SUSE-SU-2024:4387-1

The SUSE Linux Enterprise 15 SP6 Confidential Computing kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
• CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in precision tracking (bsc#1232823).
• CVE-2023-6270: aoe: fix the potential use-after-free problem in more places (bsc#1218562).
• CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after check_estalblished() (bsc#1222587).
• CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
• CVE-2024-26953: net: esp: fix bad handling of pages from page_pool (bsc#1223656).
• CVE-2024-27017: netfilter: nftsetpipapo: walk over current view on netlink dump (bsc#1223733).
• CVE-2024-35888: erspan: make sure erspanbasehdr is present in skb->head (bsc#1224518).
• CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548).
• CVE-2024-36244: net/sched: taprio: extend minimum interval restriction to entire cycle too (bsc#1226797).
• CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
• CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
• CVE-2024-36905: tcp: defer shutdown(SENDSHUTDOWN) for TCPSYN_RECV sockets (bsc#1225742).
• CVE-2024-36927: ipv4: Fix uninit-value access in _ipmake_skb() (bsc#1225813).
• CVE-2024-36954: tipc: fix a possible memleak in tipcbufappend (bsc#1225764).
• CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2capleflowctl_init() (bsc#1226130).
• CVE-2024-38589: netrom: fix possible dead-lock in nrrtioctl() (bsc#1226748).
• CVE-2024-40914: mm/hugememory: do not unpoison hugezero_folio (bsc#1227842).
• CVE-2024-41023: sched/deadline: Fix task_struct reference leak (bsc#1228430).
• CVE-2024-41031: mm/filemap: skip to create PMD-sized page cache if needed (bsc#1228454).
• CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620).
• CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in wbdirtylimits(), again' (bsc#1233132).
• CVE-2024-44958: sched/smt: Fix unbalance schedsmtpresent dec/inc (bsc#1230179).
• CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during resetting (bsc#1230231).
• CVE-2024-45016: netem: fix return value if duplicate enqueue fails (bsc#1230429).
• CVE-2024-45025: fix bitmap corruption on closerange() with CLOSERANGE_UNSHARE (bsc#1230456).
• CVE-2024-46678: bonding: change ipsec_lock from spin lock to mutex (bsc#1230550).
• CVE-2024-46681: pktgen: use cpusreadlock() in pgnetinit() (bsc#1230558).
• CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710)
• CVE-2024-46754: bpf: Remove tstrun from lwtseg6localprogops (bsc#1230801).
• CVE-2024-46766: ice: move netifqueueset_napi to rtnl-protected sections (bsc#1230762).
• CVE-2024-46770: ice: Add netifdeviceattach/detach into PF reset flow (bsc#1230763).
• CVE-2024-46775: drm/amd/display: Validate function returns (bsc#1230774).
• CVE-2024-46777: udf: Avoid excessive partition lengths (bsc#1230773).
• CVE-2024-46813: drm/amd/display: Check link_index before accessing dc->links (bsc#1231191).
• CVE-2024-46816: drm/amd/display: Stop amdgpudm initialize when link nums greater than maxlinks (bsc#1231197).
• CVE-2024-46826: ELF: fix kernel.randomizevaspace double read (bsc#1231115).
• CVE-2024-46828: sched: sch_cake: fix bulk flow accounting logic for host fairness (bsc#1231114).
• CVE-2024-46831: net: microchip: vcap: Fix use-after-free error in kunit test (bsc#1231117).
• CVE-2024-46834: ethtool: fail closed if we can't get max channel used in indirection tables (bsc#1231096).
• CVE-2024-46840: btrfs: clean up our handling of refs == 0 in snapshot delete (bsc#1231105).
• CVE-2024-46841: btrfs: do not BUGON on ENOMEM from btrfslookupextentinfo() in walkdownproc() (bsc#1231094).
• CVE-2024-46843: scsi: ufs: core: Remove SCSI host only if added (bsc#1231100).
• CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084).
• CVE-2024-46855: netfilter: nft_socket: fix sk refcount leaks (bsc#1231085).
• CVE-2024-46857: net/mlx5: Fix bridge mode operations when there are no VFs (bsc#1231087).
• CVE-2024-46870: drm/amd/display: Disable DMCUB timeout for DCN35 (bsc#1231435).
• CVE-2024-47658: crypto: stm32/cryp - call finalize with bh disabled (bsc#1231436).
• CVE-2024-47660: fsnotify: clear PARENT_WATCHED flags lazily (bsc#1231439).
• CVE-2024-47664: spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (bsc#1231442).
• CVE-2024-47674: mm: avoid leaving partial pfn mappings around in error case (bsc#1231673).
• CVE-2024-47679: vfs: fix race between eviceinodes() and findinode()&iput() (bsc#1231930).
• CVE-2024-47684: tcp: check skb is non-NULL in tcprtodelta_us() (bsc#1231987).
• CVE-2024-47685: netfilter: nfrejectipv6: fix nfrejectip6tcphdrput() (bsc#1231998).
• CVE-2024-47687: vdpa/mlx5: Fix invalid mr resource destroy (bsc#1232003).
• CVE-2024-47692: nfsd: return -EINVAL when namelen is 0 (bsc#1231857).
• CVE-2024-47701: ext4: avoid OOB when system.data xattr changes underneath the filesystem (bsc#1231920).
• CVE-2024-47703: bpf, lsm: add check for BPF LSM return value (bsc#1231946).
• CVE-2024-47704: drm/amd/display: Check linkres->hpodplinkenc before using it (bsc#1231944).
• CVE-2024-47705: block: fix potential invalid pointer dereference in blkaddpartition (bsc#1231872).
• CVE-2024-47706: block, bfq: fix possible UAF for bfqq->bic with merge chain (bsc#1231942).
• CVE-2024-47707: ipv6: avoid possible NULL deref in rt6uncachedlistflushdev() (bsc#1231935).
• CVE-2024-47710: sockmap: Add a condresched() in sockhashfree() (bsc#1232049).
• CVE-2024-47727: x86/tdx: Fix 'in-kernel MMIO' check (bsc#1232116).
• CVE-2024-47730: crypto: hisilicon/qm - inject error before stopping queue (bsc#1232075).
• CVE-2024-47731: drivers/perf: Fix alidrwpmu driver interrupt status clearing (bsc#1232117).
• CVE-2024-47739: padata: use integer wrap around to prevent deadlock on seq_nr overflow (bsc#1232124).
• CVE-2024-47741: btrfs: fix race setting file private on concurrent lseek using same fd (bsc#1231869).
• CVE-2024-47745: mm: call the securitymmapfile() LSM hook in remapfilepages() (bsc#1232135).
• CVE-2024-47747: net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition (bsc#1232145).
• CVE-2024-47752: media: mediatek: vcodec: Fix H264 stateless decoder smatch warning (bsc#1232130).
• CVE-2024-47753: media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning (bsc#1231868).
• CVE-2024-47754: media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning (bsc#1232131).
• CVE-2024-49852: scsi: elx: libefc: Fix potential use after free in efcnportvport_del() (bsc#1232819).
• CVE-2024-49864: rxrpc: Fix a race between socket set up and I/O thread creation (bsc#1232256).
• CVE-2024-49867: btrfs: wait for fixup workers before stopping cleaner kthread during umount (bsc#1232262).
• CVE-2024-49868: btrfs: fix a NULL pointer dereference when failed to start a new trasacntion (bsc#1232272).
• CVE-2024-49881: ext4: update origpath in ext4find_extent() (bsc#1232201).
• CVE-2024-49882: ext4: fix double brelse() the buffer of the extents path (bsc#1232200).
• CVE-2024-49883: ext4: aovid use-after-free in ext4extinsert_extent() (bsc#1232199).
• CVE-2024-49888: bpf: Fix a sdiv overflow issue (bsc#1232208).
• CVE-2024-49890: drm/amd/pm: ensure the fw_info is not null before using it (bsc#1232217).
• CVE-2024-49892: drm/amd/display: Initialize getbytesper_element's default to 1 (bsc#1232220).
• CVE-2024-49894: drm/amd/display: Fix index out of bounds in degamma hardware format translation (bsc#1232354).
• CVE-2024-49895: drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation (bsc#1232352).
• CVE-2024-49896: drm/amd/display: Check stream before comparing them (bsc#1232221).
• CVE-2024-49897: drm/amd/display: Check phantom_stream before it is used (bsc#1232355).
• CVE-2024-49898: drm/amd/display: Check null-initialized variables (bsc#1232222).
• CVE-2024-49899: drm/amd/display: Initialize denominators' default to 1 (bsc#1232358).
• CVE-2024-49901: drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs (bsc#1232305).
• CVE-2024-49906: drm/amd/display: Check null pointer before try to access it (bsc#1232332).
• CVE-2024-49907: drm/amd/display: Check null pointers before using dc->clk_mgr (bsc#1232334).
• CVE-2024-49908: drm/amd/display: Add null check for 'afb' in amdgpudmupdate_cursor (bsc#1232335).
• CVE-2024-49909: drm/amd/display: Add NULL check for function pointer in dcn32setoutputtransferfunc (bsc#1232337).
• CVE-2024-49911: drm/amd/display: Add NULL check for function pointer in dcn20setoutputtransferfunc (bsc#1232366).
• CVE-2024-49912: drm/amd/display: Handle null 'streamstatus' in 'planeschangedforexisting_stream' (bsc#1232367).
• CVE-2024-49913: drm/amd/display: Add null check for toppipetoprogram in commitplanesforstream (bsc#1232307).
• CVE-2024-49914: drm/amd/display: Add null check for pipectx->planestate in (bsc#1232369).
• CVE-2024-49917: drm/amd/display: Add NULL check for clkmgr and clkmgr->funcs in dcn30inithw (bsc#1231965).
• CVE-2024-49918: drm/amd/display: Add null check for headpipe in dcn32acquireidlepipeforheadpipein_layer (bsc#1231967).
• CVE-2024-49919: drm/amd/display: Add null check for headpipe in dcn201acquirefreepipeforlayer (bsc#1231968).
• CVE-2024-49920: drm/amd/display: Check null pointers before multiple uses (bsc#1232313).
• CVE-2024-49921: drm/amd/display: Check null pointers before used (bsc#1232371).
• CVE-2024-49922: drm/amd/display: Check null pointers before using them (bsc#1232374).
• CVE-2024-49923: drm/amd/display: Pass non-null to dcn20validateapplypipesplit_flags (bsc#1232361).
• CVE-2024-49925: fbdev: efifb: Register sysfs groups through driver core (bsc#1232224)
• CVE-2024-49933: blk_iocost: fix more out of bound shifts (bsc#1232368).
• CVE-2024-49934: fs/inode: Prevent dumpmapping() accessing invalid dentry.dname.name (bsc#1232387).
• CVE-2024-49936: net/xen-netback: prevent UAF in xenvifflushhash() (bsc#1232424).
• CVE-2024-49945: net/ncsi: Disable the ncsi work before freeing the associated structure (bsc#1232165).
• CVE-2024-49946: ppp: do not assume bh is held in pppchannelbridge_input() (bsc#1232164).
• CVE-2024-49949: net: avoid potential underflow in qdiscpktlen_init() with UFO (bsc#1232160).
• CVE-2024-49950: Bluetooth: L2CAP: Fix uaf in l2cap_connect (bsc#1232159).
• CVE-2024-49953: net/mlx5e: Fix crash caused by calling _xfrmstate_delete() twice (bsc#1232156).
• CVE-2024-49954: staticcall: Replace pointless WARNON() in staticcallmodule_notify() (bsc#1232155).
• CVE-2024-49958: ocfs2: reserve space for inline xattr before attaching reflink tree (bsc#1232151).
• CVE-2024-49959: jbd2: stop waiting for space when jbd2cleanupjournal_tail() returns error (bsc#1232149).
• CVE-2024-49960: ext4: fix timer use-after-free on failed mount (bsc#1232395).
• CVE-2024-49967: ext4: no need to continue when the number of entries is 1 (bsc#1232140).
• CVE-2024-49968: ext4: fix error message when rejecting the default hash (bsc#1232264).
• CVE-2024-49969: drm/amd/display: Fix index out of bounds in DCN30 color transformation (bsc#1232519).
• CVE-2024-49972: drm/amd/display: Deallocate DML memory if allocation fails (bsc#1232315).
• CVE-2024-49973: r8169: add tally counter fields added with RTL8125 (bsc#1232105).
• CVE-2024-49974: NFSD: Force all NFSv4.2 COPY requests to be synchronous (bsc#1232383).
• CVE-2024-49983: ext4: drop ppath from ext4extreplayupdateex() to avoid double-free (bsc#1232096).
• CVE-2024-49986: platform/x86: x86-android-tablets: Fix use after free on platformdeviceregister() errors (bsc#1232093).
• CVE-2024-49987: bpftool: Fix undefined behavior in qsort(NULL, 0, ...) (bsc#1232258).
• CVE-2024-49989: drm/amd/display: fix double free issue during amdgpu module unload (bsc#1232483).
• CVE-2024-49991: drm/amdkfd: amdkfdfreegtt_mem clear the correct pointer (bsc#1232282).
• CVE-2024-49993: iommu/vt-d: Fix potential lockup if qisubmitsync called with 0 count (bsc#1232316).
• CVE-2024-49995: tipc: guard against string buffer overrun (bsc#1232432).
• CVE-2024-49996: cifs: Fix buffer overflow when parsing NFS reparse points (bsc#1232089).
• CVE-2024-50000: net/mlx5e: Fix NULL deref in mlx5etirbuilder_alloc() (bsc#1232085).
• CVE-2024-50001: net/mlx5: Fix error path in multi-packet WQE transmit (bsc#1232084).
• CVE-2024-50002: staticcall: Handle module init failure correctly in staticcalldelmodule() (bsc#1232083).
• CVE-2024-50003: drm/amd/display: Fix system hang while resume with TBT monitor (bsc#1232385).
• CVE-2024-50004: drm/amd/display: update DML2 policy EnhancedPrefetchScheduleAccelerationFinal DCN35 (bsc#1232396).
• CVE-2024-50006: ext4: fix idatasem unlock order in ext4indmigrate() (bsc#1232442).
• CVE-2024-50009: cpufreq: amd-pstate: add check for cpufreqcpuget's return value (bsc#1232318).
• CVE-2024-50012: cpufreq: Avoid a bad reference count on CPU node (bsc#1232386).
• CVE-2024-50014: ext4: fix access to uninitialised lock in fc replay path (bsc#1232446).
• CVE-2024-50015: ext4: dax: fix overflowing extents beyond inode size when partially writing (bsc#1232079).
• CVE-2024-50020: ice: Fix improper handling of refcount in icesriovsetmsixvec_count() (bsc#1231989).
• CVE-2024-50021: ice: Fix improper handling of refcount in icedpllinitrclkpins() (bsc#1231957).
• CVE-2024-50022: device-dax: correct pgoff align in daxsetmapping() (bsc#1231956).
• CVE-2024-50024: net: Fix an unsafe loop on the list (bsc#1231954).
• CVE-2024-50027: thermal: core: Free tzp copy along with the thermal zone (bsc#1231951).
• CVE-2024-50028: thermal: core: Reference count the zone in thermalzonegetbyid() (bsc#1231950).
• CVE-2024-50033: slip: make slhc_remember() more robust against malicious packets (bsc#1231914).
• CVE-2024-50035: ppp: fix pppasyncencode() illegal access (bsc#1232392).
• CVE-2024-50040: igb: Do not bring the device up after non-fatal error (bsc#1231908).
• CVE-2024-50041: i40e: Fix macvlan leak by synchronizing access to macfilterhash (bsc#1231907).
• CVE-2024-50042: ice: Fix increasing MSI-X on VF (bsc#1231906).
• CVE-2024-50045: netfilter: brnetfilter: fix panic with metadatadst skb (bsc#1231903).
• CVE-2024-50046: NFSv4: Prevent NULL-pointer dereference in nfs42completecopies() (bsc#1231902).
• CVE-2024-50047: smb: client: fix UAF in async decryption (bsc#1232418).
• CVE-2024-50059: ntb: ntbhwswitchtec: Fix use after free vulnerability in switchtecntbremove due to race condition (bsc#1232345).
• CVE-2024-50060: io_uring: check if we need to reschedule during overflow flush (bsc#1232417).
• CVE-2024-50063: bpf: Prevent tail call between progs attached to different hooks (bsc#1232435).
• CVE-2024-50064: zram: free secondary algorithms names (bsc#1231901).
• CVE-2024-50080: ublk: do not allow user copy for unprivileged device (bsc#1232502).
• CVE-2024-50081: blk-mq: setup queue ->tag_set before initializing hctx (bsc#1232501).
• CVE-2024-50082: blk-rq-qos: fix crash on rqqoswait vs. rqqoswake_function race (bsc#1232500).
• CVE-2024-50084: net: microchip: vcap api: Fix memory leaks in vcapapiencoderuletest() (bsc#1232494).
• CVE-2024-50087: btrfs: fix uninitialized pointer free on readallocone_name() error (bsc#1232499).
• CVE-2024-50088: btrfs: fix uninitialized pointer free in addinoderef() (bsc#1232498).
• CVE-2024-50098: scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down (bsc#1232881).
• CVE-2024-50110: xfrm: fix one more kernel-infoleak in algo dumping (bsc#1232885).
• CVE-2024-50115: KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory (bsc#1232919).
• CVE-2024-50124: Bluetooth: ISO: Fix UAF on isosocktimeout (bsc#1232926).
• CVE-2024-50125: Bluetooth: SCO: Fix UAF on scosocktimeout (bsc#1232928).
• CVE-2024-50127: net: sched: fix use-after-free in taprio_change() (bsc#1232907).
• CVE-2024-50128: net: wwan: fix global oob in wwanrtnlpolicy (bsc#1232905).
• CVE-2024-50130: netfilter: bpf: must hold reference on net namespace (bsc#1232894).
• CVE-2024-50138: bpf: Use rawspinlockt in ringbuf (bsc#1232935).
• CVE-2024-50139: KVM: arm64: Fix shift-out-of-bounds bug (bsc#1233062).
• CVE-2024-50145: octeonep: Add SKB allocation failures handling in _octepoqprocess_rx() (bsc#1233044).
• CVE-2024-50153: scsi: target: core: Fix null-ptr-deref in targetallocdevice() (bsc#1233061).
• CVE-2024-50154: tcp/dccp: Do not use timerpending() in reqskqueue_unlink() (bsc#1233070).
• CVE-2024-50166: fsl/fman: Fix refcount handling of fman-related devices (bsc#1233050).
• CVE-2024-50167: be2net: fix potential memory leak in be_xmit() (bsc#1233049).
• CVE-2024-50169: vsock: Update rxbytes on readskb() (bsc#1233320).
• CVE-2024-50171: net: systemport: fix potential memory leak in bcmsysportxmit() (bsc#1233057).
• CVE-2024-50177: drm/amd/display: fix a UBSAN warning in DML2.1 (bsc#1233115).
• CVE-2024-50182: secretmem: disable memfd_secret() if arch cannot set direct map (bsc#1233129).
• CVE-2024-50184: virtio_pmem: Check device status before requesting flush (bsc#1233135).
• CVE-2024-50186: net: explicitly clear the sk pointer, when pf->create fails (bsc#1233110).
• CVE-2024-50192: irqchip/gic-v4: Do not allow a VMOVP on a dying VPE (bsc#1233106).
• CVE-2024-50195: posix-clock: Fix missing timespec64 check in pcclocksettime() (bsc#1233103).
• CVE-2024-50225: btrfs: fix error propagation of split bios (bsc#1233193).
• CVE-2024-50230: nilfs2: fix kernel bug due to missing clearing of checked flag (bsc#1233206).
• CVE-2024-50245: fs/ntfs3: Fix possible deadlock in mi_read (bsc#1233203).
• CVE-2024-50246: fs/ntfs3: Add rough attr alloc_size check (bsc#1233207).
• CVE-2024-50250: fsdax: daxunshareiter needs to copy entire blocks (bsc#1233226).
• CVE-2024-50257: netfilter: Fix use-after-free in get_info() (bsc#1233244).
• CVE-2024-50261: macsec: Fix use-after-free while sending the offloading packet (bsc#1233253).
• CVE-2024-50264: vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans (bsc#1233453).
• CVE-2024-50271: signal: restore the override_rlimit logic (bsc#1233460).
• CVE-2024-50273: btrfs: reinitialize delayed ref list after deleting it from the list (bsc#1233462).
• CVE-2024-50274: idpf: avoid vport access in idpfgetlink_ksettings (bsc#1233463).
• CVE-2024-50275: arm64/sve: Discard stale CPU state when handling SVE traps (bsc#1233464).
• CVE-2024-50276: net: vertexcom: mse102x: Fix possible double free of TX skb (bsc#1233465).
• CVE-2024-50279: dm cache: fix out-of-bounds access to the dirty bitset when resizing (bsc#1233468).
• CVE-2024-50289: media: av7110: fix a spectre vulnerability (bsc#1233478).
• CVE-2024-50295: net: arc: fix the device for dmamapsingle/dmaunmapsingle (bsc#1233484).
• CVE-2024-50298: net: enetc: allocate vf_state during PF probes (bsc#1233487).
• CVE-2024-53042: ipv4: iptunnel: Fix suspicious RCU usage warning in iptunnelinitflow() (bsc#1233540).
• CVE-2024-53048: ice: fix crash on probe for DPLL enabled E810 LOM (bsc#1233721).
• CVE-2024-53058: net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data (bsc#1233552).
• CVE-2024-53079: mm/thp: fix deferred split unqueue naming and locking (bsc#1233570).
• CVE-2024-53082: virtionet: Add hashkey_length check (bsc#1233573).

The following non-security bugs were fixed:

• 9p: explicitly deny setlease attempts (git-fixes).
• ACPI: CPPC: Add support for setting EPP register in FFH (stable-fixes).
• ACPI: CPPC: Fix _CPC register setting issue (git-fixes).
• ACPI: CPPC: Make rmwlock a rawspin_lock (git-fixes).
• ACPI: EC: Do not release locks during operation region accesses (stable-fixes).
• ACPI: PAD: fix crash in exitroundrobin() (stable-fixes).
• ACPI: PRM: Clean up guid type in struct prmhandlerinfo (git-fixes).
• ACPI: PRM: Find EFIMEMORYRUNTIME block for PRM handler and context (git-fixes).
• ACPI: battery: Fix possible crash when unregistering a battery hook (git-fixes).
• ACPI: battery: Simplify battery hook locking (stable-fixes).
• ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (stable-fixes).
• ACPI: resource: Add Asus ExpertBook B2502CVA to irq1levellowskipoverride[] (stable-fixes).
• ACPI: resource: Add Asus Vivobook X1704VAP to irq1levellowskipoverride[] (stable-fixes).
• ACPI: resource: Add LG 16T90SP to irq1levellowskipoverride[] (stable-fixes).
• ACPI: resource: Add another DMI match for the TongFang GMxXGxx (stable-fixes).
• ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (stable-fixes).
• ACPICA: Fix memory leak if acpipsgetnextfield() fails (stable-fixes).
• ACPICA: Fix memory leak if acpipsgetnextnamepath() fails (stable-fixes).
• ACPICA: Implement ACPIWARNINGONCE and ACPIERRORONCE (stable-fixes).
• ACPICA: check null return of ACPIALLOCATEZEROED() in acpidbconverttopackage() (stable-fixes).
• ACPICA: executer/exsystem: Do not nag user about every Stall() violating the spec (git-fixes).
• ACPICA: iasl: handle empty connection_node (stable-fixes).
• ALSA/hda: intel-sdw-acpi: cleanup sdwintelscan_controller (stable-fixes).
• ALSA/hda: intel-sdw-acpi: fetch fwnode once in sdwintelscan_controller() (stable-fixes).
• ALSA/hda: intel-sdw-acpi: simplify sdw-master-count property read (stable-fixes).
• ALSA: 6fire: Release resources at card release (git-fixes).
• ALSA: Reorganize kerneldoc parameter names (stable-fixes).
• ALSA: ac97: bus: Fix the mistake in the comment (git-fixes).
• ALSA: asihpi: Fix potential OOB array access (stable-fixes).
• ALSA: caiaq: Use sndcardfreewhenclosed() at disconnection (git-fixes).
• ALSA: core: add isascii() check to card ID generator (stable-fixes).
• ALSA: firewire-lib: Avoid division by zero in applyconstraintto_size() (git-fixes).
• ALSA: firewire-lib: fix return value on fail in amdtptscminit() (git-fixes).
• ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2 (stable-fixes).
• ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne 1000 G2 (git-fixes).
• ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin (git-fixes).
• ALSA: hda/conexant: fix some typos (stable-fixes).
• ALSA: hda/cs8409: Fix possible NULL dereference (git-fixes).
• ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs (bsc#1219803).
• ALSA: hda/realtek - Fixed Clevo platform headset Mic issue (stable-fixes).
• ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318 (git-fixes).
• ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200 (stable-fixes).
• ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9 (stable-fixes).
• ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593 (stable-fixes).
• ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13 (stable-fixes).
• ALSA: hda/realtek: Apply quirk for Medion E15433 (bsc#1233298).
• ALSA: hda/realtek: Enable mic on Vaio VJFH52 (stable-fixes).
• ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform (bsc#1233298).
• ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max (bsc#1233298).
• ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3 (stable-fixes).
• ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1 (stable-fixes).
• ALSA: hda/realtek: Fix the push button function for the ALC257 (git-fixes).
• ALSA: hda/realtek: Limit internal Mic boost on Dell platform (stable-fixes).
• ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init (stable-fixes).
• ALSA: hda/realtek: Set PCBeep to default value for ALC274 (stable-fixes).
• ALSA: hda/realtek: Update ALC225 depop procedure (git-fixes).
• ALSA: hda/realtek: Update ALC256 depop procedure (git-fixes).
• ALSA: hda/realtek: Update default depop procedure (git-fixes).
• ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8 (stable-fixes).
• ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10 (stable-fixes).
• ALSA: hda/realtek: tas2781: Fix ROG ALLY X audio (stable-fixes).
• ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop (stable-fixes).
• ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects (stable-fixes).
• ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE (git-fixes).
• ALSA: hda: Poll jack events for LS7A HD-Audio (stable-fixes).
• ALSA: hda: Show the codec quirk info at probing (stable-fixes).
• ALSA: hda: Sound support for HP Spectre x360 16 inch model 2024 (stable-fixes).
• ALSA: hda: tas2781: Fix missing setup at runtime PM (bsc#1230132).
• ALSA: hdsp: Break infinite MIDI input flush loop (stable-fixes).
• ALSA: ice1712: Remove redundant code in stac9460dacvol_put (stable-fixes).
• ALSA: line6: add hw monitor volume control to POD HD500X (stable-fixes).
• ALSA: line6: update contact information (stable-fixes).
• ALSA: mixeross: Remove some incorrect kfreeconst() usages (git-fixes).
• ALSA: pcm: Add sanity NULL check for the default mmap fault handler (stable-fixes).
• ALSA: silence integer wrapping warning (stable-fixes).
• ALSA: ump: Fix evaluation of MIDI 1.0 FB info (git-fixes).
• ALSA: us122l: Use sndcardfreewhenclosed() at disconnection (git-fixes).
• ALSA: usb-audio: Add Pioneer DJ/AlphaTheta DJM-A9 Mixer (stable-fixes).
• ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET (stable-fixes).
• ALSA: usb-audio: Add input value sanity checks for standard types (stable-fixes).
• ALSA: usb-audio: Add logitech Audio profile quirk (stable-fixes).
• ALSA: usb-audio: Add native DSD support for Luxman D-08u (stable-fixes).
• ALSA: usb-audio: Add quirk for HP 320 FHD Webcam (bsc#1232768).
• ALSA: usb-audio: Add quirks for Dell WD19 dock (stable-fixes).
• ALSA: usb-audio: Define macros for quirk table entries (stable-fixes).
• ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry (stable-fixes).
• ALSA: usb-audio: Fix out of bounds reads when finding clock sources (stable-fixes).
• ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices (git-fixes).
• ALSA: usb-audio: Make mic volume workarounds globally applicable (stable-fixes).
• ALSA: usb-audio: Replace complex quirk lines with macros (stable-fixes).
• ALSA: usb-audio: Use snprintf instead of sprintf in buildmixerunit_ctl (stable-fixes).
• ALSA: usx2y: Use sndcardfreewhenclosed() at disconnection (git-fixes).
• ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet (stable-fixes).
• ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec (stable-fixes).
• ASoC: Intel: sst: Fix used of uninitialized ctx to log an error (git-fixes).
• ASoC: Intel: sst: Support LPE0F28 ACPI HID (stable-fixes).
• ASoC: SOF: Add i2s bt dai configuration support for AMD platforms (bsc#1233305).
• ASoC: SOF: Add support for configuring PDM interface from topology (bsc#1233305).
• ASoC: SOF: Deprecate invalid enums in IPC3 (bsc#1233305).
• ASoC: SOF: IPC4: get pipeline priority from topology (bsc#1233305).
• ASoC: SOF: IPC4: synchronize fwconfigparams with fw definitions (bsc#1233305).
• ASoC: SOF: Refactor sofi2stokens reading to update acpbt dai (bsc#1233305).
• ASoC: SOF: Rename amdbt sofdai_type (bsc#1233305).
• ASoC: SOF: Wire up buffer flags (bsc#1233305).
• ASoC: SOF: add alignment for topology header file struct definition (bsc#1233305).
• ASoC: SOF: align topology header file with sof topology header (bsc#1233305).
• ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index (git-fixes).
• ASoC: SOF: ipc4-control: Add support for ALSA enum control (bsc#1233305).
• ASoC: SOF: ipc4-control: Add support for ALSA switch control (bsc#1233305).
• ASoC: SOF: ipc4-mtrace: move debug slot related definitions to header.h (bsc#1233305).
• ASoC: SOF: ipc4-topology: Add deep buffer size to debug prints (bsc#1233305).
• ASoC: SOF: ipc4-topology: Add definition for generic switch/enum control (bsc#1233305).
• ASoC: SOF: ipc4-topology: Add module ID print during module set up (bsc#1233305).
• ASoC: SOF: ipc4-topology: Helper to find an swidget by module/instance id (bsc#1233305).
• ASoC: SOF: ipc4-topology: Only handle daiconfig with HWPARAMS for ChainDMA (bsc#1233305).
• ASoC: SOF: ipc4-topology: change chaindma handling in daiconfig (bsc#1233305).
• ASoC: SOF: ipc4-topology: export sofipc4copierissingle_format (bsc#1233305).
• ASoC: SOF: ipc4-topology: set configlength based on devicecount (bsc#1233305).
• ASoC: SOF: ipc4: Add data struct for module notification message from firmware (bsc#1233305).
• ASoC: SOF: ipc4: Add new message type: SOFIPC4GLBLOADLIBRARY_PREPARE (bsc#1233305).
• ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits (git-fixes).
• ASoC: SOF: topology: Parse DAI type token for dspless mode (bsc#1233305).
• ASoC: SOF: topology: dynamically allocate and store DAI widget->private (bsc#1233305).
• ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA (stable-fixes).
• ASoC: amd: yc: Add quirk for HP Dragonfly pro one (stable-fixes).
• ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry (git-fixes).
• ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA (stable-fixes).
• ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6 (stable-fixes).
• ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022 (stable-fixes).
• ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized (git-fixes).
• ASoC: audio-graph-card2: Purge absent supplies for device tree nodes (stable-fixes).
• ASoC: codecs: Fix atomicity violation in sndsoccomponentgetdrvdata() (git-fixes).
• ASoC: codecs: lpass-rx-macro: add missing CDCRXBCLVBATRF_PROC2 to default regs values (stable-fixes).
• ASoC: codecs: rt5640: Always disable IRQs from rt5640cancelwork() (stable-fixes).
• ASoC: codecs: wsa883x: Handle reading version failure (stable-fixes).
• ASoC: cs42l51: Fix some error handling paths in cs42l51_probe() (git-fixes).
• ASoC: dapm: fix bounds checker error in dapmwidgetlist_create (git-fixes).
• ASoC: fsl_micfil: Add sample rate constraint (stable-fixes).
• ASoC: fslmicfil: fix regmapwrite_bits usage (git-fixes).
• ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit (stable-fixes).
• ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m (git-fixes).
• ASoC: max98388: Fix missing increment of variable slot_found (git-fixes).
• ASoC: qcom: Fix NULL Dereference in asocqcomlpasscpuplatform_probe() (git-fixes).
• ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string (stable-fixes).
• ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c (git-fixes).
• ASoC: rt722-sdca: increase clkstoptimeout to fix clock stop issue (stable-fixes).
• ASoC: stm32: spdifrx: fix dma channel release in stm32spdifrxremove (git-fixes).
• ASoC: stm: Prevent potential division by zero in stm32saigetclkdiv() (stable-fixes).
• ASoC: stm: Prevent potential division by zero in stm32saimclkroundrate() (stable-fixes).
• ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip (stable-fixes).
• ASoC: tas2781: Use ofpropertyread_reg() (stable-fixes).
• Bluetooth: Call iso_exit() on module unload (git-fixes).
• Bluetooth: ISO: Fix multiple init when debugfs is disabled (git-fixes).
• Bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync (git-fixes).
• Bluetooth: RFCOMM: FIX possible deadlock in rfcommskstate_change (git-fixes).
• Bluetooth: Remove debugfs directory on module init failure (git-fixes).
• Bluetooth: bnep: fix wild-memory-access in proto_unregister (git-fixes).
• Bluetooth: btintel: Direct exception event to bluetooth stack (git-fixes).
• Bluetooth: btmrvl: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122 (stable-fixes).
• Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001 (git-fixes).
• Bluetooth: fix use-after-free in deviceforeach_child() (git-fixes).
• Bluetooth: hci: fix null-ptr-deref in hcireadsupported_codecs (git-fixes).
• Bluetooth: hcicore: Fix calling mgmtdevice_connected (git-fixes).
• Bluetooth: hcievent: Align BR/EDR JUSTWORKS paring with LE (git-fixes).
• HID: Ignore battery for all ELAN I2C-HID devices (stable-fixes).
• HID: amdsfh: Switch to device-managed dmamalloc_coherent() (git-fixes).
• HID: core: zero-initialize the report buffer (git-fixes).
• HID: i2c-hid: Remove I2CHIDQUIRKSETPWRWAKEUPDEV quirk (stable-fixes).
• HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard (stable-fixes).
• HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad (stable-fixes).
• HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad (stable-fixes).
• HID: multitouch: Add support for B2402FVA track point (stable-fixes).
• HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio (stable-fixes).
• HID: multitouch: Add support for lenovo Y9000P Touchpad (stable-fixes).
• HID: plantronics: Workaround for an unexcepted opposite volume key (stable-fixes).
• HID: wacom: Interpret tilt data from Intuos Pro BT as signed values (git-fixes).
• Input: adp5589-keys - fix NULL pointer dereference (git-fixes).
• Input: adp5589-keys - fix adp5589gpioget_value() (git-fixes).
• Input: edt-ft5x06 - fix regmap leak when probe fails (git-fixes).
• Input: hideep - add missing dependency on REGMAP_I2C (git-fixes).
• Input: hycon-hy46xx - add missing dependency on REGMAP_I2C (git-fixes).
• Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table (stable-fixes).
• Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table (stable-fixes).
• Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line (stable-fixes).
• Input: xpad - add GameSir T4 Kaleid Controller support (git-fixes).
• Input: xpad - add GameSir VID for Xbox One controllers (git-fixes).
• Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller (git-fixes).
• Input: xpad - add support for MSI Claw A1M (git-fixes).
• Input: xpad - add support for Machenike G5 Pro Controller (git-fixes).
• Input: xpad - fix support for some third-party controllers (git-fixes).
• Input: xpad - sort xpad_device by vendor and product ID (git-fixes).
• Input: xpad - spelling fixes for 'Xbox' (git-fixes).
• KVM: Add KVM vcpu ioctl to pre-populate guest memory (jsc#PED-6143).
• KVM: Add KVMPREFAULT_MEMORY vcpu ioctl to pre-populate guest memory (jsc#PED-6143).
• KVM: Add new members to struct kvmgfnrange to operate on (jsc#PED-6143).
• KVM: Document KVMMEMORYMAPPING ioctl (jsc#PED-6143).
• KVM: Document KVMPREFAULT_MEMORY ioctl (jsc#PED-6143).
• KVM: Fix coalescedmmiohas_room() to avoid premature userspace exit (git-fixes).
• KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells (bsc#1215199).
• KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests (bsc#1215199).
• KVM: PPC: Book3S HV: remove unused varible (bsc#1194869).
• KVM: SEV-ES: Fix svmgetmsr()/svmsetmsr() for KVMSEVES_INIT guests (bsc#1232207).
• KVM: SEV-ES: Prevent MSR access post VMSA encryption (bsc#1232207).
• KVM: SVM: Disallow guest from changing userspace's MSRAMD64DE_CFG value (git-fixes).
• KVM: TDX: Add C wrapper functions for SEAMCALLs to the TDX module (jsc#PED-6143).
• KVM: TDX: Add TDX 'architectural' error codes (jsc#PED-6143).
• KVM: TDX: Add helper functions to print TDX SEAMCALL error (jsc#PED-6143).
• KVM: TDX: Add placeholders for TDX VM/vcpu structure (jsc#PED-6143).
• KVM: TDX: Define TDX architectural definitions (jsc#PED-6143).
• KVM: TDX: Make TDX VM type supported (jsc#PED-6143).
• KVM: Use dedicated mutex to protect kvmusagecount to avoid deadlock (git-fixes).
• KVM: VMX: Also clear SGX EDECCSSA in KVM CPU caps when SGX is disabled (git-fixes).
• KVM: VMX: Move out vmxx86ops to 'main.c' to dispatch VMX and TDX (jsc#PED-6143).
• KVM: VMX: Set PFERRGUEST{FINAL,PAGE}_MASK if and only if the GVA is valid (git-fixes).
• KVM: Write the per-page 'segment' when clearing (part of) a guest page (git-fixes).
• KVM: s390: Change virtual to physical address access in diag 0x258 handler (git-fixes bsc#1232626).
• KVM: s390: Fix SORTL and DFLTCC instruction format error in _insn32query (git-fixes bsc#1231276).
• KVM: s390: gaccess: Check if guest address is in memslot (git-fixes bsc#1232623).
• KVM: x86/mmu: Account pf_{fixed,emulate,spurious} in callers of 'do page fault' (jsc#PED-6143).
• KVM: x86/mmu: Assume guest MMIOs are shared (jsc#PED-6143).
• KVM: x86/mmu: Bump pf_taken stat only in the 'real' page fault handler (jsc#PED-6143).
• KVM: x86/mmu: Check that root is valid/loaded when pre-faulting SPTEs (git-fixes).
• KVM: x86/mmu: Make kvmmmudopagefault() return mapped level (jsc#PED-6143).
• KVM: x86/mmu: Skip emulation on page fault iff 1+ SPs were unprotected (git-fixes).
• KVM: x86/mmu: Trigger unprotect logic only on write-protection page faults (git-fixes).
• KVM: x86/vmx: Refactor KVM VMX module init/exit functions (jsc#PED-6143).
• KVM: x86/vmx: initialize loadedvmcssoncpu in vmxinit() (jsc#PED-6143).
• KVM: x86: Add isvmtype_supported callback (jsc#PED-6143).
• KVM: x86: Dedup fastpath MSR post-handling logic (git-fixes).
• KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits (git-fixes).
• KVM: x86: Exit to userspace if fastpath triggers one on instruction skip (git-fixes).
• KVM: x86: Implement kvmarchvcpuprefault_memory() (jsc#PED-6143).
• KVM: x86: Implement kvmarch{, pre}vcpumemory_mapping() (jsc#PED-6143).
• KVM: x86: Move x2APIC ICR helper above kvmapicwrite_nodecode() (git-fixes).
• KVM: x86: Re-enter guest if WRMSR(X2APIC_ICR) fastpath is successful (git-fixes).
• KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).
• NFS: Avoid unnecessary rescanning of the per-server delegation list (git-fixes).
• NFS: remove revoked delegation from server's delegation list (git-fixes).
• NFSD: Fix NFSv4's PUTPUBFH operation (git-fixes).
• NFSD: Mark filecache 'down' if init fails (git-fixes).
• NFSv3: only use NFS timeout for MOUNT when protocols are compatible (bsc#1231016).
• NFSv4: Fix clearing of layout segments in layoutreturn (git-fixes).
• PCI: Add ACS quirk for Qualcomm SA8775P (stable-fixes).
• PCI: Add T_PVPERL macro (git-fixes).
• PCI: Add function 0 DMA alias quirk for Glenfly Arise chip (stable-fixes).
• PCI: Fix pcienableacs() support for the ACS quirks (bsc#1229019).
• PCI: Fix resetmethodstore() memory leak (git-fixes).
• PCI: Mark Creative Labs EMU20k2 INTx masking as broken (stable-fixes).
• PCI: endpoint: Clear secondary (not primary) EPC in pciepcremove_epf() (git-fixes).
• PCI: j721e: Deassert PERST# after a delay of PCIETPVPERL_MS milliseconds (git-fixes).
• PCI: keystone: Add link up check to kspcieothermapbus() (git-fixes).
• PCI: keystone: Set mode as Root Complex for 'ti,keystone-pcie' compatible (git-fixes).
• PCI: rockchip-ep: Fix address translation unit programming (git-fixes).
• RAS/AMD/ATL: Add amdatl prfmt() prefix (jsc#PED-10559).
• RAS/AMD/ATL: Expand helpers for adding and removing base and hole (jsc#PED-10559).
• RAS/AMD/ATL: Implement DF 4.5 NP2 denormalization (jsc#PED-10559).
• RAS/AMD/ATL: Read DRAM hole base early (jsc#PED-10559).
• RAS/AMD/ATL: Validate address map when information is gathered (jsc#PED-10559).
• RDMA/bnxt_re: Add a check for memory allocation (git-fixes)
• RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop (git-fixes)
• RDMA/bnxt_re: Change the sequence of updating the CQ toggle value (git-fixes)
• RDMA/bnxtre: Check cqe flags to know immdata vs inv_irkey (git-fixes)
• RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages (git-fixes)
• RDMA/bnxt_re: Fix a possible memory leak (git-fixes)
• RDMA/bnxt_re: Fix incorrect AVID type in WQE structure (git-fixes)
• RDMA/bnxt_re: Fix incorrect dereference of srq in async event (git-fixes)
• RDMA/bnxt_re: Fix out of bound check (git-fixes)
• RDMA/bnxt_re: Fix the GID table length (git-fixes)
• RDMA/bnxt_re: Fix the max CQ WQEs for older adapters (git-fixes)
• RDMA/bnxt_re: Fix the usage of control path spin locks (git-fixes)
• RDMA/bnxt_re: Return more meaningful error (git-fixes)
• RDMA/bnxt_re: synchronize the qp-handle table array (git-fixes)
• RDMA/core: Fix ENODEV error for iWARP test over vlan (git-fixes)
• RDMA/cxgb4: Dump vendor specific QP details (git-fixes)
• RDMA/cxgb4: Fix RDMACMEVENT_UNREACHABLE error for iWARP (git-fixes)
• RDMA/hns: Add mutex_destroy() (git-fixes)
• RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset (git-fixes)
• RDMA/hns: Fix NULL pointer derefernce in hnsrocemapmrsg() (git-fixes)
• RDMA/hns: Fix an AEQE overflow error caused by untimely update of eqdbci (git-fixes)
• RDMA/hns: Fix cpu stuck caused by printings during reset (git-fixes)
• RDMA/hns: Fix different dgids mapping to the same dip_idx (git-fixes)
• RDMA/hns: Fix flush cqe error when racing with destroy qp (git-fixes)
• RDMA/hns: Fix out-of-order issue of requester when setting FENCE (git-fixes)
• RDMA/hns: Use dev* printings in hem code instead of ibdev* (git-fixes)
• RDMA/hns: Use macro instead of magic number (git-fixes)
• RDMA/irdma: Fix misspelling of 'accept*' (git-fixes)
• RDMA/mad: Improve handling of timed out WRs of mad agent (git-fixes)
• RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page (git-fixes).
• RDMA/mana_ib: use the correct page table index based on hardware page size (git-fixes).
• RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults (git-fixes)
• RDMA/mlx5: Move events notifier registration to be after device registration (git-fixes)
• RDMA/mlx5: Round maxrdatomic/maxdestrd_atomic up instead of down (git-fixes)
• RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled (git-fixes).
• RDMA/rtrs-srv: Avoid null pointer deref during path establishment (git-fixes)
• RDMA/rxe: Fix the qp flush warnings in req (git-fixes)
• RDMA/rxe: Set queue pair curqpstate when being queried (git-fixes)
• RDMA/siw: Add sendpageok() check to disable MSGSPLICE_PAGES (git-fixes)
• RDMA/srpt: Make slab cache names unique (git-fixes)
• SUNRPC: Fix integer overflow in decoderclist() (git-fixes).
• SUNRPC: Fixup gss_status tracepoint error output (git-fixes).
• SUNRPC: Remove BUG_ON call sites (git-fixes).
• SUNRPC: clnt.c: Remove misleading comment (git-fixes).
• USB: appledisplay: close race between probe and completion handler (git-fixes).
• USB: chaoskey: Fix possible deadlock chaoskeylistlock (git-fixes).
• USB: chaoskey: fail open after removal (git-fixes).
• USB: gadget: dummy-hcd: Fix 'task hung' problem (git-fixes).
• USB: misc: cypress_cy7c63: check for short transfer (git-fixes).
• USB: misc: yurex: fix race between read and write (git-fixes).
• USB: serial: ftdisio: Fix atomicity violation in getserial_info() (git-fixes).
• USB: serial: io_edgeport: fix use after free in debug printk (git-fixes).
• USB: serial: option: add Fibocom FG132 0x0112 composition (stable-fixes).
• USB: serial: option: add Quectel RG650V (stable-fixes).
• USB: serial: option: add Telit FN920C04 MBIM compositions (stable-fixes).
• USB: serial: option: add support for Quectel EG916Q-GL (stable-fixes).
• USB: serial: qcserial: add support for Sierra Wireless EM86xx (stable-fixes).
• VM: TDX: Initialize the TDX module when loading the KVM intel kernel module (jsc#PED-6143).
• VM: x86/mmu: Introduce kvmmmumaptdppage() for use by TDX (jsc#PED-6143).
• accel/qaic: Fix the for loop used to walk SG table (git-fixes).
• accel: Use XArray instead of IDR for minors (jsc#PED-11580).
• acpi/arm64: Adjust error handling procedure in gtdtparsetimer_block() (git-fixes).
• ad7780: fix division by zero in ad7780writeraw() (git-fixes).
• aes-gcm-p10: Use the correct bit to test for P10 (bsc#1232704).
• amd-pstate: Set minperf to nominalperf for active mode performance gov (git-fixes).
• apparmor: fix 'Do simple duplicate message elimination' (git-fixes).
• apparmor: test: Fix memory leak for aaunpackstrdup() (git-fixes).
• apparmor: use kvfree_sensitive to free data->data (git-fixes).
• arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386 (git-fixes)
• arm64: cputype: Add Neoverse-N3 definitions (git-fixes)
• arm64: errata: Enable the AC03CPU38 workaround for ampere1a (git-fixes).
• arm64: errata: Expand speculative SSBS workaround once more (git-fixes)
• arm64: esr: Define ESRELxEC_* constants as UL (git-fixes)
• arm64: fix selection of HAVEDYNAMICFTRACEWITHARGS (git-fixes).
• arm64: probes: Fix simulateldr*literal() (git-fixes)
• arm64: probes: Fix uprobes for big-endian kernels (git-fixes)
• arm64: probes: Remove broken LDR (literal) uprobe support (git-fixes)
• ata: libata: Set DIDTIMEOUT for commands that actually timed out (git-fixes).
• ata: libata: avoid superfluous disk spin down + spin up during hibernation (git-fixes).
• audit: do not WARNONONCE(!current->mm) in auditexecompare() (git-fixes).
• audit: do not take tasklock() in auditexe_compare() code path (git-fixes).
• block: print symbolic error name instead of error code (bsc#1231872).
• block: sed-opal: add ioctl IOCOPALSETSIDPW (bsc#1229677).
• bnxten: Cap the size of HWRMPORTPHYQCFG forwarded response (git-fixes).
• bnxt_en: Fix error recovery for 5760X (P7) chips (git-fixes).
• bnxt_en: Fix the PCI-AER routines (git-fixes).
• bnxten: Restore PTP txavail count in case of skb_pad() error (git-fixes).
• bnxt_en: refactor reset close code (git-fixes).
• bpf, lsm: Add disabled BPF LSM hook list (git-fixes).
• bpf, net: Fix a potential race in dosockgetsockopt() (git-fixes).
• bpf, sockmap: SKDROP on attempted redirects of unsupported afvsock (git-fixes).
• bpf, verifier: Correct tailcallreachable for bpf prog (git-fixes).
• bpf, vsock: Drop static vsockbpfprot initialization (git-fixes).
• bpf, x64: Remove tail call detection (git-fixes).
• bpf,perf: Fix perfeventdetachbpfprog error handling (git-fixes).
• bpf: Fail verification for sign-extension of packet data/dataend/datameta (git-fixes).
• bpf: Fix bpfstrtol and bpfstrtoul helpers for 32bit (git-fixes).
• bpf: Fix error message on kfunc arg type mismatch (git-fixes).
• bpf: Fix helper writes to read-only maps (git-fixes).
• bpf: Fix tailcall cases in test_bpf (git-fixes).
• bpf: Fix truncation bug in coerceregtosizesx() (git-fixes).
• bpf: Improve checkrawmodeok test for MEMUNINIT-tagged types (git-fixes).
• bpf: Remove truncation test in bpfstrtol and bpfstrtoul helpers (git-fixes).
• bpf: Zero former ARGPTRTO_{LONG,INT} args in case of error (git-fixes).
• bpf: correctly handle malformed BPFCORETYPEIDLOCAL relos (git-fixes).
• btf, scripts: rust: drop isrustmodule.sh (bsc#1230414 bsc#1229450).
• btrfs: merge btrfsorigbbioendio() into btrfsbioend_io() (bsc#1233193)
• btrfs: send: fix invalid clone operation for file that got its size decreased (git-fixes).
• cachefiles: fix dentry leak in cachefilesopenfile() (bsc#1231183).
• can: ccan: fix {rx,tx}errors statistics (git-fixes).
• can: mcp251xfd: mcp251xfdgettef_len(): fix length calculation (git-fixes).
• can: mcp251xfd: mcp251xfdringalloc(): fix coalescing configuration when switching CAN modes (git-fixes).
• can: netlink: avoid call to dosetdatabittiming callback with stale canpriv::ctrlmode (stable-fixes).
• ceph: fix cap ref leak via netfs init_request (bsc#1231384).
• ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231182).
• cgroup/bpf: only cgroup v2 can be attached by bpf programs (bsc#1234108).
• clk: bcm: bcm53573: fix OF node leak in init (stable-fixes).
• clk: clk-apple-nco: Add NULL check in applnco_probe (git-fixes).
• clk: clk-axi-clkgen: make sure to enable the AXI bus clock (git-fixes).
• clk: imx: Remove CLKSETPARENT_GATE for DRAM mux for i.MX7D (stable-fixes).
• clk: imx: clk-scu: fix clk enable state save and restore (git-fixes).
• clk: imx: fracn-gppll: correct PLL initialization flow (git-fixes).
• clk: imx: fracn-gppll: fix pll power up (git-fixes).
• clk: imx: lpcg-scu: SW workaround for errata (e10858) (git-fixes).
• clk: qcom: clk-alpha-pll: drop lucid-evo pll enabled warning (git-fixes).
• clk: qcom: clk-alpha-pll: fix lucid 5lpe pll enabled check (git-fixes).
• clk: qcom: gcc-qcs404: fix initial rate of GPLL3 (git-fixes).
• clk: renesas: rzg2l: Fix FOUTPOSTDIV clk (git-fixes).
• clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset (git-fixes).
• comedi: Flush partial mappings in error case (git-fixes).
• comedi: ni_routing: tools: Check when the file could not be opened (stable-fixes).
• config: Disable LAM on x86 (bsc#1217845).
• cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems (git-fixes).
• cpufreq: CPPC: Fix possible null-ptr-deref for cppcgetcpu_cost() (git-fixes).
• cpufreq: CPPC: Fix possible null-ptr-deref for cpufreqcpuget_raw() (git-fixes).
• cpufreq: CPPC: Fix wrong return value in cppcgetcpu_cost() (git-fixes).
• cpufreq: CPPC: Fix wrong return value in cppcgetcpu_power() (git-fixes).
• cpufreq: loongson2: Unregister platform_driver on failure (git-fixes).
• cpufreq: mediatek-hw: Fix wrong return value in mtkcpufreqgetcpupower() (git-fixes).
• crypto: aes-gcm-p10 - Use the correct bit to test for P10 (bsc#1232704).
• crypto: api - Fix liveliness check in cryptoalgtested (stable-fixes).
• crypto: bcm - add error check in the ahashhmacinit function (git-fixes).
• crypto: caam - Fix the pointer passed to caamqishutdown() (git-fixes).
• crypto: caam - add error check to caamrsasetprivkey_form (git-fixes).
• crypto: cavium - Fix an error handling path in cptucodeload_fw() (git-fixes).
• crypto: cavium - Fix the if condition to exit loop after timeout (git-fixes).
• crypto: hisilicon/qm - flush all work before driver removed (bsc#1232075)
• crypto: inside-secure - Fix the return value of safexcelxcbcmaccra_init() (git-fixes).
• crypto: octeontx - Fix authenc setkey (stable-fixes).
• crypto: octeontx* - Select CRYPTO_AUTHENC (git-fixes).
• crypto: octeontx2 - Fix authenc setkey (stable-fixes).
• crypto: pcrypt - Call crypto layer directly when padatadoparallel() return -EBUSY (git-fixes).
• crypto: powerpc/p10-aes-gcm - Add dependency on CRYPTOSIMD and re-enable CRYPTOAESGCMP10 (bsc#1230501 ltc#208632).
• crypto: powerpc/p10-aes-gcm - Disable CRYPTOAESGCM_P10 (bsc#1230501 ltc#208632).
• crypto: powerpc/p10-aes-gcm - Re-write AES/GCM stitched implementation (bsc#1230501 ltc#208632).
• crypto: powerpc/p10-aes-gcm - Register modules as SIMD (bsc#1230501 ltc#208632).
• crypto: qat - remove check after debugfscreatedir() (git-fixes).
• crypto: qat - remove faulty arbiter config reset (git-fixes).
• crypto: qat/qat4xxx - fix off by one in uofget_name() (git-fixes).
• crypto: x86/aegis128 - access 32-bit arguments as 32-bit (git-fixes).
• cxgb4: Properly lock TX queue for the selftest (git-fixes).
• cxgb4: add forgotten u64 ivlan cast before shift (git-fixes).
• cxgb4: unnecessary check for 0 in the freesgetxq_uld() function (git-fixes).
• cxl: downgrade a warning message to debug level in cxlprobecomponent_regs() (bsc#1229165).
• dcache: keep dentryhashtable or dhash_shift even when not used (git-fixes).
• debugfs: fix automount d_fsdata usage (git-fixes).
• devlink: Fix command annotation documentation (git-fixes).
• dmaengine: sh: rz-dmac: handle configs where one address is zero (git-fixes).
• dmaengine: ti: k3-udma: Set EOP for all TRs in cyclic BCDMA transfer (git-fixes).
• doc: rcu: update printed dynticks counter bits (git-fixes).
• driver core: bus: Fix double free in driver API bus_register() (stable-fixes).
• driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (stable-fixes).
• drivers: soc: xilinx: add the missing kfree in xlnxaddcbforsuspend() (git-fixes).
• drm/amd/amdgpu: Fix double unlock in amdgpumesadd_ring (git-fixes).
• drm/amd/display: Add HDMI DSC native YCbCr422 support (stable-fixes).
• drm/amd/display: Add disable timeout option (bsc#1231435)
• drm/amd/display: Adjust VSDB parser for replay feature (stable-fixes).
• drm/amd/display: Check linkres->hpodplinkenc before using it (bsc#1231944)
• drm/amd/display: Check null pointer before dereferencing se (stable-fixes).
• drm/amd/display: Clean up dsc blocks in accelerated mode (stable-fixes).
• drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too (stable-fixes).
• drm/amd/display: Fix brightness level not retained over reboot (git-fixes).
• drm/amd/display: Fix null check for pipectx->planestate in dcn20programpipe (git-fixes).
• drm/amd/display: Fix null check for pipectx->planestate in hwsssetupdpp (git-fixes).
• drm/amd/display: Remove a redundant check in authenticated_dp (stable-fixes).
• drm/amd/display: Revert 'Check HDCP returned status' (stable-fixes).
• drm/amd/display: Round calculated vtotal (stable-fixes).
• drm/amd/display: Skip to enable dsc if it has been off (stable-fixes).
• drm/amd/display: Validate backlight caps are sane (stable-fixes).
• drm/amd/pm: Vangogh: Fix kernel memory out of bounds write (git-fixes).
• drm/amd: Add some missing straps from NBIO 7.11.0 (git-fixes).
• drm/amd: Fix initialization mistake for NBIO 7.7.0 (stable-fixes).
• drm/amd: Guard against bad data for ATIF ACPI method (git-fixes).
• drm/amdgpu/swsmu: Only force workload setup on init (git-fixes).
• drm/amdgpu/vcn: enable AV1 on both instances (stable-fixes).
• drm/amdgpu: Adjust debugfs eviction and IB access permissions (stable-fixes).
• drm/amdgpu: Adjust debugfs register access permissions (stable-fixes).
• drm/amdgpu: Fix DPX valid mode check on GC 9.4.3 (git-fixes).
• drm/amdgpu: Fix JPEG v4.0.3 register write (git-fixes).
• drm/amdgpu: add missing size check in amdgpudebugfsgprwave_read() (stable-fixes).
• drm/amdgpu: fix check in gmcv90getvm_pte() (git-fixes).
• drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported (git-fixes).
• drm/amdkfd: Accounting pdd vram_usage for svm (stable-fixes).
• drm/amdkfd: Fix wrong usage of INIT_WORK() (git-fixes).
• drm/bridge: anx7625: Drop EDID cache on bridge power off (git-fixes).
• drm/bridge: it6505: Drop EDID cache on bridge power off (git-fixes).
• drm/bridge: tc358767: Fix link properties discovery (git-fixes).
• drm/bridge: tc358768: Fix DSI command tx (git-fixes).
• drm/etnaviv: Request pages from DMA32 zone on addressing_limited (git-fixes).
• drm/etnaviv: hold GPU lock across perfmon sampling (git-fixes).
• drm/i915/gem: fix bitwise and logical AND mixup (git-fixes).
• drm/i915/hdcp: fix connector refcounting (git-fixes).
• drm/imx/dcss: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• drm/imx/ipuv3: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• drm/mediatek: Fix child node refcount handling in early exit (git-fixes).
• drm/mediatek: Fix get efuse issue for MT8188 DPTX (git-fixes).
• drm/mm: Mark drmmmintervaltree*() functions with _maybe_unused (git-fixes).
• drm/msm/adreno: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• drm/msm/dpu: cast crtcclk calculation to u64 in _dpucoreperfcalc_clk() (git-fixes).
• drm/msm/dpu: check for overflow in dpucrtcsetuplm_bounds() (git-fixes).
• drm/msm/dpu: do not always program merge_3d block (git-fixes).
• drm/msm/dpu: drop LM3 / LM4 on MSM8998 (git-fixes).
• drm/msm/dpu: drop LM3 / LM4 on SDM845 (git-fixes).
• drm/msm/dpu: make sure phys resources are properly initialized (git-fixes).
• drm/msm/dpu: move CRTC resource assignment to dpuencodervirtatomiccheck (git-fixes).
• drm/msm/dpu: on SDM845 move DSPP3 to LM5 block (git-fixes).
• drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation (git-fixes).
• drm/msm/dsi: improve/fix dsc pclk calculation (git-fixes).
• drm/msm/gpu: Check the status of registration to PM QoS (git-fixes).
• drm/msm: Allocate memory for disp snapshot with kvzalloc() (git-fixes).
• drm/msm: Avoid NULL dereference in msmdispstateprintregs() (git-fixes).
• drm/msm: Fix some typos in comment (git-fixes).
• drm/nouveau/gr/gf100: Fix missing unlock in gf100grchan_new() (git-fixes).
• drm/omap: Fix locking in omapgemnew_dmabuf() (git-fixes).
• drm/omap: Fix possible NULL dereference (git-fixes).
• drm/panfrost: Add missing OPP table refcnt decremental (git-fixes).
• drm/panfrost: Remove unused idmask from struct panfrostmodel (git-fixes).
• drm/radeon: Fix encoder->possible_clones (git-fixes).
• drm/rockchip: vop: Fix a dereferenced before check warning (git-fixes).
• drm/sched: Add locking to drmschedentitymodifysched (git-fixes).
• drm/sched: Always wake up correct scheduler in drmschedentitypushjob (git-fixes).
• drm/sti: avoid potential dereference of error pointers (git-fixes).
• drm/sti: avoid potential dereference of error pointers in stigdpatomic_check (git-fixes).
• drm/sti: avoid potential dereference of error pointers in stihqvdpatomic_check (git-fixes).
• drm/v3d: Address race-condition in MMU flush (git-fixes).
• drm/v3d: Stop the active perfmon before being destroyed (git-fixes).
• drm/vboxvideo: Replace fake VLA at end of vbvamousepointer_shape with real VLA (stable-fixes).
• drm/vc4: Match drmdeventer and exit calls in vc4hvsatomic_flush (git-fixes).
• drm/vc4: Match drmdeventer and exit calls in vc4hvslut_load (git-fixes).
• drm/vc4: Stop the active perfmon before being destroyed (git-fixes).
• drm/vc4: hdmi: Avoid hang with debug registers when suspended (git-fixes).
• drm/vc4: hvs: Correct logic on stopping an HVS channel (git-fixes).
• drm/vc4: hvs: Do not write gamma luts on 2711 (git-fixes).
• drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer (git-fixes).
• drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function (git-fixes).
• drm/vkms: Drop unnecessary call to drmcrtccleanup() (git-fixes).
• drm/vmwgfx: Handle surface check failure correctly (git-fixes).
• drm/vmwgfx: Limit display layout ioctl array size to VMWGFXNUMDISPLAY_UNITS (stable-fixes).
• drm: Consistently use struct drmmoderect for FBDAMAGECLIPS (git-fixes).
• drm: Expand max DRM device number to full MINORBITS (jsc#PED-11580).
• drm: Use XArray instead of IDR for minors (jsc#PED-11580).
• drm: use ATOMIC64INIT() for atomic64t (git-fixes).
• drm: xlnx: zynqmp_dpsub: fix hotplug detection (git-fixes).
• drm: zynqmp_kms: Unplug DRM device before removal (git-fixes).
• e1000e: Fix S0ix residency on corporate systems (git-fixes).
• e1000e: Remove Meteor Lake SMBUS workarounds (git-fixes).
• e1000e: change I219 (19) devices to ADP (git-fixes).
• e1000e: fix force smbus during suspend flow (git-fixes).
• e1000e: move force SMBUS near the end of enable_ulp function (git-fixes).
• efi/libstub: Free correct pointer on failure (git-fixes).
• efi/libstub: fix efiparseoptions() ignoring the default command line (git-fixes).
• efi/libstub: zboot.lds: Discard .discard sections (stable-fixes).
• efi/memattr: Ignore table if the size is clearly bogus (bsc#1231465).
• efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption (stable-fixes).
• eth: bnxt: fix counting packets discarded due to OOM and netpoll (git-fixes).
• ext4: do not track ranges in fast_commit if inode has inlined data (bsc#1231635).
• ext4: fix fast commit inode enqueueing during a full journal commit (bsc#1231636).
• ext4: fix incorrect tid assumption in ext4fcmark_ineligible() (bsc#1231637).
• ext4: fix possible tid_t sequence overflows (bsc#1231634).
• ext4: fix slab-use-after-free in ext4splitextent_at() (bsc#1232201)
• ext4: fix unttached inode after power cut with orphan file feature enabled (bsc#1234009).
• ext4: mark fc as ineligible using an handle in ext4xattrset() (bsc#1231640).
• ext4: use handle to mark fc as ineligible in _trackdentry_update() (bsc#1231639).
• f2fs: get out of a repeat loop when getting a locked data page (bsc#1234011).
• fat: fix uninitialized variable (git-fixes).
• fbcon: Fix a NULL pointer dereference issue in fbcon_putcs (stable-fixes).
• fbdev: sh7760fb: Fix a possible memory leak in sh7760fballocmem() (git-fixes).
• fbdev: sisfb: Fix strbuf array overflow (stable-fixes).
• fgraph: Change the name of cpuhp state to 'fgraph:online' (git-fixes).
• fgraph: Fix missing unlock in registerftracegraph() (git-fixes).
• fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks (git-fixes).
• filemap: remove use of wait bookmarks (bsc#1224088).
• firmware: armscmi: Fix slab-use-after-free in scmibus_notifier() (git-fixes).
• firmware: armscmi: Fix the double free in scmidebugfscommonsetup() (git-fixes).
• firmware: arm_scpi: Check the DVFS OPP count returned by the firmware (git-fixes).
• firmware: armsdei: Fix the input parameter of cpuhpremove_state() (git-fixes).
• firmware: google: Unregister driver_info on failure (git-fixes).
• firmwareloader: Fix possible resource leak in fwlogfirmwareinfo() (git-fixes).
• fs/9p: drop inodes immediately on non-.L too (git-fixes).
• fs/9p: fix the cache always being enabled on files with qid flags (git-fixes).
• fs/ntfs3: Add more attributes checks in mienumattr() (bsc#1233207)
• fs/ntfs3: Fixed overflow check in mienumattr() (bsc#1233207)
• fs/ntfs3: Sequential field availability check in mienumattr() (bsc#1233207)
• fs: Fix uninitialized value issue in fromkuid and fromkgid (git-fixes).
• genirq/msi: Fix off-by-one error in msidomainalloc() (git-fixes).
• goldfish: Fix unused const variable 'goldfishpipeacpi_match' (git-fixes).
• gpio: aspeed: Add the flush write to ensure the write complete (git-fixes).
• gpio: aspeed: Use devm_clk api to manage clock source (git-fixes).
• gpio: davinci: fix lazy disable (git-fixes).
• gpio: exar: set value when external pull-up or pull-down is present (git-fixes).
• gpio: zevio: Add missed label initialisation (git-fixes).
• gve: Fix XDP TX completion handling when counters overflow (git-fixes).
• gve: Fix an edge case for TSO skb validity check (git-fixes).
• gve: ignore nonrelevant GSO type bits when processing TSO headers (git-fixes).
• hid: intel-ish-hid: Fix uninitialized variable 'rv' in ishfwxferdirectdma (git-fixes).
• hvnetvsc: Fix VF namespace also in synthetic NIC NETDEVREGISTER event (git-fixes).
• hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer (git-fixes).
• hwmon: (adm9240) Add missing dependency on REGMAP_I2C (git-fixes).
• hwmon: (adt7470) Add missing dependency on REGMAP_I2C (git-fixes).
• hwmon: (max16065) Fix alarm attributes (git-fixes).
• hwmon: (max16065) Remove use of i2cmatchid() (stable-fixes).
• hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C (git-fixes).
• hwmon: (nct6775) add G15CF to ASUS WMI monitoring list (stable-fixes).
• hwmon: (nct6775-core) Fix overflows seen when writing limit attributes (git-fixes).
• hwmon: (tmp513) Add missing dependency on REGMAP_I2C (git-fixes).
• hwmon: (tps23861) Fix reporting of negative temperatures (git-fixes).
• hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature (git-fixes).
• i2c: core: Setup i2cadapter runtime-pm before calling deviceadd() (git-fixes).
• i2c: core: fix lockdep warning for sparsely nested adapter chain (git-fixes).
• i2c: cpm: Remove linux,i2c-index conversion from be32 (git-fixes).
• i2c: designware: do not hold SCL low when I2CDYNAMICTAR_UPDATE is not set (git-fixes).
• i2c: exynos5: Calculate tscll, tsclh according to i2c spec (git-fixes).
• i2c: i801: Add lis3lv02d for Dell Precision 3540 (git-fixes).
• i2c: i801: Add lis3lv02d for Dell XPS 15 7590 (git-fixes).
• i2c: i801: Use a different adapter-name for IDF adapters (stable-fixes).
• i2c: i801: add helper i801restoreregs (git-fixes).
• i2c: ismt: kill transaction in hardware on timeout (git-fixes).
• i2c: ocores: Move system PM hooks to the NOIRQ phase (git-fixes).
• i2c: ocores: Remove #ifdef guards for PM related functions (git-fixes).
• i2c: omap: switch to NOIRQSYSTEMSLEEPPMOPS() and RUNTIMEPMOPS() (git-fixes).
• i2c: omap: wakeup the controller during suspend() callback (git-fixes).
• i2c: rcar: properly format a debug output (git-fixes).
• i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume (git-fixes).
• i2c: stm32f7: perform most of irq job in threaded handler (git-fixes).
• i2c: synquacer: Deal with optional PCLK correctly (git-fixes).
• i2c: synquacer: Remove a clk reference from struct synquacer_i2c (stable-fixes).
• i2c: xiic: Try re-initialization on bus busy timeout (git-fixes).
• i2c: xiic: improve error message when transfer fails to start (stable-fixes).
• i3c: master: Fix miss free initdynaddr at i3cmasterputi3caddrs() (git-fixes).
• i3c: master: cdns: Fix use after free vulnerability in cdnsi3cmaster Driver Due to Race Condition (stable-fixes).
• i3c: master: svc: Fix pmruntimeset_suspended() with runtime pm enabled (git-fixes).
• i40e: Fix XDP program unloading while removing the driver (git-fixes).
• i40e: Report MFS in decimal base instead of hex (git-fixes).
• i40e: fix race condition by adding filter's intermediate sync state (git-fixes).
• iavf: Fix TC config comparison with existing adapter TC config (git-fixes).
• ice: Fix VSI list rule with ICESWLKUP_LAST type (git-fixes).
• ice: Fix checking for unsupported keys on non-tunnel device (git-fixes).
• ice: Fix lldp packets dropping after changing the number of channels (git-fixes).
• ice: Fix netifisice() in Safe Mode (git-fixes).
• ice: Fix package download algorithm (git-fixes).
• ice: Fix recipe read procedure (git-fixes).
• ice: Fix reset handler (git-fixes).
• ice: Flush FDB entries before reset (git-fixes).
• ice: Interpret .set_channels() input differently (git-fixes).
• ice: Rebuild TC queues on VSI queue reconfiguration (git-fixes).
• ice: Reject pin requests with unsupported flags (git-fixes).
• ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (git-fixes).
• ice: add missing WRITEONCE when clearing icerxring::xdpprog (git-fixes).
• ice: avoid IRQ collision to fix init failure on ACPI S3 resume (git-fixes).
• ice: clear port vlan config during reset (git-fixes).
• ice: disallow DPLLPINSTATE_SELECTABLE for dpll output pins (git-fixes).
• ice: do not bring the VSI up, if it was down before the XDP setup (git-fixes).
• ice: do not busy wait for Rx queue disable in iceqpdis() (git-fixes).
• ice: fix 200G PHY types to link speed mapping (git-fixes).
• ice: fix 200G link speed message log (git-fixes).
• ice: fix ICELASTOFFSET formula (git-fixes).
• ice: fix VLAN replay after reset (git-fixes).
• ice: fix VSI lists confusion when adding VLANs (git-fixes).
• ice: fix accounting for filters shared by multiple VSIs (git-fixes).
• ice: fix accounting if a VLAN already exists (git-fixes).
• ice: fix iteration of TLVs in Preserved Fields Area (git-fixes).
• ice: fix page reuse when PAGE_SIZE is over 8k (git-fixes).
• ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (git-fixes).
• ice: fix truesize operations for PAGE_SIZE >= 8192 (git-fixes).
• ice: implement AQ download pkg retry (git-fixes).
• ice: map XDP queues to vectors in icevsimapringsto_vectors() (git-fixes).
• ice: remove afxdpzc_qps bitmap (git-fixes).
• ice: replace synchronizercu with synchronizenet (git-fixes).
• ice: respect netif readiness in AF_XDP ZC related ndo's (git-fixes).
• ice: set correct dst VSI in only LAN filters (git-fixes).
• ice: tc: allow zero flags in parsing tc flower (git-fixes).
• ice: tc: check src_vsi in case of traffic from VF (git-fixes).
• ice: use proper macro for testing bit (git-fixes).
• idpf: Interpret .set_channels() input differently (git-fixes).
• idpf: avoid bloating &idpfqvector with big %NR_CPUS (git-fixes).
• idpf: do not enable NAPI and interrupts prior to allocating Rx buffers (git-fixes).
• idpf: do not skip over ethtool tcp-data-split setting (git-fixes).
• idpf: fix UAFs when destroying the queues (git-fixes).
• idpf: fix memleak in vport interrupt configuration (git-fixes).
• idpf: fix memory leaks and crashes while performing a soft reset (git-fixes).
• ieee802154: Fix build error (git-fixes).
• igb: Always call igbxdpringupdatetail() under Tx lock (git-fixes).
• igb: Disable threaded IRQ for igbmsixother (git-fixes).
• igb: Fix not clearing TimeSync interrupts for 82580 (git-fixes).
• igc: Fix double reset adapter triggered from a single taprio cmd (git-fixes).
• igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (git-fixes).
• igc: Fix qbv tx latency by setting gtxoffset (git-fixes).
• igc: Fix qbvconfigchange_errors logics (git-fixes).
• igc: Fix reset adapter logics when tx mode change (git-fixes).
• igc: Unlock on error in igcioresume() (git-fixes).
• iio: Fix fwnodehandle in _fwnodeiiochannelgetby_name() (git-fixes).
• iio: accel: bma400: Fix uninitialized variable field_value in tap event handling (git-fixes).
• iio: accel: kx022a: Fix raw read format (git-fixes).
• iio: accel: kx022a: add missing select IIO(TRIGGERED)BUFFER in Kconfig (git-fixes).
• iio: adc: ad7124: fix division by zero in ad7124setchannel_odr() (git-fixes).
• iio: adc: ad7606: Fix typo in the driver name (git-fixes).
• iio: adc: ad7923: Fix buffer overflow for txbuf and ringxfer (git-fixes).
• iio: adc: ti-ads124s08: add missing select IIO(TRIGGERED)BUFFER in Kconfig (git-fixes).
• iio: adc: ti-ads8688: add missing select IIO(TRIGGERED)BUFFER in Kconfig (git-fixes).
• iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig (git-fixes).
• iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig (git-fixes).
• iio: dac: ad3552r: add missing select IIO(TRIGGERED)BUFFER in Kconfig (git-fixes).
• iio: dac: ad5766: add missing select IIO(TRIGGERED)BUFFER in Kconfig (git-fixes).
• iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig (git-fixes).
• iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig (git-fixes).
• iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig (git-fixes).
• iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig (git-fixes).
• iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig (git-fixes).
• iio: gts-helper: Fix memory leaks for the error path of iiogtsbuildavailscale_table() (git-fixes).
• iio: gts-helper: Fix memory leaks in iiogtsbuildavailscale_table() (git-fixes).
• iio: gts: Fix uninitialized symbol 'ret' (git-fixes).
• iio: gts: fix infinite loop for gaintoscaletables() (git-fixes).
• iio: hid-sensors: Fix an error handling path in hidsensorsetreport_latency() (git-fixes).
• iio: light: al3010: Fix an error handling path in al3010_probe() (git-fixes).
• iio: light: opt3001: add missing full-scale range value (git-fixes).
• iio: light: veml6030: fix ALS sensor resolution (git-fixes).
• iio: light: veml6030: fix IIO device retrieval from embedded device (git-fixes).
• iio: light: veml6030: fix microlux value calculation (git-fixes).
• iio: magnetometer: ak8975: Convert enum->pointer for data in the match tables (stable-fixes).
• iio: magnetometer: ak8975: Fix 'Unexpected device' error (git-fixes).
• iio: magnetometer: ak8975: drop incorrect AK09116 compatible (git-fixes).
• iio: proximity: mb1232: add missing select IIO(TRIGGERED)BUFFER in Kconfig (git-fixes).
• ima: fix buffer overrun in imaeventdigestinit_common (git-fixes).
• initramfs: avoid filename buffer overrun (bsc#1232436).
• intel_idle: add Granite Rapids Xeon support (bsc#1231630).
• intel_idle: fix ACPI _CST matching for newer Xeon platforms (bsc#1231630).
• io_uring/eventfd: move to more idiomatic RCU free usage (git-fixes).
• io_uring/io-wq: do not allow pinning outside of cpuset (git-fixes).
• io_uring/io-wq: inherit cpuset of cgroup in io worker (git-fixes).
• io_uring/net: harden multishot termination case for recv (git-fixes).
• io_uring/rw: fix cflags posting for single issue multishot read (git-fixes).
• iouring/rw: fix missing NOWAIT check for ODIRECT start write (git-fixes).
• iouring/rw: treat -EOPNOTSUPP for IOCBNOWAIT like -EAGAIN (git-fixes).
• io_uring/sqpoll: close race on waiting for sqring entries (git-fixes).
• io_uring/sqpoll: do not allow pinning outside of cpuset (git-fixes).
• io_uring/sqpoll: do not put cpumask on stack (git-fixes).
• io_uring/sqpoll: retain test for whether the CPU is valid (git-fixes).
• iouring: check for presence of taskwork rather than TIFNOTIFYSIGNAL (git-fixes).
• iommu/amd: Allocate the page table root using GFP_KERNEL (git-fixes).
• iommu/amd: Do not set the D bit on AMD v2 table entries (git-fixes).
• iommu/amd: Fix typo of , instead of ; (git-fixes).
• iommu/vt-d: Always reserve a domain ID for identity setup (git-fixes).
• iommu/vt-d: Fix incorrect pciforeachdmaalias() for non-PCI devices (git-fixes).
• iommufd: Check the domain owner of the parent before creating a nesting domain (git-fixes).
• iommufd: Protect against overflow of ALIGN() during iova allocation (git-fixes).
• irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack (git-fixes).
• jbd2: Move jtransactionoverhead_buffers into a hole (bsc#1234042).
• jbd2: avoid infinite transaction commit loop (bsc#1234039).
• jbd2: avoid memleak in jbd2journalwritemetadatabuffer (bsc#1234043).
• jbd2: avoid mount failed when commit block is partial submitted (bsc#1234040).
• jbd2: correct the printing of writeflags in jbd2write_superblock() (bsc#1234045).
• jbd2: correctly compare tids with tidgeq function in jbd2fcbegincommit (bsc#1231638).
• jbd2: fix kernel-doc for jtransactionoverhead_buffers (bsc#1234042).
• jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev (bsc#1234044).
• jbd2: fix soft lockup in journalfinishinodedatabuffers() (bsc#1234046).
• jbd2: make jbd2journalgetmaxtxn_bufs() internal (bsc#1234041).
• jbd2: precompute number of transaction descriptor blocks (bsc#1234042).
• jfs: Fix sanity check in dbMount (git-fixes).
• jfs: Fix uaf in dbFreeBits (git-fixes).
• jfs: Fix uninit-value access of newea in eabuffer (git-fixes).
• jfs: UBSAN: shift-out-of-bounds in dbFindBits (git-fixes).
• jfs: check if leafidx greater than num leaves per dmap tree (git-fixes).
• jumplabel: Fix statickeyslowdec() yet again (git-fixes).
• kABI fix of VM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC) (git-fixes).
• kABI: bpf: enum bpf{typeflag,arg_type} kABI workaround (git-fixes).
• kABI: bpf: struct bpfinsnacces_aux kABI workaround (git-fixes).
• kabi, mm: refactor archcalcvmflagbits() and arm64 MTE handling (git-fixes kabi).
• kasan: Fix Software Tag-Based KASAN with GCC (git-fixes).
• kasan: move checks to dostrncpyfrom_user (git-fixes).
• kbuild, bpf: Use test-ge check for v1.25-only pahole (bsc#1230414 bsc#1229450).
• kbuild,bpf: Add module-specific pahole flags for distilled base BTF (bsc#1230414 bsc#1229450).
• kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (bsc#1230414 bsc#1229450).
• kbuild: avoid too many execution of scripts/pahole-flags.sh (bsc#1230414 bsc#1229450).
• kbuild: bpf: Tell pahole to DECL_TAG kfuncs (bsc#1230414 bsc#1229450).
• kconfig: qconf: fix buffer overflow in debug links (git-fixes).
• kernel-binary: Enable livepatch package only when livepatch is enabled (bsc#1218644).
• kexecfile: fix elfcorehdr digest exclusion when CONFIGCRASH_HOTPLUG=y (git-fixes).
• keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry (git-fixes).
• keys: Fix overwrite of key expiration on instantiation (git-fixes).
• kthread: unpark only parked kthread (git-fixes).
• leds: lp55xx: Remove redundant test for invalid channel number (git-fixes).
• lib/xarray: introduce a new helper xasgetorder (bsc#1231617).
• lib: string_helpers: silence snprintf() output truncation warning (git-fixes).
• mac80211: MAC80211MESSAGETRACING should depend on TRACING (git-fixes).
• macsec: do not increment counters for an unrelated SA (git-fixes).
• mailbox: armmhuv2: clean up loop in getirqchancomb() (git-fixes).
• maple_tree: correct tree corruption on spanning store (git-fixes).
• maple_tree: fix alloc node fail issue (git-fixes).
• mapletree: refine masstore_root() on storing NULL (git-fixes).
• media: adv7604: prevent underflow condition when reporting colorspace (git-fixes).
• media: amphion: Fix pmruntimeset_suspended() with runtime pm enabled (git-fixes).
• media: amphion: Set video drvdata before register video device (git-fixes).
• media: ar0521: do not overflow when checking PLL values (git-fixes).
• media: atomisp: Add check for rgby_data memory allocation failure (git-fixes).
• media: bttv: use audio defaults for winfast2000 (git-fixes).
• media: core: v4l2-ioctl: check if ioctl is known to avoid NULL name (git-fixes).
• media: cx24116: prevent overflows on SNR calculus (git-fixes).
• media: dvb_frontend: do not play tricks with underflow values (git-fixes).
• media: dvbdev: fix the logic when DVBDYNAMICMINORS is not set (stable-fixes).
• media: dvbdev: prevent the risk of out of memory access (git-fixes).
• media: gspca: ov534-ov772x: Fix off-by-one error in setframerate() (git-fixes).
• media: i2c: dw9768: Fix pmruntimeset_suspended() with runtime pm enabled (git-fixes).
• media: i2c: imx335: Enable regulator supplies (stable-fixes).
• media: i2c: tc358743: Fix crash in the probe error path when using polling (git-fixes).
• media: imx-jpeg: Ensure power suppliers be suspended before detach them (git-fixes).
• media: imx-jpeg: Set video drvdata before register video device (git-fixes).
• media: imx335: Fix reset-gpio handling (git-fixes).
• media: mantis: remove orphan mantis_core.h (git-fixes).
• media: mtk-jpeg: Fix null-ptr-deref during unload module (git-fixes).
• media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning (git-fixes).
• media: platform: allegro-dvt: Fix possible memory leak in allocatebuffersinternal() (git-fixes).
• media: platform: exynos4-is: Fix an OF node reference leak in fimcmdisispavailable (git-fixes).
• media: pulse8-cec: fix data timestamp at pulse8_setup() (git-fixes).
• media: s5p-jpeg: prevent buffer overflows (git-fixes).
• media: stb0899_algo: initialize cfr before using it (git-fixes).
• media: ts2020: fix null-ptr-deref in ts2020_probe() (git-fixes).
• media: uvcvideo: Require entities to have a non-zero unique ID (git-fixes).
• media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat (git-fixes).
• media: uvcvideo: Stop stream during unregister (git-fixes).
• media: v4l2-ctrls-api: fix error handling for v4l2gctrl() (git-fixes).
• media: v4l2-tpg: prevent the risk of a division by zero (git-fixes).
• media: vb2: Fix comment (git-fixes).
• media: venus: Fix pmruntimeset_suspended() with runtime pm enabled (git-fixes).
• media: videobuf2-core: clear memory related fields in _vb2planedmabufput() (stable-fixes).
• media: videobuf2: fix typo: vb2dbuf -> vb2qbuf (git-fixes).
• media: wl128x: Fix atomicity violation in fmcsendcmd() (git-fixes).
• mei: use kvmalloc for read buffer (git-fixes).
• mfd: intelsocpmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict (stable-fixes).
• mfd: rt5033: Fix missing regmapdelirq_chip() (git-fixes).
• mfd: tps65010: Use IRQFNOAUTOEN flag in request_irq() to fix race (git-fixes).
• minmax: avoid overly complex min()/max() macro arguments in xen (git-fixes).
• minmax: scsi: fix mis-use of 'clamp()' in sr.c (git-fixes).
• misc: apds990x: Fix missing pmruntimedisable() (git-fixes).
• mlx5: avoid truncating error message (git-fixes).
• mlx5: stop warning for 64KB pages (git-fixes).
• mlxbf_gige: disable RX filters until RX path initialized (git-fixes).
• mm/filemap: optimize filemap folio adding (bsc#1231617).
• mm/filemap: return early if failed to allocate memory for split (bsc#1231617).
• mm/hugetlb: fix nodes huge page allocation when there are surplus pages (bsc#1234012).
• mm: avoid unsafe VMA hook invocation when error arises on mmap hook (git-fixes).
• mm: khugepaged: fix the arguments order in khugepagedcollapsefile trace point (git-fixes).
• mm: mmap: no need to call khugepagedentervma() for stack (jsc#PED-10978).
• mm: move dummyvmops out of a header (git-fixes prerequisity).
• mm: refactor archcalcvmflagbits() and arm64 MTE handling (git-fixes).
• mm: refactor mapdenywrite_exec() (git-fixes).
• mm: resolve faulty mmap_region() error path behaviour (git-fixes).
• mm: unconditionally close VMAs on error (git-fixes).
• mmc: mmc_spi: drop buggy snprintf() (git-fixes).
• mmc: sunxi-mmc: Fix A100 compatible description (git-fixes).
• modpost: fix acpi MODULEDEVICETABLE built with mismatched endianness (git-fixes).
• modpost: fix input MODULEDEVICETABLE() built for 64-bit on 32-bit host (git-fixes).
• modpost: remove incorrect code in doeisaentry() (git-fixes).
• module: abort module loading when sysfs setup suffer errors (git-fixes).
• mtd: rawnand: atmel: Fix possible memory leak (git-fixes).
• mtd: spi-nor: core: replace dummy buswidth from addr to data (git-fixes).
• nbd: fix race between timeout and normal completion (bsc#1230918).
• net/mlx5: Add missing masks and QoS bit masks for scheduling elements (git-fixes).
• net/mlx5: Added cond_resched() to crdump collection (git-fixes).
• net/mlx5: Check capability for fw_reset (git-fixes).
• net/mlx5: Check for invalid vector index on EQ creation (git-fixes).
• net/mlx5: Explicitly set scheduling element and TSAR type (git-fixes).
• net/mlx5: Fix command bitmask initialization (git-fixes).
• net/mlx5: Fix error handling in irqpoolrequest_irq (git-fixes).
• net/mlx5: Lag, do bond only if slaves agree on roce state (git-fixes).
• net/mlx5: Lag, do not use the hardcoded value of the first port (git-fixes).
• net/mlx5: Stop waiting for PCI if pci channel is offline (git-fixes).
• net/mlx5: Unregister notifier on eswitch init failure (git-fixes).
• net/mlx5: Update the list of the PCI supported devices (git-fixes).
• net/mlx5e: Add a check for the return value from mlx5portsetethptys (git-fixes).
• net/mlx5e: Add missing link mode to ptys2extethtoolmap (git-fixes).
• net/mlx5e: Add missing link modes to ptys2ethtool_map (git-fixes).
• net/mlx5e: Add mqpriorl cleanup and free in mlx5epriv_cleanup() (git-fixes).
• net/mlx5e: Correctly report errors for ethtool rx flows (git-fixes).
• net/mlx5e: Do not call cleanup on profile rollback failure (git-fixes).
• net/mlx5e: Fix IPsec tunnel mode offload feature check (git-fixes).
• net/mlx5e: Fix UDP GSO for encapsulated packets (git-fixes).
• net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (git-fixes).
• net/mlx5e: Require mlx5 tc classifier action support for IPsec prio capability (git-fixes).
• net/mlx5e: Use rxmissederrors instead of rx_dropped for reporting buffer exhaustion (git-fixes).
• net: mana: Implement getringparam/setringparam for mana (bsc#1229891).
• net: mana: Improve manasetchannels() in low mem conditions (bsc#1230289).
• net: mdio-ipq4019: add missing error check (git-fixes).
• net: phy: Remove LED entry from LEDs list on unregister (git-fixes).
• net: phy: bcm84881: Fix some error handling paths (git-fixes).
• net: phy: dp83822: Fix reset pin definitions (git-fixes).
• net: phy: dp83869: fix memory corruption when enabling fiber (git-fixes).
• net: phy: ti: add PHYRSTAFTERCLKEN flag (git-fixes).
• net: qede: sanitize 'rc' in qedeaddtcflowerfltr() (git-fixes).
• net: qede: use return from qedeparseactions() (git-fixes).
• net: qede: use return from qedeparseflowattr() for flowspec (git-fixes).
• net: qede: use return from qedeparseflow_attr() for flower (git-fixes).
• net: relax socket state check at accept time (git-fixes).
• net: stmmac: dwmac-tegra: Fix link bring-up sequence (git-fixes)
• net: sysfs: Fix /sys/class/net/<iface> path for statistics (git-fixes).
• net: test for not too small csumstart in virtionethdrto_skb() (git-fixes).
• net: usb: lan78xx: Fix double free issue with interrupt buffer allocation (git-fixes).
• net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device (git-fixes).
• net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration (git-fixes).
• net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition (stable-fixes).
• net: usb: usbnet: fix name regression (get-fixes).
• net: usb: usbnet: fix race in probe failure (git-fixes).
• net: wwan: fix global oob in wwanrtnlpolicy (git-fixes).
• net: wwan: t7xx: Fix off-by-one error in t7xxdpmaifrxbufalloc() (git-fixes).
• net: xfrm: preserve kabi for xfrm_state (bsc#1233754).
• netdevsim: use condresched() in nsimdevtrapreport_work() (git-fixes).
• netfilter: nf_tables: missing iterator type in lookup walk (git-fixes).
• nfs: Fix KMSAN warning in decodegetfattrattrs() (git-fixes).
• nfs: avoid ilock contention in nfsclearinvalidmapping (git-fixes).
• nfs: fix memory leak in error path of nfs4doreclaim (git-fixes).
• nfsd: call cacheput if xdrreserve_space returns NULL (git-fixes).
• nfsd: cancel nfsdshrinkerwork using sync mode in nfs4stateshutdown_net (git-fixes).
• nfsd: fix delegation_blocked() to block correctly for at least 30 seconds (git-fixes).
• nfsd: fix refcount leak when file is unhashed after being found (git-fixes).
• nfsd: map the EBADMSG to nfserr_io to avoid warning (git-fixes).
• nfsd: remove unneeded EEXIST error check in nfsddofile_acquire (git-fixes).
• nfsd: remove unsafe BUGON from setchange_info (bsc#1234121).
• nfsd: return -EINVAL when namelen is 0 (git-fixes).
• nilfs2: fix kernel bug due to missing clearing of buffer delay flag (git-fixes).
• nilfs2: fix potential deadlock with newly created symlinks (git-fixes).
• nouveau/dmem: Fix privileged error in copy engine channel (git-fixes).
• nouveau/dmem: Fix vulnerability in migratetoram upon copy error (git-fixes).
• nouveau/dp: handle retries for AUX CH transfers with GSP (git-fixes).
• nouveau/gsp: Avoid addressing beyond end of rpc->entries (stable-fixes).
• nouveau: fw: sync dma after setup is called (git-fixes).
• nouveau: handle EBUSY and EAGAIN for GSP aux errors (git-fixes).
• ntb: intel: Fix the NULL vs ISERR() bug for debugfscreate_dir() (git-fixes).
• ntfs3: Add bounds checking to mienumattr() (bsc#1233207)
• nvme-fabrics: fix kernel crash while shutting down controller (git-fixes).
• nvme-loop: flush off pending I/O while shutting down loop controller (git-fixes).
• nvme-multipath: suppress partition scan until the disk is ready (bsc#1228244).
• nvme-pci: fix freeing of the HMB descriptor table (git-fixes).
• nvme-pci: fix race condition between reset and nvmedevdisable() (git-fixes).
• nvme-pci: qdepth 1 quirk (git-fixes).
• nvme-pci: reverse request order in nvmequeuerqs (git-fixes).
• nvme-pci: set doorbell config before unquiescing (git-fixes).
• nvme/host: Fix RCU list traversal to use SRCU primitive (git-fixes).
• nvme: disable CC.CRIME (NVMECCCRIME) (jsc#PED-9901).
• nvme: null terminate nvmetlsattrs (git-fixes).
• nvme: re-fix error-handling for io_uring nvme-passthrough (git-fixes).
• nvme: tcp: avoid race between queue_lock lock and destroy (git-fixes).
• nvmet-auth: assign dhkey to NULL after kfreesensitive (git-fixes).
• ocfs2: fix UBSAN warning in ocfs2verifyvolume() (git-fixes).
• ocfs2: fix the la space leak when unmounting an ocfs2 volume (git-fixes).
• ocfs2: fix uninit-value in ocfs2getblock() (git-fixes).
• ocfs2: pass u64 to ocfs2truncateinline maybe overflow (git-fixes).
• ocfs2: remove entry once instead of null-ptr-dereference in ocfs2xaremove() (git-fixes).
• ocfs2: uncache inode which has failed entering the group (git-fixes).
• of: Add cleanup.h based auto release via _free(devicenode) markings (bsc#1232386)
• parport: Proper fix for array out-of-bounds access (git-fixes).
• phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check (git-fixes).
• phy: qcom: qmp-combo: move driver data initialisation earlier (git-fixes).
• phy: qcom: qmp-usb: fix NULL-deref on runtime suspend (git-fixes).
• phy: tegra: xusb: Add error pointer check in xusb.c (git-fixes).
• phy: ti: phy-j721e-wiz: fix usxgmii configuration (git-fixes).
• pinctrl: apple: check devm_kasprintf() returned value (git-fixes).
• pinctrl: k210: Undef K210PCDEFAULT (git-fixes).
• pinctrl: ocelot: fix system hang on level based interrupts (stable-fixes).
• pinctrl: qcom: spmi: fix debugfs drive strength (git-fixes).
• pinctrl: zynqmp: drop excess struct member description (git-fixes).
• platform/chrome: crosectypec: fix missing fwnode reference decrement (git-fixes).
• platform/x86/amd/pmc: Detect when STB is not available (git-fixes).
• platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug (git-fixes).
• platform/x86: dell-sysman: add support for alienware products (stable-fixes).
• platform/x86: dell-wmi: Ignore suspend notifications (stable-fixes).
• platform/x86: lenovo-ymc: Ignore the 0x0 state (stable-fixes).
• platform/x86: panasonic-laptop: Return errno correctly in show callback (git-fixes).
• platform/x86: touchscreen_dmi: add nanote-next quirk (stable-fixes).
• posix-cpu-timers: Clear TICKDEPBITPOSIXTIMER on clone (bsc#1234098).
• power: reset: brcmstb: Do not go into infinite loop if reset fails (stable-fixes).
• power: supply: bq27xxx: Fix registers of bq27426 (git-fixes).
• power: supply: core: Remove mightsleep() from powersupply_put() (git-fixes).
• power: supply: rt9471: Fix wrong WDT function regfield declaration (git-fixes).
• power: supply: rt9471: Use IC status regfield to report real charger status (git-fixes).
• powercap: intelrapl: Fix off by one in getrpi() (git-fixes).
• powerpc/64: Convert patchinstruction() to patchu32() (bsc#1194869).
• powerpc/boot: Handle allocation failure in simple_realloc() (bsc#1194869).
• powerpc/boot: Only free if realloc() succeeds (bsc#1194869).
• powerpc/code-patching: Add generic memory patching (bsc#1194869).
• powerpc/code-patching: Perform hwsync in _patchinstruction() in case of failure (bsc#1194869).
• powerpc/crypto: do not build aes-gcm-p10 by default (bsc#1230501 ltc#208632).
• powerpc/crypto: fix missing skcipher dependency for aes-gcm-p10 (bsc#1230501 ltc#208632).
• powerpc/vdso: Fix VDSO data access when running in a non-root time namespace (bsc#1194869).
• powerpc/xics: Check return value of kasprintf in icpnativemaponecpu (bsc#1194869).
• powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729).
• printk: Add notation to console_srcu locking (bsc#1232183).
• pwm: imx-tpm: Use correct MODULO value for EPWM mode (git-fixes).
• qed: avoid truncating work queue length (git-fixes).
• rcu-tasks: Fix showrcutaskstracegp_kthread buffer overflow (bsc#1226631).
• rcu: Fix buffer overflow in printcpustall_info() (bsc#1226623).
• regmap: irq: Set lockdep class for hierarchical IRQ domains (git-fixes).
• rpm/check-for-config-changes: add HAVERUST and RUSTCSUPPORTS_ to IGNOREDCONFIGSRE They depend on SHADOWCALLSTACK.
• rpm/release-projects: Add SLFO projects (bsc#1231293).
• rpm/scripts: Remove obsolete Symbols.list Symbols.list is not longer needed by the new klp-convert implementation. (bsc#1218644)
• rpmsg: glink: Handle rejected intent request better (git-fixes).
• rtc: ab-eoz9: do not fail temperature reads on undervoltage notification (git-fixes).
• rtc: abx80x: Fix WDT bit position of the status register (git-fixes).
• rtc: bbnsm: add remove hook (git-fixes).
• rtc: check if _rtcreadtime was successful in rtctimerdowork() (git-fixes).
• rtc: rzn1: fix BCD to rtc_time conversion errors (git-fixes).
• rtc: st-lpc: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• runtime constants: add default dummy infrastructure (git-fixes).
• runtime constants: add x86 architecture support (git-fixes).
• s390/mm: Add condresched() to cmmalloc/free_pages() (bsc#1228747).
• s390/pci: Handle PCI error codes other than 0x3a (git-fixes bsc#1232629).
• s390/sclp: Deactivate sclp after all its users (git-fixes bsc#1232628).
• s390/sclp_vt220: Convert newlines to CRLF instead of LFCR (git-fixes bsc#1232627).
• scsi: NCR5380: Check for phase match during PDMA fixup (git-fixes).
• scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers (git-fixes).
• scsi: Remove scsi device nostarton_resume flag (git-fixes).
• scsi: aacraid: Rearrange order of struct aacsrbunit (git-fixes).
• scsi: cdrom: kABI: fix cdromdevops change (git-fixes).
• scsi: core: Disable CDL by default (git-fixes).
• scsi: core: Fix handling of SCMDFAILIF_RECOVERING (git-fixes).
• scsi: core: Fix the return value of scsilogicalblock_count() (git-fixes).
• scsi: core: Handle devices which return an unusually large VPD page count (git-fixes).
• scsi: core: alua: I/O errors for ALUA state transitions (git-fixes).
• scsi: fnic: Move flush_work initialization out of if block (bsc#1230055).
• scsi: hisi_sas: Handle the NCQ error returned by D2H frame (git-fixes).
• scsi: hpsa: Fix allocation size for Scsi_Host private data (git-fixes).
• scsi: kABI: restore nostartonresume to scsidevice (git-fixes).
• scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (git-fixes).
• scsi: libsas: Fix the failure of adding phy with zero-address to port (git-fixes).
• scsi: lpfc: Add ELSRSP cmd to the list of WQEs to flush in lpfcelsflushcmd() (bsc#1232757).
• scsi: lpfc: Add cleanup of nvmels_wq after HBA reset (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Call lpfcsli4queue_unset() in restart and rmmod paths (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Change lpfcnodelist nlpflag member into a bitmask (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up FDMI (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Check devloss callbk done flag for potential stale NDLP ptrs (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Copyright updates for 14.4.0.6 patches (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (bsc#1232757).
• scsi: lpfc: Fix kref imbalance on fabric ndlps from devlosstmo handler (bsc#1232757).
• scsi: lpfc: Modify CGN warning signal calculation based on EDC response (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Prevent NDLP reference count underflow in devlosstmo callback (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Remove NLPRELEASERPI flag from nodelist structure (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Remove trailing space after \n newline (bsc#1232757).
• scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (bsc#1232757 bsc#1228119).
• scsi: lpfc: Revise TRACEEVENT log flag severities from KERNERR to KERN_WARNING (bsc#1232757).
• scsi: lpfc: Support loopback tests with VMID enabled (bsc#1232757).
• scsi: lpfc: Update lpfc version to 14.4.0.5 (bsc#1232757).
• scsi: lpfc: Update lpfc version to 14.4.0.6 (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Update lpfcelsflushcmd() to check for SLIACTIVE before BSG flag (bsc#1233241 jsc#PED-9943).
• scsi: lpfc: Update phba link state conditional before sending CMFSYNCWQE (bsc#1232757).
• scsi: mac_scsi: Disallow bus errors during PDMA send (git-fixes).
• scsi: mac_scsi: Refactor polling loop (git-fixes).
• scsi: macscsi: Revise printk(KERNDEBUG ...) messages (git-fixes).
• scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (git-fixes).
• scsi: mpi3mr: Avoid memcpy field-spanning write WARNING (git-fixes).
• scsi: mpi3mr: Avoid possible run-time warning with long manufacturer strings (git-fixes).
• scsi: mpi3mr: Fix ATA NCQ priority support (git-fixes).
• scsi: mpi3mr: Validate SAS port assignments (git-fixes).
• scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (git-fixes).
• scsi: pm8001: Do not overwrite PCI queue mapping (git-fixes).
• scsi: pm80xx: Set phy->enable_completion only when we wait for it (git-fixes).
• scsi: qedf: Set qedslowpathparams to zero before use (git-fixes).
• scsi: scsitransportfc: Allow setting rport state to current state (git-fixes).
• scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (git-fixes).
• scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer (git-fixes).
• scsi: smartpqi: correct stream detection (git-fixes).
• scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly (git-fixes).
• scsi: spi: Fix sshdr use (git-fixes).
• scsi: sr: Fix unintentional arithmetic wraparound (git-fixes).
• scsi: wd33c93: Do not use stale scsi_pointer value (git-fixes).
• security/keys: fix slab-out-of-bounds in keytaskpermission (git-fixes).
• selftests/bpf: Add a test case to write mtu result into .rodata (git-fixes).
• selftests/bpf: Add a test case to write strtol result into .rodata (git-fixes).
• selftests/bpf: Add test for sign extension in coercesubregtosizesx() (git-fixes).
• selftests/bpf: Add test for truncation after sign extension in coerceregtosizesx() (git-fixes).
• selftests/bpf: Add tests for ldsx of pkt data/dataend/datameta accesses (git-fixes).
• selftests/bpf: Fix ARGPTRTO_LONG {half-,}uninitialized test (git-fixes).
• selftests/bpf: Rename ARGPTRTO_LONG test description (git-fixes).
• selftests/bpf: test for malformed BPFCORETYPEIDLOCAL relocation (git-fixes).
• serial: 8250: omap: Move pmruntimeget_sync (git-fixes).
• serial: imx: Update mctrl old_status on RTSD interrupt (git-fixes).
• serial: protect uartportdtrrts() in uartshutdown() too (stable-fixes).
• signal: Replace BUG_ON()s (bsc#1234093).
• soc: fsl: rcpm: fix missing ofnodeput() in copyippdexpcr1setting() (git-fixes).
• soc: qcom: geni-se: fix array underflow in geniseclktblget() (git-fixes).
• soc: ti: smartreflex: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• soundwire: intelbuscommon: enable interrupts before exiting reset (stable-fixes).
• spi: Fix acpi deferred irq probe (git-fixes).
• spi: atmel-quadspi: Fix register name in verbose logging function (git-fixes).
• spi: atmel-quadspi: Fix wrong register value written to MR (git-fixes).
• spi: mtk-snfi: fix kerneldoc for mtksnandispageops() (git-fixes).
• spi: s3c64xx: fix timeout counters in flush_fifo (git-fixes).
• spi: spi-fsl-dspi: Fix crash when not using GPIO chip select (git-fixes).
• spi: spi-imx: Fix pmruntimeset_suspended() with runtime pm enabled (git-fixes).
• spi: tegra210-quad: Avoid shift-out-of-bounds (git-fixes).
• splice: always fsnotifyaccess(in), fsnotifymodify(out) on success (git-fixes).
• splice: fsnotifyaccess(fd)/fsnotifymodify(fd) in vmsplice (git-fixes).
• splice: fsnotifyaccess(in), fsnotifymodify(out) on success in tee (git-fixes).
• srcu: Fix callbacks acceleration mishandling (git-fixes).
• staging: iio: frequency: ad9832: fix division by zero in ad9832calcfreqreg() (git-fixes).
• sumversion: Fix a memory leak in getsrcversion() (git-fixes).
• supported.conf: mark nhpoly1305 module as supported (bsc#1231035).
• supported.conf: mark ultravisor userspace access as supported (bsc#1232090).
• task_work: add kerneldoc annotation for 'data' argument (git-fixes).
• tcp: Fix refcnt handling in _inethash_connect() (git-fixes).
• thermal: core: Initialize thermal zones before registering them (git-fixes).
• thermal: int3400: Fix reading of current_uuid for active policy (git-fixes).
• thermal: intel: int340x: processor: Fix warning during module unload (git-fixes).
• thunderbolt: Honor TMU requirements in the domain when setting TMU mode (stable-fixes).
• thunderbolt: Improve DisplayPort tunnel setup process to be more robust (stable-fixes).
• tools/lib/thermal: Fix sampling handler context ptr (git-fixes).
• tools/power turbostat: Fix trailing '\n' parsing (git-fixes).
• tools/power turbostat: Increase the limit for fd opened (bsc#1233119).
• tools: hv: rm .*.cmd when make clean (git-fixes).
• tpm: Lock TPM chip in tpmpmsuspend() first (bsc#1082555 git-fixes).
• tpm: fix signed/unsigned bug when checking event logs (git-fixes).
• tracing/hwlat: Fix a race during cpuhp processing (git-fixes).
• tracing/osnoise: Fix build when timerlat is not enabled (git-fixes).
• tracing/osnoise: Skip running osnoise if all instances are off (git-fixes).
• tracing/osnoise: Switch from PFNOSETAFFINITY to migrate_disable (git-fixes).
• tracing/osnoise: Use a cpumask to know what threads are kthreads (git-fixes).
• tracing/timerlat: Add interfacelock around clearing of kthread in stopkthread() (git-fixes).
• tracing/timerlat: Add user-space interface (git-fixes).
• tracing/timerlat: Drop interfacelock in stopkthread() (git-fixes).
• tracing/timerlat: Fix a race during cpuhp processing (git-fixes).
• tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline (git-fixes).
• tracing/timerlat: Move hrtimerinit to timerlatfd open() (git-fixes).
• tracing/timerlat: Only clear timer if a kthread exists (git-fixes).
• tracing: Consider the NULL character when validating the event length (git-fixes).
• tty: ldsic: fix ttyldiscautoload sysctl's proc_handler (git-fixes).
• tty: ngsm: Fix use-after-free in gsmcleanup_mux (stable-fixes).
• u64stats: fix u64stats_init() for lockdep when used repeatedly in one file (git-fixes).
• ubifs: Fix adding orphan entry twice for the same inode (git-fixes).
• ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes).
• ubifs: add check for cryptoshashtfm_digest (git-fixes).
• ubifs: dbgorphancheck: Fix missed key type checking (git-fixes).
• ucounts: fix counter leak in incrlimitget_ucounts() (bsc#1233460).
• unicode: Do not special case ignorable code points (stable-fixes).
• unicode: Fix utf8_load() error path (git-fixes).
• uprobe: avoid out-of-bounds memory access of fetching args (git-fixes).
• uprobes: encapsulate preparation of uprobe args buffer (git-fixes).
• uprobes: introduce the global struct vmspecialmapping xol_mapping (bsc#1231114).
• uprobes: turn xolarea->pages into xolarea->page (bsc#1231114).
• usb: chipidea: udc: enable suspend interrupt after usb reset (stable-fixes).
• usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario (stable-fixes).
• usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG (git-fixes).
• usb: dwc3: core: Stop processing of pending events if controller is halted (git-fixes).
• usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic (git-fixes).
• usb: dwc3: gadget: Fix checking for number of TRBs left (git-fixes).
• usb: dwc3: gadget: Fix looping of queued SG entries (git-fixes).
• usb: ehci-spear: fix call balance of sehci clk handling routines (git-fixes).
• usb: gadget: core: force synchronous registration (git-fixes).
• usb: gadget: dummy_hcd: Set transfer interval to 1 microframe (stable-fixes).
• usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler (stable-fixes).
• usb: gadget: dummy_hcd: execute hrtimer callback in softirq context (git-fixes).
• usb: gadget: f_uac2: Replace snprintf() with the safer scnprintf() variant (stable-fixes).
• usb: gadget: f_uac2: fix non-newline-terminated function name (stable-fixes).
• usb: gadget: fuac2: fix return value for UAC2ATTRIBUTE_STRING store (git-fixes).
• usb: musb: Fix hardware lockup on first Rx endpoint request (git-fixes).
• usb: musb: sunxi: Fix accessing an released usb phy (git-fixes).
• usb: phy: Fix API devmusbput_phy() can not release the phy (git-fixes).
• usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip (stable-fixes).
• usb: typec: altmode should keep reference to parent (git-fixes).
• usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd() (git-fixes).
• usb: typec: fix unreleased fwnodehandle in typecportregisteraltmodes() (git-fixes).
• usb: using mutex lock and supporting ONONBLOCK flag in iowarriorread() (git-fixes).
• usb: xhci: Fix TD invalidation under pending Set TR Dequeue (git-fixes).
• usb: xhci: Fix problem with xhci resume from suspend (stable-fixes).
• usb: xhci: fix loss of data on Cadence xHC (git-fixes).
• usb: yurex: make waiting on yurex_write interruptible (git-fixes).
• usbip: tools: Fix detach_port() invalid port error path (git-fixes).
• usbnet: fix cyclical race on disconnect with work queue (git-fixes).
• vdpa: Fix an error handling path in enivdpaprobe() (git-fixes).
• vdpasimblk: Fix the potential leak of mgmt_dev (git-fixes).
• vdpasimblk: allocate the buffer zeroed (git-fixes).
• vduse: avoid using _GFPNOFAIL (git-fixes).
• vfs: dcache: move hashlenhash() from callers into dhash() (git-fixes).
• vhost/scsi: null-ptr-dereference in vhostscsiget_req() (git-fixes).
• vhost_vdpa: assign irq bypass producer token correctly (git-fixes).
• virtio_console: fix misc probe bugs (git-fixes).
• vmalloc: modify the allocvmaparea() error message for better diagnostics (jsc#PED-10978).
• vmxnet3: Add XDP support (bsc#1226498).
• vmxnet3: Fix missing reserved tailroom (bsc#1226498).
• vmxnet3: Fix packet corruption in vmxnet3xdpxmit_frame (bsc#1226498).
• vmxnet3: add command to allow disabling of offloads (bsc#1226498).
• vmxnet3: add latency measurement support in vmxnet3 (bsc#1226498).
• vmxnet3: prepare for version 9 changes (bsc#1226498).
• vmxnet3: update to version 9 (bsc#1226498).
• vsock: Update msgcount on readskb() (git-fixes).
• vt: prevent kernel-infoleak in confontget() (git-fixes).
• wifi: ath10k: Fix memory leak in management tx (git-fixes).
• wifi: ath10k: fix invalid VHT parameters in supportedvhtmcsratenss1 (git-fixes).
• wifi: ath10k: fix invalid VHT parameters in supportedvhtmcsratenss2 (git-fixes).
• wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR (git-fixes).
• wifi: ath11k: Fix invalid ring usage in full monitor mode (git-fixes).
• wifi: ath11k: fix array out-of-bound access in SoC stats (stable-fixes).
• wifi: ath12k: Skip Rx TID cleanup for self peer (git-fixes).
• wifi: ath12k: fix array out-of-bound access in SoC stats (stable-fixes).
• wifi: ath12k: fix crash when unbinding (git-fixes).
• wifi: ath12k: fix warning when unbinding (git-fixes).
• wifi: ath12k: remove msdu_end structure for WCN7850 (git-fixes).
• wifi: ath9k: add range check for connrspepid in htcconnectservice() (git-fixes).
• wifi: ath9k: fix possible integer overflow in ath9kgetet_stats() (stable-fixes).
• wifi: ath9khtc: Use _skbsetlength() for resetting urb before resubmit (stable-fixes).
• wifi: brcm80211: BRCM_TRACING should depend on TRACING (git-fixes).
• wifi: brcmfmac: release 'root' node in all execution paths (git-fixes).
• wifi: cfg80211: Set correct chandef when starting CAC (stable-fixes).
• wifi: cfg80211: clear wdev->cqm_config pointer on free (git-fixes).
• wifi: cw1200: Fix potential NULL dereference (git-fixes).
• wifi: iwlegacy: Clear stale interrupts before resuming device (stable-fixes).
• wifi: iwlegacy: Fix 'field-spanning write' warning in ilenqueuehcmd() (git-fixes).
• wifi: iwlwifi: allow only CN mcc from WRDD (stable-fixes).
• wifi: iwlwifi: config: label 'gl' devices as discrete (git-fixes).
• wifi: iwlwifi: mvm: Fix a race in scan abort flow (stable-fixes).
• wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd() (git-fixes).
• wifi: iwlwifi: mvm: avoid NULL pointer dereference (stable-fixes).
• wifi: iwlwifi: mvm: do not add default link in fw restart flow (git-fixes).
• wifi: iwlwifi: mvm: do not leak a link on AP removal (git-fixes).
• wifi: iwlwifi: mvm: drop wrong STA selection in TX (stable-fixes).
• wifi: iwlwifi: mvm: use correct key iteration (stable-fixes).
• wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL (stable-fixes).
• wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower (git-fixes).
• wifi: mac80211: fix RCU list iterations (stable-fixes).
• wifi: mac80211: skip non-uploaded keys in ieee80211iterkeys (git-fixes).
• wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation (stable-fixes).
• wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable (stable-fixes).
• wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker (stable-fixes).
• wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiexcmd80211scan_ext() (stable-fixes).
• wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiexconfigscan() (git-fixes).
• wifi: mwifiex: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• wifi: p54: Use IRQFNOAUTOEN flag in request_irq() (git-fixes).
• wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c (stable-fixes).
• wifi: rtw88: Fix USB/SDIO devices not transmitting beacons (git-fixes).
• wifi: rtw88: select WANTDEVCOREDUMP (stable-fixes).
• wifi: rtw89: avoid reading out of bounds when loading TX power FW elements (stable-fixes).
• wifi: rtw89: avoid to add interface to list twice when SER (stable-fixes).
• wifi: rtw89: correct base HT rate mask for firmware (stable-fixes).
• wifi: wfx: Fix error handling in wfxcoreinit() (git-fixes).
• x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client (bsc#1233443).
• x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load (git-fixes).
• x86/Documentation: Indent 'note::' directive for protocol version number note (git-fixes).
• x86/PCI: Check pciefindroot_port() return for NULL (git-fixes).
• x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h (git-fixes).
• x86/apic: Always explicitly disarm TSC-deadline timer (git-fixes).
• x86/apic: Make x2apic_disable() work correctly (git-fixes).
• x86/bugs: Do not use UNTRAIN_RET with IBPB on entry (git-fixes).
• x86/bugs: Skip RSB fill at VMEXIT (git-fixes).
• x86/cpufeatures: Add a IBPBNORET BUG flag (git-fixes).
• x86/cpufeatures: Define X86FEATUREAMDIBPBRET (git-fixes).
• x86/e820: Add a new e820 table update helper (bsc#1234034).
• x86/entry: Have entry_ibpb() invalidate return predictions (git-fixes).
• x86/entry: Remove unwanted instrumentation in common_interrupt() (git-fixes).
• x86/hyperv: Set X86FEATURETSCKNOWNFREQ when Hyper-V provides frequency (git-fixes).
• x86/microcode/intel: Remove unnecessary cache writeback and invalidation (git-fixes).
• x86/mm: Use IPIs to synchronize LAM enablement (git-fixes).
• x86/resctrl: Annotate getmemconfig() functions as __init (git-fixes).
• x86/resctrl: Avoid overflow in MB settings in bw_validate() (git-fixes).
• x86/resctrl: Remove hard-coded memory bandwidth limit (git-fixes).
• x86/sev: Add callback to apply RMP table fixups for kexec (bsc#1234034).
• x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler (git-fixes).
• x86/sev: Dump SEV_STATUS (bsc#1234034).
• x86/sev: Ensure that RMP table fixups are reserved (bsc#1234034).
• x86/sev: Move sev_guest.h into common SEV header (jsc#PED-5865).
• x86/syscall: Avoid memcpy() for ia32 syscallgetarguments() (git-fixes).
• x86/tdx: Dynamically disable SEPT violations from causing #VEs (git-fixes).
• x86/tdx: Enable CPU topology enumeration (git-fixes).
• x86/tdx: Introduce wrappers to read and write TD metadata (git-fixes).
• x86/tdx: Rename tdxparsetdinfo() to tdx_setup() (git-fixes).
• x86/tdx: Warning with 32bit build shift-count-overflow (jsc#PED-6143).
• x86/traps: move kmsan check after instrumentation_begin (git-fixes).
• x86/virt/tdx: Export SEAMCALL functions (jsc#PED-6143).
• x86/virt/tdx: Export TDX KeyID information (jsc#PED-6143).
• x86/virt/tdx: Export global metadata read infrastructure (jsc#PED-6143).
• x86/virt/tdx: Move TDMR metadata fields map table to local variable (jsc#PED-6143).
• x86/virt/tdx: Rename offset to _member for TDSYSINFO_MAP() macro (jsc#PED-6143).
• x86/virt/tdx: Support global metadata read for all element sizes (jsc#PED-6143).
• x86/virt/tdx: Unbind global metadata read with 'struct tdxtdmrsysinfo' (jsc#PED-6143).
• x86: Increase brk randomness entropy for 64-bit systems (git-fixes).
• x86: do the user address masking outside the user access area (git-fixes).
• x86: fix off-by-one in access_ok() (git-fixes).
• x86: fix user address masking non-canonical speculation issue (git-fixes).
• x86: make the maskeduseraccess_begin() macro use its argument only once (git-fixes).
• x86: support user address masking instead of non-speculative conditional (git-fixes).
• xfrm: Export symbol xfrmdevstate_delete (bsc#1233754).
• xfrm: Fix unregister netdevice hang on hardware offload (bsc#1233754).
• xfs: check opcode and iovec count match in xlogrecoverattricommitpass2 (git-fixes).
• xfs: check shortform attr entry flags specifically (git-fixes).
• xfs: convert delayed extents to unwritten when zeroing post eof blocks (git-fixes).
• xfs: fix finding a last resort AG in xfsfilestreampick_ag (git-fixes).
• xfs: fix freeing speculative preallocations for preallocated files (git-fixes).
• xfs: make sure sb_fdblocks is non-negative (git-fixes).
• xfs: make the seq argument to xfsbmapiconvert_delalloc() optional (git-fixes).
• xfs: make xfsbmapiconvert_delalloc() to allocate the target offset (git-fixes).
• xfs: remove a racy ifbytes check in xfsreflinkendcow_extent (git-fixes).
• xfs: validate recovered name buffers when recovering xattr items (git-fixes).
• xhci: Add a quirk for writing ERST in high-low order (git-fixes).
• xhci: Fix Link TRB DMA in command ring stopped completion event (git-fixes).
• xhci: Fix incorrect stream context type macro (git-fixes).
• xhci: Mitigate failed set dequeue pointer commands (git-fixes).
• xhci: Use pmruntimeget to prevent RPM on unsupported systems (git-fixes).
• xhci: tegra: fix checked USB2 port number (git-fixes).
• zonefs: Improve error handling (git-fixes).