[ubuntu/noble-security] linux-xilinx 6.8.0-1017.18 (Accepted)
Andy Whitcroft
apw at canonical.com
Mon Aug 18 21:57:23 UTC 2025
linux-xilinx (6.8.0-1017.18) noble; urgency=medium
* noble/linux-xilinx: 6.8.0-1017.18 -proposed tracker (LP: #2119083)
* Remove obsolete build flags in derivative kernels (LP: #2077306)
- [Packaging] remove obsolete build flags in derivative kernels
* Clean up packaging bits (LP: #2081030)
- [Packaging] clean up packaging bits
* Remove backport packaging logic for non-backport kernels (LP: #2080970)
- [Packaging] remove backport packaging logic for non-backport kernels
* Packaging resync (LP: #1786013)
- [Packaging] debian.xilinx/dkms-versions -- update from kernel-versions
(main/d2025.07.30)
* Noble update: upstream stable patchset 2025-06-12 (LP: #2114239)
- [Config] set CONFIG_NFS_FSCACHE as 'n'
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915)
- [Config] Set CONFIG_ARM_TIMER_SP804 as 'n'
[ Ubuntu: 6.8.0-72.72 ]
* noble/linux: 6.8.0-72.72 -proposed tracker (LP: #2117691)
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.07.14)
* NVMe namespace ID mismatch on repeated map/unmap (LP: #2115209)
- nvme: requeue namespace scan on missed AENs
- nvme: re-read ANA log page after ns scan completes
- nvme: fixup scan failure for non-ANA multipath controllers
* integrated I219-LM network adapter appears to be running too fast, causing
synchronization issues when using the I219-LM PTP feature (LP: #2116072)
- e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
* intel_rapl: support ARL-H hardware (LP: #2115652)
- powercap: intel_rapl_msr: Add PL4 support for ArrowLake-H
* Ubuntu 24.04+ arm64: screen resolution fixed to 1024x768 with last kernel
update (LP: #2115068)
- [Config] Replace FB_HYPERV with DRM_HYPERV
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212)
- arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
- xfs: assert a valid limit in xfs_rtfind_forw
- xfs: validate inumber in xfs_iget
- xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
- xfs: fix a typo
- xfs: skip background cowblock trims on inodes open for write
- xfs: don't free cowblocks from under dirty pagecache on unshare
- xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
- xfs: return bool from xfs_attr3_leaf_add
- xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
- xfs: distinguish extra split from real ENOSPC from
xfs_attr_node_try_addname
- xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
- xfs: don't ifdef around the exact minlen allocations
- xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
- xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
- xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
- xfs: Remove empty declartion in header file
- xfs: pass the exact range to initialize to xfs_initialize_perag
- xfs: update the file system geometry after recoverying superblock
buffers
- xfs: error out when a superblock buffer update reduces the agcount
- xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
- xfs: update the pag for the last AG at recovery time
- xfs: Reduce unnecessary searches when searching for the best extents
- xfs: streamline xfs_filestream_pick_ag
- xfs: Check for delayed allocations before setting extsize
- md/md-bitmap: replace md_bitmap_status() with a new helper
md_bitmap_get_stats()
- md/md-cluster: fix spares warnings for __le64
- md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
- mm: update mark_victim tracepoints fields
- cpufreq: dt-platdev: add missing MODULE_DESCRIPTION() macro
- cpufreq: fix using cpufreq-dt as module
- Bluetooth: qca: Support downloading board id specific NVM for WCN7850
- Bluetooth: qca: Update firmware-name to support board specific nvm
- Bluetooth: qca: Fix poor RF performance for WCN6855
- Input: serio - define serio_pause_rx guard to pause and resume serio
ports
- ASoC: renesas: rz-ssi: Add a check for negative sample_space
- ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
- powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
- powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
- ALSA: seq: Drop UMP events when no UMP-conversion is set
- ibmvnic: Return error code on TX scrq flush fail
- ibmvnic: Introduce send sub-crq direct
- ibmvnic: Add stat for tx direct vs tx batched
- vsock/bpf: Warn on socket without transport
- tcp: adjust rcvq_space after updating scaling ratio
- geneve: Suppress list corruption splat in geneve_destroy_tunnels().
- flow_dissector: Fix handling of mixed port and port-range keys
- flow_dissector: Fix port range key handling in BPF conversion
- net: Add non-RCU dev_getbyhwaddr() helper
- arp: switch to dev_getbyhwaddr() in arp_req_set_public()
- net: axienet: Set mac_managed_pm
- bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
- strparser: Add read_sock callback
- bpf: Fix wrong copied_seq calculation
- bpf: Disable non stream socket for strparser
- power: supply: da9150-fg: fix potential overflow
- nouveau/svm: fix missing folio unlock + put after
make_device_exclusive_range()
- drm/msm: Avoid rounding up to one jiffy
- nvme/ioctl: add missing space in err message
- bpf: skip non exist keys in generic_map_lookup_batch
- drm/nouveau/pmu: Fix gp10b firmware guard
- drm/msm/dpu: Disable dither in phys encoder cleanup
- drm/i915: Make sure all planes in use by the joiner have their crtc
included
- drm/i915/dp: Fix error handling during 128b/132b link training
- soc: loongson: loongson2_guts: Add check for devm_kstrdup()
- lib/iov_iter: fix import_iovec_ubuf iovec management
- ASoC: fsl_micfil: Enable default case in micfil_set_quality()
- ALSA: hda: Add error check for snd_ctl_rename_id() in
snd_hda_create_dig_out_ctls()
- ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
- ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
- acct: block access to kernel internal filesystems
- mm,madvise,hugetlb: check for 0-length range after end address
adjustment
- mtd: rawnand: cadence: fix error code in cadence_nand_init()
- mtd: rawnand: cadence: use dma_map_resource for sdma address
- mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
- EDAC/qcom: Correct interrupt enable register configuration
- ftrace: Correct preemption accounting for function tracing.
- ftrace: Do not add duplicate entries in subops manager ops
- arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1
plus lts
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
- KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base()
- KVM: x86: Inline kvm_get_apic_mode() in lapic.h
- KVM: Introduce vcpu->wants_to_run
- KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
- drm/amd/display: Refactoring if and endif statements to enable DC_LOGGER
- arm64: dts: mt8183: add dpi node to mt8183
- arm64: dts: mt8183: Add port node to dpi node
- arm64: dts: mediatek: mt8183-kukui: Disable DPI display interface
- arm64: dts: mediatek: mt8183: Disable DPI display output by default
- arm64: dts: mediatek: mt8183-pumpkin: add HDMI support
- arm64: dts: mediatek: mt8183: Disable DSI display output by default
- accel/ivpu: Limit FW version string length
- accel/ivpu: Add coredump support
- accel/ivpu: Add FW state dump on TDR
- accel/ivpu: Fix error handling in recovery/reset
- ASoC: SOF: topology: dynamically allocate and store DAI widget->private
- ASoC: SOF: topology: Parse DAI type token for dspless mode
- ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device
- vsock/virtio: fix variables initialization during resuming
- drm/msm/dpu: skip watchdog timer programming through TOP on >= SM8450
- drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields
- drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG0 updated from driver side
- drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG1 against clock driver
- drm/msm/dsi/phy: Do not overwite PHY_CMN_CLK_CFG1 when choosing bitclk
source
- nvme: tcp: Fix compilation warning with W=1
- nvme-tcp: fix connect failure on receiving partial ICResp PDU
- drm: panel: jd9365da-h3: fix reset signal polarity
- io_uring/rw: forbid multishot async reads
- arm64: dts: rockchip: Fix broken tsadc pinctrl names for rk3588
- arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
- arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
- s390/boot: Fix ESSA detection
- xfs: fix online repair probing when CONFIG_XFS_ONLINE_REPAIR=n
- smb: client: fix chmod(2) regression with ATTR_READONLY
- tracing: Fix using ret variable in tracing_set_tracer()
- selftests/mm: build with -O2
- Upstream stable to v6.6.80, v6.12.17
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21861
- mm/migrate_device: don't add folio to be freed to LRU in
migrate_device_finalize()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21868
- net: allow small head cache usage with large MAX_SKB_FRAGS values
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21869
- powerpc/code-patching: Disable KASAN report during patching via
temporary mm
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21870
- ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21844
- smb: client: Add check for next_buffer in receive_encrypted_standard()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21846
- acct: perform last write from workqueue
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21847
- ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21848
- nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21862
- drop_monitor: fix incorrect initialization order
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21871
- tee: optee: Fix supplicant wait loop
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21863
- io_uring: prevent opcode speculation
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2024-58088
- bpf: Fix deadlock when freeing cgroup storage
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21853
- bpf: avoid holding freeze_mutex during mmap operation
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21867
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21864
- tcp: drop secpath at the same time as we currently drop dst
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21854
- sockmap, vsock: For connectible sockets allow only connected
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21856
- s390/ism: add release function for struct device
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21857
- net/sched: cls_api: fix error handling causing NULL dereference
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21866
- powerpc/code-patching: Fix KASAN hit by not flagging text patching area
as VM_ALLOC
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21859
- USB: gadget: f_midi: f_midi_complete to call queue_work
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21746
- Input: synaptics - fix crash when enabling pass-through port
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2024-57977
- memcg: fix soft lockup in the OOM process
* Noble update: upstream stable patchset 2025-07-09 (LP: #2116212) //
CVE-2025-21712
- md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
* CVE-2024-58093
- PCI/ASPM: Fix link state exit during switch upstream function removal
* [SRU]Request E825-C driver into latest LTS of Ubuntu OS 24.04
(LP: #2114785)
- ice: add support for 3k signing DDP sections for E825C
- ice: Add helper function ice_is_generic_mac
- ice: introduce new E825C devices family
* [UBUNTU 22.04] kernel: Fix z17 elf platform recognition (LP: #2114450)
- s390: Add z17 elf platform
* [UBUNTU 24.04] Kernel: Add CPUMF extended counter set for z17
(LP: #2114258)
- s390/cpumf: Update CPU Measurement facility extended counter set support
* Noble update: upstream stable patchset 2025-06-29 (LP: #2115616)
- nfsd: clear acl_access/acl_default after releasing them
- NFSD: fix hang in nfsd4_shutdown_callback
- pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
- HID: multitouch: Add NULL check in mt_input_configured
- HID: hid-thrustmaster: fix stack-out-of-bounds read in
usb_check_int_endpoints()
- spi: sn-f-ospi: Fix division by zero
- ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
- ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
- vrf: use RCU protection in l3mdev_l3_out()
- vxlan: check vxlan_vnigroup_init() return value
- LoongArch: Fix idle VS timer enqueue
- LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
- team: better TEAM_OPTION_TYPE_STRING validation
- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
- cgroup: Remove steal time from usage_usec
- drm/i915/selftests: avoid using uninitialized context
- gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
- gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
- gpio: bcm-kona: Add missing newline to dev_err format string
- drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
- xen/swiotlb: relax alignment requirements
- x86/xen: allow larger contiguous memory regions in PV guests
- block: cleanup and fix batch completion adding conditions
- gpiolib: Fix crash on error in gpiochip_get_ngpios()
- tools: fix annoying "mkdir -p ..." logs when building tools in parallel
- RDMA/efa: Reset device on probe failure
- fbdev: omap: use threaded IRQ for LCD DMA
- soc/tegra: fuse: Update Tegra234 nvmem keepout list
- media: cxd2841er: fix 64-bit division on gcc-9
- media: i2c: ds90ub913: Add error handling to ub913_hw_init()
- media: i2c: ds90ub953: Add error handling for i2c reads/writes
- media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
- media: uvcvideo: Add new quirk definition for the Sonix Technology Co.
292a camera
- media: uvcvideo: Add Kurokesu C1 PRO camera
- media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
- PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
- PCI: switchtec: Add Microchip PCI100X device IDs
- scsi: ufs: bsg: Set bsg_queue to NULL after removal
- rtla/timerlat_hist: Abort event processing on second signal
- rtla/timerlat_top: Abort event processing on second signal
- vfio/pci: Enable iowrite64 and ioread64 for vfio pci
- NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
- Grab mm lock before grabbing pt lock
- selftests: gpio: gpio-sim: Fix missing chip disablements
- ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
- x86/mm/tlb: Only trim the mm_cpumask once a second
- orangefs: fix a oob in orangefs_debug_write
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
- batman-adv: fix panic during interface removal
- batman-adv: Ignore neighbor throughput metrics in error case
- batman-adv: Drop unmanaged ELP metric worker
- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
- KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-
kernel
- KVM: nSVM: Enter guest mode before initializing nested NPT MMU
- perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
- usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI
bind retries
- usb: dwc3: Fix timeout issue during controller enter/exit from halt
state
- usb: roles: set switch registered flag early on
- usb: gadget: udc: renesas_usb3: Fix compiler warning
- usb: dwc2: gadget: remove of_node reference upon udc_stop
- USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
- usb: core: fix pipe creation for get_bMaxPacketSize0
- USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
- USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
- usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
- USB: hub: Ignore non-compliant devices with too many configs or
interfaces
- USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
- usb: cdc-acm: Check control transfer buffer size before access
- usb: cdc-acm: Fix handling of oversized fragments
- USB: serial: option: add MeiG Smart SLM828
- USB: serial: option: add Telit Cinterion FN990B compositions
- USB: serial: option: fix Telit Cinterion FN990A name
- USB: serial: option: drop MeiG Smart defines
- can: ctucanfd: handle skb allocation failure
- can: c_can: fix unbalanced runtime PM disable in error path
- can: j1939: j1939_sk_send_loop(): fix unable to send messages with data
length zero
- can: etas_es58x: fix potential NULL pointer dereference on udev->serial
- alpha: make stack 16-byte aligned (most cases)
- wifi: ath12k: fix handling of 6 GHz rules
- kbuild: userprogs: fix bitsize and target detection on clang
- efi: Avoid cold plugged memory for placing the kernel
- cgroup: fix race between fork and cgroup.kill
- serial: port: Assign ->iotype correctly when ->iobase is set
- serial: port: Always update ->iotype in __uart_read_properties()
- serial: 8250: Fix fifo underflow on flush
- alpha: align stack for page fault and user unaligned trap handlers
- gpiolib: acpi: Add a quirk for Acer Nitro ANV14
- gpio: stmpe: Check return value of stmpe_reg_read in
stmpe_gpio_irq_sync_unlock
- partitions: mac: fix handling of bogus partition table
- regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
- regmap-irq: Add missing kfree()
- arm64: Handle .ARM.attributes section in linker scripts
- mmc: mtk-sd: Fix register settings for hs400(es) mode
- igc: Set buffer type for empty frames in igc_init_empty_frame
- mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
- btrfs: fix hole expansion when writing at an offset beyond EOF
- clocksource: Use pr_info() for "Checking clocksource synchronization"
message
- clocksource: Use migrate_disable() to avoid calling get_random_u32() in
atomic context
- ipv4: add RCU protection to ip4_dst_hoplimit()
- net: add dev_net_rcu() helper
- ipv4: use RCU protection in ipv4_default_advmss()
- ipv4: use RCU protection in rt_is_expired()
- ipv4: use RCU protection in inet_select_addr()
- net: ipv4: Cache pmtu for all packet paths if multipath enabled
- ipv4: use RCU protection in __ip_rt_update_pmtu()
- ipv4: icmp: convert to dev_net_rcu()
- flow_dissector: use RCU protection to fetch dev_net()
- ipv6: use RCU protection in ip6_default_advmss()
- ipv6: icmp: convert to dev_net_rcu()
- HID: hid-steam: Add Deck IMU support
- HID: hid-steam: Make sure rumble work is canceled on removal
- HID: hid-steam: Move hidraw input (un)registering to work
- ndisc: use RCU protection in ndisc_alloc_skb()
- neighbour: delete redundant judgment statements
- neighbour: use RCU protection in __neigh_notify()
- arp: use RCU protection in arp_xmit()
- openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
- ndisc: extend RCU protection in ndisc_send_skb()
- ipv6: mcast: extend RCU protection in igmp6_send()
- ipv6: mcast: add RCU protection to mld_newpack()
- drm/tidss: Fix issue in irq handling causing irq-flood issue
- drm/tidss: Clear the interrupt status for interrupts being disabled
- drm/rcar-du: dsi: Fix PHY lock bit check
- drm/v3d: Stop active perfmon if it is being destroyed
- netdevsim: print human readable IP address
- selftests: rtnetlink: update netdevsim ipsec output format
- md/md-bitmap: factor behind write counters out from
bitmap_{start/end}write()
- md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
- md/md-bitmap: move bitmap_{start, end}write to md upper layer
- mm: gup: fix infinite loop within __get_longterm_locked
- alpha: replace hardcoded stack offsets with autogenerated ones
- HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
- io_uring/kbuf: reallocate buf lists on upgrade
- x86/i8253: Disable PIT timer 0 when not in use
- pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
- pinctrl: pinconf-generic: print hex value
- pinctrl: pinconf-generic: Print unsigned value if a format is registered
- idpf: fix handling rsc packet with a single segment
- idpf: call set_real_num_queues in idpf_open
- igc: Fix HW RX timestamp when passed by ZC XDP
- LoongArch: KVM: Fix typo issue about GCFG feature detection
- workqueue: Put the pwq after detaching the rescuer from the pool
- perf/x86/intel: Clean up PEBS-via-PT on hybrid
- drm/xe/client: bo->client does not need bos_lock
- io_uring/waitid: don't abuse io_tw_state
- drm: Fix DSC BPP increment decoding
- i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
- i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
- [Config] updateconfigs for MIPI_I3C_HCI_PCI
- serial: 8250_pci: Resolve WCH vendor ID ambiguity
- serial: 8250_pci: Share WCH IDs with parport_serial driver
- fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
- kbuild: suppress stdout from merge_config for silent builds
- KVM: x86: Load DR6 with guest value only before entering .vcpu_run()
loop
- perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
- USB: gadget: core: create sysfs link between udc and gadget
- usb: gadget: core: flush gadget workqueue after device removal
- include: net: add static inline dst_dev_overhead() to dst.h
- net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
- net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
- net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
- net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
- scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
- scsi: ufs: core: Prepare to introduce a new clock_gating lock
- scsi: ufs: core: Introduce a new clock_gating lock
- scsi: ufs: Fix toggling of clk_gating.state when clock gating is not
allowed
- ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
- drm/tidss: Fix race condition while handling interrupt registers
- drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
- wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
- net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
- scsi: ufs: core: Ensure clk_gating.lock is used only after
initialization
- serial: 8250_dma: terminate correct DMA in tx_dma_flush()
- x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
- HID: hid-steam: Fix use-after-free when detaching device
- block: change blk_mq_add_to_batch() third argument type to bool
- nvme: move error logging from nvme_end_req() to __nvme_end_req()
- Upstream stable to v6.6.79, v6.12.16
* Noble update: upstream stable patchset 2025-06-17 (LP: #2114849)
- ice: Add check for devm_kzalloc()
- io_uring/rw: commit provided buffer state on async
- mptcp: pm: only set fullmesh for subflow endp
- selftests: mptcp: join: fix AF_INET6 variable
- xfs: don't lose solo dquot update transactions
- Upstream stable to v6.6.78, v6.12.15
* [Regression Updates] "PCI: Explicitly put devices into D0 when
initializing" breaks pci-pass-through in QEMU/KVM (LP: #2117494)
- PCI/PM: Set up runtime PM even for devices without PCI PM
* CVE-2025-38083
- net_sched: prio: fix a race in prio_tune()
* CVE-2025-37797
- net_sched: hfsc: Fix a UAF vulnerability in class handling
[ Ubuntu: 6.8.0-64.67 ]
* noble/linux: 6.8.0-64.67 -proposed tracker (LP: #2114668)
* Unexpected system reboot at loading GUI session on some AMD platforms
(LP: #2112462)
- drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
- drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174)
- s390/pci: rename lock member in struct zpci_dev
- s390/pci: introduce lock to synchronize state of zpci_dev's
- s390/pci: remove hotplug slot when releasing the device
- s390/pci: Remove redundant bus removal and disable from
zpci_release_device()
- s390/pci: Prevent self deletion in disable_slot()
- s390/pci: Allow re-add of a reserved but not yet removed device
- s390/pci: Serialize device addition and removal
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174) // CVE-2025-37946
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has
child VFs
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174) // CVE-2025-37974
- s390/pci: Fix missing check for zpci_create_device() error return
* [UBUNTU 24.04] s390/pci: Fix immediate re-add of PCI function after remove
(LP: #2114174) // CVE-2024-56699
- s390/pci: Fix potential double remove of hotplug slot
* System will restart while resuming with SATA HDD or nvme installed with
password set (LP: #2110090)
- PCI: Explicitly put devices into D0 when initializing
* Noble update: upstream stable patchset 2025-06-12 (LP: #2114239)
- btrfs: fix assertion failure when splitting ordered extent after
transaction abort
- btrfs: fix use-after-free when attempting to join an aborted transaction
- arm64/mm: Ensure adequate HUGE_MAX_HSTATE
- exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case
- s390/stackleak: Use exrl instead of ex in __stackleak_poison()
- btrfs: fix data race when accessing the inode's disk_i_size at
btrfs_drop_extents()
- btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error
handling
- sched: Don't try to catch up excess steal time.
- locking/ww_mutex/test: Use swap() macro
- lockdep: Fix upper limit for LOCKDEP_*_BITS configs
- x86/amd_nb: Restrict init function to AMD-based systems
- drm/virtio: New fence for every plane update
- drm: Add panel backlight quirks
- drm: panel-backlight-quirks: Add Framework 13 matte panel
- drm: panel-backlight-quirks: Add Framework 13 glossy and 2.8k panels
- nvkm/gsp: correctly advance the read pointer of GSP message queue
- nvkm: correctly calculate the available space of the GSP cmdq buffer
- drm/amd/display: Populate chroma prefetch parameters, DET buffer fix
- drm/amd/display: Overwriting dualDPP UBF values before usage
- printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
- drm/connector: add mutex to protect ELD from concurrent access
- drm/bridge: anx7625: use eld_mutex to protect access to connector->eld
- drm/bridge: ite-it66121: use eld_mutex to protect access to
connector->eld
- drm/amd/display: use eld_mutex to protect access to connector->eld
- drm/exynos: hdmi: use eld_mutex to protect access to connector->eld
- drm/radeon: use eld_mutex to protect access to connector->eld
- drm/sti: hdmi: use eld_mutex to protect access to connector->eld
- drm/vc4: hdmi: use eld_mutex to protect access to connector->eld
- drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
- drm/amdgpu: Don't enable sdma 4.4.5 CTXEMPTY interrupt
- drm/amdkfd: Queue interrupt work to different CPU
- drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
- drm/bridge: it6505: fix HDCP Bstatus check
- drm/bridge: it6505: fix HDCP encryption when R0 ready
- drm/bridge: it6505: fix HDCP CTS compare V matching
- drm/bridge: it6505: fix HDCP V match check is not performed correctly
- drm/bridge: it6505: fix HDCP CTS KSV list wait timer
- safesetid: check size of policy writes
- drm/amd/display: Increase sanitizer frame larger than limit when compile
testing with clang
- drm/amd/display: Limit Scaling Ratio on DCN3.01
- wifi: rtw89: add crystal_cap check to avoid setting as overflow value
- tun: fix group permission check
- mmc: core: Respect quirk_max_rate for non-UHS SDIO card
- mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G
- wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
- tomoyo: don't emit warning in tomoyo_write_control()
- mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
- wifi: rtw88: add __packed attribute to efuse layout struct
- clk: qcom: Make GCC_8150 depend on QCOM_GDSC
- HID: multitouch: Add quirk for Hantick 5288 touchpad
- HID: Wacom: Add PCI Wacom device support
- net/mlx5: use do_aux_work for PHC overflow checks
- wifi: brcmfmac: Check the return value of
of_property_read_string_index()
- wifi: iwlwifi: pcie: Add support for new device ids
- wifi: iwlwifi: avoid memory leak
- i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
- APEI: GHES: Have GHES honor the panic= setting
- Bluetooth: btusb: Add new VID/PID 13d3/3610 for MT7922
- Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925
- Bluetooth: MGMT: Fix slab-use-after-free Read in
mgmt_remove_adv_monitor_sync
- net: wwan: iosm: Fix hibernation by re-binding the driver around it
- mmc: sdhci-msm: Correctly set the load for the regulator
- octeon_ep: update tx/rx stats locally for persistence
- tipc: re-order conditions in tipc_crypto_key_rcv()
- selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
- x86/kexec: Allocate PGD for x86_64 transition page tables separately
- iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
- iommu/arm-smmu-v3: Clean up more on probe failure
- platform/x86: int3472: Check for adev == NULL
- platform/x86: acer-wmi: Add support for Acer PH14-51
- ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
- platform/x86: acer-wmi: Add support for Acer Predator PH16-72
- ASoC: amd: Add ACPI dependency to fix build error
- Input: allocate keycode for phone linking
- platform/x86: acer-wmi: add support for Acer Nitro AN515-58
- platform/x86: acer-wmi: Ignore AC events
- xfs: report realtime block quota limits on realtime directories
- xfs: don't over-report free space or inodes in statvfs
- tty: xilinx_uartps: split sysrq handling
- tty: vt: pass proper pointers from tioclinux()
- tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN
- tty: Require CAP_SYS_ADMIN for all usages of TIOCL_SELMOUSEREPORT
- platform/x86: serdev_helpers: Check for serial_ctrl_uid == NULL
- nvme: handle connectivity loss in nvme_set_queue_count
- firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
- gpu: drm_dp_cec: fix broken CEC adapter properties check
- ice: put Rx buffers after being done with current frame
- ice: gather page_count()'s of each frag right before XDP prog call
- ice: stop storing XDP verdict within ice_rx_buf
- nvme-fc: use ctrl state getter
- net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
- vmxnet3: Fix tx queue race condition with XDP
- tg3: Disable tg3 PCIe AER on system reboot
- udp: gso: do not drop small packets when PMTU reduces
- rxrpc: Fix the rxrpc_connection attend queue handling
- gpio: pca953x: Improve interrupt support
- net: atlantic: fix warning during hot unplug
- net: rose: lock the socket in rose_bind()
- ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
- tun: revert fix group permission check
- net: sched: Fix truncation of offloaded action statistics
- rxrpc: Fix call state set to not include the SERVER_SECURING state
- cpufreq: s3c64xx: Fix compilation warning
- leds: lp8860: Write full EEPROM, not only half of it
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
- drm/modeset: Handle tiled displays in pan_display_atomic.
- drm/client: Handle tiled displays better
- smb: client: fix order of arguments of tracepoints
- smb: client: change lease epoch type from unsigned int to __u16
- s390/futex: Fix FUTEX_OP_ANDN implementation
- arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
- m68k: vga: Fix I/O defines
- fs/proc: do_task_stat: Fix ESP not readable during coredump
- binfmt_flat: Fix integer overflow bug on 32 bit systems
- accel/ivpu: Fix Qemu crash when running in passthrough
- arm64/kvm: Configure HYP TCR.PS/DS based on host stage1
- arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu()
- KVM: arm64: timer: Always evaluate the need for a soft timer
- drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
- arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
- remoteproc: omap: Handle ARM dma_iommu_mapping
- KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
- KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
- ksmbd: fix integer overflows on 32 bit systems
- drm/amd/display: Optimize cursor position updates
- drm/amd/pm: Mark MM activity as unsupported
- drm/amdkfd: only flush the validate MES contex
- drm/i915/guc: Debug print LRC state entries only if the context is
pinned
- drm/i915: Fix page cleanup on DMA remap failure
- drm/komeda: Add check for komeda_get_layer_fourcc_list()
- drm/i915/dp: Iterate DSC BPP from high to low on all platforms
- drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
- drm/amd/display: Fix seamless boot sequence
- Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
- clk: sunxi-ng: a100: enable MMC clock reparenting
- clk: mmp2: call pm_genpd_init() only after genpd.name is set
- media: i2c: ds90ub960: Fix UB9702 refclk register access
- clk: qcom: clk-alpha-pll: fix alpha mode configuration
- clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm8650: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
- clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
- clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
- clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
- clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
- clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
- clk: mediatek: mt2701-bdp: add missing dummy clk
- clk: mediatek: mt2701-img: add missing dummy clk
- clk: mediatek: mt2701-mm: add missing dummy clk
- blk-cgroup: Fix class @block_class's subsystem refcount leakage
- efi: libstub: Use '-std=gnu11' to fix build with GCC 15
- perf bench: Fix undefined behavior in cmpworker()
- scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
- of: Correct child specifier used as input of the 2nd nexus node
- of: Fix of_find_node_opts_by_path() handling of alias+path+options
- Input: bbnsm_pwrkey - add remove hook
- HID: hid-sensor-hub: don't use stale platform-data on remove
- ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg()
- atomic64: Use arch_spin_locks instead of raw_spin_locks
- wifi: rtlwifi: rtl8821ae: Fix media status report
- wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
- wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
- wifi: rtw88: sdio: Fix disconnection after beacon loss
- wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
- usb: gadget: f_tcm: Translate error to sense
- usb: gadget: f_tcm: Decrement command ref count on cleanup
- usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
- usb: gadget: f_tcm: Don't prepare BOT write request twice
- usbnet: ipheth: fix possible overflow in DPE length check
- usbnet: ipheth: use static NDP16 location in URB
- usbnet: ipheth: check that DPE points past NCM header
- usbnet: ipheth: refactor NCM datagram loop
- usbnet: ipheth: break up NCM header size computation
- usbnet: ipheth: fix DPE OoB read
- usbnet: ipheth: document scope of NCM implementation
- ASoC: acp: Support microphone from Lenovo Go S
- soc: qcom: socinfo: Avoid out of bounds read of serial number
- serial: sh-sci: Drop __initdata macro for port_cfg
- serial: sh-sci: Do not probe the serial port if its slot in sci_ports[]
is in use
- MIPS: Loongson64: remove ROM Size unit in boardinfo
- LoongArch: Extend the maximum number of watchpoints
- powerpc/pseries/eeh: Fix get PE state translation
- dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
- dm-crypt: track tag_offset in convert_context
- mips/math-emu: fix emulation of the prefx instruction
- MIPS: pci-legacy: Override pci_address_to_pio
- block: don't revert iter for -EIOCBQUEUED
- firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
- ALSA: hda/realtek: Enable headset mic on Positivo C6400
- ALSA: hda: Fix headset detection failure due to unstable sort
- ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
- ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
- arm64: tegra: Fix Tegra234 PCIe interrupt-map
- PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
- PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar()
- PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
- scsi: st: Don't set pos_unknown just after device recognition
- scsi: qla2xxx: Move FCE Trace buffer allocation to user control
- scsi: ufs: qcom: Fix crypto key eviction
- scsi: ufs: core: Fix use-after free in init error and remove paths
- scsi: storvsc: Set correct data length for sending SCSI command without
payload
- scsi: core: Do not retry I/Os during depopulation
- kbuild: Move -Wenum-enum-conversion to W=2
- rust: init: use explicit ABI to clean warning in future compilers
- x86/boot: Use '-std=gnu11' to fix build with GCC 15
- ubi: Add a check for ubi_num
- ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
- ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
- arm64: dts: qcom: sm6115: Fix MPSS memory length
- arm64: dts: qcom: sm6115: Fix CDSP memory length
- arm64: dts: qcom: sm6115: Fix ADSP memory base and length
- arm64: dts: qcom: sm6350: Fix ADSP memory length
- arm64: dts: qcom: sm6350: Fix MPSS memory length
- arm64: dts: qcom: sm6350: Fix uart1 interconnect path
- arm64: dts: qcom: sm6375: Fix ADSP memory length
- arm64: dts: qcom: sm6375: Fix CDSP memory base and length
- arm64: dts: qcom: sm6375: Fix MPSS memory base and length
- arm64: dts: qcom: sm8350: Fix ADSP memory base and length
- arm64: dts: qcom: sm8350: Fix CDSP memory base and length
- arm64: dts: qcom: sm8350: Fix MPSS memory length
- arm64: dts: qcom: sm8450: Fix CDSP memory length
- arm64: dts: qcom: sm8450: Fix MPSS memory length
- arm64: dts: qcom: sm8550: Fix CDSP memory length
- arm64: dts: qcom: sm8550: Fix MPSS memory length
- arm64: dts: qcom: sm8450: add missing qcom,non-secure-domain property
- arm64: dts: qcom: sm8450: Fix ADSP memory base and length
- arm64: dts: qcom: sm8550: add missing qcom,non-secure-domain property
- arm64: dts: qcom: sm8550: Add dma-coherent property
- arm64: dts: qcom: sm8550: Fix ADSP memory base and length
- arm64: dts: qcom: sm8650: Fix CDSP memory length
- arm64: dts: qcom: sm8650: Fix MPSS memory length
- arm64: dts: qcom: sm8550: correct MDSS interconnects
- arm64: dts: qcom: sm8650: correct MDSS interconnects
- crypto: qce - fix priority to be less than ARMv8 CE
- arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
- arm64: tegra: Disable Tegra234 sce-fabric node
- parisc: Temporarily disable jump label support
- pwm: microchip-core: fix incorrect comparison with max period
- xfs: Propagate errors from xfs_reflink_cancel_cow_range in
xfs_dax_write_iomap_end
- xfs: Add error handling for xfs_reflink_cancel_cow_range
- ACPI: PRM: Remove unnecessary strict handler address checks
- tpm: Change to kvalloc() in eventlog/acpi.c
- rv: Reset per-task monitors also for idle tasks
- hrtimers: Force migrate away hrtimers queued after
CPUHP_AP_HRTIMERS_DYING
- kfence: skip __GFP_THISNODE allocations on NUMA systems
- media: ccs: Clean up parsed CCS static data on parse failure
- mm/hugetlb: fix avoid_reserve to allow taking folio from subpool
- iio: light: as73211: fix channel handling in only-color triggered buffer
- soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
- soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
- soc: qcom: smem_state: fix missing of_node_put in error path
- media: mmp: Bring back registration of the device
- media: mc: fix endpoint iteration
- media: nuvoton: Fix an error check in npcm_video_ece_init()
- media: imx296: Add standby delay during probe
- media: ov5640: fix get_light_freq on auto
- media: stm32: dcmipp: correct dma_set_mask_and_coherent mask value
- media: ccs: Fix CCS static data parsing for large block sizes
- media: ccs: Fix cleanup order in ccs_probe()
- media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
- media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
- media: i2c: ds90ub960: Fix UB9702 VC map
- media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
- media: uvcvideo: Fix crash during unbind if gpio unit is in use
- media: uvcvideo: Fix event flags in uvc_ctrl_send_events
- media: uvcvideo: Support partial control reads
- media: uvcvideo: Remove redundant NULL assignment
- media: uvcvideo: Refactor iterators
- media: uvcvideo: Only save async fh if success
- media: uvcvideo: Remove dangling pointers
- mm: kmemleak: fix upper boundary check for physical address objects
- mm/compaction: fix UBSAN shift-out-of-bounds warning
- ata: libata-sff: Ensure that we cannot write outside the allocated
buffer
- crypto: qce - fix goto jump in error path
- crypto: qce - unregister previously registered algos in error path
- nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
- nvmem: core: improve range check for nvmem_cell_write()
- nvmem: imx-ocotp-ele: simplify read beyond device check
- nvmem: imx-ocotp-ele: fix MAC address byte order
- nvmem: imx-ocotp-ele: fix reading from non zero offset
- nvmem: imx-ocotp-ele: set word length to 1
- io_uring: fix multishots with selected buffers
- io_uring/net: don't retry connect operation on EPOLLERR
- selftests: mptcp: connect: -f: no reconnect
- pnfs/flexfiles: retry getting layout segment for reads
- ocfs2: fix incorrect CPU endianness conversion causing mount failure
- ocfs2: handle a symlink read error correctly
- nilfs2: fix possible int overflows in nilfs_fiemap()
- nfs: Make NFS_FSCACHE select NETFS_SUPPORT instead of depending on it
- NFSD: Encode COMPOUND operation status on page boundaries
- mailbox: tegra-hsp: Clear mailbox before using message
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
- mtd: onenand: Fix uninitialized retlen in do_otp_read()
- misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
- char: misc: deallocate static minor in error path
- misc: fastrpc: Deregister device nodes properly in error scenarios
- misc: fastrpc: Fix registered buffer page address
- misc: fastrpc: Fix copy buffer page size
- net/ncsi: wait for the last response to Deselect Package before
configuring channel
- net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
- maple_tree: simplify split calculation
- scripts/gdb: fix aarch64 userspace detection in get_current_task
- tracing/osnoise: Fix resetting of tracepoints
- rtla/osnoise: Distinguish missing workload option
- rtla: Add trace_instance_stop
- rtla/timerlat_hist: Stop timerlat tracer on signal
- rtla/timerlat_top: Stop timerlat tracer on signal
- pinctrl: samsung: fix fwnode refcount cleanup if
platform_get_irq_optional() fails
- ptp: Ensure info->enable callback is always set
- RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
- rtc: zynqmp: Fix optional clock name property
- MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
- xfs: avoid nested calls to __xfs_trans_commit
- xfs: don't lose solo superblock counter update transactions
- spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC
families
- spi: atmel-qspi: Memory barriers after memory-mapped I/O
- btrfs: avoid monopolizing a core when activating a swap file
- mptcp: prevent excessive coalescing on receive
- Revert "drm/amd/display: Fix green screen issue after suspend"
- statmount: let unset strings be empty
- arm64: dts: rockchip: add reset-names for combphy on rk3568
- ocfs2: check dir i_size in ocfs2_find_entry
- Upstream stable to v6.6.77, v6.12.14
* kvmppc_set_passthru_irq_hv: Could not assign IRQ map traces are seen when
pci device is attached to kvm guest when "xive=off" is set (LP: #2109951)
- KVM: PPC: Book3S HV: Fix IRQ map warnings with XICS on pSeries KVM Guest
* Latitude 5450 is experiencing packet loss on Ethernet in Ubuntu 22.04
(LP: #2106558)
- e1000e: change k1 configuration on MTP and later platforms
* cpufreq amd-pstate: cpuinfo_max_freq reports incorrect value
(LP: #2109609)
- SAUCE: Revert "Revert "cpufreq: amd-pstate: Fix the inconsistency in max
frequency units""
* Backport pci=config_acs parameter with fix commit (LP: #2100340)
- PCI: Extend ACS configurability
- PCI: Fix pci_enable_acs() support for the ACS quirks
- PCI/ACS: Fix 'pci=config_acs=' parameter
* [UBUNTU 24.04] s390/pci: Fix zpci_bus_is_isolated_vf() for non-VF
(LP: #2111599)
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs
* nvme/tcp hangs IO on arm (LP: #2106381)
- nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
* CVE-2025-37750
- smb: client: fix UAF in decryption with multichannel
* CVE-2025-40364
- io_uring: fix io_req_prep_async with provided buffers
* CVE-2024-49887
- f2fs: fix to handle segment allocation failure correctly
- f2fs: fix to don't panic system for no free segment fault injection
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953)
- powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
- dlm: fix srcu_read_lock() return type to int
- afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
- afs: Fix directory format encoding struct
- afs: Fix cleanup of immediately failed async calls
- fs: fix proc_handler for sysctl_nr_open
- block: retry call probe after request_module in blk_request_module
- pstore/blk: trivial typo fixes
- nvme: Add error check for xa_store in nvme_get_effects_log
- selftests/powerpc: Fix argument order to timer_sub()
- nvme: Add error path for xa_store in nvme_init_effects
- partitions: ldm: remove the initial kernel-doc notation
- select: Fix unbalanced user_access_end()
- nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
- afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
- perf/core: Save raw sample data conditionally based on sample type
- sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
- x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
- x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
- drm/msm/dp: set safe_to_exit_level before printing it
- drm/etnaviv: Fix page property being used for non writecombine buffers
- drm/amd/pm: Fix an error handling path in
vega10_enable_se_edc_force_stall_config()
- drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
- drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
- drm/rockchip: vop2: Fix the windows switch between different layers
- drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
- drm/rockchip: vop2: include rockchip_drm_drv.h
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
- drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
- drm/msm: Check return value of of_dma_configure()
- drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
- drm/amdgpu: tear down ttm range manager for doorbell in
amdgpu_ttm_fini()
- genirq: Make handle_enforce_irqctx() unconditionally available
- wifi: ath11k: Fix unexpected return buffer manager error for
WCN6750/WCN6855
- wifi: rtlwifi: do not complete firmware loading needlessly
- wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last
step
- wifi: rtlwifi: wait for firmware loading before releasing memory
- wifi: rtlwifi: fix init_sw_vars leak when probe fails
- wifi: rtlwifi: usb: fix workqueue leak when probe fails
- net_sched: sch_sfq: annotate data-races around q->perturb_period
- net_sched: sch_sfq: handle bigger packets
- spi: zynq-qspi: Add check for clk_enable()
- dt-bindings: mmc: controller: clarify the address-cells description
- of: remove internal arguments from of_property_for_each_u32()
- clk: fix an OF node reference leak in of_clk_get_parent_name()
- dt-bindings: leds: class-multicolor: Fix path to color definitions
- wifi: rtlwifi: destroy workqueue at rtl_deinit_core
- wifi: rtlwifi: pci: wait for firmware loading before releasing memory
- HID: multitouch: fix support for Goodix PID 0x01e9
- regulator: dt-bindings: mt6315: Drop regulator-compatible property
- wifi: brcmfmac: add missing header include for brcmf_dbg
- ACPI: fan: cleanup resources in the error path of .probe()
- cpupower: fix TSC MHz calculation
- dt-bindings: mfd: bd71815: Fix rsense and typos
- leds: netxbig: Fix an OF node reference leak in
netxbig_leds_get_of_pdata()
- inetpeer: remove create argument of inet_getpeer_v[46]()
- inetpeer: remove create argument of inet_getpeer()
- inetpeer: update inetpeer timestamp in inet_getpeer()
- inetpeer: do not get a refcount in inet_getpeer()
- pwm: stm32-lp: Add check for clk_enable()
- cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
- gpio: pca953x: log an error when failing to get the reset GPIO
- cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ
is not available
- cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq*
clocks
- clk: imx8mp: Fix clkout1/2 support
- dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
- clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
- clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
- regulator: of: Implement the unwind path of of_regulator_match()
- OPP: OF: Fix an OF node leak in _opp_add_static_v2()
- ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
- wifi: ath12k: fix tx power, max reg power update to firmware
- clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
- HID: fix generic desktop D-Pad controls
- leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
- mfd: syscon: Remove extern from function prototypes
- mfd: syscon: Add of_syscon_register_regmap() API
- mfd: syscon: Use scoped variables with memory allocators to simplify
error paths
- mfd: syscon: Fix race in device_node_get_regmap()
- samples/landlock: Fix possible NULL dereference in parse_path()
- wifi: wlcore: fix unbalanced pm_runtime calls
- wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
- wifi: mac80211: fix tid removal during mesh forwarding
- wifi: mac80211: Fix common size calculation for ML element
- net/smc: fix data error when recvmsg with MSG_PEEK flag
- wifi: mt76: mt76u_vendor_request: Do not print error messages when
-EPROTO
- wifi: mt76: mt7921: fix using incorrect group cipher after
disconnection.
- wifi: mt76: mt7915: fix overflows seen when writing limit attributes
- wifi: mt76: mt7996: fix rx filter setting for bfee functionality
- wifi: mt76: mt7915: firmware restart on devices with a second pcie link
- wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
- wifi: mt76: mt7915: improve hardware restart reliability
- wifi: mt76: mt7915: fix omac index assignment after hardware reset
- wifi: mt76: mt7915: fix register mapping
- wifi: mt76: mt7996: fix register mapping
- wifi: mt76: mt7996: add max mpdu len capability
- wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
- wifi: mt76: mt7996: fix HE Phy capability
- wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
- wifi: mt76: mt7996: fix ldpc setting
- cpufreq: ACPI: Fix max-frequency computation
- selftests: timers: clocksource-switch: Adapt progress to kselftest
framework
- selftests: harness: fix printing of mismatch values in __EXPECT()
- wifi: cfg80211: adjust allocation of colocated AP data
- inet: ipmr: fix data-races
- clk: analogbits: Fix incorrect calculation of vco rate delta
- pwm: stm32: Add check for clk_enable()
- selftests/landlock: Fix error message
- net/mlxfw: Drop hard coded max FW flash image size
- octeon_ep: remove firmware stats fetch in ndo_get_stats64
- netfilter: nf_tables: fix set size with rbtree backend
- netfilter: nft_flow_offload: update tcp state flags under lock
- tcp_cubic: fix incorrect HyStart round start detection
- libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is
missing
- tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
- libbpf: Fix segfault due to libelf functions not setting errno
- ASoC: sun4i-spdif: Add clock multiplier settings
- selftests/bpf: Fix fill_link_info selftest on powerpc
- crypto: caam - use JobR's space to access page 0 regs
- perf header: Fix one memory leakage in process_bpf_btf()
- perf header: Fix one memory leakage in process_bpf_prog_info()
- perf bpf: Fix two memory leakages when calling
perf_env__insert_bpf_prog_info()
- ASoC: renesas: rz-ssi: Use only the proper amount of dividers
- perf expr: Initialize is_test value in expr__ctx_new()
- ktest.pl: Remove unused declarations in run_bisect_test function
- crypto: hisilicon/sec2 - fix for aead icv error
- crypto: hisilicon/sec2 - fix for aead invalid authsize
- crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
- ALSA: seq: remove redundant 'tristate' for SND_SEQ_UMP_CLIENT
- ALSA: seq: Make dependency on UMP clearer
- padata: fix sysfs store callback check
- perf top: Don't complain about lack of vmlinux when not resolving some
kernel samples
- perf machine: Don't ignore _etext when not a text symbol
- perf namespaces: Introduce nsinfo__set_in_pidns()
- perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
- ASoC: Intel: avs: Prefix SKL/APL-specific members
- ASoC: Intel: avs: Abstract IPC handling
- ASoC: Intel: avs: Do not readq() u32 registers
- ASoC: Intel: avs: Fix theoretical infinite loop
- perf report: Fix misleading help message about --demangle
- pinctrl: stm32: Add check for clk_enable()
- pinctrl: amd: Take suspend type into consideration which pins are non-
wake
- bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
- ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire
A115-31 laptop
- perf lock: Fix parse_lock_type which only retrieve one lock flag
- padata: add pd get/put refcnt helper
- cifs: Use cifs_autodisable_serverino() for disabling
CIFS_MOUNT_SERVER_INUM in readdir.c
- soc: atmel: fix device_node release in atmel_soc_device_init()
- ARM: at91: pm: change BU Power Switch to automatic mode
- arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
- arm64: dts: mt8183: set DMIC one-wire mode on Damu
- arm64: dts: mediatek: mt8516: fix GICv2 range
- arm64: dts: mediatek: mt8516: fix wdt irq type
- arm64: dts: mediatek: mt8516: add i2c clock-div property
- arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
- ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
- RDMA/mlx4: Avoid false error about access to uninitialized gids array
- arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
- arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
- arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
- arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
- arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
- arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
- arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
- ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
- ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan
boards
- ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
- arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
- RDMA/rxe: Improve newline in printing messages
- RDMA/rxe: Fix mismatched max_msg_sz
- arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
- arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
- RDMA/srp: Fix error handling in srp_add_port
- arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
- ARM: dts: stm32: Deduplicate serial aliases and chosen node for
STM32MP15xx DHCOM SoM
- ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage
settings
- arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
- arm64: dts: qcom: move common parts for sa8775p-ride variants into a
.dtsi
- arm64: dts: qcom: sa8775p: Update sleep_clk frequency
- arm64: dts: qcom: msm8996: Fix up USB3 interrupts
- arm64: dts: qcom: msm8994: Describe USB interrupts
- arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
- arm64: dts: qcom: msm8916: correct sleep clock frequency
- arm64: dts: qcom: msm8939: correct sleep clock frequency
- arm64: dts: qcom: msm8994: correct sleep clock frequency
- arm64: dts: qcom: qcs404: correct sleep clock frequency
- arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
- arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
- arm64: dts: qcom: sc7280: correct sleep clock frequency
- arm64: dts: qcom: sdx75: correct sleep clock frequency
- arm64: dts: qcom: sm4450: correct sleep clock frequency
- arm64: dts: qcom: sm6125: correct sleep clock frequency
- arm64: dts: qcom: sm6375: correct sleep clock frequency
- arm64: dts: qcom: sm8250: correct sleep clock frequency
- arm64: dts: qcom: sm8350: correct sleep clock frequency
- arm64: dts: qcom: sm8450: correct sleep clock frequency
- ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0
node
- arm64: dts: ti: k3-am62: Remove duplicate GICR reg
- arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
- arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
- RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
- ARM: omap1: Fix up the Retu IRQ on Nokia 770
- arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine
riser to dtso
- arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled
ov7251 camera
- arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
- arm64: dts: qcom: sc7180-*: Remove thermal zone polling delays
- arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
- arm64: dts: qcom: sc7180: change labels to lower-case
- arm64: dts: qcom: sc7180: fix psci power domain node names
- arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280
properties
- arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
- dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
- arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
- arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
- arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
- ARM: dts: mediatek: mt7623: fix IR nodename
- fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
- arm64: tegra: Fix DMA ID for SPI2
- i3c: dw: Add hot-join support.
- RDMA/mlx5: Fix indirect mkey ODP page count
- of: reserved-memory: Do not make kmemleak ignore freed address
- efi: sysfb_efi: fix W=1 warnings when EFI is not set
- spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
- media: rc: iguanair: handle timeouts
- media: lmedm04: Handle errors for lme2510_int_read
- PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
- media: marvell: Add check for clk_enable()
- media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
- media: i2c: imx412: Add missing newline to prints
- media: i2c: ov9282: Correct the exposure offset
- media: mipi-csis: Add check for clk_enable()
- media: camif-core: Add check for clk_enable()
- media: uvcvideo: Propagate buf->error to userspace
- mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
- mtd: hyperbus: hbmc-am654: fix an OF node reference leak
- media: nxp: imx8-isi: fix v4l2-compliance test errors
- watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
- staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
- media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
af9035_i2c_master_xfer
- PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
- PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
- scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
- scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
- ocfs2: mark dquot as inactive if failed to start trans while releasing
dquot
- module: Extend the preempt disabled section in
dereference_symbol_descriptor().
- serial: 8250: Adjust the timeout for FIFO mode
- NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
- NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
- tools/bootconfig: Fix the wrong format specifier
- xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
- dmaengine: ti: edma: fix OF node reference leaks in edma_driver
- rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
- regulator: core: Add missing newline character
- gpio: mxc: remove dead code after switch to DT-only
- net: fec: implement TSO descriptor cleanup
- PM: hibernate: Add error handling for syscore_suspend()
- iavf: allow changing VLAN state without calling PF
- net: netdevsim: try to close UDP port harness races
- ptp: Properly handle compat ioctls
- net: stmmac: Limit the number of MTL queues to hardware capability
- net: stmmac: Limit FIFO size by hardware capability
- perf trace: Fix runtime error of index out of bounds
- Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
- vsock: Allow retrying on connect() failure
- bgmac: reduce max frame size to support just MTU 1500
- net: sh_eth: Fix missing rtnl lock in suspend/resume path
- genksyms: fix memory leak when the same symbol is added from source
- genksyms: fix memory leak when the same symbol is read from *.symref
file
- RISC-V: Mark riscv_v_init() as __init
- ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
- io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
- cifs: Fix getting and setting SACLs over SMB1
- kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
- kconfig: fix memory leak in sym_warn_unmet_dep()
- hexagon: fix using plain integer as NULL pointer warning in cmpxchg
- hexagon: Fix unbalanced spinlock in die()
- f2fs: Introduce linear search for dentries
- Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC
messages"
- kbuild: switch from lz4c to lz4 for compression
- selftests/rseq: Fix handling of glibc without rseq support
- ktest.pl: Check kernelrelease return in get_version
- ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
- usb: gadget: f_tcm: Fix Get/SetInterface return value
- usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
- usb: dwc3: core: Defer the probe until USB power supply ready
- usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to
PD_T_SENDER_RESPONSE
- usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR
PPS
- btrfs: output the reason for open_ctree() failure
- s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
- LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
- block: copy back bounce buffer to user-space correctly in case of split
- nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
- sched/fair: Untangle NEXT_BUDDY and pick_next_task()
- sched: Fix race between yield_to() and try_to_wake_up()
- drm/v3d: Fix performance counter source settings on V3D 7.x
- drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
- drm/rockchip: vop2: Set AXI id for rk3588
- drm/rockchip: vop2: Setup delay cycle for Esmart2/3
- drm/rockchip: vop2: Add check for 32 bpp format for rk3588
- drm/msm/dpu: provide DSPP and correct LM config for SDM670
- drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
- drm/msm: don't clean up priv->kms prematurely
- drm/msm/mdp4: correct LCDC regulator name
- wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
- selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
- selftests: ktap_helpers: Fix uninitialized variable
- inet: constify inet_sk_bound_dev_eq() net parameter
- inet: constify 'struct net' parameter of various lookup helpers
- udp: constify 'struct net' parameter of socket lookups
- inet6: constify 'struct net' parameter of various lookup helpers
- ipv6: udp: constify 'struct net' parameter of socket lookups
- dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
- dt-bindings: clock: Add i.MX91 clock support
- dt-bindings: clock: imx93: Add SPDIF IPG clk
- clk: imx93: Move IMX93_CLK_END macro to clk driver
- clk: imx: add i.MX91 clk
- clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
- arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
- clk: imx: Apply some clks only for i.MX93
- wifi: rtw89: mcc: consider time limits not divisible by 1024
- wifi: iwlwifi: cleanup uefi variables loading
- wifi: iwlwifi: fw: read STEP table from correct UEFI var
- wifi: mt76: mt7996: fix overflows seen when writing limit attributes
- wifi: mt76: mt7996: fix definition of tx descriptor
- Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
- platform/mellanox: mlxbf-pmc: incorrect type in assignment
- platform/x86: x86-android-tablets: make platform data be static
- crypto: api - Fix boot-up self-test race
- pinctrl: nomadik: Add check for clk_enable()
- rhashtable: Fix potential deadlock by moving schedule_work outside lock
- crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to
'async'
- perf maps: Fix display of kernel symbols
- perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf
tarball
- ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
- tools: Sync if_xdp.h uapi tooling header
- rhashtable: Fix rhashtable_try_insert test
- ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
- arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
- arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible
property
- arm64: dts: qcom: sm8550: correct sleep clock frequency
- arm64: dts: qcom: sm8650: correct sleep clock frequency
- arm64: dts: qcom: x1e80100: correct sleep clock frequency
- ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0
node
- RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
- [Config] updateconfigs for INFINIBAND_HNS
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
- iommu: iommufd: fix WARNING in iommufd_device_unbind
- remoteproc: mtk_scp: Only populate devices for SCP cores
- PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
- PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
- PCI: microchip: Add support for using either Root Port 1 or 2
- PCI: microchip: Set inbound address translation for coherent or non-
coherent mode
- erofs: get rid of erofs_{find,insert}_workgroup
- erofs: move erofs_workgroup operations into zdata.c
- erofs: sunset `struct erofs_workgroup`
- erofs: fix potential return value overflow of z_erofs_shrink_scan()
- tty: mips_ejtag_fdc: fix one more u8 warning
- xfrm: Add support for per cpu xfrm state handling.
- xfrm: Cache used outbound xfrm states at the policy.
- xfrm: Add an inbound percpu state cache.
- xfrm: Don't disable preemption while looking up cache state.
- idpf: add read memory barrier when checking descriptor done bit
- net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
- tools: ynl: c: correct reverse decode of empty attrs
- selftests: mptcp: extend CFLAGS to keep options from environment
- selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from
environment
- net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts
in
- ethtool: Fix set RXNFC command with symmetric RSS hash
- tools/power turbostat: Fix forked child affinity regression
- md: add a new callback pers->bitmap_sector()
- md/raid5: implement pers->bitmap_sector()
- xfs: check for dead buffers in xfs_buf_find_insert
- xfs: don't shut down the filesystem for media failures beyond end of log
- usb: dwc3: Skip resume if pm_runtime_set_active() fails
- clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
- xfrm: Add error handling when nla_put_u32() returns an error
- xfrm: Fix acquire state insertion.
- ethtool: Fix access to uninitialized fields in set RXNFC command
- ASoC: da7213: Initialize the mutex
- drm/amd/display: Add hubp cache reset when powergating
- KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
- ethtool: ntuple: fix rss + ring_cookie check
- Upstream stable to v6.6.76, v6.12.13
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57975
- btrfs: do proper folio cleanup when run_delalloc_nocow() failed
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21714
- RDMA/mlx5: Fix implicit ODP use after free
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21801
- net: ravb: Fix missing rtnl lock in suspend/resume path
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21809
- rxrpc, afs: Fix peer hash locking vs RCU callback
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58057
- idpf: convert workqueues to unbound
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57953
- rtc: tps6594: Fix integer overflow on 32bit systems
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57982
- xfrm: state: fix out-of-bounds read during lookup
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21721
- nilfs2: handle errors that nilfs_prepare_chunk() may return
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21722
- nilfs2: do not force clear folio if buffer is referenced
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21798
- firewire: test: Fix potential null dereference in firewire kunit test
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21723
- scsi: mpi3mr: Fix possible crash when setting up bsg fails
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21724
- iommufd/iova_bitmap: Fix shift-out-of-bounds in
iova_bitmap_offset_to_index()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21825
- bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57990
- wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57974
- udp: Deal with race between UDP socket address change and rehash
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57994
- ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57999
- powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58054
- staging: media: max96712: fix kernel oops when removing module
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58055
- usb: gadget: f_tcm: Don't free command immediately
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57979
- pps: Fix a use-after-free
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57980
- media: uvcvideo: Fix double free in error path
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58056
- remoteproc: core: Fix ida_free call while not allocated
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21705
- mptcp: handle fastopen disconnect correctly
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21707
- mptcp: consolidate suboption status
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57981
- usb: xhci: Fix NULL pointer dereference on certain command aborts
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21708
- net: usb: rtl8150: enable basic endpoint checking
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21826
- netfilter: nf_tables: reject mismatching sum of field_len with set key
length
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21808
- net: xdp: Disallow attaching device-bound programs in generic mode
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21710
- tcp: correct handling of extreme memory squeeze
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21715
- net: davicom: fix UAF in dm9000_drv_remove
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21716
- vxlan: Fix uninit-value in vxlan_vnifilter_dump()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21718
- net: rose: fix timer races against user threads
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21719
- ipmr: do not call mr_mfc_uses_dev() for unres entries
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21802
- net: hns3: fix oops when unload drivers paralleling
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58058
- ubifs: skip dumping tnc tree when zroot is null
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58069
- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21720
- xfrm: delete intermediate secpath entry in packet offload mode
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21803
- LoongArch: Fix warnings during S3 suspend
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21810
- driver core: class: Fix wild pointer dereferences in API
class_dev_iter_next()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21811
- nilfs2: protect access to buffers with no active references
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21804
- PCI: rcar-ep: Fix incorrect variable used when calling
devm_request_mem_region()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21829
- RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57984
- i3c: dw: Fix use-after-free in dw_i3c_master driver due to race
condition
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58034
- memory: tegra20-emc: fix an OF node reference bug in
tegra_emc_find_node_by_ram_code()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57973
- rdma/cxgb4: Prevent potential integer overflow on 32bit
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21725
- smb: client: fix oops due to unset link speed
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21726
- padata: avoid UAF for reorder_work
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21727
- padata: fix UAF in padata_reorder
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21728
- bpf: Send signals asynchronously if !preemptible
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58070
- bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21711
- net/rose: prevent integer overflows in rose_setsockopt()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21799
- net: ethernet: ti: am65-cpsw: fix freeing IRQ in
am65_cpsw_nuss_remove_tx_chns()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21806
- net: let net.core.dev_weight always be non-zero
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21830
- landlock: Handle weird files
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21828
- wifi: mac80211: don't flush non-uploaded STAs
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58061
- wifi: mac80211: prohibit deactivating all links
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57993
- HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding
endpoint check
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21812
- ax25: rcu protect dev->ax25_ptr
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58071
- team: prevent adding a device which is already a team device lower
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58063
- wifi: rtlwifi: fix memory leaks and invalid access at probe error path
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58072
- wifi: rtlwifi: remove unused check_buddy_priv
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58053
- rxrpc: Fix handling of received connection abort
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57996
- net_sched: sch_sfq: don't allow 1 packet limit
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57997
- wifi: wcn36xx: fix channel survey memory allocation size
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58051
- ipmi: ipmb: Add check devm_kasprintf() returned value
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58068
- OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57998
- OPP: add index check to assert to avoid buffer overflow in _read_freq()
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-58052
- drm/amdgpu: Fix potential NULL pointer dereference in
atomctrl_get_smc_sclk_range_table
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2024-57986
- HID: core: Fix assumption that Resolution Multipliers must be in Logical
Collections
* Noble update: upstream stable patchset 2025-05-29 (LP: #2111953) //
CVE-2025-21731
- nbd: don't allow reconnect after disconnect
* CVE-2025-37798
- sch_htb: make htb_qlen_notify() idempotent
- sch_htb: make htb_deactivate() idempotent
- sch_drr: make drr_qlen_notify() idempotent
- sch_hfsc: make hfsc_qlen_notify() idempotent
- sch_qfq: make qfq_qlen_notify() idempotent
- sch_ets: make est_qlen_notify() idempotent
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
* CVE-2025-37997
- netfilter: ipset: fix region locking in hash types
* CVE-2025-22088
- RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
* CVE-2025-37890
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
qdisc
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
* raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
- md/raid1: Add check for missing source disk in process_checks()
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] update annotations scripts
[ Ubuntu: 6.8.0-62.65 ]
* noble/linux: 6.8.0-62.65 -proposed tracker (LP: #2110737)
* Rotate the Canonical Livepatch key (LP: #2111244)
- [Config] Prepare for Canonical Livepatch key rotation
* KVM bug causes Firecracker crash when it runs the vCPU for the first time
(LP: #2109859)
- vhost: return task creation error instead of NULL
- kvm: retry nx_huge_page_recovery_thread creation
* CVE-2025-2312 cifs.upcall could access incorrect kerberos credentials cache
(LP: #2099914) // CVE-2025-2312
- CIFS: New mount option for cifs.upcall namespace resolution
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640)
- ASoC: wm8994: Add depends on MFD core
- ASoC: samsung: Add missing selects for MFD_WM8994
- seccomp: Stub for !CONFIG_SECCOMP
- scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
- of/unittest: Add test that of_address_to_resource() fails on non-
translatable address
- irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
- hwmon: (drivetemp) Set scsi command timeout to 10s
- ASoC: samsung: Add missing depends on I2C
- ata: libata-core: Set ATA_QCFLAG_RTF_FILLED in fill_result_tf()
- Revert "libfs: fix infinite directory reads for offset dir"
- libfs: Replace simple_offset end-of-directory detection
- Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
- ALSA: usb-audio: Add delay quirk for USB Audio Device
- Input: xpad - add support for Nacon Pro Compact
- Input: atkbd - map F23 key to support default copilot shortcut
- Input: xpad - add unofficial Xbox 360 wireless receiver clone
- Input: xpad - add QH Electronics VID/PID
- Input: xpad - improve name of 8BitDo controller 2dc8:3106
- Input: xpad - add support for Nacon Evol-X Xbox One Controller
- Input: xpad - add support for wooting two he (arm)
- ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK
- ASoC: cs42l43: Add codec force suspend/resume ops
- ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5
- libfs: Return ENOSPC when the directory offset range is exhausted
- Revert "libfs: Add simple_offset_empty()"
- libfs: Use d_children list to iterate simple_offset directories
- wifi: rtl8xxxu: add more missing rtl8192cu USB IDs
- HID: wacom: Initialize brightness of LED trigger
- Upstream stable to v6.6.75, v6.12.12
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21689
- USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21690
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21691
- cachestat: fix page cache statistics permission checking
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21692
- net: sched: fix ets qdisc OOB Indexing
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2025-21699
- gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
* Noble update: upstream stable patchset 2025-04-29 (LP: #2109640) //
CVE-2024-50157
- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
* rtw89: Support hardware rfkill (LP: #2077384)
- wifi: rtw89: add support for hardware rfkill
* Introduce configfs-based interface for gpio-aggregator (LP: #2103496)
- gpio: introduce utilities for synchronous fake device creation
- bitmap: Define a cleanup function for bitmaps
- gpio: aggregator: simplify aggr_parse() with scoped bitmap
- gpio: aggregator: protect driver attr handlers against module unload
- gpio: aggregator: reorder functions to prepare for configfs introduction
- gpio: aggregator: unify function naming
- gpio: aggregator: add gpio_aggregator_{alloc, free}()
- gpio: aggregator: introduce basic configfs interface
- [Config] Enable DEV_SYNC_PROBE as module
- SAUCE: gpio: aggregator: Fix error code in gpio_aggregator_activate()
- gpio: aggregator: rename 'name' to 'key' in gpio_aggregator_parse()
- gpio: aggregator: expose aggregator created via legacy sysfs to configfs
- SAUCE: gpio: aggregator: fix "_sysfs" prefix check in
gpio_aggregator_make_group()
- SAUCE: gpio: aggregator: Fix gpio_aggregator_line_alloc() checking
- SAUCE: gpio: aggregator: Return an error if there are no GPIOs in
gpio_aggregator_parse()
- SAUCE: gpio: aggregator: Fix leak in gpio_aggregator_parse()
- gpio: aggregator: cancel deferred probe for devices created via configfs
- Documentation: gpio: document configfs interface for gpio-aggregator
- selftests: gpio: add test cases for gpio-aggregator
- SAUCE: selftests: gpio: gpio-aggregator: add a test case for _sysfs prefix
reservation
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449)
- net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
- net: add exit_batch_rtnl() method
- gtp: use exit_batch_rtnl() method
- gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
- gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
- nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
- net: xilinx: axienet: Fix IRQ coalescing packet count overflow
- net/mlx5: Fix RDMA TX steering prio
- net/mlx5e: Rely on reqid in IPsec tunnel mode
- net/mlx5e: Always start IPsec sequence number from 1
- drm/vmwgfx: Add new keep_resv BO param
- drm/v3d: Assign job pointer to NULL before signaling the fence
- soc: ti: pruss: Fix pruss APIs
- hwmon: (tmp513) Fix division of negative numbers
- i2c: mux: demux-pinctrl: check initial mux selection, too
- i2c: rcar: fix NACK handling when being a target
- hfs: Sanity check the root record
- fs: fix missing declaration of init_files
- kheaders: Ignore silly-rename files
- cachefiles: Parse the "secctx" immediately
- scsi: ufs: core: Honor runtime/system PM levels if set by host controller
drivers
- selftests: tc-testing: reduce rshift value
- ACPI: resource: acpi_dev_irq_override(): Check DMI match last
- poll_wait: add mb() to fix theoretical race between waitqueue_active() and
.poll()
- RDMA/bnxt_re: Fix to export port num to ib_query_qp
- nvmet: propagate npwg topology
- ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
- i2c: atr: Fix client detach
- mptcp: be sure to send ack when mptcp-level window re-opens
- mptcp: fix spurious wake-up on under memory pressure
- selftests: mptcp: avoid spurious errors on disconnect
- net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
- vsock/virtio: cancel close work in the destructor
- vsock: reset socket state when de-assigning the transport
- nouveau/fence: handle cross device fences properly
- irqchip: Plug a OF node reference leak in platform_irqchip_probe()
- irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
- drm/i915/fb: Relax clear color alignment to 64 bytes
- drm/amdgpu: always sync the GFX pipe on ctx switch
- ocfs2: fix deadlock in ocfs2_get_system_file_inode
- nfsd: add list_head nf_gc to struct nfsd_file
- x86/xen: fix SLS mitigation in xen_hypercall_iret()
- efi/zboot: Limit compression options to GZIP and ZSTD
- [Config] updateconfigs for HAVE_KERNEL_(LZ4|LZMA|LZO|XZ)
- net: ravb: Fix max TX frame size for RZ/V2M
- net/mlx5: SF, Fix add port error handling
- drm/vmwgfx: Unreserve BO on error
- i2c: testunit: on errors, repeat NACK until STOP
- hwmon: (ltc2991) Fix mixed signed/unsigned in DIV_ROUND_CLOSEST
- fs/qnx6: Fix building with GCC 15
- gpio: sim: lock up configfs that an instantiated device depends on
- gpio: sim: lock hog configfs items if present
- platform/x86: ISST: Add Clearwater Forest to support list
- drm/nouveau/disp: Fix missing backlight control on Macbook 5,1
- net/ncsi: fix locking in Get MAC Address handling
- drm/amd/display: Do not elevate mem_type change to full update
- drm/xe: Mark ComputeCS read mode as UC on iGPU
- drm/amdgpu/smu13: update powersave optimizations
- drm/amdgpu: fix fw attestation for MP0_14_0_{2/3}
- drm/amdgpu: disable gfxoff with the compute workload on gfx12
- drm/amd/display: Fix PSR-SU not support but still call the
amdgpu_dm_psr_enable
- Upstream stable to v6.6.73, v6.6.74, v6.12.11
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21672
- afs: Fix merge preference rule failure condition
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21682
- eth: bnxt: always recalculate features after XDP clearing, fix null-deref
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-53124
- net: fix data-races around sk->sk_forward_alloc
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57924
- fs: relax assertions on failure to encode file handles
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57951
- hrtimers: Handle CPU state correctly on hotplug
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57949
- irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21668
- pmdomain: imx8mp-blk-ctrl: add missing loop break condition
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21684
- gpio: xilinx: Convert gpio_lock to raw spinlock
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21694
- fs/proc: fix softlockup in __read_vmcore (part 2)
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21665
- filemap: avoid truncating 64-bit offset to 32 bits
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21666
- vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21669
- vsock/virtio: discard packets if the transport changes
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21670
- vsock/bpf: return early if transport is not assigned
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21667
- iomap: avoid avoid truncating 64-bit offset to 32 bits
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2024-57948
- mac802154: check local interfaces before deleting sdata list
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21673
- smb: client: fix double free of TCP_Server_Info::hostname
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21697
- drm/v3d: Ensure job pointer is set to NULL after job completion
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21674
- net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21675
- net/mlx5: Clear port select structure when fail to create
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21676
- net: fec: handle page_pool_dev_alloc_pages error
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21678
- gtp: Destroy device along with udp socket's netns dismantle.
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21680
- pktgen: Avoid out-of-bounds access in get_imix_entries
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21681
- openvswitch: fix lockup on tx to unregistering netdev with carrier
* Noble update: upstream stable patchset 2025-04-16 (LP: #2107449) //
CVE-2025-21683
- bpf: Fix bpf_sk_select_reuseport() memory leak
* Packaging resync (LP: #1786013)
- [Packaging] update annotations scripts
[ Ubuntu: 6.8.0-60.63 ]
* noble/linux: 6.8.0-60.63 -proposed tracker (LP: #2107138)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.04.14)
* Missing upstream commits for LP: #2102181 (LP: #2107336)
- libperf cpumap: Add any, empty and min helpers
- libperf cpumap: Ensure empty cpumap is NULL from alloc
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770)
- memblock: use numa_valid_node() helper to check for invalid node ID
- jbd2: increase IO priority for writing revoke records
- jbd2: flush filesystem device before updating tail sequence
- dm array: fix unreleased btree blocks on closing a faulty array cursor
- dm array: fix cursor index when skipping across block boundaries
- exfat: fix the infinite loop in __exfat_free_cluster()
- erofs: fix PSI memstall accounting
- ASoC: rt722: add delay time to wait for the calibration procedure
- ASoC: mediatek: disable buffer pre-allocation
- selftests/alsa: Fix circular dependency involving global-timer
- ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
- net: 802: LLC+SNAP OID:PID lookup on start of skb data
- tcp/dccp: complete lockless accesses to sk->sk_max_ack_backlog
- tcp/dccp: allow a connection when sk_max_ack_backlog is zero
- net: libwx: fix firmware mailbox abnormal return
- pds_core: limit loop over fw name list
- bnxt_en: Fix possible memory leak when hwrm_req_replace fails
- cxgb4: Avoid removal of uninserted tid
- ice: fix incorrect PHY settings for 100 GB/s
- igc: return early when failing to read EECD register
- tls: Fix tls_sw_sendmsg error handling
- eth: gve: use appropriate helper to set xdp_features
- Bluetooth: hci_sync: Fix not setting Random Address when required
- Bluetooth: MGMT: Fix Add Device to responding before completing
- Bluetooth: btnxpuart: Fix driver sending truncated data
- tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
- riscv: Fix early ftrace nop patching
- memblock tests: fix implicit declaration of function 'numa_valid_node'
- iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
- netfilter: nf_tables: imbalance in flowtable binding
- drm/mediatek: stop selecting foreign drivers
- [Config] updateconfigs for MTK_SMI
- drm/mediatek: Fix YCbCr422 color format issue for DP
- drm/mediatek: Fix mode valid issue for dp
- drm/mediatek: Add return value check when reading DPCD
- cpuidle: riscv-sbi: fix device node release in early exit of
for_each_possible_cpu
- scsi: ufs: qcom: Power off the PHY if it was already powered on in
ufs_qcom_power_up_sequence()
- dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
- ksmbd: Implement new SMB3 POSIX type
- thermal: of: fix OF node leak in of_thermal_zone_find()
- smb: client: sync the root session and superblock context passwords before
automounting
- ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
- ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
- drm/amd/display: increase MAX_SURFACES to the value supported by hw
- io_uring/timeout: fix multishot updates
- dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
- USB: serial: option: add MeiG Smart SRM815
- USB: serial: option: add Neoway N723-EA support
- staging: iio: ad9834: Correct phase range check
- staging: iio: ad9832: Correct phase range check
- usb-storage: Add max sectors quirk for Nokia 208
- USB: serial: cp210x: add Phoenix Contact UPS Device
- usb: dwc3: gadget: fix writing NYET threshold
- misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set
config
- tty: serial: 8250: Fix another runtime PM usage counter underflow
- usb: dwc3-am62: Disable autosuspend during remove
- USB: usblp: return error when setting unsupported protocol
- USB: core: Disable LPM only for non-suspended ports
- usb: fix reference leak in usb_new_device()
- usb: gadget: midi2: Reverse-select at the right place
- usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in
the error path of .probe()
- usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
- usb: typec: tcpm/tcpci_maxim: fix error code in
max_contaminant_read_resistance_kohm()
- usb: gadget: configfs: Ignore trailing LF for user strings to cdev
- iio: gyro: fxas21002c: Fix missing data update in trigger handler
- iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
- iio: inkern: call iio_device_put() only on mapped devices
- iio: adc: ad7124: Disable all channels at probe time
- riscv: kprobes: Fix incorrect address calculation
- ARM: dts: imxrt1050: Fix clocks for mmc
- arm64: dts: rockchip: add hevc power domain clock to rk3328
- pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
- pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
- workqueue: Add rcu lock check at the end of work item execution
- workqueue: Update lock debugging code
- mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
- riscv: Fix text patching when IPI are used
- drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
- ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
- net: don't dump Tx and uninitialized NAPIs
- ice: fix max values for dpll pin phase adjust
- net: hns3: fixed reset failure issues caused by the incorrect reset type
- net: hns3: fix missing features due to dev->features configuration too early
- net: hns3: Resolved the issue that the debugfs query result is inconsistent.
- net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
- mctp i3c: fix MCTP I3C driver multi-thread issue
- drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
- drm/mediatek: Add support for 180-degree rotation in the display driver
- drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
- platform/x86: intel/pmc: Fix ioremap() of bad address
- riscv: module: remove relocation_head rel_entry member allocation
- cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
- fs: kill MNT_ONRB
- gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
- drm/amd/pm: fix BUG: scheduling while atomic
- drm/amdkfd: wq_release signals dma_fence only when available
- drm/amd/display: fix divide error in DM plane scale calcs
- drm/amd/display: fix page fault due to max surface definition mismatch
- serial: stm32: use port lock wrappers for break control
- usb: host: xhci-plat: set skip_phy_initialization if software node has
XHCI_SKIP_PHY_INIT property
- iio: imu: inv_icm42600: add register caching in the regmap
- iio: imu: inv_icm42600: fix spi burst write not supported
- Upstream stable to v6.6.71, v6.6.72, v6.12.10
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21659
- netdev: prevent accessing NAPI instances from another namespace
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21634
- cgroup/cpuset: remove kernfs active break
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21635
- rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21643
- netfs: Fix kernel async DIO
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21649
- net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21650
- net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21651
- net: hns3: don't auto enable misc vector
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21654
- ovl: support encoding fid from inode with no alias
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57883
- mm: hugetlb: independent PMD page table shared count
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57888
- workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from
!WQ_MEM_RECLAIM worker
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21631
- block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21656
- hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21655
- io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57904
- iio: adc: at91: call input_free_device() on allocated iio_dev
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57906
- iio: adc: ti-ads8688: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57907
- iio: adc: rockchip_saradc: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57908
- iio: imu: kmx61: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57910
- iio: light: vcnl4035: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57911
- iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered
buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57912
- iio: pressure: zpa2326: fix information leak in triggered buffer
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57913
- usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21632
- x86/fpu: Ensure shadow stack is active before "getting" registers
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57916
- misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57917
- topology: Keep the cpumask unchanged when printing cpumap
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57939
- riscv: Fix sleeping in invalid context in die()
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21636
- sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21637
- sctp: sysctl: udp_port: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21638
- sctp: sysctl: auth_enable: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21639
- sctp: sysctl: rto_min/max: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21640
- sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21642
- mptcp: sysctl: sched: avoid using current->nsproxy
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe list first function
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57945
- riscv: mm: Fix the out of bound issue of vmemmap address
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21660
- ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21645
- platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled
it
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21646
- afs: Fix the maximum cell name length
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57925
- ksmbd: fix a missing return value check bug
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57926
- drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind
returns err
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21662
- net/mlx5: Fix variable not being completed when function returns
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21663
- net: stmmac: dwmac-tegra: Read iommu stream id from device tree
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21647
- sched: sch_cake: add bounds checks to host bulk flow fairness counts
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21648
- netfilter: conntrack: clamp maximum hashtable size to INT_MAX
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21652
- ipvlan: Fix use-after-free in ipvlan_get_iflink().
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21658
- btrfs: avoid NULL pointer dereference if no valid extent tree
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2025-21653
- net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-47736
- erofs: handle overlapped pclusters out of crafted images properly
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57940
- exfat: fix the infinite loop in exfat_readdir()
* Noble update: upstream stable patchset 2025-04-10 (LP: #2106770) //
CVE-2024-57929
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
* intel_idle: add Granite Rapids Xeon (D) support (LP: #2106638)
- intel_idle: add Granite Rapids Xeon support
- intel_idle: add Granite Rapids Xeon D support
* [SRU] Enable speaker/mic mute LEDs on Lenovo ideapad and thinkbook
(LP: #2106449)
- ALSA: hda: Support for Ideapad hotkey mute LEDs
- platform/x86:lenovo-wmi-hotkey-utilities.c: Support for mic and audio mute
LEDs
- [Config] Enable Lenovo wmi hotkey driver
* Backport "PCI: Wait for device readiness with Configuration RRS" to N/O
(LP: #2106251)
- PCI: Wait for device readiness with Configuration RRS
- PCI: Avoid FLR for Mediatek MT7922 WiFi
* Enable OOB P-state control for Intel Sierra Forest/Granite Rapids
(LP: #2106275)
- cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode
* mptcp BUG 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
(LP: #2101120)
- mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
* CVE-2025-21971
- net_sched: Prevent creation of classes with TC_H_ROOT
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632)
- smb/client: rename cifs_ntsd to smb_ntsd
- smb/client: rename cifs_sid to smb_sid
- smb/client: rename cifs_acl to smb_acl
- smb/client: rename cifs_ace to smb_ace
- fs/smb/client: implement chmod() for SMB3 POSIX Extensions
- smb: client: stop flooding dmesg in smb2_calc_signature()
- media: uvcvideo: Force UVC version to 1.0a for 0408:4033
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
- watchdog: rzg2l_wdt: Remove reset de-assert from probe
- watchdog: rzg2l_wdt: Rely on the reset driver for doing proper reset
- watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
- ALSA: ump: Use guard() for locking
- ALSA: ump: Don't open legacy substream for an inactive group
- scsi: mpi3mr: Use ida to manage mrioc ID
- scsi: mpi3mr: Start controller indexing from 0
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
- ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
- x86/ptrace: Cleanup the definition of the pt_regs structure
- x86/ptrace: Add FRED additional information to the pt_regs structure
- Bluetooth: btusb: add callback function in btusb suspend/resume
- Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
- platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
- mmc: sdhci-msm: fix crypto key eviction
- tracing: Handle old buffer mappings for event strings and functions
- tracing: Fix trace_check_vprintf() when tp_printk is used
- tracing: Check "%s" dereference via the field and not the TP_printk format
- RDMA/bnxt_re: Allow MSN table capability check
- RDMA/bnxt_re: Remove always true dattr validity check
- RDMA/mlx5: Enforce same type port association for multiport RoCE
- RDMA/bnxt_re: Avoid initializing the software queue for user queues
- RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
- nvme-pci: 512 byte aligned dma pool segment quirk
- RDMA/bnxt_re: Fix the check for 9060 condition
- RDMA/bnxt_re: Add check for path mtu in modify_qp
- RDMA/bnxt_re: Fix reporting hw_ver in query_device
- RDMA/bnxt_re: Fix max_qp_wrs reported
- RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
- RDMA/bnxt_re: Disable use of reserved wqes
- RDMA/bnxt_re: Add send queue size check for variable wqe
- RDMA/bnxt_re: Fix MSN table size for variable wqe mode
- drm/bridge: adv7511_audio: Update Audio InfoFrame properly
- net: dsa: microchip: Fix KSZ9477 set_ageing_time function
- net: dsa: microchip: Fix LAN937X set_ageing_time function
- RDMA/hns: Refactor mtr find
- RDMA/hns: Remove unused parameters and variables
- RDMA/hns: Fix mapping error of zero-hop WQE buffer
- RDMA/hns: Fix warning storm caused by invalid input in IO path
- RDMA/hns: Fix missing flush CQE for DWQE
- ip_tunnel: annotate data-races around t->parms.link
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
- ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
- net: Fix netns for ip_tunnel_init_flow()
- net/mlx5: DR, select MSIX vector 0 for completion queue creation
- net/mlx5e: macsec: Maintain TX SA from encoding_sa
- drm/i915/dg1: Fix power gate sequence.
- net: llc: reset skb->transport_header
- ALSA: usb-audio: US16x08: Initialize array before use
- eth: bcmsysport: fix call balance of priv->clk handling routines
- net: mv643xx_eth: fix an OF node reference leak
- net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
- net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
- net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
- wifi: mac80211: wake the queues in case of failure in resume
- ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
- ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
- sound: usb: enable DSD output for ddHiFi TC44C
- sound: usb: format: don't warn that raw DSD is unsupported
- bpf: fix potential error return
- ksmbd: retry iterate_dir in smb2_query_dir
- smb: client: destroy cfid_put_wq on module exit
- net: usb: qmi_wwan: add Telit FE910C04 compositions
- irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
- ARC: build: Try to guess GCC variant of cross compiler
- RDMA/bnxt_re: Fix the max WQE size for static WQE support
- modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
- modpost: fix the missed iteration for the max bit in do_input()
- ALSA: seq: Check UMP support for midi_version change
- ALSA hda/realtek: Add quirk for Framework F111:000C
- kcov: mark in_softirq_really() as __always_inline
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
- sky2: Add device ID 11ab:4373 for Marvell 88E8075
- drm: adv7511: Drop dsi single lane support
- dt-bindings: display: adi,adv7533: Drop single lane support
- fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
- mm/readahead: fix large folio support in async readahead
- mptcp: fix recvbuffer adjust on sleeping rcvmsg
- mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
- RDMA/bnxt_re: Fix max SGEs for the Work Request
- scsi: hisi_sas: Remove redundant checks for automatic debugfs dump
- platform/x86: hp-wmi: Add thermal profile support for 8BAD boards
- platform/x86: hp-wmi: Fix platform profile option switch bug on Omen and
Victus laptops
- platform/x86: hp-wmi: Fix implementation of the platform_profile_omen_get
function
- platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
- RDMA/core: Fix ENODEV error for iWARP test over vlan
- net: phy: micrel: Dynamically control external clock of KSZ PHY
- netdev-genl: avoid empty messages in napi get
- net: stmmac: restructure the error path of stmmac_probe_config_dt()
- net/mlx5e: Fix netif state handling
- net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
- drm/i915/cx0_phy: Fix C10 pll programming sequence
- RDMA/bnxt_re: Fix error recovery sequence
- btrfs: allow swap activation to be interruptible
- perf/x86/intel: Add Arrow Lake U support
- ALSA: hda: cs35l56: Remove calls to
cs35l56_force_sync_asp1_registers_from_cache()
- ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
- spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
- ARC: build: disallow invalid PAE40 + 4K page config
- bpf: refactor bpf_helper_changes_pkt_data to use helper number
- bpf: consider that tail calls invalidate packet pointers
- maple_tree: reload mas before the second call for mas_empty_area
- io_uring/rw: fix downgraded mshot read
- wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
- net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
- gve: process XSK TX descriptors as part of RX NAPI
- gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
- mm: reinstate ability to map write-sealed memfd mappings read-only
- Upstream stable to v6.6.70, v6.12.9
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57898
- wifi: cfg80211: clear link ID from bitmap during link delete after clean up
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57882
- mptcp: fix TCP options overflow.
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57885
- mm/kmemleak: fix sleeping function called from invalid context at print
message
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57932
- gve: guard XDP xmit NDO on existence of xdp queues
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57933
- gve: guard XSK operations on the existence of queues
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57887
- drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57938
- net/sctp: Prevent autoclose integer overflow in sctp_association_init()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57889
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57890
- RDMA/uverbs: Prevent integer overflow issue
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57892
- ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57893
- ALSA: seq: oss: Fix races at processing SysEx messages
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57895
- ksmbd: set ATTR_CTIME flags when setting mtime
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57896
- btrfs: flush delalloc workers queue before stopping cleaner kthread during
unmount
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57897
- drm/amdkfd: Correct the migration DMA map direction
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57899
- wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57900
- ila: serialize calls to nf_register_net_hooks()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57901
- af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57902
- af_packet: fix vlan_get_tci() vs MSG_PEEK
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57903
- net: restrict SO_REUSEPORT to inet sockets
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-36476
- RDMA/rtrs: Ensure 'ib_sge list' is accessible
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-39282
- net: wwan: t7xx: Fix FSM command timeout issue
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57801
- net/mlx5e: Skip restore TC rules for vport rep without loaded flag
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57802
- netrom: check buffer length before accessing it
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57841
- net: fix memory leak in tcp_conn_request()
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-57931
- selinux: ignore unknown extended permissions
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-56761
- x86/fred: Clear WFE in missing-ENDBRANCH #CPs
* Noble update: upstream stable patchset 2025-04-09 (LP: #2106632) //
CVE-2024-53179
- smb: client: fix use-after-free of signing key
* uprobe-related panics during profiling (LP: #2104210)
- uprobes: Fix race in uprobe_free_utask
* ubuntu_bpf failed to build on Noble / Oracular (LP: #2069407)
- selftests/bpf: Fix compilation failure when CONFIG_NET_FOU!=y
* nfsd hangs and never recovers after NFS4ERR_DELAY and a connection loss
(LP: #2103564)
- NFSD: Reset cb_seq_status after NFS4ERR_DELAY
* thermal: Fix temperature readings on intel hardware (LP: #2103427)
- thermal: intel: intel_tcc: Add model checks for temperature registers
- thermal: intel: intel_tcc_cooling: Use a model-specific bitmask for TCC
offset
- hwmon: (coretemp) Extend the bitmask to read temperature to 0xff
* [SRU] Fix Lenovo M70/90 gen6 micmute key and led (LP: #2101811)
- ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
- ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869)
- ceph: allocate sparse_ext map only for sparse reads
- mm/vmstat: fix a W=1 clang compiler warning
- tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
- tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
- bpf: Check negative offsets in __bpf_skb_min_len()
- mtd: diskonchip: Cast an operand to prevent potential overflow
- mtd: rawnand: arasan: Fix double assertion of chip-select
- mtd: rawnand: arasan: Fix missing de-registration of NAND
- phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
- phy: core: Fix an OF node refcount leakage in _of_phy_get()
- phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
- phy: core: Fix that API devm_phy_put() fails to release the phy
- phy: core: Fix that API devm_of_phy_provider_unregister() fails to
unregister the phy provider
- phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
- phy: usb: Toggle the PHY power during init
- phy: rockchip: naneng-combphy: fix phy reset
- dmaengine: mv_xor: fix child node refcount handling in early exit
- dmaengine: dw: Select only supported masters for ACPI devices
- dmaengine: tegra: Return correct DMA status when paused
- dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
- dmaengine: apple-admac: Avoid accessing registers in probe
- stddef: make __struct_group() UAPI C++-friendly
- tracing/kprobe: Make trace_kprobe's module callback called after jump_label
update
- watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
- watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
- scsi: qla1280: Fix hw revision numbering for ISP1020/1040
- udf: Skip parent dir link count update if corrupted
- ALSA: hda/conexant: fix Z60MR100 startup pop issue
- ALSA: sh: Use standard helper for buffer accesses
- smb: server: Fix building with GCC 15
- regmap: Use correct format specifier for logging range errors
- LoongArch: Fix reserving screen info memory for above-4G firmware
- LoongArch: BPF: Adjust the parameter of emit_jirl()
- platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
- spi: intel: Add Panther Lake SPI controller support
- scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
time
- scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
as an error
- spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
- blk-mq: register cpuhp callback after hctx is added to xarray table
- blk-mq: move cpuhp callback registering out of q->sysfs_lock
- MIPS: Probe toolchain support of -msym32
- MIPS: mipsregs: Set proper ISA level for virt extensions
- freezer, sched: Report frozen tasks as 'D' instead of 'R'
- tracing: Constify string literal data member in struct trace_event_call
- io_uring/sqpoll: fix sqpoll error handling races
- i2c: microchip-core: actually use repeated sends
- i2c: imx: add imx7d compatible string for applying erratum ERR007805
- i2c: microchip-core: fix "ghost" detections
- btrfs: sysfs: fix direct super block member reads
- ALSA: sh: Fix wrong argument order for copy_from_iter()
- block: avoid to reuse `hctx` not removed from cpuhp callback list
- fork: avoid inappropriate uprobe access to invalid mm
- ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
- power: supply: bq24190: Fix BQ24296 Vbus regulator support
- udf: Verify inode link counts before performing rename
- ALSA: ump: Indicate the inactive group in legacy substream names
- ALSA: ump: Update legacy substream names upon FB info update
- scsi: mpi3mr: Synchronize access to ioctl data buffer
- scsi: mpi3mr: Handling of fault code for insufficient power
- objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns
- dmaengine: loongson2-apb: Change GENMASK to GENMASK_ULL
- perf/x86/intel/ds: Add PEBS format 6
- btrfs: add and use helper to verify the calling task has locked the inode
- btrfs: fix race with memory mapped writes when activating swap file
- btrfs: fix swap file activation failure due to extents that used to be
shared
- ALSA: ump: Shut up truncated string warning
- Upstream stable to v6.6.69, v6.12.8
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56758
- btrfs: check folio mapping after unlock in relocate_one_folio()
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56759
- btrfs: fix use-after-free when COWing tree bock and tracing is enabled
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57806
- btrfs: fix transaction atomicity bug when enabling simple quotas
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57793
- virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56764
- ublk: detach gendisk from ublk device if add_disk() fails
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57804
- scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57792
- power: supply: gpio-charger: Fix set charge current limits
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56760
- PCI/MSI: Handle lack of irqdomain gracefully
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56763
- tracing: Prevent bad count for tracing_cpumask_write
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57946
- virtio-blk: don't keep queue frozen during system suspend
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-57807
- scsi: megaraid_sas: Fix for a potential deadlock
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56767
- dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
* Noble update: upstream stable patchset 2025-03-22 (LP: #2103869) //
CVE-2024-56769
- media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266)
- usb: dwc2: gadget: Don't write invalid mapped sg entries into dma_desc with
iommu enabled
- PCI: vmd: Create domain symlink before pci_bus_add_devices()
- PCI: Add ACS quirk for Broadcom BCM5760X NIC
- usb: cdns3-ti: Add workaround for Errata i2409
- MIPS: Loongson64: DTS: Fix msi node for ls7a
- ASoC: Intel: sof_sdw: fix jack detection on ADL-N variant RVP
- ASoC: Intel: sof_sdw: add quirk for Dell SKU 0B8C
- usb: cdns3: Add quirk flag to enable suspend residency
- platform/x86: p2sb: Make p2sb_get_devfn() return void
- p2sb: Factor out p2sb_read_from_cache()
- p2sb: Introduce the global flag p2sb_hidden_by_bios
- p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
- p2sb: Do not scan and remove the P2SB device when it is unhidden
- i2c: pnx: Fix timeout in wait functions
- xfs: fix the contact address for the sysfs ABI documentation
- xfs: verify buffer, inode, and dquot items every tx commit
- xfs: use consistent uid/gid when grabbing dquots for inodes
- xfs: declare xfs_file.c symbols in xfs_file.h
- xfs: create a new helper to return a file's allocation unit
- xfs: Fix xfs_flush_unmap_range() range for RT
- xfs: Fix xfs_prepare_shift() range for RT
- xfs: convert comma to semicolon
- xfs: fix file_path handling in tracepoints
- xfs: remove unused parameter in macro XFS_DQUOT_LOGRES
- xfs: attr forks require attr, not attr2
- xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set
- xfs: Fix the owner setting issue for rmap query in xfs fsmap
- xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code
- xfs: take m_growlock when running growfsrt
- xfs: reset rootdir extent size hint after growfsrt
- tools: hv: change permissions of NetworkManager configuration file
- cxl/pci: Fix potential bogus return value upon successful probing
- cxl/region: Fix region creation for greater than x2 switches
- net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
- ionic: use ee->offset when returning sprom data
- net: renesas: rswitch: rework ts tags management
- net: hinic: Fix cleanup in create_rxqs/txqs()
- net: ethernet: bgmac-platform: fix an OF node reference leak
- ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
- netfilter: ipset: Fix for recursive locking warning
- selftests: openvswitch: fix tcpdump execution
- net: mdiobus: fix an OF node reference leak
- mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
- mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
- EDAC/amd64: Simplify ECC check on unified memory controllers
- chelsio/chtls: prevent potential integer overflow on 32bit
- i2c: riic: Always round-up when calculating bus period
- efivarfs: Fix error on non-existent file
- hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
- USB: serial: option: add TCL IK512 MBIM & ECM
- USB: serial: option: add MeiG Smart SLM770A
- USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
- USB: serial: option: add MediaTek T7XX compositions
- USB: serial: option: add Telit FE910C04 rmnet compositions
- thunderbolt: Improve redrive mode handling
- drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
- i915/guc: Reset engine utilization buffer before registration
- i915/guc: Ensure busyness counter increases motonically
- i915/guc: Accumulate active runtime on gt reset
- hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
Registers
- hwmon: (tmp513) Fix Current Register value interpretation
- hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
Registers
- zram: refuse to use zero sized block device as backing device
- zram: fix uninitialized ZRAM not releasing backing device
- zram: fix potential UAF of zram table
- vmalloc: fix accounting with i915
- btrfs: tree-checker: reject inline extent items with 0 ref count
- smb: client: fix TCP timers deadlock after rmmod
- tracing: Fix test_event_printk() to process entire print argument
- tracing: Add missing helper functions in event pointer dereference check
- tracing: Add "%s" check in test_event_printk()
- tracing: Have process_string() also allow arrays
- selftests/memfd: run sysctl tests when PID namespace support is enabled
- selftests/bpf: Use asm constraint "m" for LoongArch
- io_uring: Fix registered ring file refcount leak
- NFS/pnfs: Fix a live lock between recalled layouts and layoutget
- of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
- of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
- nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
- udmabuf: also check for F_SEAL_FUTURE_WRITE
- of: Fix error path in of_parse_phandle_with_args_map()
- of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
- ceph: validate snapdirname option length when mounting
- ceph: improve error handling and short/overflow-read logic in
__ceph_sync_read()
- ceph: fix memory leaks in __ceph_sync_read()
- epoll: Add synchronous wakeup support for ep_poll_callback
- io_uring/rw: avoid punting to io-wq directly
- drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
- xfs: sb_spino_align is not verified
- xfs: fix sparse inode limits on runt AG
- xfs: fix sb_spino_align checks for large fsblock sizes
- xfs: fix zero byte checking in the superblock scrubber
- netdev: fix repeated netlink messages in queue dump
- team: Fix feature exposure when no ports are present
- can: m_can: fix missed interrupts with m_can_pci
- netdev-genl: avoid empty messages in queue dump
- KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
- KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable
- net: mctp: handle skb cleanup on sock_queue failures
- xhci: retry Stop Endpoint on buggy NEC controllers
- usb: xhci: Limit Stop Endpoint retries
- usb: xhci: Avoid queuing redundant Stop Endpoint commands
- xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
- thunderbolt: Add support for Intel Panther Lake-M/P
- thunderbolt: Don't display nvm_version unless upgrade supported
- drm/panel: st7701: Add prepare_prev_first flag to drm_panel
- drm/panel: synaptics-r63353: Fix regulator unbalance
- drm/amdgpu/nbio7.11: fix IP version check
- drm/amdgpu/nbio7.7: fix IP version check
- fgraph: Still initialize idle shadow stacks when starting
- x86/hyperv: Fix hv tsc page based sched_clock for hibernation
- ocfs2: fix the space leak in LA when releasing LA
- of: property: fw_devlink: Do not use interrupt-parent directly
- of: address: Preserve the flags portion on 1:1 dma-ranges mapping
- Upstream stable to v6.6.68, v6.12.7
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56710
- ceph: fix memory leak in ceph_direct_read_write()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-53685
- ceph: give up on paths longer than PATH_MAX
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-54193
- accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-54455
- accel/ivpu: Fix general protection fault in ivpu_bo_list()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-53690
- nilfs2: prevent use of deleted inode
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56709
- io_uring: check if iowq is killed before queuing
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-55881
- KVM: x86: Play nice with protected guests in complete_hypercall_exit()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-55916
- Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56369
- drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56372
- net: tun: fix tun_napi_alloc_frags()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56715
- ionic: Fix netdev notifier unregister on failure
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56716
- netdevsim: prevent bad user input in nsim_dev_health_break_write()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56717
- net: mscc: ocelot: fix incorrect IFH SRC_PORT field in
ocelot_ifh_set_basic()
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-57791
- net/smc: check return value of sock_recvmsg when draining clc data
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-47408
- net/smc: check smcd_v2_ext_offset when receiving proposal msg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-49568
- net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-49571
- net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
msg
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-56718
- net/smc: protect link down work from execute after lgr freed
* Noble update: upstream stable patchset 2025-03-14 (LP: #2102266) //
CVE-2024-41013
- xfs: don't walk off the end of a directory data block
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181)
- perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
- ksmbd: fix racy issue from session lookup and expire
- splice: do not checksum AF_UNIX sockets
- tcp: check space before adding MPTCP SYN options
- ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
- usb: host: max3421-hcd: Correctly abort a USB request.
- ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
- usb: dwc2: Fix HCD resume
- usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
- usb: dwc2: Fix HCD port connection race
- scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
- usb: gadget: midi2: Fix interpretation of is_midi1 bits
- usb: ehci-hcd: fix call balance of clocks handling routines
- usb: typec: anx7411: fix fwnode_handle reference leak
- usb: typec: anx7411: fix OF node reference leaks in
anx7411_typec_switch_probe()
- usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
- drm/i915: Fix memory leak by correcting cache object name in error handler
- xfs: update btree keys correctly when _insrec splits an inode root block
- xfs: don't drop errno values when we fail to ficlone the entire range
- xfs: return from xfs_symlink_verify early on V4 filesystems
- xfs: fix scrub tracepoints when inode-rooted btrees are involved
- xfs: only run precommits once per transaction object
- bpf: Check size for BTF-based ctx access of pointer members
- bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
- bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
- bpf, sockmap: Fix update element with same
- wifi: mac80211: init cnt before accessing elem in
ieee80211_copy_mbssid_beacon
- wifi: mac80211: clean up 'ret' in sta_link_apply_parameters()
- wifi: mac80211: fix station NSS capability initialization order
- batman-adv: Do not send uninitialized TT changes
- batman-adv: Remove uninitialized data in full table TT response
- batman-adv: Do not let TT changes list grows indefinitely
- wifi: cfg80211: sme: init n_channels before channels[] access
- selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
- selftests: mlxsw: sharedbuffer: Remove duplicate test cases
- selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
- ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
- net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
- net: mscc: ocelot: improve handling of TX timestamp for unknown skb
- net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-
safe
- net: mscc: ocelot: be resilient to loss of PTP packets during transmission
- net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
- spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
- net: sparx5: fix FDMA performance issue
- net: sparx5: fix the maximum frame length register
- ACPI: resource: Fix memory resource type union access
- cxgb4: use port number to set mac addr
- qca_spi: Fix clock speed for multiple QCA7000
- qca_spi: Make driver probing reliable
- ASoC: amd: yc: Fix the wrong return value
- Documentation: PM: Clarify pm_runtime_resume_and_get() return value
- net: renesas: rswitch: fix race window between tx start and complete
- net: renesas: rswitch: fix leaked pointer on error path
- net: renesas: rswitch: handle stop vs interrupt race
- net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
- netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
- bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
- team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
- ACPICA: events/evxfregn: don't release the ContextMutex that was never
acquired
- Bluetooth: iso: Fix recursive locking warning
- Bluetooth: SCO: Add support for 16 bits transparent voice setting
- net: renesas: rswitch: fix initial MPIC register setting
- net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
- blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
- kselftest/arm64: abi: fix SVCR detection
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
- selftests/bpf: remove use of __xlated()
- xen/netfront: fix crash when removing device
- x86: make get_cpu_vendor() accessible from Xen code
- objtool/x86: allow syscall instruction
- x86/static-call: provide a way to do very early static-call updates
- x86/xen: don't do PV iret hypercall through hypercall page
- x86/xen: add central hypercall functions
- x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
- x86/xen: add FRAME_END to xen_hypercall_hvm()
- x86/xen: use new hypercall functions instead of hypercall page
- x86/xen: remove hypercall page
- x86/static-call: fix 32-bit build
- x86/asm: Make serialize() always_inline
- x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
- serial: sh-sci: Check if TX data was written to device in .tx_empty()
- gpio: ljca: Initialize num before accessing item in ljca_gpio_config
- ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
- drm/amdkfd: Use device based logging for errors
- drm/amdkfd: pause autosuspend when creating pdd
- drm/amdkfd: fixed page fault when enable MES shader debugger
- drm/i915/color: Stop using non-posted DSB writes for legacy LUT
- drm/amd/pm: Set SMU v13.0.7 default workload type
- xfs: return a 64-bit block count from xfs_btree_count_blocks
- perf machine: Initialize machine->env to address a segfault
- bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
- net: renesas: rswitch: fix possible early skb release
- Bluetooth: Improve setsockopt() handling of malformed user input
- libperf: evlist: Fix --cpu argument on hybrid platform
- selftests: netfilter: Stabilize rpath.sh
- net, team, bonding: Add netdev_base_features helper
- bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
- team: Fix initial vlan_feature set in __team_compute_features
- drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
- Upstream stable to v6.6.67, v6.12.6
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56652
- drm/xe/reg_sr: Remove register pool
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-54460
- Bluetooth: iso: Fix circular lock in iso_listen_bis
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-57879
- Bluetooth: iso: Always release hdev at the end of iso_listen_bis
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56656
- bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-53125
- bpf: sync_linked_regs() must preserve subreg_def
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56654
- Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56770
- net/sched: netem: account for backlog updates from child qdisc
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-54683
- netfilter: IDLETIMER: Fix for possible ABBA deadlock
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-55639
- net: renesas: rswitch: avoid use-after-put for a device tree node
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56657
- ALSA: control: Avoid WARN() for symlink errors
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56659
- net: lapb: increase LAPB_HEADER_LEN
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56660
- net/mlx5: DR, prevent potential error pointer dereference
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56662
- acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56664
- bpf, sockmap: Fix race between element replace and close()
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56667
- drm/i915: Fix NULL pointer dereference in capture_engine
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56670
- usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
accessing null pointer
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-53687
- riscv: Fix IPIs usage in kfence_protect_page()
* Noble update: upstream stable patchset 2025-03-13 (LP: #2102181) //
CVE-2024-56675
- bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
* Noble update: upstream stable patchset 2025-02-04 (LP: #2097393)
- selftests: net: Remove executable bits from library scripts
* CVE-2024-56653
- Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
[ Ubuntu: 6.8.0-58.60 ]
* noble/linux: 6.8.0-58.60 -proposed tracker (LP: #2102529)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.03.17)
* wdat_wdt.ko should be pulled in by linux-image-virtual (LP: #2098554)
- [Packaging]: wdat_wdt.ko is moved from "linux-modules-extra-*-generic" to
"linux-modules-*-generic"
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118)
- openrisc: Use asm-generic's version of fix_to_virt() & virt_to_fix()
- iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
- watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
- watchdog: apple: Actually flush writes after requesting watchdog restart
- watchdog: mediatek: Make sure system reset gets asserted in
mtk_wdt_restart()
- can: gs_usb: add VID/PID for Xylanta SAINT3 product family
- can: gs_usb: add usb endpoint address detection at driver probe step
- can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
- can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
- can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
- can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
- can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
- can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
- can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
- can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- selftests: hid: fix typo and exit code
- ptp: Add error handling for adjfine callback in ptp_clock_adjtime
- net/sched: tbf: correct backlog statistic for GSO packets
- net: hsr: fix fill_frame_info() regression vs VLAN packets
- platform/x86: asus-wmi: add support for vivobook fan profiles
- platform/x86: asus-wmi: Fix inconsistent use of thermal policies
- platform/x86: asus-wmi: Ignore return value when writing thermal policy
- net/smc: mark optional smcd_ops and check for support when called
- net/smc: add operations to merge sndbuf with peer DMB
- net/smc: {at|de}tach sndbuf to peer DMB if supported
- net/smc: refactoring initialization of smc sock
- net/qed: allow old cards not supporting "num_images" to work
- ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
- ixgbe: downgrade logging of unsupported VF API version to debug
- net: sched: fix erspan_opt settings in cls_flower
- netfilter: nft_set_hash: skip duplicated elements pending gc run
- netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
- ethtool: Fix wrong mod state in case of verbose and no_mask bitset
- mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
- mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
- net/mlx5e: Remove workaround to avoid syndrome for internal port
- xhci: Allow RPM on the USB controller (1022:43f7) by default
- gpio: grgpio: use a helper variable to store the address of ofdev->dev
- usb: dwc3: gadget: Rewrite endpoint allocation flow
- usb: dwc3: ep0: Don't reset resource alloc flag (including ep0)
- usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
- mmc: mtk-sd: use devm_mmc_alloc_host
- mmc: mtk-sd: Fix error handle of probe function
- mmc: mtk-sd: fix devm_clk_get_optional usage
- mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
- zram: do not mark idle slots that cannot be idle
- zram: clear IDLE flag in mark_idle()
- powerpc/vdso: Refactor CFLAGS for CVDSO build
- powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
- ntp: Remove invalid cast in time offset math
- driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link
- driver core: fw_devlink: Stop trying to optimize cycle detection logic
- drivers: core: fix device leak in __fw_devlink_relax_cycles()
- i3c: master: support to adjust first broadcast address speed
- i3c: master: svc: use slow speed for first broadcast address
- i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
- i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
- i3c: master: Extend address status bit to 4 and add
I3C_ADDR_SLOT_EXT_DESIRED
- i3c: master: Fix dynamic address leak when 'assigned-address' is present
- i3c: master: Fix missing 'ret' assignment in set_speed()
- drm/bridge: it6505: update usleep_range for RC circuit charge time
- drm/bridge: it6505: Fix inverted reset polarity
- scsi: ufs: core: Always initialize the UIC done completion
- scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
- bpf, vsock: Fix poll() missing a queue
- bpf, vsock: Invoke proto::close on close()
- xsk: always clear DMA mapping information when unmapping the pool
- bpftool: fix potential NULL pointer dereferencing in prog_dump()
- drm/sti: Add __iomem for mixer_dbg_mxn's parameter
- ALSA: seq: ump: Use automatic cleanup of kfree()
- ALSA: ump: Update substream name from assigned FB names
- ALSA: seq: ump: Fix seq port updates per FB info notify
- ALSA: usb-audio: Notify xrun for low-latency mode
- tools: Override makefile ARCH variable if defined, but empty
- ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
- ASoC: SOF: ipc3-topology: fix resource leaks in
sof_ipc3_widget_setup_comp_dai()
- bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
- scsi: scsi_debug: Fix hrtimer support for ndelay
- ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
- drm/v3d: Enable Performance Counters before clearing them
- scatterlist: fix incorrect func name in kernel-doc
- iio: magnetometer: yas530: use signed integer type for clamp limits
- bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
- bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
- bpf: Handle in-place update for full LPM trie correctly
- bpf: Fix exact match conditions in trie_get_next_key()
- x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
- watchdog: rti: of: honor timeout-sec property
- can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
- tracing: Fix cmp_entries_dup() to respect sort() comparison rules
- arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit
ASIDs
- ALSA: usb-audio: add mixer mapping for Corsair HS80
- ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
- ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
- scsi: qla2xxx: Fix abort in bsg timeout
- scsi: qla2xxx: Fix NVMe and NPIV connect issue
- scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
- scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
- scsi: ufs: core: Add missing post notify for power mode change
- fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
- drm/dp_mst: Verify request type in the corresponding down message reply
- drm/amdgpu/hdp5.2: do a posting read when flushing HDP
- modpost: Add .irqentry.text to OTHER_SECTIONS
- x86/kexec: Restore GDT on return from ::preserve_context kexec
- dma-buf: fix dma_fence_array_signaled v4
- dma-fence: Fix reference leak on fence merge failure path
- dma-fence: Use kernel's sort for merging fences
- regmap: detach regmap from dev on regmap_exit
- mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10
tablet
- mmc: core: Further prevent card detect during shutdown
- ocfs2: update seq_file index in ocfs2_dlm_seq_next
- lib: stackinit: hide never-taken branch from compiler
- kasan: make report_lock a raw spinlock
- x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
- epoll: annotate racy check
- kselftest/arm64: Log fp-stress child startup errors to stdout
- btrfs: avoid unnecessary device path update for the same device
- btrfs: do not clear read-only when adding sprout device
- kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
- hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
- ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
- perf/x86/amd: Warn only on new bits set
- spi: spi-fsl-lpspi: Adjust type of scldiv
- HID: add per device quirk to force bind to hid-generic
- media: uvcvideo: RealSense D421 Depth module metadata
- media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
- media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
- mmc: core: Add SD card quirk for broken poweroff notification
- mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
- regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
- selftests/resctrl: Protect against array overflow when reading strings
- drm/vc4: hdmi: Avoid log spam for audio start failure
- drm/vc4: hvs: Set AXI panic modes for the HVS
- drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
- drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
- drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
- drm/bridge: it6505: Enable module autoloading
- drm/mcde: Enable module autoloading
- drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
- drm/display: Fix building with GCC 15
- ALSA: hda: Use own quirk lookup helper
- ALSA: hda/conexant: Use the new codec SSID matching
- r8169: don't apply UDP padding quirk on RTL8126A
- samples/bpf: Fix a resource leak
- net: fec_mpc52xx_phy: Use %pa to format resource_size_t
- net: ethernet: fs_enet: Use %pa to format resource_size_t
- net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
- Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
- wifi: ath5k: add PCI ID for SX76X
- wifi: ath5k: add PCI ID for Arcadyan devices
- fanotify: allow reporting errors on failure to open fd
- drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
- net: sfp: change quirks for Alcatel Lucent G-010S-P
- net: stmmac: Programming sequence for VLAN packets with split header
- drm/sched: memset() 'job' in drm_sched_job_init()
- amdgpu/uvd: get ring reference from rq scheduler
- drm/amdgpu: don't access invalid sched
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
- drm/amdgpu: Dereference the ATCS ACPI buffer
- netlink: specs: Add missing bitset attrs to ethtool spec
- drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
- fsl/fman: Validate cell-index value obtained from Device Tree
- drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
- ALSA: usb-audio: Make mic volume workarounds globally applicable
- wifi: ipw2x00: libipw_rx_any(): fix bad alignment
- dsa: qca8k: Use nested lock to avoid splat
- Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
- Bluetooth: Add new quirks for ATS2851
- Bluetooth: Support new quirks for ATS2851
- Bluetooth: Set quirks for ATS2851
- ASoC: hdmi-codec: reorder channel allocation list
- rocker: fix link status detection in rocker_carrier_init()
- net/neighbor: clear error in case strict check is not set
- netpoll: Use rcu_access_pointer() in __netpoll_setup
- pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
- tracing/ftrace: disable preemption in syscall probe
- tracing: Use atomic64_inc_return() in trace_clock_counter()
- tools/rtla: fix collision with glibc sched_attr/sched_set_attr
- rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
- scsi: ufs: core: Make DMA mask configuration more flexible
- scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
- clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
- clk: qcom: rpmh: add support for SAR2130P
- clk: qcom: tcsrcc-sm8550: add SAR2130P support
- scsi: st: Don't modify unknown block number in MTIOCGET
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
- pinctrl: qcom-pmic-gpio: add support for PM8937
- pinctrl: qcom: spmi-mpp: Add PM8937 compatible
- thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
- nvdimm: rectify the illogical code within nd_dax_probe()
- smb: client: memcpy() with surrounding object base address
- verification/dot2: Improve dot parser robustness
- KMSAN: uninit-value in inode_go_dump (5)
- PCI: qcom: Add support for IPQ9574
- PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
- PCI: vmd: Set devices to D0 before enabling PM L1 Substates
- PCI: Detect and trust built-in Thunderbolt chips
- PCI: Add 'reset_subordinate' to reset hierarchy below bridge
- PCI: Add ACS quirk for Wangxun FF5xxx NICs
- f2fs: print message if fscorrupted was found in f2fs_new_node_page()
- ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
- ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
- fs/ntfs3: Fix case when unmarked clusters intersect with zone
- usb: chipidea: udc: handle USB Error Interrupt if IOC not set
- iio: light: ltr501: Add LTER0303 to the supported devices
- ASoC: amd: yc: fix internal mic on Redmi G 2022
- drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
- drm/amdgpu/vcn: reset fw_shared under SRIOV
- ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6
21M1CTO1WW
- misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
- rtc: cmos: avoid taking rtc_lock for extended period of time
- serial: 8250_dw: Add Sophgo SG2044 quirk
- smb: client: don't try following DFS links in cifs_tree_connect()
- setlocalversion: work around "git describe" performance
- sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
- sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning
busy
- sched/core: Prevent wakeup of ksoftirqd during idle load balance
- btrfs: fix missing snapshot drew unlock when root is dead during swap
activation
- clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
- tracing/eprobe: Fix to release eprobe when failed to add dyn_event
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
- Revert "unicode: Don't special case ignorable code points"
- vfio/mlx5: Align the page tracking max message size with the device
capability
- selftests/ftrace: adjust offset for kprobe syntax error test
- KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from
kvm_faultin_pfn()
- jffs2: Fix rtime decompressor
- mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
- iio: invensense: fix multiple odr switch when FIFO is off
- ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
- ALSA: hda: Fix build error without CONFIG_SND_DEBUG
- usb: dwc3: ep0: Don't reset resource alloc flag
- ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
- platform/x86: asus-wmi: Fix thermal profile initialization
- i3c: master: svc: fix possible assignment of the same address to two devices
- btrfs: drop unused parameter file_offset from
btrfs_encoded_read_regular_fill_pages()
- md/raid5: Wait sync io to finish before changing group cnt
- media: platform: rga: fix 32-bit DMA limitation
- net: phy: dp83869: fix status reporting for 1000base-x autonegotiation
- remoteproc: qcom_q6v5_pas: disable auto boot for wpss
- mtd: spinand: winbond: Fix 512GW and 02JW OOB layout
- PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
- dt-bindings: net: fec: add pps channel property
- net: fec: refactor PPS channel configuration
- net: fec: make PPS channel configurable
- drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs
- drm/xe/migrate: use XE_BO_FLAG_PAGETABLE
- drm/amd: Add some missing straps from NBIO 7.11.0
- drm/amd: Fix initialization mistake for NBIO 7.11 devices
- drm/amdgpu/pm: Don't use OD table on Arcturus
- drm/amd/pm: Remove arcturus min power limit
- drm/amd/display: update pipe selection policy to check head pipe
- drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto
- Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs"
- ipv6: avoid possible NULL deref in modify_prefix_route()
- net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on
LAN7800/7850
- ice: fix PHY Clock Recovery availability check
- vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
- vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
- mmc: core Convert UNSTUFF_BITS macro to inline function
- mmc: sd: SDUC Support Recognition
- mmc: core: Adjust ACMD22 to SDUC
- mmc: core: Use GFP_NOIO in ACMD22
- f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
- f2fs: fix to adjust appropriate length for fiemap
- f2fs: fix to requery extent which cross boundary of inquiry
- drm/amd/display: calculate final viewport before TAP optimization
- drm/amd/display: Ignore scalar validation failure if pipe is phantom
- pmdomain: core: Add missing put_device()
- pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
- pmdomain: core: add dummy release function to genpd device
- bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
- bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
- LoongArch: KVM: Protect kvm_check_requests() with SRCU
- net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
- ALSA: usb-audio: Add extra PID for RME Digiface USB
- ALSA: hda/realtek: fix micmute LEDs don't work on HP Laptops
- scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
- io_uring/cmd: document some uring_cmd related helpers
- io_uring: Change res2 parameter type in io_uring_cmd_done
- selftests/damon: add _damon_sysfs.py to TEST_FILES
- drm/amd/display: Correct prefetch calculation
- drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
- drm/amdgpu/hdp6.0: do a posting read when flushing HDP
- drm/amdgpu/hdp4.0: do a posting read when flushing HDP
- drm/amdgpu/hdp5.0: do a posting read when flushing HDP
- x86/cpu/intel: Switch to new Intel CPU model defines
- x86/cpu/intel: Drop stray FAM6 check with new Intel CPU model defines
- x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
- mm/damon: fix order of arguments in damos_before_apply tracepoint
- mm: respect mmap hint address when aligning for THP
- scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
- memblock: allow zero threshold in validate_numa_converage()
- s390/pci: Sort PCI functions prior to creating virtual busses
- s390/pci: Use topology ID for multi-function devices
- s390/pci: Ignore RID for isolated VFs
- s390/pci: Fix SR-IOV for PFs initially in standby
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
- s390/pci: Fix handling of isolated VFs
- ext4: partial zero eof block on unaligned inode size extension
- crypto: ecdsa - Convert byte arrays with key coordinates to digits
- crypto: ecc - Prevent ecc_digits_from_bytes from reading too many bytes
- crypto: ecdsa - Rename keylen to bufsize where necessary
- crypto: ecdsa - Use ecc_digits_from_bytes to convert signature
- crypto: ecdsa - Avoid signed integer overflow on signature decoding
- ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
- cleanup: Adjust scoped_guard() macros to avoid potential warning
- gpio: free irqs that are still requested when the chip is being removed
- media: uvcvideo: Force UVC version to 1.0a for 0408:4035
- media: uvcvideo: Force UVC version to 1.0a for 0408:4033
- wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
- drm/amd/display: skip disable CRTC in seemless bootup case
- drm/amd/display: disable SG displays on cyan skillfish
- wifi: mac80211: Add non-atomic station iterator
- accel/qaic: Add AIC080 support
- mptcp: annotate data-races around subflow->fully_established
- net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
- drm/amd/display: Prune Invalid Modes For HDMI Output
- i2c: i801: Add support for Intel Arrow Lake-H
- i2c: i801: Add support for Intel Panther Lake
- Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
- Bluetooth: btusb: Add new VID/PID 13d3/3602 for MT7925
- Bluetooth: btusb: Add USB HW IDs for MT7921/MT7922/MT7925
- Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
- Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
- Bluetooth: btusb: Add 3 HWIDs for MT7925
- rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
- ring-buffer: Correct stale comments related to non-consuming readers
- ring-buffer: Limit time with disabled interrupts in rb_check_pages()
- scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up
FDMI
- scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback
- clk: qcom: clk-alpha-pll: Add support for zonda ole pll configure
- clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
- mailbox: pcc: Check before sending MCTP PCC response ACK
- remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
- remoteproc: qcom: pas: enable SAR2130P audio DSP support
- fs/ntfs3: Implement fallocate for compressed files
- fs/ntfs3: Fix warning in ni_fiemap
- regulator: qcom-rpmh: Update ranges for FTSMPS525
- usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
- usb: chipidea: udc: limit usb request length to max 16KB
- usb: chipidea: udc: create bounce buffer for problem sglist entries if
possible
- iio: adc: ad7192: Convert from of specific to fwnode property handling
- iio: adc: ad7192: properly check spi_get_device_match_data()
- usb: typec: ucsi: add callback for connector status updates
- usb: typec: ucsi: glink: move GPIO reading into connector_status callback
- usb: typec: ucsi: add update_connector callback
- usb: typec: ucsi: glink: set orientation aware if supported
- usb: typec: ucsi: glink: be more precise on orientation-aware ports
- usb: typec: ucsi: glink: fix off-by-one in connector_status
- usb: typec: ucsi: Set orientation as none when connector is unplugged
- nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
- Revert "nvme: make keep-alive synchronous operation"
- irqchip/gic-v3-its: Avoid explicit cpumask allocation on stack
- irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
- [Config] updateconfigs for HISILICON_ERRATUM_162100801
- drm/amd/display: Add option to retrieve detile buffer size
- btrfs: drop unused parameter options from open_ctree()
- btrfs: drop unused parameter data from btrfs_fill_super()
- btrfs: fix mount failure due to remount races
- net/mlx5: unique names for per device caches
- s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
- ALSA: hda/realtek: Fix spelling mistake "Firelfy" -> "Firefly"
- softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
- Upstream stable to v6.6.65, v6.6.66, v6.12.4, v6.12.5
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-41932
- sched: fix warning in sched_setaffinity
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57872
- scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56588
- scsi: hisi_sas: Create all dump files during debugfs initialization
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47794
- bpf: Prevent tailcall infinite loop caused by freplace
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56599
- wifi: ath10k: avoid NULL pointer error during sdio remove
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56607
- wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56608
- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56609
- wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56782
- ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48876
- stackdepot: fix stack_depot_save_flags() in NMI context
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56620
- scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56621
- scsi: ufs: core: Cancel RTC work during ufshcd_remove()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-49569
- nvme-rdma: unquiesce admin_q before destroy it
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56632
- nvme-tcp: fix the memleak while create new ctrl failed
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56647
- net: Fix icmp host relookup triggering ip_rt_bug
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56775
- drm/amd/display: Fix handling of plane refcount
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56561
- PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56550
- s390/stacktrace: Use break instead of return statement
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56771
- mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56568
- iommu/arm-smmu: Defer probe of clients after smmu device bound
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56772
- kunit: string-stream: Fix a UAF bug in kunit_init_suite()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56773
- kunit: Fix potential null dereference in kunit_device_driver_test()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56580
- media: qcom: camss: fix error path on configuration of power domains
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56583
- sched/deadline: Fix warning in migrate_enable for boosted tasks
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56611
- mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a
MM
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56613
- sched/numa: fix memory leak due to the overwritten vma->numab_state
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56584
- io_uring/tctx: work around xa_store() allocation error issue
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56781
- powerpc/prom_init: Fixup missing powermac #size-cells
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56785
- MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56585
- LoongArch: Fix sleeping in atomic context for PREEMPT_RT
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-41935
- f2fs: fix to shrink read extent node in batches
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-43098
- i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to
avoid deadlock
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-45828
- i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56586
- f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56587
- leds: class: Protect brightness_show() with led_cdev->led_access mutex
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56786
- bpf: put bpf_link's program when link is safe to be deallocated
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47141
- pinmux: Use sequential access to access desc->pinmux data
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56589
- scsi: hisi_sas: Add cond_resched() for no forced preemption model
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56590
- Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56592
- bpf: Call free_htab_elem() after htab_unlock_bucket()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56593
- wifi: brcmfmac: Fix oops due to NULL pointer dereference in
brcmf_sdiod_sglist_rw()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56594
- drm/amdgpu: set the right AMDGPU sg segment limitation
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57843
- virtio-net: fix overflow inside virtnet_rq_alloc
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56596
- jfs: fix array-index-out-of-bounds in jfs_readdir
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47143
- dma-debug: fix a possible deadlock on radix_lock
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56601
- net: inet: do not leave a dangling sk pointer in inet_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56602
- net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56603
- net: af_can: do not leave a dangling sk pointer in can_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56604
- Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56605
- Bluetooth: L2CAP: do not leave dangling sk pointer on error in
l2cap_sock_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56606
- af_packet: avoid erroring out after sock_init_data() in packet_create()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-47809
- dlm: fix possible lkb_resource null dereference
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48873
- wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
* Missing support for USB-C Apple Magic Trackpad (LP: #2098063) // Noble
update: upstream stable patchset 2025-03-12 (LP: #2102118)
- HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56787
- soc: imx8m: Probe the SoC driver as platform driver
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56610
- kcsan: Turn report_filterlist_lock into a raw_spinlock
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48875
- btrfs: don't take dev_replace rwsem on task already holding it
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57849
- s390/cpum_sf: Handle CPU hotplug remove during sampling
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57876
- drm/dp_mst: Fix resetting msg rx state after topology removal
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56616
- drm/dp_mst: Fix MST sideband message body length check
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-48881
- bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56619
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56622
- scsi: ufs: core: sysfs: Prevent div by zero
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56623
- scsi: qla2xxx: Fix use after free on unload
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-57874
- arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56625
- can: dev: can_set_termination(): allow sleeping GPIOs
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56626
- ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56628
- LoongArch: Add architecture specific huge_pte_clear()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56629
- HID: wacom: fix when get product name maybe null pointer
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56631
- scsi: sg: Fix slab-use-after-free read in sg_release()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-50051
- spi: mpc52xx: Add cancel_work_sync before module remove
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56633
- tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56565
- f2fs: fix to drop all discards after creating snapshot on lvm device
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56634
- gpio: grgpio: Add NULL check in grgpio_probe
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56635
- net: avoid potential UAF in default_operstate()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56636
- geneve: do not assume mac header is set in geneve_xmit_skb()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56637
- netfilter: ipset: Hold module reference while requesting a module
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56638
- netfilter: nft_inner: incorrect percpu area handling under softirq
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-52332
- igb: Fix potential invalid memory access in igb_init_module()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56640
- net/smc: fix LGR and link use-after-free issue
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56641
- net/smc: initialize close_work early to avoid warning
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56643
- dccp: Fix memory leak in dccp_feat_change_recv
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56644
- net/ipv6: release expired exception dst cached in socket
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56645
- can: j1939: j1939_session_new(): fix skb reference counting
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56648
- net: hsr: avoid potential out-of-bound access in fill_frame_info()
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56649
- net: enetc: Do not configure preemptible TCs if SIs do not support
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56783
- netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
* Noble update: upstream stable patchset 2025-03-12 (LP: #2102118) //
CVE-2024-56650
- netfilter: x_tables: fix LED ID check in led_tg_check()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915)
- wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings
- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
- ASoC: Intel: sst: Support LPE0F28 ACPI HID
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
- mac80211: fix user-power when emulating chanctx
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
- bpf: fix filed access without lock
- net: usb: qmi_wwan: add Quectel RG650V
- soc: qcom: Add check devm_kasprintf() returned value
- firmware: arm_scmi: Reject clear channel request on A2P
- regulator: rk808: Add apply_bit for BUCK3 on RK809
- platform/x86: dell-smbios-base: Extends support to Alienware products
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
- ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
- tools/lib/thermal: Remove the thermal.h soft link when doing make clean
- can: j1939: fix error in J1939 documentation.
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect
fan speed
- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less
strict
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
- LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
- ARM: 9420/1: smp: Fix SMP for xip kernels
- ipmr: Fix access to mfc_cache_list without lock held
- mptcp: fix possible integer overflow in mptcp_reset_tout_timer
- arm64: probes: Disable kprobes/uprobes on MOPS instructions
- kselftest/arm64: mte: fix printf type warnings about __u64
- kselftest/arm64: mte: fix printf type warnings about longs
- s390/cio: Do not unregister the subchannel based on DNV
- s390/pageattr: Implement missing kernel_page_present()
- ext4: avoid remount errors with 'abort' mount option
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT
- m68k: mvme147: Fix SCSI controller IRQ numbers
- m68k: mvme147: Reinstate early console
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
- cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
- block: fix bio_split_rw_at to take zone_write_granularity into account
- s390/syscalls: Avoid creation of arch/arch/ directory
- ext4: remove calls to to set/clear the folio error flag
- ext4: pipeline buffer reads in mext_page_mkuptodate()
- ext4: remove array of buffer_heads from mext_page_mkuptodate()
- ext4: fix race in buffer_head read fault injection
- nvme-pci: reverse request order in nvme_queue_rqs
- virtio_blk: reverse request order in virtio_queue_rqs
- crypto: qat - remove check after debugfs_create_dir()
- firmware: google: Unregister driver_info on failure
- crypto: qat - remove faulty arbiter config reset
- thermal: core: Initialize thermal zones before registering them
- EDAC/fsl_ddr: Fix bad bit shift operations
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- crypto: cavium - Fix the if condition to exit loop after timeout
- amd-pstate: Set min_perf to nominal_perf for active mode performance gov
- crypto: hisilicon/qm - disable same error report before resetting
- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
- doc: rcu: update printed dynticks counter bits
- hwmon: (pmbus_core) Allow to hook PMBUS_SMBALERT_MASK
- hwmon: (pmbus/core) clear faults after setting smbalert mask
- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
- ACPI: CPPC: Fix _CPC register setting issue
- crypto: caam - add error check to caam_rsa_set_priv_key_form
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
- rcuscale: Do a proper cleanup if kfree_scale_init() fails
- tools/lib/thermal: Make more generic the command encoding function
- thermal/lib: Fix memory leak on error in thermal_genl_auto()
- x86/unwind/orc: Fix unwind for newly forked tasks
- time: Partially revert cleanup on msecs_to_jiffies() documentation
- time: Fix references to _msecs_to_jiffies() handling of values
- kcsan, seqlock: Support seqcount_latch_t
- kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
- clocksource/drivers:sp804: Make user selectable
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling
- spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
- microblaze: Export xmb_manager functions
- arm64: dts: mt8195: Fix dtbs_check error for mutex node
- arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
- arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
- ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
- mmc: mmc_spi: drop buggy snprintf()
- openrisc: Implement fixmap to fix earlycon
- efi/libstub: fix efi_parse_options() ignoring the default command line
- tpm: fix signed/unsigned bug when checking event logs
- media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
- arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
- arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
- arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
trackpad
- Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
- cgroup/bpf: only cgroup v2 can be attached by bpf programs
- regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
- arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
- pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
- arm64: dts: ti: k3-j7200: use ti,j7200-padconf compatible
- arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
- arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
- arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
- arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
- um: Unconditionally call unflatten_device_tree()
- x86/of: Unconditionally call unflatten_and_copy_device_tree()
- of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
- riscv: Fix wrong usage of __pa() on a fixmap address
- pmdomain: ti-sci: Add missing of_node_put() for args.np
- spi: tegra210-quad: Avoid shift-out-of-bounds
- spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time
- regmap: irq: Set lockdep class for hierarchical IRQ domains
- arm64: dts: renesas: hihope: Drop #sound-dai-cells
- arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
- arm64: dts: mediatek: mt6358: fix dtbs_check error
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
regulators
- selftests/resctrl: Split fill_buf to allow tests finer-grained control
- selftests/resctrl: Refactor fill_buf functions
- selftests/resctrl: Fix memory overflow due to unhandled wraparound
- selftests/resctrl: Protect against array overrun during iMC config parsing
- arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
- platform/x86: panasonic-laptop: Return errno correctly in show callback
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
- drm/vc4: hvs: Don't write gamma luts on 2711
- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
- drm/vc4: hvs: Correct logic on stopping an HVS channel
- drm/omap: Fix possible NULL dereference
- drm/omap: Fix locking in omap_gem_new_dmabuf()
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/v3d: Address race-condition in MMU flush
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
- ASoC: fsl_micfil: fix regmap_write_bits usage
- ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
- drm/bridge: anx7625: Drop EDID cache on bridge power off
- drm/bridge: it6505: Drop EDID cache on bridge power off
- libbpf: Fix expected_attach_type set handling in program load callback
- libbpf: Fix output .symtab byte-order during linking
- bpf: Fix the xdp_adjust_tail sample prog issue
- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
- ice: consistently use q_idx in ice_vc_cfg_qs_msg()
- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
- libbpf: fix sym_is_subprog() logic for weak global subprogs
- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
- libbpf: never interpret subprogs in .text as entry programs
- netdevsim: copy addresses for both in and out paths
- drm/bridge: tc358767: Fix link properties discovery
- selftests/bpf: Fix msg_verify_data in test_sockmap
- selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
- drm: fsl-dcu: enable PIXCLK on LS1021A
- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
- drm/msm/dpu: drop LM_3 / LM_4 on SDM845
- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
- selftests/bpf: fix test_spin_lock_fail.c's global vars usage
- drm/panfrost: Remove unused id_mask from struct panfrost_model
- bpf, arm64: Remove garbage frame for struct_ops trampoline
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/msm/gpu: Check the status of registration to PM QoS
- drm/etnaviv: Request pages from DMA32 zone on addressing_limited
- drm/etnaviv: hold GPU lock across perfmon sampling
- wifi: wfx: Fix error handling in wfx_core_init()
- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
- bpf, bpftool: Fix incorrect disasm pc
- drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
- drm: use ATOMIC64_INIT() for atomic64_t
- netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
- netfilter: nf_tables: must hold rcu read lock while iterating expression
type list
- netfilter: nf_tables: skip transaction if update object is not implemented
- netfilter: nf_tables: must hold rcu read lock while iterating object type
list
- netlink: typographical error in nlmsg_type constants definition
- selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
- selftests/bpf: Fix SENDPAGE data logic in test_sockmap
- selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
- selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
- bpf, sockmap: Several fixes to bpf_msg_push_data
- bpf, sockmap: Fix sk_msg_reset_curr
- sock_diag: add module pointer to "struct sock_diag_handler"
- sock_diag: allow concurrent operations
- sock_diag: allow concurrent operation in sock_diag_rcv_msg()
- net: use unrcu_pointer() helper
- selftests: net: really check for bg process completion
- drm/amdkfd: Fix wrong usage of INIT_WORK()
- bpf: Force uprobe bpf program to always return 0
- net: rfkill: gpio: Add check for clk_enable()
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock
- wireguard: selftests: load nf_conntrack if not present
- cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
- clk: mediatek: drop two dead config options
- [Config] drop COMMON_CLK_MT8195_AUDSYS and COMMON_CLK_MT8195_MSDC
- trace/trace_event_perf: remove duplicate samples on the first tracepoint
event
- pinctrl: zynqmp: drop excess struct member description
- scsi: hisi_sas: Enable all PHYs that are not disabled by user during
controller reset
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
- mfd: da9052-spi: Change read-mask to write-mask
- cpufreq: loongson2: Unregister platform_driver on failure
- powerpc/fadump: Refactor and prepare fadump_cma_init for late init
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
- mtd: rawnand: atmel: Fix possible memory leak
- mtd: rawnand: fix double free in atmel_pmecc_create_user()
- mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in
RD_ANY_REG_OP
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
- RDMA/rxe: Set queue pair cur_qp_state when being queried
- RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
- clk: imx: lpcg-scu: SW workaround for errata (e10858)
- clk: imx: fracn-gppll: correct PLL initialization flow
- clk: imx: fracn-gppll: fix pll power up
- clk: imx: clk-scu: fix clk enable state save and restore
- clk: imx: imx8-acm: Fix return value check in
clk_imx_acm_attach_pm_domains()
- iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
- iommu/vt-d: Fix checks and print in pgtable_walk()
- checkpatch: check for missing Fixes tags
- checkpatch: always parse orig_commit in fixes tag
- mfd: rt5033: Fix missing regmap_del_irq_chip()
- fs/proc/kcore.c: fix coccinelle reported ERROR instances
- scsi: fusion: Remove unused variable 'rc'
- scsi: sg: Enable runtime power management
- x86/tdx: Introduce wrappers to read and write TD metadata
- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
- x86/tdx: Dynamically disable SEPT violations from causing #VEs
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- dax: delete a stale directory pmem
- KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending
doorbells
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
- powerpc/kexec: Fix return of uninitialized variable
- IB/mlx5: Allocate resources just before first QP/SRQ is created
- clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
- clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
- dt-bindings: clock: axi-clkgen: include AXI clk
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock
- arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
- pinctrl: k210: Undef K210_PC_DEFAULT
- smb: cached directories can be more than root file handle
- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
- perf cs-etm: Don't flush when packet_queue fills up
- gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
- gfs2: Replace gfs2_glock_queue_put with gfs2_glock_put_async
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
- gfs2: Allow immediate GLF_VERIFY_DELETE work
- gfs2: Fix unlinked inode cleanup
- perf stat: Close cork_fd when create_perf_stat_counter() failed
- perf stat: Fix affinity memory leaks on error path
- perf trace: Keep exited threads for summary
- perf test attr: Add back missing topdown events
- f2fs: compress: fix inconsistent update of i_blocks in
release_compress_blocks and reserve_compress_blocks
- perf probe: Fix libdw memory leak
- perf probe: Correct demangled symbols in C++ program
- rust: macros: fix documentation of the paste! macro
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
- PCI: cpqphp: Fix PCIBIOS_* return value confusion
- perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
- f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
- f2fs: check curseg->inited before write_sum_page in change_curseg
- f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or
GC_URGENT_MID
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
- PCI: cadence: Set cdns_pcie_host_init() global
- PCI: j721e: Add reset GPIO to struct j721e_pcie
- PCI: j721e: Use T_PERST_CLK_US macro
- PCI: j721e: Add suspend and resume support
- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
- f2fs: fix to avoid forcing direct write to use buffered IO on inline_data
inode
- perf trace: avoid garbage when not printing a trace event's arguments
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
- m68k: coldfire/device.c: only build FEC when HW macros are defined
- perf list: Fix topic and pmu_name argument order
- perf trace: Fix tracing itself, creating feedback loops
- perf trace: Do not lose last events in a race
- perf trace: Avoid garbage when not printing a syscall's arguments
- remoteproc: qcom: pas: add minidump_id to SM8350 resources
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
- remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
- nfsd: restore callback functionality for NFSv4.0
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
- NFSD: Fix nfsd4_shutdown_copy()
- hwmon: (tps23861) Fix reporting of negative temperatures
- vdpa/mlx5: Fix suboptimal range on iotlb iteration
- selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
- gpio: zevio: Add missed label initialisation
- fs_parser: update mount_api doc to match function signature
- LoongArch: Fix build failure with GCC 15 (-std=gnu23)
- LoongArch: BPF: Sign-extend return values
- power: supply: core: Remove might_sleep() from power_supply_put()
- power: supply: bq27xxx: Fix registers of bq27426
- power: supply: rt9471: Fix wrong WDT function regfield declaration
- power: supply: rt9471: Use IC status regfield to report real charger status
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
configuration
- net: microchip: vcap: Add typegroup table terminators in kunit tests
- net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
- net: mdio-ipq4019: add missing error check
- marvell: pxa168_eth: fix call balance of pep->clk handling routines
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
- octeontx2-af: RPM: Fix mismatch in lmac type
- octeontx2-af: RPM: Fix low network performance
- octeontx2-pf: Reset MAC stats during probe
- octeontx2-af: RPM: fix stale RSFEC counters
- octeontx2-af: RPM: fix stale FCFEC counters
- octeontx2-af: Quiesce traffic before NIX block reset
- spi: atmel-quadspi: Fix register name in verbose logging function
- net: hsr: fix hsr_init_sk() vs network/transport headers.
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- bnxt_en: Refactor bnxt_ptp_init()
- bnxt_en: Unregister PTP during PCI shutdown and suspend
- llc: Improve setsockopt() handling of malformed user input
- rxrpc: Improve setsockopt() handling of malformed user input
- tcp: Fix use-after-free of nreq in reqsk_timer_handler().
- ip6mr: fix tables suspicious RCU usage
- ipmr: fix tables suspicious RCU usage
- iio: light: al3010: Fix an error handling path in al3010_probe()
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
- usb: yurex: make waiting on yurex_write interruptible
- USB: chaoskey: fail open after removal
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock
- misc: apds990x: Fix missing pm_runtime_disable()
- counter: stm32-timer-cnt: Add check for clk_enable()
- counter: ti-ecap-capture: Add check for clk_enable()
- ALSA: hda/realtek: Update ALC256 depop procedure
- drm/radeon: add helper rdev_to_drm(rdev)
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
- drm/radeon: Fix spurious unplug event on radeon HDMI
- apparmor: fix 'Do simple duplicate message elimination'
- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
- gfs2: Don't set GLF_LOCK in gfs2_dispose_glock_lru
- gfs2: Remove and replace gfs2_glock_queue_work
- f2fs: fix fiemap failure issue when page size is 16KB
- usb: ehci-spear: fix call balance of sehci clk handling routines
- ALSA: usb-audio: Fix a DMA to stack memory bug
- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
- ext4: fix FS_IOC_GETFSMAP handling
- jfs: xattr: check invalid xattr size more strictly
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5
21MES00B00
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
- perf/x86/intel/pt: Fix buffer full but size is 0 case
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit
- KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
- KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
- fsnotify: fix sending inotify event with unexpected filename
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
- locking/lockdep: Avoid creating new name string literals in
lockdep_set_subclass()
- tools/nolibc: s390: include std.h
- pinctrl: qcom: spmi: fix debugfs drive strength
- dt-bindings: iio: dac: ad3552r: fix maximum spi speed
- exfat: fix uninit-value in __exfat_get_dentry_set
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
- Compiler Attributes: disable __counted_by for clang < 19.1.3
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- ARM: dts: omap36xx: declare 1GHz OPP as turbo again
- wifi: brcmfmac: release 'root' node in all execution paths
- Revert "usb: gadget: composite: fix OS descriptors w_value logic"
- gpio: exar: set value when external pull-up or pull-down is present
- spi: Fix acpi deferred irq probe
- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
- cifs: support mounting with alternate password to allow password rotation
- parisc/ftrace: Fix function graph tracing disablement
- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
- ubi: wl: Put source PEB into correct list if trying locking LEB failed
- dt-bindings: serial: rs485: Fix rs485-rts-delay property
- serial: 8250_fintek: Add support for F81216E
- serial: 8250: omap: Move pm_runtime_get_sync
- iio: gts: Fix uninitialized symbol 'ret'
- ublk: fix ublk_ch_mmap() for 64K page size
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
- block: fix missing dispatching request when queue is started or unquiesced
- block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding
- blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
- media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
- ALSA: ump: Fix evaluation of MIDI 1.0 FB info
- ALSA: hda/realtek: Update ALC225 depop procedure
- ALSA: hda/realtek: Fixup ALC225 depop procedure
- ALSA: hda/realtek: Set PCBeep to default value for ALC274
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
- ALSA: hda/realtek: Apply quirk for Medion E15433
- smb3: request handle caching when caching directories
- smb: client: handle max length for SMB symlinks
- cifs: Add tracing for the cifs_tcon struct refcounting
- usb: dwc3: gadget: Fix checking for number of TRBs left
- ublk: fix error code for unsupported command
- lib: string_helpers: silence snprintf() output truncation warning
- um: Fix the return value of elf_core_copy_task_fpregs
- um: Always dump trace for specified task in show_stack
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
- rtc: abx80x: Fix WDT bit position of the status register
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubifs: Correct the total block count by deducting journal reservation
- jffs2: fix use of uninitialized variable
- rtc: rzn1: fix BCD to rtc_time conversion errors
- nvme-multipath: prepare for "queue-depth" iopolicy
- nvme-multipath: implement "queue-depth" iopolicy
- nvme-multipath: avoid hang on inaccessible namespaces
- nvme/multipath: Fix RCU list traversal to use SRCU primitive
- block: return unsigned int from bdev_io_min
- 9p/xen: fix init sequence
- perf/arm-smmuv3: Fix lockdep assert in ->event_init()
- perf/arm-cmn: Ensure port and device id bits are set properly
- smb: client: disable directory caching when dir_cache_timeout is zero
- cifs: Fix parsing native symlinks relative to the export
- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE
session
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
- init/modpost: conditionally check section mismatch to __meminit*
- Rename .data.unlikely to .data..unlikely
- Rename .data.once to .data..once to fix resetting WARN*_ONCE
- modpost: remove incorrect code in do_eisa_entry()
- cifs: during remount, make sure passwords are in sync
- cifs: unlock on error in smb3_reconfigure()
- nfs: ignore SB_RDONLY when mounting nfs
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
- xfs: remove unknown compat feature check in superblock write validation
- btrfs: don't loop for nowait writes when checking for cross references
- md/md-bitmap: Add missing destroy_work_on_stack()
- arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
- arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
- arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
- media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
- arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
- media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
- media: verisilicon: av1: Fix reference video buffer pointer assignment
- media: platform: exynos4-is: Fix an OF node reference leak in
fimc_md_is_isp_available
- media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
- media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
- media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
- media: uvcvideo: Stop stream during unregister
- maple_tree: refine mas_store_root() on storing NULL
- vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
- zram: clear IDLE flag after recompression
- iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
- leds: lp55xx: Remove redundant test for invalid channel number
- clk: qcom: gcc-qcs404: fix initial rate of GPLL3
- ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
- ARM: 9430/1: entry: Do a dummy read from VMAP shadow
- ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
- ceph: extract entity name from device id
- util_macros.h: fix/rework find_closest() macros
- scsi: ufs: exynos: Fix hibern8 notify callbacks
- i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
- PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
- PCI: keystone: Add link up check to ks_pcie_other_map_bus()
- PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
- fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful
iov_iter_zero
- thermal: int3400: Fix reading of current_uuid for active policy
- leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error
paths
- ovl: properly handle large files in ovl_security_fileattr
- dm: Fix typo in error message
- dm thin: Add missing destroy_work_on_stack()
- PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
- PCI: rockchip-ep: Fix address translation unit programming
- iio: accel: kx022a: Fix raw read format
- iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
- iio: gts: fix infinite loop for gain_to_scaletables()
- powerpc: Fix stack protector Kconfig test for clang
- powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
- udmabuf: use vmf_insert_pfn and VM_PFNMAP for handling mmap
- drm/mediatek: Fix child node refcount handling in early exit
- drm/etnaviv: flush shader L1 cache after user commandstream
- drm: xlnx: zynqmp_dpsub: fix hotplug detection
- drm/amdkfd: Use the correct wptr size
- drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu
v13.0.7
- posix-timers: Target group sigqueue to current task only if not exiting
- wifi: cfg80211: Add wiphy_delayed_work_pending()
- wifi: mac80211: Convert color collision detection to wiphy work
- spi: stm32: fix missing device mode capability in stm32mp25
- usb: typec: use cleanup facility for 'altmodes_node'
- platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
- integrity: Avoid -Wflex-array-member-not-at-end warnings
- integrity: Use static_assert() to check struct sizes
- ASoC: max9768: Fix event generation for playback mute
- ARM: 9434/1: cfi: Fix compilation corner case
- drm/amd/display: Skip Invalid Streams from DSC Policy
- drm/amd/display: Fix DSC-re-computing
- drm/amd/display: Fix incorrect DSC recompute trigger
- s390/facilities: Fix warning about shadow of global variable
- cachefiles: Fix incorrect length return value in
cachefiles_ondemand_fd_write_iter()
- thermal: core: Drop thermal_zone_device_is_enabled()
- thermal: core: Synchronize suspend-prepare and post-suspend actions
- thermal: core: Rearrange PM notification code
- thermal: core: Represent suspend-related thermal zone flags as bits
- thermal: core: Mark thermal zones as initializing to start with
- thermal: core: Fix race between zone registration and system suspend
- crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
- sched/cpufreq: Ensure sd is rebuilt for EAS check
- cleanup: Remove address space of returned pointer
- ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash
- arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy
- scripts/kernel-doc: Do not track section counter across processed files
- arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region
- scripts/kernel-doc: add modeline for vim users
- scripts/kernel-doc: simplify function printing
- scripts/kernel-doc: separate out function signature
- scripts/kernel-doc: simplify signature printing
- doc: kerneldoc.py: fix indentation
- kernel-doc: allow object-like macros in ReST output
- arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status
- arm64: dts: rockchip: Remove 'enable-active-low' from two boards
- arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers
- dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries
- pwm: Assume a disabled PWM to emit a constant inactive output
- drm/imagination: Convert to use time_before macro
- drm/imagination: Use pvr_vm_context_get()
- drm/v3d: Flush the MMU before we supply more memory to the binner
- drm/amdgpu: Fix JPEG v4.0.3 register write
- ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios
- wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled
- selftests/bpf: netns_new() and netns_free() helpers.
- selftests/bpf: Fix backtrace printing for selftests crashes
- selftests/bpf: add missing header include for htons
- drm/vc4: hdmi: Increase audio MAI fifo dreq threshold
- drm/vc4: Introduce generation number enum
- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
- drm/vc4: Correct generation check in vc4_hvs_lut_load
- bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable
- drm/panfrost: Add missing OPP table refcnt decremental
- selftests: netfilter: Fix missing return values in conntrack_dump_flush
- Bluetooth: btintel: Do no pass vendor events to stack
- Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
- Bluetooth: ISO: Use kref to track lifetime of iso_conn
- Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending
- Bluetooth: hci_conn: Use __counted_by() to avoid -Wfamnae warning
- Bluetooth: hci_conn: Use struct_size() in hci_le_big_create_sync()
- Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending
- Bluetooth: ISO: Send BIG Create Sync via hci_sync
- Bluetooth: iso: Fix circular lock in iso_conn_big_sync
- net: txgbe: remove GPIO interrupt controller
- net: txgbe: fix null pointer to pcs
- RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages
- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset
- iommu/amd: Remove amd_iommu_domain_update() from page table freeing
- iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Modify debugfs name
- leds: max5970: Fix unreleased fwnode_handle in probe function
- kasan: move checks to do_strncpy_from_user
- kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
- rust: kernel: add srctree-relative doclinks
- rust: kernel: fix THIS_MODULE header path in ThisModule doc comment
- i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
- remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()
- remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()
- nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
- f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS
- f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow
- vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()
- exfat: fix file being changed by unaligned direct write
- bnxt_en: Set backplane link modes correctly for ethtool
- devres: Fix page faults when tracing devres from unloaded modules
- usb: gadget: uvc: wake pump everytime we update the free list
- drm/xe/ufence: Wake up waiters after setting ufence->signalled
- net_sched: sch_fq: don't follow the fast path if Tx is behind now
- ASoC: da7213: Populate max_register to regmap_config
- KVM: x86: switch hugepage recovery thread to vhost_task
- kvm: defer huge page recovery vhost task to later
- KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking
- KVM: arm64: Change kvm_handle_mmio_return() return polarity
- dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with
fallbacks
- xhci: Fix control transfer error on Etron xHCI host
- xhci: Combine two if statements for Etron xHCI host
- xhci: Don't perform Soft Retry for Etron xHCI host
- xhci: Don't issue Reset Device command to Etron xHCI host
- mtd: spi-nor: core: replace dummy buswidth from addr to data
- Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
- RISC-V: Scalar unaligned access emulated on hotplug CPUs
- serial: amba-pl011: Fix RX stall when DMA is used
- serial: amba-pl011: fix build regression
- i40e: Fix handling changed priv flags
- netdev-genl: Hold rcu_read_lock in napi_get
- usb: misc: ljca: set small runtime autosuspend delay
- usb: misc: ljca: move usb_autopm_put_interface() after wait for response
- blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs
- block: model freeze & enter queue as lock for supporting lockdep
- block: always verify unfreeze lock on the owner task
- x86/Documentation: Update algo in init_size description of boot protocol
- kbuild: deb-pkg: Don't fail if modules.order is missing
- tools/power turbostat: Fix trailing '\n' parsing
- block: don't verify IO lock for freeze/unfreeze in elevator_init_mq()
- zram: permit only one post-processing operation at a time
- perf jevents: Don't stop at the first matched pmu when searching a events
table
- docs: media: update location of the media patches
- Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of
setup_vmcs_config()"
- soc: fsl: cpm1: qmc: Fix blank line and spaces
- soc: fsl: cpm1: qmc: Re-order probe() operations
- soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
- soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
- soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
- x86/mm: Carve out INVLPG inline asm for use by others
- ALSA: hda/realtek: Enable mic on Vaio VJFH52
- ALSA: hda/realtek: Enable speaker pins for Medion E15443 platform
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook X G1i
- usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing
logic
- sched: Initialize idle tasks only once
- Upstream stable to v6.6.64, v6.11.11, v6.12.1, v6.12.2, v6.12.3
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53222
- zram: fix NULL pointer in comp_algorithm_show()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53169
- nvme-fabrics: fix kernel crash while shutting down controller
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56721
- x86/CPU/AMD: Terminate the erratum_1386_microcode array
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53187
- io_uring: check for overflows in io_pin_pages
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53147
- exfat: fix out-of-bounds access of directory entries
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53196
- KVM: arm64: Don't retire aborted MMIO instruction
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56685
- ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53201
- drm/amd/display: Fix null check for pipe_ctx->plane_state in
dcn20_program_pipe
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53203
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53209
- bnxt_en: Fix receive ring space parameters when XDP is active
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56742
- vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53216
- nfsd: release svc_expkey/svc_export with rcu_work
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53219
- virtiofs: use pages instead of pointer for kernel direct IO
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53221
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53228
- riscv: kvm: Fix out-of-bounds array access
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53232
- iommu/s390: Implement blocking domain
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53236
- xsk: Free skb when TX metadata options are invalid
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56703
- ipv6: Fix soft lockups in fib6_select_path under high next hop churn
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56540
- accel/ivpu: Prevent recovery invocation during probe and resume
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53163
- crypto: qat/qat_420xx - fix off by one in uof_get_name()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56755
- netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56549
- cachefiles: Fix NULL pointer dereference in object->file
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56551
- drm/amdgpu: fix usage slab after free
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56776
- drm/sti: avoid potential dereference of error pointers
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56777
- drm/sti: avoid potential dereference of error pointers in
sti_gdp_atomic_check
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56778
- drm/sti: avoid potential dereference of error pointers in
sti_hqvdp_atomic_check
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56557
- iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56779
- nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56558
- nfsd: make sure exp active before svc_export_show
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56562
- i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56566
- mm/slub: Avoid list corruption when removing a slab from the full list
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-57838
- s390/entry: Mark IRQ entries to fix stack depot warnings
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56567
- ad7780: fix division by zero in ad7780_write_raw()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56569
- ftrace: Fix regression with module command in stack_trace_filter
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56570
- ovl: Filter invalid inodes with missing lookup function
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56572
- media: platform: allegro-dvt: Fix possible memory leak in
allocate_buffers_internal()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56573
- efi/libstub: Free correct pointer on failure
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56574
- media: ts2020: fix null-ptr-deref in ts2020_probe()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56575
- media: imx-jpeg: Ensure power suppliers be suspended before detach them
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56576
- media: i2c: tc358743: Fix crash in the probe error path when using polling
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56577
- media: mtk-jpeg: Fix null-ptr-deref during unload module
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56578
- media: imx-jpeg: Set video drvdata before register video device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56579
- media: amphion: Set video drvdata before register video device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56581
- btrfs: ref-verify: fix use-after-free after invalid ref action
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56774
- btrfs: add a sanity check for btrfs root in btrfs_search_slot()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56780
- quota: flush quota_release_work upon quota writeback
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53168
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56688
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56729
- smb: Initialize cfid->tcon before performing network ops
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56704
- 9p/xen: fix release of IRQ
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53171
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53172
- ubi: fastmap: Fix duplicate slab cache names while attaching
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56739
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53173
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53145
- um: Fix potential integer overflow during physmem setup
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53174
- SUNRPC: make sure cache entry active before cache_show
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53146
- NFSD: Prevent a potential integer overflow
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53175
- ipc: fix memleak if msg_init_ns failed in create_ipc_ns
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56692
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56698
- usb: dwc3: gadget: Fix looping of queued SG entries
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56687
- usb: musb: Fix hardware lockup on first Rx endpoint request
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53176
- smb: During unmount, ensure all cached dir instances drop their dentry
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53177
- smb: prevent use-after-free due to open_cached_dir error paths
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53178
- smb: Don't leak cfid when reconnect races with open_cached_dir
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53180
- ALSA: pcm: Add sanity NULL check for the default mmap fault handler
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56700
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2022-49034
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53181
- um: vector: Do not use drvdata in release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53183
- um: net: Do not use drvdata in release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53184
- um: ubd: Do not use drvdata in release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53185
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53188
- wifi: ath12k: fix crash when unbinding
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53190
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of
failures
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53191
- wifi: ath12k: fix warning when unbinding
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56741
- apparmor: test: Fix memory leak for aa_unpack_strdup()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53148
- comedi: Flush partial mappings in error case
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53194
- PCI: Fix use-after-free of slot->bus on hot remove
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53195
- KVM: arm64: Get rid of userspace_irqchip_in_use
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53197
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
devices
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-42122
- drm/amd/display: Add NULL pointer check for kzalloc
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-49906
- drm/amd/display: Check null pointer before try to access it
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53150
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53198
- xen: Fix the issue of resource not being properly released in
xenbus_dev_probe()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53200
- drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53202
- firmware_loader: Fix possible resource leak in fw_log_firmware_info()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53208
- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53210
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53213
- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53214
- vfio/pci: Properly hide first-in-list PCIe extended capability
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53215
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53217
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56689
- PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53151
- svcrdma: Address an integer overflow
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53218
- f2fs: fix race in concurrent f2fs_stop_gc_thread
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56744
- f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53220
- f2fs: fix to account dirty data in __get_secs_required()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56745
- PCI: Fix reset_method_store() memory leak
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53223
- clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53154
- clk: clk-apple-nco: Add NULL check in applnco_probe
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53224
- RDMA/mlx5: Move events notifier registration to be after device registration
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56746
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53155
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53226
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56747
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56748
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53229
- RDMA/rxe: Fix the qp flush warnings in req
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56722
- RDMA/hns: Fix cpu stuck caused by printings during reset
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53230
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53231
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56701
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56678
- powerpc/mm/fault: Fix kfence page fault reporting
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56677
- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56723
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56724
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56691
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53233
- unicode: Fix utf8_load() error path
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56694
- bpf: fix recursive lock when verdict program return SK_PASS
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53234
- erofs: handle NONHEAD !delta[1] lclusters gracefully
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53239
- ALSA: 6fire: Release resources at card release
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56531
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56532
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56533
- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56751
- ipv6: release nexthop on device removal
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56720
- bpf, sockmap: Several fixes to bpf_msg_pop_data
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56538
- drm: zynqmp_kms: Unplug DRM device before removal
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56752
- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56725
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56707
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56726
- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56727
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56728
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56679
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_config_scan()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56543
- wifi: ath12k: Skip Rx TID cleanup for self peer
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56683
- drm/vc4: hdmi: Avoid hang with debug registers when suspended
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56545
- HID: hyperv: streamline driver probe to avoid devres issues
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56705
- media: atomisp: Add check for rgby_data memory allocation failure
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53157
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53158
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56546
- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56681
- crypto: bcm - add error check in the ahash_hmac_init function
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53160
- rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56708
- EDAC/igen6: Avoid segmentation fault on module unload
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56690
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
-EBUSY
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53161
- EDAC/bluefield: Fix potential integer overflow
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53162
- crypto: qat/qat_4xxx - fix off by one in uof_get_name()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56754
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56756
- nvme-pci: fix freeing of the HMB descriptor table
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-53142
- initramfs: avoid filename buffer overrun
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-56693
- brd: defer automatic disk creation until module initialization succeeds
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-44955
- drm/amd/display: Don't refer to dc_sink in is_dsc_need_re_compute
* Noble update: upstream stable patchset 2025-03-11 (LP: #2101915) //
CVE-2024-49899
- drm/amd/display: Initialize denominators' default to 1
* Noble update: upstream stable patchset 2025-03-06 (LP: #2101042)
- sctp: fix possible UAF in sctp_v6_available()
- net: vertexcom: mse102x: Fix tx_bytes calculation
- drm/rockchip: vop: Fix a dereferenced before check warning
- mptcp: error out earlier on disconnect
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
- net/mlx5: fs, lock FTE when checking if active
- net/mlx5e: kTLS, Fix incorrect page refcounting
- net/mlx5e: clear xdp features on non-uplink representors
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
- virtio/vsock: Fix accept_queue memory leak
- Bluetooth: btintel: Direct exception event to bluetooth stack
- net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
hnodes.
- samples: pktgen: correct dev to DEV
- net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
- net: Make copy_safe_from_sockptr() match documentation
- stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
- net: ti: icssg-prueth: Fix 1 PPS sync
- bonding: add ns target multicast address to slave device
- ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
- x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
- ocfs2: uncache inode which has failed entering the group
- vdpa: solidrun: Fix UB bug with devres
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
- vp_vdpa: fix id_table array not null terminated error
- ima: fix buffer overrun in ima_eventdigest_init_common
- KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
- KVM: x86: Unconditionally set irr_pending when updating APICv state
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
CONFIG_BROKEN
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
- nommu: pass NULL argument to vma_iter_prealloc()
- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
- ocfs2: fix UBSAN warning in ocfs2_verify_volume()
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
- LoongArch: Fix early_numa_add_cpu() usage for FDT systems
- LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
- LoongArch: Make KASAN work with 5-level page-tables
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
- mmc: sunxi-mmc: Fix A100 compatible description
- drm/bridge: tc358768: Fix DSI command tx
- pmdomain: imx93-blk-ctrl: correct remove path
- nouveau: fw: sync dma after setup is called.
- drm/amd: Fix initialization mistake for NBIO 7.7.0
- drm/amd/display: Adjust VSDB parser for replay feature
- lib/buildid: Fix build ID parsing logic
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- mptcp: add userspace_pm_lookup_addr_by_id helper
- mptcp: update local address flags when setting it
- mptcp: hold pm lock when deleting entry
- mptcp: drop lookup_by_id in lookup_addr
- mptcp: pm: use _rcu variant under rcu_read_lock
- mm: avoid unsafe VMA hook invocation when error arises on mmap hook
- mm: unconditionally close VMAs on error
- mm: refactor map_deny_write_exec()
- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
- mm: resolve faulty mmap_region() error path behaviour
- net/mlx5: Fix msix vectors to respect platform limit
- vsock: Fix sk_error_queue memory leak
- virtio/vsock: Improve MSG_ZEROCOPY error handling
- net: phylink: ensure PHY momentary link-fails are handled
- drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
- ARM: fix cacheflush with PAN
- drm/amd/display: Run idle optimizations at end of vblank handler
- drm/amd/display: Change some variable name of psr
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
- x86/stackprotector: Work around strict Clang TLS symbol requirements
- sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
- fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
- mm/mremap: fix address wraparound in move_page_tables()
- KVM: selftests: Disable strict aliasing
- mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
- LoongArch: Add WriteCombine shadow mapping in KASAN
- drm/xe: handle flat ccs during hibernation on igpu
- pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
- pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
- nouveau: handle EBUSY and EAGAIN for GSP aux errors.
- nouveau/dp: handle retries for AUX CH transfers with GSP.
- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
- drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
- drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
- drm/amd/display: Handle dml allocation failure to avoid crash
- drm/amd/display: Fix failure to read vram info due to static BP_RESULT
- drm/xe: Restore system memory GGTT mappings
- drm/xe: improve hibernation on igpu
- net: sched: u32: Add test case for systematic hnode IDR leaks
- Upstream stable to v6.6.63, v6.11.10
* Noble update: upstream stable patchset 2025-03-04 (LP: #2100894)
- 9p: v9fs_fid_find: also lookup by inode if not found dentry
- 9p: Avoid creating multiple slab caches with the same name
- selftests/bpf: Verify that sync_linked_regs preserves subreg_def
- irqchip/ocelot: Fix trigger register address
- nvme: tcp: avoid race between queue_lock lock and destroy
- block: Fix elevator_get_default() checking for NULL q->tag_set
- HID: multitouch: Add support for B2402FVA track point
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
- iommu/arm-smmu: Clarify MMU-500 CPRE workaround
- nvme: disable CC.CRIME (NVME_CC_CRIME)
- bpf: use kvzmalloc to allocate BPF verifier environment
- crypto: api - Fix liveliness check in crypto_alg_tested
- crypto: marvell/cesa - Disable hash algorithms
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
- drm/vmwgfx: Limit display layout ioctl array size to
VMWGFX_NUM_DISPLAY_UNITS
- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
- nvme-multipath: defer partition scanning
- drm/amdkfd: Accounting pdd vram_usage for svm
- powerpc/powernv: Free name on error in opal_event_init()
- net: phy: mdio-bcm-unimac: Add BCM6846 support
- nvme-loop: flush off pending I/O while shutting down loop controller
- smb: client: Fix use-after-free of network namespace.
- nvme/host: Fix RCU list traversal to use SRCU primitive
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling
- bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
- bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
- fs: Fix uninitialized value issue in from_kuid and from_kgid
- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
- RISCV: KVM: use raw_spinlock for critical section in imsic
- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
- LoongArch: Use "Exception return address" to comment ERA
- ASoC: fsl_micfil: Add sample rate constraint
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
- bpf: Check validity of link->type in bpf_link_show_fdinfo()
- mm: support order-1 folios in the page cache
- mm: always initialise folio->_deferred_list
- mm: refactor folio_undo_large_rmappable()
- mm/thp: fix deferred split unqueue naming and locking
- 9p: fix slab cache name creation for real
- nvmet-passthru: clear EUID/NGUID/UUID while using loop target
- pinctrl: intel: platform: Add Panther Lake to the list of supported
- s390/ap: Fix CCA crypto card behavior within protected execution environment
- selftests/bpf: Assert link info uprobe_multi count & path_size if unset
- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
- drm/xe/query: Increase timestamp width
- nvme: make keep-alive synchronous operation
- samples/landlock: Fix port parsing in sandboxer
- ASoC: Intel: avs: Update stream status in a separate thread
- ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
- netfs: Downgrade i_rwsem for a buffered write
- afs: Fix lock recursion
- HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
- LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
- drm/xe: Don't restart parallel queues multiple times on GT reset
- Upstream stable to v6.6.62, v6.11.9
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
excavator
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- ARM: dts: rockchip: fix rk3036 acodec node
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- net: enetc: set MAC address to the VF net_device
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- can: c_can: fix {rx,tx}_errors statistics
- can: c_can: c_can_handle_bus_err(): update statistics if skb allocation
fails
- ice: change q_index variable type to s16 to store -1 value
- e1000e: Remove Meteor Lake SMBUS workarounds
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- netfilter: nf_tables: do not defer rule destruction via call_rcu
- net: arc: rockchip: fix emac mdio node support
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- media: stb0899_algo: initialize cfr before using it
- media: dvb_frontend: don't play tricks with underflow values
- media: adv7604: prevent underflow condition when reporting colorspace
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- tools/lib/thermal: Fix sampling handler context ptr
- thermal/of: support thermal zones w/o trips subnode
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
- ksmbd: count all requests in req_running counter
- ksmbd: fix broken transfers when exceeding max simultaneous operations
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- rpmsg: glink: Handle rejected intent request better
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- dm cache: correct the number of origin blocks to match the target length
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
overflow
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- mptcp: use sock_kfree_s instead of kfree
- arm64: Kconfig: Make SME depend on BROKEN for now
- [Config] updateconfigs for ARM64_SME
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- Revert "wifi: mac80211: fix RCU list iterations"
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- usb: dwc3: fix fault at system suspend if device was already runtime
suspended
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: option: add Quectel RG650V
- irqchip/gic-v3: Force propagation of the active state with a read-back
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- arm64: dts: rockchip: Designate Turing RK1's system power controller
- EDAC/qcom: Make irq configuration optional
- arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
- net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
- virtio_net: Sync rss config to device when virtnet_probe
- drm/xe: Set mask bits for CCS_MODE register
- drm/amd/display: Fix brightness level not retained over reboot
- drm/imagination: Add a per-file PVR context list
- mptcp: no admin perm to list endpoints
- btrfs: fix the length of reserved qgroup to free
- btrfs: fix per-subvolume RO/RW flags with new mount API
- clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
- clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
- objpool: fix to make percpu slot allocation more robust
- mm/damon/core: handle zero {aggregation,ops_update} intervals
- mm/damon/core: handle zero schemes apply interval
- mm/mlock: set the correct prev on failure
- clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
- staging: vchiq_arm: Get the rid off struct vchiq_2835_state
- staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
- drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
- drm/xe: Move LNL scheduling WA to xe_device.h
- drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
- drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
- xtensa: Emulate one-byte cmpxchg
- Upstream stable to v6.6.61, v6.11.8
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50270
- mm/damon/core: avoid overflow in damon_feed_loop_next_input()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50274
- idpf: avoid vport access in idpf_get_link_ksettings
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53067
- scsi: ufs: core: Start the RTC update work later
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53084
- drm/imagination: Break an object reference loop
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53085
- tpm: Lock TPM chip in tpm_pm_suspend() first
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53086
- drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53087
- drm/xe: Fix possible exec queue leak in exec IOCTL
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50288
- media: vivid: fix buffer overwrite when using > 32 buffers
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50289
- media: av7110: fix a spectre vulnerability
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53062
- media: mgb4: protect driver against spectre
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50291
- media: dvb-core: add missing buffer index check
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50297
- net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50267
- USB: serial: io_edgeport: fix use after free in debug printk
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50268
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53083
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50269
- usb: musb: sunxi: Fix accessing an released usb phy
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50271
- signal: restore the override_rlimit logic
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50272
- filemap: Fix bounds checking in filemap_read()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50273
- btrfs: reinitialize delayed ref list after deleting it from the list
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50275
- arm64/sve: Discard stale CPU state when handling SVE traps
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50276
- net: vertexcom: mse102x: Fix possible double free of TX skb
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53066
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50278
- dm cache: fix potential out-of-bounds access on the first resume
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50279
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50280
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53060
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50282
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50283
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50284
- ksmbd: Fix the missing xa_store error check
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50285
- ksmbd: check outstanding simultaneous SMB operations
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50286
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50287
- media: v4l2-tpg: prevent the risk of a division by zero
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50290
- media: cx24116: prevent overflows on SNR calculus
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53061
- media: s5p-jpeg: prevent buffer overflows
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53081
- media: ar0521: don't overflow when checking PLL values
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50292
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50294
- rxrpc: Fix missing locking causing hanging calls
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50295
- net: arc: fix the device for dma_map_single/dma_unmap_single
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53082
- virtio_net: Add hash_key_length check
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50296
- net: hns3: fix kernel crash when uninstalling driver
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53088
- i40e: fix race condition by adding filter's intermediate sync state
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50298
- net: enetc: allocate vf_state during PF probes
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50299
- sctp: properly validate chunk size in sctp_sf_ootb()
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50300
- regulator: rtq2208: Fix uninitialized use of regulator_config
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-50301
- security/keys: fix slab-out-of-bounds in key_task_permission
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53072
- platform/x86/amd/pmc: Detect when STB is not available
* Noble update: upstream stable patchset 2025-02-27 (LP: #2100292) //
CVE-2024-53068
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996)
- Input: xpad - sort xpad_device by vendor and product ID
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- cgroup: Fix potential overflow issue when checking max_depth
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- RDMA/cxgb4: Dump vendor specific QP details
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/bnxt_re: synchronize the qp-handle table array
- RDMA/bnxt_re: Fix the locking while accessing the QP table
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
- net: stmmac: fix TSO DMA API usage causing oops
- gtp: allow -1 to be specified as file description from userspace
- bpf: Force checkpoint when jmp history is too long
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- iomap: improve shared block detection in iomap_unshare_iter
- iomap: don't bother unsharing delalloc extents
- iomap: share iomap_unshare_iter predicate code with fsdax
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: turn iomap_want_unshare_iter into an inline function
- kasan: Fix Software Tag-Based KASAN with GCC
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
- afs: Fix missing subdir edit when renamed between parent dirs
- smb: client: set correct device number on nfs reparse points
- cxl/events: Fix Trace DRAM Event Record
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Stale inode instead of bad
- scsi: scsi_transport_fc: Allow setting rport state to current state
- cifs: Fix creating native symlinks pointing to current or parent directory
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- net: amd: mvme147: Fix probe banner message
- NFS: remove revoked delegation from server's delegation list
- misc: sgi-gru: Don't disable preemption in GRU driver
- usb: gadget: dummy_hcd: Switch to hrtimer transfer scheduler
- usb: gadget: dummy_hcd: Set transfer interval to 1 microframe
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- USB: gadget: dummy-hcd: Fix "task hung" problem
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- usbip: tools: Fix detach_port() invalid port error path
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- xhci: Fix Link TRB DMA in command ring stopped completion event
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- Revert "driver core: Fix uevent_show() vs driver detach race"
- iio: light: veml6030: fix microlux value calculation
- RISC-V: ACPI: fix early_ioremap to early_memremap
- tools/mm: -Werror fixes in page-types/slabinfo
- tools/mm: fix compile error
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- block: fix sanity checks in blk_rq_map_user_bvec
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- Input: edt-ft5x06 - fix regmap leak when probe fails
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- riscv: efi: Set NX compat flag in PE/COFF header
- riscv: Use '%u' to format the output of 'cpu'
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Remove duplicated GET_RM
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- mei: use kvmalloc for read buffer
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
- x86/traps: Enable UBSAN traps on x86
- x86/traps: move kmsan check after instrumentation_begin
- kasan: remove vmalloc_percpu test
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- io_uring: always lock __io_cqring_overflow_flush
- mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
- mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
- perf trace: Fix non-listed archs in the syscalltbl routines
- dpll: add Embedded SYNC feature for a pin
- ice: add callbacks for Embedded SYNC enablement on dpll pins
- bpf: Add bpf_mem_alloc_check_size() helper
- net: ethernet: mtk_wed: fix path of MT7988 WO firmware
- drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
- drm/mediatek: Fix get efuse issue for MT8188 DPTX
- ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
- powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
- usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
- mm: shrinker: avoid memleak in alloc_shrinker_info
- firmware: microchip: auto-update: fix poll_complete() to not report spurious
timeout errors
- soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
- cxl/port: Fix CXL port initialization order when the subsystem is built-in
- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
- mm/ksm: remove redundant code in ksm_fork
- nvme: re-fix error-handling for io_uring nvme-passthrough
- btrfs: fix extent map merging not happening for adjacent extents
- btrfs: fix defrag not merging contiguous extents due to merged extent maps
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
- mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
- mm: shrink skip folio mapped by an exiting process
- mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
- drm/i915: Skip programming FIA link enable bits for MTL+
- drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
- drm/i915/dp: Clear VSC SDP during post ddi disable routine
- drm/i915/pps: Disable DPLS_GATING around pps sequence
- drm/i915: move rawclk from runtime to display runtime info
- drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
- drm/xe: Support 'nomodeset' kernel command-line option
- drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
- drm/amdgpu/swsmu: fix ordering for setting workload_mask
- drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
- drm/amdgpu: handle default profile on on devices without fullscreen 3D
- MIPS: export __cmpxchg_small()
- rcu/kvfree: Add kvfree_rcu_barrier() API
- rcu/kvfree: Refactor kvfree_rcu_queue_batch()
- Upstream stable to v6.6.60, v6.11.7
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53050
- drm/i915/hdcp: Add encoder check in hdcp2_get_capability
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53051
- drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50303
- resource,kexec: walk_system_ram_res_rev must retain resource flags
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50263
- fork: only invoke khugepaged, ksm hooks if no error
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50220
- fork: do not invoke uffd on fork if error occurs
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50221
- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53053
- scsi: ufs: core: Fix another deadlock during RTC update
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50225
- btrfs: fix error propagation of split bios
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50230
- nilfs2: fix kernel bug due to missing clearing of checked flag
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50238
- phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53044
- net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50304
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53048
- ice: fix crash on probe for DPLL enabled E810 LOM
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53045
- ASoC: dapm: fix bounds checker error in dapm_widget_list_create
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53055
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53046
- arm64: dts: imx8ulp: correct the flexspi compatible string
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53052
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50215
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50216
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53043
- mctp i2c: handle NULL header address
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50218
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53047
- mptcp: init: protect sched with rcu_read_lock
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50222
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50223
- sched/numa: Fix the potential null pointer dereference in task_numa_work()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50224
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50226
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50231
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53076
- iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50232
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50234
- wifi: iwlegacy: Clear stale interrupts before resuming device
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50235
- wifi: cfg80211: clear wdev->cqm_config pointer on free
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50236
- wifi: ath10k: Fix memory leak in management tx
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50237
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50239
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50240
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50242
- fs/ntfs3: Additional check in ntfs_file_release
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50243
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50244
- fs/ntfs3: Additional check in ni_clear()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50245
- fs/ntfs3: Fix possible deadlock in mi_read
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50246
- fs/ntfs3: Add rough attr alloc_size check
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50247
- fs/ntfs3: Check if more than chunk-size bytes are written
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50250
- fsdax: dax_unshare_iter needs to copy entire blocks
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50251
- netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50252
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50255
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50257
- netfilter: Fix use-after-free in get_info()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50258
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50262
- bpf: Fix out-of-bounds write in trie_get_next_key()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50259
- netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53042
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53058
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-50261
- macsec: Fix use-after-free while sending the offloading packet
* Noble update: upstream stable patchset 2025-02-25 (LP: #2099996) //
CVE-2024-53059
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
* Noble update: upstream stable patchset 2025-02-07 (LP: #2097575)
- irqchip/gic-v3-its: Fix VSYNC referencing an unmapped VPE on GIC v4.1
- xfs: fix error returns from xfs_bmapi_write
- xfs: fix xfs_bmap_add_extent_delay_real for partial conversions
- xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent
- xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item
recovery
- xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2
- xfs: fix missing check for invalid attr flags
- xfs: check shortform attr entry flags specifically
- xfs: validate recovered name buffers when recovering xattr items
- xfs: enforce one namespace per attribute
- xfs: revert commit 44af6c7e59b12
- xfs: use dontcache for grabbing inodes during scrub
- xfs: match lock mode in xfs_buffered_write_iomap_begin()
- xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional
- xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset
- xfs: convert delayed extents to unwritten when zeroing post eof blocks
- xfs: allow symlinks with short remote targets
- xfs: make sure sb_fdblocks is non-negative
- xfs: fix unlink vs cluster buffer instantiation race
- xfs: fix freeing speculative preallocations for preallocated files
- xfs: allow unlinked symlinks and dirs with zero size
- xfs: restrict when we try to align cow fork delalloc to cowextsz hints
- selftests: mptcp: join: change capture/checksum as bool
- selftests: mptcp: join: test for prohibited MPC to port-based endp
- selftests: mptcp: remove duplicated variables
- iio: accel: bma400: Fix uninitialized variable field_value in tap event
handling.
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- bpf: devmap: provide rxq after redirect
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- bpf: Fix memory leak in bpf_core_apply
- RDMA/bnxt_re: Fix a possible memory leak
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Add a check for memory allocation
- x86/resctrl: Avoid overflow in MB settings in bw_validate()
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- bpf: Add cookie to perf_event bpf_link_info records
- bpf: fix unpopulated name_len field in perf_event link info
- selftests/bpf: Add cookies check for perf_event fill_link_info test
- selftests/bpf: fix perf_event link info name_len assertion
- s390/pci: Handle PCI error codes other than 0x3a
- bpf: fix kfunc btf caching for modules
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- selftests/bpf: Fix cross-compiling urandom_read
- task_work: Add TWA_NMI_CURRENT as an additional notify mode.
- sched/core: Disable page allocation in task_tick_mm_cid()
- ALSA: hda/cs8409: Fix possible NULL dereference
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/srpt: Make slab cache names unique
- ipv4: give an IPv4 dev to blackhole_netdev
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Fix the GID table length
- accel/qaic: Fix the for loop used to walk SG table
- drm/msm/dpu: make sure phys resources are properly initialized
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- net/smc: Fix memory leak when using percpu refs
- net: usb: usbnet: fix race in probe failure
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- octeontx2-af: Fix potential integer overflows on integer shifts
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- macsec: don't increment counters for an unrelated SA
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- net: ethernet: aeroflex: fix potential memory leak in
greth_start_xmit_gbit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- irqchip/renesas-rzg2l: Fix missing put_device
- drm/msm/dpu: don't always program merge_3d block
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- genetlink: hold RCU in genlmsg_mcast()
- ravb: Remove setting of RX software timestamp
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix OOBs when building SMB2_IOCTL request
- usb: typec: altmode should keep reference to parent
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- bpf: Fix link info netfilter flags to populate defrag flag
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- net/mlx5: Check for invalid vector index on EQ creation
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Unregister notifier on eswitch init failure
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- vsock: Update rx_bytes on read_skb()
- vsock: Update msg_count on read_skb()
- bpf, vsock: Drop static vsock_bpf_prot initialization
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- bpf: Fix iter/task tid filtering
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- khugepaged: inline hpage_collapse_alloc_folio()
- khugepaged: convert alloc_charge_hpage to alloc_charge_folio
- khugepaged: remove hpage from collapse_file()
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace
point
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- xhci: dbgtty: remove kfifo_out() wrapper
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbc: honor usb transfer size boundaries.
- usb: gadget: f_uac2: fix non-newline-terminated function name
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- XHCI: Separate PORT and CAPs macros into dedicated file
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- tracing/fprobe-event: cleanup: Fix a wrong comment in fprobe event
- tracing/probes: cleanup: Set trace_probe::nr_args at trace_probe_init
- tracing/probes: Support $argN in return probe (kprobe and fprobe)
- uprobes: encapsulate preparation of uprobe args buffer
- uprobes: prepare uprobe args buffer lazily
- uprobes: prevent mutex_lock() under rcu_read_lock()
- uprobe: avoid out-of-bounds memory access of fetching args
- exec: don't WARN for racy path_noexec check
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
default regs values
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- arm64: Force position-independent veneers
- udf: refactor udf_current_aext() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor inode_bmap() to handle error
- udf: fix uninit-value use in udf_get_fileshortad
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- cifs: Validate content of NFS reparse point buffer
- platform/x86: dell-sysman: add support for alienware products
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- jfs: Fix sanity check in dbMount
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- tracing: Consider the NULL character when validating the event length
- xfrm: extract dst lookup parameters into a struct
- xfrm: respect ip protocols rules criteria when performing dst lookups
- netfilter: bpf: must hold reference on net namespace
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- net: plip: fix break; causing plip to never transmit
- octeon_ep: Implement helper for iterating packets in Rx queue
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- fsl/fman: Save device references taken in mac_probe()
- fsl/fman: Fix refcount handling of fman-related devices
- netfilter: xtables: fix typo causing some targets not to load on IPv6
- net: wwan: fix global oob in wwan_rtnl_policy
- net/sched: adjust device watchdog timer to detect stopped queue at right
time
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- net: usb: usbnet: fix name regression
- bpf: Add MEM_WRITE attribute
- bpf: Fix overloading of MEM_UNINIT's meaning
- bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
created by classifiers
- net: sched: fix use-after-free in taprio_change()
- net: sched: use RCU read-side critical section in taprio_dump()
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- net: dsa: mv88e6xxx: group cycle counter coefficients
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control
types
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- ALSA: hda/realtek: Update default depop procedure
- smb: client: Handle kstrdup failures for passwords
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
detection issue
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: arm64: Don't eagerly teardown the vgic on init error
- x86/lam: Disable ADDRESS_MASKING in most cases
- [Config] disable ADDRESS_MASKING
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- LoongArch: Get correct cores_per_package for SMT systems
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Make KASAN usable for variable cpu_vabits
- xfrm: fix one more kernel-infoleak in algo dumping
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- selinux: improve error checking in sel_write_load()
- net: phy: dp83822: Fix reset pin definitions
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- platform/x86: dell-wmi: Ignore suspend notifications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- tracing: probes: Fix to zero initialize a local variable
- task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- bpf: Use raw_spinlock_t in ringbuf
- reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
- bpf: Fix unpopulated path_size when uprobe_multi fields unset
- RDMA/bnxt_re: Fix incorrect dereference of srq in async event
- RDMA/bnxt_re: Get the toggle bits from SRQ events
- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
- ring-buffer: Fix reader locking when changing the sub buffer order
- drm/msm/dpu: Don't always set merge_3d pending flush
- drm/msm/a6xx+: Insert a fence wait before SMMU table update
- drm/xe: Take job list lock in xe_sched_add_pending_job
- drm/xe: Use bookkeep slots for external BO's in exec IOCTL
- net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
- net/mlx5e: Don't call cleanup on profile rollback failure
- bpf: Fix print_reg_state's constant scalar dump
- fsnotify: optimize the case of no parent watcher
- fsnotify: Avoid data race between fsnotify_recalc_mask() and
fsnotify_object_watched()
- drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
- objpool: fix choosing allocation for percpu slots
- bnxt_en: replace ptp_lock with irqsave variant
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
- ASoC: topology: Bump minimal topology ABI version
- fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
- btrfs: qgroup: set a more sane default value for subtree drop threshold
- btrfs: clear force-compress on remount when compress mount option is given
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
- x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
- btrfs: reject ro->rw reconfiguration if there are hard ro requirements
- xfs: don't fail repairs on metadata files with no attr fork
- drm/bridge: Fix assignment of the of_node of the parent to aux bridge
- platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
addresses
- fgraph: Fix missing unlock in register_ftrace_graph()
- fgraph: Change the name of cpuhp state to "fgraph:online"
- ASoC: SOF: Intel: hda: Always clean up link DMA during stop
- ASoC: dapm: avoid container_of() to get component
- ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
- ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
- soundwire: intel_ace2x: Send PDI stream number during prepare
- x86: support user address masking instead of non-speculative conditional
- ASoC: qcom: Select missing common Soundwire module code on SDM845
- SAUCE: Revert "iio: adc: ti-lmp92064: add missing select
IIO_(TRIGGERED_)BUFFER in Kconfig"
- Upstream stable to v6.6.58, v6.6.59, v6.11.6
* CVE-2025-21756
- vsock: Keep the binding until socket destruction
- vsock: Orphan socket after transport release
* Fix NIC name changes for ice (LP: #2100264)
- ice: Remove ndo_get_phys_port_name
* CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
* CVE-2025-21702
- pfifo_tail_enqueue: Drop new packet when sch->limit == 0
* CVE-2024-50167
- be2net: fix potential memory leak in be_xmit()
* Fix line-out playback on some platforms with Cirrus Logic “Dolphin” hardware
(LP: #2099880)
- ALSA: hda/cirrus: Correct the full scale volume set logic
* Enable Large Language Model (LLM) workloads using Intel NPU (LP: #2098972)
- accel/ivpu: Increase DMA address range
* Patchset for TUXEDO devices (LP: #2098104)
- wifi: ath12k: add fallback board name without variant while searching
board-2.bin
- wifi: ath12k: remove unused ATH12K_BD_IE_BOARD_EXT
- wifi: ath12k: add support to search regdb data in board-2.bin for WCN7850
- wifi: ath12k: support default regdb while searching board-2.bin for WCN7850
- ACPI: resource: Use IRQ override on Maibenben X565
- ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
- nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
- nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
* Introduce and use sendpages_ok() instead of sendpage_ok() in nvme-tcp and
drbd (LP: #2093871)
- net: introduce helper sendpages_ok()
- nvme-tcp: use sendpages_ok() instead of sendpage_ok()
- drbd: use sendpages_ok() instead of sendpage_ok()
* CVE-2024-56765
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
* CVE-2025-21700
- net: sched: Disallow replacing of child qdisc from one parent to another
* CVE-2024-56615
- bpf: fix OOB devmap writes when deleting elements
* CVE-2024-56651
- can: hi311x: hi3110_can_ist(): fix potential use-after-free
* CVE-2024-56627
- ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
* CVE-2024-56600
- net: inet6: do not leave a dangling sk pointer in inet6_create()
* CVE-2024-56661
- tipc: fix NULL deref in cleanup_bearer()
* CVE-2024-56642
- tipc: Fix use-after-free of kernel socket in cleanup_bearer().
* CVE-2024-53227
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
* CVE-2024-53237
- Bluetooth: fix use-after-free in device_for_each_child()
* CVE-2024-53166
- block, bfq: fix bfqq uaf in bfq_limit_depth()
* CVE-2024-50265
- ocfs2: remove entry once instead of null-ptr-dereference in
ocfs2_xa_remove()
* CVE-2024-50249
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
* iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
* [Ubuntu 24.04] MultiVM - L2 guest(s) running stress-ng getting stuck at
booting after triggering crash (LP: #2077722)
- KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
spurious interrupts
* btrfs will WARN_ON() in btrfs_remove_qgroup() unnecessarily (LP: #2091719)
- btrfs: improve the warning and error message for btrfs_remove_qgroup()
* CVE-2024-50248
- ntfs3: Add bounds checking to mi_enum_attr()
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
* CVE-2025-21701
- net: avoid race between device unregistration and ethnl ops
* CVE-2024-57798
- drm/dp_mst: Ensure mst_primary pointer is valid in
drm_dp_mst_handle_up_req()
* CVE-2024-56672
- blk-cgroup: Fix UAF in blkcg_unpin_online()
* CVE-2024-56658
- net: defer final 'struct net' free in netns dismantle
* CVE-2024-56598
- jfs: array-index-out-of-bounds fix in dtReadFirst
* CVE-2024-56595
- jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
* CVE-2024-53140
- netlink: terminate outstanding dump on socket close
* CVE-2024-53063
- media: dvbdev: prevent the risk of out of memory access
* CVE-2024-50302
- HID: core: zero-initialize the report buffer
[ Ubuntu: 6.8.0-56.58 ]
* noble/linux: 6.8.0-56.58 -proposed tracker (LP: #2098244)
* Noble update: upstream stable patchset 2024-07-19 (LP: #2073603)
- Revert "drm: Make drivers depends on DRM_DW_HDMI"
- Revert "UBUNTU: [Config] Drivers now depend on DRM_DW_HDMI"
* drm/amd/display: Add check for granularity in dml ceil/floor helpers
(LP: #2098080)
- drm/amd/display: Add check for granularity in dml ceil/floor helpers
* optimized default EPP for GNR family (LP: #2097554)
- cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
* Incorrect LAPIC/x2APIC parsing order (LP: #2097455)
- x86/acpi: Fix LAPIC/x2APIC parsing order
* MGLRU: page allocation failure on NUMA-enabled systems (LP: #2097214)
- mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
* Upstream commit 65357e2c164a: "RDMA/mana_ib: set node_guid" applied
incorrectly (LP: #2096885)
- Revert "RDMA/mana_ib: set node_guid"
* AppArmor early policy load not funcitoning (LP: #2095370)
- SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [67/90]: userns - add the
ability to reference a global variable for a feature value"
* apparmor unconfined profile blocks pivot_root (LP: #2067900)
- SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [81/90]: apparmor: convert easy
uses of unconfined() to label_mediates()"
* CVE-2024-50117
- drm/amd: Guard against bad data for ATIF ACPI method
* CVE-2024-56582
- btrfs: fix use-after-free in btrfs_encoded_read_endio()
* CVE-2024-53165
- sh: intc: Fix use-after-free bug in register_intc_controller()
* CVE-2024-53156
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
* CVE-2024-56663
- wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
* CVE-2024-56614
- xsk: fix OOB map writes when deleting elements
* VM boots slowly with large-BAR GPU Passthrough due to pci/probe.c redundancy
(LP: #2097389)
- PCI: Batch BAR sizing operations
* Noble update: upstream stable patchset 2025-02-04 (LP: #2097393)
- Revert "PCI/MSI: Provide stubs for IMS functions"
- gfs2: Revert "introduce qd_bh_get_or_undo"
- gfs2: qd_check_sync cleanups
- gfs2: Revert "ignore negated quota changes"
- Revert "powerpc/ps3_defconfig: Disable PPC64_BIG_ENDIAN_ELF_ABI_V2"
- tracing: Have saved_cmdlines arrays all in one allocation
- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
- ata: ahci: Add mask_port_map module parameter
- ASoC: tas2781: mark dvc_tlv with __maybe_unused
- scsi: sd: Do not repeat the starting disk message
- bootconfig: Fix the kerneldoc of _xbc_exit()
- perf sched: Move start_work_mutex and work_done_wait_mutex initialization to
perf_sched__replay()
- perf sched: Fix memory leak in perf_sched__map()
- perf sched: Move curr_thread initialization to perf_sched__map()
- perf sched: Move curr_pid and cpu_last_switched initialization to
perf_sched__{lat|map|replay}()
- libsubcmd: Don't free the usage string
- selftests: Introduce Makefile variable to list shared bash scripts
- jbd2: fix kernel-doc for j_transaction_overhead_buffers
- lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2
compat
- drm/amd/display: Remove a redundant check in authenticated_dp
- drm/amd/display: Revert "Check HDCP returned status"
- zram: don't free statically defined names
- x86/amd_nb: Add new PCI IDs for AMD family 0x1a
- rtnetlink: change nlk->cb_mutex role
- rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag
- mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
- phonet: no longer hold RTNL in route_dumpit()
- rcu/nocb: Make IRQs disablement symmetric
- HID: asus: add ROG Ally N-Key ID and keycodes
- HID: asus: add ROG Z13 lightbar
- hid-asus: add ROG Ally X prod ID to quirk list
- scsi: Revert "scsi: sd: Do not repeat the starting disk message"
- btrfs: fix uninitialized pointer free in add_inode_ref()
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
- ksmbd: fix user-after-free from session log off
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: add missing static descriptor and inline keyword
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
- udp: Compute L4 checksum as usual when not segmenting the skb
- arm64: probes: Remove broken LDR (literal) uprobe support
- arm64: probes: Fix simulate_ldr*_literal()
- arm64: probes: Fix uprobes for big-endian kernels
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
link PHY
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
- maple_tree: correct tree corruption on spanning store
- nilfs2: propagate directory read errors from nilfs_find_entry()
- fat: fix uninitialized variable
- mm/mremap: fix move_normal_pmd/retract_page_tables race
- mm/swapfile: skip HugeTLB pages for unuse_vma
- mm/damon/tests/sysfs-kunit.h: fix memory leak in
damon_sysfs_test_add_targets()
- tcp: fix mptcp DSS corruption due to large pmtu xmit
- net: fec: Move `fec_ptp_read()` to the top of the file
- net: fec: Remove duplicated code
- mptcp: prevent MPC handshake on port-based signal endpoints
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
- s390/sclp: Deactivate sclp after all its users
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- KVM: s390: gaccess: Check if guest address is in memslot
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/bugs: Skip RSB fill at VMEXIT
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
- io_uring/sqpoll: close race on waiting for sqring entries
- blk-mq: setup queue ->tag_set before initializing hctx
- ublk: don't allow user copy for unprivileged device
- selftest: hid: add the missing tests directory
- Input: xpad - add support for MSI Claw A1M
- scsi: mpi3mr: Correct a test in mpi3mr_sas_port_add()
- scsi: mpi3mr: Validate SAS port assignments
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Requeue aborted request
- drm/radeon: Fix encoder->possible_clones
- drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
- drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible
mode
- drm/xe/xe_sync: initialise ufence.signalled
- drm/xe/ufence: ufence can be signaled right after wait_woken
- drm/vmwgfx: Cleanup kms setup without 3d
- drm/vmwgfx: Handle surface check failure correctly
- drm/amdgpu/pm: Fix code alignment issue
- drm/amdgpu/smu13: always apply the powersave optimization
- drm/amdgpu/swsmu: Only force workload setup on init
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: hid-sensors: Fix an error handling path in
_hid_sensor_set_report_latency()
- iio: light: veml6030: fix ALS sensor resolution
- iio: light: veml6030: fix IIO device retrieval from embedded device
- iio: light: opt3001: add missing full-scale range value
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: resolver: ad2s1210 add missing select REGMAP in Kconfig
- iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- Bluetooth: Call iso_exit() on module unload
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
- Bluetooth: btusb: Fix not being able to reconnect after suspend
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- vt: prevent kernel-infoleak in con_font_get()
- xhci: tegra: fix checked USB2 port number
- xhci: Fix incorrect stream context type macro
- xhci: Mitigate failed set dequeue pointer commands
- USB: serial: option: add support for Quectel EG916Q-GL
- USB: serial: option: add Telit FN920C04 MBIM compositions
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM
device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- serial: imx: Update mctrl old_status on RTSD interrupt
- parport: Proper fix for array out-of-bounds access
- x86/resctrl: Annotate get_mem_config() functions as __init
- x86/apic: Always explicitly disarm TSC-deadline timer
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/entry_32: Do not clobber user EFLAGS.ZF
- x86/entry_32: Clear CPU buffers after register restore in NMI return
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
- x86/bugs: Use code segment selector for VERW operand
- pinctrl: intel: platform: fix error path in device_for_each_child_node()
- pinctrl: ocelot: fix system hang on level based interrupts
- pinctrl: stm32: check devm_kasprintf() returned value
- pinctrl: apple: check devm_kasprintf() returned value
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- serial: qcom-geni: fix polled console initialisation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix shutdown race
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: fix receiver enable
- mm: vmscan.c: fix OOM on swap stress test
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
1000 G2
- Upstream stable to v6.6.57, v6.11.5
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301)
- Revert "perf callchain: Fix stitch LBR memory leaks"
- ASoC: amd: acp: add ZSC control register programming sequence
- virtio: rename virtio_config_enabled to virtio_config_core_enabled
- virtio: allow driver to disable the configure change notification
- virtio-net: synchronize operstate with admin state on up/down
- virtio-net: synchronize probe with ndo_set_features
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
- af_unix: Don't call skb_get() for OOB skb.
- af_unix: Remove single nest in manage_oob().
- af_unix: Rename unlinked_skb in manage_oob().
- af_unix: Move spin_lock() in manage_oob().
- iommu/amd: Move allocation of the top table into v1_alloc_pgtable
- iommu/amd: Set the pgsize_bitmap correctly
- drm/xe: Move and export xe_hw_engine lookup.
- drm/msm/dp: rename wide_bus_en to wide_bus_supported
- drm/msm/dp: enable widebus on all relevant chipsets
- bpf, arm64: Fix tailcall hierarchy
- libbpf: Don't take direct pointers into BTF data from st_ops
- s390/entry: Move early program check handler to entry.S
- selftests/bpf: fix to avoid __msg tag de-duplication by clang
- libbpf: Ensure new BTF objects inherit input endianness
- PCI: dwc: ep: Rename dw_pcie_ep_exit() to dw_pcie_ep_deinit()
- PCI: qcom-ep: Enable controller resources like PHY only after refclk is
available
- net: ravb: Fix maximum TX frame size for GbEth devices
- ravb: Make it clear the information relates to maximum frame size
- net: ravb: Fix R-Car RX frame size limit
- netfilter: nf_tables: missing objects with no memcg accounting
- PCI: dra7xx: Fix error handling when IRQ request fails in probe
- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- wifi: mt76: mt7925: fix a potential association failure upon resuming
- cifs: Remove intermediate object of failed create reparse call
- drm/amd/display: Disable replay if VRR capability is false
- drm/amd/display: Fix VRR cannot enable
- l2tp: free sessions using rcu
- net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
- nvme: fix metadata handling in nvme-passthrough
- wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
- x86/apic: Remove logical destination mode for 64-bit
- pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
- drm/xe: Name and document Wa_14019789679
- drm/xe: Add timeout to preempt fences
- drm/amd/display: Fix possible overflow in integer multiplication
- ext4: fix error message when rejecting the default hash
- power: supply: Drop use_cnt check from power_supply_property_is_writeable()
- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
- drm/xe: Generate oob before compiling anything
- clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
- drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
- Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
- pmdomain: core: Reduce debug summary table width
- fs/ntfs3: Do not call file_modified if collapse range failed
- fs/ntfs3: Optimize large writes into sparse file
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- virtio_console: fix misc probe bugs
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
- bpf: Call the missed btf_record_free() when map creation fails
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Check percpu map value size first
- s390/facility: Disable compile time optimization for decompressor code
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- bpf, x64: Fix a jit convergence issue
- ext4: nested locking for xattr inode
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- ktest.pl: Avoid false positives with grub2 skip regex
- soundwire: intel_bus_common: enable interrupts before exiting reset
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- clk: bcm: bcm53573: fix OF node leak in init
- PCI: Add ACS quirk for Qualcomm SA8775P
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs
- mfd: intel-lpss: Rename SPI intel_lpss_platform_info structs
- mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
- riscv: Omit optimized string routines when using KASAN
- riscv: avoid Imbalance in RAS
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
- PCI: endpoint: Assign PCI domain number for endpoint controllers
- soundwire: cadence: re-check Peripheral status with delayed_work
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
unknown
- media: videobuf2-core: clear memory related fields in
__vb2_plane_dmabuf_put()
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- usb: chipidea: udc: enable suspend interrupt after usb reset
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
Crashkernel Scenario
- xhci: dbc: Fix STALL transfer event handling
- usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
- comedi: ni_routing: tools: Check when the file could not be opened
- LoongArch: Fix memleak in pci_acpi_scan_root()
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir
clash
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- tools/iio: Add memory allocation failure check for trigger_name
- staging: vme_user: added bound check to geoid
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus
attribute
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
lpfc_els_flush_cmd()
- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
KERN_WARNING
- NFSD: Mark filecache "down" if init fails
- nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net()
failed
- ice: set correct dst VSI in only LAN filters
- ice: clear port vlan config during reset
- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
- ice: fix VLAN replay after reset
- SUNRPC: Fix integer overflow in decode_rc_list()
- tcp: fix to allow timestamp undo if no retransmits were sent
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids()
test
- Bluetooth: btusb: Don't fail external suspend requests
- net: phy: bcm84881: Fix some error handling paths
- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"
- net: ethernet: adi: adin1110: Fix some error handling path in
adin1110_read_fifo()
- net: dsa: b53: fix jumbo frame mtu check
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix jumbo frames on 10/100 ports
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- nouveau/dmem: Fix privileged error in copy engine channel
- gpio: aspeed: Add the flush write to ensure the write complete.
- gpio: aspeed: Use devm_clk api to manage clock source
- powercap: intel_rapl_tpmi: Ignore minor version change
- ice: Fix netif_is_ice() in Safe Mode
- ice: Flush FDB entries before reset
- e1000e: change I219 (19) devices to ADP
- net: ibm: emac: mal: fix wrong goto
- btrfs: zoned: fix missing RCU locking in error message when loading zone
info
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- netfilter: fib: check correct rtable in vrf setups
- net: ibm: emac: mal: add dcr_unmap to _remove
- net: dsa: refuse cross-chip mirroring operations
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- vxlan: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- mctp: Handle error of rtnl_register_module().
- mpls: Handle error of rtnl_register_module().
- phonet: Handle error of rtnl_register_module().
- rcu/nocb: Fix rcuog wake-up from offline softirq
- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
- HID: plantronics: Workaround for an unexcepted opposite volume key
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- usb: dwc3: core: Stop processing of pending events if controller is halted
- usb: xhci: Fix problem with xhci resume from suspend
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: dwc3: re-enable runtime PM after failed resume
- usb: gadget: core: force synchronous registration
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
ish_fw_xfer_direct_dma
- ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
- ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
- drm/amdkfd: Fix an eviction fence leak
- drm/amd/display: fix hibernate entry for DCN35+
- drm/xe/guc_submit: fix xa_store() error checking
- drm/i915/hdcp: fix connector refcounting
- drm/xe/ct: fix xa_store() error checking
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
- mptcp: fallback when MPTCP opts are dropped after 1st data
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- OPP: fix error code in dev_pm_opp_set_config()
- net: dsa: lan9303: ensure chip reset and wait for READY status
- mptcp: pm: do not remove closing subflows
- powercap: intel_rapl_tpmi: Fix bogus register reading
- selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
- selftests/rseq: Fix mm_cid test failure
- btrfs: split remaining space to discard in chunks
- btrfs: add cancellation points to trim loops
- fs/proc/kcore.c: allow translation of physical memory addresses
- io_uring/rw: fix cflags posting for single issue multishot read
- Upstream stable to v6.6.56, v6.11.1, v6.11.2, v6.11.3, v6.11.4
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50182
- secretmem: disable memfd_secret() if arch cannot set direct map
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50019
- kthread: unpark only parked kthread
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50096
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50020
- ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50021
- ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50022
- device-dax: correct pgoff align in dax_set_mapping()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50185
- mptcp: handle consistently DSS corruption
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50023
- net: phy: Remove LED entry from LEDs list on unregister
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50024
- net: Fix an unsafe loop on the list
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50186
- net: explicitly clear the sk pointer, when pf->create fails
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50025
- scsi: fnic: Move flush_work initialization out of if block
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50026
- scsi: wd33c93: Don't use stale scsi_pointer value
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50027
- thermal: core: Free tzp copy along with the thermal zone
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50028
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50029
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50030
- drm/xe/ct: prevent UAF in send_recv()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50187
- drm/vc4: Stop the active perfmon before being destroyed
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50031
- drm/v3d: Stop the active perfmon before being destroyed
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50189
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50035
- ppp: fix ppp_async_encode() illegal access
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50038
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50039
- net/sched: accept TCA_STAB only for root qdisc
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50040
- igb: Do not bring the device up after non-fatal error
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50042
- ice: Fix increasing MSI-X on VF
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50093
- thermal: intel: int340x: processor: Fix warning during module unload
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50045
- netfilter: br_netfilter: fix panic with metadata_dst skb
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50188
- net: phy: dp83869: fix memory corruption when enabling fiber
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50046
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50180
- fbdev: sisfb: Fix strbuf array overflow
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50047
- smb: client: fix UAF in async decryption
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50048
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50049
- drm/amd/display: Check null pointer before dereferencing se
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50090
- drm/xe/oa: Fix overflow in oa batch buffer
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50183
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
instance
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50184
- virtio_pmem: Check device status before requesting flush
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50057
- usb: typec: tipd: Free IRQ only if it was requested before
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50058
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50181
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
switchtec_ntb_remove due to race condition
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50061
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
Driver Due to Race Condition
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50062
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50095
- RDMA/mad: Improve handling of timed out WRs of mad agent
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50063
- bpf: Prevent tail call between progs attached to different hooks
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50191
- ext4: don't set SB_RDONLY after filesystem errors
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50064
- zram: free secondary algorithms names
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50089
- unicode: Don't special case ignorable code points
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49865
- drm/xe/vm: move xa_alloc to prevent UAF
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49968
- ext4: filesystems without casefold feature cannot be mounted with siphash
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49893
- drm/amd/display: Check stream_status before it is used
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49972
- drm/amd/display: Deallocate DML memory if allocation fails
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49914
- drm/amd/display: Add null check for pipe_ctx->plane_state in
dcn20_program_pipe
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49920
- drm/amd/display: Check null pointers before multiple uses
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-49921
- drm/amd/display: Check null pointers before used
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-50009
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-47726
- f2fs: fix to wait dio completion
* Noble update: upstream stable patchset 2025-02-03 (LP: #2097301) //
CVE-2024-47711
- af_unix: Don't return OOB skb in manage_oob().
* CVE-2024-53170
- block: fix uaf for flush rq while iterating tags
* CVE-2024-50148
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
* CVE-2024-50134
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
VLA
* CVE-2024-50171
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
* CVE-2024-50229
- nilfs2: fix potential deadlock with newly created symlinks
* CVE-2024-50233
- staging: iio: frequency: ad9832: fix division by zero in
ad9832_calc_freqreg()
* [Lenovo Ubuntu 24.04 Bug] dmesg show "spi-nor: probe of spi0.0 failed with
error -95" (LP: #2070339)
- mtd: core: Don't fail mtd_otp_nvmem_add() if OTP is unsupported
- mtd: core: Align comment with an action in mtd_otp_nvmem_add()
* python perf module missing in realtime kernel (LP: #2089411)
- [Packaging] linux-tools: Add missing python perf symlink
- [Packaging] linux-tools: Fix python perf library packaging
- [Packaging] linux-tools: Fall back to old python perf path
* CVE-2024-53104
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
[ Ubuntu: 6.8.0-54.56 ]
* CVE-2025-0927
- SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key
[ Ubuntu: 6.8.0-53.55 ]
* noble/linux: 6.8.0-53.55 -proposed tracker (LP: #2093677)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.01.13)
* generate and ship vmlinux.h to allow packages to build BPF CO-RE
(LP: #2050083)
- [Packaging] add linux-bpf-dev package
- [Packaging] do not attempt to generate BTF header on armhf
* Unable to boot as a guest on VMware ESX (LP: #2091941)
- ptp/vmware: Use VMware hypercall API
- input/vmmouse: Use VMware hypercall API
- drm/vmwgfx: Use VMware hypercall API
- x86/vmware: Use VMware hypercall API
- x86/vmware: Correct macro names
- x86/vmware: Remove legacy VMWARE_HYPERCALL* macros
* When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744)
- [Packaging] disable hv-kvp-daemon if needed
* Backport "netkit: Add option for scrubbing skb meta data" to 6.8
(LP: #2091184)
- netkit: Add option for scrubbing skb meta data
* KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
Exit (LP: #2093146)
- KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
* [SRU] add support of QCA BT 0489:e0fc (LP: #2085406)
- Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x
* ice driver RTNL assertion failed warning on shutdown/reboot (LP: #2091107)
- ice: Remove and readd netdev during devlink reload
* vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
- SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
- SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"
* [SRU] Fix error of resume on rtl8168fp (LP: #2087507)
- r8169: avoid unsolicited interrupts
* [SRU] power: intel_pstate: HWP interrupt support for maximum ratio changed
(LP: #2090852)
- x86/cpufeatures: Add HWP highest perf change feature flag
- cpufreq: intel_pstate: Support highest performance change interrupt
* Noble update: upstream stable patchset 2024-11-29 (LP: #2089884)
- static_call: Handle module init failure correctly in
static_call_del_module()
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
- jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
- jump_label: Fix static_key_slow_dec() yet again
- scsi: st: Fix input/output error on empty drive reset
- scsi: pm8001: Do not overwrite PCI queue mapping
- drm/amdgpu: Fix get each xcp macro
- mailbox: rockchip: fix a typo in module autoloading
- mailbox: bcm2835: Fix timeout during suspend mode
- ceph: remove the incorrect Fw reference check when dirtying pages
- ieee802154: Fix build error
- net: sparx5: Fix invalid timestamps
- net/mlx5: Fix error path in multi-packet WQE transmit
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
- Bluetooth: MGMT: Fix possible deadlocks
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
- Bluetooth: hci_core: Fix calling mgmt_device_connected
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- net: Add netif_get_gro_max_size helper for GRO
- net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
- net: ethernet: lantiq_etop: fix memory disclosure
- net: fec: Restart PPS after link state change
- net: fec: Reload PTP registers after link-state change
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
- net: add more sanity checks to qdisc_pkt_len_init()
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
- ppp: do not assume bh is held in ppp_channel_bridge_input()
- iomap: constrain the file range passed to iomap_file_unshare
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
- i2c: xiic: improve error message when transfer fails to start
- i2c: xiic: Try re-initialization on bus busy timeout
- loop: don't set QUEUE_FLAG_NOMERGES
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
uninitialized
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ALSA: hda/realtek: Fix the push button function for the ALC257
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- cifs: Fix buffer overflow when parsing NFS reparse points
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- wifi: rtw89: avoid to add interface to list twice when SER
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- crypto: octeontx - Fix authenc setkey
- crypto: octeontx2 - Fix authenc setkey
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and
ice_sched_add_node()
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- wifi: cfg80211: Set correct chandef when starting CAC
- net/xen-netback: prevent UAF in xenvif_flush_hash()
- net: hisilicon: hip04: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPI: PAD: fix crash in exit_round_robin()
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- e1000e: avoid failing the system during pm_suspend
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- ACPI: CPPC: Add support for setting EPP register in FFH
- blk_iocost: fix more out of bound shifts
- wifi: ath12k: fix array out-of-bound access in SoC stats
- wifi: ath11k: fix array out-of-bound access in SoC stats
- wifi: rtw88: select WANT_DEV_COREDUMP
- ACPI: EC: Do not release locks during operation region accesses
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
acpi_db_convert_to_package()
- tipc: guard against string buffer overrun
- net: mvpp2: Increase size of queue_name buffer
- bnxt_en: Extend maximum length of version string by 1 byte
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- wifi: rtw89: correct base HT rate mask for firmware
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- net: atlantic: Avoid warning about potential string truncation
- crypto: simd - Do not call crypto_alloc_tfm during registration
- netpoll: Ensure clean state on setup failures
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- wifi: iwlwifi: mvm: use correct key iteration
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
- ACPICA: iasl: handle empty connection_node
- proc: add config & param to block forcing mem writes
- [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- can: netlink: avoid call to do_set_data_bittiming callback with stale
can_priv::ctrlmode
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_cmd_802_11_scan_ext()
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- ALSA: usb-audio: Add input value sanity checks for standard types
- x86/ioapic: Handle allocation failures gracefully
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Add logitech Audio profile quirk
- ASoC: codecs: wsa883x: Handle reading version failure
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- x86/pkeys: Restore altstack access in sigreturn()
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- ALSA: asihpi: Fix potential OOB array access
- ALSA: hdsp: Break infinite MIDI input flush loop
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- selftests/nolibc: avoid passing NULL to printf("%s")
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- fbdev: efifb: Register sysfs groups through driver core
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- rcuscale: Provide clear error when async specified without primitives
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- iommu/vt-d: Always reserve a domain ID for identity setup
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
- drm/stm: Avoid use-after-free issues with crtc and plane
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
- drm/amd/display: Add null check for top_pipe_to_program in
commit_planes_for_stream
- ata: pata_serverworks: Do not use the term blacklist
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- HID: Ignore battery for all ELAN I2C-HID devices
- drm/amd/display: Handle null 'stream_status' in
'planes_changed_for_existing_stream'
- drm/amd/display: Check null pointers before using dc->clk_mgr
- drm/amd/display: Add null check for 'afb' in
amdgpu_dm_plane_handle_cursor_update (v2)
- drm/amd/display: fix double free issue during amdgpu module unload
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- jfs: Fix uaf in dbFreeBits
- jfs: check if leafidx greater than num leaves per dmap tree
- scsi: smartpqi: correct stream detection
- drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
- jfs: Fix uninit-value access of new_ea in ea_buffer
- drm/amdgpu: add raven1 gfxoff quirk
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdkfd: Fix resource leak in criu restore queue
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- platform/x86: touchscreen_dmi: add nanote-next quirk
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/amd/display: Check stream before comparing them
- drm/amd/display: Check link_res->hpo_dp_link_enc before using it
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
translation
- drm/amd/display: Fix index out of bounds in degamma hardware format
translation
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
- drm/amd/display: Avoid overflow assignment in link_dp_cts
- drm/amd/display: Initialize get_bytes_per_element's default to 1
- drm/printer: Allow NULL data in devcoredump printer
- perf,x86: avoid missing caller address in stack traces captured in uprobe
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- perf: Fix event_function_call() locking
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amd/pm: ensure the fw_info is not null before using it
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- ksmbd: add refcnt to ksmbd_conn struct
- ksmbd: fix use-after-free in SMB request handling
- bpf: Make the pointer returned by iter next method valid
- ext4: ext4_search_dir should return a proper error
- ext4: avoid use-after-free in ext4_ext_show_leaf()
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- iomap: handle a post-direct I/O invalidate race in
iomap_write_delalloc_release
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: s3c64xx: fix timeout counters in flush_fifo
- selftests: breakpoints: use remaining time to check if suspend succeed
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- perf: Really fix event_function_call() locking
- selftests: vDSO: fix vDSO name for powerpc
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- powerpc/vdso: Flag VDSO64 entry points as functions
- selftests/mm: fix charge_reserved_hugetlb.sh test
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests: vDSO: fix ELF hash table entry size for s390x
- selftests: vDSO: fix vdso_config for s390
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: designware: fix controller is holding SCL low while ENABLE bit is
disabled
- rust: sync: require `T: Sync` for `LockedBy::access`
- ovl: fail if trusted xattrs are needed but caller lacks permission
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- memory: tegra186-emc: drop unused to_tegra186_emc()
- dt-bindings: clock: exynos7885: Fix duplicated binding
- spi: bcm63xx: Fix module autoloading
- spi: bcm63xx: Fix missing pm_runtime_disable()
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- perf/core: Fix small negative period being ignored
- parisc: Fix itlb miss handler for 64-bit programs
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- ALSA: core: add isascii() check to card ID generator
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: fix slab-use-after-free in ext4_split_extent_at()
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: dax: fix overflowing extents beyond inode size when partially writing
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
- ext4: aovid use-after-free in ext4_ext_insert_extent()
- ext4: fix double brelse() the buffer of the extents path
- ext4: fix timer use-after-free on failed mount
- ext4: update orig_path in ext4_find_extent()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- parisc: Fix 64-bit userspace syscall path
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- drm/rockchip: vop: clear DMA stop bit on RK3066
- of: address: Report error on resource bounds overflow
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
- resource: fix region_intersects() vs add_memory_driver_managed()
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- mm: krealloc: consider spare memory for __GFP_ZERO
- mm: krealloc: Fix MTE false alarm in __do_krealloc
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- ocfs2: reserve space for inline xattr before attaching reflink tree
- ocfs2: cancel dqi_sync_work before freeing oinfo
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
- ocfs2: fix null-ptr-deref when journal load failed.
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- [Config] updateconfigs to set ILLEGAL_POINTER_VALUE for riscv64
- exfat: fix memory leak in exfat_load_bitmap()
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- perf hist: Update hist symbol when updating maps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- nfsd: map the EBADMSG to nfserr_io to avoid warning
- NFSD: Fix NFSv4's PUTPUBFH operation
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver
Due to Race Condition
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- riscv: Fix kernel stack size when KASAN is enabled
- aoe: fix the potential use-after-free problem in more places
- media: ov5675: Fix power on/off delay timings
- clk: rockchip: fix error for unknown clocks
- remoteproc: k3-r5: Fix error handling when power-up failed
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- media: venus: fix use after free bug in venus_remove due to race condition
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- media: qcom: camss: Remove use_count guard in stop_streaming
- media: qcom: camss: Fix ordering of pm_runtime_enable
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- smb: client: use actual path when queryfs
- smb3: fix incorrect mode displayed for read-only files
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
- gso: fix udp gso fraglist segmentation after pull from frag_list
- tomoyo: fallback to realpath if symlink's pathname does not exist
- net: stmmac: Fix zero-division error when disabling tc cbs
- rtc: at91sam9: fix OF node leak in probe() error path
- Input: adp5589-keys - fix NULL pointer dereference
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- cachefiles: fix dentry leak in cachefiles_open_file()
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
- btrfs: send: fix invalid clone operation for file that got its size
decreased
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
- cpufreq: Avoid a bad reference count on CPU node
- gpio: davinci: fix lazy disable
- net: pcs: xpcs: fix the wrong register that was written back
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
- ceph: fix cap ref leak via netfs init_request
- tracing/hwlat: Fix a race during cpuhp processing
- tracing/timerlat: Drop interface_lock in stop_kthread()
- tracing/timerlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- rtla: Fix the help text in osnoise and timerlat top tools
- drm/i915/gem: fix bitwise and logical AND mixup
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/amd/display: Add HDR workaround for specific eDP
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- kconfig: qconf: fix buffer overflow in debug links
- platform/x86: x86-android-tablets: Fix use after free on
platform_device_register() errors
- i2c: core: Lock address during client device instantiation
- i2c: synquacer: Remove a clk reference from struct synquacer_i2c
- i2c: synquacer: Deal with optional PCLK correctly
- arm64: cputype: Add Neoverse-N3 definitions
- arm64: errata: Expand speculative SSBS workaround once more
- io_uring/net: harden multishot termination case for recv
- uprobes: fix kernel info leak via "[uprobes]" vma
- mm: z3fold: deprecate CONFIG_Z3FOLD
- [Config] updateconfigs for deprecated CONFIG_Z3FOLD
- drm/amd/display: Allow backlight to go below
`AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- build-id: require program headers to be right after ELF header
- lib/buildid: harden build ID parsing logic
- sched: psi: fix bogus pressure spikes from aggregation race
- net: mana: Enable MANA driver on ARM64 with 4K page size
- net: mana: Add support for page sizes other than 4KB on ARM64
- [Config] updateconfigs for MICROSOFT_MANA
- RDMA/mana_ib: use the correct page table index based on hardware page size
- media: imx335: Fix reset-gpio handling
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- remoteproc: k3-r5: Delay notification of wakeup event
- dt-bindings: clock: qcom: Add missing UFS QREF clocks
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- iio: pressure: bmp280: Improve indentation and line wrapping
- iio: pressure: bmp280: Use BME prefix for BME280 specifics
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- r8169: add tally counter fields added with RTL8125
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- ACPI: battery: Simplify battery hook locking
- ACPI: battery: Fix possible crash when unregistering a battery hook
- btrfs: drop the backref cache during relocation if we commit
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- rxrpc: Fix a race between socket set up and I/O thread creation
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
- crypto: octeontx* - Select CRYPTO_AUTHENC
- drm/amd/display: Revert Avoid overflow assignment
- perf report: Fix segfault when 'sym' sort key is not used
- drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc
before using it
- Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"
- perf python: Allow checking for the existence of warning options in clang
- drm/i915/dp: Fix AUX IO power enabling for eDP PSR
- drm/amd/display: handle nulled pipe context in DCE110's set_drr()
- selftests: netfilter: Add missing return value
- afs: Fix the setting of the server responding flag
- net: dsa: improve shutdown sequence
- bridge: mcast: Fail MDB get request on empty entry
- net/ncsi: Disable the ncsi work before freeing the associated structure
- drm/xe: Restore pci state upon resume
- drm/xe: Resume TDR after GT reset
- drm/xe: Prevent null pointer access in xe_migrate_copy
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
- ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
- nvme-keyring: restrict match length for version '1' identifiers
- nvme-tcp: sanitize TLS key handling
- nvme-fabrics: typo in nvmf_parse_key()
- nvme-tcp: check for invalidated or revoked key
- net: fec: don't save PTP state if PTP is unsupported
- wifi: mac80211: fix RCU list iterations
- netdev-genl: Set extack and fix error on napi-get
- block: fix integer overflow in BLKSECDISCARD
- arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
- net: phy: Check for read errors in SIOCGMIIREG
- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
- x86/bugs: Add missing NO_SSB flag
- x86/bugs: Fix handling when SRSO mitigation is disabled
- net: napi: Prevent overflow of napi_defer_hard_irqs
- crypto: hisilicon - fix missed error branch
- ALSA: usb-audio: Add quirk for RME Digiface USB
- ALSA: usb-audio: Add mixer quirk for RME Digiface USB
- ALSA: control: Use automatic cleanup of kfree()
- ALSA: control: Fix unannotated kfree() cleanup
- ALSA: control: Use guard() for locking
- ALSA: control: Take power_ref lock primarily
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
- ASoC: Intel: boards: always check the result of
acpi_dev_get_first_match_dev()
- rcu-tasks: Add data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Initialize data to eliminate RCU-tasks/do_exit() deadlocks
- rcu-tasks: Fix access non-existent percpu rtpcp variable in
rcu_tasks_need_gpcb()
- pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
- iommu/vt-d: Unconditionally flush device TLB for pasid table updates
- iommu/arm-smmu-v3: Do not use devm for the cd table allocations
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
- drm/amd/display: Check null pointers before using them
- drm/amd/display: Add null check for head_pipe in
dcn201_acquire_free_pipe_for_layer
- drm/amd/display: Add null check for head_pipe in
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn30_init_hw
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
- scsi: smartpqi: Add new controller PCI IDs
- drm/amd/display: Add NULL check for function pointer in
dcn20_set_output_transfer_func
- drm/amd/display: Add NULL check for function pointer in
dcn32_set_output_transfer_func
- scsi: smartpqi: add new controller PCI IDs
- drm/amd/display: Check null-initialized variables
- drm/amd/display: Check phantom_stream before it is used
- drm/amdgpu/gfx9: properly handle error ints on all pipes
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
paths
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
topology
- drm/amdgpu: check PS, WS index
- drm/amdgpu: fix wrong sizeof argument
- drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
- drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
- drm/xe: Invert page fault queue head / tail
- drm/xe: Add helper macro to loop each DSS
- drm/xe: fix multicast support for Xe_LP platforms
- drm/xe: Use topology to determine page fault queue size
- drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
- ovl: fsync after metadata copy-up
- HID: i2c-hid: ensure various commands do not interfere with each other
- platform/mellanox: mlxbf-pmc: Replace uintN_t with kernel-style types
- platform/mellanox: mlxbf-pmc: Cleanup signed/unsigned mix-up
- platform/mellanox: mlxbf-pmc: fix signedness bugs
- platform/mellanox: mlxbf-pmc: fix lockdep warning
- bpf: Fix a sdiv overflow issue
- ALSA: control: Fix power_ref lock order for compat code, too
- perf callchain: Fix stitch LBR memory leaks
- drm/xe: fixup xe_alloc_pf_queue
- drm/xe: Fix memory leak on xe_alloc_pf_queue failure
- nvme-tcp: fix link failure for TCP auth
- f2fs: fix zoned block device information initialization
- f2fs: add write priority option based on zone UFS
- f2fs: make BG GC more aggressive for zoned devices
- f2fs: introduce migration_window_granularity
- f2fs: increase BG GC migration window granularity when boosted for zoned
devices
- f2fs: do FG_GC when GC boosting is required for zoned devices
- f2fs: forcibly migrate to secure space for zoned device file pinning
- mm, slub: avoid zeroing kmalloc redzone
- drm/v3d: Prevent out of bounds access in performance query extensions
- ext4: fix access to uninitialised lock in fc replay path
- ext4: fix off by one issue in alloc_flex_gd()
- scripts/gdb: add iteration function for rbtree
- scripts/gdb: fix lx-mounts command error
- sched/deadline: Comment sched_dl_entity::dl_server variable
- sched/core: Add clearing of ->dl_server in put_prev_task_balance()
- sched/core: Clear prev->dl_server in CFS pick fast path
- drivers/perf: riscv: Align errno for unsupported perf event
- ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
- ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus ExpertBook B2502CVA to
irq1_level_low_skip_override[]
- firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
- close_range(): fix the logics in descriptor table trimming
- drm/sched: Fix dynamic job-flow control race
- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
- drm/sched: Always increment correct scheduler score
- drm/xe: Delete unused GuC submission_state.suspend
- drm/xe: Use ordered wq for preempt fence waiting
- drm/xe: fix UAF around queue destruction
- sunrpc: change sp_nrthreads from atomic_t to unsigned int.
- NFSD: Async COPY result needs to return a write verifier
- NFSD: Limit the number of concurrent async COPY operations
- NFSD: Initialize struct nfsd4_copy earlier
- NFSD: Never decrement pending_async_copies on error
- drm/sched: revert "Always increment correct scheduler score"
- ALSA: control: Fix leftover snd_power_unref()
- Upstream stable to v6.6.55, v6.10.14
* By always inlining _compound_head(), clone() sees 3%+ performance increase
(LP: #2089327)
- mm: always inline _compound_head() with
CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
* Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+
(LP: #2086587)
- SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx
* Add list of source files to linux-buildinfo (LP: #2086606)
- [Packaging] Sort build dependencies alphabetically
- [Packaging] Add list of used source files to buildinfo package
* UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
- ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
* Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983)
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
* Noble update: upstream stable patchset 2024-11-22 (LP: #2089340)
- EDAC/synopsys: Fix ECC status and IRQ control race condition
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- wifi: rtw88: always wait for both firmware loading attempts
- crypto: xor - fix template benchmarking
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- wifi: brcmfmac: export firmware interface functions
- wifi: brcmfmac: introducing fwil query functions
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix invalid AMPDU factor calculation in
ath12k_peer_assoc_h_he()
- net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: rtw88: remove CPT execution branch never used
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- mount: handle OOM on mnt_warn_timestamp_expiry
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
- powercap: intel_rapl: Fix off by one in get_rpi()
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
- wifi: mac80211: don't use rate mask for offchannel TX either
- wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- padata: Honor the caller's alignment in case of chunk_size 0
- drivers/perf: hisi_pcie: Record hardware counts correctly
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- can: j1939: use correct function name in comment
- ACPI: CPPC: Fix MASK_VAL() usage
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: remove annotation to access set timeout while holding
lock
- perf/arm-cmn: Improve debugfs pretty-printing for large configs
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Ensure dtm_idx is big enough
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix EHT beamforming capability check
- x86/sgx: Fix deadlock in SGX NUMA node search
- pm:cpupower: Add missing powercap_set_enabled() stub function
- crypto: hisilicon/hpre - mask cluster timeout error
- crypto: hisilicon/qm - reset device before enabling it
- crypto: hisilicon/qm - inject error before stopping queue
- wifi: mt76: mt7603: fix mixed declarations and code
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
- wifi: wilc1000: fix potential RCU dereference issue in
wilc_parse_join_bss_param
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- sock_map: Add a cond_resched() in sock_hash_free()
- can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
- can: m_can: enable NAPI before enabling interrupts
- can: m_can: m_can_close(): stop clocks after device has been shut down
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- bareudp: Pull inner IP header on xmit.
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- net: tipc: avoid possible garbage value
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
- ublk: move zone report data out of request pdu
- nbd: fix race between timeout and normal completion
- block, bfq: fix possible UAF for bfqq->bic with merge chain
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: don't break merge chain in bfq_split_bfqq()
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- erofs: fix incorrect symlink detection in fast symlink
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- block, bfq: fix procress reference leakage for bfqq in merge chain
- io_uring/io-wq: do not allow pinning outside of cpuset
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- block: fix potential invalid pointer dereference in blk_add_partition
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- firmware: arm_scmi: Fix double free in OPTEE transport
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- regulator: Return actual error in of_regulator_bulk_get_all()
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- ARM: dts: microchip: sama7g5: Fix RTT clock
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- ARM: versatile: fix OF node leak in CPUs prepare
- reset: berlin: fix OF node leak in probe() error path
- reset: k210: fix OF node leak in probe() error path
- clocksource/drivers/qcom: Add missing iounmap() on errors in
msm_dt_timer_init()
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- x86/mm: Use IPIs to synchronize LAM enablement
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- ASoC: tas2781: remove unused acpi_subysystem_id
- ASoC: tas2781: Use of_property_read_reg()
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781-i2c: Get the right GPIO line
- selftests/ftrace: Add required dependency for kprobe tests
- ALSA: hda: cs35l41: fix module autoloading
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ASoC: loongson: fix error release
- hwmon: (max16065) Fix overflows seen when writing limits
- hwmon: (max16065) Remove use of i2c_match_id()
- hwmon: (max16065) Fix alarm attributes
- mtd: slram: insert break after errors in parsing the map
- hwmon: (ntc_thermistor) fix module autoloading
- power: supply: axp20x_battery: Remove design from min and max voltage
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- iommu/amd: Do not set the D bit on AMD v2 table entries
- mtd: powernv: Add check devm_kasprintf() returned value
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Fix init error path
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- pmdomain: core: Harden inter-column space in debug summary
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/amd/display: Add null check for set_output_gamma in
dcn30_set_output_transfer_func
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/radeon: properly handle vbios fake edid sizing
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- scsi: NCR5380: Check for phase match during PDMA fixup
- drm/amd/amdgpu: Properly tune the size of struct
- drm/rockchip: vop: Allow 4096px width scaling
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- powerpc/8xx: Fix initial memory mapping
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/vdso: Inconditionally use CFUNC macro
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- drm/msm: fix %s null argument error
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- xen: use correct end address of kernel for conflict checking
- HID: wacom: Support sequence numbers smaller than 16-bit
- HID: wacom: Do not warn about dropped packets for first packet
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- minmax: avoid overly complex min()/max() macro arguments in xen
- xen: introduce generic helper checking for memory map conflicts
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: add capability to remap non-RAM pages to different PFNs
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- xen/swiotlb: add alignment check for dma buffers
- xen/swiotlb: fix allocated size
- tpm: Clean up TPM space after command failure
- sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
- selftests/bpf: Workaround strict bpf_lsm return value check.
- selftests/bpf: Fix error linking uprobe_multi on mips
- bpf: Use -Wno-error in certain tests when building with GCC
- bpf: Disable some `attribute ignored' warnings in GCC
- bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
- selftests/bpf: Add CFLAGS per source file and runner
- selftests/bpf: Fix wrong binary in Makefile log output
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Use pid_t consistently in test_progs.c
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
- selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
- selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
- selftests/bpf: Fix include of <sys/fcntl.h>
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- samples/bpf: Fix compilation errors with cf-protection option
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
- xz: cleanup CRC32 edits from 2018
- kthread: fix task state in kthread worker if being frozen
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: return error on ext4_find_inline_entry
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
- ext4: check stripe size compatibility on remount as well
- sched/numa: Fix the vma scan starving issue
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
- nilfs2: determine empty node blocks as corrupted
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Fix helper writes to read-only maps
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
- perf mem: Free the allocated sort string, fixing a leak
- perf inject: Fix leader sampling inserting additional samples
- perf report: Fix --total-cycles --stdio output error
- perf sched timehist: Fix missing free of session in perf_sched__timehist()
- perf stat: Display iostat headers correctly
- perf sched timehist: Fixed timestamp error when unable to confirm event
sched_in time
- perf time-utils: Fix 32-bit nsec parsing
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite()
after error detection
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- remoteproc: imx_rproc: Initialize workqueue earlier
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- Input: ilitek_ts_i2c - add report id message validation
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
- PCI: Wait for Link before restoring Downstream Buses
- firewire: core: correct range of block for case of switch statement
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- leds: leds-pca995x: Add support for NXP PCA9956B
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: pca995x: Fix device child node usage in pca995x_probe()
- x86/PCI: Check pcie_find_root_port() return for NULL
- nvdimm: Fix devs leaks in scan_labels()
- PCI: xilinx-nwl: Fix register misspelling
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- pinctrl: single: fix missing error code in pcs_probe()
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
- clk: ti: dra7-atl: Fix leak of of_nodes
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync()
usage
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- nfsd: fix refcount leak when file is unhashed after being found
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- IB/core: Fix ib_cache_setup_one error flow cleanup
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
- RDMA/erdma: Return QP state in erdma_query_qp
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/hns: Don't modify rq next block addr in HIP09 QPC
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- RDMA/mlx5: Obtain upper net device only when needed
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/cxgb4: Added NULL check for lookup_atid
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
- ntb_perf: Fix printk format
- ntb: Force physically contiguous allocation of rx ring buffers
- nfsd: call cache_put if xdr_reserve_space returns NULL
- nfsd: return -EINVAL when namelen is 0
- crypto: caam - Pad SG length when allocating hash edesc
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- f2fs: atomic: fix to avoid racing w/ GC
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: support .shutdown in f2fs_sops
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: prevent atomic file from being dirtied before commit
- f2fs: get rid of online repaire on corrupted directory
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- lib/sbitmap: define swap_lock as raw_spinlock_t
- spi: atmel-quadspi: Avoid overwriting delay register settings
- nvme-multipath: system fails to create generic nvme device
- iio: adc: ad7606: fix oversampling gpio array
- iio: adc: ad7606: fix standby gpio state to match the documentation
- driver core: Fix error handling in driver API device_rename()
- ABI: testing: fix admv8818 attr description
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- driver core: Fix a potential null-ptr-deref in module_add_driver()
- serial: 8250: omap: Cleanup on error in request_irq
- coresight: tmc: sg: Do not leak sg_table
- interconnect: icc-clk: Add missed num_nodes initialization
- cxl/pci: Fix to record only non-zero ranges
- vhost_vdpa: assign irq bypass producer token correctly
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
- Revert "dm: requeue IO if mapping table not yet available"
- net: xilinx: axienet: Schedule NAPI in two steps
- net: xilinx: axienet: Fix packet counting
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
Condition
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- tcp: check skb is non-NULL in tcp_rto_delta_us()
- net: qrtr: Update packets cloning when broadcasting
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
- virtio_net: Fix mismatched buf address when unmapping for small packets
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- netfilter: ctnetlink: compile ctnetlink_label_size with
CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump
path
- io_uring/sqpoll: do not allow pinning outside of cpuset
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- Revert "net: libwx: fix alloc msix vectors failed"
- xen: move checks for e820 conflicts further up
- xen: allow mapping ACPI data using a different physical address
- io_uring/sqpoll: retain test for whether the CPU is valid
- io_uring/sqpoll: do not put cpumask on stack
- Remove *.orig pattern from .gitignore
- PCI: Revert to the original speed after PCIe failed link retraining
- PCI: Clear the LBMS bit after a link retrain
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: Use an error code with PCIe failed link retraining
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- soc: versatile: integrator: fix OF node leak in probe() error path
- Revert "media: tuners: fix error return code of
hybrid_tuner_request_state()"
- iommufd: Protect against overflow of ALIGN() during iova allocation
- Input: adp5588-keys - fix check on return code
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Validate backlight caps are sane
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
- powerpc/atomic: Use YZ constraints for DS-form instructions
- fs: Create a generic is_dot_dotdot() utility
- ksmbd: make __dir_empty() compatible with POSIX
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: handle caseless file creation
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Disallow bus errors during PDMA send
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- usbnet: fix cyclical race on disconnect with work queue
- USB: appledisplay: close race between probe and completion handler
- USB: misc: cypress_cy7c63: check for short transfer
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- usb: cdnsp: Fix incorrect usb_request status
- usb: dwc2: drd: fix clock gating on USB role switch
- bus: integrator-lm: fix OF node leak in probe()
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- firmware_loader: Block path traversal
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- serial: qcom-geni: fix fifo polling timeout
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- ACPI: sysfs: validate return type of _STR method
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
- perf/x86/intel/pt: Fix sampling synchronization
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- debugobjects: Fix conditions in fill_pool()
- btrfs: tree-checker: fix the wrong output of data backref objectid
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- f2fs: fix several potential integer overflows in file offsets
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- f2fs: Require FMODE_WRITE for atomic write ioctls
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
- hwrng: mtk - Use devm_pm_runtime_enable
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- vfs: fix race between evice_inodes() and find_inode()&iput()
- fs: Fix file_set_fowner LSM hook inconsistencies
- nfs: fix memory leak in error path of nfs4_do_reclaim
- EDAC/igen6: Fix conversion of system address to physical memory address
- icmp: change the order of rate limits
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing
of_node_put
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- soc: versatile: realview: fix memory leak during device remove
- soc: versatile: realview: fix soc_dev leak during device remove
- USB: misc: yurex: fix race between read and write
- xhci: Add a quirk for writing ERST in high-low order
- usb: xhci: fix loss of data on Cadence xHC
- pps: remove usage of the deprecated ida_simple_xx() API
- pps: add an error check in parport_attach
- serial: don't use uninitialized value in uart_poll_init()
- x86/idtentry: Incorporate definitions/declarations of the FRED entries
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- lib/bitmap: add bitmap_{read,write}()
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- btrfs: fix race setting file private on concurrent lseek using same fd
- dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- thunderbolt: Improve DisplayPort tunnel setup process to be more robust
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- dm-verity: restart or panic on an I/O error
- lockdep: fix deadlock issue between lockdep and rcu
- mm: only enforce minimum stack gap size if it's sensible
- spi: fspi: add support for imx8ulp
- module: Fix KCOV-ignored file name
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu
read lock
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- i2c: isch: Add missed 'else'
- Documentation: KVM: fix warning in "make htmldocs"
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
- wifi: brcmfmac: add linefeed at end of file
- x86/tdx: Fix "in-kernel MMIO" check
- spi: atmel-quadspi: Fix wrong register value written to MR
- Revert: "dm-verity: restart or panic on an I/O error"
- wifi: ath11k: use work queue to process beacon tx event
- crypto: qat - disable IOV in adf_dev_stop()
- crypto: qat - fix recovery flow for VFs
- crypto: qat - ensure correct order in VF restarting handler
- crypto: iaa - Fix potential use after free bug
- autofs: fix missing fput for FSCONFIG_SET_FD
- arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI
first
- thermal: core: Fold two functions into their respective callers
- thermal: core: Fix rounding of delay jiffies
- perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
- perf/dwc_pcie: Always register for PCIe bus notifier
- ACPI: video: force native for some T2 macbooks
- ACPI: video: force native for Apple MacbookPro9,2
- wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
- wifi: mac80211: fix the comeback long retry times
- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
- ACPICA: executer/exsystem: Don't nag user about every Stall() violating the
spec
- netfilter: nft_dynset: annotate data-races around set timeout
- wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
- crypto: ccp - do not request interrupt on cmd completion when irqs disabled
- wifi: mt76: connac: fix checksum offload fields of connac3 RXD
- net: hsr: Use the seqnr lock for frames received via interlink port.
- crypto: n2 - Set err to EINVAL if snprintf fails for hmac
- firmware: qcom: scm: Disable SDI and write no dump to dump mode
- arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
- arm64: tegra: Correct location of power-sensors for IGX Orin
- arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
- selftests/ftrace: Fix eventfs ownership testcase to find mount point
- iommu/amd: Introduce struct protection_domain.pd_mode
- iommu/amd: Allocate the page table root using GFP_KERNEL
- iommu/amd: Convert comma to semicolon
- platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
- kselftest: dt: Ignore nodes that have ancestors disabled
- bpf, x64: Fix tailcall hierarchy
- bpf, lsm: Add check for BPF LSM return value
- bpf: Fix compare error in function retval_range_within
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta
- selftests/bpf: Support checks against a regular expression
- selftests/bpf: no need to track next_match_pos in struct test_loader
- selftests/bpf: extract test_loader->expect_msgs as a data structure
- selftests/bpf: allow checking xlated programs in verifier_* tests
- selftests/bpf: __arch_* macro to limit test cases to specific archs
- libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
- s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
- sched/deadline: Fix schedstats vs deadline servers
- perf scripts python cs-etm: Restore first sample log in verbose mode
- perf lock contention: Change stack_id type to s32
- quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
- media: staging: media: starfive: camss: Drop obsolete return value
documentation
- leds: gpio: Set num_leds after allocation
- iommufd/selftest: Fix buffer read overrrun in the dirty test
- iommufd: Check the domain owner of the parent before creating a nesting
domain
- RDMA/mlx5: Fix counter update on MR cache mkey creation
- RDMA/mlx5: Drop redundant work canceling from clean_keys()
- RDMA/mlx5: Fix MR cache temp entries cleanup
- RDMA/hns: Fix ah error counter in sw stat not increasing
- Coresight: Set correct cs_mode for TPDM to fix disable issue
- Coresight: Set correct cs_mode for dummy source to fix disable issue
- interconnect: qcom: sm8250: Enable sync_state
- vdpa/mlx5: Fix invalid mr resource destroy
- net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
- selftests: netfilter: Avoid hanging ipvs.sh
- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
- mm: migrate: annotate data-race in migrate_folio_unmap()
- selftests/bpf: correctly move 'log' upon successful match
- soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
- drm/amdgpu/vcn: enable AV1 on both instances
- drm/amd/display: Clean up dsc blocks in accelerated mode
- drm/amd/display: Skip to enable dsc if it has been off
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
- serial: qcom-geni: fix false console tx restart
- crypto: qcom-rng - fix support for ACPI-based systems
- ACPI: resource: Do IRQ override on MECHREV GM7XG0M
- perf/x86/intel: Allow to setup LBR for counting event for BPF
- f2fs: check discard support for conventional zones
- netfs: Delete subtree of 'fs/netfs' when netfs module exits
- md: Don't flush sync_work in md_write_start()
- tools/nolibc: include arch.h from string.h
- KVM: x86: Make x2APIC ID 100% readonly
- x86/mm/cpa: Warn for set_memory_XXcrypted() VMM fails
- x86/mm: Make x86_platform.guest.enc_status_change_*() return an error
- x86/tdx: Account shared memory
- x86/mm: Add callbacks to prepare encrypted memory for kexec
- x86/tdx: Convert shared memory back to private on kexec
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
- idpf: stop using macros for accessing queue descriptors
- fs_parse: add uid & gid option option parsing helpers
- compiler.h: specify correct attribute for .rodata..c_jump_table
- exfat: resolve memory leak from exfat_create_upcase_table()
- s390/ftrace: Avoid calling unwinder in ftrace_return_address()
- fbdev: xen-fbfront: Assign fb_info->device
- [Config] update configs for CONFIG_CRYPTO_AES_GCM_P10
- Upstream stable to v6.6.54, v6.10.13
* Backport some AppArmor complain-mode profile bugfixes from Oracular
(LP: #2086210)
- SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside
aa_alloc_null
- SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure
for complain mode profiles
* Noble update: upstream stable patchset 2024-11-08 (LP: #2087519)
- ASoC: SOF: mediatek: Add missing board compatible
- ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
- ASoC: allow module autoloading for table db1200_pids
- ASoC: allow module autoloading for table board_ids
- scsi: lpfc: Fix overflow build issue
- pinctrl: at91: make it work with current gpiolib
- hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
- microblaze: don't treat zero reserved memory regions as error
- platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match
less strict
- net: ftgmac100: Ensure tx descriptor updates are visible
- LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
- wifi: iwlwifi: lower message level for FW buffer destination
- wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
- wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
- wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
- wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
- wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
- wifi: iwlwifi: clear trans->state earlier upon error
- can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
- ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- ASoC: intel: fix module autoloading
- ASoC: google: fix module autoloading
- ASoC: tda7419: fix module autoloading
- ASoC: fix module autoloading
- spi: spidev: Add an entry for elgin,jg10309-01
- ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
- ALSA: hda: add HDMI codec ID for Intel PTL
- drm: komeda: Fix an issue related to normalized zpos
- spi: bcm63xx: Enable module autoloading
- smb: client: fix hang in wait_for_response() for negproto
- x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
- tools: hv: rm .*.cmd when make clean
- spi: spidev: Add missing spi_device_id for jg10309-01
- ocfs2: add bounds checking to ocfs2_xattr_find_entry()
- ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
- drm: Use XArray instead of IDR for minors
- accel: Use XArray instead of IDR for minors
- drm: Expand max DRM device number to full MINORBITS
- powercap/intel_rapl: Add support for AMD family 1Ah
- netfilter: nft_socket: make cgroupsv2 matching work with namespaces
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in
nft_socket_cgroup_subtree_level()
- nvme-pci: qdepth 1 quirk
- x86/mm: Switch to new Intel CPU model defines
- can: mcp251xfd: properly indent labels
- can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into
mcp251xfd_chip_start/stop()
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- USB: usbtmc: prevent kernel-usb-infoleak
- platform/x86: asus-wmi: Fix spurious rfkill on UX8406MA
- ASoC: mediatek: mt8188-mt6359: Modify key
- clk: qcom: gcc-sm8650: Don't use shared clk_ops for QUPs
- ice: check for XDP rings instead of bpf program when unconfiguring
- powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs
- powercap: intel_rapl: Change an error pointer to NULL
- Upstream stable to v6.6.53, v6.10.12
[ Ubuntu: 6.8.0-52.53 ]
* noble/linux: 6.8.0-52.53 -proposed tracker (LP: #2093521)
* CVE-2024-53164
- net: sched: fix ordering of qlen adjustment
* CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
* CVE-2024-53103
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
[ Ubuntu: 6.8.0-51.52 ]
* noble/linux: 6.8.0-51.52 -proposed tracker (LP: #2090369)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
- [Packaging] update variants
* MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure
(LP: #2087886)
- mm/mglru: only clear kswapd_failures if reclaimable
* CVE-2024-50264
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
* CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
* CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
[ Ubuntu: 6.8.0-50.51 ]
* noble/linux: 6.8.0-50.51 -proposed tracker (LP: #2086301)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2024.10.28)
* Noble update: upstream stable patchset 2024-10-31 (LP: #2086138)
- device property: Add cleanup.h based fwnode_handle_put() scope based
cleanup.
- device property: Introduce device_for_each_child_node_scoped()
- iio: adc: ad7124: Switch from of specific to fwnode based property handling
- ksmbd: override fsids for share path check
- ksmbd: override fsids for smb2_query_info()
- usbnet: ipheth: remove extraneous rx URB length check
- usbnet: ipheth: drop RX URBs with no payload
- usbnet: ipheth: do not stop RX on failing RX callback
- usbnet: ipheth: fix carrier detection in modes 1 and 4
- net: ethernet: use ip_hdrlen() instead of bit shift
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
- drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
- net: phy: vitesse: repair vsc73xx autonegotiation
- powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
- wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
- net: hns3: use correct release function during uninitialization
- btrfs: update target inode's ctime on unlink
- Input: ads7846 - ratelimit the spi_sync error message
- Input: synaptics - enable SMBus for HP Elitebook 840 G2
- HID: multitouch: Add support for GT7868Q
- scripts: kconfig: merge_config: config files: add a trailing newline
- platform/surface: aggregator_registry: Add Support for Surface Pro 10
- platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
- drm/msm/adreno: Fix error return if missing firmware-name
- Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
- smb/server: fix return value of smb2_open()
- NFSv4: Fix clearing of layout segments in layoutreturn
- NFS: Avoid unnecessary rescanning of the per-server delegation list
- platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
- platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
- mptcp: pm: Fix uaf in __timer_delete_sync
- arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on
RK3399 Puma
- arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399
Puma
- minmax: reduce min/max macro expansion in atomisp driver
- net: tighten bad gso csum offset check in virtio_net_hdr
- dm-integrity: fix a race condition when accessing recalc_sector
- x86/hyperv: fix kexec crash due to VP assist page corruption
- mm: avoid leaving partial pfn mappings around in error case
- arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
- drm/amd/display: Disable error correction if it's not supported
- drm/amd/display: Fix FEC_READY write on DP LT
- eeprom: digsy_mtc: Fix 93xx46 driver probe failure
- cxl/core: Fix incorrect vendor debug UUID define
- selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
- hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >=
1.2
- ice: Fix lldp packets dropping after changing the number of channels
- ice: fix accounting for filters shared by multiple VSIs
- ice: fix VSI lists confusion when adding VLANs
- igb: Always call igb_xdp_ring_update_tail() under Tx lock
- net/mlx5: Update the list of the PCI supported devices
- net/mlx5e: Add missing link modes to ptys2ethtool_map
- net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
- net/mlx5: Explicitly set scheduling element and TSAR type
- net/mlx5: Add missing masks and QoS bit masks for scheduling elements
- net/mlx5: Correct TASR typo into TSAR
- net/mlx5: Verify support for scheduling element and TSAR type
- net/mlx5: Fix bridge mode operations when there are no VFs
- fou: fix initialization of grc
- octeontx2-af: Modify SMQ flush sequence to drop packets
- net: ftgmac100: Enable TX interrupt to avoid TX timeout
- selftests: net: csum: Fix checksums for packets with non-zero padding
- netfilter: nft_socket: fix sk refcount leaks
- net: dsa: felix: ignore pending status of TAS module when it's disabled
- net: dpaa: Pad packets to ETH_ZLEN
- tracing/osnoise: Fix build when timerlat is not enabled
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug
- drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
- dma-buf: heaps: Fix off-by-one in CMA heap fault handler
- drm/nouveau/fb: restore init() for ramgp102
- drm/amdgpu/atomfirmware: Silence UBSAN warning
- drm/amd/amdgpu: apply command submission parser for JPEG v1
- spi: geni-qcom: Undo runtime PM changes at driver exit time
- spi: geni-qcom: Fix incorrect free_irq() sequence
- drm/i915/guc: prevent a possible int overflow in wq offsets
- ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
- cifs: Fix signature miscalculation
- pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
- ASoC: meson: axg-card: fix 'use-after-free'
- drm/mediatek: Set sensible cursor width/height values to fix crash
- Input: edt-ft5x06 - add support for FocalTech FT5452 and FT8719
- Input: edt-ft5x06 - add support for FocalTech FT8201
- cgroup/cpuset: Eliminate unncessary sched domains rebuilds in hotplug
- spi: zynqmp-gqspi: Scale timeout by data size
- drm/xe: use devm instead of drmm for managed bo
- net: libwx: fix number of Rx and Tx descriptors
- clocksource: hyper-v: Use lapic timer in a TDX VM without paravisor
- bcachefs: Fix bch2_extents_match() false positive
- bcachefs: Don't delete open files in online fsck
- firmware: qcom: uefisecapp: Fix deadlock in qcuefi_acquire()
- riscv: dts: starfive: jh7110-common: Fix lower rate of CPUfreq by setting
PLL0 rate to 1.5GHz
- cxl: Restore XOR'd position bits during address translation
- netlink: specs: mptcp: fix port endianness
- drm/amd/display: Avoid race between dcn10_set_drr() and dc_state_destruct()
- drm/amd/display: Avoid race between dcn35_set_drr() and dc_state_destruct()
- drm/amd/amdgpu: apply command submission parser for JPEG v2+
- drm/xe/client: fix deadlock in show_meminfo()
- drm/xe/client: remove bogus rcu list usage
- drm/xe/client: add missing bo locking in show_meminfo()
- tracing/kprobes: Fix build error when find_module() is not available
- drm/xe/display: fix compat IS_DISPLAY_STEP() range end
- Upstream stable to v6.6.52, v6.10.11
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849)
- KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
- KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
- ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius
devices
- ALSA: hda/realtek: add patch for internal mic in Lenovo V145
- ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
- ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
- ata: libata: Fix memory leak for error path in ata_host_alloc()
- irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
- x86/kaslr: Expose and use the end of the physical memory address space
- nvme-pci: Add sleep quirk for Samsung 990 Evo
- rust: types: Make Opaque::get const
- rust: macros: provide correct provenance when constructing THIS_MODULE
- Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
- Bluetooth: MGMT: Ignore keys being loaded with invalid type
- mmc: core: apply SD quirks earlier during probe
- mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
- mmc: sdhci-of-aspeed: fix module autoloading
- mmc: cqhci: Fix checking of CQHCI_HALT state
- fuse: update stats for pages in dropped aux writeback list
- fuse: use unsigned type for getxattr/listxattr size truncation
- fuse: fix memory leak in fuse_create_open
- clk: starfive: jh7110-sys: Add notifier for PLL0 clock
- clk: qcom: clk-alpha-pll: Fix the pll post div mask
- clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
- kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
- tracing: Avoid possible softlockup in tracing_iter_reset()
- tracing/timerlat: Add interface_lock around clearing of kthread in
stop_kthread()
- net: mctp-serial: Fix missing escapes on transmit
- x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
- x86/apic: Make x2apic_disable() work correctly
- drm/i915: Do not attempt to load the GSC multiple times
- ALSA: control: Apply sanity check of input values for user elements
- ALSA: hda: Add input value sanity checks to HDMI channel map controls
- wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
- smack: unix sockets: fix accept()ed socket label
- bpf, verifier: Correct tail_call_reachable for bpf prog
- accel/habanalabs/gaudi2: unsecure edma max outstanding register
- irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
- af_unix: Remove put_pid()/put_cred() in copy_peercred().
- x86/kmsan: Fix hook for unaligned accesses
- iommu: sun50i: clear bypass register
- netfilter: nf_conncount: fix wrong variable type
- fs/ntfs3: One more reason to mark inode bad
- riscv: kprobes: Use patch_text_nosync() for insn slots
- media: vivid: fix wrong sizeimage value for mplane
- leds: spi-byte: Call of_node_put() on error path
- wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
- usb: uas: set host status byte on data completion error
- drm/amd/display: Check HDCP returned status
- drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
- media: vivid: don't set HDMI TX controls if there are no HDMI outputs
- vfio/spapr: Always clear TCEs before unsetting the window
- ice: Check all ice_vsi_rebuild() errors in function
- Input: ili210x - use kvmalloc() to allocate buffer for firmware update
- media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
- pcmcia: Use resource_size function on resource object
- drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
- can: m_can: Release irq on error in m_can_open
- can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD
mode
- rust: kbuild: fix export of bss symbols
- cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
- igb: Fix not clearing TimeSync interrupts for 82580
- platform/x86: dell-smbios: Fix error path in dell_smbios_init()
- regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
- can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
- can: kvaser_pciefd: Remove unnecessary comment
- can: kvaser_pciefd: Rename board_irq to pci_irq
- can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
- can: kvaser_pciefd: Use a single write when releasing RX buffers
- Bluetooth: qca: If memdump doesn't work, re-enable IBS
- Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
- Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
- igc: Unlock on error in igc_io_resume()
- ice: do not bring the VSI up, if it was down before the XDP setup
- usbnet: modern method to get random MAC
- bpf, net: Fix a potential race in do_sock_getsockopt()
- bareudp: Fix device stats updates.
- r8152: fix the firmware doesn't work
- net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
- net: dsa: vsc73xx: fix possible subblocks range of CAPT block
- selftests: net: enable bind tests
- firmware: cs_dsp: Don't allow writes to read-only controls
- phy: zynqmp: Take the phy mutex in xlate
- ASoC: topology: Properly initialize soc_enum values
- dm init: Handle minors larger than 255
- iommu/vt-d: Handle volatile descriptor status read
- cgroup: Protect css->cgroup write under css_set_lock
- devres: Initialize an uninitialized struct member
- virtio_ring: fix KMSAN error for premapped mode
- crypto: qat - fix unintentional re-enabling of error interrupts
- ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially
broken alignment
- libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
- drm/amdgpu: Set no_hw_access when VF request full GPU fails
- ext4: fix possible tid_t sequence overflows
- jbd2: avoid mount failed when commit block is partial submitted
- dma-mapping: benchmark: Don't starve others when doing the test
- drm/amdgpu: reject gang submit on reserved VMIDs
- smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
- fs/ntfs3: Check more cases when directory is corrupted
- btrfs: replace BUG_ON with ASSERT in walk_down_proc()
- cxl/region: Verify target positions using the ordered target list
- riscv: set trap vector earlier
- tcp: Don't drop SYN+ACK for simultaneous connect().
- net: dpaa: avoid on-stack arrays of NR_CPUS elements
- LoongArch: Use correct API to map cmdline in relocate_kernel()
- regmap: maple: work around gcc-14.1 false-positive warning
- vfs: Fix potential circular locking through setxattr() and removexattr()
- i3c: master: svc: resend target address when get NACK
- kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
- btrfs: initialize location to fix -Wmaybe-uninitialized in
btrfs_lookup_dentry()
- s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
- usbnet: ipheth: race between ipheth_close and error handling
- spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
- ata: pata_macio: Use WARN instead of BUG
- NFSv4: Add missing rescheduling points in
nfs_client_return_marked_delegations
- ACPI: CPPC: Add helper to get the highest performance value
- cpufreq: amd-pstate: Enable amd-pstate preferred core support
- cpufreq: amd-pstate: fix the highest frequency issue which limits
performance
- tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
- iio: buffer-dmaengine: fix releasing dma channel on error
- iio: fix scale application in iio_convert_raw_to_processed_unlocked
- iio: adc: ad7124: fix config comparison
- iio: adc: ad7606: remove frstdata check for serial mode
- iio: adc: ad7124: fix chip ID mismatch
- usb: dwc3: core: update LC timer as per USB Spec V3.2
- usb: cdns2: Fix controller reset issue
- usb: dwc3: Avoid waking up gadget during startxfer
- nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
- Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
- clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
- clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
- clocksource/drivers/timer-of: Remove percpu irq related code
- uprobes: Use kzalloc to allocate xol area
- Revert "mm: skip CMA pages when they are not available"
- workqueue: wq_watchdog_touch is always called with valid CPU
- workqueue: Improve scalability of workqueue watchdog touch
- ACPI: processor: Return an error if acpi_processor_get_info() fails in
processor_add()
- ACPI: processor: Fix memory leaks in error paths of processor_add()
- arm64: acpi: Move get_cpu_for_acpi_id() to a header
- can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate
function
- can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
- can: mcp251xfd: clarify the meaning of timestamp
- can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
- drm/amd: Add gfx12 swizzle mode defs
- drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
- ata: libata-scsi: Remove redundant sense_buffer memsets
- ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
- crypto: starfive - Align rsa input data to 32-bit
- crypto: starfive - Fix nent assignment in rsa dec
- clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
- powerpc/64e: remove unused IBM HTW code
- powerpc/64e: split out nohash Book3E 64-bit code
- powerpc/64e: Define mmu_pte_psize static
- powerpc/vdso: Don't discard rela sections
- ASoC: tegra: Fix CBB error during probe()
- nvme-pci: allocate tagset on reset if necessary
- ASoc: SOF: topology: Clear SOF link platform name upon unload
- ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
- clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
- clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
- drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
- drm/i915/fence: Mark debug_fence_free() with __maybe_unused
- gpio: rockchip: fix OF node leak in probe()
- gpio: modepin: Enable module autoloading
- riscv: Fix toolchain vector detection
- riscv: Do not restrict memory size because of linear mapping on nommu
- membarrier: riscv: Add full memory barrier in switch_mm()
- [Config] updateconfigs for ARCH_HAS_MEMBARRIER_CALLBACKS
- x86/mm: Fix PTI for i386 some more
- btrfs: fix race between direct IO write and fsync when using same fd
- spi: spi-fsl-lpspi: Fix off-by-one in prescale max
- ALSA: hda/realtek: Enable Mute Led for HP Victus 15-fb1xxx
- ALSA: hda/realtek - Fix inactive headset mic jack for ASUS Vivobook 15
X1504VAP
- fuse: clear PG_uptodate when using a stolen page
- riscv: misaligned: remove CONFIG_RISCV_M_MODE specific code
- parisc: Delay write-protection until mark_rodata_ro() call
- pinctrl: qcom: x1e80100: Bypass PDC wakeup parent for now
- maple_tree: remove rcu_read_lock() from mt_validate()
- Revert "wifi: ath11k: restore country code during resume"
- btrfs: qgroup: don't use extent changeset when not needed
- btrfs: zoned: handle broken write pointer on zones
- drm/xe/gsc: Do not attempt to load the GSC multiple times
- drm/amdgpu: always allocate cleared VRAM for GEM allocations
- drm/amd/display: Lock DC and exit IPS when changing backlight
- ALSA: hda/realtek: extend quirks for Clevo V5[46]0
- cgroup/cpuset: Delay setting of CS_CPU_EXCLUSIVE until valid partition
- virt: sev-guest: Mark driver struct with __refdata to prevent section
mismatch
- media: b2c2: flexcop-usb: fix flexcop_usb_memory_req
- gve: Add adminq mutex lock
- wifi: rtw89: wow: prevent to send unexpected H2C during download Firmware
- drm/amdgpu: add missing error handling in function
amdgpu_gmc_flush_gpu_tlb_pasid
- crypto: qat - initialize user_input.lock for rate_limiting
- locking: Add rwsem_assert_held() and rwsem_assert_held_write()
- fs: don't copy to userspace under namespace semaphore
- fs: relax permissions for statmount()
- seccomp: release task filters when the task exits
- drm/amdgpu/display: handle gfx12 in amdgpu_dm_plane_format_mod_supported
- can: m_can: Remove m_can_rx_peripheral indirection
- can: m_can: Do not cancel timer from within timer
- mm: Provide a means of invalidation without using launder_folio
- cifs: Fix copy offload to flush destination region
- hwmon: ltc2991: fix register bits defines
- scripts: fix gfp-translate after ___GFP_*_BITS conversion to an enum
- ptp: ocp: convert serial ports to array
- ptp: ocp: adjust sysfs entries to expose tty information
- ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset
- ice: remove ICE_CFG_BUSY locking from AF_XDP code
- net: xilinx: axienet: Fix race in axienet_stop
- iommu/vt-d: Remove control over Execute-Requested requests
- block: don't call bio_uninit from bio_endio
- tracing/kprobes: Add symbol counting check when module loads
- perf/x86/intel: Hide Topdown metrics events if the feature is not enumerated
- PCI: qcom: Override NO_SNOOP attribute for SA8775P RC
- staging: vchiq_core: Bubble up wait_event_interruptible() return value
- watchdog: imx7ulp_wdt: keep already running watchdog enabled
- btrfs: slightly loosen the requirement for qgroup removal
- drm/amdgpu: add PSP RAS address query command
- drm/amdgpu: add mutex to protect ras shared memory
- s390/boot: Do not assume the decompressor range is reserved
- drm/amdgpu: Fix two reset triggered in a row
- drm/amdgpu: Add reset_context flag for host FLR
- drm/amdgpu: Fix amdgpu_device_reset_sriov retry logic
- fs: only copy to userspace on success in listmount()
- iio: adc: ad7124: fix DT configuration parsing
- nvmem: u-boot-env: error if NVMEM device is too small
- mm: zswap: rename is_zswap_enabled() to zswap_is_enabled()
- mm/memcontrol: respect zswap.writeback setting from parent cg too
- path: add cleanup helper
- fs: simplify error handling
- fs: relax permissions for listmount()
- hid: bpf: add BPF_JIT dependency
- net/mlx5e: SHAMPO, Use KSMs instead of KLMs
- net/mlx5e: SHAMPO, Fix page leak
- drm/xe/xe2: Add workaround 14021402888
- drm/xe/xe2lpg: Extend workaround 14021402888
- clk: qcom: gcc-x1e80100: Fix USB 0 and 1 PHY GDSC pwrsts flags
- clk: qcom: gcc-x1e80100: Don't use parking clk_ops for QUPs
- nouveau: fix the fwsec sb verification register.
- riscv: Add tracepoints for SBI calls and returns
- riscv: Improve sbi_ecall() code generation by reordering arguments
- riscv: Fix RISCV_ALTERNATIVE_EARLY
- cifs: Fix zero_point init on inode initialisation
- nvme: rename nvme_sc_to_pr_err to nvme_status_to_pr_err
- nvme: fix status magic numbers
- nvme: rename CDR/MORE/DNR to NVME_STATUS_*
- nvmet: Identify-Active Namespace ID List command should reject invalid nsid
- drm/i915/display: Add mechanism to use sink model when applying quirk
- drm/i915/display: Increase Fast Wake Sync length as a quirk
- LoongArch: Use accessors to page table entries instead of direct dereference
- Upstream stable to v6.6.51, v6.10.10
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46823
- kunit/overflow: Fix UB in overflow_allocation_test
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46834
- ethtool: fail closed if we can't get max channel used in indirection tables
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46751
- btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46753
- btrfs: handle errors from btrfs_dec_ref() properly
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46841
- btrfs: don't BUG_ON on ENOMEM from btrfs_lookup_extent_info() in
walk_down_proc()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46754
- bpf: Remove tst_run from lwt_seg6local_prog_ops.
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46824
- iommufd: Require drivers to supply the cache_invalidate_user ops
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46842
- scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46766
- ice: move netif_queue_set_napi to rtnl-protected sections
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46772
- drm/amd/display: Check denominator crb_pipes before used
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46774
- powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46775
- drm/amd/display: Validate function returns
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46778
- drm/amd/display: Check UnboundedRequestEnabled's value
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46779
- drm/imagination: Free pvr_vm_gpuva after unlink
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46792
- riscv: misaligned: Restrict user access to kernel memory
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46793
- ASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46735
- ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46737
- nvmet-tcp: fix kernel crash if commands allocation fails
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46822
- arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46713
- perf/aux: Fix AUX buffer serialization
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46739
- uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46740
- binder: fix UAF caused by offsets overwrite
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46741
- misc: fastrpc: Fix double free of 'buf' in error path
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47663
- staging: iio: frequency: ad9834: Validate frequency parameter value
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46832
- MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47668
- lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46744
- Squashfs: sanity check symbolic link size
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46745
- Input: uinput - reject requests with unreasonable number of slots
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46746
- HID: amd_sfh: free driver_data after destroying hid device
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47664
- spi: hisi-kunpeng: Add verification for the max_frequency provided by the
firmware
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47665
- i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46749
- Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46750
- PCI: Add missing bridge lock to pci_bus_lock()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46752
- btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46840
- btrfs: clean up our handling of refs == 0 in snapshot delete
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46755
- wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47666
- scsi: pm80xx: Set phy->enable_completion only when we wait for it
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46843
- scsi: ufs: core: Remove SCSI host only if added
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46760
- wifi: rtw88: usb: schedule rx work after everything is set up
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46761
- pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46844
- um: line: always fill *error_out in setup_one_line()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46762
- xen: privcmd: Fix possible access to a freed kirqfd instance
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46763
- fou: Fix null-ptr-deref in GRO.
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46765
- ice: protect XDP configuration with a mutex
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46767
- net: phy: Fix missing of_node_put() for leds
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46768
- hwmon: (hp-wmi-sensors) Check if WMI event data exists
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46770
- ice: Add netif_device_attach/detach into PF reset flow
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46771
- can: bcm: Remove proc entry when dev is unregistered.
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46773
- drm/amd/display: Check denominator pbn_div before used
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47667
- PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46835
- drm/amdgpu: Fix smatch static checker warning
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46776
- drm/amd/display: Run DC_LOG_DC after checking link->link_enc
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46836
- usb: gadget: aspeed_udc: validate endpoint index for ast udc
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46777
- udf: Avoid excessive partition lengths
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46825
- wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46826
- ELF: fix kernel.randomize_va_space double read
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46827
- wifi: ath12k: fix firmware crash due to invalid peer nss
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-47669
- nilfs2: fix state management in error path of log writing function
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46780
- nilfs2: protect references to superblock parameters exposed in sysfs
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46781
- nilfs2: fix missing cleanup on rollforward recovery error
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46828
- sched: sch_cake: fix bulk flow accounting logic for host fairness
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46782
- ila: call nf_unregister_net_hooks() sooner
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46783
- tcp_bpf: fix return value of tcp_bpf_sendmsg()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46784
- net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46785
- eventfs: Use list_del_rcu() for SRCU protected list variable
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46786
- fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46787
- userfaultfd: fix checks for huge PMDs
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46838
- userfaultfd: don't BUG_ON() if khugepaged yanks our page table
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46845
- tracing/timerlat: Only clear timer if a kthread exists
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46788
- tracing/osnoise: Use a cpumask to know what threads are kthreads
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46846
- spi: rockchip: Resolve unbalanced runtime PM / system PM handling
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46847
- mm: vmalloc: ensure vmap_block is initialised before adding to queue
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46791
- can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46829
- rtmutex: Drop rt_mutex::wait_lock before scheduling
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46848
- perf/x86/intel: Limit the period on Haswell
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46794
- x86/tdx: Fix data leak in mmio_read()
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46795
- ksmbd: unset the binding mark of a reused connection
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46797
- powerpc/qspinlock: Fix deadlock in MCS queue
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46830
- KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46798
- ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
* Noble update: upstream stable patchset 2024-10-29 (LP: #2085849) //
CVE-2024-46831
- net: microchip: vcap: Fix use-after-free error in kunit test
* Navi24 RX6300 light up issue on 6.8 kernel (LP: #2084513)
- drm/amd/display: Ensure populate uclk in bb construction
* Noble update: upstream stable patchset 2024-10-18 (LP: #2084941)
- drm/fb-helper: Don't schedule_work() to flush frame buffer during panic()
- drm: panel-orientation-quirks: Add quirk for OrangePi Neo
- scsi: ufs: core: Check LSDBS cap when !mcq
- scsi: ufs: core: Bypass quick recovery if force reset is needed
- btrfs: tree-checker: validate dref root and objectid
- ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
- ALSA: hda/conexant: Mute speakers at suspend / shutdown
- ALSA: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: ump: Explicitly reset RPN with Null RPN
- ALSA: seq: ump: Use the common RPN/bank conversion context
- ALSA: seq: ump: Transmit RPN/NRPN message at each MSB/LSB data reception
- ALSA: seq: ump: Explicitly reset RPN with Null RPN
- net/mlx5: DR, Fix 'stack guard page was hit' error in dr_rule
- ASoC: amd: yc: Support mic on HP 14-em0002la
- spi: hisi-kunpeng: Add validation for the minimum value of speed_hz
- i2c: Fix conditional for substituting empty ACPI functions
- dma-debug: avoid deadlock between dma debug vs printk and netconsole
- net: usb: qmi_wwan: add MeiG Smart SRM825L
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
- ASoC: codecs: ES8326: button detect issue
- selftests: mptcp: userspace pm create id 0 subflow
- selftests: mptcp: dump userspace addrs list
- selftests: mptcp: userspace pm get addr tests
- selftests: mptcp: declare event macros in mptcp_lib
- selftests: mptcp: join: cannot rm sf if closed
- selftests: mptcp: add explicit test case for remove/readd
- selftests: mptcp: join: check re-using ID of unused ADD_ADDR
- selftests: mptcp: join: check re-adding init endp with != id
- selftests: mptcp: add mptcp_lib_events helper
- selftests: mptcp: join: validate event numbers
- selftests: mptcp: join: check re-re-adding ID 0 signal
- selftests: mptcp: join: test for flush/re-add endpoints
- selftests: mptcp: join: disable get and dump addr checks
- selftests: mptcp: join: stop transfer when check is done (part 2.2)
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
- drm/amd/display: Assign linear_pitch_alignment even for VM
- drm/amdgpu: fix overflowed array index read warning
- drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
- drm/amd/pm: fix uninitialized variable warning
- drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
- drm/amd/pm: fix warning using uninitialized value of max_vid_step
- drm/amd/pm: Fix negative array index read
- drm/amd/pm: fix the Out-of-bounds read warning
- drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
- drm/amdgpu: avoid reading vf2pf info size from FB
- drm/amd/display: Check gpio_id before used as array index
- drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
- drm/amd/display: Check index for aux_rd_interval before using
- drm/amd/display: Add array index check for hdcp ddc access
- drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
- drm/amd/display: Check msg_id before processing transcation
- drm/amd/display: Fix Coverity INTERGER_OVERFLOW within
construct_integrated_info
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
dal_gpio_service_create
- drm/amd/display: Spinlock before reading event
- drm/amd/display: Fix Coverity INTEGER_OVERFLOW within
decide_fallback_link_setting_max_bw_policy
- drm/amd/display: Ensure index calculation will not overflow
- drm/amd/display: Skip inactive planes within
ModeSupportAndSystemConfiguration
- drm/amd/display: Fix index may exceed array range within
fpu_update_bw_bounding_box
- drm/amd/amdgpu: Check tbo resource pointer
- drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
- drm/amdgpu/pm: Fix uninitialized variable warning for smu10
- drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
- drm/amdgpu: Fix the uninitialized variable warning
- drm/amdkfd: Check debug trap enable before write dbg_ev_file
- drm/amdkfd: Reconcile the definition and use of oem_id in struct
kfd_topology_device
- apparmor: fix possible NULL pointer dereference
- wifi: ath12k: initialize 'ret' in ath12k_qmi_load_file_target_mem()
- wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
- drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy
SOCs
- drm/amdgpu: Fix the warning division or modulo by zero
- drm/amdgpu: fix dereference after null check
- drm/amdgpu: fix the waring dereferencing hive
- drm/amd/pm: check specific index for aldebaran
- drm/amd/pm: check specific index for smu13
- drm/amdgpu: the warning dereferencing obj for nbio_v7_4
- drm/amd/pm: check negtive return for table entries
- wifi: rtw89: ser: avoid multiple deinit on same CAM
- drm/kfd: Correct pinned buffer handling at kfd restore and validate process
- drm/amdgpu: update type of buf size to u32 for eeprom functions
- wifi: iwlwifi: remove fw_running op
- cpufreq: scmi: Avoid overflow of target_freq in fast switch
- PCI: al: Check IORESOURCE_BUS existence during probe
- wifi: mac80211: check ieee80211_bss_info_change_notify() against MLD
- hwspinlock: Introduce hwspin_lock_bust()
- soc: qcom: smem: Add qcom_smem_bust_hwspin_lock_by_host()
- RDMA/efa: Properly handle unexpected AQ completions
- ionic: fix potential irq name truncation
- pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
- rcu/nocb: Remove buggy bypass lock contention mitigation
- media: v4l2-cci: Always assign *val
- usbip: Don't submit special requests twice
- usb: typec: ucsi: Fix null pointer dereference in trace
- fsnotify: clear PARENT_WATCHED flags lazily
- net: remove NULL-pointer net parameter in ip_metrics_convert
- drm/amdgu: fix Unintentional integer overflow for mall size
- regmap: spi: Fix potential off-by-one when calculating reserved size
- smack: tcp: ipv4, fix incorrect labeling
- platform/chrome: cros_ec_lpc: MEC access can use an AML mutex
- net/mlx5e: SHAMPO, Fix incorrect page release
- drm/meson: plane: Add error handling
- crypto: stm32/cryp - call finalize with bh disabled
- gfs2: Revert "Add quota_change type"
- drm/bridge: tc358767: Check if fully initialized before signalling HPD event
via IRQ
- dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking
callbacks
- dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
- hwmon: (k10temp) Check return value of amd_smn_read()
- wifi: cfg80211: make hash table duplicates more survivable
- f2fs: fix to do sanity check on blocks for inline_data inode
- driver: iio: add missing checks on iio_info's callback access
- block: remove the blk_flush_integrity call in blk_integrity_unregister
- drm/amdgpu: add skip_hw_access checks for sriov
- drm/amdgpu: add lock in amdgpu_gart_invalidate_tlb
- drm/amdgpu: add lock in kfd_process_dequeue_from_device
- drm/amd/display: Don't use fsleep for PSR exit waits on dmub replay
- drm/amd/display: added NULL check at start of dc_validate_stream
- drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
- drm/amd/display: use preferred link settings for dp signal only
- drm/amd/display: Check BIOS images before it is used
- drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
- media: uvcvideo: Enforce alignment of frame and interval
- virtio_net: Fix napi_skb_cache_put warning
- i2c: Use IS_REACHABLE() for substituting empty ACPI functions
- btrfs: factor out stripe length calculation into a helper
- btrfs: scrub: update last_physical after scrubbing one stripe
- btrfs: fix qgroup reserve leaks in cow_file_range
- virtio-net: check feature before configuring the vq coalescing command
- drm/amd/display: Handle the case which quad_part is equal 0
- drm/amdgpu: Handle sg size limit for contiguous allocation
- drm/amd/pm: fix uninitialized variable warning for smu_v13
- drm/amdgpu: fix uninitialized scalar variable warning
- drm/amd/display: Ensure array index tg_inst won't be -1
- drm/amd/display: handle invalid connector indices
- drm/amd/display: Increase MAX_LINKS by 2
- drm/amd/display: Stop amdgpu_dm initialize when link nums greater than
max_links
- drm/amd/display: Fix incorrect size calculation for loop
- drm/amd/display: Use kcalloc() instead of kzalloc()
- drm/amd/display: Add missing NULL pointer check within
dpcd_extend_address_range
- drm/amd/display: Release state memory if amdgpu_dm_create_color_properties
fail
- drm/amd/display: Check link_index before accessing dc->links[]
- drm/amd/display: Add otg_master NULL check within
resource_log_pipe_topology_update
- drm/amd/display: Release clck_src memory if clk_src_construct fails
- drm/amd/display: Fix writeback job lock evasion within dm_crtc_high_irq
- drm/xe: Demote CCS_MODE info to debug only
- drm/drm-bridge: Drop conditionals around of_node pointers
- drm/amdgpu: fix uninitialized variable warning for amdgpu_xgmi
- drm/amdgpu: fix uninitialized variable warning for jpeg_v4
- drm/amdgpu: Fix uninitialized variable warning in amdgpu_info_ioctl
- wifi: ath12k: initialize 'ret' in ath12k_dp_rxdma_ring_sel_config_wcn7850()
- drm/amdgpu/pm: Check input value for power profile setting on smu11, smu13
and smu14
- drm/xe: Fix the warning conditions
- drm/amd/display: Fix pipe addition logic in calc_blocks_to_ungate DCN35
- wifi: cfg80211: restrict operation during radar detection
- remoteproc: qcom_q6v5_pas: Add hwspinlock bust on stop
- tcp: annotate data-races around tw->tw_ts_recent and tw->tw_ts_recent_stamp
- drm/xe: Don't overmap identity VRAM mapping
- net: tcp/dccp: prepare for tw_timer un-pinning
- drm/xe: Ensure caller uses sole domain for xe_force_wake_assert_held
- drm/xe: Check valid domain is passed in xe_force_wake_ref
- thermal: trip: Use READ_ONCE() for lockless access to trip properties
- drm/xe: Add GuC state asserts to deregister_exec_queue
- drm/amdgpu: fix overflowed constant warning in mmhub_set_clockgating()
- drm/amd/display: Remove register from DCN35 DMCUB diagnostic collection
- drm/amd/display: Disable DMCUB timeout for DCN35
- drm/amd/display: Avoid overflow from uint32_t to uint8_t
- pinctrl: core: reset gpio_device in loop in pinctrl_pins_show()
- Upstream stable to v6.6.50, v6.10.9
* CVE-2024-46747
- HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
* CVE-2024-46725
- drm/amdgpu: Fix out-of-bounds write warning
* CVE-2024-46724
- drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
* [SRU] Fix AST DP output after resume (LP: #2083022)
- drm/ast: Inline drm_simple_encoder_init()
- drm/ast: Implement atomic enable/disable for encoders
- drm/ast: Program mode for AST DP in atomic_mode_set
- drm/ast: Move mode-setting code into mode_set_nofb CRTC helper
- drm/ast: Handle primary-plane format setup in atomic_update
- drm/ast: Remove gamma LUT updates from DPMS code
- drm/ast: Only set VGA SCREEN_DISABLE bit in CRTC code
- drm/ast: Inline ast_crtc_dpms() into callers
- drm/ast: Use drm_atomic_helper_commit_tail() helper
* UBSAN array-index-out-of-bounds reported with N-6.8 on P9 node baltar
(LP: #2078038)
- scripts/kernel-doc: reindent
- compiler_types: add Endianness-dependent __counted_by_{le, be}
- scsi: aacraid: union aac_init: Replace 1-element array with flexible array
- scsi: aacraid: struct aac_ciss_phys_luns_resp: Replace 1-element array with
flexible array
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- scsi: aacraid: struct {user, }sgmap{, 64, raw}: Replace 1-element arrays
with flexible arrays
* r8169: transmit queue 0 timed out error when re-plugging the Ethernet cable
(LP: #2084526)
- r8169: disable ALDPS per default for RTL8125
* [SRU] cpufreq: intel_pstate: Support Emerald Rapids OOB mode (LP: #2084834)
- cpufreq: intel_pstate: Support Emerald Rapids OOB mode
* CVE-2024-46723
- drm/amdgpu: fix ucode out-of-bounds read warning
* CVE-2024-46743
- of/irq: Prevent device address out-of-bounds read in interrupt map walk
* CVE-2024-46757
- hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
* [SRU] Ubuntu 24.04 - GPU cannot be installed with DL380a Gen12 (2P, SRF-SP)
(LP: #2081079)
- perf/x86/uncore: Save the unit control address of all units
- perf/x86/uncore: Support per PMU cpumask
- perf/x86/uncore: Retrieve the unit ID from the unit control RB tree
- perf/x86/uncore: Apply the unit control RB tree to MMIO uncore units
- perf/x86/uncore: Apply the unit control RB tree to MSR uncore units
- perf/x86/uncore: Apply the unit control RB tree to PCI uncore units
- perf/x86/uncore: Cleanup unused unit structure
- perf/x86/intel/uncore: Support HBM and CXL PMON counters
* Noble update: upstream stable patchset 2024-10-11 (LP: #2084225)
- ALSA: seq: Skip event type filtering for UMP events
- LoongArch: Remove the unused dma-direct.h
- btrfs: fix a use-after-free when hitting errors inside btrfs_submit_chunk()
- btrfs: run delayed iputs when flushing delalloc
- smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req()
- pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins
- pinctrl: single: fix potential NULL dereference in pcs_get_function()
- wifi: wfx: repair open network AP mode
- wifi: mwifiex: duplicate static structs used in driver instances
- net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response
- mptcp: close subflow when receiving TCP+FIN
- mptcp: sched: check both backup in retrans
- mptcp: pm: reuse ID 0 after delete and re-add
- mptcp: pm: skip connecting to already established sf
- mptcp: pm: reset MPC endp ID when re-added
- mptcp: pm: send ACK on an active subflow
- mptcp: pm: do not remove already closed subflows
- mptcp: pm: fix ID 0 endp usage after multiple re-creations
- mptcp: pm: ADD_ADDR 0 is not a new address
- selftests: mptcp: join: check removing ID 0 endpoint
- selftests: mptcp: join: no extra msg if no counter
- selftests: mptcp: join: check re-re-adding ID 0 endp
- drm/amdgpu/swsmu: always force a state reprogram on init
- drm/vmwgfx: Fix prime with external buffers
- usb: typec: fix up incorrectly backported "usb: typec: tcpm: unregister
existing source caps before re-registration"
- ASoC: amd: acp: fix module autoloading
- ASoC: SOF: amd: Fix for acp init sequence
- pinctrl: mediatek: common-v2: Fix broken bias-disable for
PULL_PU_PD_RSEL_TYPE
- pinctrl: starfive: jh7110: Correct the level trigger configuration of iev
register
- ovl: pass string to ovl_parse_layer()
- ovl: fix wrong lowerdir number check for parameter Opt_lowerdir
- ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err
- mm: Fix missing folio invalidation calls during truncation
- cifs: Fix FALLOC_FL_PUNCH_HOLE support
- selinux,smack: don't bypass permissions check in inode_setsecctx hook
- iommufd: Do not allow creating areas without READ or WRITE
- phy: fsl-imx8mq-usb: fix tuning parameter name
- dmaengine: dw-edma: Fix unmasking STOP and ABORT interrupts for HDMA
- dmaengine: dw-edma: Do not enable watermark interrupts for HDMA
- phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume
- dmaengine: dw: Add peripheral bus width verification
- dmaengine: dw: Add memory bus width verification
- Bluetooth: btnxpuart: Resolve TX timeout error in power save stress test
- Bluetooth: btnxpuart: Handle FW Download Abort scenario
- Bluetooth: btnxpuart: Fix random crash seen while removing driver
- Bluetooth: hci_core: Fix not handling hibernation actions
- iommu: Do not return 0 from map_pages if it doesn't do anything
- netfilter: nf_tables: restore IP sanity checks for netdev/egress
- wifi: iwlwifi: fw: fix wgds rev 3 exact size
- ethtool: check device is present when getting link settings
- netfilter: nf_tables_ipv6: consider network offset in netdev/egress
validation
- selftests: forwarding: no_forwarding: Down ports on cleanup
- selftests: forwarding: local_termination: Down ports on cleanup
- bonding: implement xdo_dev_state_free and call it after deletion
- bonding: extract the use of real_device into local variable
- bonding: change ipsec_lock from spin lock to mutex
- gtp: fix a potential NULL pointer dereference
- sctp: fix association labeling in the duplicate COOKIE-ECHO case
- drm/amd/display: avoid using null object of framebuffer
- net: busy-poll: use ktime_get_ns() instead of local_clock()
- nfc: pn533: Add poll mod list filling check
- soc: qcom: cmd-db: Map shared memory as WC, not WB
- soc: qcom: pmic_glink: Actually communicate when remote goes down
- soc: qcom: pmic_glink: Fix race during initialization
- cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
- scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress
- USB: serial: option: add MeiG Smart SRM825L
- ARM: dts: imx6dl-yapp43: Increase LED current to match the yapp4 HW design
- usb: dwc3: omap: add missing depopulate in probe error path
- usb: dwc3: core: Prevent USB core invalid event buffer address access
- usb: dwc3: st: fix probed platform device ref count on probe error path
- usb: dwc3: st: add missing depopulate in probe error path
- usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in
remove_power_attributes()
- usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
- usb: cdnsp: fix for Link TRB with TC
- ARM: dts: omap3-n900: correct the accelerometer orientation
- arm64: dts: imx8mp-beacon-kit: Fix Stereo Audio on WM8962
- arm64: dts: imx93: add nvmem property for fec1
- arm64: dts: imx93: add nvmem property for eqos
- arm64: dts: imx93: update default value for snps,clk-csr
- arm64: dts: freescale: imx93-tqma9352: fix CMA alloc-ranges
- arm64: dts: freescale: imx93-tqma9352-mba93xxla: fix typo
- scsi: aacraid: Fix double-free on probe failure
- apparmor: fix policy_unpack_test on big endian systems
- mptcp: pr_debug: add missing \n at the end
- mptcp: make pm_remove_addrs_and_subflows static
- mptcp: pm: fix RM_ADDR ID for the initial subflow
- mptcp: avoid duplicated SUB_CLOSED events
- drm/i915/dsi: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- drm/vmwgfx: Prevent unmapping active read buffers
- drm/vmwgfx: Disable coherent dumb buffers without 3d
- firmware/sysfb: Set firmware-framebuffer parent device
- firmware/sysfb: Create firmware device only for enabled PCI devices
- video/aperture: optionally match the device in sysfb_disable()
- drm/xe: Prepare display for D3Cold
- drm/xe/display: Make display suspend/resume work on discrete
- drm/xe/vm: Simplify if condition
- drm/xe/exec_queue: Rename xe_exec_queue::compute to xe_exec_queue::lr
- drm/xe: prevent UAF around preempt fence
- pinctrl: qcom: x1e80100: Update PDC hwirq map
- ASoC: SOF: amd: move iram-dram fence register programming sequence
- nfsd: ensure that nfsd4_fattr_args.context is zeroed out
- backing-file: convert to using fops->splice_write
- pinctrl: qcom: x1e80100: Fix special pin offsets
- afs: Fix post-setattr file edit to do truncation correctly
- netfs: Fix netfs_release_folio() to say no if folio dirty
- netfs: Fix missing iterator reset on retry of short read
- dmaengine: ti: omap-dma: Initialize sglen after allocation
- pktgen: use cpus_read_lock() in pg_net_init()
- net_sched: sch_fq: fix incorrect behavior for small weights
- tcp: fix forever orphan socket caused by tcp_abort
- drm/xe/hwmon: Fix WRITE_I1 param from u32 to u16
- usb: typec: fsa4480: Relax CHIP_ID check
- firmware: qcom: scm: Mark get_wq_ctx() as atomic call
- usb: gadget: uvc: queue pump work in uvcg_video_enable()
- usb: dwc3: xilinx: add missing depopulate in probe error path
- usb: typec: ucsi: Move unregister out of atomic section
- firmware: microchip: fix incorrect error report of programming:timeout on
success
- Upstream stable to v6.6.49, v6.10.8
* Fix blank screen on external display after reconnecting the USB type-C
(LP: #2081786) // Noble update: upstream stable patchset 2024-10-11
(LP: #2084225)
- drm/i915/display: add intel_display -> drm_device backpointer
- drm/i915/display: add generic to_intel_display() macro
- drm/i915/dp_mst: Fix MST state after a sink reset
* Noble update: upstream stable patchset 2024-10-09 (LP: #2084005)
- tty: serial: fsl_lpuart: mark last busy before uart_add_one_port
- tty: atmel_serial: use the correct RTS flag.
- Revert "ACPI: EC: Evaluate orphan _REG under EC device"
- Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD"
- Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET"
- selinux: revert our use of vma_is_initial_heap()
- fuse: Initialize beyond-EOF page contents before setting uptodate
- char: xillybus: Don't destroy workqueue from work item running on it
- char: xillybus: Refine workqueue handling
- char: xillybus: Check USB endpoints when probing device
- ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET
- ALSA: usb-audio: Support Yamaha P-125 quirk entry
- xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration
- thunderbolt: Mark XDomain as unplugged when router is removed
- ALSA: hda/tas2781: fix wrong calibrated data order
- s390/dasd: fix error recovery leading to data corruption on ESE devices
- KVM: s390: fix validity interception issue when gisa is switched off
- riscv: change XIP's kernel_map.size to be size of the entire kernel
- i2c: tegra: Do not mark ACPI devices as irq safe
- ACPICA: Add a depth argument to acpi_execute_reg_methods()
- ACPI: EC: Evaluate _REG outside the EC scope more carefully
- arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to
NUMA_NO_NODE
- dm resume: don't return EINVAL when signalled
- dm persistent data: fix memory allocation failure
- fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64()
- s390/cio: rename bitmap_size() -> idset_bitmap_size()
- btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits()
- bitmap: introduce generic optimized bitmap_size()
- fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- rtla/osnoise: Prevent NULL dereference in error handling
- net: mana: Fix RX buf alloc_size alignment and atomic op panic
- net: mana: Fix doorbell out of order violation and avoid unnecessary
doorbell rings
- wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion
- selinux: fix potential counting error in avc_add_xperms_decision()
- selinux: add the processing of the failure of avc_add_xperms_decision()
- mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu
- btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type
- btrfs: zoned: properly take lock to read/update block group's zoned
variables
- btrfs: tree-checker: add dev extent item checks
- drm/amdgpu: Actually check flags for all context ops.
- memcg_write_event_control(): fix a user-triggerable oops
- drm/amdgpu/jpeg2: properly set atomics vmid field
- drm/amdgpu/jpeg4: properly set atomics vmid field
- s390/uv: Panic for set and remove shared access UVC errors
- bpf: Fix updating attached freplace prog in prog_array map
- igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer
- igc: Fix qbv_config_change_errors logics
- igc: Fix reset adapter logics when tx mode change
- net/mlx5e: Take state lock during tx timeout reporter
- net/mlx5e: Correctly report errors for ethtool rx flows
- net: axienet: Fix register defines comment description
- net: dsa: vsc73xx: pass value in phy_write operation
- net: dsa: vsc73xx: use read_poll_timeout instead delay loop
- net: dsa: vsc73xx: check busy flag in MDIO operations
- net: ethernet: mtk_wed: fix use-after-free panic in
mtk_wed_setup_tc_block_cb()
- mlxbf_gige: disable RX filters until RX path initialized
- mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size
- tcp: Update window clamping condition
- netfilter: allow ipv6 fragments to arrive on different devices
- netfilter: flowtable: initialise extack before use
- netfilter: nf_queue: drop packets with cloned unconfirmed conntracks
- netfilter: nf_tables: Audit log dump reset after the fact
- netfilter: nf_tables: Introduce nf_tables_getobj_single
- netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests
- vsock: fix recursive ->recvmsg calls
- selftests: net: lib: ignore possible errors
- selftests: net: lib: kill PIDs before del netns
- net: hns3: fix wrong use of semaphore up
- net: hns3: use the user's cfg after reset
- net: hns3: fix a deadlock problem when config TC during resetting
- gpio: mlxbf3: Support shutdown() function
- ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7
- rust: work around `bindgen` 0.69.0 issue
- rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT
- cpu/SMT: Enable SMT only if a core is online
- powerpc/topology: Check if a core is online
- arm64: Fix KASAN random tag seed initialization
- block: Fix lockdep warning in blk_mq_mark_tag_wait
- wifi: ath12k: Add missing qmi_txn_cancel() calls
- quota: Remove BUG_ON from dqget()
- riscv: blacklist assembly symbols for kprobe
- kernfs: fix false-positive WARN(nr_mmapped) in kernfs_drain_open_files
- media: pci: cx23885: check cx23885_vdev_init() return
- fs: binfmt_elf_efpic: don't use missing interpreter's properties
- scsi: lpfc: Initialize status local variable in lpfc_sli4_repost_sgl_list()
- media: drivers/media/dvb-core: copy user arrays safely
- wifi: iwlwifi: mvm: avoid garbage iPN
- net/sun3_82586: Avoid reading past buffer in debug output
- drm/lima: set gp bus_stop bit before hard reset
- gpio: sysfs: extend the critical section for unregistering sysfs devices
- hrtimer: Select housekeeping CPU during migration
- virtiofs: forbid newlines in tags
- accel/habanalabs: fix debugfs files permissions
- clocksource/drivers/arm_global_timer: Guard against division by zero
- tick: Move got_idle_tick away from common flags
- netlink: hold nlk->cb_mutex longer in __netlink_dump_start()
- md: clean up invalid BUG_ON in md_ioctl
- x86: Increase brk randomness entropy for 64-bit systems
- memory: stm32-fmc2-ebi: check regmap_read return value
- parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367
- rxrpc: Don't pick values out of the wire header when setting up security
- f2fs: stop checkpoint when get a out-of-bounds segment
- powerpc/boot: Handle allocation failure in simple_realloc()
- powerpc/boot: Only free if realloc() succeeds
- btrfs: delayed-inode: drop pointless BUG_ON in __btrfs_remove_delayed_item()
- btrfs: defrag: change BUG_ON to assertion in btrfs_defrag_leaves()
- btrfs: change BUG_ON to assertion when checking for delayed_node root
- btrfs: push errors up from add_async_extent()
- btrfs: handle invalid root reference found in may_destroy_subvol()
- btrfs: send: handle unexpected data in header buffer in begin_cmd()
- btrfs: send: handle unexpected inode in header process_recorded_refs()
- btrfs: change BUG_ON to assertion in tree_move_down()
- btrfs: delete pointless BUG_ON check on quota root in
btrfs_qgroup_account_extent()
- f2fs: fix to do sanity check in update_sit_entry
- usb: gadget: fsl: Increase size of name buffer for endpoints
- nvme: clear caller pointer on identify failure
- Bluetooth: bnep: Fix out-of-bound access
- firmware: cirrus: cs_dsp: Initialize debugfs_root to invalid
- rtc: nct3018y: fix possible NULL dereference
- net: hns3: add checking for vf id of mailbox
- nvmet-tcp: do not continue for invalid icreq
- NFS: avoid infinite loop in pnfs_update_layout.
- openrisc: Call setup_memory() earlier in the init sequence
- s390/iucv: fix receive buffer virtual vs physical address confusion
- irqchip/renesas-rzg2l: Do not set TIEN and TINT source at the same time
- platform/x86: lg-laptop: fix %s null argument warning
- usb: dwc3: core: Skip setting event buffers for host only controllers
- irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc
- ext4: set the type of max_zeroout to unsigned int to avoid overflow
- nvmet-rdma: fix possible bad dereference when freeing rsps
- selftests/bpf: Fix a few tests for GCC related warnings.
- Revert "bpf, sockmap: Prevent lock inversion deadlock in map delete elem"
- nvme: use srcu for iterating namespace list
- drm/amdgpu: fix dereference null return value for the function
amdgpu_vm_pt_parent
- hrtimer: Prevent queuing of hrtimer without a function callback
- nvme: fix namespace removal list
- gtp: pull network headers in gtp_dev_xmit()
- riscv: entry: always initialize regs->a0 to -ENOSYS
- smb3: fix lock breakage for cached writes
- dm suspend: return -ERESTARTSYS instead of -EINTR
- selftests: memfd_secret: don't build memfd_secret test on unsupported arches
- mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order
fallback to order 0
- btrfs: send: allow cloning non-aligned extent if it ends at i_size
- drm/amd/amdgpu: command submission parser for JPEG
- platform/surface: aggregator: Fix warning when controller is destroyed in
probe
- ALSA: hda/tas2781: Use correct endian conversion
- Bluetooth: hci_core: Fix LE quote calculation
- Bluetooth: SMP: Fix assumption of Central always being Initiator
- net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and
register injection
- net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q"
- net: mscc: ocelot: serialize access to the injection/extraction groups
- tc-testing: don't access non-existent variable on exception
- selftests: udpgro: report error when receive failed
- tcp/dccp: bypass empty buckets in inet_twsk_purge()
- tcp/dccp: do not care about families in inet_twsk_purge()
- tcp: prevent concurrent execution of tcp_sk_exit_batch
- net: mctp: test: Use correct skb for route input check
- kcm: Serialise kcm_sendmsg() for the same socket.
- netfilter: nft_counter: Disable BH in nft_counter_offload_stats().
- netfilter: nft_counter: Synchronize nft_counter_reset() against reader.
- ip6_tunnel: Fix broken GRO
- bonding: fix bond_ipsec_offload_ok return type
- bonding: fix null pointer deref in bond_ipsec_offload_ok
- bonding: fix xfrm real_dev null pointer dereference
- bonding: fix xfrm state handling when clearing active slave
- ice: fix page reuse when PAGE_SIZE is over 8k
- ice: fix ICE_LAST_OFFSET formula
- ice: fix truesize operations for PAGE_SIZE >= 8192
- dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp()
- igb: cope with large MAX_SKB_FRAGS
- net: dsa: mv88e6xxx: Fix out-of-bound access
- udp: fix receiving fraglist GSO packets
- ipv6: fix possible UAF in ip6_finish_output2()
- ipv6: prevent possible UAF in ip6_xmit()
- bnxt_en: Fix double DMA unmapping for XDP_REDIRECT
- netfilter: flowtable: validate vlan header
- octeontx2-af: Fix CPT AF register offset calculation
- net: xilinx: axienet: Always disable promiscuous mode
- net: xilinx: axienet: Fix dangling multicast addresses
- net: ovs: fix ovs_drop_reasons error
- drm/msm/dpu: don't play tricks with debug macros
- drm/msm/dp: fix the max supported bpp logic
- drm/msm/dpu: split dpu_encoder_wait_for_event into two functions
- drm/msm/dpu: capture snapshot on the first commit_done timeout
- drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable()
- drm/msm/dp: reset the link phy params before link training
- drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails
- drm/msm/dpu: take plane rotation into account for wide planes
- drm/msm: fix the highest_bank_bit for sc7180
- mmc: mmc_test: Fix NULL dereference on allocation failure
- Bluetooth: MGMT: Add error handling to pair_device()
- scsi: core: Fix the return value of scsi_logical_block_count()
- ksmbd: the buffer of smb2 query dir response has at least 1 byte
- drm/amdgpu: Validate TA binary size
- net: dsa: microchip: fix PTP config failure when using multiple ports
- MIPS: Loongson64: Set timer mode in cpu-probe
- HID: wacom: Defer calculation of resolution until resolution_code is known
- Input: i8042 - add forcenorestore quirk to leave controller untouched even
on s3
- Input: i8042 - use new forcenorestore quirk to replace old buggy quirk
combination
- cxgb4: add forgotten u64 ivlan cast before shift
- KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3
- mmc: mtk-sd: receive cmd8 data when hs400 tuning fail
- mmc: dw_mmc: allow biu and ciu clocks to defer
- smb3: fix broken cached reads when posix locks
- pmdomain: imx: scu-pd: Remove duplicated clocks
- pmdomain: imx: wait SSAR when i.MX93 power domain on
- nouveau/firmware: use dma non-coherent allocator
- mptcp: pm: re-using ID of unused removed ADD_ADDR
- mptcp: pm: re-using ID of unused removed subflows
- mptcp: pm: re-using ID of unused flushed subflows
- mptcp: pm: remove mptcp_pm_remove_subflow()
- mptcp: pm: only mark 'subflow' endp as available
- mptcp: pm: only decrement add_addr_accepted for MPJ req
- mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR
- mptcp: pm: only in-kernel cannot have entries with ID 0
- mptcp: pm: fullmesh: select the right ID later
- mptcp: pm: avoid possible UaF when selecting endp
- selftests: mptcp: join: validate fullmesh endp on 1st sf
- selftests: mptcp: join: restrict fullmesh endp on 1st sf
- selftests: mptcp: join: check re-using ID of closed subflow
- tcp: do not export tcp_twsk_purge()
- drm/msm/mdss: specify cfg bandwidth for SDM670
- drm/panel: nt36523: Set 120Hz fps for xiaomi,elish panels
- igc: Fix qbv tx latency by setting gtxoffset
- ALSA: timer: Relax start tick time check for slave timer elements
- bpf: Fix a kernel verifier crash in stacksafe()
- selftests/bpf: Add a test to verify previous stacksafe() fix
- Revert "s390/dasd: Establish DMA alignment"
- Input: MT - limit max slots
- tools: move alignment-related macros to new <linux/align.h>
- Revert "serial: 8250_omap: Set the console genpd always on if no console
suspend"
- usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[]
- usb: xhci: Check for xhci->interrupters being allocated in
xhci_mem_clearup()
- vfs: Don't evict inode under the inode lru traversing context
- tracing: Return from tracing_buffers_read() if the file has been closed
- mm: fix endless reclaim on machines with unaccepted memory
- fs/netfs/fscache_cookie: add missing "n_accesses" check
- mm/numa: no task_numa_fault() call if PMD is changed
- mm/numa: no task_numa_fault() call if PTE is changed
- btrfs: check delayed refs when we're checking if a ref exists
- drm/amd/display: Adjust cursor position
- drm/amd/display: fix s2idle entry for DCN3.5+
- drm/amd/display: Enable otg synchronization logic for DCN321
- drm/amd/display: fix cursor offset on rotation 180
- netfs: Fault in smaller chunks for non-large folio mappings
- libfs: fix infinite directory reads for offset dir
- kallsyms: Avoid weak references for kallsyms symbols
- kbuild: avoid unneeded kallsyms step 3
- kbuild: refactor variables in scripts/link-vmlinux.sh
- kbuild: remove PROVIDE() for kallsyms symbols
- kallsyms: get rid of code for absolute kallsyms
- [Config] Remove CONFIG_KALLSYMS_BASE_RELATIVE
- kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols
- bpf: Replace deprecated strncpy with strscpy
- kallsyms: replace deprecated strncpy with strscpy
- kallsyms: rework symbol lookup return codes
- kallsyms: Match symbols exactly with CONFIG_LTO_CLANG
- drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()`
- drm/amd/display: Don't register panel_power_savings on OLED panels
- wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850
- kbuild: merge temporary vmlinux for BTF and kallsyms
- kbuild: avoid scripts/kallsyms parsing /dev/null
- Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in
- net/mlx5: Fix IPsec RoCE MPV trace call
- selftests: udpgro: no need to load xdp for gro
- ice: use internal pf id instead of function number
- drm/msm/dpu: limit QCM2290 to RGB formats only
- drm/msm/dpu: relax YUV requirements
- spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume
- drm/xe/display: stop calling domains_driver_remove twice
- drm/xe: Fix opregion leak
- drm/xe/mmio: move mmio_fini over to devm
- drm/xe: reset mmio mappings with devm
- drm/xe: Fix tile fini sequence
- drm/xe: Fix missing workqueue destroy in xe_gt_pagefault
- drm/xe: Free job before xe_exec_queue_put
- thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir()
- nvme: move stopping keep-alive into nvme_uninit_ctrl()
- drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1
- s390/ap: Refine AP bus bindings complete processing
- net: ngbe: Fix phy mode set to external phy
- iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace()
- cgroup/cpuset: fix panic caused by partcmd_update
- cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if
cpus.exclusive not set
- of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put()
handling
- thermal: of: Fix OF node leak in thermal_of_trips_init() error path
- thermal: of: Fix OF node leak in thermal_of_zone_register()
- thermal: of: Fix OF node leak in of_thermal_zone_find() error paths
- Upstream stable to v6.6.48, v6.10.7
* Unable to list directories using CIFS on 6.8 kernel (LP: #2082423) // Noble
update: upstream stable patchset 2024-10-09 (LP: #2084005)
- smb: client: ignore unhandled reparse tags
* CVE-2024-46759
- hwmon: (adc128d818) Fix underflows seen when writing limit attributes
* CVE-2024-46758
- hwmon: (lm95234) Fix underflows seen when writing limit attributes
* CVE-2024-46756
- hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
* CVE-2024-46738
- VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
* CVE-2024-46722
- drm/amdgpu: fix mc_data out-of-bounds read warning
* LXD fan bridge causes blocked tasks (LP: #2064176)
- SAUCE: fan: release rcu_read_lock on skb discard path
- SAUCE: fan: fix racy device stat update
* x86/CPU/AMD: Add models 0x10-0x1f to the Zen5 range (LP: #2081863)
- x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range
* UBSAN: array-index-out-of-bounds in module mt76 (LP: #2081785)
- wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc
* The system hangs after resume with thunderbolt monitor(AMD GPU [1002:1900])
(LP: #2083182)
- SAUCE: drm/amd/display: Fix system hang while resume with TBT monitor
* [SRU] GPU: support additional device ids for DG2 driver (LP: #2083701)
- drm/i915: Add new PCI IDs to DG2 platform in driver
* [SRU]Intel Arrow Lake IBECC feature backport request for ubuntu 22.04.5 and
24.04.1 server (LP: #2077861)
- EDAC/igen6: Add Intel Arrow Lake-U/H SoCs support
* Noble update: upstream stable patchset 2024-10-07 (LP: #2083794)
- ASoC: topology: Clean up route loading
- ASoC: topology: Fix route memory corruption
- LoongArch: Define __ARCH_WANT_NEW_STAT in unistd.h
- sunrpc: don't change ->sv_stats if it doesn't exist
- nfsd: stop setting ->pg_stats for unused stats
- sunrpc: pass in the sv_stats struct through svc_create_pooled
- sunrpc: remove ->pg_stats from svc_program
- nfsd: remove nfsd_stats, make th_cnt a global counter
- nfsd: make svc_stat per-network namespace instead of global
- mm: gup: stop abusing try_grab_folio
- nvme/pci: Add APST quirk for Lenovo N60z laptop
- genirq/cpuhotplug: Skip suspended interrupts when restoring affinity
- genirq/cpuhotplug: Retry with cpu_online_mask when migration fails
- quota: Detect loops in quota tree
- bpf: Replace bpf_lpm_trie_key 0-length array with flexible array
- fs: Annotate struct file_handle with __counted_by() and use struct_size()
- mISDN: fix MISDN_TIME_STAMP handling
- mm/page_table_check: support userfault wr-protect entries
- bpf, net: Use DEV_STAT_INC()
- f2fs: fix to do sanity check on F2FS_INLINE_DATA flag in inode during GC
- f2fs: fix to cover read extent cache access with lock
- fou: remove warn in gue_gro_receive on unsupported protocol
- jfs: fix null ptr deref in dtInsertEntry
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- fs/ntfs3: Do copy_to_user out of run_lock
- ALSA: usb: Fix UBSAN warning in parse_audio_unit()
- binfmt_flat: Fix corruption when not offsetting data start
- mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick
- KVM: arm64: Don't defer TLB invalidation when zapping table entries
- KVM: arm64: Don't pass a TLBI level hint when zapping table entries
- drm/amd/display: Defer handling mst up request in resume
- drm/amd/display: Guard cursor idle reallow by DC debug option
- drm/amd/display: Separate setting and programming of cursor
- drm/amd/display: Prevent IPX From Link Detect and Set Mode
- ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value
- platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled
- platform/x86: ideapad-laptop: introduce a generic notification chain
- platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
- platform/x86: ideapad-laptop: add a mutex to synchronize VPC commands
- drm/amd/display: Solve mst monitors blank out problem after resume
- drm/amdgpu/display: Fix null pointer dereference in
dc_stream_program_cursor_position
- Upstream stable to v6.6.47, v6.10.6
* Noble update: upstream stable patchset 2024-10-04 (LP: #2083656)
- irqchip/mbigen: Fix mbigen node address layout
- platform/x86/intel/ifs: Initialize union ifs_status to zero
- jump_label: Fix the fix, brown paper bags galore
- x86/mm: Fix pti_clone_pgtable() alignment assumption
- x86/mm: Fix pti_clone_entry_text() for i386
- smb: client: move most of reparse point handling code to common file
- smb: client: set correct d_type for reparse DFS/DFSR and mount point
- smb: client: handle lack of FSCTL_GET_REPARSE_POINT support
- sctp: Fix null-ptr-deref in reuseport_add_sock().
- net: usb: qmi_wwan: fix memory leak for not ip packets
- net: bridge: mcast: wait for previous gc cycles when removing port
- net: linkwatch: use system_unbound_wq
- ice: Fix reset handler
- Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()
- Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv
monitor
- net/smc: add the max value of fallback reason count
- net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register()
- l2tp: fix lockdep splat
- net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities
- net: fec: Stop PPS on driver remove
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- hwmon: corsair-psu: add USB id of HX1200i Series 2023 psu
- rcutorture: Fix rcu_torture_fwd_cb_cr() data race
- md: do not delete safemode_timer in mddev_suspend
- md/raid5: avoid BUG_ON() while continue reshape after reassembling
- block: change rq_integrity_vec to respect the iterator
- rcu: Fix rcu_barrier() VS post CPUHP_TEARDOWN_CPU invocation
- clocksource/drivers/sh_cmt: Address race condition for clock events
- ACPI: battery: create alarm sysfs attribute atomically
- ACPI: SBS: manage alarm sysfs attribute through psy core
- xen: privcmd: Switch from mutex to spinlock for irqfds
- wifi: nl80211: disallow setting special AP channel widths
- wifi: ath12k: fix memory leak in ath12k_dp_rx_peer_frag_setup()
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink
- selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT
- af_unix: Don't retry after unix_state_lock_nested() in
unix_stream_connect().
- PCI: Add Edimax Vendor ID to pci_ids.h
- udf: prevent integer overflow in udf_bitmap_free_blocks()
- wifi: nl80211: don't give key data to userspace
- can: mcp251xfd: tef: prepare to workaround broken TEF FIFO tail index
erratum
- can: mcp251xfd: tef: update workaround for erratum DS80000789E 6 of
mcp2518fd
- net: stmmac: qcom-ethqos: enable SGMII loopback during DMA reset on
sa8775p-ride-r3
- btrfs: do not clear page dirty inside extent_write_locked_range()
- btrfs: fix invalid mapping of extent xarray state
- btrfs: fix bitmap leak when loading free space cache on duplicate entry
- Bluetooth: btnxpuart: Shutdown timer and prevent rearming when driver
unloading
- drm/amd/display: Add delay to improve LTTPR UHBR interop
- drm/amdgpu: fix potential resource leak warning
- drm/amdgpu/pm: Fix the param type of set_power_profile_mode
- drm/amdgpu/pm: Fix the null pointer dereference for smu7
- drm/amdgpu: Fix the null pointer dereference to ras_manager
- drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules
- drm/admgpu: fix dereferencing null pointer context
- drm/amdgpu: Add lock around VF RLCG interface
- drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr
- media: amphion: Remove lock in s_ctrl callback
- drm/amd/display: Add null checker before passing variables
- media: uvcvideo: Ignore empty TS packets
- media: uvcvideo: Fix the bandwdith quirk on USB 3.x
- media: xc2028: avoid use-after-free in load_firmware_cb()
- ext4: fix uninitialized variable in ext4_inlinedir_to_tree
- jbd2: avoid memleak in jbd2_journal_write_metadata_buffer
- s390/sclp: Prevent release of buffer in I/O
- SUNRPC: Fix a race to wake a sync task
- profiling: remove profile=sleep support
- scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES
- irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to
'raw_spinlock_t'
- irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq()
- sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime
- net: drop bad gso csum_start and offset in virtio_net_hdr
- arm64: Add Neoverse-V2 part
- arm64: barrier: Restore spec_bar() macro
- arm64: cputype: Add Cortex-X4 definitions
- arm64: cputype: Add Neoverse-V3 definitions
- arm64: errata: Add workaround for Arm errata 3194386 and 3312417
- arm64: cputype: Add Cortex-X3 definitions
- arm64: cputype: Add Cortex-A720 definitions
- arm64: cputype: Add Cortex-X925 definitions
- arm64: errata: Unify speculative SSBS errata logic
- [Config] Set ARM64_ERRATUM_3194386=y
- arm64: errata: Expand speculative SSBS workaround
- arm64: cputype: Add Cortex-X1C definitions
- arm64: cputype: Add Cortex-A725 definitions
- arm64: errata: Expand speculative SSBS workaround (again)
- i2c: smbus: Improve handling of stuck alerts
- ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask
- ASoC: codecs: wsa881x: Correct Soundwire ports mask
- ASoC: codecs: wsa883x: parse port-mapping information
- ASoC: codecs: wsa883x: Correct Soundwire ports mask
- ASoC: codecs: wsa884x: parse port-mapping information
- ASoC: codecs: wsa884x: Correct Soundwire ports mask
- ASoC: sti: add missing probe entry for player and reader
- spi: spidev: Add missing spi_device_id for bh2228fv
- ASoC: SOF: Remove libraries from topology lookups
- i2c: smbus: Send alert notifications to all devices if source not found
- bpf: kprobe: remove unused declaring of bpf_kprobe_override
- kprobes: Fix to check symbol prefixes correctly
- i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume
- i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume
- spi: spi-fsl-lpspi: Fix scldiv calculation
- ALSA: usb-audio: Re-add ScratchAmp quirk entries
- ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT
- cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath
- module: warn about excessively long module waits
- module: make waiting for a concurrent module loader interruptible
- drm/i915/gem: Fix Virtual Memory mapping boundaries calculation
- drm/amd/display: Skip Recompute DSC Params if no Stream on Link
- drm/amdgpu: Forward soft recovery errors to userspace
- drm/i915/gem: Adjust vma offset for framebuffer mmap offset
- drm/client: fix null pointer dereference in drm_client_modeset_probe
- ALSA: line6: Fix racy access to midibuf
- ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list
- ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks
- ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4
- usb: vhci-hcd: Do not drop references before new references are gained
- USB: serial: debug: do not echo input by default
- usb: gadget: core: Check for unset descriptor
- usb: gadget: midi2: Fix the response for FB info with block 0xff
- usb: gadget: u_serial: Set start_delayed during suspend
- usb: gadget: u_audio: Check return codes from usb_ep_enable and
config_ep_by_speed.
- scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES
- scsi: ufs: core: Do not set link to OFF state while waking up from
hibernation
- scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic
- tick/broadcast: Move per CPU pointer access into the atomic section
- vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler
- ntp: Clamp maxerror and esterror to operating range
- clocksource: Scale the watchdog read retries automatically
- clocksource: Fix brown-bag boolean thinko in cs_watchdog_read()
- driver core: Fix uevent_show() vs driver detach race
- tracefs: Fix inode allocation
- tracefs: Use generic inode RCU for synchronizing freeing
- ntp: Safeguard against time_constant overflow
- timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex()
- serial: core: check uartclk for zero to avoid divide by zero
- memcg: protect concurrent access to mem_cgroup_idr
- parisc: fix unaligned accesses in BPF
- parisc: fix a possible DMA corruption
- ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx
- kcov: properly check for softirq context
- irqchip/xilinx: Fix shift out of bounds
- genirq/irqdesc: Honor caller provided affinity in alloc_desc()
- LoongArch: Enable general EFI poweroff method
- power: supply: qcom_battmgr: return EAGAIN when firmware service is not up
- power: supply: axp288_charger: Fix constant_charge_voltage writes
- power: supply: axp288_charger: Round constant_charge_voltage writes down
- tracing: Fix overflow in get_free_elt()
- padata: Fix possible divide-by-0 panic in padata_mt_helper()
- smb3: fix setting SecurityFlags when encryption is required
- eventfs: Don't return NULL in eventfs_create_dir()
- eventfs: Use SRCU for freeing eventfs_inodes
- selftests: mm: add s390 to ARCH check
- btrfs: avoid using fixed char array size for tree names
- x86/paravirt: Fix incorrect virt spinlock setting on bare metal
- x86/mtrr: Check if fixed MTRRs exist before saving them
- sched/smt: Introduce sched_smt_present_inc/dec() helper
- sched/smt: Fix unbalance sched_smt_present dec/inc
- sched/core: Introduce sched_set_rq_on/offline() helper
- sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate()
- drm/bridge: analogix_dp: properly handle zero sized AUX transactions
- drm/dp_mst: Skip CSN if topology probing is not done yet
- drm/lima: Mark simple_ondemand governor as softdep
- drm/mgag200: Set DDC timeout in milliseconds
- drm/mgag200: Bind I2C lifetime to DRM device
- drm/radeon: Remove __counted_by from StateArray.states[]
- mptcp: fully established after ADD_ADDR echo on MPJ
- mptcp: pm: deny endp with signal + subflow + port
- block: use the right type for stub rq_integrity_vec()
- btrfs: fix corruption after buffer fault in during direct IO append write
- tools headers arm64: Sync arm64's cputype.h with the kernel sources
- mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio()
- xfs: fix log recovery buffer allocation for the legacy h_size fixup
- mptcp: pm: reduce indentation blocks
- mptcp: pm: don't try to create sf if alloc failed
- mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set
- selftests: mptcp: join: ability to invert ADD_ADDR check
- selftests: mptcp: join: test both signal & subflow
- Revert "selftests: mptcp: simult flows: mark 'unbalanced' tests as flaky"
- btrfs: fix double inode unlock for direct IO sync writes
- perf/x86/intel/cstate: Switch to new Intel CPU model defines
- perf/x86/intel/cstate: Add Arrowlake support
- perf/x86/intel/cstate: Add Lunarlake support
- perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest
- platform/x86: intel-vbtn: Protect ACPI notify handler against recursion
- perf/x86/amd: Use try_cmpxchg() in events/amd/{un,}core.c
- perf/x86/intel: Support the PEBS event mask
- perf/x86: Support counter mask
- perf/x86: Fix smp_processor_id()-in-preemptible warnings
- virtio-net: unbreak vq resizing when coalescing is not negotiated
- net: dsa: microchip: Fix Wake-on-LAN check to not return an error
- net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897.
- regmap: kunit: Use a KUnit action to call regmap_exit()
- regmap: kunit: Replace a kmalloc/kfree() pair with KUnit-managed alloc
- regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap()
- debugobjects: Annotate racy debug variables
- nvme: apple: fix device reference counting
- cpufreq: amd-pstate: Allow users to write 'default' EPP string
- cpufreq: amd-pstate: auto-load pstate driver by default
- soc: qcom: icc-bwmon: Allow for interrupts to be shared across instances
- ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU
- ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ
- thermal: intel: hfi: Give HFI instances package scope
- wifi: ath12k: fix race due to setting ATH12K_FLAG_EXT_IRQ_ENABLED too early
- wifi: rtlwifi: handle return value of usb init TX/RX
- wifi: rtw89: pci: fix RX tag race condition resulting in wrong RX length
- wifi: mac80211: fix NULL dereference at band check in starting tx ba session
- bpf: add missing check_func_arg_reg_off() to prevent out-of-bounds memory
accesses
- mlxsw: pci: Lock configuration space of upstream bridge during reset
- btrfs: do not BUG_ON() when freeing tree block after error
- btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()
- btrfs: fix data race when accessing the last_trans field of a root
- drm/xe/preempt_fence: enlarge the fence critical section
- drm/amd/display: Handle HPD_IRQ for internal link
- drm/amd/amdkfd: Fix a resource leak in svm_range_validate_and_map()
- drm/xe/xe_guc_submit: Fix exec queue stop race condition
- drm/amd/display: Add null checks for 'stream' and 'plane' before
dereferencing
- drm/amd/display: Wake DMCUB before sending a command for replay feature
- drm/amd/display: reduce ODM slice count to initial new dc state only when
needed
- of: Add cleanup.h based auto release via __free(device_node) markings
- media: i2c: ov5647: replacing of_node_put with __free(device_node)
- drm/amd/display: Fix null pointer deref in dcn20_resource.c
- ext4: sanity check for NULL pointer after ext4_force_shutdown
- mm, slub: do not call do_slab_free for kfence object
- ASoC: cs35l56: Revert support for dual-ownership of ASP registers
- drm/atomic: allow no-op FB_ID updates for async flips
- drm/amd/display: Replace dm_execute_dmub_cmd with
dc_wake_and_execute_dmub_cmd
- drm/xe/rtp: Fix off-by-one when processing rules
- drm/xe: Use dma_fence_chain_free in chain fence unused as a sync
- drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write
- drm/xe: Move lrc snapshot capturing to xe_lrc.c
- drm/xe: Minor cleanup in LRC handling
- drm/test: fix the gem shmem test to map the sg table.
- usb: typec: pd: no opencoding of FIELD_GET
- usb: typec: fsa4480: Check if the chip is really there
- PM: runtime: Simplify pm_runtime_get_if_active() usage
- scsi: ufs: core: Fix deadlock during RTC update
- serial: sc16is7xx: fix invalid FIFO access with special register set
- tracing: Have format file honor EVENT_FILE_FL_FREED
- mm: list_lru: fix UAF for memory cgroup
- net/tcp: Disable TCP-AO static key after RCU grace period
- Revert "drm/amd/display: Handle HPD_IRQ for internal link"
- idpf: fix memleak in vport interrupt configuration
- drm/amd/display: Add null check in resource_log_pipe_topology_update
- Upstream stable to v6.6.46, v6.10.5
* Noble update: upstream stable patchset 2024-10-02 (LP: #2083488)
- sysctl: allow change system v ipc sysctls inside ipc namespace
- sysctl: allow to change limits for posix messages queues
- sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table)
- ext4: factor out a common helper to query extent map
- ext4: check the extent status again before inserting delalloc block
- leds: trigger: Store brightness set by led_trigger_event()
- leds: trigger: Call synchronize_rcu() before calling trig->activate()
- KVM: VMX: Move posted interrupt descriptor out of VMX code
- fbdev/vesafb: Replace references to global screen_info by local pointer
- video: Add helpers for decoding screen_info
- [Config] Update CONFIG_SCREEN_INFO
- video: Provide screen_info_get_pci_dev() to find screen_info's PCI device
- firmware/sysfb: Update screen_info for relocated EFI framebuffers
- mm: page_alloc: control latency caused by zone PCP draining
- mm/page_alloc: fix pcp->count race between drain_pages_zone() vs
__rmqueue_pcplist()
- f2fs: fix to avoid use SSR allocate when do defragment
- f2fs: assign CURSEG_ALL_DATA_ATGC if blkaddr is valid
- dmaengine: fsl-edma: add address for channel mux register in fsl_edma_chan
- dmaengine: fsl-edma: add i.MX8ULP edma support
- perf: imx_perf: fix counter start and config sequence
- MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a
- MIPS: dts: loongson: Fix liointc IRQ polarity
- MIPS: dts: loongson: Fix ls2k1000-rtc interrupt
- ARM: 9406/1: Fix callchain_trace() return value
- HID: amd_sfh: Move sensor discovery before HID device initialization
- perf tool: fix dereferencing NULL al->maps
- drm/nouveau: prime: fix refcount underflow
- drm/vmwgfx: Fix overlay when using Screen Targets
- drm/vmwgfx: Trigger a modeset when the screen moves
- sched: act_ct: take care of padding in struct zones_ht_key
- wifi: cfg80211: fix reporting failed MLO links status with
cfg80211_connect_done
- net: phy: realtek: add support for RTL8366S Gigabit PHY
- ALSA: hda: conexant: Fix headset auto detect fail in the polling mode
- Bluetooth: btintel: Fail setup on error
- Bluetooth: hci_sync: Fix suspending with wrong filter policy
- tcp: annotate data-races around tp->window_clamp
- tcp: Adjust clamping window for applications specifying SO_RCVBUF
- net: axienet: start napi before enabling Rx/Tx
- rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in
rtnl_dellink().
- i915/perf: Remove code to update PWR_CLK_STATE for gen12
- ice: respect netif readiness in AF_XDP ZC related ndo's
- ice: don't busy wait for Rx queue disable in ice_qp_dis()
- ice: replace synchronize_rcu with synchronize_net
- ice: add missing WRITE_ONCE when clearing ice_rx_ring::xdp_prog
- drm/i915/hdcp: Fix HDCP2_STREAM_STATUS macro
- net: mvpp2: Don't re-use loop iterator
- net: phy: micrel: Fix the KSZ9131 MDI-X status issue
- ALSA: hda: Conditionally use snooping for AMD HDMI
- netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init().
- netfilter: iptables: Fix potential null-ptr-deref in
ip6table_nat_table_init().
- net/mlx5: Always drain health in shutdown callback
- net/mlx5: Fix error handling in irq_pool_request_irq
- net/mlx5: Lag, don't use the hardcoded value of the first port
- net/mlx5: Fix missing lock on sync reset reload
- net/mlx5e: Require mlx5 tc classifier action support for IPsec prio
capability
- net/mlx5e: Fix CT entry update leaks of modify header context
- net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys
- igc: Fix double reset adapter triggered from a single taprio cmd
- ipv6: fix ndisc_is_useropt() handling for PIO
- perf: riscv: Fix selecting counters in legacy mode
- riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error()
- riscv: Fix linear mapping checks for non-contiguous memory regions
- arm64: jump_label: Ensure patched jump_labels are visible to all CPUs
- rust: SHADOW_CALL_STACK is incompatible with Rust
- platform/chrome: cros_ec_proto: Lock device when updating MKBP version
- HID: wacom: Modify pen IDs
- btrfs: zoned: fix zone_unusable accounting on making block group read-write
again
- btrfs: do not subtract delalloc from avail bytes
- protect the fetch of ->fd[fd] in do_dup2() from mispredictions
- mptcp: sched: check both directions for backup
- ALSA: usb-audio: Correct surround channels in UAC1 channel map
- ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G
- ALSA: seq: ump: Optimize conversions from SysEx to UMP
- Revert "ALSA: firewire-lib: obsolete workqueue for period update"
- Revert "ALSA: firewire-lib: operate for period elapse event in process
context"
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- drm/virtio: Fix type of dma-fence context variable
- drm/i915: Fix possible int overflow in skl_ddi_calculate_wrpll()
- net: usb: sr9700: fix uninitialized variable use in sr_mdio_read
- r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY
- mptcp: fix user-space PM announced address accounting
- mptcp: distinguish rcv vs sent backup flag in requests
- mptcp: fix NL PM announced address accounting
- mptcp: mib: count MPJ with backup flag
- mptcp: fix bad RCVPRUNED mib accounting
- mptcp: pm: only set request_bkup flag when sending MP_PRIO
- mptcp: fix duplicate data handling
- selftests: mptcp: always close input's FD if opened
- selftests: mptcp: join: validate backup in MPJ
- selftests: mptcp: join: check backup support in signal endp
- mm/huge_memory: mark racy access onhuge_anon_orders_always
- mm: fix khugepaged activation policy
- x86/cpu/vfm: Add/initialize x86_vfm field to struct cpuinfo_x86
- perf/x86/intel: Switch to new Intel CPU model defines
- perf/x86/intel: Add a distinct name for Granite Rapids
- drm/gpuvm: fix missing dependency to DRM_EXEC
- netlink: specs: correct the spec of ethtool
- ethtool: rss: echo the context number back
- wifi: cfg80211: correct S1G beacon length calculation
- ethtool: fix setting key and resetting indir at once
- ice: modify error handling when setting XSK pool in ndo_bpf
- ice: toggle netif_carrier when setting up XSK pool
- ice: improve updating ice_{t,r}x_ring::xsk_pool
- ice: xsk: fix txq interrupt mapping
- drm/atomic: Allow userspace to use explicit sync with atomic async flips
- drm/atomic: Allow userspace to use damage clips with async flips
- riscv/purgatory: align riscv_kernel_entry
- perf arch events: Fix duplicate RISC-V SBI firmware event name
- RISC-V: Enable the IPI before workqueue_online_cpu()
- ceph: force sending a cap update msg back to MDS for revoke op
- drm/vmwgfx: Remove unused code
- drm/vmwgfx: Fix handling of dumb buffers
- drm/v3d: Prevent out of bounds access in performance query extensions
- drm/v3d: Fix potential memory leak in the timestamp extension
- drm/v3d: Fix potential memory leak in the performance extension
- drm/v3d: Validate passed in drm syncobj handles in the timestamp extension
- drm/v3d: Validate passed in drm syncobj handles in the performance extension
- nouveau: set placement to original placement on uvmm validate.
- wifi: ath12k: fix soft lockup on suspend
- mptcp: pm: fix backup support in signal endpoints
- selftests: mptcp: fix error path
- Upstream stable to v6.6.45, v6.10.4
* [SRU] Fix AST DP output after resume (LP: #2083022) // Noble update:
upstream stable patchset 2024-10-02 (LP: #2083488)
- drm/ast: astdp: Wake up during connector status detection
- drm/ast: Fix black screen after resume
* [SRU]Fail to locate the LED of NVME disk behind Intel VMD (LP: #2077287) //
Noble update: upstream stable patchset 2024-10-02 (LP: #2083488)
- PCI: pciehp: Retain Power Indicator bits for userspace indicators
* Noble update: upstream stable patchset 2024-09-30 (LP: #2083196)
- powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC
- spi: spi-microchip-core: Fix the number of chip selects supported
- spi: atmel-quadspi: Add missing check for clk_prepare
- EDAC, i10nm: make skx_common.o a separate module
- rcu/tasks: Fix stale task snaphot for Tasks Trace
- platform/chrome: cros_ec_debugfs: fix wrong EC message version
- ubd: refactor the interrupt handler
- ubd: untagle discard vs write zeroes not support handling
- block: initialize integrity buffer to zero before writing it to media
- x86/kconfig: Add as-instr64 macro to properly evaluate AS_WRUSS
- hfsplus: fix to avoid false alarm of circular locking
- x86/of: Return consistent error type from x86_of_pci_irq_enable()
- x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling
- x86/pci/xen: Fix PCIBIOS_* return code handling
- x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos
- cgroup/cpuset: Prevent UAF in proc_cpuset_show()
- hwmon: (adt7475) Fix default duty on fan is disabled
- block: Call .limit_depth() after .hctx has been set
- block/mq-deadline: Fix the tag reservation code
- md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl
- pwm: stm32: Always do lazy disabling
- nvmet-auth: fix nvmet_auth hash error handling
- drm/meson: fix canvas release in bind function
- pwm: atmel-tcb: Fix race condition and convert to guards
- hwmon: (max6697) Fix underflow when writing limit attributes
- hwmon: (max6697) Fix swapped temp{1,8} critical alarms
- arm64: dts: qcom: sc8180x: Correct PCIe slave ports
- arm64: dts: qcom: sc8180x: add power-domain to UFS PHY
- arm64: dts: qcom: sdm845: add power-domain to UFS PHY
- arm64: dts: qcom: sm6115: add power-domain to UFS PHY
- arm64: dts: qcom: sm6350: add power-domain to UFS PHY
- arm64: dts: qcom: sm8250: add power-domain to UFS PHY
- arm64: dts: qcom: sm8350: add power-domain to UFS PHY
- arm64: dts: qcom: sm8450: add power-domain to UFS PHY
- arm64: dts: qcom: msm8996-xiaomi-common: drop excton from the USB PHY
- arm64: dts: qcom: sdm850-lenovo-yoga-c630: fix IPA firmware path
- arm64: dts: qcom: msm8998: enable adreno_smmu by default
- soc: qcom: pmic_glink: Handle the return value of pmic_glink_init
- soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data()
callers
- arm64: dts: rockchip: Add sdmmc related properties on rk3308-rock-pi-s
- arm64: dts: rockchip: Add pinctrl for UART0 to rk3308-rock-pi-s
- arm64: dts: rockchip: Add mdio and ethernet-phy nodes to rk3308-rock-pi-s
- arm64: dts: rockchip: Update WIFi/BT related nodes on rk3308-rock-pi-s
- arm64: dts: qcom: msm8996: specify UFS core_clk frequencies
- arm64: dts: qcom: sa8775p: mark ethernet devices as DMA-coherent
- soc: xilinx: rename cpu_number1 to dummy_cpu_number
- ARM: dts: sunxi: remove duplicated entries in makefile
- ARM: dts: stm32: Add arm,no-tick-in-suspend to STM32MP15xx STGEN timer
- arm64: dts: qcom: qrb4210-rb2: make L9A always-on
- cpufreq: ti-cpufreq: Handle deferred probe with dev_err_probe()
- OPP: ti: Fix ti_opp_supply_probe wrong return values
- memory: fsl_ifc: Make FSL_IFC config visible and selectable
- arm64: dts: ti: k3-am62x: Drop McASP AFIFOs
- arm64: dts: ti: k3-am625-beagleplay: Drop McASP AFIFOs
- arm64: dts: ti: k3-am62-verdin: Drop McASP AFIFOs
- arm64: dts: qcom: qdu1000: Add secure qfprom node
- soc: qcom: icc-bwmon: Fix refcount imbalance seen during bwmon_remove
- soc: qcom: pdr: protect locator_addr with the main mutex
- soc: qcom: pdr: fix parsing of domains lists
- arm64: dts: rockchip: Increase VOP clk rate on RK3328
- arm64: dts: amlogic: sm1: fix spdif compatibles
- ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode
- ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset
- ARM: dts: imx6qdl-kontron-samx6i: fix board reset
- ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects
- ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity
- arm64: dts: mediatek: mt8195: Fix GPU thermal zone name for SVS
- arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property
- arm64: dts: mediatek: mt8192-asurada: Add off-on-delay-us for
pp3300_mipibrdg
- arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux
- arm64: dts: mediatek: mt8183-kukui: Fix the value of `dlg,jack-det-rate`
mismatch
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625
- arm64: dts: amlogic: gx: correct hdmi clocks
- arm64: dts: amlogic: add power domain to hdmitx
- arm64: dts: amlogic: setup hdmi system clock
- arm64: dts: rockchip: Drop invalid mic-in-differential on rk3568-rock-3a
- arm64: dts: rockchip: Fix mic-in-differential usage on rk3566-roc-pc
- arm64: dts: rockchip: Fix mic-in-differential usage on rk3568-evb1-v10
- arm64: dts: renesas: r8a779a0: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r8a779f0: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r8a779g0: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r9a07g043u: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r9a07g044: Add missing hypervisor virtual timer IRQ
- arm64: dts: renesas: r9a07g054: Add missing hypervisor virtual timer IRQ
- m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages
- arm64: dts: imx8mp: Fix pgc_mlmix location
- arm64: dts: imx8mp: add HDMI power-domains
- arm64: dts: imx8mp: Fix pgc vpu locations
- x86/xen: Convert comma to semicolon
- arm64: dts: rockchip: Add missing power-domains for rk356x vop_mmu
- arm64: dts: rockchip: fix regulator name for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: fix usb regulator for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: fix pmu_io supply for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: remove unused usb2 nodes for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: disable display subsystem for Lunzn Fastrhino R6xS
- arm64: dts: rockchip: fixes PHY reset for Lunzn Fastrhino R68S
- arm64: dts: qcom: sm6350: Add missing qcom,non-secure-domain property
- cpufreq/amd-pstate: Fix the scaling_max_freq setting on shared memory CPPC
systems
- m68k: cmpxchg: Fix return value for default case in __arch_xchg()
- ARM: spitz: fix GPIO assignment for backlight
- vmlinux.lds.h: catch .bss..L* sections into BSS")
- firmware: turris-mox-rwtm: Do not complete if there are no waiters
- firmware: turris-mox-rwtm: Fix checking return value of
wait_for_completion_timeout()
- firmware: turris-mox-rwtm: Initialize completion before mailbox
- wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device
- wifi: ath12k: Correct 6 GHz frequency value in rx status
- wifi: ath12k: Fix tx completion ring (WBM2SW) setup failure
- bpftool: Un-const bpf_func_info to fix it for llvm 17 and newer
- selftests/bpf: Fix prog numbers in test_sockmap
- net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP
- wifi: ath12k: change DMA direction while mapping reinjected packets
- wifi: ath12k: fix invalid memory access while processing fragmented packets
- wifi: ath12k: fix firmware crash during reo reinject
- wifi: ath11k: fix wrong definition of CE ring's base address
- wifi: ath12k: fix wrong definition of CE ring's base address
- tcp: add tcp_done_with_error() helper
- tcp: fix race in tcp_write_err()
- tcp: fix races in tcp_v[46]_err()
- net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when
CONFIG_ARCH_NO_SG_CHAIN is defined
- selftests/bpf: Check length of recv in test_sockmap
- udf: Fix lock ordering in udf_evict_inode()
- lib: objagg: Fix general protection fault
- mlxsw: spectrum_acl_erp: Fix object nesting warning
- mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors
- perf/x86: Serialize set_attr_rdpmc()
- jump_label: Fix concurrency issues in static_key_slow_dec()
- wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers
- wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he()
- wifi: cfg80211: handle 2x996 RU allocation in
cfg80211_calculate_bitrate_he()
- udf: Fix bogus checksum computation in udf_rename()
- net: fec: Refactor: #define magic constants
- net: fec: Fix FEC_ECR_EN1588 being cleared on link-down
- libbpf: Checking the btf_type kind when fixing variable offsets
- xfrm: Fix unregister netdevice hang on hardware offload.
- ipvs: Avoid unnecessary calls to skb_is_gso_sctp
- netfilter: nf_tables: rise cap on SELinux secmark context
- wifi: rtw89: 8852b: fix definition of KIP register number
- wifi: rtl8xxxu: 8188f: Limit TX power index
- xfrm: Export symbol xfrm_dev_state_delete.
- bpftool: Mount bpffs when pinmaps path not under the bpffs
- perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation
- perf: Fix perf_aux_size() for greater-than 32-bit size
- perf: Prevent passing zero nr_pages to rb_alloc_aux()
- perf: Fix default aux_watermark calculation
- perf/x86/intel/cstate: Fix Alderlake/Raptorlake/Meteorlake
- wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter()
- xfrm: fix netdev reference count imbalance
- xfrm: call xfrm_dev_policy_delete when kill policy
- wifi: virt_wifi: avoid reporting connection success with wrong SSID
- gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey
- wifi: virt_wifi: don't use strlen() in const context
- locking/rwsem: Add __always_inline annotation to __down_write_common() and
inlined callers
- selftests/bpf: Close fd in error path in drop_on_reuseport
- selftests/bpf: Null checks for links in bpf_tcp_ca
- selftests/bpf: Close obj in error path in xdp_adjust_tail
- selftests/resctrl: Convert perror() to ksft_perror() or ksft_print_msg()
- selftests/resctrl: Fix closing IMC fds on error and open-code R+W instead of
loops
- bpf: annotate BTF show functions with __printf
- bna: adjust 'name' buf size of bna_tcb and bna_ccb structures
- bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o
- bpf: Fix null pointer dereference in resolve_prog_type() for
BPF_PROG_TYPE_EXT
- selftests: forwarding: devlink_lib: Wait for udev events after reloading
- Bluetooth: hci_bcm4377: Use correct unit for timeouts
- Bluetooth: btintel: Refactor btintel_set_ppag()
- Bluetooth: btnxpuart: Add handling for boot-signature timeout errors
- xdp: fix invalid wait context of page_pool_destroy()
- net: bridge: mst: Check vlan state for egress decision
- drm/rockchip: vop2: Fix the port mux of VP2
- drm/arm/komeda: Fix komeda probe failing if there are no links in the
secondary pipeline
- drm/amdkfd: Fix CU Masking for GFX 9.4.3
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq()
- drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_generic_write_seq()
- drm/amd/pm: Fix aldebaran pcie speed reporting
- drm/amdgpu: Fix memory range calculation
- drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit
- drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1
- drm/panel: himax-hx8394: Handle errors from mipi_dsi_dcs_set_display_on()
better
- drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before
regulators
- drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare()
- drm/bridge: Fixed a DP link training bug
- drm/bridge: it6505: fix hibernate to resume no display issue
- media: pci: ivtv: Add check for DMA map result
- media: imon: Fix race getting ictx->lock
- media: i2c: Fix imx412 exposure control
- media: v4l: async: Fix NULL pointer dereference in adding ancillary links
- s390/mm: Convert make_page_secure to use a folio
- s390/mm: Convert gmap_make_secure to use a folio
- s390/uv: Don't call folio_wait_writeback() without a folio reference
- media: mediatek: vcodec: Handle invalid decoder vsi
- x86/shstk: Make return uprobe work with shadow stack
- ipmi: ssif_bmc: prevent integer overflow on 32bit systems
- saa7134: Unchecked i2c_transfer function result fixed
- media: i2c: imx219: fix msr access command sequence
- media: uvcvideo: Disable autosuspend for Insta360 Link
- media: uvcvideo: Quirk for invalid dev_sof in Logitech C922
- media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920
- media: uvcvideo: Override default flags
- drm: zynqmp_dpsub: Fix an error handling path in zynqmp_dpsub_probe()
- drm: zynqmp_kms: Fix AUX bus not getting unregistered
- media: rcar-vin: Fix YUYV8_1X16 handling for CSI-2
- media: rcar-csi2: Disable runtime_pm in probe error
- media: rcar-csi2: Cleanup subdevice in remove()
- media: renesas: vsp1: Fix _irqsave and _irq mix
- media: renesas: vsp1: Store RPF partition configuration per RPF instance
- drm/mediatek: Add missing plane settings when async update
- drm/mediatek: Use 8-bit alpha in ETHDR
- drm/mediatek: Fix XRGB setting error in OVL
- drm/mediatek: Fix XRGB setting error in Mixer
- drm/mediatek: Fix destination alpha error in OVL
- drm/mediatek: Turn off the layers with zero width or height
- drm/mediatek: Add OVL compatible name for MT8195
- media: imx-jpeg: Drop initial source change event if capture has been setup
- leds: trigger: Unregister sysfs attributes before calling deactivate()
- drm/msm/dsi: set VIDEO_COMPRESSION_MODE_CTRL_WC
- drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op
- perf test: Make test_arm_callgraph_fp.sh more robust
- perf pmus: Fixes always false when compare duplicates aliases
- perf report: Fix condition in sort__sym_cmp()
- drm/etnaviv: fix DMA direction handling for cached RW buffers
- drm/qxl: Add check for drm_cvt_mode
- Revert "leds: led-core: Fix refcount leak in of_led_get()"
- drm/mediatek: Remove less-than-zero comparison of an unsigned value
- ext4: fix infinite loop when replaying fast_commit
- drm/mediatek/dp: switch to ->edid_read callback
- drm/mediatek/dp: Fix spurious kfree()
- media: venus: flush all buffers in output plane streamoff
- perf intel-pt: Fix aux_watermark calculation for 64-bit size
- perf intel-pt: Fix exclude_guest setting
- mfd: rsmu: Split core code into separate module
- mfd: omap-usb-tll: Use struct_size to allocate tll
- xprtrdma: Fix rpcrdma_reqs_reset()
- SUNRPC: avoid soft lockup when transmitting UDP to reachable server.
- NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server
- ext4: don't track ranges in fast_commit if inode has inlined data
- ext4: avoid writing unitialized memory to disk in EA inodes
- leds: flash: leds-qcom-flash: Test the correct variable in init
- sparc64: Fix incorrect function signature and add prototype for
prom_cif_init
- SUNRPC: Fixup gss_status tracepoint error output
- iio: Fix the sorting functionality in iio_gts_build_avail_time_table
- PCI: Fix resource double counting on remove & rescan
- PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode()
- PCI: keystone: Don't enable BAR 0 for AM654x
- PCI: keystone: Fix NULL pointer dereference in case of DT error in
ks_pcie_setup_rc_app_regs()
- PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup()
- scsi: ufs: mcq: Fix missing argument 'hba' in MCQ_OPR_OFFSET_n
- clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock
- clk: qcom: camcc-sc7280: Add parent dependency to all camera GDSCs
- iio: frequency: adrf6780: rm clk provider include
- coresight: Fix ref leak when of_coresight_parse_endpoint() fails
- RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE
- ASoc: tas2781: Enable RCA-based playback without DSP firmware download
- ASoC: cs35l56: Accept values greater than 0 as IRQ numbers
- usb: typec-mux: nb7vpq904m: unregister typec switch on probe error and
remove
- RDMA/cache: Release GID table even if leak is detected
- clk: qcom: gpucc-sm8350: Park RCG's clk source at XO during disable
- clk: qcom: gcc-sa8775p: Update the GDSC wait_val fields and flags
- clk: qcom: gpucc-sa8775p: Remove the CLK_IS_CRITICAL and ALWAYS_ON flags
- clk: qcom: gpucc-sa8775p: Park RCG's clk source at XO during disable
- clk: qcom: gpucc-sa8775p: Update wait_val fields for GPU GDSC's
- interconnect: qcom: qcm2290: Fix mas_snoc_bimc RPM master ID
- Input: qt1050 - handle CHIP_ID reading error
- RDMA/mlx4: Fix truncated output warning in mad.c
- RDMA/mlx4: Fix truncated output warning in alias_GUID.c
- RDMA/mlx5: Use sq timestamp as QP timestamp when RoCE is disabled
- RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs
- ASoC: qcom: Adjust issues in case of DT error in
asoc_qcom_lpass_cpu_platform_probe()
- scsi: lpfc: Fix a possible null pointer dereference
- hwrng: core - Fix wrong quality calculation at hw rng registration
- powerpc/prom: Add CPU info to hardware description string later
- ASoC: max98088: Check for clk_prepare_enable() error
- mtd: make mtd_test.c a separate module
- RDMA/device: Return error earlier if port in not valid
- Input: elan_i2c - do not leave interrupt disabled on suspend failure
- ASoC: amd: Adjust error handling in case of absent codec device
- PCI: endpoint: Clean up error handling in vpci_scan_bus()
- PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup()
- vhost/vsock: always initialize seqpacket_allow
- net: missing check virtio
- nvmem: rockchip-otp: set add_legacy_fixed_of_cells config option
- crypto: qat - extend scope of lock in adf_cfg_add_key_value_param()
- clk: qcom: kpss-xcc: Return of_clk_add_hw_provider to transfer the error
- clk: qcom: Park shared RCGs upon registration
- clk: en7523: fix rate divider for slic and spi clocks
- MIPS: Octeron: remove source file executable bit
- PCI: qcom-ep: Disable resources unconditionally during PERST# assert
- PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot
- powerpc/xmon: Fix disassembly CPU feature checks
- macintosh/therm_windtunnel: fix module unload.
- RDMA/hns: Check atomic wr length
- RDMA/hns: Fix unmatch exception handling when init eq table fails
- RDMA/hns: Fix missing pagesize and alignment check in FRMR
- RDMA/hns: Fix shift-out-bounds when max_inline_data is 0
- RDMA/hns: Fix undifined behavior caused by invalid max_sge
- RDMA/hns: Fix insufficient extend DB for VFs.
- iommu/vt-d: Fix identity map bounds in si_domain_init()
- RDMA/core: Remove NULL check before dev_{put, hold}
- RDMA: Fix netdev tracker in ib_device_set_netdev
- bnxt_re: Fix imm_data endianness
- netfilter: ctnetlink: use helper function to calculate expect ID
- netfilter: nf_set_pipapo: fix initial map fill
- ipvs: properly dereference pe in ip_vs_add_service
- gve: Fix XDP TX completion handling when counters overflow
- net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE
- ipv4: Fix incorrect TOS in route get reply
- ipv4: Fix incorrect TOS in fibmatch route get reply
- net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports
- net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports
- fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT
- fs/ntfs3: Fix transform resident to nonresident for compressed files
- fs/ntfs3: Deny getting attr data block in compressed frame
- fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting
- fs/ntfs3: Fix getting file type
- fs/ntfs3: Add missing .dirty_folio in address_space_operations
- pinctrl: rockchip: update rk3308 iomux routes
- pinctrl: core: fix possible memory leak when pinctrl_enable() fails
- pinctrl: single: fix possible memory leak when pinctrl_enable() fails
- pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable()
fails
- pinctrl: freescale: mxs: Fix refcount of child
- fs/ntfs3: Replace inode_trylock with inode_lock
- fs/ntfs3: Correct undo if ntfs_create_inode failed
- fs/ntfs3: Drop stray '\' (backslash) in formatting string
- fs/ntfs3: Fix field-spanning write in INDEX_HDR
- pinctrl: renesas: r8a779g0: Fix CANFD5 suffix
- pinctrl: renesas: r8a779g0: Fix FXR_TXEN[AB] suffixes
- pinctrl: renesas: r8a779g0: Fix (H)SCIF1 suffixes
- pinctrl: renesas: r8a779g0: Fix (H)SCIF3 suffixes
- pinctrl: renesas: r8a779g0: Fix IRQ suffixes
- pinctrl: renesas: r8a779g0: FIX PWM suffixes
- pinctrl: renesas: r8a779g0: Fix TCLK suffixes
- pinctrl: renesas: r8a779g0: Fix TPU suffixes
- fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP
- fs/proc/task_mmu.c: add_to_pagemap: remove useless parameter addr
- fs/proc/task_mmu: don't indicate PM_MMAP_EXCLUSIVE without PM_PRESENT
- fs/proc/task_mmu: properly detect PM_MMAP_EXCLUSIVE per page of PMD-mapped
THPs
- nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro
- rtc: interface: Add RTC offset to alarm after fix-up
- fs/ntfs3: Fix the format of the "nocase" mount option
- fs/ntfs3: Missed error return
- fs/ntfs3: Keep runs for $MFT::$ATTR_DATA and $MFT::$ATTR_BITMAP
- powerpc/8xx: fix size given to set_huge_pte_at()
- s390/dasd: fix error checks in dasd_copy_pair_store()
- sbitmap: use READ_ONCE to access map->word
- sbitmap: fix io hung due to race on sbitmap_word::cleared
- LoongArch: Check TIF_LOAD_WATCH to enable user space watchpoint
- landlock: Don't lose track of restrictions on cred_transfer
- hugetlb: force allocating surplus hugepages on mempolicy allowed nodes
- mm/hugetlb: fix possible recursive locking detected warning
- mm/mglru: fix div-by-zero in vmpressure_calc_level()
- mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer
- mm/mglru: fix overshooting shrinker memory
- x86/efistub: Avoid returning EFI_SUCCESS on error
- x86/efistub: Revert to heap allocated boot_params for PE entrypoint
- exfat: fix potential deadlock on __exfat_get_dentry_set
- dt-bindings: thermal: correct thermal zone node name limit
- tick/broadcast: Make takeover of broadcast hrtimer reliable
- net: netconsole: Disable target before netpoll cleanup
- af_packet: Handle outgoing VLAN packets without hardware offloading
- btrfs: fix extent map use-after-free when adding pages to compressed bio
- kernel: rerun task_work while freezing in get_signal()
- ipv4: fix source address selection with route leak
- ipv6: take care of scope when choosing the src addr
- NFSD: Support write delegations in LAYOUTGET
- sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE
tasks
- fuse: verify {g,u}id mount options correctly
- ata: libata-scsi: Fix offsets for the fixed format sense data
- char: tpm: Fix possible memory leak in tpm_bios_measurements_open()
- media: venus: fix use after free in vdec_close
- ata: libata-scsi: Do not overwrite valid sense data when CK_COND=1
- hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode()
- ext2: Verify bitmap and itable block numbers before using them
- io_uring/io-wq: limit retrying worker initialisation
- drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes
- drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes
- scsi: qla2xxx: Fix optrom version displayed in FDMI
- drm/amd/display: Check for NULL pointer
- apparmor: use kvfree_sensitive to free data->data
- cifs: fix potential null pointer use in destroy_workqueue in init_cifs error
path
- cifs: fix reconnect with SMB1 UNIX Extensions
- cifs: mount with "unix" mount option for SMB1 incorrectly handled
- task_work: s/task_work_cancel()/task_work_cancel_func()/
- task_work: Introduce task_work_cancel() again
- udf: Avoid using corrupted block bitmap buffer
- m68k: amiga: Turn off Warp1260 interrupts during boot
- ext4: check dot and dotdot of dx_root before making dir indexed
- ext4: make sure the first directory block is not a hole
- io_uring: tighten task exit cancellations
- trace/pid_list: Change gfp flags in pid_list_fill_irq()
- selftests/landlock: Add cred_transfer test
- wifi: mwifiex: Fix interface type change
- wifi: rtw88: usb: Fix disconnection after beacon loss
- drivers: soc: xilinx: check return status of get_api_version()
- leds: ss4200: Convert PCIBIOS_* return codes to errnos
- leds: mt6360: Fix memory leak in mt6360_init_isnk_properties()
- media: imx-pxp: Fix ERR_PTR dereference in pxp_probe()
- jbd2: make jbd2_journal_get_max_txn_bufs() internal
- jbd2: precompute number of transaction descriptor blocks
- jbd2: avoid infinite transaction commit loop
- media: uvcvideo: Fix integer overflow calculating timestamp
- KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked()
- KVM: nVMX: Request immediate exit iff pending nested event needs injection
- ALSA: ump: Don't update FB name for static blocks
- ALSA: ump: Force 1 Group for MIDI1 FBs
- ALSA: usb-audio: Fix microphone sound on HD webcam.
- ALSA: usb-audio: Move HD Webcam quirk to the right place
- ALSA: usb-audio: Add a quirk for Sonix HD USB Camera
- tools/memory-model: Fix bug in lock.cat
- hwrng: amd - Convert PCIBIOS_* return codes to errnos
- parisc: Fix warning at drivers/pci/msi/msi.h:121
- PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN
- PCI: dw-rockchip: Fix initial PERST# GPIO value
- PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio
- PCI: loongson: Enable MSI in LS7A Root Complex
- binder: fix hang of unregistered readers
- hostfs: fix dev_t handling
- efi/libstub: Zero initialize heap allocated struct screen_info
- fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed
- scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds
- ASoC: fsl: fsl_qmc_audio: Check devm_kasprintf() returned value
- f2fs: fix to force buffered IO on inline_data inode
- f2fs: fix to don't dirty inode for readonly filesystem
- f2fs: fix return value of f2fs_convert_inline_inode()
- f2fs: use meta inode for GC of atomic file
- f2fs: use meta inode for GC of COW file
- clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use
- ubi: eba: properly rollback inside self_check_eba
- block: fix deadlock between sd_remove & sd_release
- mm: fix old/young bit handling in the faulting path
- decompress_bunzip2: fix rare decompression failure
- kbuild: Fix '-S -c' in x86 stack protector scripts
- ASoC: SOF: ipc4-topology: Preserve the DMA Link ID for ChainDMA on unprepare
- ASoC: amd: yc: Support mic on Lenovo Thinkpad E16 Gen 2
- kobject_uevent: Fix OOB access within zap_modalias_env()
- gve: Fix an edge case for TSO skb validity check
- ice: Add a per-VF limit on number of FDIR filters
- devres: Fix devm_krealloc() wasting memory
- devres: Fix memory leakage caused by driver API devm_free_percpu()
- irqdomain: Fixed unbalanced fwnode get and put
- irqchip/imx-irqsteer: Handle runtime power management correctly
- mm/numa_balancing: teach mpol_to_str about the balancing mode
- rtc: cmos: Fix return value of nvmem callbacks
- scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE
state
- scsi: qla2xxx: During vport delete send async logout explicitly
- scsi: qla2xxx: Unable to act on RSCN for port online
- scsi: qla2xxx: Fix for possible memory corruption
- scsi: qla2xxx: Use QP lock to search for bsg
- scsi: qla2xxx: Reduce fabric scan duplicate code
- scsi: qla2xxx: Fix flash read failure
- scsi: qla2xxx: Complete command early within lock
- scsi: qla2xxx: validate nvme_local_port correctly
- perf: Fix event leak upon exit
- perf: Fix event leak upon exec and file release
- perf stat: Fix the hard-coded metrics calculation on the hybrid
- perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR
- perf/x86/intel/ds: Fix non 0 retire latency on Raptorlake
- perf/x86/intel/pt: Fix topa_entry base length
- perf/x86/intel/pt: Fix a topa_entry base address calculation
- drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8
- drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell
- drm/udl: Remove DRM_CONNECTOR_POLL_HPD
- drm/dp_mst: Fix all mstb marked as not probed after suspend/resume
- drm/amdgpu: reset vm state machine after gpu reset(vram lost)
- drm/amd/amdgpu: Fix uninitialized variable warnings
- drm/i915/dp: Reset intel_dp->link_trained before retraining the link
- drm/i915/dp: Don't switch the LTTPR mode on an active link
- rtc: isl1208: Fix return value of nvmem callbacks
- rtc: abx80x: Fix return value of nvmem callback on read
- watchdog/perf: properly initialize the turbo mode timestamp and rearm
counter
- platform: mips: cpu_hwmon: Disable driver on unsupported hardware
- RDMA/iwcm: Fix a use-after-free related to destroying CM IDs
- selftests/sigaltstack: Fix ppc64 GCC build
- dm-verity: fix dm_is_verity_target() when dm-verity is builtin
- rbd: don't assume rbd_is_lock_owner() for exclusive mappings
- remoteproc: stm32_rproc: Fix mailbox interrupts queuing
- remoteproc: imx_rproc: Skip over memory region when node value is NULL
- remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init
- MIPS: dts: loongson: Add ISA node
- MIPS: ip30: ip30-console: Add missing include
- MIPS: dts: loongson: Fix GMAC phy node
- MIPS: Loongson64: env: Hook up Loongsson-2K
- MIPS: Loongson64: Remove memory node for builtin-dtb
- MIPS: Loongson64: reset: Prioritise firmware service
- MIPS: Loongson64: Test register availability before use
- drm/etnaviv: don't block scheduler when GPU is still active
- drm/panfrost: Mark simple_ondemand governor as softdep
- rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait
- rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings
- lib/build_OID_registry: don't mention the full path of the script in output
- video: logo: Drop full path of the input filename in generated file
- Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables
- Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591
- minmax: scsi: fix mis-use of 'clamp()' in sr.c
- mm/mglru: fix ineffective protection calculation
- PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal
- f2fs: fix to truncate preallocated blocks in f2fs_file_open()
- kdb: address -Wformat-security warnings
- kdb: Use the passed prompt in kdb_position_cursor()
- dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels
- phy: cadence-torrent: Check return value on register read
- phy: zynqmp: Enable reference clock correctly
- um: time-travel: fix time-travel-start option
- um: time-travel: fix signal blocking race/hang
- f2fs: fix start segno of large section
- watchdog: rzg2l_wdt: Use pm_runtime_resume_and_get()
- watchdog: rzg2l_wdt: Check return status of pm_runtime_put()
- f2fs: fix to update user block counts in block_operations()
- kbuild: avoid build error when single DTB is turned into composite DTB
- selftests/bpf: fexit_sleep: Fix stack allocation for arm64
- libbpf: Fix no-args func prototype BTF dumping syntax
- af_unix: Disable MSG_OOB handling for sockets in sockmap/sockhash
- dma: fix call order in dmam_free_coherent
- bpf, events: Use prog to emit ksymbol event for main program
- tools/resolve_btfids: Fix comparison of distinct pointer types warning in
resolve_btfids
- MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later
- ipv4: Fix incorrect source address in Record Route option
- net: bonding: correctly annotate RCU in bond_should_notify_peers()
- ice: Fix recipe read procedure
- netfilter: nft_set_pipapo_avx2: disable softinterrupts
- net: stmmac: Correct byte order of perfect_match
- net: nexthop: Initialize all fields in dumped nexthops
- bpf: Fix a segment issue when downgrading gso_size
- apparmor: Fix null pointer deref when receiving skb during sock creation
- powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap()
- lirc: rc_dev_get_from_fd(): fix file leak
- auxdisplay: ht16k33: Drop reference after LED registration
- ASoC: SOF: imx8m: Fix DSP control regmap retrieval
- spi: microchip-core: fix the issues in the isr
- spi: microchip-core: defer asserting chip select until just before write to
TX FIFO
- spi: microchip-core: only disable SPI controller when register value change
requires it
- spi: microchip-core: fix init function not setting the master and motorola
modes
- spi: microchip-core: ensure TX and RX FIFOs are empty at start of a transfer
- nvme-pci: Fix the instructions for disabling power management
- ASoC: sof: amd: fix for firmware reload failure in Vangogh platform
- spi: spidev: add correct compatible for Rohm BH2228FV
- ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable
- ASoC: TAS2781: Fix tasdev_load_calibrated_data()
- ceph: fix incorrect kmalloc size of pagevec mempool
- s390/pci: Refactor arch_setup_msi_irqs()
- s390/pci: Allow allocation of more than 1 MSI interrupt
- s390/cpum_cf: Fix endless loop in CF_DIAG event stop
- iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en
- io_uring: fix io_match_task must_hold
- nvme-pci: add missing condition check for existence of mapped data
- fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT
- md/raid0: don't free conf on raid0_run failure
- md/raid1: don't free conf on raid0_run failure
- io_uring: Fix probe of disabled operations
- cgroup/cpuset: Optimize isolated partition only generate_sched_domains()
calls
- cgroup/cpuset: Fix remote root partition creation problem
- x86/syscall: Mark exit[_group] syscall handlers __noreturn
- perf: arm_pmuv3: Avoid assigning fixed cycle counter with threshold
- md/raid5: recheck if reshape has finished with device_lock held
- hwmon: (ltc2991) re-order conditions to fix off by one bug
- arm64: smp: Fix missing IPI statistics
- arm64: dts: qcom: sc7280: Remove CTS/RTS configuration
- ARM: dts: qcom: msm8226-microsoft-common: Enable smbb explicitly
- OPP: Fix missing cleanup on error in _opp_attach_genpd()
- arm64: dts: qcom: sc8280xp-*: Remove thermal zone polling delays
- arm64: dts: ti: k3-am62-main: Fix the reg-range for main_pktdma
- arm64: dts: ti: k3-am62a-main: Fix the reg-range for main_pktdma
- arm64: dts: ti: k3-am62p-main: Fix the reg-range for main_pktdma
- arm64: dts: ti: k3-am62a7: Drop McASP AFIFOs
- arm64: dts: ti: k3-am62p5: Drop McASP AFIFOs
- arm64: dts: ti: k3-am62p5-sk: Fix pinmux for McASP1 TX
- arm64: dts: qcom: sc7180-trogdor: Disable pwmleds node where unused
- arm64: dts: mediatek: mt8192: Fix GPU thermal zone name for SVS
- arm64: dts: mediatek: mt8183-pico6: Fix wake-on-X event node names
- arm64: dts: renesas: r9a08g045: Add missing hypervisor virtual timer IRQ
- cpufreq/amd-pstate-ut: Convert nominal_freq to khz during comparisons
- wifi: mac80211: cancel multi-link reconf work on disconnect
- wifi: ath11k: refactor setting country code logic
- wifi: ath11k: restore country code during resume
- net: ethernet: cortina: Restore TSO support
- tcp: fix races in tcp_abort()
- hns3: avoid linking objects into multiple modules
- sched/core: Move preempt_model_*() helpers from sched.h to preempt.h
- sched/core: Drop spinlocks on contention iff kernel is preemptible
- net: dsa: ksz_common: Allow only up to two HSR HW offloaded ports for
KSZ9477
- libbpf: Skip base btf sanity checks
- wifi: mac80211: add ieee80211_tdls_sta_link_id()
- wifi: iwlwifi: fix iwl_mvm_get_valid_rx_ant()
- wifi: ath12k: advertise driver capabilities for MBSSID and EMA
- riscv, bpf: Fix out-of-bounds issue when preparing trampoline image
- perf/x86/amd/uncore: Avoid PMU registration if counters are unavailable
- perf/x86/amd/uncore: Fix DF and UMC domain identification
- NFSD: Fix nfsdcld warning
- net: page_pool: fix warning code
- bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
- Bluetooth: hci_event: Set QoS encryption from BIGInfo report
- Bluetooth: hci_core, hci_sync: cleanup struct discovery_state
- Bluetooth: Fix usage of __hci_cmd_sync_status
- tcp: Don't access uninit tcp_rsk(req)->ao_keyid in
tcp_create_openreq_child().
- drm/panel: ilitek-ili9882t: If prepare fails, disable GPIO before regulators
- drm/panel: ilitek-ili9882t: Check for errors on the NOP in prepare()
- drm/amd/display: Move 'struct scaler_data' off stack
- media: i2c: hi846: Fix V4L2_SUBDEV_FORMAT_TRY get_selection()
- drm/msm/dpu: fix encoder irq wait skip
- drm/msm/dpu: drop duplicate drm formats from wb2_formats arrays
- drm/msm/dp: fix runtime_pm handling in dp_wait_hpd_asserted
- perf maps: Switch from rbtree to lazily sorted array for addresses
- perf maps: Fix use after free in __maps__fixup_overlap_and_insert
- drm/bridge: samsung-dsim: Set P divider based on min/max of fin pll
- drm/i915/psr: Print Panel Replay status instead of frame lock status
- drm/mediatek: Set DRM mode configs accordingly
- drm/msm/dsi: set video mode widebus enable bit when widebus is enabled
- tools/perf: Fix the string match for "/tmp/perf-$PID.map" files in dso__load
- drm/amd/display: Add null check before access structs
- nfs: pass explicit offset/count to trace events
- PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in
pci_epf_test_core_init()
- PCI: tegra194: Set EP alignment restriction for inbound ATU
- riscv: smp: fail booting up smp if inconsistent vlen is detected
- clk: meson: s4: fix fixed_pll_dco clock
- clk: meson: s4: fix pwm_j_div parent clock
- usb: typec-mux: ptn36502: unregister typec switch on probe error and remove
- mtd: spi-nor: winbond: fix w25q128 regression
- iommufd/selftest: Fix dirty bitmap tests with u8 bitmaps
- iommufd/selftest: Fix iommufd_test_dirty() to handle <u8 bitmaps
- iommufd/selftest: Add tests for <= u8 bitmap sizes
- iommufd/selftest: Fix tests to use MOCK_PAGE_SIZE based buffer sizes
- iommufd/iova_bitmap: Check iova_bitmap_done() after set ahead
- clk: qcom: gcc-x1e80100: Fix halt_check for all pipe clocks
- dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume
- kvm: s390: Reject memory region operations for ucontrol VMs
- eeprom: ee1004: Call i2c_new_scanned_device to instantiate thermal sensor
- clk: qcom: gcc-x1e80100: Set parent rate for USB3 sec and tert PHY pipe clks
- workqueue: Introduce from_work() helper for cleaner callback declarations
- RDMA/hns: Fix mbx timing out before CMD execution is completed
- crypto: mxs-dcp - Ensure payload is zero when using key slot
- RDMA/mana_ib: Enable RoCE on port 1
- RDMA/mana_ib: set node_guid
- rtc: tps6594: Fix memleak in probe
- selftests/damon/access_memory: use user-defined region size
- md-cluster: fix hanging issue while a new disk adding
- power: supply: ab8500: Fix error handling when calling
iio_read_channel_processed()
- power: supply: ingenic: Fix some error handling paths in
ingenic_battery_get_property()
- remoteproc: mediatek: Don't attempt to remap l1tcm memory if missing
- remoteproc: k3-r5: Fix IPC-only mode detection
- mailbox: imx: fix TXDB_V2 channel race condition
- mailbox: mtk-cmdq: Move devm_mbox_controller_register() after
devm_pm_runtime_enable()
- mm: huge_memory: use !CONFIG_64BIT to relax huge page alignment on 32 bit
machines
- mm/huge_memory: avoid PMD-size page cache if needed
- thermal/drivers/broadcom: Fix race between removal and clock disable
- workqueue: Always queue work items to the newest PWQ for order workqueues
- ipv6: fix source address selection with route leak
- drm/xe: Use write-back caching mode for system memory on DGFX
- md/raid5: fix spares errors about rcu usage
- media: stm32: dcmipp: correct error handling in dcmipp_create_subdevs
- tpm_tis_spi: add missing attpm20p SPI device ID entry
- sysctl: always initialize i_uid/i_gid
- media: i2c: Kconfig: Fix missing firmware upload config select
- genirq: Set IRQF_COND_ONESHOT in request_irq()
- cpufreq: qcom-nvmem: fix memory leaks in probe error paths
- leds: triggers: Flush pending brightness before activating trigger
- media: i2c: alvium: Move V4L2_CID_GAIN to V4L2_CID_ANALOG_GAIN
- KVM: nVMX: Add a helper to get highest pending from Posted Interrupt vector
- KVM: nVMX: Check for pending posted interrupts when looking for nested
events
- ALSA: hda/realtek: cs35l41: Fixup remaining asus strix models
- fbdev: vesafb: Detect VGA compatibility from screen info's VESA attributes
- drm/fbdev-dma: Fix framebuffer mode for big endian devices
- xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL
- dmaengine: fsl-edma: clean up unused "fsl,imx8qm-adma" compatible string
- dmaengine: fsl-edma: change the memory access from local into remote mode in
i.MX 8QM
- clk: samsung: fix getting Exynos4 fin_pll rate from external clocks
- bus: mhi: ep: Do not allocate memory for MHI objects from DMA zone
- ASoC: SOF: ipc4-topology: Use correct queue_id for requesting input pin
format
- arch: um: rust: Use the generated target.json again
- f2fs: fix null reference error when checking end of zone
- selftests: forwarding: skip if kernel not support setting bridge fdb
learning limit
- xsk: Require XDP_UMEM_TX_METADATA_LEN to actuate tx_metadata_len
- drm/xe/exec: Fix minor bug related to xe_sync_entry_cleanup
- thermal: trip: Split thermal_zone_device_set_mode()
- apparmor: unpack transition table if dfa is not present
- i3c: mipi-i3c-hci: Fix number of DAT/DCT entries for HCI versions < 1.1
- selinux,smack: remove the capability checks in the removexattr hooks
- selftests/bpf: DENYLIST.aarch64: Skip fexit_sleep again
- nilfs2: handle inconsistent state in nilfs_btnode_create_block()
- Upstream stable to v6.6.44, v6.10.3
* Noble update: upstream stable patchset 2024-09-30 (LP: #2083196) //
CVE-2024-42284
- tipc: Return non-zero value from tipc_udp_addr2str() on error
* CVE-2024-44987
- ipv6: prevent UAF in ip6_send_skb()
* CVE-2024-42301
- dev/parport: fix the array out-of-bounds risk
* CVE-2024-44998
- atm: idt77252: prevent use after free in dequeue_rx()
[ Ubuntu: 6.8.0-49.49 ]
* noble/linux: 6.8.0-49.49 -proposed tracker (LP: #2085942)
* CVE-2024-46800
- sch/netem: fix use after free in netem_dequeue
* mm/folios: xfs hangs with hung task timeouts with corrupted folio pointer
lists (LP: #2085495)
- lib/xarray: introduce a new helper xas_get_order
- mm/filemap: return early if failed to allocate memory for split
- mm/filemap: optimize filemap folio adding
* CVE-2024-43882
- exec: Fix ToCToU between perm check and set-uid/gid usage
linux-xilinx (6.8.0-1016.17) noble; urgency=medium
* noble/linux-xilinx: 6.8.0-1016.17 -proposed tracker (LP: #2118980)
* Packaging resync (LP: #1786013)
- [Packaging] update variants
- [Packaging] debian.xilinx/dkms-versions -- update from kernel-versions
(main/d2025.07.29)
* Fix kernel crash in V4L module on exit of realsense application
(LP: #2115849)
- Revert "uvcvideo: Prevent new URBs being processed at stream stop"
* Don't produce linux-*-cloud-tools-common, linux-*-tools-common and
linux-*-tools-host binary packages (LP: #2048183)
- [Packaging] don't produce SRCPKGNAME-tools-common and SRCPKGNAME-tools-
host
Date: 2025-08-11 14:15:11.872726+00:00
Changed-By: Wei-Lin Chang <weilin.chang at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-xilinx/6.8.0-1017.18
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list