SUSE-SU-2026:20876-1

The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

• CVE-2023-53817: crypto: lib/mpi - avoid null pointer deref in mpicmpui() (bsc#1254992).
• CVE-2025-37861: scsi: mpi3mr: Synchronous access b/w reset and tm thread for reply queue (bsc#1243055).
• CVE-2025-38321: smb: Log an error when closeallcached_dirs fails (bsc#1246328).
• CVE-2025-38728: smb3: fix for slab out of bounds on mount to ksmbd (bsc#1249256).
• CVE-2025-39748: bpf: Forget ranges when refining tnum after JSET (bsc#1249587).
• CVE-2025-39880: libceph: fix invalid accesses to cephconnectionv1_info (bsc#1250388).
• CVE-2025-39890: wifi: ath12k: fix memory leak in ath12kservicereadyextevent (bsc#1250334).
• CVE-2025-39964: crypto: afalg - Disallow concurrent writes in afalg_sendmsg (bsc#1251966).
• CVE-2025-39977: futex: Prevent use-after-free during requeue-PI (bsc#1252046).
• CVE-2025-40006: mm/hugetlb: fix folio is still mapped when deleted (bsc#1252342).
• CVE-2025-40024: vhost: Take a reference on the task in struct vhost_task (bsc#1252686).
• CVE-2025-40033: remoteproc: pru: Fix potential NULL pointer dereference in prurprocset_ctable() (bsc#1252824).
• CVE-2025-40042: tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (bsc#1252861).
• CVE-2025-40053: net: dlink: handle copy_thresh allocation failure (bsc#1252808).
• CVE-2025-40081: perf: armspe: Prevent overflow in PERFIDX2OFF() (bsc#1252776).
• CVE-2025-40099: cifs: parsedfsreferrals: prevent oob on malformed input (bsc#1252911).
• CVE-2025-40102: KVM: arm64: Prevent access to vCPU events before init (bsc#1252919).
• CVE-2025-40103: smb: client: Fix refcount leak for cifssbtlink (bsc#1252924).
• CVE-2025-40123: bpf: Enforce expectedattachtype for tailcall compatibility (bsc#1253365).
• CVE-2025-40134: dm: fix NULL pointer dereference in _dmsuspend() (bsc#1253386).
• CVE-2025-40135: ipv6: use RCU in ip6_xmit() (bsc#1253342).
• CVE-2025-40153: mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1253408).
• CVE-2025-40158: ipv6: use RCU in ip6_output() (bsc#1253402).
• CVE-2025-40160: xen/events: Cleanup find_virq() return codes (bsc#1253400).
• CVE-2025-40167: ext4: detect invalid INLINE_DATA + EXTENTS flag combination (bsc#1253458).
• CVE-2025-40170: net: use dstdevrcu() in sksetupcaps() (bsc#1253413).
• CVE-2025-40178: pid: Add a judgment for ns null in pidnrns (bsc#1253463).
• CVE-2025-40179: ext4: verify orphan file size is not too big (bsc#1253442).
• CVE-2025-40187: net/sctp: fix a null dereference in sctpdisposition sctpsfdo51Dce() (bsc#1253647).
• CVE-2025-40190: ext4: guard against EA inode refcount underflow in xattr update (bsc#1253623).
• CVE-2025-40192: Revert "ipmi: fix msg stack when IPMI is disconnected" (bsc#1253622).
• CVE-2025-40220: fuse: fix livelock in synchronous file put from fuseblk workers (bsc#1254520).
• CVE-2025-40231: vsock: fix lock inversion in vsockassigntransport() (bsc#1254815).
• CVE-2025-40233: ocfs2: clear extent cache after moving/defragmenting extents (bsc#1254813).
• CVE-2025-40238: net/mlx5: Fix IPsec cleanup over MPV device (bsc#1254871).
• CVE-2025-40240: sctp: avoid NULL dereference when chunk data buffer is missing (bsc#1254869).
• CVE-2025-40242: gfs2: Fix unlikely race in gdlmputlock (bsc#1255075).
• CVE-2025-40248: vsock: Ignore signal/timeout on connect() if already established (bsc#1254864).
• CVE-2025-40250: net/mlx5: Clean up only new IRQ glue on request_irq() failure (bsc#1254854).
• CVE-2025-40251: devlink: rate: Unset parent pointer in devlratenodes_destroy (bsc#1254856).
• CVE-2025-40252: net: qlogic/qede: fix potential out-of-bounds read in qedetpacont() and qedetpaend() (bsc#1254849).
• CVE-2025-40254: net: openvswitch: remove never-working support for setting nsh fields (bsc#1254852).
• CVE-2025-40257: mptcp: fix a race in mptcppmdeladdtimer() (bsc#1254842).
• CVE-2025-40258: mptcp: fix race condition in mptcpschedulework() (bsc#1254843).
• CVE-2025-40259: scsi: sg: Do not sleep in atomic context (bsc#1254845).
• CVE-2025-40261: nvme: nvme-fc: Ensure ->ioerrwork is cancelled in nvmefcdeletectrl() (bsc#1254839).
• CVE-2025-40264: be2net: pass wrb_params in case of OS2BMC (bsc#1254835).
• CVE-2025-40268: cifs: client: fix memory leak in smb3fscontextparseparam (bsc#1255082).
• CVE-2025-40271: fs/proc: fix uaf in procreaddirde() (bsc#1255297).
• CVE-2025-40274: KVM: guest_memfd: Remove bindings on memslot deletion when gmem is dying (bsc#1254830).
• CVE-2025-40278: net: sched: actife: initialize struct tcife to fix KMSAN kernel-infoleak (bsc#1254825).
• CVE-2025-40279: net: sched: actconnmark: initialize struct tcife to fix kernel leak (bsc#1254846).
• CVE-2025-40280: tipc: Fix use-after-free in tipcmonreinit_self() (bsc#1254847).
• CVE-2025-40289: drm/amdgpu: hide VRAM sysfs attributes on GPUs without VRAM (bsc#1255042).
• CVE-2025-40292: virtio-net: fix received length check in big packets (bsc#1255175).
• CVE-2025-40293: iommufd: Don't overflow during division for dirty tracking (bsc#1255179).
• CVE-2025-40297: net: bridge: fix use-after-free due to MST port state bypass (bsc#1255187).
• CVE-2025-40307: exfat: validate cluster allocation bits of the allocation bitmap (bsc#1255039).
• CVE-2025-40319: bpf: Sync pending IRQ work before freeing ring buffer (bsc#1254794).
• CVE-2025-40328: smb: client: fix potential UAF in smb2closecached_fid() (bsc#1254624).
• CVE-2025-40331: sctp: Prevent TOCTOU out-of-bounds write (bsc#1254615).
• CVE-2025-40338: ASoC: Intel: avs: Do not share the name pointer between components (bsc#1255273).
• CVE-2025-40339: drm/amdgpu: fix nullptr err of vmhandlemoved (bsc#1255428).
• CVE-2025-40346: archtopology: Fix incorrect error check in topologyparsecpucapacity() (bsc#1255318).
• CVE-2025-40350: net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (bsc#1255260).
• CVE-2025-40355: sysfs: check visibility before changing group attribute ownership (bsc#1255261).
• CVE-2025-40360: drm/sysfb: Do not dereference NULL pointer in plane reset (bsc#1255095).
• CVE-2025-40363: net: ipv6: fix field-spanning memcpy warning in AH output (bsc#1255102).
• CVE-2025-68171: x86/fpu: Ensure XFD state on signal delivery (bsc#1255255).
• CVE-2025-68174: amd/amdkfd: enhance kfd process check in switch partition (bsc#1255327).
• CVE-2025-68178: blk-cgroup: fix possible deadlock while configuring policy (bsc#1255266).
• CVE-2025-68188: tcp: use dstdevrcu() in tcpfastopenactivedisableofo_check() (bsc#1255269).
• CVE-2025-68190: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpuatomexecutetablelocked() (bsc#1255131).
• CVE-2025-68200: bpf: Add bpfprogrundatapointers() (bsc#1255241).
• CVE-2025-68201: drm/amdgpu: remove two invalid BUG_ON()s (bsc#1255136).
• CVE-2025-68204: pmdomain: arm: scmi: Fix genpd leak on provider registration failure (bsc#1255224).
• CVE-2025-68206: netfilter: nft_ct: add seqadj extension for natted connections (bsc#1255142).
• CVE-2025-68208: bpf: account for current allocated stack depth in widenimprecisescalars() (bsc#1255227).
• CVE-2025-68209: mlx5: Fix default values in create CQ (bsc#1255230).
• CVE-2025-68227: mptcp: Fix proto fallback detection with BPF (bsc#1255216).
• CVE-2025-68230: drm/amdgpu: fix gpu page fault after hibernation on PF passthrough (bsc#1255134).
• CVE-2025-68239: binfmtmisc: restore write access before closing files opened by openexec() (bsc#1255272).
• CVE-2025-68241: ipv4: route: Prevent rtbindexception() from rebinding stale fnhe (bsc#1255157).
• CVE-2025-68245: net: netpoll: fix incorrect refcount handling causing incorrect cleanup (bsc#1255268).
• CVE-2025-68255: staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing (bsc#1255395).
• CVE-2025-68259: KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced (bsc#1255199).
• CVE-2025-68261: ext4: add idatasem protection in ext4destroyinlinedatanolock() (bsc#1255164).
• CVE-2025-68264: ext4: refresh inline data size before write operations (bsc#1255380).
• CVE-2025-68283: libceph: replace BUGON with bounds check for map->maxosd (bsc#1255379).
• CVE-2025-68284: libceph: prevent potential out-of-bounds writes in handleauthsession_key() (bsc#1255377).
• CVE-2025-68285: libceph: fix potential use-after-free in havemonandosdmap() (bsc#1255401).
• CVE-2025-68295: smb: client: fix memory leak in cifsconstructtcon() (bsc#1255129).
• CVE-2025-68296: drm, fbcon, vga_switcheroo: Avoid race condition in fbcon setup (bsc#1255128).
• CVE-2025-68297: ceph: fix crash in processv2sparse_read() for encrypted directories (bsc#1255403).
• CVE-2025-68301: net: atlantic: fix fragment overflow handling in RX path (bsc#1255120).
• CVE-2025-68320: lan966x: Fix sleeping in atomic context (bsc#1255172).
• CVE-2025-68325: net/sched: schcake: Fix incorrect qlen reduction in cakedrop (bsc#1255417).
• CVE-2025-68327: usb: renesas_usbhs: Fix synchronous external abort on unbind (bsc#1255488).
• CVE-2025-68337: jbd2: avoid bugon in jbd2journalgetcreate_access() when file system corrupted (bsc#1255482).
• CVE-2025-68340: team: Move team device type change at the end of teamportadd (bsc#1255507).
• CVE-2025-68349: NFSv4/pNFS: Clear NFSINOLAYOUTCOMMIT in pnfsmarklayoutstateidinvalid (bsc#1255544).
• CVE-2025-68363: bpf: Check skb->transportheader is set in bpfskbcheckmtu (bsc#1255552).
• CVE-2025-68365: fs/ntfs3: Initialize allocated memory before use (bsc#1255548).
• CVE-2025-68366: nbd: defer config unlock in nbdgenlconnect (bsc#1255622).
• CVE-2025-68367: macintosh/machid: fix race condition in machidtoggleemumouse (bsc#1255547).
• CVE-2025-68372: nbd: defer config put in recv_work (bsc#1255537).
• CVE-2025-68374: md: fix rcu protection in mdwakeupthread (bsc#1255530).
• CVE-2025-68378: bpf: Refactor stack map trace depth calculation into helper function (bsc#1255614).
• CVE-2025-68379: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (bsc#1255695).
• CVE-2025-68727: ntfs3: Fix uninit buffer allocated by __getname() (bsc#1255568).
• CVE-2025-68728: ntfs3: fix uninit memory after failed miread in miformat_new (bsc#1255539).
• CVE-2025-68733: smack: fix bug: unprivileged task can create labels (bsc#1255615).
• CVE-2025-68736: landlock: Fix handling of disconnected directories (bsc#1255698).
• CVE-2025-68742: bpf: Improve program stats run-time calculation (bsc#1255707).
• CVE-2025-68744: bpf: Free special fields when update [lru_,]percpu_hash maps (bsc#1255709).
• CVE-2025-68764: NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (bsc#1255930).
• CVE-2025-68768: inet: frags: add inetfragqueue_flush() (bsc#1256579).
• CVE-2025-68770: bnxten: Fix XDPTX path (bsc#1256584).
• CVE-2025-68771: ocfs2: fix kernel BUG in ocfs2findvictim_chain (bsc#1256582).
• CVE-2025-68775: net/handshake: duplicate handshake cancellations leak socket (bsc#1256665).
• CVE-2025-68776: net/hsr: fix NULL pointer dereference in prpgetuntagged_frame() (bsc#1256659).
• CVE-2025-68778: btrfs: don't log conflicting inode if it's a dir moved in the current transaction (bsc#1256683).
• CVE-2025-68785: net: openvswitch: fix middle attribute validation in push_nsh() action (bsc#1256640).
• CVE-2025-68788: fsnotify: do not generate ACCESS/MODIFY events on child for special files (bsc#1256638).
• CVE-2025-68795: ethtool: Avoid overflowing userspace buffer on stats query (bsc#1256688).
• CVE-2025-68798: perf/x86/amd: Check event before enable to avoid GPF (bsc#1256689).
• CVE-2025-68800: mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (bsc#1256646).
• CVE-2025-68801: mlxsw: spectrum_router: Fix neighbour use-after-free (bsc#1256653).
• CVE-2025-68803: nfsd: set security label during create operations (bsc#1256770).
• CVE-2025-68810: KVM: Disallow toggling KVMMEMGUEST_MEMFD on an existing memslot (bsc#1256679).
• CVE-2025-68813: ipvs: fix ipv4 null-ptr-deref in route error path (bsc#1256641).
• CVE-2025-68814: io_uring: fix filename leak in __ioopenatprep() (bsc#1256651).
• CVE-2025-68815: net/sched: ets: Remove drr class from the active list if it changes to strict (bsc#1256680).
• CVE-2025-68816: net/mlx5: fw_tracer, Validate format string parameters (bsc#1256674).
• CVE-2025-68820: ext4: xattr: fix null pointer deref in ext4rawinode() (bsc#1256754).
• CVE-2025-71064: net: hns3: using the num_tqps in the vf driver to apply for resources (bsc#1256654).
• CVE-2025-71066: net/sched: ets: Always remove class from active list before deleting in etsqdiscchange (bsc#1256645).
• CVE-2025-71071: iommu/mediatek: fix use-after-free on probe deferral (bsc#1256802).
• CVE-2025-71077: tpm: Cap the number of PCR banks (bsc#1256613).
• CVE-2025-71084: RDMA/cm: Fix leaking the multicast GID table reference (bsc#1256622).
• CVE-2025-71085: ipv6: BUG() in pskbexpandhead() as part of calipsoskbuffsetattr() (bsc#1256623).
• CVE-2025-71087: iavf: fix off-by-one issues in iavfconfigrss_reg() (bsc#1256628).
• CVE-2025-71088: mptcp: fallback earlier on simult connection (bsc#1256630).
• CVE-2025-71089: iommu: disable SVA when CONFIG_X86 is set (bsc#1256612).
• CVE-2025-71091: team: fix check for port enabled in teamqueueoverrideportprio_changed() (bsc#1256773).
• CVE-2025-71093: e1000: fix OOB in e1000tbishould_accept() (bsc#1256777).
• CVE-2025-71094: net: usb: asix: ax88772: Increase phy_name size (bsc#1256597).
• CVE-2025-71095: net: stmmac: fix the crash issue for zero copy XDP_TX action (bsc#1256605).
• CVE-2025-71096: RDMA/core: Check for the presence of LSNLATYPE_DGID correctly (bsc#1256606).
• CVE-2025-71097: ipv4: Fix reference count leak when using error routes with nexthop objects (bsc#1256607).
• CVE-2025-71104: KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (bsc#1256708).
• CVE-2025-71112: net: hns3: add VLAN id validation before using (bsc#1256726).
• CVE-2025-71113: crypto: afalg - zero initialize memory allocated via sockkmalloc (bsc#1256716).
• CVE-2025-71116: libceph: make decode_pool() more resilient against corrupted osdmaps (bsc#1256744).
• CVE-2025-71120: SUNRPC: svcauthgss: avoid NULL deref on zero length gsstoken in gssreadproxy_verf (bsc#1256779).
• CVE-2025-71123: ext4: fix string copying in parseapplysbmountoptions() (bsc#1256757).
• CVE-2025-71126: mptcp: reset fallback status gracefully at disconnect() time (bsc#1256755).
• CVE-2025-71133: RDMA/irdma: avoid invalid read in irdmanetevent (bsc#1256733).
• CVE-2025-71135: md/raid5: fix possible null-pointer dereferences in raid5storegroupthreadcnt() (bsc#1256761).
• CVE-2025-71137: octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (bsc#1256760).
• CVE-2025-71148: net/handshake: restore destructor on submit failure (bsc#1257159).
• CVE-2025-71149: iouring/poll: correctly handle iopoll_add() return value on update (bsc#1257164).
• CVE-2025-71184: btrfs: fix NULL dereference on root when tracing inode eviction (bsc#1257635).
• CVE-2025-71194: btrfs: fix deadlock in waitcurrenttrans() due to ignored transaction type (bsc#1257687).
• CVE-2025-71225: md: suspend array while updating raid_disks via sysfs (bsc#1258411).
• CVE-2026-22976: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset (bsc#1257035).
• CVE-2026-22977: net: sock: fix hardened usercopy panic in sockrecverrqueue (bsc#1257053).
• CVE-2026-22979: net: fix memory leak in skbsegmentlist for GRO packets (bsc#1257228).
• CVE-2026-22982: net: mscc: ocelot: Fix crash when adding interface under a lag (bsc#1257179).
• CVE-2026-22984: libceph: prevent potential out-of-bounds reads in handleauthdone() (bsc#1257217).
• CVE-2026-22990: libceph: replace overzealous BUGON in osdmapapply_incremental() (bsc#1257221).
• CVE-2026-22991: libceph: make freechoosearg_map() resilient to partial allocation (bsc#1257220).
• CVE-2026-22992: libceph: return the handler error from monhandleauth_done() (bsc#1257218).
• CVE-2026-22996: net/mlx5e: Don't store mlx5epriv in mlx5edev devlink priv.
• CVE-2026-22998: nvme-tcp: fix NULL pointer dereferences in nvmettcpbuildpduiovec (bsc#1257209).
• CVE-2026-22999: net/sched: schqfq: do not free existing class in qfqchange_class() (bsc#1257236).
• CVE-2026-23000: net/mlx5e: Fix crash on profile change rollback failure (bsc#1257234).
• CVE-2026-23001: macvlan: Use 'hash' iterators to simplify code (bsc#1257232).
• CVE-2026-23003: geneve: Fix incorrect inner network header offset when innerprotoinherit is set (bsc#1257246).
• CVE-2026-23004: dst: fix races in rt6uncachedlistdel() and rtdeluncachedlist() (bsc#1257231).
• CVE-2026-23005: x86/fpu: Clear XSTATE_BV in guest XSAVE state whenever XFD[i]=1 (bsc#1257245).
• CVE-2026-23010: ipv6: Fix use-after-free in inet6addrdel() (bsc#1257332).
• CVE-2026-23011: ipv4: ipgre: make ipgreheader() robust (bsc#1257207).
• CVE-2026-23017: idpf: fix error handling in the init_task on load (bsc#1257552).
• CVE-2026-23035: net/mlx5e: Pass netdev to mlx5edestroynetdev instead of priv (bsc#1257559).
• CVE-2026-23053: NFS: Fix a deadlock involving nfsreleasefolio() (bsc#1257718).
• CVE-2026-23057: vsock/virtio: Coalesce only linear skb (bsc#1257740).
• CVE-2026-23060: crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (bsc#1257735).
• CVE-2026-23064: net/sched: act_ife: avoid possible NULL deref (bsc#1257765).
• CVE-2026-23074: net/sched: Enforce that teql can only be used as root qdisc (bsc#1257749).
• CVE-2026-23083: fou: Don't allow 0 for FOUATTRIPPROTO (bsc#1257745).
• CVE-2026-23084: be2net: Fix NULL pointer dereference in becmdgetmacfrom_list (bsc#1257830).
• CVE-2026-23085: irqchip/gic-v3-its: Avoid truncating memory addresses (bsc#1257758).
• CVE-2026-23086: vsock/virtio: cap TX credit to local buffer size (bsc#1257757).
• CVE-2026-23089: ALSA: usb-audio: Fix use-after-free in sndusbmixer_free() (bsc#1257790).
• CVE-2026-23095: gue: Fix skb memleak with inner IP protocol 0 (bsc#1257808).
• CVE-2026-23099: bonding: limit BONDMODE8023AD to Ethernet devices (bsc#1257816).
• CVE-2026-23102: arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state (bsc#1257772).
• CVE-2026-23104: ice: fix devlink reload call trace (bsc#1257763).
• CVE-2026-23105: net/sched: qfq: Use clisactive to determine whether class is active in qfqrmfrom_ag (bsc#1257775).
• CVE-2026-23107: arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA (bsc#1257762).
• CVE-2026-23110: scsi: core: Wake up the error handler when final completions race against each other (bsc#1257761).
• CVE-2026-23111: netfilter: nftables: fix inverted genmask check in nftmapcatchallactivate() (bsc#1258181).
• CVE-2026-23112: nvmet-tcp: add bounds checks in nvmettcpbuildpduiovec (bsc#1258184).
• CVE-2026-23113: iouring/io-wq: check IOWQBITEXIT inside work run loop (bsc#1258278).
• CVE-2026-23116: pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu (bsc#1258277).
• CVE-2026-23119: bonding: provide a net pointer to __skbflowdissect() (bsc#1258273).
• CVE-2026-23139: netfilter: nfconncount: update lastgc only when GC has been performed (bsc#1258304).
• CVE-2026-23141: btrfs: send: check for inline extents in rangeisholeinparent() (bsc#1258377).
• CVE-2026-23166: ice: Fix NULL pointer dereference in icevsisetnapiqueues (bsc#1258272).
• CVE-2026-23171: net: bonding: update the slave array for broadcast mode (bsc#1258349).
• CVE-2026-23173: net/mlx5e: TC, delete flows only for existing peers (bsc#1258520).
• CVE-2026-23179: nvmet-tcp: fixup hang in nvmettcplistendataready() (bsc#1258394).
• CVE-2026-23191: ALSA: aloop: Fix racy access at PCM trigger (bsc#1258395).
• CVE-2026-23198: KVM: Don't clobber irqfd routing type when deassigning irqfd (bsc#1258321).
• CVE-2026-23208: ALSA: usb-audio: Prevent excessive number of frames (bsc#1258468).
• CVE-2026-23209: macvlan: fix error recovery in macvlancommonnewlink() (bsc#1258518).
• CVE-2026-23213: drm/amd/pm: Disable MMIO access during SMU Mode 1 reset (bsc#1258465).
• CVE-2026-23214: btrfs: reject new transactions if the fs is fully read-only (bsc#1258464).

The following non-security bugs were fixed:

• ACPI: CPPC: Fix missing PCC check for guaranteed_perf (git-fixes).
• ACPI: CPPC: Fix remaining foreachpossible_cpu() to use online CPUs (git-fixes).
• ACPI: PCC: Fix race condition by removing static qualifier (git-fixes).
• ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (git-fixes).
• ACPI: processor: Fix NULL-pointer dereference in acpiprocessorerrata_piix4() (stable-fixes).
• ACPI: processorcore: fix mapx2apic_id for amd-pstate on am4 (git-fixes).
• ACPI: property: Fix fwnode refcount leak in acpifwnodegraphparseendpoint() (git-fixes).
• ACPI: property: Use ACPI functions in acpigraphgetnextendpoint() only (stable-fixes).
• ACPICA: Abort AML bytecode execution when executing AMLFATALOP (stable-fixes).
• ACPICA: Avoid walking the Namespace if start_node is NULL (stable-fixes).
• ACPICA: Fix NULL pointer dereference in acpievaddressspacedispatch() (git-fixes).
• ALSA: ac97: fix a double free in sndac97controller_register() (git-fixes).
• ALSA: ctxfi: Fix potential OOB access in audio mixer handling (stable-fixes).
• ALSA: dice: fix buffer overflow in detectstreamformats() (git-fixes).
• ALSA: firewire-motu: add bounds check in put_user loop for DSP events (git-fixes).
• ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (git-fixes).
• ALSA: hda/conexant: Add headset mic fix for MECHREVO Wujie 15X Pro (stable-fixes).
• ALSA: hda/realtek - fixed speaker no sound (stable-fixes).
• ALSA: hda/realtek: Add quirk for Inspur S14-G1 (stable-fixes).
• ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU (stable-fixes).
• ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU (git-fixes).
• ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk (stable-fixes).
• ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine (stable-fixes).
• ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41hdaread_acpi() (git-fixes).
• ALSA: pcmcia: Fix resource leak in sndpdacfprobe error path (git-fixes).
• ALSA: scarlett2: Fix buffer overflow in config retrieval (git-fixes).
• ALSA: uapi: Fix typo in asound.h comment (git-fixes).
• ALSA: usb-audio: Add DSD quirk for LEAK Stereo 230 (stable-fixes).
• ALSA: usb-audio: Add iface reset and delay quirk for AB13X USB Audio (stable-fixes).
• ALSA: usb-audio: Add native DSD quirks for PureAudio DAC series (stable-fixes).
• ALSA: usb-audio: Add sanity check for OOB writes at silencing (stable-fixes).
• ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 (stable-fixes).
• ALSA: usb-audio: Cap the packet size pre-calculations (git-fixes).
• ALSA: usb-audio: Check max frame size for implicit feedback mode, too (stable-fixes).
• ALSA: usb-audio: Fix use-after-free in sndusbmixer_free() (git-fixes).
• ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices (git-fixes).
• ALSA: usb-audio: Update for native DSD support quirks (stable-fixes).
• ALSA: usb-audio: Update the number of packets properly at receiving (stable-fixes).
• ALSA: usb-audio: Use correct version for UAC3 header validation (git-fixes).
• ALSA: usb-audio: Use inclusive terms (git-fixes).
• ALSA: usb-audio: fix broken logic in sndaudigy2nxled_update() (git-fixes).
• ALSA: usb-mixer: us16x08: validate meter packet indices (git-fixes).
• ALSA: usb: Increase volume range that triggers a warning (git-fixes).
• ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (git-fixes).
• APEI/GHES: ensure that won't go past CPER allocated record (stable-fixes).
• ASoC: Intel: catpt: Fix error path in hw_params() (git-fixes).
• ASoC: Intel: sof_es8336: Add DMI quirk for Huawei BOD-WXX9 (stable-fixes).
• ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion (git-fixes).
• ASoC: SOF: ipc4-control: If there is no data do not send bytes update (git-fixes).
• ASoC: SOF: ipc4-control: Keep the payload size up to date (git-fixes).
• ASoC: SOF: ipc4-control: Use the correct size for scontrol->ipccontroldata (git-fixes).
• ASoC: SOF: ipc4-topology: Correct the allocation size for bytes controls (git-fixes).
• ASoC: ak4458: Disable regulator when error happens (git-fixes).
• ASoC: ak5558: Disable regulator when error happens (git-fixes).
• ASoC: amd: drop unused Kconfig symbols (git-fixes).
• ASoC: amd: fix memory leak in acp3x pdm dma ops (git-fixes).
• ASoC: amd: yc: Add ASUS ExpertBook PM1503CDA to quirks list (stable-fixes).
• ASoC: amd: yc: Add DMI quirk for ASUS Vivobook Pro 15X M6501RR (stable-fixes).
• ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO (stable-fixes).
• ASoC: amd: yc: Add quirk for HP 200 G2a 16 (stable-fixes).
• ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 (stable-fixes).
• ASoC: amd: yc: Fix microphone on ASUS M6500RE (stable-fixes).
• ASoC: bcm: bcm63xx-pcm-whistler: Check return value of ofdmaconfigure() (git-fixes).
• ASoC: codecs: max98390: Check return value of devmgpiodgetoptional() in max98390i2c_probe() (stable-fixes).
• ASoC: codecs: wcd938x: fix OF node leaks on probe failure (git-fixes).
• ASoC: codecs: wsa881x: Drop unused version readout (stable-fixes).
• ASoC: codecs: wsa881x: fix unnecessary initialisation (git-fixes).
• ASoC: codecs: wsa883x: fix unnecessary initialisation (git-fixes).
• ASoC: codecs: wsa884x: fix codec initialisation (git-fixes).
• ASoC: cs35l45: Corrects ASP_TX5 DAPM widget channel (stable-fixes).
• ASoC: davinci-evm: Fix reference leak in davincievmprobe (stable-fixes).
• ASoC: fsl: imx-card: Do not force slot width to sample width (git-fixes).
• ASoC: fsl_sai: Add missing registers to cache default (stable-fixes).
• ASoC: fsl_xcvr: clear the channel status control memory (git-fixes).
• ASoC: nau8821: Avoid unnecessary blocking in IRQ handler (stable-fixes).
• ASoC: nau8821: Cancel delayed work on component remove (git-fixes).
• ASoC: nau8821: Cancel pending work before suspend (git-fixes).
• ASoC: nau8821: Consistently clear interrupts before unmasking (git-fixes).
• ASoC: nau8821: Fixup nau8821enablejack_detect() (git-fixes).
• ASoC: pxa: drop unused Kconfig symbol (git-fixes).
• ASoC: qcom: q6adm: the the copp device only during last instance (git-fixes).
• ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr (git-fixes).
• ASoC: qcom: q6asm-dai: perform correct state check before closing (git-fixes).
• ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment (git-fixes).
• ASoC: rockchip: i2s-tdm: Use param rate if not provided by set_sysclk (git-fixes).
• ASoC: stm32: sai: fix OF node leak on probe (git-fixes).
• ASoC: stm32: sai: fix clk prepare imbalance on probe failure (git-fixes).
• ASoC: stm32: sai: fix device leak on probe (git-fixes).
• ASoC: sun4i-spdif: Add missing kerneldoc fields for sun4ispdifquirks (git-fixes).
• ASoC: sunxi: sun50i-dmic: Add missing check for devmregmapinit_mmio (stable-fixes).
• ASoC: tlv320adcx140: Propagate error codes during probe (stable-fixes).
• ASoC: tlv320adcx140: fix null pointer (git-fixes).
• ASoC: tlv320adcx140: fix word length (git-fixes).
• ASoC: wm8962: Add WM8962ADCMONOMIX to "3D Coefficients" mask (stable-fixes).
• ASoC: wm8962: Do not report a microphone if it's shorted to ground on plug (stable-fixes).
• Add dtb-spacemit SpacemiT boards include MilkV-Jupiter, Banana Pi F3 and Orange Pi RV2.
• Bluetooth: HCI: Fix tracking of advertisement set/instance 0x00 (git-fixes).
• Bluetooth: L2CAP: Fix invalid response to L2CAPECREDRECONF_REQ (git-fixes).
• Bluetooth: L2CAP: Fix missing key size check for L2CAPLECONN_REQ (git-fixes).
• Bluetooth: L2CAP: Fix not checking output MTU is acceptable on L2CAPECREDCONN_REQ (git-fixes).
• Bluetooth: L2CAP: Fix response to L2CAPECREDCONN_REQ (git-fixes).
• Bluetooth: MGMT: Fix memory leak in setsspcomplete (git-fixes).
• Bluetooth: SMP: Fix not generating mackey and ltk when repairing (git-fixes).
• Bluetooth: btrtl: Avoid loading the config file on security chips (stable-fixes).
• Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB (stable-fixes).
• Bluetooth: btusb: Add device ID for Realtek RTL8761BU (stable-fixes).
• Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (stable-fixes).
• Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (stable-fixes).
• Bluetooth: btusb: Add new VID/PID for RTL8852CE (stable-fixes).
• Bluetooth: btusb: revert use of devm_kzalloc in btusb (git-fixes).
• Bluetooth: hciconn: Set linkpolicy on incoming ACL connections (stable-fixes).
• Bluetooth: hciconn: use moddelayed_work for active mode timeout (stable-fixes).
• Bluetooth: hci_qca: Cleanup on all setup failures (git-fixes).
• Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (git-fixes).
• Bluetooth: hciuart: fix null-ptr-deref in hciuartwritework (git-fixes).
• Documentation/kernel-parameters: fix typo in retbleed= kernel parameter description (git-fixes).
• Documentation: PCI: endpoint: Fix ntb/vntb copy & paste errors (git-fixes).
• Documentation: hid-alps: Fix packet format section headings (git-fixes).
• Documentation: mailbox: mboxchanops.flush() is optional (git-fixes).
• Documentation: parport-lowlevel: Separate function listing code blocks (git-fixes).
• HID: Apply quirk HIDQUIRKALWAYS_POLL to Edifier QR30 (2d99:a101) (stable-fixes).
• HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards (stable-fixes).
• HID: apple: Add SONiX AK870 PRO to nonapplekeyboards quirk list (stable-fixes).
• HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK (stable-fixes).
• HID: elecom: Add support for ELECOM M-XT3URBK (018F) (stable-fixes).
• HID: hid-input: Extend Elan ignore battery quirk to USB (stable-fixes).
• HID: hid-pl: handle probe errors (git-fixes).
• HID: i2c-hid: fix potential buffer overflow in i2chidget_report() (stable-fixes).
• HID: input: map HIDGDZ to ABS_DISTANCE for stylus/pen (stable-fixes).
• HID: intel-ish-hid: Reset enumdevicesdone before enumeration (stable-fixes).
• HID: intel-ish-hid: Update ishtp bus match to support device ID table (stable-fixes).
• HID: logitech-dj: Remove duplicate error logging (git-fixes).
• HID: logitech-hidpp: Check maxfield in hidppgetreport_length() (stable-fixes).
• HID: logitech-hidpp: Do not assume FAP in hidppsendmessage_sync() (git-fixes).
• HID: magicmouse: Do not crash on missing msc->input (stable-fixes).
• HID: multitouch: add MTQUIRKSTICKYFINGERS to MTCLS_VTL (stable-fixes).
• HID: multitouch: add eGalaxTouch EXC3188 support (stable-fixes).
• HID: playstation: Add missing check for inputffcreate_memless (git-fixes).
• HID: playstation: Center initial joystick axes to prevent spurious events (stable-fixes).
• HID: prodikeys: Check presence of pm->input_ep82 (stable-fixes).
• HID: quirks: Add another Chicony HP 5MP Cameras to hidignorelist (stable-fixes).
• HID: quirks: work around VID/PID conflict for appledisplay (git-fixes).
• HID: usbhid: paper over wrong bNumDescriptor field (stable-fixes).
• Input: atkbd - skip deactivate for HONOR FMB-P's internal keyboard (git-fixes).
• Input: croseckeyb - fix an invalid memory access (stable-fixes).
• Input: goodix - add support for ACPI ID GDIX1003 (stable-fixes).
• Input: goodix - add support for ACPI ID GDX9110 (stable-fixes).
• Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (stable-fixes).
• Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (stable-fixes).
• Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (stable-fixes).
• Input: stmfts - correct wording for the warning message (git-fixes).
• Input: stmfts - make comments correct (git-fixes).
• Input: tiam335xtsc - fix off-by-one error in wire_order validation (git-fixes).
• KEYS: trusted: Fix a memory leak in tpm2loadcmd (git-fixes).
• KEYS: trusted_tpm1: Compare HMAC values in constant time (git-fixes).
• Move upstreamed SCSI patches into sorted section
• Move upstreamed ath12k patch into sorted section
• Move upstreamed mm and SCSI patches into sorted section
• NTB: ntbtransport: Fix too small buffer for debugfsname (git-fixes).
• PCI/ACPI: Restrict programhpxtype2() to AER bits (git-fixes).
• PCI/IOV: Fix race between SR-IOV enable/disable and hotplug (git-fixes).
• PCI/MSI: Unmap MSI-X region on error (stable-fixes).
• PCI/P2PDMA: Release per-CPU pgmap ref when vminsertpage() fails (git-fixes).
• PCI/PM: Avoid redundant delays on D3hot->D3cold (git-fixes).
• PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (git-fixes).
• PCI/portdrv: Fix potential resource leak (git-fixes).
• PCI: Add ACS quirk for Pericom PI7C9X2G404 switches [12d8:b404] (git-fixes).
• PCI: Add ACS quirk for Qualcomm Hamoa & Glymur (stable-fixes).
• PCI: Add PCIEMSGCODEASSERTINTx message macros (stable-fixes).
• PCI: Add defines for bridge window indexing (stable-fixes).
• PCI: Correct PCICAPEXPENDPOINTSIZEOF_V2 value (git-fixes).
• PCI: Do not attempt to set ExtTag for VFs (git-fixes).
• PCI: Enable ACS after configuring IOMMU for OF platforms (stable-fixes).
• PCI: Fix pcislotlock () device locking (stable-fixes).
• PCI: Fix pcislottrylock() error handling (git-fixes).
• PCI: Initialize RCB from pciconfiguredevice() (git-fixes).
• PCI: Log bridge info when first enumerating bridge (stable-fixes).
• PCI: Log bridge windows conditionally (stable-fixes).
• PCI: Mark 3ware-9650SA Root Port Extended Tags as broken (git-fixes).
• PCI: Mark ASM1164 SATA controller to avoid bus reset (stable-fixes).
• PCI: Mark Nvidia GB10 to avoid bus reset (stable-fixes).
• PCI: Move pcireadbridge_windows() below individual window accessors (stable-fixes).
• PCI: Supply bridge device, not secondary bus, to read window details (stable-fixes).
• PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port (stable-fixes).
• PCI: dwc: Fix wrong PORTLOGICLTSSMSTATEMASK definition (git-fixes).
• PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}epcepf_unlink() functions (git-fixes).
• PCI: keystone: Exit kspcieprobe() for invalid mode (git-fixes).
• PCI: mediatek: Fix IRQ domain leak when MSI allocation fails (git-fixes).
• PCI: rcar-gen2: Drop ARM dependency from PCIRCARGEN2 (git-fixes).
• PM: runtime: Do not clear needsforceresume with enabled runtime PM (git-fixes).
• PM: sleep: wakeirq: Update outdated documentation comments (git-fixes).
• PM: sleep: wakeirq: harden devpmclearwakeirq() against races (git-fixes).
• PM: wakeup: Handle empty list in wakeupsourceswalk_start() (git-fixes).
• USB: Fix descriptor count when handling invalid MBIM extended descriptor (git-fixes).
• USB: OHCI/UHCI: Add soft dependencies on ehci_platform (stable-fixes).
• USB: lpc32xx_udc: Fix error handling in probe (git-fixes).
• USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (git-fixes).
• USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (stable-fixes).
• USB: serial: ftdi_sio: add support for u-blox EVK-M101 (stable-fixes).
• USB: serial: ftdi_sio: match on interface number for jtag (stable-fixes).
• USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (git-fixes).
• USB: serial: option: add Foxconn T99W760 (stable-fixes).
• USB: serial: option: add Quectel RG255C (stable-fixes).
• USB: serial: option: add Telit Cinterion FE910C04 new compositions (stable-fixes).
• USB: serial: option: add Telit FN920C04 ECM compositions (stable-fixes).
• USB: serial: option: add Telit FN920C04 RNDIS compositions (stable-fixes).
• USB: serial: option: add Telit LE910 MBIM composition (stable-fixes).
• USB: serial: option: add UNISOC UIS7720 (stable-fixes).
• USB: serial: option: add support for Rolling RW101R-GL (stable-fixes).
• USB: serial: option: move Telit 0x10c7 composition in the right place (stable-fixes).
• USB: storage: Remove subclass and protocol overrides from Novatek quirk (git-fixes).
• Update config files: disable CONFIG_DEVPORT for arm64 (bsc#1256792)
• Workaround for hybrid git workflow in SLFO 1.0/1.1
• arm64: zynqmp: Fix usb node drive strength and slew rate (git-fixes)
• arm64: zynqmp: Revert usb node drive strength and slew rate for (git-fixes)
• ata: libata: Add cprlog to atadevprintfeatures() early return (git-fixes).
• ata: libata: avoid long timeouts on hot-unplugged SATA DAS (stable-fixes).
• ata: pata_ftide010: Fix some DMA timings (git-fixes).
• atm/fore200e: Fix possible data race in fore200e_open() (git-fixes).
• atm: Fix dmafreecoherent() size (git-fixes).
• atm: fore200e: fix use-after-free in tasklets during device removal (git-fixes).
• atm: idt77252: Add missing dma_map_error() (stable-fixes).
• auxdisplay: arm-charlcd: fix releasememregion() size (git-fixes).
• backlight: led-bl: Add devlink to supplier LEDs (git-fixes).
• backlight: lp855x: Fix lp855x.h kernel-doc warnings (git-fixes).
• backlight: qcom-wled: Change PM8950 WLED configurations (git-fixes).
• backlight: qcom-wled: Support ovp values for PMI8994 (git-fixes).
• bonding: only set speed/duplex to unknown, if getting speed failed (bsc#1253691).
• bpf/selftests: testselectreuseport_kern: Remove unused header (bsc#1257603).
• bpf: Do not let BPF test infra emit invalid GSO types to stack (bsc#1255569).
• bpf: Reject bpftimer for PREEMPTRT (git-fixes).
• broadcom: b44: prevent uninitialized value usage (git-fixes).
• bs-upload-kernel: Fix cve branch uploads
• btrfs: do not strictly require dirty metadata threshold for metadata writepages (stable-fixes).
• btrfs: make sure extent and csum paths are always released in scrubraid56parity_stripe() (git-fixes).
• btrfs: scrub: always update btrfsscrubprogress::last_physical (git-fixes).
• bus: fsl-mc: Replace snprintf and sprintf with sysfs_emit in sysfs show functions (stable-fixes).
• bus: fsl-mc: fix an error handling in fslmcdevice_add() (git-fixes).
• bus: fsl-mc: fix use-after-free in driveroverrideshow() (git-fixes).
• can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit (git-fixes).
• can: emsusb: emsusbreadbulk_callback(): fix URB memory leak (git-fixes).
• can: etas_es58x: allow partial RX URB allocation to succeed (git-fixes).
• can: gsusb: gscan_open(): fix error handling (git-fixes).
• can: gsusb: gsusbreceivebulk_callback(): fix error message (git-fixes).
• can: gsusb: gsusbreceivebulkcallback(): unanchor URL on usbsubmit_urb() error (git-fixes).
• can: gsusb: gsusbxmitcallback(): fix handling of failed transmitted URBs (git-fixes).
• can: j1939: make j1939sessionactivate() fail if device is no longer registered (stable-fixes).
• can: j1939: make j1939skbind() fail if device is no longer registered (git-fixes).
• can: kvaserusb: kvaserusbreadbulk_callback(): fix URB memory leak (git-fixes).
• can: kvaser_usb: leaf: Fix potential infinite loop in command parsers (git-fixes).
• can: mcbausb: mcbausbreadbulk_callback(): fix URB memory leak (git-fixes).
• can: sja1000: fix max irq loop handling (git-fixes).
• can: sun4ican: sun4ican_interrupt(): fix max irq loop handling (git-fixes).
• can: usb8dev: usb8devreadbulk_callback(): fix URB memory leak (git-fixes).
• char: applicom: fix NULL pointer dereference in ac_ioctl (stable-fixes).
• char: tpm: cr50: Remove IRQF_ONESHOT (stable-fixes).
• cifs: Fix copy offload to flush destination region (bsc#1252511).
• cifs: Fix flushing, invalidation and file size with copyfilerange() (bsc#1252511).
• cifs: Fix uncached read into ITER_KVEC iterator (bsc#1245449).
• cifs: add new field to track the last access time of cfid (git-fixes).
• cifs: add xid to query server interface call (git-fixes).
• cifs: after disabling multichannel, mark tcon for reconnect (git-fixes).
• cifs: avoid redundant calls to disable multichannel (git-fixes).
• cifs: cifspickchannel should try selecting active channels (git-fixes).
• cifs: deal with the channel loading lag while picking channels (git-fixes).
• cifs: dns resolution is needed only for primary channel (git-fixes).
• cifs: do not disable interface polling on failure (git-fixes).
• cifs: do not search for channel if server is terminating (git-fixes).
• cifs: fix a pending undercount of srv_count (git-fixes).
• cifs: fix lock ordering while disabling multichannel (git-fixes).
• cifs: fix stray unlock in cifschanskipordisable (git-fixes).
• cifs: fix use after free for iface while disabling secondary channels (git-fixes).
• cifs: handle servers that still advertise multichannel after disabling (git-fixes).
• cifs: handle when server starts supporting multichannel (git-fixes).
• cifs: handle when server stops supporting multichannel (git-fixes).
• cifs: make cifschanupdate_iface() a void function (git-fixes).
• cifs: make sure server interfaces are requested only for SMB3+ (git-fixes).
• cifs: make sure that channel scaling is done only once (git-fixes).
• cifs: reconnect worker should take reference on server struct unconditionally (git-fixes).
• cifs: reset connections for all channels when reconnect requested (git-fixes).
• cifs: reset iface weights when we cannot find a candidate (git-fixes).
• cifs: serialize other channels when query server interfaces is pending (git-fixes).
• cifs: update dstaddr whenever channel iface is updated (git-fixes).
• clk: clk-apple-nco: Add "apple,t8103-nco" compatible (git-fixes).
• clk: mediatek: Fix error handling in runtime PM setup (git-fixes).
• clk: meson: g12a: Limit the HDMI PLL OD to /4 (git-fixes).
• clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs (git-fixes).
• clk: qcom: camcc-sm6350: Fix PLL config of PLL2 (git-fixes).
• clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other (git-fixes).
• clk: qcom: dispcc-sdm845: Enable parents for pixel clocks (git-fixes).
• clk: qcom: gcc-msm8917: Remove ALWAYSON flag from cppgdsc (git-fixes).
• clk: qcom: gcc-msm8953: Remove ALWAYSON flag from cppgdsc (git-fixes).
• clk: qcom: gfx3d: add parent to parent request map (git-fixes).
• clk: qcom: rcg2: compute 2d using duty fraction directly (git-fixes).
• clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback (git-fixes).
• clk: renesas: r9a06g032: Fix memory leak in error path (git-fixes).
• clk: renesas: rzg2l: Fix intin variable size (git-fixes).
• clk: renesas: rzg2l: Select correct div round macro (git-fixes).
• clk: tegra: tegra124-emc: Fix potential memory leak in tegra124clkregister_emc() (git-fixes).
• clk: tegra: tegra124-emc: fix device leak on set_rate() (git-fixes).
• clocksource: Print durations for sync check unconditionally (bsc#1241345).
• clocksource: Reduce watchdog readout delay limit to prevent false positives (bsc#1241345).
• comedi: Fix getting range information for subdevices 16 to 255 (git-fixes).
• comedi: c6xdigio: Fix invalid PNP driver unregistration (git-fixes).
• comedi: check device's attached status in compat ioctls (git-fixes).
• comedi: dmm32at: serialize use of paged registers (git-fixes).
• comedi: fix divide-by-zero in comedibufmunge() (stable-fixes).
• comedi: multiq3: sanitize config options in multiq3_attach() (git-fixes).
• comedi: pcl818: fix null-ptr-deref in pcl818aicancel() (git-fixes).
• cpufreq: intelpstate: Check IDA only before MSRIA32PERFCTL writes (git-fixes).
• cpuidle: menu: Use residency threshold in polling state override decisions (bsc#1255026).
• crypto: asymmetrickeys - prevent overflow in asymmetrickeygenerateid (git-fixes).
• crypto: authenc - Correctly pass EINPROGRESS back up to the caller (git-fixes).
• crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (git-fixes).
• crypto: cavium - fix dmafreecoherent() size (git-fixes).
• crypto: ccp - Add an S4 restore flow (git-fixes).
• crypto: ccree - Correctly handle return of sgnentsfor_len (git-fixes).
• crypto: hisilicon/qm - restore original qos values (git-fixes).
• crypto: hisilicon/sec2 - support skcipher/aead fallback for hardware queue unavailable (git-fixes).
• crypto: iaa - Fix incorrect return value in saveiaawq() (git-fixes).
• crypto: iaa - Fix out-of-bounds index in findemptyiaacompressionmode (git-fixes).
• crypto: octeontx - Fix length check to avoid truncation in ucodeloadstore (git-fixes).
• crypto: octeontx - fix dmafreecoherent() size (git-fixes).
• crypto: omap - Allocate OMAPCRYPTOFORCE_COPY scatterlists correctly (git-fixes).
• crypto: qat - fix duplicate restarting msg during AER error (git-fixes).
• crypto: qat - fix parameter order used in ICPQATFWCOMNFLAGS_BUILD (git-fixes).
• crypto: qat - fix warning on adfpfvfpf_proto.c (git-fixes).
• crypto: rockchip - drop redundant cryptoskcipherivsize() calls (git-fixes).
• crypto: seqiv - Do not use req->iv after cryptoaeadencrypt (git-fixes).
• crypto: virtio - Add spinlock protection with virtqueue notification (git-fixes).
• crypto: virtio - Remove duplicated virtqueuekick in virtiocryptoskciphercrypt_req (git-fixes).
• device property: Allow secondary lookup in fwnodegetnextchildnode() (git-fixes).
• dm-integrity: limit MAXTAGSIZE to 255 (git-fixes).
• dm-verity: fix unreliable memory allocation (git-fixes).
• dm: fix queue start/stop imbalance under suspend/load/resume races (bsc#1253386)
• dma: dma-axi-dmac: fix SW cyclic transfers (git-fixes).
• dmaengine: apple-admac: Add "apple,t8103-admac" compatible (git-fixes).
• dmaengine: athdmac: fix device leak on ofdma_xlate() (git-fixes).
• dmaengine: bcm-sba-raid: fix device leak on probe (git-fixes).
• dmaengine: dw: dmamux: fix OF node leak on route allocation failure (git-fixes).
• dmaengine: idxd: fix device leaks on compat bind and unbind (git-fixes).
• dmaengine: lpc18xx-dmamux: fix device leak on route allocation (git-fixes).
• dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX (git-fixes).
• dmaengine: omap-dma: fix dma_pool resource leak in error paths (git-fixes).
• dmaengine: qcom: gpi: Fix memory leak in gpiperipheralconfig() (git-fixes).
• dmaengine: sh: rz-dmac: Fix rzdmacterminate_all() (git-fixes).
• dmaengine: sun6i: Choose appropriate burst length under maxburst (stable-fixes).
• dmaengine: tegra-adma: Fix use-after-free (git-fixes).
• dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (git-fixes).
• dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (git-fixes).
• dmaengine: ti: k3-udma: fix device leak on udma lookup (git-fixes).
• dmaengine: xilinx: xdma: Fix regmap max_register (git-fixes).
• dmaengine: xilinxdma: Fix uninitialized addrwidth when "xlnx,addrwidth" property is missing (git-fixes).
• docs: ABI: sysfs-devices-soc: Fix swapped sample values (git-fixes).
• docs: fix WARNING document not included in any toctree (stable-fixes).
• docs: w1: fix w1-netlink invalid URL (git-fixes).
• dpll: Prevent duplicate registrations (git-fixes).
• dpll: fix device-id-get and pin-id-get to return errors properly (git-fixes).
• dpll: fix return value check for kmemdup (git-fixes).
• dpll: indent DPLL option type by a tab (git-fixes).
• dpll: spec: add missing module-name and clock-id to pin-get reply (git-fixes).
• drivers/usb/dwc3: fix PCI parent check (git-fixes).
• drivers: iio: mpu3050: use deverrprobe for regulator request (git-fixes).
• drm/amd/display: Avoid updating surface with the same surface under MPO (stable-fixes).
• drm/amd/display: Bump the HDMI clock to 340MHz (stable-fixes).
• drm/amd/display: Check NULL before accessing (stable-fixes).
• drm/amd/display: Fix DP no audio issue (stable-fixes).
• drm/amd/display: Fix logical vs bitwise bug in getembeddedpanelinfov2_1() (git-fixes).
• drm/amd/display: Increase DPCD read retries (stable-fixes).
• drm/amd/display: Move sleep into each retry for retrievelinkcap() (stable-fixes).
• drm/amd/display: Use GFPATOMIC in dccreateplanestate() (stable-fixes).
• drm/amd/display: Use same max plane scaling limits for all 64 bpp formats (git-fixes).
• drm/amd/display: fix wrong color value mapping on MCM shaper LUT (git-fixes).
• drm/amd/pm: Do not clear SI SMC table when setting power limit (git-fixes).
• drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) (git-fixes).
• drm/amd/pm: fix race in power state check before mutex lock (git-fixes).
• drm/amd: Clean up kfd node on surprise disconnect (stable-fixes).
• drm/amd: Fix hang on amdgpu unload by using pcidevis_disconnected() (git-fixes).
• drm/amdgpu/gfx10: fix wptr reset in KGQ init (stable-fixes).
• drm/amdgpu/gfx11: fix wptr reset in KGQ init (stable-fixes).
• drm/amdgpu/soc21: fix xclk for APUs (stable-fixes).
• drm/amdgpu: Add HAINAN clock adjustment (stable-fixes).
• drm/amdgpu: Adjust usleep_range in fence wait (stable-fixes).
• drm/amdgpu: Fix memory leak in amdgpuacpienumerate_xcc() (git-fixes).
• drm/amdgpu: Fix memory leak in amdgpurasinit() (git-fixes).
• drm/amdgpu: Forward VMID reservation errors (git-fixes).
• drm/amdgpu: Skip emit de meta data on gfx11 with rs64 enabled (stable-fixes).
• drm/amdgpu: add missing lock to amdgputtmaccessmemorysdma (git-fixes).
• drm/amdgpu: add support for HDP IP version 6.1.1 (stable-fixes).
• drm/amdgpu: avoid a warning in timedout job handler (stable-fixes).
• drm/amdgpu: fix NULL pointer dereference in amdgpugmcfilterfaultsremove (git-fixes).
• drm/amdgpu: fix cyan_skillfish2 gpu info fw handling (git-fixes).
• drm/amdgpu: fix sync handling in amdgpudmabufmovenotify (git-fixes).
• drm/amdgpu: update mappings not managed by KFD (bsc#1255428)
• drm/amdkfd: Fix GART PTE for non-4K pagesize in svmmigrategart_map() (stable-fixes).
• drm/amdkfd: Fix out-of-bounds write in kfdeventpage_set() (stable-fixes).
• drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (git-fixes).
• drm/amdkfd: fix a memory leak in devicequeuemanager_init() (git-fixes).
• drm/amdkfd: fix debug watchpoints for logical devices (stable-fixes).
• drm/atmel-hlcdc: do not reject the commit if the src rect has fractional parts (stable-fixes).
• drm/atmel-hlcdc: fix memory leak from the atomicdestroystate callback (stable-fixes).
• drm/atmel-hlcdc: fix use-after-free of drmcrtccommit after release (stable-fixes).
• drm/bridge: samsung-dsim: Fix memory leak in error path (git-fixes).
• drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used (git-fixes).
• drm/buddy: Prevent BUG_ON by validating rounded allocation (git-fixes).
• drm/display/dp_mst: Add protection against 0 vcpi (stable-fixes).
• drm/gma500: Remove unused helper psbfbdevfb_setcolreg() (git-fixes).
• drm/i915/acpi: free _DSM package when no connectors (git-fixes).
• drm/i915/gem: Zero-initialize the eb.vma array in i915gemdo_execbuffer (git-fixes).
• drm/i915/wakeref: clean up INTELWAKEREFPUT_* flag macros (stable-fixes).
• drm/imx/tve: fix probe device leak (git-fixes).
• drm/logicvc: Fix device node reference leak in logicvcdrmconfig_parse() (git-fixes).
• drm/mediatek: Fix CCORR mtkctms3132tos1n function issue (git-fixes).
• drm/mediatek: Fix device node reference leak in mtkdpdt_parse() (git-fixes).
• drm/mgag200: Fix big-endian support (git-fixes).
• drm/mgag200: fix mgag200bmcstop_scanout() (git-fixes).
• drm/msm/a2xx: fix pixel shader start on A225 (git-fixes).
• drm/msm/a2xx: stop over-complaining about the legacy firmware (git-fixes).
• drm/msm/a6xx: Fix out of bound IO access in a6xxgetgmu_registers (git-fixes).
• drm/msm/a6xx: Flush LRZ cache before PT switch (git-fixes).
• drm/msm/dpu: Add missing NULL pointer check for pingpong interface (git-fixes).
• drm/msm/dpu: Remove dead-code in dpuencoderhelperresetmixers() (git-fixes).
• drm/msm/dpu: fix CMD panels on DPU 1.x - 3.x (git-fixes).
• drm/nouveau/disp/nv50-: Set lockcore in curs507aprepare (git-fixes).
• drm/nouveau/dispnv50: Do not call drmatomicgetcrtcstate() in prepare_fb (git-fixes).
• drm/nouveau: add missing DCB connector types (git-fixes).
• drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors (git-fixes).
• drm/nouveau: restrict the flush page to a 32-bit address (git-fixes).
• drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel (git-fixes).
• drm/panel: sony-td4353-jdi: Enable prepareprevfirst (git-fixes).
• drm/pl111: Fix error handling in pl111ambaprobe (git-fixes).
• drm/radeon: Add HAINAN clock adjustment (stable-fixes).
• drm/radeon: Remove _countedby from ClockInfoArray.clockInfo[] (stable-fixes).
• drm/radeon: delete radeonfenceprocess in is_signaled, no deadlock (stable-fixes).
• drm/tegra: dsi: fix device leak on probe (git-fixes).
• drm/tegra: hdmi: sor: Fix error: variable ‘j’ set but not used (stable-fixes).
• drm/tilcdc: request and mapp iomem with devres (stable-fixes).
• drm/ttm: Avoid NULL pointer deref for evicted BOs (git-fixes).
• drm/v3d: Set DMA segment size to avoid debug warnings (stable-fixes).
• drm/vgem-fence: Fix potential deadlock on release (git-fixes).
• drm/vmwgfx: Fix an error return check in vmwcompatshader_add() (git-fixes).
• drm/vmwgfx: Fix invalid krefput callback in vmwbodirtyrelease (git-fixes).
• drm/vmwgfx: Return the correct value in vmwtranslateptr functions (git-fixes).
• drm/vmwgfx: Use kref in vmwbodirty (stable-fixes).
• drm: Account property blob allocations to memcg (stable-fixes).
• drm: nouveau: Replace sprintf() with sysfs_emit() (git-fixes).
• drm: sti: fix device leaks at component probe (git-fixes).
• efi/libstub: Describe missing 'out' parameter in efiloadinitrd (git-fixes).
• efi/libstub: Fix page table access in 5-level to 4-level paging transition (git-fixes).
• efi: Fix reservation of unaccepted memory table (git-fixes).
• efivarfs: fix error propagation in efivarentryget() (git-fixes).
• exfat: add a check for invalid data size (git-fixes).
• exfat: using hweight instead of internal logic (git-fixes).
• ext4: fix iloc.bh leak in ext4xattrinodeupdateref (git-fixes).
• ext4: use optimized mballoc scanning regardless of inode format (bsc#1254378).
• ext4: wait for ongoing I/O to complete before freeing blocks (bsc#1256366).
• fbcon: check return value of con2fbacquirenewinfo() (git-fixes).
• fbdev: au1200fb: Fix a memory leak in au1200fbdrvprobe() (git-fixes).
• fbdev: ffb: fix corrupted video output on Sun FFB1 (stable-fixes).
• fbdev: gbefb: fix to use physical address instead of dma address (stable-fixes).
• fbdev: of: displaytiming: fix refcount leak in ofgetdisplaytimings() (git-fixes).
• fbdev: pxafb: Fix multiple clamped values in pxafbadjusttiming (git-fixes).
• fbdev: rivafb: fix divide error in nv3_arb() (git-fixes).
• fbdev: smscufx: properly copy ioctl memory to kernelspace (stable-fixes).
• fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (git-fixes).
• fbdev: tcx.c fix memmap to correct smemstart offset (git-fixes).
• fbdev: vt8500lcdfb: fix missing dmafreecoherent() (git-fixes).
• firewire: nosy: Fix dmafreecoherent() size (git-fixes).
• firmware: imx: scu-irq: Init workqueue before request mbox channel (stable-fixes).
• firmware: imx: scu-irq: fix OF node leak in (git-fixes).
• firmware: stratix10-svc: Add mutex in stratix10 memory management (git-fixes).
• firmware: stratix10-svc: fix bug in saving controller data (git-fixes).
• firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc (git-fixes).
• fix it87_wdt early reboot by reporting running timer (stable-fixes).
• fpga: dfl: use subsys_initcall to allow built-in drivers to be added (git-fixes).
• fpga: of-fpga-region: Fail if any bridge is missing (stable-fixes).
• fs: dlm: allow to F_SETLKW getting interrupted (bsc#1255025).
• genalloc.h: fix htmldocs warning (git-fixes).
• gpio: aspeed-sgpio: Change the macro to support deferred probe (stable-fixes).
• gpio: omap: do not register driver in probe() (git-fixes).
• gpio: pca953x: Add support for level-triggered interrupts (stable-fixes).
• gpio: pca953x: Utilise deverrprobe() where it makes sense (stable-fixes).
• gpio: pca953x: Utilise temporary variable for struct device (stable-fixes).
• gpio: pca953x: fix wrong error probe return value (git-fixes).
• gpio: pca953x: handle short interrupt pulses on PCAL devices (git-fixes).
• gpio: pca953x: mask interrupts in irq shutdown (stable-fixes).
• gpio: rockchip: Stop calling pinctrl for set_direction (git-fixes).
• gpio: rockchip: mark the GPIO controller as sleeping (git-fixes).
• gpio: sprd: Change sprdgpio lock to rawspin_lock (stable-fixes).
• gpu: host1x: Fix race in syncpt alloc/free (git-fixes).
• hwmon: (f71882fg) Add F81968 support (stable-fixes).
• hwmon: (ibmpex) fix use-after-free in high/low store (git-fixes).
• hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race (git-fixes).
• hwmon: (max16065) Use local variable to avoid TOCTOU (git-fixes).
• hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE (stable-fixes).
• hwmon: (occ) Mark occinitattribute() as __printf (git-fixes).
• hwmon: (tmp401) fix overflow caused by default conversion rate value (git-fixes).
• hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (git-fixes).
• hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU (git-fixes).
• hwmon: sy7636a: Fix regulator_enable resource leak on error path (git-fixes).
• i2c: amd-mp2: fix reference leak in MP2 PCI device (git-fixes).
• i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware (stable-fixes).
• i2c: i2c.h: fix a bad kernel-doc line (git-fixes).
• i3c: Move device name assignment after i3cbusinit (git-fixes).
• i3c: dw: Initialize spinlock to avoid upsetting lockdep (git-fixes).
• i3c: fix refcount inconsistency in i3cmasterregister (git-fixes).
• i3c: master: Inherit DMA masks and parameters from parent device (stable-fixes).
• i3c: master: svc: Initialize 'dev' to NULL in svci3cmasteribiisr() (stable-fixes).
• i3c: master: svc: Prevent incomplete IBI transaction (git-fixes).
• ice: use netifgetnumdefaultrss_queues() (bsc#1247712).
• idr: fix idr_alloc() returning an ID out of range (git-fixes).
• iio: Use IRQFNOTHREAD (stable-fixes).
• iio: accel: bmc150: Fix irq assumption regression (stable-fixes).
• iio: accel: fix ADXL355 startup race condition (git-fixes).
• iio: accel: iis328dq: fix gain values (git-fixes).
• iio: adc: ad7280a: fix ad7280storebalance_timer() (git-fixes).
• iio: adc: ad7280a: handle spi_setup() errors in probe() (git-fixes).
• iio: adc: ad9467: fix ad9434 vref mask (git-fixes).
• iio: adc: at91-sama5d2adc: Fix potential use-after-free in sama5d2adc driver (git-fixes).
• iio: adc: tiam335xadc: Limit step_avg to valid range for gcc complains (stable-fixes).
• iio: core: Clean up device correctly on iiodevicealloc() failure (git-fixes).
• iio: core: add missing mutexdestroy in iiodev_release() (git-fixes).
• iio: dac: ad5686: add AD5695R to ad5686chipinfo_tbl (git-fixes).
• iio: gyro: itg3200: Fix unchecked return value in read_raw (git-fixes).
• iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member (git-fixes).
• iio: imu: stlsm6dsx: fix array size for stlsm6dsx_settings fields (git-fixes).
• iio: imu: stlsm6dsx: fix iiochan_spec for sensors without event detection (git-fixes).
• iio: magnetometer: Remove IRQF_ONESHOT (stable-fixes).
• iio: sca3000: Fix a resource leak in sca3000_probe() (git-fixes).
• iio: st_lsm6dsx: Fixed calibrated timestamp calculation (git-fixes).
• iio:common:sspsensors: Fix an error handling path sspprobe() (git-fixes).
• ima: Handle error code returned by imafilterrule_match() (git-fixes).
• intelth: Fix error handling in intelthoutputopen (git-fixes).
• intel_th: fix device leak on output open() (git-fixes).
• iomap: account for unaligned end offsets when truncating read range (git-fixes).
• ipmi: Fix _scanchannels() failing to rescan channels (stable-fixes).
• ipmi: Fix handling of messages with provided receive message pointer (git-fixes).
• ipmi: Fix the race between __scanchannels() and deliverresponse() (stable-fixes).
• ipmi: Rework user message limit handling (git-fixes).
• ipmi: ipmb: initialise event handler read bytes (git-fixes).
• irqchip/mchp-eic: Fix error code in mchpeicdomain_alloc() (git-fixes).
• kABI workaround for HCILEADV_0 addition (git-fixes).
• kconfig/mconf: Initialize the default locale at startup (stable-fixes).
• kconfig/nconf: Initialize the default locale at startup (stable-fixes).
• kernel-binary: Require libdw in Factory Libdw is required for gendwarfksyms
• kernel-binary: Support building gendwarfksyms on SLE/Leap 15
• landlock: Optimize file path walks and prepare for audit support (bsc#1255698).
• leds: led-class: Only Add LED to leds_list when it is fully ready (git-fixes).
• leds: leds-lp50xx: Allow LED 0 to be added to module bank (git-fixes).
• leds: leds-lp50xx: Enable chip before any communication (git-fixes).
• leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs (git-fixes).
• leds: netxbig: Fix GPIO descriptor leak in error paths (git-fixes).
• leds: qcom-lpg: Check the return value of regmapbulkwrite() (git-fixes).
• lib/crypto: aes: Fix missing MMU protection for AES S-box (git-fixes).
• lib/vsprintf: Check pointer before dereferencing in timeanddate() (git-fixes).
• mISDN: annotate data-race around dev->work (git-fixes).
• mailbox: mailbox-test: Fix debugfscreatedir error checking (git-fixes).
• media: TDA1997x: Remove redundant canceldelayedwork in probe (git-fixes).
• media: adv7180: fix frame interval in progressive mode (stable-fixes).
• media: adv7842: Avoid possible out-of-bounds array accesses in adv7842cplog_status() (git-fixes).
• media: amphion: Add a frame flush mode for decoder (stable-fixes).
• media: amphion: Cancel message work before releasing the VPU core (git-fixes).
• media: amphion: Clear lastbufferdequeued flag for DECCMDSTART (stable-fixes).
• media: amphion: Make some vpu_v4l2 functions static (stable-fixes).
• media: amphion: Remove vpuvbis_codecconfig (git-fixes).
• media: atomisp: Prefix firmware paths with "intel/ipu/" (bsc#1252973).
• media: atomisp: Remove firmware_name module parameter (bsc#1252973).
• media: ccs: Accommodate C-PHY into the calculation (git-fixes).
• media: ccs: Avoid possible division by zero (git-fixes).
• media: cec: Fix debugfs leak on bus_register() failure (git-fixes).
• media: cx23885: Add missing unmap in sndcx23885hw_params() (git-fixes).
• media: cx25821: Add missing unmap in sndcx25821hw_params() (git-fixes).
• media: cx25821: Fix a resource leak in cx25821devsetup() (stable-fixes).
• media: cx88: Add missing unmap in sndcx88hw_params() (git-fixes).
• media: dvb-core: dmxdevfilter must always flush bufs (stable-fixes).
• media: dvb-core: fix wrong reinitialization of ringbuffer on reopen (git-fixes).
• media: dvb-net: fix OOB access in ULE extension header tables (git-fixes).
• media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100i2cmsg() (git-fixes).
• media: i2c/tw9903: Fix potential memory leak in tw9903_probe() (git-fixes).
• media: i2c/tw9906: Fix potential memory leak in tw9906_probe() (git-fixes).
• media: i2c: ADV7604: Remove redundant canceldelayedwork in probe (git-fixes).
• media: i2c: adv7842: Remove redundant canceldelayedwork in probe (git-fixes).
• media: i2c: ov5647: Correct minimum VBLANK value (git-fixes).
• media: i2c: ov5647: Correct pixel array offset (git-fixes).
• media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode (git-fixes).
• media: i2c: ov5647: Initialize subdev before controls (git-fixes).
• media: i2c: ov5647: Sensor should report RAW color space (git-fixes).
• media: i2c: ov5647: use our own mutex for the ctrl lock (git-fixes).
• media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() (git-fixes).
• media: mtk-mdp: Fix a reference leak bug in mtkmdpremove() (git-fixes).
• media: mtk-mdp: Fix error handling in probe function (git-fixes).
• media: omap3isp: ispvideombustopix/pixtombus fixes (stable-fixes).
• media: omap3isp: isppreview: always clamp in previewtryformat() (stable-fixes).
• media: omap3isp: set initial format (stable-fixes).
• media: pvrusb2: Fix incorrect variable used in trace message (git-fixes).
• media: pvrusb2: fix URB leak in pvr2sendrequest_ex (stable-fixes).
• media: qcom: camss: vfe: Fix out-of-bounds access in vfeisrreg_update() (git-fixes).
• media: radio-keene: fix memory leak in error path (git-fixes).
• media: rc: st_rc: Fix reset control resource leak (git-fixes).
• media: renesas: rcardrif: fix device node reference leak in rcardrifbondenabled (git-fixes).
• media: rkisp1: Fix filter mode register configuration (stable-fixes).
• media: samsung: exynos4-is: fix potential ABBA deadlock on init (git-fixes).
• media: solo6x10: Check for out of bounds chip_id (stable-fixes).
• media: uvcvideo: Fix allocation for small frame sizes (git-fixes).
• media: v4l2-mem2mem: Fix outdated documentation (git-fixes).
• media: venus: vdec: fix error state assignment for zero bytesused (git-fixes).
• media: verisilicon: Fix CPU stalls on G2 bus error (git-fixes).
• media: verisilicon: Protect G2 HEVC decoder against invalid DPB index (git-fixes).
• media: verisilicon: Store chroma and motion vectors offset (stable-fixes).
• media: verisilicon: g2: Use common helpers to compute chroma and mv offsets (stable-fixes).
• media: videobuf2: Fix device reference leak in vb2dcalloc error path (git-fixes).
• media: vidtv: initialize local pointers upon transfer of memory ownership (git-fixes).
• media: vpif_capture: fix section mismatch (git-fixes).
• media: vpif_display: fix section mismatch (git-fixes).
• mei: me: add nova lake point S DID (stable-fixes).
• mei: me: add wildcat lake P DID (stable-fixes).
• mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup (git-fixes).
• mfd: arizona: Fix regulator resource leak on wm5102clearwrite_sequencer() failure (git-fixes).
• mfd: core: Add locking around 'mfdofnode_list' (git-fixes).
• mfd: da9055: Fix missing regmapdelirq_chip() in error path (git-fixes).
• mfd: max77620: Fix potential IRQ chip conflict when probing two devices (git-fixes).
• mfd: mt6358-irq: Fix missing irqdomainremove() in error path (git-fixes).
• mfd: mt6397-irq: Fix missing irqdomainremove() in error path (git-fixes).
• mfd: tps6105x: Fix kernel-doc warnings relating to the core struct and tps6105x_mode (git-fixes).
• mfd: wm8350-core: Use IRQF_ONESHOT (git-fixes).
• misc: bcmvk: Fix possible null-pointer dereferences in bcmvk_read() (stable-fixes).
• misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66 (stable-fixes).
• mm, page_alloc, thp: prevent reclaim for _GFPTHISNODE THP allocations (bsc#1254447 bsc#1253087).
• mmc: mmci: Fix devicenode reference leak in ofgetdmlpipe_index() (git-fixes).
• mmc: rtsxpcisdmmc: implement sdmmccardbusy function (git-fixes).
• mmc: rtsxpcisdmmc: increase power-on settling delay to 5ms (git-fixes).
• mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (git-fixes).
• mmc: sdhci-msm: Avoid early clock doubling during HS400 transition (stable-fixes).
• mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode (git-fixes).
• most: usb: fix double free on late probe failure (git-fixes).
• mt76: mt7615: Fix memory leak in mt7615mcuwtblstaadd() (git-fixes).
• mtd: lpddrcmds: fix signed shifts in lpddrcmds (git-fixes).
• mtd: maps: pcmciamtd: fix potential memory leak in pcmciamtd_detach() (git-fixes).
• mtd: nand: relax ECC parameter validation check (git-fixes).
• mtd: parsers: Fix memory leak in mtdparsertplinksafeloaderparse() (git-fixes).
• mtd: parsers: ofpart: fix OF node refcount leak in parsefixedpartitions() (git-fixes).
• mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper (git-fixes).
• mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove (git-fixes).
• mtd: rawnand: pl353: Fix software ECC support (git-fixes).
• mtd: rawnand: renesas: Handle devmpmruntime_enable() errors (git-fixes).
• mtd: spinand: Fix kernel doc (git-fixes).
• myri10ge: avoid uninitialized variable use (stable-fixes).
• net: can: j1939: j1939xtprxrtssession_active(): deactivate session upon receiving the second rts (git-fixes).
• net: hv_netvsc: reject RSS hash key programming without RX indirection table (bsc#1257473).
• net: mdio: aspeed: add dummy read to avoid read-after-write issue (git-fixes).
• net: nfc: fix deadlock between nfcunregisterdevice and rfkillfopwrite (git-fixes).
• net: nfc: nci: Fix parameter validation for packet data (git-fixes).
• net: phy: adin1100: Fix software power-down ready condition (git-fixes).
• net: phy: mxl-gpy: fix bogus error on USXGMII and integrated PHY (git-fixes).
• net: phy: mxl-gpy: fix link properties on USXGMII and internal PHYs (git-fixes).
• net: rose: fix invalid array index in rosekillby_device() (git-fixes).
• net: tcp: allow zero-window ACK update the window (bsc#1254767).
• net: usb: catc: enable basic endpoint checking (git-fixes).
• net: usb: dm9601: remove broken SR9700 support (git-fixes).
• net: usb: kalmia: validate USB endpoints (git-fixes).
• net: usb: kaweth: remove TX queue manipulation in kawethsetrx_mode (git-fixes).
• net: usb: kaweth: validate USB endpoints (git-fixes).
• net: usb: lan78xx: scan all MDIO addresses on LAN7801 (git-fixes).
• net: usb: pegasus: enable basic endpoint checking (git-fixes).
• net: usb: pegasus: fix memory leak in updateethregs_async() (git-fixes).
• net: usb: r8152: fix transmit queue timeout (stable-fixes).
• net: usb: rtl8150: fix memory leak on usbsubmiturb() failure (git-fixes).
• net: usb: sr9700: fix incorrect command used to write single register (git-fixes).
• net: usb: sr9700: remove code to drive nonexistent multicast filter (stable-fixes).
• net: usb: sr9700: support devices with virtual driver CD (stable-fixes).
• net: wan/fslucchdlc: Fix dmafreecoherent() in uhdlc_memclean() (git-fixes).
• net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets (git-fixes).
• net: wwan: iosm: Fix memory leak in ipcmuxdeinit() (git-fixes).
• net: wwan: t7xx: fix potential skb->frags overflow in RX path (git-fixes).
• nfc: hci: shdlc: Stop timers and work before freeing context (git-fixes).
• nfc: llcp: Fix memleak in nfcllcpsenduiframe() (git-fixes).
• nfc: nci: Fix race between rfkill and nciunregisterdevice() (git-fixes).
• nfc: nxp-nci: remove interrupt trigger type (stable-fixes).
• nfc: pn533: Fix error code in pn533acr122poweron_rdr() (git-fixes).
• nfc: pn533: properly drop the usb interface reference on disconnect (git-fixes).
• ntb: ntbhwswitchtec: Fix array-index-out-of-bounds access (stable-fixes).
• ntb: ntbhwswitchtec: Fix shift-out-of-bounds for 0 mw lut (stable-fixes).
• nvme: Use non zero KATO for persistent discovery connections (git-fixes).
• of: fix reference count leak in ofaliasscan() (git-fixes).
• of: platform: Use default match table for /firmware (git-fixes).
• orangefs: fix xattr related buffer overflow.. (git-fixes).
• phy: broadcom: bcm63xx-usbh: fix section mismatches (git-fixes).
• phy: freescale: imx8m-pcie: assert phy reset during power on (stable-fixes).
• phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature (stable-fixes).
• phy: mvebu-cp110-utmi: fix dr_mode property read from dts (stable-fixes).
• phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcargen3phyusb2probe() (git-fixes).
• phy: rockchip: inno-usb2: fix communication disruption in gadget mode (git-fixes).
• phy: rockchip: inno-usb2: fix disconnection in gadget mode (git-fixes).
• phy: stm32-usphyc: Fix off by one in probe() (git-fixes).
• phy: tegra: xusb: Explicitly configure HSDISCONLEVEL to 0x7 (git-fixes).
• pinctrl: equilibrium: Fix device node reference leak in pinbank_init() (git-fixes).
• pinctrl: meson: mark the GPIO controller as sleeping (git-fixes).
• pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping (git-fixes).
• pinctrl: qcom: msm: Fix deadlock in pinmux configuration (stable-fixes).
• pinctrl: qcom: sm8250-lpass-lpi: Fix i2s2datagroups definition (git-fixes).
• pinctrl: single: Fix PINCONFIGBIAS_DISABLE handling (stable-fixes).
• pinctrl: single: Fix incorrect type for error return variable (git-fixes).
• pinctrl: single: fix refcount leak in pcsaddgpio_func() (git-fixes).
• pinctrl: stm32: fix hwspinlock resource leak in probe function (git-fixes).
• platform/chrome: crosecishtp: Fix UAF after unbinding driver (git-fixes).
• platform/chrome: croseclightbar: Fix response size initialization (git-fixes).
• platform/chrome: crostypecswitch: Do not touch struct fwnode_handle::dev (git-fixes).
• platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (git-fixes).
• platform/x86/amd/pmc: Add quirk for MECHREVO Wujie 15X Pro (stable-fixes).
• platform/x86/amd/pmc: Add spurious_8042 to Xbox Ally (stable-fixes).
• platform/x86/amd: pmc: Add Lenovo Legion Go 2 to pmc quirk list (stable-fixes).
• platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (stable-fixes).
• platform/x86: acer-wmi: Ignore backlight event (stable-fixes).
• platform/x86: asus-wmi: use brightnesssetblocking() for kbd led (git-fixes).
• platform/x86: classmate-laptop: Add missing NULL pointer checks (stable-fixes).
• platform/x86: huawei-wmi: add keys for HONOR models (stable-fixes).
• platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic (git-fixes).
• platform/x86: intel: chtwc_int33fe: do not dereference swnode args (git-fixes).
• platform/x86: intel: punit_ipc: fix memory corruption (git-fixes).
• platform/x86: intel_telemetry: Fix PSS event register mask (git-fixes).
• platform/x86: intel_telemetry: Fix swapped arrays in PSS output (git-fixes).
• platform/x86: msi-laptop: add missing sysfsremovegroup() (git-fixes).
• platform/x86: panasonic-laptop: Fix sysfs group leak in error path (stable-fixes).
• platform/x86: toshiba_haps: Fix memory leaks in add/remove routines (git-fixes).
• power: reset: nvmem-reboot-mode: respect cell size for nvmemcellwrite (git-fixes).
• power: supply: ab8500: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: act8945a: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: apmpower: only unset own apmgetpowerstatus (git-fixes).
• power: supply: bq256xx: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: bq25980: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: bq27xxx: fix wrong errno when bus ops are unsupported (git-fixes).
• power: supply: cpcap-battery: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: cw2015: Check devmdelayedwork_autocancel() return code (git-fixes).
• power: supply: goldfish: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: qcom_battmgr: Recognize "LiP" as lithium-polymer (git-fixes).
• power: supply: rt9455: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: rt9467: Prevent using uninitialized local variable in rt9467setvaluefromranges() (git-fixes).
• power: supply: rt9467: Return error on failure in rt9467setvaluefromranges() (git-fixes).
• power: supply: sbs-battery: Fix use-after-free in powersupplychanged() (git-fixes).
• power: supply: wm831x: Check wm831xsetbits() return value (git-fixes).
• power: supply: wm97xx: Fix NULL pointer dereference in powersupplychanged() (git-fixes).
• powercap: fix race condition in registercontroltype() (stable-fixes).
• powercap: fix sscanf() error return value handling (stable-fixes).
• powercap: intelrapltpmi: Remove FW_BUG from invalid version check (git-fixes).
• powerpc/64s/slb: Fix SLB multihit issue during SLB preload (bac#1236022 ltc#211187).
• powerpc/addnote: Fix overflow on 32-bit builds (bsc#1215199).
• powerpc/eeh: fix recursive pcilockrescan_remove locking in EEH event handling (bsc#1253262 ltc#216029).
• powerpc/kexec: Enable SMT before waking offline CPUs (bsc#1214285 bsc#1205462 bsc#1253739 bsc#1254244).
• pwm: bcm2835: Make sure the channel is enabled after pwm_request() (git-fixes).
• rapidio: replace riofreenet() with kfree() in rioscanalloc_net() (git-fixes).
• regmap: Fix race condition in hwspinlock irqsave routine (git-fixes).
• regmap: maple: free entry on masstoregfp() failure (stable-fixes).
• regulator: core: Protect regulatorsupplyaliaslist with regulatorlist_mutex (git-fixes).
• regulator: core: disable supply if enabling main regulator fails (git-fixes).
• regulator: core: fix locking in regulatorresolvesupply() error path (git-fixes).
• regulator: core: move supply check earlier in setmachineconstraints() (git-fixes).
• remove a bpf CVE change which is already part of the base kernel
• remove an Intel CPU model change which is already part of the base kernel
• reset: fix BIT macro reference (stable-fixes).
• rpm/mkspec-dtb: add riscv64 dtb-thead subpackage
• rpmsg: core: fix race in driveroverrideshow() and use core helper (git-fixes).
• rpmsg: glink: fix rpmsg device leak (git-fixes).
• rtc: gamecube: Check the return value of ioremap() (git-fixes).
• rtc: interface: Alarm race handling should not discard preceding error (git-fixes).
• rtc: zynqmp: correct frequency value (stable-fixes).
• sched: Increase schedtickremote timeout (bsc#1254510).
• scripts/python/gitsort/gitsort.yaml: add cifs for-next repository
• scripts: obsapi: Support URL trailing / in oscrc
• scripts: teaapi: Add paging
• scripts: uploader: Fix no change condition for _maintainership.json
• scripts: uploader: Handle missing upstream in ispropen
• scrits: teaapi: Add list_repos
• scsi: lpfc: Add capability to register Platform Name ID to fabric (bsc#1254119).
• scsi: lpfc: Allow support for BB credit recovery in point-to-point topology (bsc#1254119).
• scsi: lpfc: Ensure unregistration of rpis for received PLOGIs (bsc#1254119).
• scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology (bsc#1254119).
• scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (bsc#1254119).
• scsi: lpfc: Modify kref handling for Fabric Controller ndlps (bsc#1254119).
• scsi: lpfc: Remove redundant NULL ptr assignment in lpfcelsfree_iocb() (bsc#1254119).
• scsi: lpfc: Revise discovery related function headers and comments (bsc#1254119).
• scsi: lpfc: Rework lpfcsli4fcfrrnextindexget() (bsc#1256861).
• scsi: lpfc: Update lpfc version to 14.4.0.12 (bsc#1254119).
• scsi: lpfc: Update lpfc version to 14.4.0.13 (bsc#1256861).
• scsi: lpfc: Update various NPIV diagnostic log messaging (bsc#1254119).
• scsi: qla2xxx: Add Speed in SFP print information (bsc#1256863).
• scsi: qla2xxx: Add bsg interface to support firmware img validation (bsc#1256863).
• scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (bsc#1256863).
• scsi: qla2xxx: Add support for 64G SFP speed (bsc#1256863).
• scsi: qla2xxx: Allow recovery for tape devices (bsc#1256863).
• scsi: qla2xxx: Delay module unload while fabric scan in progress (bsc#1256863).
• scsi: qla2xxx: Fix bsg_done() causing double free (bsc#1256863).
• scsi: qla2xxx: Free sp in error path to fix system crash (bsc#1256863).
• scsi: qla2xxx: Query FW again before proceeding with login (bsc#1256863).
• scsi: qla2xxx: Update version to 10.02.10.100-k (bsc#1256863).
• scsi: qla2xxx: Validate MCU signature before executing MBC 03h (bsc#1256863).
• scsi: qla2xxx: Validate sp before freeing associated memory (bsc#1256863).
• scsi: storvsc: Process unsupported MODESENSE10 (bsc#1257296).
• selftests/bpf: Skip timer cases when bpf_timer is not supported (git-fixes).
• serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done (stable-fixes).
• serial: 8250dw: handle clock enable errors in runtimeresume (stable-fixes).
• serial: 8250_pci: Fix broken RS485 for F81504/508/512 (git-fixes).
• serial: SH_SCI: improve "DMA support" prompt (git-fixes).
• serial: add support of CPCI cards (stable-fixes).
• serial: amba-pl011: prefer dmamappingerror() over explicit address checking (git-fixes).
• serial: imx: change SERIALIMXCONSOLE to bool (git-fixes).
• serial: sprd: Return -EPROBE_DEFER when uart clock is not ready (stable-fixes).
• shrinkslabmemcg: clear_bits of skipped shrinkers (bsc#1256564).
• slimbus: core: fix OF node leak on registration failure (git-fixes).
• slimbus: core: fix device reference leak on report present (git-fixes).
• slimbus: core: fix ofslimget_device() kernel doc (git-fixes).
• slimbus: core: fix runtime PM imbalance on report present (git-fixes).
• slimbus: ngd: Fix reference count leak in qcomslimngdnotifyslaves (git-fixes).
• smb3: add missing null server pointer check (git-fixes).
• smb: change return type of cacheddirlease_break() to bool (git-fixes).
• smb: client: ensure opencacheddirbydentry() only returns valid cfid (git-fixes).
• smb: client: fix cifspickchannel when channel needs reconnect (git-fixes).
• smb: client: fix warning when reconnecting channel (git-fixes).
• smb: client: introduce closecacheddir_locked() (git-fixes).
• smb: client: remove unused fid_lock (git-fixes).
• smb: client: short-circuit in opencacheddirbydentry() if !dentry (git-fixes).
• smb: client: split cached_fid bitfields to avoid shared-byte RMW races (bsc#1250748,bsc#1257154).
• smb: client: update cfid->lastaccesstime in opencacheddirbydentry() (git-fixes).
• smb: improve directory cache reuse for readdir operations (bsc#1252712).
• smc91x: fix broken irq-context in PREEMPT_RT (git-fixes).
• soc/tegra: fuse: speedo-tegra210: Update speedo IDs (git-fixes).
• soc: amlogic: canvas: fix device leak on lookup (git-fixes).
• soc: mediatek: svs: Fix memory leak in svsenabledebug_write() (git-fixes).
• soc: qcom: cmd-db: Use devmmemremap() to fix memory leak in cmddbdevprobe (git-fixes).
• soc: qcom: ocmem: fix device leak on lookup (git-fixes).
• soc: qcom: smem: fix hwspinlock resource leak in probe error paths (git-fixes).
• soc: qcom: smem: handle ENOMEM error during probe (git-fixes).
• soc: ti: k3-socinfo: Fix regmap leak on probe failure (git-fixes).
• soc: ti: pruss: Fix double free in prussclkmux_setup() (git-fixes).
• soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15) (stable-fixes).
• spi-geni-qcom: initialize mode related registers to 0 (stable-fixes).
• spi-geni-qcom: use xfer->bitsperword for can_dma() (stable-fixes).
• spi: amlogic-spifc-a1: Handle devmpmruntime_enable() errors (git-fixes).
• spi: bcm63xx: drop wrong casts in probe() (git-fixes).
• spi: bcm63xx: fix premature CS deassertion on RX-only transactions (git-fixes).
• spi: fsl-cpm: Check length parity before switching to 16 bit mode (git-fixes).
• spi: imx: keep dma request disabled before dma transfer setup (stable-fixes).
• spi: spi-mem: Limit octal DTR constraints to octal DTR situations (stable-fixes).
• spi: spi-mem: Protect dirmapcreate() with spimemaccessstart/end (stable-fixes).
• spi: spi-sprd-adi: Fix double free in probe error path (git-fixes).
• spi: sprd-adi: switch to use spiallochost() (stable-fixes).
• spi: sprd: adi: Use devmregisterrestart_handler() (stable-fixes).
• spi: stm32: fix Overrun issue at < 8bpw (stable-fixes).
• spi: tegra114: Preserve SPI mode bits in defcommand1reg (git-fixes).
• spi: tegra210-qspi: Remove cache operations (git-fixes)
• spi: tegra210-quad: Add support for internal DMA (git-fixes)
• spi: tegra210-quad: Check hardware status on timeout (bsc#1253155)
• spi: tegra210-quad: Fix timeout handling (bsc#1253155)
• spi: tegra210-quad: Fix timeout handling (git-fixes).
• spi: tegra210-quad: Move curr_xfer read inside spinlock (bsc#1257952)
• spi: tegra210-quad: Move curr_xfer read inside spinlock (git-fixes).
• spi: tegra210-quad: Protect curr_xfer assignment in (bsc#1257952)
• spi: tegra210-quad: Protect currxfer assignment in tegraqspisetuptransfer_one (git-fixes).
• spi: tegra210-quad: Protect curr_xfer check in IRQ handler (bsc#1257952)
• spi: tegra210-quad: Protect curr_xfer check in IRQ handler (git-fixes).
• spi: tegra210-quad: Protect curr_xfer clearing in (bsc#1257952)
• spi: tegra210-quad: Protect currxfer clearing in tegraqspinoncombinedseqxfer (git-fixes).
• spi: tegra210-quad: Protect currxfer in tegraqspicombinedseq_xfer (bsc#1257952)
• spi: tegra210-quad: Protect currxfer in tegraqspicombinedseq_xfer (git-fixes).
• spi: tegra210-quad: Refactor error handling into helper functions (bsc#1253155)
• spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed (bsc#1257952)
• spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (git-fixes).
• spi: tegra210-quad: Update dummy sequence configuration (git-fixes)
• spi: tegra: Fix a memory leak in tegraslinkprobe() (git-fixes).
• spi: wpcm-fiu: Fix potential NULL pointer dereference in wpcmfiuprobe() (git-fixes).
• spi: wpcm-fiu: Fix uninitialized res (git-fixes).
• spi: wpcm-fiu: Simplify with deverrprobe() (stable-fixes).
• spi: wpcm-fiu: Use devmplatformioremapresourcebyname() (stable-fixes).
• spi: xilinx: increase number of retries before declaring stall (stable-fixes).
• staging: fbtft: core: fix potential memory leak in fbtftprobecommon() (git-fixes).
• staging: rtl8723bs: fix memory leak on failure path (stable-fixes).
• staging: rtl8723bs: fix null dereference in find_network (git-fixes).
• staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing (stable-fixes).
• staging: rtl8723bs: fix out-of-bounds read in rtwgetie() parser (stable-fixes).
• supported.conf: Mark lan 743x supported (jsc#PED-14571)
• thermal: int340x: Fix sysfs group leak on DLVR registration failure (stable-fixes).
• thunderbolt: Add support for Intel Wildcat Lake (stable-fixes).
• tools/power cpupower: Reset errno before strtoull() (stable-fixes).
• tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (git-fixes).
• tpm: st33zp24: Fix missing cleanup on get_burstcount() error (git-fixes).
• tpm: tpmi2cinfineon: Fix locality leak on get_burstcount() failure (git-fixes).
• tracing: Fix access to traceeventfile (bsc#1254373).
• uacce: ensure safe queue release with state management (git-fixes).
• uacce: fix cdev handling in the cleanup path (git-fixes).
• uacce: fix isolate sysfs check condition (git-fixes).
• uacce: implement mremap in uaccevmops to return -EPERM (git-fixes).
• uio: uiofslelbcgpcm:: Add null pointer check to uiofslelbcgpcm_probe (git-fixes).
• usb: bdc: fix sleep during atomic (git-fixes).
• usb: cdns3: Fix double resource release in cdns3pciprobe (git-fixes).
• usb: chaoskey: fix locking for O_NONBLOCK (git-fixes).
• usb: chipidea: udc: limit usb request length to max 16KB (stable-fixes).
• usb: core: add USBQUIRKNO_BOS for devices that hang on BOS descriptor (stable-fixes).
• usb: dwc2: disable platform lowlevel hw resources during shutdown (stable-fixes).
• usb: dwc2: fix hang during shutdown if set as peripheral (git-fixes).
• usb: dwc2: fix hang during suspend if set as peripheral (git-fixes).
• usb: dwc2: fix resume failure if dr_mode is host (git-fixes).
• usb: dwc3: Abort suspend on soft disconnect failure (git-fixes).
• usb: dwc3: Check for USB4 IP_NAME (stable-fixes).
• usb: dwc3: Fix race condition between concurrent dwc3removerequests() call paths (git-fixes).
• usb: dwc3: keep susphy enabled during exit to avoid controller faults (git-fixes).
• usb: dwc3: of-simple: fix clock resource leak in dwc3ofsimple_probe (git-fixes).
• usb: dwc3: pci: Sort out the Intel device IDs (stable-fixes).
• usb: dwc3: pci: add support for the Intel Nova Lake -S (stable-fixes).
• usb: gadget: configfs: Correctly set useosstring at bind (git-fixes).
• usb: gadget: feem: Fix memory leak in eemunwrap (git-fixes).
• usb: gadget: lpc32xx_udc: fix clock imbalance in error path (git-fixes).
• usb: gadget: renesasusbf: Handle devmpmruntimeenable() errors (git-fixes).
• usb: gadget: tegra-xudc: Add handling for BLCGCOREPLLPWRDN (git-fixes).
• usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (git-fixes).
• usb: ohci-nxp: Use helper function devmclkget_enabled() (stable-fixes).
• usb: ohci-nxp: fix device leak on probe failure (git-fixes).
• usb: phy: Initialize struct usbphy listhead (git-fixes).
• usb: phy: isp1301: fix non-OF device reference imbalance (git-fixes).
• usb: raw-gadget: cap rawio transfer length to KMALLOCMAX_SIZE (git-fixes).
• usb: raw-gadget: do not limit transfer length (git-fixes).
• usb: renesasusbhs: Fix a resource leak in usbhspipe_malloc() (git-fixes).
• usb: storage: Fix memory leak in USB bulk transport (git-fixes).
• usb: storage: sddr55: Reject out-of-bound new_pba (stable-fixes).
• usb: typec: tipd: Clear interrupts first (git-fixes).
• usb: typec: ucsi: Handle incorrect num_connectors capability (stable-fixes).
• usb: typec: ucsi: psy: Set max current to zero when disconnected (git-fixes).
• usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (git-fixes).
• usb: udc: Add trace event for usbgadgetset_state (stable-fixes).
• usb: usb-storage: Maintain minimal modifications to the bcdDevice range (git-fixes).
• usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive (stable-fixes).
• usb: vhci-hcd: Prevent suspending virtually attached devices (git-fixes).
• usb: xhci: limit run_graceperiod for only usb 3.0 devices (stable-fixes).
• usbip: Fix locking bug in RT-enabled kernels (stable-fixes).
• usbnet: limit maxmtu based on device's hardmtu (git-fixes).
• via_wdt: fix critical boot hang due to unnamed resource allocation (stable-fixes).
• virtio_console: fix order of fields cols and rows (stable-fixes).
• w1: fix redundant counter decrement in w1attachslave_device() (git-fixes).
• w1: therm: Fix off-by-one buffer overflow in alarms_store (git-fixes).
• watchdog: imx7ulp_wdt: handle the nowayout option (stable-fixes).
• watchdog: wdat_wdt: Fix ACPI table leak in probe function (git-fixes).
• wifi: ath10k: fix dmafreecoherent() pointer (git-fixes).
• wifi: ath10k: fix lock protection in ath10kwmieventpeerstapsstate_chg() (stable-fixes).
• wifi: ath10k: sdio: add missing lock protection in ath10ksdiofwcrasheddump() (git-fixes).
• wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1 (stable-fixes).
• wifi: ath11k: fix peer HE MCS assignment (git-fixes).
• wifi: ath11k: restore register window after global reset (git-fixes).
• wifi: ath12k: fix dmafreecoherent() pointer (git-fixes).
• wifi: ath12k: fix preferred hardware mode calculation (stable-fixes).
• wifi: ath9k: debug.h: fix kernel-doc bad lines and struct athtxstats (git-fixes).
• wifi: ath9k: fix kernel-doc warnings in common-debug.h (git-fixes).
• wifi: avoid kernel-infoleak from struct iw_point (git-fixes).
• wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (stable-fixes).
• wifi: cfg80211: Fix bitrate calculation overflow for HE rates (stable-fixes).
• wifi: cfg80211: Fix use_for flag update on BSS refresh (git-fixes).
• wifi: cfg80211: cancel rfkillblock work in wiphyunregister() (git-fixes).
• wifi: cfg80211: sme: store capped length in __cfg80211connectresult() (git-fixes).
• wifi: cfg80211: stop NAN and P2P in cfg80211_leave (git-fixes).
• wifi: cfg80211: wext: fix IGTK key ID off-by-one (git-fixes).
• wifi: cw1200: Fix potential memory leak in cw1200bhrx_helper() (git-fixes).
• wifi: ieee80211: correct FILS status codes (git-fixes).
• wifi: iwlegacy: add missing mutex protection in il3945storemeasurement() (stable-fixes).
• wifi: iwlegacy: add missing mutex protection in il4965storetx_power() (stable-fixes).
• wifi: iwlwifi: mvm: check the validity of noa_len (stable-fixes).
• wifi: libertas: fix WARNING in usbtxblock (stable-fixes).
• wifi: mac80211: bounds-check linkid in ieee80211ml_reconfiguration (git-fixes).
• wifi: mac80211: collect station statistics earlier when disconnect (stable-fixes).
• wifi: mac80211: correctly check if CSA is active (stable-fixes).
• wifi: mac80211: correctly decode TTLM with default link map (git-fixes).
• wifi: mac80211: do not increment cryptotxtailroomneededcnt twice (stable-fixes).
• wifi: mac80211: do not use old MBSSID elements (git-fixes).
• wifi: mac80211: fix CMAC functions not handling errors (git-fixes).
• wifi: mac80211: fix NULL pointer dereference in meshrxcsa_frame() (git-fixes).
• wifi: mac80211: ocb: skip rxnosta when interface is not joined (stable-fixes).
• wifi: mac80211: restore non-chanctx injection behaviour (git-fixes).
• wifi: mt76: Fix DTS power-limits on little endian systems (git-fixes).
• wifi: mwifiex: Fix a loop in mwifiexupdateampdu_rxwinsize() (git-fixes).
• wifi: nl80211: vendor-cmd: intel: fix a blank kernel-doc line warning (git-fixes).
• wifi: radiotap: reject radiotap with unknown bits (git-fixes).
• wifi: rsi: Fix memory corruption due to not set vif driver data size (git-fixes).
• wifi: rtl818x: Fix potential memory leaks in rtl8180initrx_ring() (git-fixes).
• wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187rxcb() (git-fixes).
• wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxustaadd (git-fixes).
• wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cutxfill_desc() (git-fixes).
• wifi: rtw88: 8822b: Avoid WARNING in rtw8822bconfigtrx_mode() (stable-fixes).
• wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (stable-fixes).
• wifi: rtw88: Fix alignment fault in rtwcoreenable_beacon() (git-fixes).
• wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero (stable-fixes).
• wifi: rtw88: limit indirect IO under powered off for RTL8822CS (git-fixes).
• wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H (stable-fixes).
• wifi: rtw89: pci: restore LDO setting after device resume (stable-fixes).
• wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode (stable-fixes).
• wifi: wlcore: ensure skb headroom before skb_push (stable-fixes).
• workqueue: mark power efficient workqueue as unbounded if (bsc#1257891)
• x86/hyperv: Fix APIC ID and VP index confusion in hvsnpboot_ap() (git-fixes).
• x86/microcode/AMD: Add TSA microcode SHAs (bsc#1256528).
• x86/microcode/AMD: Add Zen5 model 0x44, stepping 0x1 minrev (bsc#1256528).
• x86/microcode/AMD: Add more known models to entry sign checking (bsc#1256528).
• x86/microcode/AMD: Add some forgotten models to the SHA check (bsc#1256528).
• x86/microcode/AMD: Clean the cache if update did not load microcode (bsc#1256528).
• x86/microcode/AMD: Extend the SHA check to Zen5, block loading of any unreleased standalone Zen5 microcode patches (bsc#1256528).
• x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (bsc#1256528).
• x86/microcode/AMD: Fix __applymicrocodeamd()'s return value (bsc#1256528).
• x86/microcode/AMD: Limit Entrysign signature checking to known generations (bsc#1256528).
• x86/microcode/AMD: Load only SHA256-checksummed patches (bsc#1256528).
• x86/microcode/AMD: Select which microcode patch to load (bsc#1256528).
• x86/microcode/AMD: Use sha256() instead of init/update/final (bsc#1256528).
• x86/microcode: Fix Entrysign revision check for Zen1/Naples (bsc#1256528).
• x86: make page fault handling disable interrupts properly (git-fixes).
• xhci: dbgtty: fix device unregister (git-fixes).