 [09/90]: LSM stacking v39: Audit: Update shutdown LSM
data
- SAUCE: apparmor4.0.0 [10/90]: LSM stacking v39: LSM: Use lsmblob in
security_current_getsecid
- SAUCE: apparmor4.0.0 [11/90]: LSM stacking v39: LSM: Use lsmblob in
security_inode_getsecid
- SAUCE: apparmor4.0.0 [12/90]: LSM stacking v39: Audit: use an lsmblob in
audit_names
- SAUCE: apparmor4.0.0 [13/90]: LSM stacking v39: LSM: Create new
security_cred_getlsmblob LSM hook
- SAUCE: apparmor4.0.0 [14/90]: LSM stacking v39: Audit: Change context data
from secid to lsmblob
- SAUCE: apparmor4.0.0 [15/90]: LSM stacking v39: Netlabel: Use lsmblob for
audit data
- SAUCE: apparmor4.0.0 [16/90]: LSM stacking v39: LSM: Ensure the correct LSM
context releaser
- SAUCE: apparmor4.0.0 [17/90]: LSM stacking v39: LSM: Use lsmcontext in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [18/90]: LSM stacking v39: LSM: Use lsmcontext in
security_lsmblob_to_secctx
- SAUCE: apparmor4.0.0 [19/90]: LSM stacking v39: LSM: Use lsmcontext in
security_inode_getsecctx
- SAUCE: apparmor4.0.0 [20/90]: LSM stacking v39: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: apparmor4.0.0 [21/90]: LSM stacking v39: LSM:
security_lsmblob_to_secctx module selection
- SAUCE: apparmor4.0.0 [22/90]: LSM stacking v39: Audit: Create audit_stamp
structure
- SAUCE: apparmor4.0.0 [23/90]: LSM stacking v39: Audit: Allow multiple
records in an audit_buffer
- SAUCE: apparmor4.0.0 [24/90]: LSM stacking v39: Audit: Add record for
multiple task security contexts
- SAUCE: apparmor4.0.0 [25/90]: LSM stacking v39: audit: multiple subject lsm
values for netlabel
- SAUCE: apparmor4.0.0 [26/90]: LSM stacking v39: Audit: Add record for
multiple object contexts
- SAUCE: apparmor4.0.0 [27/90]: LSM stacking v39: LSM: Remove unused
lsmcontext_init()
- SAUCE: apparmor4.0.0 [28/90]: LSM stacking v39: LSM: Improve logic in
security_getprocattr
- SAUCE: apparmor4.0.0 [29/90]: LSM stacking v39: LSM: secctx provider check
on release
- SAUCE: apparmor4.0.0 [31/90]: LSM stacking v39: LSM: Exclusive secmark usage
- SAUCE: apparmor4.0.0 [32/90]: LSM stacking v39: LSM: Identify which LSM
handles the context string
- SAUCE: apparmor4.0.0 [33/90]: LSM stacking v39: AppArmor: Remove the
exclusive flag
- SAUCE: apparmor4.0.0 [34/90]: LSM stacking v39: LSM: Add mount opts blob
size tracking
- SAUCE: apparmor4.0.0 [35/90]: LSM stacking v39: LSM: allocate mnt_opts blobs
instead of module specific data
- SAUCE: apparmor4.0.0 [36/90]: LSM stacking v39: LSM: Infrastructure
management of the key security blob
- SAUCE: apparmor4.0.0 [37/90]: LSM stacking v39: LSM: Infrastructure
management of the mnt_opts security blob
- SAUCE: apparmor4.0.0 [38/90]: LSM stacking v39: LSM: Correct handling of
ENOSYS in inode_setxattr
- SAUCE: apparmor4.0.0 [39/90]: LSM stacking v39: LSM: Remove lsmblob
scaffolding
- SAUCE: apparmor4.0.0 [40/90]: LSM stacking v39: LSM: Allow reservation of
netlabel
- SAUCE: apparmor4.0.0 [41/90]: LSM stacking v39: LSM: restrict
security_cred_getsecid() to a single LSM
- SAUCE: apparmor4.0.0 [42/90]: LSM stacking v39: Smack: Remove
LSM_FLAG_EXCLUSIVE
- SAUCE: apparmor4.0.0 [43/90]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
[12/95]: add/use fns to print hash string hex value
- SAUCE: apparmor4.0.0 [44/90]: patch to provide compatibility with v2.x net
rules
- SAUCE: apparmor4.0.0 [45/90]: add unpriviled user ns mediation
- SAUCE: apparmor4.0.0 [46/90]: Add sysctls for additional controls of unpriv
userns restrictions
- SAUCE: apparmor4.0.0 [47/90]: af_unix mediation
- SAUCE: apparmor4.0.0 [48/90]: Add fine grained mediation of posix mqueues
- SAUCE: apparmor4.0.0 [49/90]: setup slab cache for audit data
- SAUCE: apparmor4.0.0 [50/90]: Improve debug print infrastructure
- SAUCE: apparmor4.0.0 [51/90]: add the ability for profiles to have a
learning cache
- SAUCE: apparmor4.0.0 [52/90]: enable userspace upcall for mediation
- SAUCE: apparmor4.0.0 [53/90]: prompt - lock down prompt interface
- SAUCE: apparmor4.0.0 [54/90]: prompt - allow controlling of caching of a
prompt response
- SAUCE: apparmor4.0.0 [55/90]: prompt - add refcount to audit_node in prep or
reuse and delete
- SAUCE: apparmor4.0.0 [56/90]: prompt - refactor to moving caching to
uresponse
- SAUCE: apparmor4.0.0 [57/90]: prompt - Improve debug statements
- SAUCE: apparmor4.0.0 [58/90]: prompt - fix caching
- SAUCE: apparmor4.0.0 [59/90]: prompt - rework build to use append fn, to
simplify adding strings
- SAUCE: apparmor4.0.0 [60/90]: prompt - refcount notifications
- SAUCE: apparmor4.0.0 [61/90]: prompt - add the ability to reply with a
profile name
- SAUCE: apparmor4.0.0 [62/90]: prompt - fix notification cache when updating
- SAUCE: apparmor4.0.0 [63/90]: prompt - add tailglob on name for cache
support
- SAUCE: apparmor4.0.0 [64/90]: prompt - allow profiles to set prompts as
interruptible
- SAUCE: apparmor4.0.0 [65/90] v6.8 prompt:fixup interruptible
- SAUCE: apparmor4.0.0 [69/90]: add io_uring mediation
- SAUCE: apparmor4.0.0 [70/90]: apparmor: fix oops when racing to retrieve
notification
- SAUCE: apparmor4.0.0 [71/90]: apparmor: fix notification header size
- SAUCE: apparmor4.0.0 [72/90]: apparmor: fix request field from a prompt
reply that denies all access
- SAUCE: apparmor4.0.0 [73/90]: apparmor: open userns related sysctl so lxc
can check if restriction are in place
- SAUCE: apparmor4.0.0 [74/90]: apparmor: cleanup attachment perm lookup to
use lookup_perms()
- SAUCE: apparmor4.0.0 [75/90]: apparmor: remove redundant unconfined check.
- SAUCE: apparmor4.0.0 [76/90]: apparmor: switch signal mediation to using
RULE_MEDIATES
- SAUCE: apparmor4.0.0 [77/90]: apparmor: ensure labels with more than one
entry have correct flags
- SAUCE: apparmor4.0.0 [78/90]: apparmor: remove explicit restriction that
unconfined cannot use change_hat
- SAUCE: apparmor4.0.0 [79/90]: apparmor: cleanup: refactor file_perm() to
provide semantics of some checks
- SAUCE: apparmor4.0.0 [80/90]: apparmor: carry mediation check on label
- SAUCE: apparmor4.0.0 [81/90]: apparmor: convert easy uses of unconfined() to
label_mediates()
- SAUCE: apparmor4.0.0 [82/90]: apparmor: add additional flags to extended
permission.
- SAUCE: apparmor4.0.0 [83/90]: apparmor: add support for profiles to define
the kill signal
- SAUCE: apparmor4.0.0 [84/90]: apparmor: fix x_table_lookup when stacking is
not the first entry
- SAUCE: apparmor4.0.0 [85/90]: apparmor: allow profile to be transitioned
when a user ns is created
- SAUCE: apparmor4.0.0 [86/90]: apparmor: add ability to mediate caps with
policy state machine
- SAUCE: apparmor4.0.0 [87/90]: fixup notify
- SAUCE: apparmor4.0.0 [88/90]: apparmor: add fine grained ipv4/ipv6 mediation
- SAUCE: apparmor4.0.0 [89/90]:apparmor: disable tailglob responses for now
- SAUCE: apparmor4.0.0 [90/90]: apparmor: Fix notify build warnings
- SAUCE: apparmor4.0.0: fix reserved mem for when we save ipv6 addresses
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
(LP: #2032602)
- SAUCE: apparmor4.0.0 [66/90]: prompt - add support for advanced filtering of
notifications
- SAUCE: apparmor4.0.0 [67/90]: userns - add the ability to reference a global
variable for a feature value
- SAUCE: apparmor4.0.0 [68/90]: userns - make it so special unconfined
profiles can mediate user namespaces
* [MTL] x86: Fix Cache info sysfs is not populated (LP: #2049793)
- SAUCE: cacheinfo: Check for null last-level cache info
- SAUCE: cacheinfo: Allocate memory for memory if not done from the primary
CPU
- SAUCE: x86/cacheinfo: Delete global num_cache_leaves
- SAUCE: x86/cacheinfo: Clean out init_cache_level()
* Miscellaneous Ubuntu changes
- SAUCE: apparmor4.0.0: LSM stacking v39: fix build error with
CONFIG_SECURITY=n
- [Config] toolchain version update
[ Ubuntu: 6.8.0-22.22 ]
* noble/linux: 6.8.0-22.22 -proposed tracker (LP: #2060238)
[ Ubuntu: 6.8.0-21.21 ]
* noble/linux: 6.8.0-21.21 -proposed tracker (LP: #2060225)
* Miscellaneous Ubuntu changes
- [Config] update toolchain version in annotations
[ Ubuntu: 6.8.0-20.20 ]
* noble/linux: 6.8.0-20.20 -proposed tracker (LP: #2058221)
* Noble update: v6.8.1 upstream stable release (LP: #2058224)
- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is set
- Documentation/hw-vuln: Add documentation for RFDS
- x86/rfds: Mitigate Register File Data Sampling (RFDS)
- KVM/x86: Export RFDS_NO and RFDS_CLEAR to guests
- Linux 6.8.1
* Autopkgtest failures on amd64 (LP: #2048768)
- [Packaging] update to clang-18
* Miscellaneous Ubuntu changes
- SAUCE: apparmor4.0.0: LSM stacking v39: fix build error with
CONFIG_SECURITY=n
- [Config] amd64: MITIGATION_RFDS=y
[ Ubuntu: 6.8.0-19.19 ]
* noble/linux: 6.8.0-19.19 -proposed tracker (LP: #2057910)
* Miscellaneous Ubuntu changes
- [Packaging] re-introduce linux-doc as an empty package
[ Ubuntu: 6.8.0-18.18 ]
* noble/linux: 6.8.0-18.18 -proposed tracker (LP: #2057456)
* Miscellaneous Ubuntu changes
- [Packaging] drop dependency on libclang-17
[ Ubuntu: 6.8.0-17.17 ]
* noble/linux: 6.8.0-17.17 -proposed tracker (LP: #2056745)
* Miscellaneous upstream changes
- Revert "UBUNTU: [Packaging] Add debian/control sanity check"
[ Ubuntu: 6.8.0-16.16 ]
* noble/linux: 6.8.0-16.16 -proposed tracker (LP: #2056738)
* left-over ceph debugging printks (LP: #2056616)
- Revert "UBUNTU: SAUCE: ceph: make sure all the files successfully put before
unmounting"
* qat: Improve error recovery flows (LP: #2056354)
- crypto: qat - add heartbeat error simulator
- crypto: qat - disable arbitration before reset
- crypto: qat - update PFVF protocol for recovery
- crypto: qat - re-enable sriov after pf reset
- crypto: qat - add fatal error notification
- crypto: qat - add auto reset on error
- crypto: qat - limit heartbeat notifications
- crypto: qat - improve aer error reset handling
- crypto: qat - change SLAs cleanup flow at shutdown
- crypto: qat - resolve race condition during AER recovery
- Documentation: qat: fix auto_reset section
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
ima_filter_rule from security_audit_rule
- SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
management of the sock security
- SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
structure.
- SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
with stacked LSMs
- SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
security_audit_rule_match
- SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
hook
- SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
in audit_context
- SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
security_ipc_getsecid
- SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
data
- SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
security_current_getsecid
- SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
security_inode_getsecid
- SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
audit_names
- SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
security_cred_getlsmblob LSM hook
- SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
from secid to lsmblob
- SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
audit data
- SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
context releaser
- SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
security_lsmblob_to_secctx
- SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
security_inode_getsecctx
- SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
security_lsmblob_to_secctx module selection
- SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
structure
- SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
records in an audit_buffer
- SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
multiple task security contexts
- SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
values for netlabel
- SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
multiple object contexts
- SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
lsmcontext_init()
- SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
security_getprocattr
- SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
on release
- SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
- SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
handles the context string
- SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
exclusive flag
- SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
size tracking
- SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
instead of module specific data
- SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
management of the key security blob
- SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
management of the mnt_opts security blob
- SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
ENOSYS in inode_setxattr
- SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
scaffolding
- SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
netlabel
- SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
security_cred_getsecid() to a single LSM
- SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
LSM_FLAG_EXCLUSIVE
- SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
[12/95]: add/use fns to print hash string hex value
- SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
rules
- SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
- SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
userns restrictions
- SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
- SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
- SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
- SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
- SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
learning cache
- SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
- SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
- SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
prompt response
- SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
reuse and delete
- SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
uresponse
- SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
- SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
- SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
simplify adding strings
- SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
- SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
profile name
- SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
- SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
support
- SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
interruptible
- SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
- SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
- SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
notification
- SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
- SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
reply that denies all access
- SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
can check if restriction are in place
- SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
use lookup_perms()
- SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
- SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
RULE_MEDIATES
- SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
entry have correct flags
- SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
unconfined cannot use change_hat
- SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
provide semantics of some checks
- SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
- SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
label_mediates()
- SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
permission.
- SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
the kill signal
- SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
not the first entry
- SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
when a user ns is created
- SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
policy state machine
- SAUCE: apparmor4.0.0 [87/87]: fixup notify
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
(LP: #2032602)
- SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
notifications
- SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
variable for a feature value
- SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
profiles can mediate user namespaces
* Enable lowlatency settings in the generic kernel (LP: #2051342)
- [Config] enable low-latency settings
* hwmon: (coretemp) Fix core count limitation (LP: #2056126)
- hwmon: (coretemp) Introduce enum for attr index
- hwmon: (coretemp) Remove unnecessary dependency of array index
- hwmon: (coretemp) Replace sensor_device_attribute with device_attribute
- hwmon: (coretemp) Remove redundant pdata->cpu_map[]
- hwmon: (coretemp) Abstract core_temp helpers
- hwmon: (coretemp) Split package temp_data and core temp_data
- hwmon: (coretemp) Remove redundant temp_data->is_pkg_data
- hwmon: (coretemp) Use dynamic allocated memory for core temp_data
* Miscellaneous Ubuntu changes
- [Config] Disable CONFIG_CRYPTO_DEV_QAT_ERROR_INJECTION
- [Packaging] remove debian/scripts/misc/arch-has-odm-enabled.sh
- rebase on v6.8
- [Config] toolchain version update
* Miscellaneous upstream changes
- crypto: qat - add fatal error notify method
* Rebase on v6.8
[ Ubuntu: 6.8.0-15.15 ]
* noble/linux: 6.8.0-15.15 -proposed tracker (LP: #2055871)
* Miscellaneous Ubuntu changes
- rebase on v6.8-rc7
* Miscellaneous upstream changes
- Revert "UBUNTU: [Packaging] Transition laptop-23.10 to generic"
* Rebase on v6.8-rc7
[ Ubuntu: 6.8.0-14.14 ]
* noble/linux: 6.8.0-14.14 -proposed tracker (LP: #2055551)
* Please change CONFIG_CONSOLE_LOGLEVEL_QUIET to 3 (LP: #2049390)
- [Config] reduce verbosity when booting in quiet mode
* linux: please move erofs.ko (CONFIG_EROFS for EROFS support) from linux-
modules-extra to linux-modules (LP: #2054809)
- UBUNTU [Packaging]: Include erofs in linux-modules instead of linux-modules-
extra
* linux: please move dmi-sysfs.ko (CONFIG_DMI_SYSFS for SMBIOS support) from
linux-modules-extra to linux-modules (LP: #2045561)
- [Packaging] Move dmi-sysfs.ko into linux-modules
* Enable CONFIG_INTEL_IOMMU_DEFAULT_ON and
CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON (LP: #1951440)
- [Config] enable Intel DMA remapping by default
* disable Intel DMA remapping by default (LP: #1971699)
- [Config] update tracking bug for CONFIG_INTEL_IOMMU_DEFAULT_ON
* Packaging resync (LP: #1786013)
- debian.master/dkms-versions -- update from kernel-versions
(main/d2024.02.29)
* Miscellaneous Ubuntu changes
- SAUCE: modpost: Replace 0-length array with flex-array member
- [packaging] do not include debian/ directory in a binary package
- [packaging] remove debian/stamps/keep-dir
[ Ubuntu: 6.8.0-13.13 ]
* noble/linux: 6.8.0-13.13 -proposed tracker (LP: #2055421)
* Packaging resync (LP: #1786013)
- debian.master/dkms-versions -- update from kernel-versions
(main/d2024.02.29)
* Miscellaneous Ubuntu changes
- rebase on v6.8-rc6
- [Config] updateconfifs following v6.8-rc6 rebase
* Rebase on v6.8-rc6
[ Ubuntu: 6.8.0-12.12 ]
* linux-tools-common: man page of usbip[d] is misplaced (LP: #2054094)
- [Packaging] rules: Put usbip manpages in the correct directory
* Validate connection interval to pass Bluetooth Test Suite (LP: #2052005)
- Bluetooth: Enforce validation on max value of connection interval
* Turning COMPAT_32BIT_TIME off on s390x (LP: #2038583)
- [Config] Turn off 31-bit COMPAT on s390x
* Don't produce linux-source binary package (LP: #2043994)
- [Packaging] Add debian/control sanity check
* Don't produce linux-*-source-<version> package (LP: #2052439)
- [Packaging] Move linux-source package stub to debian/control.d
- [Packaging] Build linux-source package only for the main kernel
* Don't produce linux-*-cloud-tools-common, linux-*-tools-common and
linux-*-tools-host binary packages (LP: #2048183)
- [Packaging] Move indep tools package stubs to debian/control.d
- [Packaging] Build indep tools packages only for the main kernel
* Enable CONFIG_INTEL_IOMMU_DEFAULT_ON and
CONFIG_INTEL_IOMMU_SCALABLE_MODE_DEFAULT_ON (LP: #1951440)
- [Config] enable Intel DMA remapping by default
* disable Intel DMA remapping by default (LP: #1971699)
- [Config] update tracking bug for CONFIG_INTEL_IOMMU_DEFAULT_ON
* Miscellaneous Ubuntu changes
- [Packaging] Transition laptop-23.10 to generic
[ Ubuntu: 6.8.0-11.11 ]
* noble/linux: 6.8.0-11.11 -proposed tracker (LP: #2053094)
* Miscellaneous Ubuntu changes
- [Packaging] riscv64: disable building unnecessary binary debs
[ Ubuntu: 6.8.0-10.10 ]
* noble/linux: 6.8.0-10.10 -proposed tracker (LP: #2053015)
* Miscellaneous Ubuntu changes
- [Packaging] add Rust build-deps for riscv64
* Miscellaneous upstream changes
- Revert "Revert "UBUNTU: [Packaging] temporarily disable Rust dependencies on
riscv64""
[ Ubuntu-azure: 6.8.0-1007.7 ]
* noble/linux-azure: 6.8.0-1007.7 -proposed tracker (LP: #2062921)
* Packaging resync (LP: #1786013)
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/d2024.04.04)
* Miscellaneous Ubuntu changes
- [Config] azure: update toolchain version in annotations
* Rebase on 6.8.0-31.31
[ Ubuntu-azure: 6.8.0-1006.6 ]
* noble/linux-azure: 6.8.0-1006.6 -proposed tracker (LP: #2061870)
* Rebase on 6.8.0-28.28
[ Ubuntu-azure: 6.8.0-1005.5 ]
* noble/linux-azure: 6.8.0-1005.5 -proposed tracker (LP: #2061094)
* Packaging resync (LP: #1786013)
- [Packaging] drop getabis data
- [Packaging] debian.azure/dkms-versions -- update from kernel-versions
(main/d2024.04.04)
* Azure: Fix TDX regressions in Azure 6.5 (LP: #2052519)
- SAUCE: x86/EISA: Don't probe EISA bus for a TDX VM (with the paravisor) on
Hyper-V
- x86/mm: Fix memory encryption features advertisement
- SAUCE: Drivers: hv: vmbus: Hardcode MMIO resources in vmbus_walk_resources()
when necessary
- SAUCE: x86/tdx: Support vmalloc() for tdx_enc_status_changed()
- SAUCE: x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on
Hyper-V
- SAUCE: clocksource: hyper-v: Use InvariantTSC and enable TSC page for a TDX
VM without paravisor
* Miscellaneous Ubuntu changes
- [Config] azure: re-align annotations after rebase to generic
- [Packaging] azure: resync build dependencies with generic
[ Ubuntu-azure: 6.8.0-1001.1 ]
* noble/linux-azure: 6.8.0-1001.1 -proposed tracker (LP: #2052777)
* Packaging resync (LP: #1786013)
- debian.azure/dkms-versions -- update from kernel-versions (main/d2024.02.07)
* Azure: cifs modules missing from the linux-modules package (LP: #2052980)
- [Config] Move cifs.ko to linux-modules package
* Azure: Enable CONFIG_TEST_LOCKUP (LP: #2052723)
- [Config] CONFIG_TEST_LOCKUP=m
* Miscellaneous Ubuntu changes
- [Packaging] azure: update Rust toolchain
- [Packaging] azure: move to kernel v6.8
- [Config] azure: update annotations after moving to v6.8
[ Ubuntu: 6.8.0-9.9 ]
* noble/linux: 6.8.0-9.9 -proposed tracker (LP: #2052945)
* Miscellaneous upstream changes
- Revert "UBUNTU: [Packaging] temporarily disable Rust dependencies on
riscv64"
[ Ubuntu: 6.8.0-8.8 ]
* noble/linux: 6.8.0-8.8 -proposed tracker (LP: #2052918)
* Miscellaneous Ubuntu changes
- [Packaging] riscv64: enable linux-libc-dev build
- v6.8-rc4 rebase
* Rebase on v6.8-rc4
[ Ubuntu: 6.8.0-7.7 ]
* noble/linux: 6.8.0-7.7 -proposed tracker (LP: #2052691)
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
ima_filter_rule from security_audit_rule
- SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
management of the sock security
- SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
structure.
- SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
with stacked LSMs
- SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
security_audit_rule_match
- SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
hook
- SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
in audit_context
- SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
security_ipc_getsecid
- SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
data
- SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
security_current_getsecid
- SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
security_inode_getsecid
- SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
audit_names
- SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
security_cred_getlsmblob LSM hook
- SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
from secid to lsmblob
- SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
audit data
- SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
context releaser
- SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
security_lsmblob_to_secctx
- SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
security_inode_getsecctx
- SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
security_lsmblob_to_secctx module selection
- SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
structure
- SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
records in an audit_buffer
- SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
multiple task security contexts
- SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
values for netlabel
- SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
multiple object contexts
- SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
lsmcontext_init()
- SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
security_getprocattr
- SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
on release
- SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
- SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
handles the context string
- SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
exclusive flag
- SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
size tracking
- SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
instead of module specific data
- SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
management of the key security blob
- SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
management of the mnt_opts security blob
- SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
ENOSYS in inode_setxattr
- SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
scaffolding
- SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
netlabel
- SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
security_cred_getsecid() to a single LSM
- SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
LSM_FLAG_EXCLUSIVE
- SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
[12/95]: add/use fns to print hash string hex value
- SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
rules
- SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
- SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
userns restrictions
- SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
- SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
- SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
- SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
- SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
learning cache
- SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
- SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
- SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
prompt response
- SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
reuse and delete
- SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
uresponse
- SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
- SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
- SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
simplify adding strings
- SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
- SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
profile name
- SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
- SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
support
- SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
interruptible
- SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
- SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
- SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
notification
- SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
- SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
reply that denies all access
- SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
can check if restriction are in place
- SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
use lookup_perms()
- SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
- SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
RULE_MEDIATES
- SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
entry have correct flags
- SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
unconfined cannot use change_hat
- SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
provide semantics of some checks
- SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
- SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
label_mediates()
- SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
permission.
- SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
the kill signal
- SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
not the first entry
- SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
when a user ns is created
- SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
policy state machine
- SAUCE: apparmor4.0.0 [87/87]: fixup notify
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
(LP: #2032602)
- SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
notifications
- SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
variable for a feature value
- SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
profiles can mediate user namespaces
[ Ubuntu: 6.8.0-6.6 ]
* noble/linux: 6.8.0-6.6 -proposed tracker (LP: #2052592)
* Packaging resync (LP: #1786013)
- debian.master/dkms-versions -- update from kernel-versions
(main/d2024.02.07)
- [Packaging] update variants
* FIPS kernels should default to fips mode (LP: #2049082)
- SAUCE: Enable fips mode by default, in FIPS kernels only
* Fix snapcraftyaml.yaml for jammy:linux-raspi (LP: #2051468)
- [Packaging] Remove old snapcraft.yaml
* Azure: Fix regression introduced in LP: #2045069 (LP: #2052453)
- hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed
* Miscellaneous Ubuntu changes
- [Packaging] Remove in-tree abi checks
- [Packaging] drop abi files with clean
- [Packaging] Remove do_full_source variable (fixup)
- [Packaging] Remove update-dkms-versions and move dkms-versions
- [Config] updateconfigs following v6.8-rc3 rebase
- [packaging] rename to linux
- [packaging] rebase on v6.8-rc3
- [packaging] disable signing for ppc64el
* Rebase on v6.8-rc3
[ Ubuntu: 6.8.0-5.5 ]
* noble/linux-unstable: 6.8.0-5.5 -proposed tracker (LP: #2052136)
* Miscellaneous upstream changes
- Revert "mm/sparsemem: fix race in accessing memory_section->usage"
[ Ubuntu: 6.8.0-4.4 ]
* noble/linux-unstable: 6.8.0-4.4 -proposed tracker (LP: #2051502)
* Migrate from fbdev drivers to simpledrm and DRM fbdev emulation layer
(LP: #1965303)
- [Config] enable simpledrm and DRM fbdev emulation layer
* Miscellaneous Ubuntu changes
- [Config] toolchain update
* Miscellaneous upstream changes
- rust: upgrade to Rust 1.75.0
[ Ubuntu: 6.8.0-3.3 ]
* noble/linux-unstable: 6.8.0-3.3 -proposed tracker (LP: #2051488)
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [43/87]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
[12/95]: add/use fns to print hash string hex value
- SAUCE: apparmor4.0.0 [44/87]: patch to provide compatibility with v2.x net
rules
- SAUCE: apparmor4.0.0 [45/87]: add unpriviled user ns mediation
- SAUCE: apparmor4.0.0 [46/87]: Add sysctls for additional controls of unpriv
userns restrictions
- SAUCE: apparmor4.0.0 [47/87]: af_unix mediation
- SAUCE: apparmor4.0.0 [48/87]: Add fine grained mediation of posix mqueues
- SAUCE: apparmor4.0.0 [49/87]: setup slab cache for audit data
- SAUCE: apparmor4.0.0 [50/87]: Improve debug print infrastructure
- SAUCE: apparmor4.0.0 [51/87]: add the ability for profiles to have a
learning cache
- SAUCE: apparmor4.0.0 [52/87]: enable userspace upcall for mediation
- SAUCE: apparmor4.0.0 [53/87]: prompt - lock down prompt interface
- SAUCE: apparmor4.0.0 [54/87]: prompt - allow controlling of caching of a
prompt response
- SAUCE: apparmor4.0.0 [55/87]: prompt - add refcount to audit_node in prep or
reuse and delete
- SAUCE: apparmor4.0.0 [56/87]: prompt - refactor to moving caching to
uresponse
- SAUCE: apparmor4.0.0 [57/87]: prompt - Improve debug statements
- SAUCE: apparmor4.0.0 [58/87]: prompt - fix caching
- SAUCE: apparmor4.0.0 [59/87]: prompt - rework build to use append fn, to
simplify adding strings
- SAUCE: apparmor4.0.0 [60/87]: prompt - refcount notifications
- SAUCE: apparmor4.0.0 [61/87]: prompt - add the ability to reply with a
profile name
- SAUCE: apparmor4.0.0 [62/87]: prompt - fix notification cache when updating
- SAUCE: apparmor4.0.0 [63/87]: prompt - add tailglob on name for cache
support
- SAUCE: apparmor4.0.0 [64/87]: prompt - allow profiles to set prompts as
interruptible
- SAUCE: apparmor4.0.0 [69/87]: add io_uring mediation
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* apparmor restricts read access of user namespace mediation sysctls to root
(LP: #2040194)
- SAUCE: apparmor4.0.0 [73/87]: apparmor: open userns related sysctl so lxc
can check if restriction are in place
* AppArmor spams kernel log with assert when auditing (LP: #2040192)
- SAUCE: apparmor4.0.0 [72/87]: apparmor: fix request field from a prompt
reply that denies all access
* apparmor notification files verification (LP: #2040250)
- SAUCE: apparmor4.0.0 [71/87]: apparmor: fix notification header size
* apparmor oops when racing to retrieve a notification (LP: #2040245)
- SAUCE: apparmor4.0.0 [70/87]: apparmor: fix oops when racing to retrieve
notification
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
(LP: #2032602)
- SAUCE: apparmor4.0.0 [66/87]: prompt - add support for advanced filtering of
notifications
- SAUCE: apparmor4.0.0 [67/87]: userns - add the ability to reference a global
variable for a feature value
- SAUCE: apparmor4.0.0 [68/87]: userns - make it so special unconfined
profiles can mediate user namespaces
* Miscellaneous Ubuntu changes
- SAUCE: apparmor4.0.0 [01/87]: LSM stacking v39: integrity: disassociate
ima_filter_rule from security_audit_rule
- SAUCE: apparmor4.0.0 [02/87]: LSM stacking v39: SM: Infrastructure
management of the sock security
- SAUCE: apparmor4.0.0 [03/87]: LSM stacking v39: LSM: Add the lsmblob data
structure.
- SAUCE: apparmor4.0.0 [04/87]: LSM stacking v39: IMA: avoid label collisions
with stacked LSMs
- SAUCE: apparmor4.0.0 [05/87]: LSM stacking v39: LSM: Use lsmblob in
security_audit_rule_match
- SAUCE: apparmor4.0.0 [06/87]: LSM stacking v39: LSM: Add lsmblob_to_secctx
hook
- SAUCE: apparmor4.0.0 [07/87]: LSM stacking v39: Audit: maintain an lsmblob
in audit_context
- SAUCE: apparmor4.0.0 [08/87]: LSM stacking v39: LSM: Use lsmblob in
security_ipc_getsecid
- SAUCE: apparmor4.0.0 [09/87]: LSM stacking v39: Audit: Update shutdown LSM
data
- SAUCE: apparmor4.0.0 [10/87]: LSM stacking v39: LSM: Use lsmblob in
security_current_getsecid
- SAUCE: apparmor4.0.0 [11/87]: LSM stacking v39: LSM: Use lsmblob in
security_inode_getsecid
- SAUCE: apparmor4.0.0 [12/87]: LSM stacking v39: Audit: use an lsmblob in
audit_names
- SAUCE: apparmor4.0.0 [13/87]: LSM stacking v39: LSM: Create new
security_cred_getlsmblob LSM hook
- SAUCE: apparmor4.0.0 [14/87]: LSM stacking v39: Audit: Change context data
from secid to lsmblob
- SAUCE: apparmor4.0.0 [15/87]: LSM stacking v39: Netlabel: Use lsmblob for
audit data
- SAUCE: apparmor4.0.0 [16/87]: LSM stacking v39: LSM: Ensure the correct LSM
context releaser
- SAUCE: apparmor4.0.0 [17/87]: LSM stacking v39: LSM: Use lsmcontext in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [18/87]: LSM stacking v39: LSM: Use lsmcontext in
security_lsmblob_to_secctx
- SAUCE: apparmor4.0.0 [19/87]: LSM stacking v39: LSM: Use lsmcontext in
security_inode_getsecctx
- SAUCE: apparmor4.0.0 [20/87]: LSM stacking v39: LSM: Use lsmcontext in
security_dentry_init_security
- SAUCE: apparmor4.0.0 [21/87]: LSM stacking v39: LSM:
security_lsmblob_to_secctx module selection
- SAUCE: apparmor4.0.0 [22/87]: LSM stacking v39: Audit: Create audit_stamp
structure
- SAUCE: apparmor4.0.0 [23/87]: LSM stacking v39: Audit: Allow multiple
records in an audit_buffer
- SAUCE: apparmor4.0.0 [24/87]: LSM stacking v39: Audit: Add record for
multiple task security contexts
- SAUCE: apparmor4.0.0 [25/87]: LSM stacking v39: audit: multiple subject lsm
values for netlabel
- SAUCE: apparmor4.0.0 [26/87]: LSM stacking v39: Audit: Add record for
multiple object contexts
- SAUCE: apparmor4.0.0 [27/87]: LSM stacking v39: LSM: Remove unused
lsmcontext_init()
- SAUCE: apparmor4.0.0 [28/87]: LSM stacking v39: LSM: Improve logic in
security_getprocattr
- SAUCE: apparmor4.0.0 [29/87]: LSM stacking v39: LSM: secctx provider check
on release
- SAUCE: apparmor4.0.0 [30/87]: LSM stacking v39: LSM: Single calls in
socket_getpeersec hooks
- SAUCE: apparmor4.0.0 [31/87]: LSM stacking v39: LSM: Exclusive secmark usage
- SAUCE: apparmor4.0.0 [32/87]: LSM stacking v39: LSM: Identify which LSM
handles the context string
- SAUCE: apparmor4.0.0 [33/87]: LSM stacking v39: AppArmor: Remove the
exclusive flag
- SAUCE: apparmor4.0.0 [34/87]: LSM stacking v39: LSM: Add mount opts blob
size tracking
- SAUCE: apparmor4.0.0 [35/87]: LSM stacking v39: LSM: allocate mnt_opts blobs
instead of module specific data
- SAUCE: apparmor4.0.0 [36/87]: LSM stacking v39: LSM: Infrastructure
management of the key security blob
- SAUCE: apparmor4.0.0 [37/87]: LSM stacking v39: LSM: Infrastructure
management of the mnt_opts security blob
- SAUCE: apparmor4.0.0 [38/87]: LSM stacking v39: LSM: Correct handling of
ENOSYS in inode_setxattr
- SAUCE: apparmor4.0.0 [39/87]: LSM stacking v39: LSM: Remove lsmblob
scaffolding
- SAUCE: apparmor4.0.0 [40/87]: LSM stacking v39: LSM: Allow reservation of
netlabel
- SAUCE: apparmor4.0.0 [41/87]: LSM stacking v39: LSM: restrict
security_cred_getsecid() to a single LSM
- SAUCE: apparmor4.0.0 [42/87]: LSM stacking v39: Smack: Remove
LSM_FLAG_EXCLUSIVE
- SAUCE: apparmor4.0.0 [65/87] v6.8 prompt:fixup interruptible
- SAUCE: apparmor4.0.0 [74/87]: apparmor: cleanup attachment perm lookup to
use lookup_perms()
- SAUCE: apparmor4.0.0 [75/87]: apparmor: remove redundant unconfined check.
- SAUCE: apparmor4.0.0 [76/87]: apparmor: switch signal mediation to using
RULE_MEDIATES
- SAUCE: apparmor4.0.0 [77/87]: apparmor: ensure labels with more than one
entry have correct flags
- SAUCE: apparmor4.0.0 [78/87]: apparmor: remove explicit restriction that
unconfined cannot use change_hat
- SAUCE: apparmor4.0.0 [79/87]: apparmor: cleanup: refactor file_perm() to
provide semantics of some checks
- SAUCE: apparmor4.0.0 [80/87]: apparmor: carry mediation check on label
- SAUCE: apparmor4.0.0 [81/87]: apparmor: convert easy uses of unconfined() to
label_mediates()
- SAUCE: apparmor4.0.0 [82/87]: apparmor: add additional flags to extended
permission.
- SAUCE: apparmor4.0.0 [83/87]: apparmor: add support for profiles to define
the kill signal
- SAUCE: apparmor4.0.0 [84/87]: apparmor: fix x_table_lookup when stacking is
not the first entry
- SAUCE: apparmor4.0.0 [85/87]: apparmor: allow profile to be transitioned
when a user ns is created
- SAUCE: apparmor4.0.0 [86/87]: apparmor: add ability to mediate caps with
policy state machine
- SAUCE: apparmor4.0.0 [87/87]: fixup notify
- [Config] updateconfigs following v6.8-rc2 rebase
[ Ubuntu: 6.8.0-2.2 ]
* noble/linux-unstable: 6.8.0-2.2 -proposed tracker (LP: #2051110)
* Miscellaneous Ubuntu changes
- [Config] toolchain update
- [Config] enable Rust
[ Ubuntu: 6.8.0-1.1 ]
* noble/linux-unstable: 6.8.0-1.1 -proposed tracker (LP: #2051102)
* Miscellaneous Ubuntu changes
- [packaging] move to v6.8-rc1
- [Config] updateconfigs following v6.8-rc1 rebase
- SAUCE: export file_close_fd() instead of close_fd_get_file()
- SAUCE: cpufreq: s/strlcpy/strscpy/
- debian/dkms-versions -- temporarily disable zfs dkms
- debian/dkms-versions -- temporarily disable ipu6 and isvsc dkms
- debian/dkms-versions -- temporarily disable v4l2loopback
[ Ubuntu: 6.8.0-0.0 ]
* Empty entry.
[ Ubuntu: 6.7.0-7.7 ]
* noble/linux-unstable: 6.7.0-7.7 -proposed tracker (LP: #2049357)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
* Miscellaneous Ubuntu changes
- [Packaging] re-enable signing for s390x and ppc64el
[ Ubuntu: 6.7.0-6.6 ]
* Empty entry.
[ Ubuntu: 6.7.0-2.2 ]
* noble/linux: 6.7.0-2.2 -proposed tracker (LP: #2049182)
* Packaging resync (LP: #1786013)
- [Packaging] resync getabis
* Enforce RETPOLINE and SLS mitigrations (LP: #2046440)
- SAUCE: objtool: Make objtool check actually fatal upon fatal errors
- SAUCE: objtool: make objtool SLS validation fatal when building with
CONFIG_SLS=y
- SAUCE: objtool: make objtool RETPOLINE validation fatal when building with
CONFIG_RETPOLINE=y
- SAUCE: scripts: remove generating .o-ur objects
- [Packaging] Remove all custom retpoline-extract code
- Revert "UBUNTU: SAUCE: vga_set_mode -- avoid jump tables"
- Revert "UBUNTU: SAUCE: early/late -- annotate indirect calls in early/late
initialisation code"
- Revert "UBUNTU: SAUCE: apm -- annotate indirect calls within
firmware_restrict_branch_speculation_{start,end}"
* Miscellaneous Ubuntu changes
- [Packaging] temporarily disable riscv64 builds
- [Packaging] temporarily disable Rust dependencies on riscv64
[ Ubuntu: 6.7.0-1.1 ]
* noble/linux: 6.7.0-1.1 -proposed tracker (LP: #2048859)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
* [UBUNTU 23.04] Regression: Ubuntu 23.04/23.10 do not include uvdevice
anymore (LP: #2048919)
- [Config] Enable S390_UV_UAPI (built-in)
* Support mipi camera on Intel Meteor Lake platform (LP: #2031412)
- SAUCE: iommu: intel-ipu: use IOMMU passthrough mode for Intel IPUs on Meteor
Lake
- SAUCE: platform/x86: int3472: Add handshake GPIO function
* [SRU][J/L/M] UBUNTU: [Packaging] Make WWAN driver a loadable module
(LP: #2033406)
- [Packaging] Make WWAN driver loadable modules
* usbip: error: failed to open /usr/share/hwdata//usb.ids (LP: #2039439)
- [Packaging] Make linux-tools-common depend on hwdata
* [Mediatek] mt8195-demo: enable CONFIG_MTK_IOMMU as module for multimedia and
PCIE peripherals (LP: #2036587)
- [Config] Enable CONFIG_MTK_IOMMU on arm64
* linux-*: please enable dm-verity kconfigs to allow MoK/db verified root
images (LP: #2019040)
- [Config] CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING=y
* kexec enable to load/kdump zstd compressed zimg (LP: #2037398)
- [Packaging] Revert arm64 image format to Image.gz
* Mantic minimized/minimal cloud images do not receive IP address during
provisioning; systemd regression with wait-online (LP: #2036968)
- [Config] Enable virtio-net as built-in to avoid race
* Make backlight module auto detect dell_uart_backlight (LP: #2008882)
- SAUCE: ACPI: video: Dell AIO UART backlight detection
* Linux 6.2 fails to reboot with current u-boot-nezha (LP: #2021364)
- [Config] Default to performance CPUFreq governor on riscv64
* Enable Nezha board (LP: #1975592)
- [Config] Build in D1 clock drivers on riscv64
- [Config] Enable CONFIG_SUN6I_RTC_CCU on riscv64
- [Config] Enable CONFIG_SUNXI_WATCHDOG on riscv64
- [Config] Disable SUN50I_DE2_BUS on riscv64
- [Config] Disable unneeded sunxi pinctrl drivers on riscv64
* Enable StarFive VisionFive 2 board (LP: #2013232)
- [Config] Enable CONFIG_PINCTRL_STARFIVE_JH7110_SYS on riscv64
- [Config] Enable CONFIG_STARFIVE_WATCHDOG on riscv64
* rcu_sched detected stalls on CPUs/tasks (LP: #1967130)
- [Config] Enable virtually mapped stacks on riscv64
* Check for changes relevant for security certifications (LP: #1945989)
- [Packaging] Add a new fips-checks script
* Installation support for SMARC RZ/G2L platform (LP: #2030525)
- [Config] build Renesas RZ/G2L USBPHY control driver statically
* Add support for kernels compiled with CONFIG_EFI_ZBOOT (LP: #2002226)
- [Config]: Turn on CONFIG_EFI_ZBOOT on ARM64
* Default module signing algo should be accelerated (LP: #2034061)
- [Config] Default module signing algo should be accelerated
* Miscellaneous Ubuntu changes
- [Config] annotations clean-up
[ Upstream Kernel Changes ]
* Rebase to v6.7
[ Ubuntu: 6.7.0-0.0 ]
* Empty entry
[ Ubuntu: 6.7.0-5.5 ]
* noble/linux-unstable: 6.7.0-5.5 -proposed tracker (LP: #2048118)
* Packaging resync (LP: #1786013)
- debian/dkms-versions -- update from kernel-versions (main/d2024.01.02)
* Miscellaneous Ubuntu changes
- [Packaging] re-enable Rust support
- [Packaging] temporarily disable riscv64 builds
[ Ubuntu: 6.7.0-4.4 ]
* noble/linux-unstable: 6.7.0-4.4 -proposed tracker (LP: #2047807)
* unconfined profile denies userns_create for chromium based processes
(LP: #1990064)
- [Config] disable CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS
* apparmor restricts read access of user namespace mediation sysctls to root
(LP: #2040194)
- SAUCE: apparmor4.0.0 [69/69]: apparmor: open userns related sysctl so lxc
can check if restriction are in place
* AppArmor spams kernel log with assert when auditing (LP: #2040192)
- SAUCE: apparmor4.0.0 [68/69]: apparmor: fix request field from a prompt
reply that denies all access
* apparmor notification files verification (LP: #2040250)
- SAUCE: apparmor4.0.0 [67/69]: apparmor: fix notification header size
* apparmor oops when racing to retrieve a notification (LP: #2040245)
- SAUCE: apparmor4.0.0 [66/69]: apparmor: fix oops when racing to retrieve
notification
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [01/69]: add/use fns to print hash string hex value
- SAUCE: apparmor4.0.0 [02/69]: patch to provide compatibility with v2.x net
rules
- SAUCE: apparmor4.0.0 [03/69]: add unpriviled user ns mediation
- SAUCE: apparmor4.0.0 [04/69]: Add sysctls for additional controls of unpriv
userns restrictions
- SAUCE: apparmor4.0.0 [05/69]: af_unix mediation
- SAUCE: apparmor4.0.0 [06/69]: Add fine grained mediation of posix mqueues
- SAUCE: apparmor4.0.0 [07/69]: Stacking v38: LSM: Identify modules by more
than name
- SAUCE: apparmor4.0.0 [08/69]: Stacking v38: LSM: Add an LSM identifier for
external use
- SAUCE: apparmor4.0.0 [09/69]: Stacking v38: LSM: Identify the process
attributes for each module
- SAUCE: apparmor4.0.0 [10/69]: Stacking v38: LSM: Maintain a table of LSM
attribute data
- SAUCE: apparmor4.0.0 [11/69]: Stacking v38: proc: Use lsmids instead of lsm
names for attrs
- SAUCE: apparmor4.0.0 [12/69]: Stacking v38: integrity: disassociate
ima_filter_rule from security_audit_rule
- SAUCE: apparmor4.0.0 [13/69]: Stacking v38: LSM: Infrastructure management
of the sock security
- SAUCE: apparmor4.0.0 [14/69]: Stacking v38: LSM: Add the lsmblob data
structure.
- SAUCE: apparmor4.0.0 [15/69]: Stacking v38: LSM: provide lsm name and id
slot mappings
- SAUCE: apparmor4.0.0 [16/69]: Stacking v38: IMA: avoid label collisions with
stacked LSMs
- SAUCE: apparmor4.0.0 [17/69]: Stacking v38: LSM: Use lsmblob in
security_audit_rule_match
- SAUCE: apparmor4.0.0 [18/69]: Stacking v38: LSM: Use lsmblob in
security_kernel_act_as
- SAUCE: apparmor4.0.0 [19/69]: Stacking v38: LSM: Use lsmblob in
security_secctx_to_secid
- SAUCE: apparmor4.0.0 [20/69]: Stacking v38: LSM: Use lsmblob in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [21/69]: Stacking v38: LSM: Use lsmblob in
security_ipc_getsecid
- SAUCE: apparmor4.0.0 [22/69]: Stacking v38: LSM: Use lsmblob in
security_current_getsecid
- SAUCE: apparmor4.0.0 [23/69]: Stacking v38: LSM: Use lsmblob in
security_inode_getsecid
- SAUCE: apparmor4.0.0 [24/69]: Stacking v38: LSM: Use lsmblob in
security_cred_getsecid
- SAUCE: apparmor4.0.0 [25/69]: Stacking v38: LSM: Specify which LSM to
display
- SAUCE: apparmor4.0.0 [27/69]: Stacking v38: LSM: Ensure the correct LSM
context releaser
- SAUCE: apparmor4.0.0 [28/69]: Stacking v38: LSM: Use lsmcontext in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [29/69]: Stacking v38: LSM: Use lsmcontext in
security_inode_getsecctx
- SAUCE: apparmor4.0.0 [30/69]: Stacking v38: Use lsmcontext in
security_dentry_init_security
- SAUCE: apparmor4.0.0 [31/69]: Stacking v38: LSM: security_secid_to_secctx in
netlink netfilter
- SAUCE: apparmor4.0.0 [32/69]: Stacking v38: NET: Store LSM netlabel data in
a lsmblob
- SAUCE: apparmor4.0.0 [33/69]: Stacking v38: binder: Pass LSM identifier for
confirmation
- SAUCE: apparmor4.0.0 [34/69]: Stacking v38: LSM: security_secid_to_secctx
module selection
- SAUCE: apparmor4.0.0 [35/69]: Stacking v38: Audit: Keep multiple LSM data in
audit_names
- SAUCE: apparmor4.0.0 [36/69]: Stacking v38: Audit: Create audit_stamp
structure
- SAUCE: apparmor4.0.0 [37/69]: Stacking v38: LSM: Add a function to report
multiple LSMs
- SAUCE: apparmor4.0.0 [38/69]: Stacking v38: Audit: Allow multiple records in
an audit_buffer
- SAUCE: apparmor4.0.0 [39/69]: Stacking v38: Audit: Add record for multiple
task security contexts
- SAUCE: apparmor4.0.0 [40/69]: Stacking v38: audit: multiple subject lsm
values for netlabel
- SAUCE: apparmor4.0.0 [41/69]: Stacking v38: Audit: Add record for multiple
object contexts
- SAUCE: apparmor4.0.0 [42/69]: Stacking v38: netlabel: Use a struct lsmblob
in audit data
- SAUCE: apparmor4.0.0 [43/69]: Stacking v38: LSM: Removed scaffolding
function lsmcontext_init
- SAUCE: apparmor4.0.0 [44/69]: Stacking v38: AppArmor: Remove the exclusive
flag
- SAUCE: apparmor4.0.0 [45/69]: setup slab cache for audit data
- SAUCE: apparmor4.0.0 [46/69]: Improve debug print infrastructure
- SAUCE: apparmor4.0.0 [47/69]: add the ability for profiles to have a
learning cache
- SAUCE: apparmor4.0.0 [48/69]: enable userspace upcall for mediation
- SAUCE: apparmor4.0.0 [49/69]: prompt - lock down prompt interface
- SAUCE: apparmor4.0.0 [50/69]: prompt - allow controlling of caching of a
prompt response
- SAUCE: apparmor4.0.0 [51/69]: prompt - add refcount to audit_node in prep or
reuse and delete
- SAUCE: apparmor4.0.0 [52/69]: prompt - refactor to moving caching to
uresponse
- SAUCE: apparmor4.0.0 [53/69]: prompt - Improve debug statements
- SAUCE: apparmor4.0.0 [54/69]: prompt - fix caching
- SAUCE: apparmor4.0.0 [55/69]: prompt - rework build to use append fn, to
simplify adding strings
- SAUCE: apparmor4.0.0 [56/69]: prompt - refcount notifications
- SAUCE: apparmor4.0.0 [57/69]: prompt - add the ability to reply with a
profile name
- SAUCE: apparmor4.0.0 [58/69]: prompt - fix notification cache when updating
- SAUCE: apparmor4.0.0 [59/69]: prompt - add tailglob on name for cache
support
- SAUCE: apparmor4.0.0 [60/69]: prompt - allow profiles to set prompts as
interruptible
- SAUCE: apparmor4.0.0 [64/69]: advertise disconnected.path is available
- SAUCE: apparmor4.0.0 [65/69]: add io_uring mediation
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
(LP: #2032602)
- SAUCE: apparmor4.0.0 [61/69]: prompt - add support for advanced filtering of
notifications
- SAUCE: apparmor4.0.0 [62/69]: userns - add the ability to reference a global
variable for a feature value
- SAUCE: apparmor4.0.0 [63/69]: userns - make it so special unconfined
profiles can mediate user namespaces
* udev fails to make prctl() syscall with apparmor=0 (as used by maas by
default) (LP: #2016908) // update apparmor and LSM stacking patch set
(LP: #2028253)
- SAUCE: apparmor4.0.0 [26/69]: Stacking v38: Fix prctl() syscall with
apparmor=0
* Fix RPL-U CPU C-state always keep at C3 when system run PHM with idle screen
on (LP: #2042385)
- SAUCE: r8169: Add quirks to enable ASPM on Dell platforms
* [Debian] autoreconstruct - Do not generate chmod -x for deleted files
(LP: #2045562)
- [Debian] autoreconstruct - Do not generate chmod -x for deleted files
* Disable Legacy TIOCSTI (LP: #2046192)
- [Config]: disable CONFIG_LEGACY_TIOCSTI
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] remove helper scripts
- [Packaging] update annotations scripts
* Miscellaneous Ubuntu changes
- [Packaging] rules: Remove unused dkms make variables
- [Config] update annotations after rebase to v6.7-rc8
[ Upstream Kernel Changes ]
* Rebase to v6.7-rc8
[ Ubuntu: 6.7.0-3.3 ]
* noble/linux-unstable: 6.7.0-3.3 -proposed tracker (LP: #2046060)
* enable CONFIG_INTEL_TDX_HOST in linux >= 6.7 for noble (LP: #2046040)
- [Config] enable CONFIG_INTEL_TDX_HOST
* linux tools packages for derived kernels refuse to install simultaneously
due to libcpupower name collision (LP: #2035971)
- [Packaging] Statically link libcpupower into cpupower tool
* make lazy RCU a boot time option (LP: #2045492)
- SAUCE: rcu: Provide a boot time parameter to control lazy RCU
* Build failure if run in a console (LP: #2044512)
- [Packaging] Fix kernel module compression failures
* Turning COMPAT_32BIT_TIME off on arm64 (64k & derivatives) (LP: #2038582)
- [Config] y2038: Turn off COMPAT and COMPAT_32BIT_TIME on arm64 64k
* Turning COMPAT_32BIT_TIME off on riscv64 (LP: #2038584)
- [Config] y2038: Disable COMPAT_32BIT_TIME on riscv64
* Turning COMPAT_32BIT_TIME off on ppc64el (LP: #2038587)
- [Config] y2038: Disable COMPAT and COMPAT_32BIT_TIME on ppc64le
* [UBUNTU 23.04] Kernel config option missing for s390x PCI passthrough
(LP: #2042853)
- [Config] CONFIG_VFIO_PCI_ZDEV_KVM=y
* back-out zstd module compression automatic for backports (LP: #2045593)
- [Packaging] make ZSTD module compression conditional
* Miscellaneous Ubuntu changes
- [Packaging] Remove do_full_source variable
- [Packaging] Remove obsolete config handling
- [Packaging] Remove support for sub-flavors
- [Packaging] Remove old linux-libc-dev version hack
- [Packaging] Remove obsolete scripts
- [Packaging] Remove README.inclusion-list
- [Packaging] make $(stampdir)/stamp-build-perarch depend on build-arch
- [Packaging] Enable rootless builds
- [Packaging] Allow to run debian/rules without (fake)root
- [Packaging] remove unneeded trailing slash for INSTALL_MOD_PATH
- [Packaging] override KERNELRELEASE instead of KERNELVERSION
- [Config] update toolchain versions in annotations
- [Packaging] drop useless linux-doc
- [Packaging] scripts: Rewrite insert-ubuntu-changes in Python
- [Packaging] enable riscv64 builds
- [Packaging] remove the last sub-flavours bit
- [Packaging] check debian.env to determine do_libc_dev_package
- [Packaging] remove debian.*/variants
- [Packaging] remove do_libc_dev_package variable
- [Packaging] move linux-libc-dev.stub to debian/control.d/
- [Packaging] Update check to build linux-libc-dev to the source package name
- [Packaging] rules: Remove startnewrelease target
- [Packaging] Remove debian/commit-templates
- [Config] update annotations after rebase to v6.7-rc4
[ Upstream Kernel Changes ]
* Rebase to v6.7-rc4
[ Ubuntu: 6.7.0-2.2 ]
* noble/linux-unstable: 6.7.0-2.2 -proposed tracker (LP: #2045107)
* Miscellaneous Ubuntu changes
- [Packaging] re-enable Rust
- [Config] enable Rust in annotations
- [Packaging] Remove do_enforce_all variable
- [Config] disable Softlogic 6x10 capture card driver on armhf
- [Packaging] disable Rust support
- [Config] update annotations after rebase to v6.7-rc3
[ Upstream Kernel Changes ]
* Rebase to v6.7-rc3
[ Ubuntu: 6.7.0-1.1 ]
* noble/linux-unstable: 6.7.0-1.1 -proposed tracker (LP: #2044069)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
- [Packaging] update helper scripts
* Miscellaneous Ubuntu changes
- [Config] update annotations after rebase to v6.7-rc2
[ Upstream Kernel Changes ]
* Rebase to v6.7-rc2
[ Ubuntu: 6.7.0-0.0 ]
* Empty entry
[ Ubuntu: 6.6.0-12.12 ]
* noble/linux-unstable: 6.6.0-12.12 -proposed tracker (LP: #2043664)
* Miscellaneous Ubuntu changes
- [Packaging] temporarily disable zfs dkms
[ Ubuntu: 6.6.0-11.11 ]
* noble/linux-unstable: 6.6.0-11.11 -proposed tracker (LP: #2043480)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] resync update-dkms-versions helper
- [Packaging] update variants
- debian/dkms-versions -- update from kernel-versions (main/d2023.11.14)
* Miscellaneous Ubuntu changes
- [Packaging] move to Noble
- [Config] toolchain version update
[ Ubuntu: 6.6.0-10.10 ]
* mantic/linux-unstable: 6.6.0-10.10 -proposed tracker (LP: #2043088)
* Bump arm64's CONFIG_NR_CPUS to 512 (LP: #2042897)
- [Config] Bump CONFIG_NR_CPUS to 512 for arm64
* Miscellaneous Ubuntu changes
- [Config] Include a note for the NR_CPUS setting on riscv64
- SAUCE: apparmor4.0.0 [83/83]: Fix inode_init for changed prototype
[ Ubuntu: 6.6.0-9.9 ]
* mantic/linux-unstable: 6.6.0-9.9 -proposed tracker (LP: #2041852)
* Switch IMA default hash to sha256 (LP: #2041735)
- [Config] Switch IMA_DEFAULT_HASH from sha1 to sha256
* apparmor restricts read access of user namespace mediation sysctls to root
(LP: #2040194)
- SAUCE: apparmor4.0.0 [82/82]: apparmor: open userns related sysctl so lxc
can check if restriction are in place
* AppArmor spams kernel log with assert when auditing (LP: #2040192)
- SAUCE: apparmor4.0.0 [81/82]: apparmor: fix request field from a prompt
reply that denies all access
* apparmor notification files verification (LP: #2040250)
- SAUCE: apparmor4.0.0 [80/82]: apparmor: fix notification header size
* apparmor oops when racing to retrieve a notification (LP: #2040245)
- SAUCE: apparmor4.0.0 [79/82]: apparmor: fix oops when racing to retrieve
notification
* Disable restricting unprivileged change_profile by default, due to LXD
latest/stable not yet compatible with this new apparmor feature
(LP: #2038567)
- SAUCE: apparmor4.0.0 [78/82]: apparmor: Make
apparmor_restrict_unprivileged_unconfined opt-in
* update apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [01/82]: add/use fns to print hash string hex value
- SAUCE: apparmor4.0.0 [02/82]: rename SK_CTX() to aa_sock and make it an
inline fn
- SAUCE: apparmor4.0.0 [03/82]: patch to provide compatibility with v2.x net
rules
- SAUCE: apparmor4.0.0 [04/82]: add user namespace creation mediation
- SAUCE: apparmor4.0.0 [05/82]: Add sysctls for additional controls of unpriv
userns restrictions
- SAUCE: apparmor4.0.0 [06/82]: af_unix mediation
- SAUCE: apparmor4.0.0 [07/82]: Add fine grained mediation of posix mqueues
- SAUCE: apparmor4.0.0 [08/82]: Stacking v38: LSM: Identify modules by more
than name
- SAUCE: apparmor4.0.0 [09/82]: Stacking v38: LSM: Add an LSM identifier for
external use
- SAUCE: apparmor4.0.0 [10/82]: Stacking v38: LSM: Identify the process
attributes for each module
- SAUCE: apparmor4.0.0 [11/82]: Stacking v38: LSM: Maintain a table of LSM
attribute data
- SAUCE: apparmor4.0.0 [12/82]: Stacking v38: proc: Use lsmids instead of lsm
names for attrs
- SAUCE: apparmor4.0.0 [13/82]: Stacking v38: integrity: disassociate
ima_filter_rule from security_audit_rule
- SAUCE: apparmor4.0.0 [14/82]: Stacking v38: LSM: Infrastructure management
of the sock security
- SAUCE: apparmor4.0.0 [15/82]: Stacking v38: LSM: Add the lsmblob data
structure.
- SAUCE: apparmor4.0.0 [16/82]: Stacking v38: LSM: provide lsm name and id
slot mappings
- SAUCE: apparmor4.0.0 [17/82]: Stacking v38: IMA: avoid label collisions with
stacked LSMs
- SAUCE: apparmor4.0.0 [18/82]: Stacking v38: LSM: Use lsmblob in
security_audit_rule_match
- SAUCE: apparmor4.0.0 [19/82]: Stacking v38: LSM: Use lsmblob in
security_kernel_act_as
- SAUCE: apparmor4.0.0 [20/82]: Stacking v38: LSM: Use lsmblob in
security_secctx_to_secid
- SAUCE: apparmor4.0.0 [21/82]: Stacking v38: LSM: Use lsmblob in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [22/82]: Stacking v38: LSM: Use lsmblob in
security_ipc_getsecid
- SAUCE: apparmor4.0.0 [23/82]: Stacking v38: LSM: Use lsmblob in
security_current_getsecid
- SAUCE: apparmor4.0.0 [24/82]: Stacking v38: LSM: Use lsmblob in
security_inode_getsecid
- SAUCE: apparmor4.0.0 [25/82]: Stacking v38: LSM: Use lsmblob in
security_cred_getsecid
- SAUCE: apparmor4.0.0 [26/82]: Stacking v38: LSM: Specify which LSM to
display
- SAUCE: apparmor4.0.0 [28/82]: Stacking v38: LSM: Ensure the correct LSM
context releaser
- SAUCE: apparmor4.0.0 [29/82]: Stacking v38: LSM: Use lsmcontext in
security_secid_to_secctx
- SAUCE: apparmor4.0.0 [30/82]: Stacking v38: LSM: Use lsmcontext in
security_inode_getsecctx
- SAUCE: apparmor4.0.0 [31/82]: Stacking v38: Use lsmcontext in
security_dentry_init_security
- SAUCE: apparmor4.0.0 [32/82]: Stacking v38: LSM: security_secid_to_secctx in
netlink netfilter
- SAUCE: apparmor4.0.0 [33/82]: Stacking v38: NET: Store LSM netlabel data in
a lsmblob
- SAUCE: apparmor4.0.0 [34/82]: Stacking v38: binder: Pass LSM identifier for
confirmation
- SAUCE: apparmor4.0.0 [35/82]: Stacking v38: LSM: security_secid_to_secctx
module selection
- SAUCE: apparmor4.0.0 [36/82]: Stacking v38: Audit: Keep multiple LSM data in
audit_names
- SAUCE: apparmor4.0.0 [37/82]: Stacking v38: Audit: Create audit_stamp
structure
- SAUCE: apparmor4.0.0 [38/82]: Stacking v38: LSM: Add a function to report
multiple LSMs
- SAUCE: apparmor4.0.0 [39/82]: Stacking v38: Audit: Allow multiple records in
an audit_buffer
- SAUCE: apparmor4.0.0 [40/82]: Stacking v38: Audit: Add record for multiple
task security contexts
- SAUCE: apparmor4.0.0 [41/82]: Stacking v38: audit: multiple subject lsm
values for netlabel
- SAUCE: apparmor4.0.0 [42/82]: Stacking v38: Audit: Add record for multiple
object contexts
- SAUCE: apparmor4.0.0 [43/82]: Stacking v38: netlabel: Use a struct lsmblob
in audit data
- SAUCE: apparmor4.0.0 [44/82]: Stacking v38: LSM: Removed scaffolding
function lsmcontext_init
- SAUCE: apparmor4.0.0 [45/82]: Stacking v38: AppArmor: Remove the exclusive
flag
- SAUCE: apparmor4.0.0 [46/82]: combine common_audit_data and
apparmor_audit_data
- SAUCE: apparmor4.0.0 [47/82]: setup slab cache for audit data
- SAUCE: apparmor4.0.0 [48/82]: rename audit_data->label to
audit_data->subj_label
- SAUCE: apparmor4.0.0 [49/82]: pass cred through to audit info.
- SAUCE: apparmor4.0.0 [50/82]: Improve debug print infrastructure
- SAUCE: apparmor4.0.0 [51/82]: add the ability for profiles to have a
learning cache
- SAUCE: apparmor4.0.0 [52/82]: enable userspace upcall for mediation
- SAUCE: apparmor4.0.0 [53/82]: cache buffers on percpu list if there is lock
contention
- SAUCE: apparmor4.0.0 [54/82]: advertise availability of exended perms
- SAUCE: apparmor4.0.0 [56/82]: cleanup: provide separate audit messages for
file and policy checks
- SAUCE: apparmor4.0.0 [57/82]: prompt - lock down prompt interface
- SAUCE: apparmor4.0.0 [58/82]: prompt - ref count pdb
- SAUCE: apparmor4.0.0 [59/82]: prompt - allow controlling of caching of a
prompt response
- SAUCE: apparmor4.0.0 [60/82]: prompt - add refcount to audit_node in prep or
reuse and delete
- SAUCE: apparmor4.0.0 [61/82]: prompt - refactor to moving caching to
uresponse
- SAUCE: apparmor4.0.0 [62/82]: prompt - Improve debug statements
- SAUCE: apparmor4.0.0 [63/82]: prompt - fix caching
- SAUCE: apparmor4.0.0 [64/82]: prompt - rework build to use append fn, to
simplify adding strings
- SAUCE: apparmor4.0.0 [65/82]: prompt - refcount notifications
- SAUCE: apparmor4.0.0 [66/82]: prompt - add the ability to reply with a
profile name
- SAUCE: apparmor4.0.0 [67/82]: prompt - fix notification cache when updating
- SAUCE: apparmor4.0.0 [68/82]: prompt - add tailglob on name for cache
support
- SAUCE: apparmor4.0.0 [69/82]: prompt - allow profiles to set prompts as
interruptible
- SAUCE: apparmor4.0.0 [74/82]: advertise disconnected.path is available
- SAUCE: apparmor4.0.0 [75/82]: fix invalid reference on profile->disconnected
- SAUCE: apparmor4.0.0 [76/82]: add io_uring mediation
- SAUCE: apparmor4.0.0 [77/82]: apparmor: Fix regression in mount mediation
* update apparmor and LSM stacking patch set (LP: #2028253) // [FFe]
apparmor-4.0.0-alpha2 for unprivileged user namespace restrictions in mantic
(LP: #2032602)
- SAUCE: apparmor4.0.0 [70/82]: prompt - add support for advanced filtering of
notifications
- SAUCE: apparmor4.0.0 [71/82]: userns - add the ability to reference a global
variable for a feature value
- SAUCE: apparmor4.0.0 [72/82]: userns - make it so special unconfined
profiles can mediate user namespaces
- SAUCE: apparmor4.0.0 [73/82]: userns - allow restricting unprivileged
change_profile
* LSM stacking and AppArmor for 6.2: additional fixes (LP: #2017903) // update
apparmor and LSM stacking patch set (LP: #2028253)
- SAUCE: apparmor4.0.0 [55/82]: fix profile verification and enable it
* udev fails to make prctl() syscall with apparmor=0 (as used by maas by
default) (LP: #2016908) // update apparmor and LSM stacking patch set
(LP: #2028253)
- SAUCE: apparmor4.0.0 [27/82]: Stacking v38: Fix prctl() syscall with
apparmor=0
* Miscellaneous Ubuntu changes
- [Config] SECURITY_APPARMOR_RESTRICT_USERNS=y
[ Ubuntu: 6.6.0-8.8 ]
* mantic/linux-unstable: 6.6.0-8.8 -proposed tracker (LP: #2040243)
* Miscellaneous Ubuntu changes
- abi: gc reference to phy-rtk-usb2/phy-rtk-usb3
[ Ubuntu: 6.6.0-7.7 ]
* mantic/linux-unstable: 6.6.0-7.7 -proposed tracker (LP: #2040147)
* test_021_aslr_dapper_libs from ubuntu_qrt_kernel_security failed on K-5.19 /
J-OEM-6.1 / J-6.2 AMD64 (LP: #1983357)
- [Config]: set ARCH_MMAP_RND_{COMPAT_, }BITS to the maximum
* Miscellaneous Ubuntu changes
- [Config] updateconfigs following v6.6-rc7 rebase
[ Ubuntu: 6.6.0-6.6 ]
* mantic/linux-unstable: 6.6.0-6.6 -proposed tracker (LP: #2039780)
* Miscellaneous Ubuntu changes
- rebase on v6.6-rc6
- [Config] updateconfigs following v6.6-rc6 rebase
[ Upstream Kernel Changes ]
* Rebase to v6.6-rc6
[ Ubuntu: 6.6.0-5.5 ]
* mantic/linux-unstable: 6.6.0-5.5 -proposed tracker (LP: #2038899)
* Miscellaneous Ubuntu changes
- rebase on v6.6-rc5
- [Config] updateconfigs following v6.6-rc5 rebase
[ Upstream Kernel Changes ]
* Rebase to v6.6-rc5
[ Ubuntu: 6.6.0-4.4 ]
* mantic/linux-unstable: 6.6.0-4.4 -proposed tracker (LP: #2038423)
* Miscellaneous Ubuntu changes
- rebase on v6.6-rc4
[ Upstream Kernel Changes ]
* Rebase to v6.6-rc4
[ Ubuntu: 6.6.0-3.3 ]
* mantic/linux-unstable: 6.6.0-3.3 -proposed tracker (LP: #2037622)
* Miscellaneous Ubuntu changes
- [Config] updateconfigs following v6.6-rc3 rebase
* Miscellaneous upstream changes
- Revert "UBUNTU: SAUCE: enforce rust availability only on x86_64"
- arm64: rust: Enable Rust support for AArch64
- arm64: rust: Enable PAC support for Rust.
- arm64: Restrict Rust support to little endian only.
[ Ubuntu: 6.6.0-2.2 ]
* Miscellaneous upstream changes
- UBUBNTU: [Config] build all COMEDI drivers as modules
[ Ubuntu: 6.6.0-1.1 ]
* Miscellaneous Ubuntu changes
- [Packaging] move linux to linux-unstable
- [Packaging] rebase on v6.6-rc1
- [Config] updateconfigs following v6.6-rc1 rebase
- [packaging] skip ABI, modules and retpoline checks
- update dropped.txt
- [Config] SHIFT_FS FTBFS with Linux 6.6, disable it
- [Config] DELL_UART_BACKLIGHT FTBFS with Linux 6.6, disable it
- [Packaging] debian/dkms-versions: temporarily disable dkms
- [Packaging] temporarily disable signing for s390x
[ Upstream Kernel Changes ]
* Rebase to v6.6-rc1
[ Ubuntu: 6.6.0-0.0 ]
* Empty entry
[ Ubuntu-azure: 6.8.0-1000.0 ]
* Empty entry.
Date: 2026-04-30 20:50:10.298867+00:00
Changed-By: John Cabaj <john-cabaj at ubuntu.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-azure-nvidia/6.8.0-1035.38
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list