[ubuntu/noble-proposed] linux-hwe-6.11 6.11.0-17.17~24.04.2 (Accepted)
Andy Whitcroft
apw at canonical.com
Tue Jan 21 17:51:09 UTC 2025
linux-hwe-6.11 (6.11.0-17.17~24.04.2) noble; urgency=medium
* noble/linux-hwe-6.11: 6.11.0-17.17~24.04.2 -proposed tracker (LP: #2093641)
* Add list of source files to linux-buildinfo (LP: #2086606)
- [Packaging] hwe-6.11: Add dwarfdump dependency
* Packaging resync (LP: #1786013)
- [Packaging] debian.hwe-6.11/dkms-versions -- update from kernel-versions
(main/2025.01.13)
[ Ubuntu: 6.11.0-17.17 ]
* oracular/linux: 6.11.0-17.17 -proposed tracker (LP: #2093643)
* Packaging resync (LP: #1786013)
- [Packaging] debian.master/dkms-versions -- update from kernel-versions
(main/2025.01.13)
* When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744)
- [Packaging] disable hv-kvp-daemon if needed
* Backport "netkit: Add option for scrubbing skb meta data" to 6.8
(LP: #2091184)
- netkit: Add option for scrubbing skb meta data
* KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
Exit (LP: #2093146)
- KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
* [SRU] add support of QCA BT 0489:e0fc (LP: #2085406)
- Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x
* oracular: ubuntu_boot lib/dynamic_queue_limits.c:99! (LP: #2089684)
- virtio_net: correct netdev_tx_reset_queue() invocation point
- virtio_ring: add a func argument 'recycle_done' to virtqueue_resize()
- virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize
* Failed to probe for OVTI02C1: chip id mismatch: 560243!=0 (LP: #2090932)
- SAUCE: ACPI: scan: Update HID for new platform
* Bluetooth[8086:a876] crash with "hci0: Failed to read MSFT supported
features (-110)" (LP: #2085485)
- Bluetooth: btintel_pcie: Add recovery mechanism
* Poor bluetooth performance on Lenovo X13s (LP: #2089357)
- SAUCE: Bluetooth: qca: Support downloading board ID specific NVM for WCN6855
* vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
- SAUCE: Revert "mm: use rwsem assertion macros for mmap_lock"
- SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
- SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"
* Oracular update: v6.11.11 upstream stable release (LP: #2091655)
- wifi: mac80211: Fix setting txpower with emulate_chanctx
- wifi: cfg80211: Add wiphy_delayed_work_pending()
- wifi: mac80211: Convert color collision detection to wiphy work
- wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings
- spi: stm32: fix missing device mode capability in stm32mp25
- ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
- ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
- ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
- ASoC: Intel: sst: Support LPE0F28 ACPI HID
- wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
- wifi: iwlwifi: mvm: SAR table alignment
- mac80211: fix user-power when emulating chanctx
- usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
- usb: typec: use cleanup facility for 'altmodes_node'
- selftests/watchdog-test: Fix system accidentally reset after watchdog-test
- ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
- ASoC: codecs: wcd937x: add missing LO Switch control
- ASoC: codecs: wcd937x: relax the AUX PDM watchdog
- x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
- bpf: fix filed access without lock
- net: usb: qmi_wwan: add Quectel RG650V
- soc: qcom: Add check devm_kasprintf() returned value
- firmware: arm_scmi: Reject clear channel request on A2P
- regulator: rk808: Add apply_bit for BUCK3 on RK809
- platform/x86: dell-smbios-base: Extends support to Alienware products
- platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
- platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
- ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
- tools/lib/thermal: Remove the thermal.h soft link when doing make clean
- can: j1939: fix error in J1939 documentation.
- platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect
fan speed
- ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
- ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
- ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
- drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less
strict
- proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
- integrity: Use static_assert() to check struct sizes
- ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
- LoongArch: For all possible CPUs setup logical-physical CPU mapping
- LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
- ASoC: max9768: Fix event generation for playback mute
- ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
- ARM: 9420/1: smp: Fix SMP for xip kernels
- ARM: 9434/1: cfi: Fix compilation corner case
- ipmr: Fix access to mfc_cache_list without lock held
- f2fs: fix fiemap failure issue when page size is 16KB
- drm/amd/display: Skip Invalid Streams from DSC Policy
- drm/amd/display: Fix incorrect DSC recompute trigger
- s390/facilities: Fix warning about shadow of global variable
- efs: fix the efs new mount api implementation
- arm64: probes: Disable kprobes/uprobes on MOPS instructions
- kselftest/arm64: hwcap: fix f8dp2 cpuinfo name
- kselftest/arm64: mte: fix printf type warnings about __u64
- kselftest/arm64: mte: fix printf type warnings about longs
- block/fs: Pass an iocb to generic_atomic_write_valid()
- fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()
- s390/cio: Do not unregister the subchannel based on DNV
- s390/pageattr: Implement missing kernel_page_present()
- x86/pvh: Set phys_base when calling xen_prepare_pvh()
- x86/pvh: Call C code via the kernel virtual mapping
- brd: defer automatic disk creation until module initialization succeeds
- ext4: avoid remount errors with 'abort' mount option
- mips: asm: fix warning when disabling MIPS_FP_SUPPORT
- arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers
- kselftest/arm64: Fix encoding for SVE B16B16 test
- nvme-pci: fix freeing of the HMB descriptor table
- m68k: mvme147: Fix SCSI controller IRQ numbers
- m68k: mvme147: Reinstate early console
- arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
- acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
- loop: fix type of block size
- cachefiles: Fix incorrect length return value in
cachefiles_ondemand_fd_write_iter()
- cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
- cachefiles: Fix NULL pointer dereference in object->file
- netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
- block: constify the lim argument to queue_limits_max_zone_append_sectors
- block: properly handle REQ_OP_ZONE_APPEND in __bio_split_to_limits
- block: take chunk_sectors into account in bio_split_write_zeroes
- block: fix bio_split_rw_at to take zone_write_granularity into account
- s390/syscalls: Avoid creation of arch/arch/ directory
- hfsplus: don't query the device logical block size multiple times
- ext4: pipeline buffer reads in mext_page_mkuptodate()
- ext4: remove array of buffer_heads from mext_page_mkuptodate()
- ext4: fix race in buffer_head read fault injection
- nvme-pci: reverse request order in nvme_queue_rqs
- virtio_blk: reverse request order in virtio_queue_rqs
- crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys
- crypto: caam - Fix the pointer passed to caam_qi_shutdown()
- crypto: qat - remove check after debugfs_create_dir()
- crypto: qat/qat_420xx - fix off by one in uof_get_name()
- crypto: qat/qat_4xxx - fix off by one in uof_get_name()
- firmware: google: Unregister driver_info on failure
- EDAC/bluefield: Fix potential integer overflow
- crypto: qat - remove faulty arbiter config reset
- thermal: core: Initialize thermal zones before registering them
- thermal: core: Drop thermal_zone_device_is_enabled()
- thermal: core: Rearrange PM notification code
- thermal: core: Represent suspend-related thermal zone flags as bits
- thermal: core: Mark thermal zones as initializing to start with
- thermal: core: Fix race between zone registration and system suspend
- EDAC/fsl_ddr: Fix bad bit shift operations
- EDAC/skx_common: Differentiate memory error sources
- EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
- crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
-EBUSY
- crypto: cavium - Fix the if condition to exit loop after timeout
- cpufreq/amd-pstate: Don't update CPPC request in
amd_pstate_cpu_boost_update()
- amd-pstate: Set min_perf to nominal_perf for active mode performance gov
- crypto: hisilicon/qm - disable same error report before resetting
- EDAC/igen6: Avoid segmentation fault on module unload
- crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
- crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
- sched/cpufreq: Ensure sd is rebuilt for EAS check
- doc: rcu: update printed dynticks counter bits
- rcu/srcutiny: don't return before reenabling preemption
- rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
- hwmon: (pmbus/core) clear faults after setting smbalert mask
- hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
- ACPI: CPPC: Fix _CPC register setting issue
- crypto: caam - add error check to caam_rsa_set_priv_key_form
- crypto: bcm - add error check in the ahash_hmac_init function
- crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
- rcuscale: Do a proper cleanup if kfree_scale_init() fails
- tools/lib/thermal: Make more generic the command encoding function
- thermal/lib: Fix memory leak on error in thermal_genl_auto()
- x86/unwind/orc: Fix unwind for newly forked tasks
- Revert "scripts/faddr2line: Check only two symbols when calculating symbol
size"
- cleanup: Remove address space of returned pointer
- time: Partially revert cleanup on msecs_to_jiffies() documentation
- time: Fix references to _msecs_to_jiffies() handling of values
- locking/atomic/x86: Use ALT_OUTPUT_SP() for __alternative_atomic64()
- locking/atomic/x86: Use ALT_OUTPUT_SP() for __arch_{,try_}cmpxchg64_emu()
- kcsan, seqlock: Support seqcount_latch_t
- kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
- clocksource/drivers:sp804: Make user selectable
- clocksource/drivers/timer-ti-dm: Fix child node refcount handling
- regulator: qcom-smd: make smd_vreg_rpm static
- spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
- arm64: dts: qcom: qcs6390-rb3gen2: use modem.mbn for modem DSP
- ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash
- drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
- microblaze: Export xmb_manager functions
- arm64: dts: mediatek: mt8188: Fix wrong clock provider in MFG1 power domain
- arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy
- arm64: dts: mt8195: Fix dtbs_check error for mutex node
- arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
- soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
- soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
- arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
- arm64: dts: qcom: sda660-ifc6560: fix l10a voltage ranges
- ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
- mmc: mmc_spi: drop buggy snprintf()
- scripts/kernel-doc: Do not track section counter across processed files
- arm64: dts: qcom: x1e80100-slim7x: Drop orientation-switch from USB SS[0-1]
QMP PHYs
- arm64: dts: qcom: x1e80100-vivobook-s15: Drop orientation-switch from USB
SS[0-1] QMP PHYs
- openrisc: Implement fixmap to fix earlycon
- efi/libstub: fix efi_parse_options() ignoring the default command line
- tpm: fix signed/unsigned bug when checking event logs
- media: i2c: vgxy61: Fix an error handling path in vgxy61_detect()
- media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
- arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
- arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
- arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region
- kernel-doc: allow object-like macros in ReST output
- arm64: dts: ti: k3-am62x-phyboard-lyra: Drop unnecessary McASP AFIFOs
- arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
trackpad
- arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status
- arm64: dts: mediatek: mt8195-cherry: Use correct audio codec DAI
- Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
- cgroup/bpf: only cgroup v2 can be attached by bpf programs
- regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
- power: sequencing: make the QCom PMU pwrseq driver depend on CONFIG_OF
- [Config] updateconfigs for POWER_SEQUENCING_QCOM_WCN
- arm64: dts: rockchip: Remove 'enable-active-low' from two boards
- arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
- arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
- pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
- ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
- arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
- arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
- arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
- arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
- watchdog: Add HAS_IOPORT dependency for SBC8360 and SBC7240
- arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers
- dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries
- of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
- pmdomain: ti-sci: Add missing of_node_put() for args.np
- spi: tegra210-quad: Avoid shift-out-of-bounds
- spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time
- regmap: irq: Set lockdep class for hierarchical IRQ domains
- arm64: dts: renesas: hihope: Drop #sound-dai-cells
- arm64: dts: imx8mn-tqma8mqnl-mba8mx-usbot: fix coexistence of output-low and
output-high in GPIO
- arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
- arm64: dts: mediatek: mt6358: fix dtbs_check error
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
- arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
regulators
- selftests/resctrl: Print accurate buffer size as part of MBM results
- selftests/resctrl: Fix memory overflow due to unhandled wraparound
- selftests/resctrl: Protect against array overrun during iMC config parsing
- firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
- media: ipu6: Fix DMA and physical address debugging messages for 32-bit
- media: ipu6: not override the dma_ops of device in driver
- pwm: Assume a disabled PWM to emit a constant inactive output
- media: atomisp: Add check for rgby_data memory allocation failure
- arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
- HID: hyperv: streamline driver probe to avoid devres issues
- platform/x86: panasonic-laptop: Return errno correctly in show callback
- drm/imagination: Convert to use time_before macro
- drm/imagination: Use pvr_vm_context_get()
- drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
- drm/vc4: hvs: Don't write gamma luts on 2711
- drm/vc4: hdmi: Avoid hang with debug registers when suspended
- drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
- drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
- drm/vc4: hvs: Correct logic on stopping an HVS channel
- wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
- drm/omap: Fix possible NULL dereference
- drm/omap: Fix locking in omap_gem_new_dmabuf()
- drm/v3d: Appease lockdep while updating GPU stats
- wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
- wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
- udmabuf: change folios array from kmalloc to kvmalloc
- udmabuf: fix vmap_udmabuf error page set
- [Config] updateconfigs for VMAP_PFN
- drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/panel: nt35510: Make new commands optional
- drm/v3d: Address race-condition in MMU flush
- drm/v3d: Flush the MMU before we supply more memory to the binner
- drm/amdgpu: Fix JPEG v4.0.3 register write
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
- wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
- wifi: ath12k: Skip Rx TID cleanup for self peer
- dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
- ASoC: fsl_micfil: fix regmap_write_bits usage
- ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
- ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios
- drm/bridge: anx7625: Drop EDID cache on bridge power off
- drm/bridge: it6505: Drop EDID cache on bridge power off
- libbpf: Fix expected_attach_type set handling in program load callback
- libbpf: Fix output .symtab byte-order during linking
- dlm: fix swapped args sb_flags vs sb_status
- wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled
- drm/amd/display: fix a memleak issue when driver is removed
- wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()
- wifi: ath12k: fix one more memcpy size error
- bpf: Fix the xdp_adjust_tail sample prog issue
- selftests/bpf: netns_new() and netns_free() helpers.
- selftests/bpf: Fix backtrace printing for selftests crashes
- wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
- selftests/bpf: add missing header include for htons
- wifi: cfg80211: check radio iface combination for multi radio per wiphy
- ice: consistently use q_idx in ice_vc_cfg_qs_msg()
- drm/vc4: hdmi: Increase audio MAI fifo dreq threshold
- drm/vc4: Introduce generation number enum
- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
- drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
- drm/vc4: Correct generation check in vc4_hvs_lut_load
- libbpf: fix sym_is_subprog() logic for weak global subprogs
- accel/ivpu: Prevent recovery invocation during probe and resume
- ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
- libbpf: never interpret subprogs in .text as entry programs
- netdevsim: copy addresses for both in and out paths
- drm/bridge: tc358767: Fix link properties discovery
- selftests/bpf: Fix msg_verify_data in test_sockmap
- selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
- wifi: wilc1000: Set MAC after operation mode
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_config_scan()
- drm: fsl-dcu: enable PIXCLK on LS1021A
- drm: panel: nv3052c: correct spi_device_id for RG35XX panel
- drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
- drm/msm/dpu: drop LM_3 / LM_4 on SDM845
- drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
- octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
- octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
- selftests/bpf: fix test_spin_lock_fail.c's global vars usage
- libbpf: move global data mmap()'ing into bpf_object__load()
- drm/panfrost: Remove unused id_mask from struct panfrost_model
- bpf, arm64: Remove garbage frame for struct_ops trampoline
- drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
- drm/msm/gpu: Check the status of registration to PM QoS
- drm/xe/hdcp: Fix gsc structure check in fw check status
- drm/etnaviv: Request pages from DMA32 zone on addressing_limited
- drm/etnaviv: hold GPU lock across perfmon sampling
- drm/amd/display: Increase idle worker HPD detection time
- drm/amd/display: Reduce HPD Detection Interval for IPS
- drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
- drm: zynqmp_kms: Unplug DRM device before removal
- drm: xlnx: zynqmp_disp: layer may be null while releasing
- wifi: wfx: Fix error handling in wfx_core_init()
- wifi: cw1200: Fix potential NULL dereference
- drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
- bpf, bpftool: Fix incorrect disasm pc
- bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable
- drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
- drm/amdgpu: Fix the memory allocation issue in
amdgpu_discovery_get_nps_info()
- bpf: Support __nullable argument suffix for tp_btf
- selftests/bpf: Add test for __nullable suffix in tp_btf
- bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
- drm: use ATOMIC64_INIT() for atomic64_t
- netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
- netfilter: nf_tables: must hold rcu read lock while iterating expression
type list
- netfilter: nf_tables: must hold rcu read lock while iterating object type
list
- netlink: typographical error in nlmsg_type constants definition
- wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()
- drm/panfrost: Add missing OPP table refcnt decremental
- drm/panthor: introduce job cycle and timestamp accounting
- drm/panthor: record current and maximum device clock frequencies
- drm/panthor: Fix OPP refcnt leaks in devfreq initialisation
- isofs: avoid memory leak in iocharset
- selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
- selftests/bpf: Fix SENDPAGE data logic in test_sockmap
- selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
- selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
- bpf, sockmap: Several fixes to bpf_msg_push_data
- bpf, sockmap: Several fixes to bpf_msg_pop_data
- bpf, sockmap: Fix sk_msg_reset_curr
- ipv6: release nexthop on device removal
- selftests: net: really check for bg process completion
- wifi: cfg80211: Remove the Medium Synchronization Delay validity check
- wifi: iwlwifi: allow fast resume on ax200
- wifi: iwlwifi: mvm: tell iwlmei when we finished suspending
- drm/amdgpu: fix ACA bank count boundary check error
- drm/amdgpu: Fix map/unmap queue logic
- drm/amdkfd: Fix wrong usage of INIT_WORK()
- bpf: Allow return values 0 and 1 for kprobe session
- bpf: Force uprobe bpf program to always return 0
- selftests/bpf: skip the timer_lockup test for single-CPU nodes
- ipv6: Fix soft lockups in fib6_select_path under high next hop churn
- net: rfkill: gpio: Add check for clk_enable()
- Revert "wifi: iwlegacy: do not skip frames with bad FCS"
- bpf: Use function pointers count as struct_ops links count
- bpf: Add kernel symbol for struct_ops trampoline
- ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
- ALSA: 6fire: Release resources at card release
- i2c: dev: Fix memory leak when underlying adapter does not support I2C
- selftests: netfilter: Fix missing return values in conntrack_dump_flush
- Bluetooth: btintel_pcie: Add handshake between driver and firmware
- Bluetooth: btintel: Do no pass vendor events to stack
- Bluetooth: btmtk: adjust the position to init iso data anchor
- Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
- Bluetooth: ISO: Use kref to track lifetime of iso_conn
- Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending
- Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending
- Bluetooth: ISO: Send BIG Create Sync via hci_sync
- Bluetooth: fix use-after-free in device_for_each_child()
- xsk: Free skb when TX metadata options are invalid
- erofs: handle NONHEAD !delta[1] lclusters gracefully
- dlm: fix dlm_recover_members refcount on error
- eth: fbnic: don't disable the PCI device twice
- net: txgbe: remove GPIO interrupt controller
- net: txgbe: fix null pointer to pcs
- netpoll: Use rcu_access_pointer() in netpoll_poll_lock
- wireguard: selftests: load nf_conntrack if not present
- bpf: fix recursive lock when verdict program return SK_PASS
- unicode: Fix utf8_load() error path
- cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
- RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages
- RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset
- clk: mediatek: drop two dead config options
- [Config] drop COMMON_CLK_MT8195_{AUDSYS,MSDC}
- trace/trace_event_perf: remove duplicate samples on the first tracepoint
event
- pinctrl: zynqmp: drop excess struct member description
- pinctrl: renesas: Select PINCTRL_RZG2L for RZ/V2H(P) SoC
- clk: qcom: videocc-sm8550: depend on either gcc-sm8550 or gcc-sm8650
- iommu/s390: Implement blocking domain
- scsi: hisi_sas: Enable all PHYs that are not disabled by user during
controller reset
- powerpc/vdso: Flag VDSO64 entry points as functions
- mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
- mfd: da9052-spi: Change read-mask to write-mask
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
- mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
- irqdomain: Simplify simple and legacy domain creation
- irqdomain: Cleanup domain name allocation
- irqdomain: Allow giving name suffix for domain
- regmap: Allow setting IRQ domain name suffix
- mfd: intel_soc_pmic_bxtwc: Fix IRQ domain names duplication
- cpufreq: loongson2: Unregister platform_driver on failure
- powerpc/fadump: Refactor and prepare fadump_cma_init for late init
- powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
- mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
- mtd: rawnand: atmel: Fix possible memory leak
- powerpc/mm/fault: Fix kfence page fault reporting
- clk: sophgo: avoid integer overflow in sg2042_pll_recalc_rate()
- mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in
RD_ANY_REG_OP
- powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
- cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
- cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
- iommu/amd: Remove amd_iommu_domain_update() from page table freeing
- iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related
- iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl
- iommu/amd: Store the nid in io_pgtable_cfg instead of the domain
- iommu/amd: Narrow the use of struct protection_domain to invalidation
- iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
- RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
- RDMA/hns: Fix flush cqe error when racing with destroy qp
- RDMA/hns: Modify debugfs name
- RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
- RDMA/hns: Fix cpu stuck caused by printings during reset
- RDMA/rxe: Fix the qp flush warnings in req
- RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
- clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
- clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
- RDMA/rxe: Set queue pair cur_qp_state when being queried
- RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
- riscv: kvm: Fix out-of-bounds array access
- clk: imx: lpcg-scu: SW workaround for errata (e10858)
- clk: imx: fracn-gppll: correct PLL initialization flow
- clk: imx: fracn-gppll: fix pll power up
- clk: imx: clk-scu: fix clk enable state save and restore
- clk: imx: imx8-acm: Fix return value check in
clk_imx_acm_attach_pm_domains()
- iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
- iommu/vt-d: Fix checks and print in pgtable_walk()
- checkpatch: always parse orig_commit in fixes tag
- mfd: rt5033: Fix missing regmap_del_irq_chip()
- leds: max5970: Fix unreleased fwnode_handle in probe function
- leds: ktd2692: Set missing timing properties
- fs/proc/kcore.c: fix coccinelle reported ERROR instances
- scsi: target: Fix incorrect function name in pscsi_create_type_disk()
- scsi: bfa: Fix use-after-free in bfad_im_module_exit()
- scsi: fusion: Remove unused variable 'rc'
- scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
- scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
- scsi: sg: Enable runtime power management
- x86/tdx: Introduce wrappers to read and write TD metadata
- x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
- x86/tdx: Dynamically disable SEPT violations from causing #VEs
- powerpc/fadump: allocate memory for additional parameters early
- fadump: reserve param area if below boot_mem_top
- RDMA/hns: Fix out-of-order issue of requester when setting FENCE
- RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
- cpufreq: loongson3: Check for error code from devm_mutex_init() call
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
- cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
- kasan: move checks to do_strncpy_from_user
- kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL
- ocfs2: fix uninitialized value in ocfs2_file_read_iter()
- dax: delete a stale directory pmem
- KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
- KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending
doorbells
- powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
- RDMA/hns: Fix different dgids mapping to the same dip_idx
- KVM: PPC: Book3S HV: Fix kmv -> kvm typo
- powerpc/kexec: Fix return of uninitialized variable
- fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
- RDMA/mlx5: Move events notifier registration to be after device registration
- clk: clk-apple-nco: Add NULL check in applnco_probe
- clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
- clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
- clk: en7523: remove REG_PCIE*_{MEM,MEM_MASK} configuration
- clk: en7523: move clock_register in hw_init callback
- clk: en7523: introduce chip_scu regmap
- clk: en7523: fix estimation of fixed rate for EN7581
- dt-bindings: clock: axi-clkgen: include AXI clk
- clk: clk-axi-clkgen: make sure to enable the AXI bus clock
- arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
- pinctrl: k210: Undef K210_PC_DEFAULT
- rtla/timerlat: Do not set params->user_workload with -U
- smb: cached directories can be more than root file handle
- mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()
- mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
- x86: fix off-by-one in access_ok()
- perf cs-etm: Don't flush when packet_queue fills up
- gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
- gfs2: Allow immediate GLF_VERIFY_DELETE work
- gfs2: Fix unlinked inode cleanup
- perf test: Add test for Intel TPEBS counting mode
- perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
- PCI: Fix reset_method_store() memory leak
- perf stat: Close cork_fd when create_perf_stat_counter() failed
- perf stat: Fix affinity memory leaks on error path
- perf trace: Keep exited threads for summary
- perf test attr: Add back missing topdown events
- f2fs: compress: fix inconsistent update of i_blocks in
release_compress_blocks and reserve_compress_blocks
- f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
- f2fs: fix to account dirty data in __get_secs_required()
- perf dso: Fix symtab_type for kmod compression
- perf probe: Fix libdw memory leak
- perf probe: Correct demangled symbols in C++ program
- rust: kernel: fix THIS_MODULE header path in ThisModule doc comment
- rust: macros: fix documentation of the paste! macro
- PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
- PCI: cpqphp: Fix PCIBIOS_* return value confusion
- rust: block: fix formatting of `kernel::block::mq::request` module
- perf disasm: Use disasm_line__free() to properly free disasm_line
- virtiofs: use pages instead of pointer for kernel direct IO
- perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
- i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
- f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
- f2fs: check curseg->inited before write_sum_page in change_curseg
- f2fs: Fix not used variable 'index'
- f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
- f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or
GC_URGENT_MID
- PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
- PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()
- PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
- PCI: cadence: Set cdns_pcie_host_init() global
- PCI: j721e: Add reset GPIO to struct j721e_pcie
- PCI: j721e: Use T_PERST_CLK_US macro
- PCI: j721e: Add suspend and resume support
- PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
- perf build: Add missing cflags when building with custom libtraceevent
- f2fs: fix race in concurrent f2fs_stop_gc_thread
- f2fs: fix to map blocks correctly for direct write
- f2fs: fix to avoid forcing direct write to use buffered IO on inline_data
inode
- perf trace: avoid garbage when not printing a trace event's arguments
- m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
- m68k: coldfire/device.c: only build FEC when HW macros are defined
- svcrdma: Address an integer overflow
- nfsd: drop inode parameter from nfsd4_change_attribute()
- perf list: Fix topic and pmu_name argument order
- perf trace: Fix tracing itself, creating feedback loops
- perf trace: Do not lose last events in a race
- perf trace: Avoid garbage when not printing a syscall's arguments
- remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()
- remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()
- remoteproc: qcom: pas: add minidump_id to SM8350 resources
- rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
- remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
- PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
- NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
- NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
- nfsd: release svc_expkey/svc_export with rcu_work
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
- NFSD: Fix nfsd4_shutdown_copy()
- f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS
- f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow
- hwmon: (tps23861) Fix reporting of negative temperatures
- hwmon: (aquacomputer_d5next) Fix length of speed_input array
- phy: airoha: Fix REG_CSR_2L_PLL_CMN_RESERVE0 config in
airoha_pcie_phy_init_clk_out()
- phy: airoha: Fix REG_PCIE_PMA_TX_RESET config in
airoha_pcie_phy_init_csr_2l()
- phy: airoha: Fix REG_CSR_2L_JCPLL_SDM_HREN config in
airoha_pcie_phy_init_ssc_jcpll()
- phy: airoha: Fix REG_CSR_2L_RX{0,1}_REV0 definitions
- vdpa/mlx5: Fix suboptimal range on iotlb iteration
- vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
- vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()
- selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
- gpio: zevio: Add missed label initialisation
- vfio/pci: Properly hide first-in-list PCIe extended capability
- fs_parser: update mount_api doc to match function signature
- LoongArch: Fix build failure with GCC 15 (-std=gnu23)
- LoongArch: BPF: Sign-extend return values
- power: supply: core: Remove might_sleep() from power_supply_put()
- power: supply: bq27xxx: Fix registers of bq27426
- power: supply: rt9471: Fix wrong WDT function regfield declaration
- power: supply: rt9471: Use IC status regfield to report real charger status
- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
- net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
- tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
- net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
configuration
- net: microchip: vcap: Add typegroup table terminators in kunit tests
- netlink: fix false positive warning in extack during dumps
- exfat: fix file being changed by unaligned direct write
- s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
- net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
- net: mdio-ipq4019: add missing error check
- marvell: pxa168_eth: fix call balance of pep->clk handling routines
- net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
- octeontx2-af: RPM: Fix mismatch in lmac type
- octeontx2-af: RPM: Fix low network performance
- octeontx2-af: RPM: fix stale RSFEC counters
- octeontx2-af: RPM: fix stale FCFEC counters
- octeontx2-af: Quiesce traffic before NIX block reset
- spi: atmel-quadspi: Fix register name in verbose logging function
- net: hsr: fix hsr_init_sk() vs network/transport headers.
- bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
- bnxt_en: Set backplane link modes correctly for ethtool
- bnxt_en: Fix receive ring space parameters when XDP is active
- bnxt_en: Refactor bnxt_ptp_init()
- bnxt_en: Unregister PTP during PCI shutdown and suspend
- Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
- Bluetooth: MGMT: Fix possible deadlocks
- llc: Improve setsockopt() handling of malformed user input
- rxrpc: Improve setsockopt() handling of malformed user input
- tcp: Fix use-after-free of nreq in reqsk_timer_handler().
- ip6mr: fix tables suspicious RCU usage
- ipmr: fix tables suspicious RCU usage
- iio: light: al3010: Fix an error handling path in al3010_probe()
- usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
- usb: yurex: make waiting on yurex_write interruptible
- USB: chaoskey: fail open after removal
- USB: chaoskey: Fix possible deadlock chaoskey_list_lock
- misc: apds990x: Fix missing pm_runtime_disable()
- devres: Fix page faults when tracing devres from unloaded modules
- usb: gadget: uvc: wake pump everytime we update the free list
- interconnect: qcom: icc-rpmh: probe defer incase of missing QoS clock
dependency
- phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe
- phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
- counter: stm32-timer-cnt: Add check for clk_enable()
- counter: ti-ecap-capture: Add check for clk_enable()
- bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian
- usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
- firmware_loader: Fix possible resource leak in fw_log_firmware_info()
- ALSA: hda/realtek: Update ALC256 depop procedure
- drm/radeon: add helper rdev_to_drm(rdev)
- drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
- drm/radeon: Fix spurious unplug event on radeon HDMI
- drm/amd/display: Fix null check for pipe_ctx->plane_state in
dcn20_program_pipe
- drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
- ASoC: imx-audmix: Add NULL check in imx_audmix_probe
- drm/xe/ufence: Wake up waiters after setting ufence->signalled
- apparmor: fix 'Do simple duplicate message elimination'
- ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()
- ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
- ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
- s390/pci: Fix potential double remove of hotplug slot
- net_sched: sch_fq: don't follow the fast path if Tx is behind now
- xen: Fix the issue of resource not being properly released in
xenbus_dev_probe()
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
devices
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources
- usb: ehci-spear: fix call balance of sehci clk handling routines
- usb: typec: ucsi: glink: fix off-by-one in connector_status
- dm-cache: fix warnings about duplicate slab caches
- dm-bufio: fix warnings about duplicate slab caches
- ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
- soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
- irqdomain: Always associate interrupts for legacy domains
- ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
- ext4: fix FS_IOC_GETFSMAP handling
- jfs: xattr: check invalid xattr size more strictly
- ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5
21MES00B00
- ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
- ASoC: da7213: Populate max_register to regmap_config
- perf/x86/intel/pt: Fix buffer full but size is 0 case
- crypto: x86/aegis128 - access 32-bit arguments as 32-bit
- KVM: x86: switch hugepage recovery thread to vhost_task
- KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
- powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
- KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
- KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
- KVM: arm64: Don't retire aborted MMIO instruction
- KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
- KVM: arm64: Get rid of userspace_irqchip_in_use
- KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
- KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
- Compiler Attributes: disable __counted_by for clang < 19.1.3
- PCI: Fix use-after-free of slot->bus on hot remove
- LoongArch: Explicitly specify code model in Makefile
- clk: clk-loongson2: Fix memory corruption bug in struct
loongson2_clk_provider
- clk: clk-loongson2: Fix potential buffer overflow in flexible-array member
access
- fsnotify: fix sending inotify event with unexpected filename
- comedi: Flush partial mappings in error case
- apparmor: test: Fix memory leak for aa_unpack_strdup()
- iio: dac: adi-axi-dac: fix wrong register bitfield
- tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
- locking/lockdep: Avoid creating new name string literals in
lockdep_set_subclass()
- tools/nolibc: s390: include std.h
- pinctrl: qcom: spmi: fix debugfs drive strength
- dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with
fallbacks
- dt-bindings: iio: dac: ad3552r: fix maximum spi speed
- exfat: fix uninit-value in __exfat_get_dentry_set
- exfat: fix out-of-bounds access of directory entries
- xhci: Fix control transfer error on Etron xHCI host
- xhci: Combine two if statements for Etron xHCI host
- xhci: Don't perform Soft Retry for Etron xHCI host
- xhci: Don't issue Reset Device command to Etron xHCI host
- Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
- usb: xhci: Limit Stop Endpoint retries
- usb: xhci: Fix TD invalidation under pending Set TR Dequeue
- usb: xhci: Avoid queuing redundant Stop Endpoint commands
- ARM: dts: omap36xx: declare 1GHz OPP as turbo again
- wifi: ath12k: fix warning when unbinding
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of
failures
- wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan
- wifi: ath12k: fix crash when unbinding
- wifi: brcmfmac: release 'root' node in all execution paths
- Revert "fs: don't block i_writecount during exec"
- Revert "f2fs: remove unreachable lazytime mount option parsing"
- Revert "usb: gadget: composite: fix OS descriptors w_value logic"
- serial: sh-sci: Clean sci_ports[0] after at earlycon exit
- Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
- io_uring: fix corner case forgetting to vunmap
- io_uring: check for overflows in io_pin_pages
- blk-settings: round down io_opt to physical_block_size
- gpio: exar: set value when external pull-up or pull-down is present
- spi: Fix acpi deferred irq probe
- mtd: spi-nor: core: replace dummy buswidth from addr to data
- cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
- cifs: support mounting with alternate password to allow password rotation
- parisc/ftrace: Fix function graph tracing disablement
- RISC-V: Scalar unaligned access emulated on hotplug CPUs
- RISC-V: Check scalar unaligned access on all CPUs
- ksmbd: fix use-after-free in SMB request handling
- smb: client: fix NULL ptr deref in crypto_aead_setkey()
- platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
- irqchip/irq-mvebu-sei: Move misplaced select() callback to SEI CP domain
- x86/CPU/AMD: Terminate the erratum_1386_microcode array
- ubi: wl: Put source PEB into correct list if trying locking LEB failed
- um: ubd: Do not use drvdata in release
- um: net: Do not use drvdata in release
- dt-bindings: serial: rs485: Fix rs485-rts-delay property
- serial: 8250_fintek: Add support for F81216E
- serial: 8250: omap: Move pm_runtime_get_sync
- serial: amba-pl011: Fix RX stall when DMA is used
- serial: amba-pl011: fix build regression
- mtd: ubi: fix unreleased fwnode_handle in find_volume_fwnode()
- block: Prevent potential deadlock in blk_revalidate_disk_zones()
- um: vector: Do not use drvdata in release
- sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
- iio: gts: Fix uninitialized symbol 'ret'
- ublk: fix ublk_ch_mmap() for 64K page size
- arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
- block: fix missing dispatching request when queue is started or unquiesced
- block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
- block: fix ordering between checking BLK_MQ_S_STOPPED request adding
- blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
- gve: Flow steering trigger reset only for timeout error
- HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
- i40e: Fix handling changed priv flags
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- media: intel/ipu6: do not handle interrupts when device is disabled
- arm64: dts: mediatek: mt8186-corsola-voltorb: Merge speaker codec nodes
- netdev-genl: Hold rcu_read_lock in napi_get
- soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
- media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
- ALSA: rawmidi: Fix kvfree() call in spinlock
- ALSA: ump: Fix evaluation of MIDI 1.0 FB info
- ALSA: pcm: Add sanity NULL check for the default mmap fault handler
- ALSA: hda/realtek: Update ALC225 depop procedure
- ALSA: hda/realtek: Set PCBeep to default value for ALC274
- ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
- ALSA: hda/realtek: Apply quirk for Medion E15433
- smb3: request handle caching when caching directories
- smb: client: handle max length for SMB symlinks
- smb: Don't leak cfid when reconnect races with open_cached_dir
- smb: prevent use-after-free due to open_cached_dir error paths
- smb: During unmount, ensure all cached dir instances drop their dentry
- usb: misc: ljca: set small runtime autosuspend delay
- usb: misc: ljca: move usb_autopm_put_interface() after wait for response
- usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
- usb: musb: Fix hardware lockup on first Rx endpoint request
- usb: dwc3: gadget: Fix checking for number of TRBs left
- usb: dwc3: gadget: Fix looping of queued SG entries
- staging: vchiq_arm: Fix missing refcount decrement in error path for fw_node
- counter: stm32-timer-cnt: fix device_node handling in probe_encoder()
- ublk: fix error code for unsupported command
- lib: string_helpers: silence snprintf() output truncation warning
- f2fs: fix to do sanity check on node blkaddr in truncate_node()
- ipc: fix memleak if msg_init_ns failed in create_ipc_ns
- Input: cs40l50 - fix wrong usage of INIT_WORK()
- NFSD: Prevent a potential integer overflow
- SUNRPC: make sure cache entry active before cache_show
- um: Fix potential integer overflow during physmem setup
- um: Fix the return value of elf_core_copy_task_fpregs
- kfifo: don't include dma-mapping.h in kfifo.h
- um: ubd: Initialize ubd's disk pointer in ubd_add
- um: Always dump trace for specified task in show_stack
- NFSv4.0: Fix a use-after-free problem in the asynchronous open()
- rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
- rtc: abx80x: Fix WDT bit position of the status register
- rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
- ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
- ubifs: Correct the total block count by deducting journal reservation
- ubi: fastmap: Fix duplicate slab cache names while attaching
- ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
- jffs2: fix use of uninitialized variable
- rtc: rzn1: fix BCD to rtc_time conversion errors
- Revert "nfs: don't reuse partially completed requests in
nfs_lock_and_join_requests"
- nvme-multipath: avoid hang on inaccessible namespaces
- nvme/multipath: Fix RCU list traversal to use SRCU primitive
- blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs
- block: model freeze & enter queue as lock for supporting lockdep
- block: fix uaf for flush rq while iterating tags
- block: return unsigned int from bdev_io_min
- nvme-fabrics: fix kernel crash while shutting down controller
- 9p/xen: fix init sequence
- 9p/xen: fix release of IRQ
- perf/arm-smmuv3: Fix lockdep assert in ->event_init()
- perf/arm-cmn: Ensure port and device id bits are set properly
- smb: client: disable directory caching when dir_cache_timeout is zero
- x86/Documentation: Update algo in init_size description of boot protocol
- cifs: Fix parsing native symlinks relative to the export
- cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE
session
- rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
- Rename .data.unlikely to .data..unlikely
- Rename .data.once to .data..once to fix resetting WARN*_ONCE
- kbuild: deb-pkg: Don't fail if modules.order is missing
- smb: Initialize cfid->tcon before performing network ops
- block: Don't allow an atomic write be truncated in blkdev_write_iter()
- modpost: remove incorrect code in do_eisa_entry()
- cifs: during remount, make sure passwords are in sync
- cifs: unlock on error in smb3_reconfigure()
- nfs: ignore SB_RDONLY when mounting nfs
- sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
- SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
- nfs/blocklayout: Don't attempt unregister for invalid block device
- nfs/blocklayout: Limit repeat device registration on failure
- block, bfq: fix bfqq uaf in bfq_limit_depth()
- brd: decrease the number of allocated pages which discarded
- sh: intc: Fix use-after-free bug in register_intc_controller()
- tools/power turbostat: Fix trailing '\n' parsing
- tools/power turbostat: Fix child's argument forwarding
- block: always verify unfreeze lock on the owner task
- block: don't verify IO lock for freeze/unfreeze in elevator_init_mq()
- Linux 6.11.11
* Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
CVE-2024-53141
- netfilter: ipset: add missing range check in bitmap_ip_uadt
* Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
CVE-2024-50010
- Revert "exec: don't WARN for racy path_noexec check"
* Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
CVE-2024-53143
- fsnotify: Fix ordering of iput() and watched_objects decrement
* Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
CVE-2024-53142
- initramfs: avoid filename buffer overrun
* Oracular update: v6.11.10 upstream stable release (LP: #2091650)
- net: vertexcom: mse102x: Fix tx_bytes calculation
- net/mlx5: Fix msix vectors to respect platform limit
- net/mlx5e: clear xdp features on non-uplink representors
- net/mlx5e: Disable loopback self-test on multi-PF netdev
- drm/i915/gsc: ARL-H and ARL-U need a newer GSC FW.
- drivers: perf: Fix wrong put_cpu() placement
- Bluetooth: hci_core: Fix calling mgmt_device_connected
- Bluetooth: btintel: Direct exception event to bluetooth stack
- net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
hnodes.
- net: phylink: ensure PHY momentary link-fails are handled
- samples: pktgen: correct dev to DEV
- net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
- net: Make copy_safe_from_sockptr() match documentation
- stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
- net: ti: icssg-prueth: Fix 1 PPS sync
- bonding: add ns target multicast address to slave device
- ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
- tools/mm: fix compile error
- drm/amd/display: Run idle optimizations at end of vblank handler
- drm/amd/display: Change some variable name of psr
- drm/amd/display: Fix Panel Replay not update screen correctly
- x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
- x86/stackprotector: Work around strict Clang TLS symbol requirements
- crash, powerpc: default to CRASH_DUMP=n on PPC_BOOK3S_32
- [Config] enable ARCH_DEFAULT_CRASH_DUMP
- mm: revert "mm: shmem: fix data-race in shmem_getattr()"
- vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
- evm: stop avoidably reading i_writecount in evm_file_release
- KVM: selftests: Disable strict aliasing
- KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
- KVM: x86: Unconditionally set irr_pending when updating APICv state
- tpm: Disable TPM on tpm2_create_primary() failure
- ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
- ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318
- mptcp: update local address flags when setting it
- mptcp: hold pm lock when deleting entry
- mptcp: pm: use _rcu variant under rcu_read_lock
- ocfs2: fix UBSAN warning in ocfs2_verify_volume()
- LoongArch: Fix early_numa_add_cpu() usage for FDT systems
- LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
- LoongArch: Add WriteCombine shadow mapping in KASAN
- LoongArch: Fix AP booting issue in VM mode
- LoongArch: Make KASAN work with 5-level page-tables
- selftests: hugetlb_dio: fixup check for initial conditions to skip in the
start
- btrfs: fix incorrect comparison for delayed refs
- mailbox: qcom-cpucp: Mark the irq with IRQF_NO_SUSPEND flag
- firmware: arm_scmi: Skip opp duplicates
- firmware: arm_scmi: Report duplicate opps as firmware bugs
- mmc: sunxi-mmc: Fix A100 compatible description
- drm/bridge: tc358768: Fix DSI command tx
- drm/xe: handle flat ccs during hibernation on igpu
- pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
- pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
- nouveau: fw: sync dma after setup is called.
- nouveau: handle EBUSY and EAGAIN for GSP aux errors.
- nouveau/dp: handle retries for AUX CH transfers with GSP.
- drm/amd: Fix initialization mistake for NBIO 7.7.0
- drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
- drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
- drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
- drm/amdgpu: enable GTT fallback handling for dGPUs only
- drm/amdgpu/mes12: correct kiq unmap latency
- drm/amd/display: Require minimum VBlank size for stutter optimization
- drm/amd/display: Fix failure to read vram info due to static BP_RESULT
- mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
- drm/xe: Restore system memory GGTT mappings
- drm/xe: improve hibernation on igpu
- lib/buildid: Fix build ID parsing logic
- net: sched: u32: Add test case for systematic hnode IDR leaks
- media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
- Linux 6.11.10
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53133
- drm/amd/display: Handle dml allocation failure to avoid crash
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53108
- drm/amd/display: Adjust VSDB parser for replay feature
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53134
- pmdomain: imx93-blk-ctrl: correct remove path
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53132
- drm/xe/oa: Fix "Missing outer runtime PM protection" warning
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53127
- Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53130
- nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53105
- mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53109
- nommu: pass NULL argument to vma_iter_prealloc()
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53131
- nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53135
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
CONFIG_BROKEN
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53106
- ima: fix buffer overrun in ima_eventdigest_init_common
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53110
- vp_vdpa: fix id_table array not null terminated error
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53126
- vdpa: solidrun: Fix UB bug with devres
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53111
- mm/mremap: fix address wraparound in move_page_tables()
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53107
- fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53128
- sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53112
- ocfs2: uncache inode which has failed entering the group
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53113
- mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53114
- x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53137
- ARM: fix cacheflush with PAN
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53115
- drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53116
- drm/panthor: Fix handling of partial GPU mapping of BOs
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53117
- virtio/vsock: Improve MSG_ZEROCOPY error handling
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53118
- vsock: Fix sk_error_queue memory leak
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53119
- virtio/vsock: Fix accept_queue memory leak
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53120
- net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53138
- net/mlx5e: kTLS, Fix incorrect page refcounting
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53121
- net/mlx5: fs, lock FTE when checking if active
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53122
- mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53123
- mptcp: error out earlier on disconnect
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53124
- net: fix data-races around sk->sk_forward_alloc
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53129
- drm/rockchip: vop: Fix a dereferenced before check warning
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53139
- sctp: fix possible UAF in sctp_v6_available()
* Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
CVE-2024-53140
- netlink: terminate outstanding dump on socket close
* Oracular update: v6.11.9 upstream stable release (LP: #2091649)
- nvme/host: Fix RCU list traversal to use SRCU primitive
- 9p: v9fs_fid_find: also lookup by inode if not found dentry
- 9p: Avoid creating multiple slab caches with the same name
- selftests/bpf: Verify that sync_linked_regs preserves subreg_def
- nvmet-passthru: clear EUID/NGUID/UUID while using loop target
- irqchip/ocelot: Fix trigger register address
- pinctrl: aw9523: add missing mutex_destroy
- pinctrl: intel: platform: Add Panther Lake to the list of supported
- block: Fix elevator_get_default() checking for NULL q->tag_set
- HID: multitouch: Add support for B2402FVA track point
- HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
- iommu/arm-smmu: Clarify MMU-500 CPRE workaround
- nvme: disable CC.CRIME (NVME_CC_CRIME)
- bpf: use kvzmalloc to allocate BPF verifier environment
- crypto: api - Fix liveliness check in crypto_alg_tested
- crypto: marvell/cesa - Disable hash algorithms
- s390/ap: Fix CCA crypto card behavior within protected execution environment
- sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
- drm/vmwgfx: Limit display layout ioctl array size to
VMWGFX_NUM_DISPLAY_UNITS
- selftests/bpf: Assert link info uprobe_multi count & path_size if unset
- ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
- drm/amdkfd: Accounting pdd vram_usage for svm
- powerpc/powernv: Free name on error in opal_event_init()
- net: phy: mdio-bcm-unimac: Add BCM6846 support
- drm/xe/query: Increase timestamp width
- nvme-loop: flush off pending I/O while shutting down loop controller
- samples/landlock: Fix port parsing in sandboxer
- vDPA/ifcvf: Fix pci_read_config_byte() return code handling
- bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
- ASoC: Intel: avs: Update stream status in a separate thread
- ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
- ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
- ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
- ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops
- netfs: Downgrade i_rwsem for a buffered write
- HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
- HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
- HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
- ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7 regs
- RISCV: KVM: use raw_spinlock for critical section in imsic
- ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
- LoongArch: Use "Exception return address" to comment ERA
- ASoC: fsl_micfil: Add sample rate constraint
- net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
- drm/xe: Enlarge the invalidation timeout from 150 to 500
- drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
- drm/xe: Handle unreliable MMIO reads during forcewake
- drm/xe: Don't restart parallel queues multiple times on GT reset
- mm: krealloc: Fix MTE false alarm in __do_krealloc
- 9p: fix slab cache name creation for real
- Linux 6.11.9
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53098
- drm/xe/ufence: Prefetch ufence addr to catch bogus address
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53099
- bpf: Check validity of link->type in bpf_link_show_fdinfo()
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53089
- LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53090
- afs: Fix lock recursion
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53101
- fs: Fix uninitialized value issue in from_kuid and from_kgid
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53091
- bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53092
- virtio_pci: Fix admin vq cleanup by using correct info pointer
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53102
- nvme: make keep-alive synchronous operation
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53093
- nvme-multipath: defer partition scanning
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53094
- RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53100
- nvme: tcp: avoid race between queue_lock lock and destroy
* Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
CVE-2024-53095
- smb: client: Fix use-after-free of network namespace.
* Oracular update: v6.11.8 upstream stable release (LP: #2091645)
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
- arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
excavator
- arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
- arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
- arm64: dts: rockchip: Designate Turing RK1's system power controller
- EDAC/qcom: Make irq configuration optional
- arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
- arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
- arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
- arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
- arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
- arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
- arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
- arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
- arm64: dts: rockchip: Remove undocumented supports-emmc property
- arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
- arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
- arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
- arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
- arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
- arm64: dts: imx8mp: correct sdhc ipg clk
- arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
- firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
- arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
- ARM: dts: rockchip: fix rk3036 acodec node
- ARM: dts: rockchip: drop grf reference from rk3036 hdmi
- ARM: dts: rockchip: Fix the spi controller on rk3036
- ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
- arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
- sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
- NFSv3: only use NFS timeout for MOUNT when protocols are compatible
- NFS: Fix attribute delegation behaviour on exclusive create
- NFS: Further fixes to attribute delegation a/mtime changes
- nfs: avoid i_lock contention in nfs_clear_invalid_mapping
- net: enetc: set MAC address to the VF net_device
- net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
- dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
- can: c_can: fix {rx,tx}_errors statistics
- ice: change q_index variable type to s16 to store -1 value
- e1000e: Remove Meteor Lake SMBUS workarounds
- net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
- net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
- netfilter: nf_tables: wait for rcu grace period on net_device removal
- virtio_net: Support dynamic rss indirection table size
- virtio_net: Sync rss config to device when virtnet_probe
- virtio_net: Update rss when set queue
- net: arc: rockchip: fix emac mdio node support
- drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
- Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
- media: stb0899_algo: initialize cfr before using it
- media: dvb_frontend: don't play tricks with underflow values
- media: adv7604: prevent underflow condition when reporting colorspace
- scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
- ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
- tools/lib/thermal: Fix sampling handler context ptr
- thermal/of: support thermal zones w/o trips subnode
- ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
- media: pulse8-cec: fix data timestamp at pulse8_setup()
- media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
- can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
- can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
- can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
switching CAN modes
- can: {cc770,sja1000}_isa: allow building on x86_64
- [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA
- drm/xe: Set mask bits for CCS_MODE register
- pwm: imx-tpm: Use correct MODULO value for EPWM mode
- rpmsg: glink: Handle rejected intent request better
- drm/amd/pm: always pick the pptable from IFWI
- drm/amd/display: Fix brightness level not retained over reboot
- drm/imagination: Add a per-file PVR context list
- drm/amdgpu: Adjust debugfs eviction and IB access permissions
- drm/amdgpu: Adjust debugfs register access permissions
- drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
- drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
- thermal/drivers/qcom/lmh: Remove false lockdep backtrace
- dm cache: correct the number of origin blocks to match the target length
- dm cache: optimize dirty bit checking with find_next_bit when resizing
- dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
overflow
- mptcp: no admin perm to list endpoints
- ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
- tracing: Fix tracefs mount options
- net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
- mptcp: use sock_kfree_s instead of kfree
- arm64: Kconfig: Make SME depend on BROKEN for now
- [Config] updateconfigs for ARM64_SME
- arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
- KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
spurious interrupts
- btrfs: fix the length of reserved qgroup to free
- btrfs: fix per-subvolume RO/RW flags with new mount API
- platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
- platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
- platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
- i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
- clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
- clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
- fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
- objpool: fix to make percpu slot allocation more robust
- mm/damon/core: handle zero {aggregation,ops_update} intervals
- mm/damon/core: handle zero schemes apply interval
- mm/mlock: set the correct prev on failure
- thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
- usb: dwc3: fix fault at system suspend if device was already runtime
suspended
- USB: serial: qcserial: add support for Sierra Wireless EM86xx
- USB: serial: option: add Fibocom FG132 0x0112 composition
- USB: serial: option: add Quectel RG650V
- clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
- thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
- staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
- staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
- irqchip/gic-v3: Force propagation of the active state with a read-back
- ucounts: fix counter leak in inc_rlimit_get_ucounts()
- selftests: hugetlb_dio: check for initial conditions to skip in the start
- firmware: qcom: scm: Refactor code to support multiple dload mode
- [Config] updateconfigs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT
- firmware: qcom: scm: suppress download mode error
- block: rework bio splitting
- block: fix queue limits checks in blk_rq_map_user_bvec for real
- drm/xe: Move LNL scheduling WA to xe_device.h
- drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
- drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
- ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
- xtensa: Emulate one-byte cmpxchg
- Linux 6.11.8
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50265
- ocfs2: remove entry once instead of null-ptr-dereference in
ocfs2_xa_remove()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50266
- clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50267
- USB: serial: io_edgeport: fix use after free in debug printk
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50268
- usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53083
- usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50269
- usb: musb: sunxi: Fix accessing an released usb phy
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53079
- mm/thp: fix deferred split unqueue naming and locking
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50270
- mm/damon/core: avoid overflow in damon_feed_loop_next_input()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50271
- signal: restore the override_rlimit logic
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50272
- filemap: Fix bounds checking in filemap_read()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53104
- media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
uvc_parse_format
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50273
- btrfs: reinitialize delayed ref list after deleting it from the list
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53064
- idpf: fix idpf_vc_core_init error path
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50274
- idpf: avoid vport access in idpf_get_link_ksettings
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53065
- mm/slab: fix warning caused by duplicate kmem_cache creation in
kmem_buckets_create
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50275
- arm64/sve: Discard stale CPU state when handling SVE traps
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50276
- net: vertexcom: mse102x: Fix possible double free of TX skb
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53066
- nfs: Fix KMSAN warning in decode_getfattr_attrs()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53067
- scsi: ufs: core: Start the RTC update work later
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50277
- dm: fix a crash if blk_alloc_disk fails
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50278
- dm cache: fix potential out-of-bounds access on the first resume
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50279
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50280
- dm cache: fix flushing uninitialized delayed_work on cache_ctr error
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50281
- KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50282
- drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53071
- drm/panthor: Be stricter about IO mapping flags
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53080
- drm/panthor: Lock XArray when getting entries for the VM
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53084
- drm/imagination: Break an object reference loop
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53085
- tpm: Lock TPM chip in tpm_pm_suspend() first
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53086
- drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53087
- drm/xe: Fix possible exec queue leak in exec IOCTL
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50283
- ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50284
- ksmbd: Fix the missing xa_store error check
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50285
- ksmbd: check outstanding simultaneous SMB operations
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50286
- ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50287
- media: v4l2-tpg: prevent the risk of a division by zero
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50288
- media: vivid: fix buffer overwrite when using > 32 buffers
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50289
- media: av7110: fix a spectre vulnerability
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50290
- media: cx24116: prevent overflows on SNR calculus
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53061
- media: s5p-jpeg: prevent buffer overflows
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53081
- media: ar0521: don't overflow when checking PLL values
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53062
- media: mgb4: protect driver against spectre
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50291
- media: dvb-core: add missing buffer index check
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50292
- ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53063
- media: dvbdev: prevent the risk of out of memory access
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50293
- net/smc: do not leave a dangling sk pointer in __smc_create()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50294
- rxrpc: Fix missing locking causing hanging calls
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50295
- net: arc: fix the device for dma_map_single/dma_unmap_single
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53082
- virtio_net: Add hash_key_length check
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50296
- net: hns3: fix kernel crash when uninstalling driver
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53088
- i40e: fix race condition by adding filter's intermediate sync state
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50297
- net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50298
- net: enetc: allocate vf_state during PF probes
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50299
- sctp: properly validate chunk size in sctp_sf_ootb()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50300
- regulator: rtq2208: Fix uninitialized use of regulator_config
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50301
- security/keys: fix slab-out-of-bounds in key_task_permission
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53072
- platform/x86/amd/pmc: Detect when STB is not available
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-50302
- HID: core: zero-initialize the report buffer
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53068
- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
* Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
CVE-2024-53069
- firmware: qcom: scm: fix a NULL-pointer dereference
* Oracular update: v6.11.7 upstream stable release (LP: #2091629)
- drm/amdgpu: fix random data corruption for sdma 7
- cgroup: Fix potential overflow issue when checking max_depth
- spi: geni-qcom: Fix boot warning related to pm_runtime and devres
- perf trace: Fix non-listed archs in the syscalltbl routines
- perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT
- scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy
length
- wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
- mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
- wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
- wifi: ath11k: Fix invalid ring usage in full monitor mode
- wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts
- wifi: brcm80211: BRCM_TRACING should depend on TRACING
- RDMA/cxgb4: Dump vendor specific QP details
- RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
- RDMA/bnxt_re: Fix the usage of control path spin locks
- RDMA/bnxt_re: synchronize the qp-handle table array
- wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd
- wifi: iwlwifi: mvm: don't add default link in fw restart flow
- Revert "wifi: iwlwifi: remove retry loops in start"
- ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
- net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
register values
- dpll: add Embedded SYNC feature for a pin
- ice: add callbacks for Embedded SYNC enablement on dpll pins
- gtp: allow -1 to be specified as file description from userspace
- bpf: Force checkpoint when jmp history is too long
- bpf: Add bpf_mem_alloc_check_size() helper
- net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
- mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
- mlxsw: pci: Sync Rx buffers for CPU
- mlxsw: pci: Sync Rx buffers for device
- net: ethernet: mtk_wed: fix path of MT7988 WO firmware
- bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
- iomap: improve shared block detection in iomap_unshare_iter
- iomap: don't bother unsharing delalloc extents
- iomap: share iomap_unshare_iter predicate code with fsdax
- fsdax: remove zeroing code from dax_unshare_iter
- iomap: turn iomap_want_unshare_iter into an inline function
- kasan: Fix Software Tag-Based KASAN with GCC
- firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
- afs: Fix missing subdir edit when renamed between parent dirs
- gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init()
call
- smb: client: fix parsing of device numbers
- smb: client: set correct device number on nfs reparse points
- drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
- drm/mediatek: Fix color format MACROs in OVL
- drm/mediatek: Fix get efuse issue for MT8188 DPTX
- drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy()
- cxl/events: Fix Trace DRAM Event Record
- PCI: Fix pci_enable_acs() support for the ACS quirks
- nvme: module parameter to disable pi with offsets
- drm/panthor: Fix firmware initialization on systems with a page size > 4k
- drm/panthor: Fail job creation when the group is dead
- drm/panthor: Report group as timedout when we fail to properly suspend
- fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
- fs/ntfs3: Stale inode instead of bad
- rust: device: change the from_raw() function
- scsi: scsi_transport_fc: Allow setting rport state to current state
- cifs: Improve creating native symlinks pointing to directory
- cifs: Fix creating native symlinks pointing to current or parent directory
- ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
- powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
- thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
- thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
- net: amd: mvme147: Fix probe banner message
- NFS: remove revoked delegation from server's delegation list
- misc: sgi-gru: Don't disable preemption in GRU driver
- NFSD: Initialize struct nfsd4_copy earlier
- NFSD: Never decrement pending_async_copies on error
- ALSA: usb-audio: Add quirks for Dell WD19 dock
- wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171
- usbip: tools: Fix detach_port() invalid port error path
- usb: phy: Fix API devm_usb_put_phy() can not release the phy
- usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
- usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non
self-powered devices
- usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
- usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
- xhci: Fix Link TRB DMA in command ring stopped completion event
- xhci: Use pm_runtime_get to prevent RPM on unsupported systems
- Revert "driver core: Fix uevent_show() vs driver detach race"
- dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply
- iio: light: veml6030: fix microlux value calculation
- RISC-V: ACPI: fix early_ioremap to early_memremap
- tools/mm: -Werror fixes in page-types/slabinfo
- mm: shrinker: avoid memleak in alloc_shrinker_info
- firmware: microchip: auto-update: fix poll_complete() to not report spurious
timeout errors
- thunderbolt: Honor TMU requirements in the domain when setting TMU mode
- soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
- cxl/port: Fix CXL port initialization order when the subsystem is built-in
- mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
- mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
- block: fix sanity checks in blk_rq_map_user_bvec
- phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
- btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
- riscv: vdso: Prevent the compiler from inserting calls to memset()
- Input: edt-ft5x06 - fix regmap leak when probe fails
- ALSA: hda/realtek: Limit internal Mic boost on Dell platform
- riscv: efi: Set NX compat flag in PE/COFF header
- riscv: Use '%u' to format the output of 'cpu'
- riscv: Remove unused GENERATING_ASM_OFFSETS
- riscv: Remove duplicated GET_RM
- cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
- cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
- posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
- tpm: Return tpm2_sessions_init() when null key creation fails
- tpm: Rollback tpm2_load_null()
- drm/amdgpu/smu13: fix profile reporting
- tpm: Lazily flush the auth session
- mei: use kvmalloc for read buffer
- x86/traps: Enable UBSAN traps on x86
- x86/traps: move kmsan check after instrumentation_begin
- accel/ivpu: Fix NOC firewall interrupt handling
- ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
- ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
- nvme: re-fix error-handling for io_uring nvme-passthrough
- kasan: remove vmalloc_percpu test
- drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
- drm/xe: Fix register definition order in xe_regs.h
- drm/xe: Kill regs/xe_sriov_regs.h
- drm/xe: Add mmio read before GGTT invalidate
- drm/xe: Don't short circuit TDR on jobs not started
- btrfs: fix extent map merging not happening for adjacent extents
- btrfs: fix defrag not merging contiguous extents due to merged extent maps
- gpiolib: fix debugfs newline separators
- gpiolib: fix debugfs dangling chip separator
- vmscan,migrate: fix page count imbalance on node stats when demoting pages
- mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
- Input: fix regression when re-registering input handlers
- mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
- mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
- mm: shrink skip folio mapped by an exiting process
- mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
- riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64
- riscv: dts: starfive: disable unused csi/camss nodes
- arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM
- arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch
- arm64: dts: qcom: x1e80100: Fix up BAR spaces
- arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch
- arm64: dts: qcom: x1e80100: fix PCIe4 interconnect
- arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch
- arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch
- arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block
- arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks
- drm/xe/xe2hpg: Add Wa_15016589081
- drm/amdgpu/swsmu: fix ordering for setting workload_mask
- drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
- fs/ntfs3: Sequential field availability check in mi_enum_attr()
- drm/amdgpu: handle default profile on on devices without fullscreen 3D
- MIPS: export __cmpxchg_small()
- RISC-V: disallow gcc + rust builds
- [Config] updateconfigs after disabling rust with gcc on riscv
- rcu/kvfree: Add kvfree_rcu_barrier() API
- rcu/kvfree: Refactor kvfree_rcu_queue_batch()
- Linux 6.11.7
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50212
- lib: alloc_tag_module_unload must wait for pending kfree_rcu calls
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53046
- arm64: dts: imx8ulp: correct the flexspi compatible string
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53052
- io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50213
- drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50214
- drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50215
- nvmet-auth: assign dh_key to NULL after kfree_sensitive
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50216
- xfs: fix finding a last resort AG in xfs_filestream_pick_ag
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50217
- btrfs: fix use-after-free of block device file in
__btrfs_free_extra_devids()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53043
- mctp i2c: handle NULL header address
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50303
- resource,kexec: walk_system_ram_res_rev must retain resource flags
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50218
- ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50219
- mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50263
- fork: only invoke khugepaged, ksm hooks if no error
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50220
- fork: do not invoke uffd on fork if error occurs
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53047
- mptcp: init: protect sched with rcu_read_lock
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50221
- drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50222
- iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50223
- sched/numa: Fix the potential null pointer dereference in task_numa_work()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53053
- scsi: ufs: core: Fix another deadlock during RTC update
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53075
- riscv: Prevent a bad reference count on CPU nodes
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50224
- spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50225
- btrfs: fix error propagation of split bios
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53054
- cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50226
- cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50227
- thunderbolt: Fix KASAN reported stack out-of-bounds read in
tb_retimer_scan()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50228
- mm: shmem: fix data-race in shmem_getattr()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50229
- nilfs2: fix potential deadlock with newly created symlinks
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50230
- nilfs2: fix kernel bug due to missing clearing of checked flag
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50231
- iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53076
- iio: gts-helper: Fix memory leaks for the error path of
iio_gts_build_avail_scale_table()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50232
- iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50233
- staging: iio: frequency: ad9832: fix division by zero in
ad9832_calc_freqreg()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53055
- wifi: iwlwifi: mvm: fix 6 GHz scan construction
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50234
- wifi: iwlegacy: Clear stale interrupts before resuming device
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50235
- wifi: cfg80211: clear wdev->cqm_config pointer on free
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50236
- wifi: ath10k: Fix memory leak in management tx
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50237
- wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50238
- phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50239
- phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50240
- phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53077
- rpcrdma: Always release the rpcrdma_device's xa_array
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50242
- fs/ntfs3: Additional check in ntfs_file_release
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50243
- fs/ntfs3: Fix general protection fault in run_is_mapped_full
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50244
- fs/ntfs3: Additional check in ni_clear()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50245
- fs/ntfs3: Fix possible deadlock in mi_read
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50246
- fs/ntfs3: Add rough attr alloc_size check
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50247
- fs/ntfs3: Check if more than chunk-size bytes are written
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50248
- ntfs3: Add bounds checking to mi_enum_attr()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53078
- drm/tegra: Fix NULL vs IS_ERR() check in probe()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53056
- drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50249
- ACPI: CPPC: Make rmw_lock a raw_spin_lock
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50250
- fsdax: dax_unshare_iter needs to copy entire blocks
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50251
- netfilter: nft_payload: sanitize offset and length before calling
skb_checksum()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50252
- mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50253
- bpf: Check the validity of nr_words in bpf_iter_bits_new()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50254
- bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50255
- Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50256
- netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50257
- netfilter: Fix use-after-free in get_info()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50258
- net: fix crash when config small gso_max_size/gso_ipv4_max_size
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50262
- bpf: Fix out-of-bounds write in trie_get_next_key()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53044
- net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50259
- netdevsim: Add trailing zero to terminate the string in
nsim_nexthop_bucket_activity_write()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50304
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53042
- ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53048
- ice: fix crash on probe for DPLL enabled E810 LOM
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53058
- net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50260
- sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53045
- ASoC: dapm: fix bounds checker error in dapm_widget_list_create
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-50261
- macsec: Fix use-after-free while sending the offloading packet
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53059
- wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53074
- wifi: iwlwifi: mvm: don't leak a link on AP removal
* Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
CVE-2024-53049
- slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof
* Oracular update: v6.11.6 upstream stable release (LP: #2091386)
- bpf: Use raw_spinlock_t in ringbuf
- iio: accel: bma400: Fix uninitialized variable field_value in tap event
handling.
- reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
- bpf: sync_linked_regs() must preserve subreg_def
- bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
- irqchip/riscv-imsic: Fix output text of base address
- bpf: devmap: provide rxq after redirect
- cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
- lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
- bpf: Fix memory leak in bpf_core_apply
- RDMA/bnxt_re: Fix a possible memory leak
- RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
- RDMA/bnxt_re: Add a check for memory allocation
- x86/resctrl: Avoid overflow in MB settings in bw_validate()
- ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
- clk: rockchip: fix finding of maximum clock ID
- bpf: Check the remaining info_cnt before repeating btf fields
- bpf: fix unpopulated name_len field in perf_event link info
- selftests/bpf: fix perf_event link info name_len assertion
- riscv, bpf: Fix possible infinite tailcall when CONFIG_CFI_CLANG is enabled
- s390/pci: Handle PCI error codes other than 0x3a
- bpf: fix kfunc btf caching for modules
- iio: frequency: {admv4420,adrf6780}: format Kconfig entries
- iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
- drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
- selftests/bpf: Fix cross-compiling urandom_read
- bpf: Fix unpopulated path_size when uprobe_multi fields unset
- sched/core: Disable page allocation in task_tick_mm_cid()
- ALSA: hda/cs8409: Fix possible NULL dereference
- firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
- RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
- RDMA/irdma: Fix misspelling of "accept*"
- RDMA/srpt: Make slab cache names unique
- elevator: do not request_module if elevator exists
- elevator: Remove argument from elevator_find_get
- ipv4: give an IPv4 dev to blackhole_netdev
- net: sparx5: fix source port register when mirroring
- RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
- RDMA/bnxt_re: Fix out of bound check
- RDMA/bnxt_re: Fix incorrect dereference of srq in async event
- RDMA/bnxt_re: Return more meaningful error
- RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
- RDMA/bnxt_re: Get the toggle bits from SRQ events
- RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
- RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
- RDMA/bnxt_re: Fix the GID table length
- accel/qaic: Fix the for loop used to walk SG table
- drm/panel: himax-hx83102: Adjust power and gamma to optimize brightness
- drm/msm/dpu: make sure phys resources are properly initialized
- drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
- drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
- drm/msm/dsi: improve/fix dsc pclk calculation
- drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
- drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
- drm/msm: Allocate memory for disp snapshot with kvzalloc()
- firmware: arm_scmi: Queue in scmi layer for mailbox implementation
- net/smc: Fix memory leak when using percpu refs
- [PATCH} hwmon: (jc42) Properly detect TSE2004-compliant devices again
- net: usb: usbnet: fix race in probe failure
- net: stmmac: dwmac-tegra: Fix link bring-up sequence
- octeontx2-af: Fix potential integer overflows on integer shifts
- ring-buffer: Fix reader locking when changing the sub buffer order
- drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
- macsec: don't increment counters for an unrelated SA
- netdevsim: use cond_resched() in nsim_dev_trap_report_work()
- net: ethernet: aeroflex: fix potential memory leak in
greth_start_xmit_gbit()
- net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
- net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
- net: ethernet: rtsn: fix potential memory leak in rtsn_start_xmit()
- bpf: Fix truncation bug in coerce_reg_to_size_sx()
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- irqchip/renesas-rzg2l: Fix missing put_device
- drm/msm/dpu: Don't always set merge_3d pending flush
- drm/msm/dpu: don't always program merge_3d block
- net: bcmasp: fix potential memory leak in bcmasp_xmit()
- drm/msm/a6xx+: Insert a fence wait before SMMU table update
- tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
- net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
- genetlink: hold RCU in genlmsg_mcast()
- ravb: Remove setting of RX software timestamp
- net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
- net: dsa: vsc73xx: fix reception from VLAN-unaware bridges
- scsi: target: core: Fix null-ptr-deref in target_alloc_device()
- smb: client: fix possible double free in smb2_set_ea()
- smb: client: fix OOBs when building SMB2_IOCTL request
- usb: typec: altmode should keep reference to parent
- s390: Initialize psw mask in perf_arch_fetch_caller_regs()
- drm/xe: fix unbalanced rpm put() with fence_fini()
- drm/xe: fix unbalanced rpm put() with declare_wedged()
- drm/xe: Take job list lock in xe_sched_add_pending_job
- drm/xe: Don't free job in TDR
- drm/xe: Use bookkeep slots for external BO's in exec IOCTL
- bpf: Fix link info netfilter flags to populate defrag flag
- Bluetooth: bnep: fix wild-memory-access in proto_unregister
- vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
- net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
- net/mlx5: Check for invalid vector index on EQ creation
- net/mlx5: Fix command bitmask initialization
- net/mlx5: Unregister notifier on eswitch init failure
- net/mlx5e: Don't call cleanup on profile rollback failure
- bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
- vsock: Update rx_bytes on read_skb()
- vsock: Update msg_count on read_skb()
- bpf, vsock: Drop static vsock_bpf_prot initialization
- riscv, bpf: Make BPF_CMPXCHG fully ordered
- nvme-pci: fix race condition between reset and nvme_dev_disable()
- bpf: Fix iter/task tid filtering
- bpf: Fix incorrect delta propagation between linked registers
- bpf: Fix print_reg_state's constant scalar dump
- cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
- fgraph: Allocate ret_stack_list with proper size
- mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
- mm: shmem: move shmem_huge_global_enabled() into
shmem_allowable_huge_orders()
- mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
- mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- xhci: dbgtty: remove kfifo_out() wrapper
- xhci: dbgtty: use kfifo from tty_port struct
- xhci: dbc: honor usb transfer size boundaries.
- uprobe: avoid out-of-bounds memory access of fetching args
- drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
VLA
- ASoC: amd: yc: Add quirk for HP Dragonfly pro one
- ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
default regs values
- ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
- arm64: Force position-independent veneers
- udf: refactor udf_current_aext() to handle error
- udf: refactor udf_next_aext() to handle error
- udf: refactor inode_bmap() to handle error
- udf: fix uninit-value use in udf_get_fileshortad
- ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
- fsnotify: Avoid data race between fsnotify_recalc_mask() and
fsnotify_object_watched()
- drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
- cifs: Validate content of NFS reparse point buffer
- LoongArch: Don't crash in stack_top() for tasks without vDSO
- objpool: fix choosing allocation for percpu slots
- jfs: Fix sanity check in dbMount
- tracing/probes: Fix MAX_TRACE_ARGS limit handling
- tracing: Consider the NULL character when validating the event length
- xfrm: extract dst lookup parameters into a struct
- xfrm: respect ip protocols rules criteria when performing dst lookups
- xfrm: validate new SA's prefixlen using SA family when sel.family is unset
- netfilter: bpf: must hold reference on net namespace
- net: pse-pd: Fix out of bound for loop
- net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
- be2net: fix potential memory leak in be_xmit()
- net: plip: fix break; causing plip to never transmit
- bnxt_en: replace ptp_lock with irqsave variant
- octeon_ep: Implement helper for iterating packets in Rx queue
- octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
- net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
- bpf, arm64: Fix address emission with tag-based KASAN enabled
- fsl/fman: Save device references taken in mac_probe()
- fsl/fman: Fix refcount handling of fman-related devices
- net: wwan: fix global oob in wwan_rtnl_policy
- net: fix races in netdev_tx_sent_queue()/dev_watchdog()
- virtio_net: fix integer overflow in stats
- mlxsw: spectrum_router: fix xa_store() error checking
- net: usb: usbnet: fix name regression
- bpf: Preserve param->string when parsing mount options
- bpf: Add MEM_WRITE attribute
- bpf: Fix overloading of MEM_UNINIT's meaning
- bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
- net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
created by classifiers
- net: sched: fix use-after-free in taprio_change()
- net: sched: use RCU read-side critical section in taprio_dump()
- r8169: avoid unsolicited interrupts
- posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
- Bluetooth: hci_core: Disable works on hci_unregister_dev
- Bluetooth: SCO: Fix UAF on sco_sock_timeout
- Bluetooth: ISO: Fix UAF on iso_sock_timeout
- bpf,perf: Fix perf_event_detach_bpf_prog error handling
- bpf: fix do_misc_fixups() for bpf_get_branch_snapshot()
- net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
- net: dsa: mv88e6xxx: group cycle counter coefficients
- net: dsa: mv88e6xxx: read cycle counter period from hardware
- net: dsa: mv88e6xxx: support 4000ps cycle counter period
- bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
- ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
- ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
- ASoC: loongson: Fix component check failed on FDT systems
- ASoC: topology: Bump minimal topology ABI version
- ASoC: max98388: Fix missing increment of variable slot_found
- ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
- PCI: Hold rescan lock while adding devices during host probe
- fs: pass offset and result to backing_file end_write() callback
- fuse: update inode size after extending passthrough write
- ASoC: fsl_micfil: Add a flag to distinguish with different volume control
types
- ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
- fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
- powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
- nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
- ALSA: hda/realtek: Update default depop procedure
- smb: client: Handle kstrdup failures for passwords
- cifs: fix warning when destroy 'cifs_io_request_pool'
- PCI/pwrctl: Add WCN6855 support
- PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees
- cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
- btrfs: qgroup: set a more sane default value for subtree drop threshold
- btrfs: clear force-compress on remount when compress mount option is given
- btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
- perf/x86/rapl: Fix the energy-pkg event for AMD CPUs
- btrfs: reject ro->rw reconfiguration if there are hard ro requirements
- btrfs: zoned: fix zone unusable accounting for freed reserved extent
- btrfs: fix read corruption due to race with extent map merging
- drm/amd: Guard against bad data for ATIF ACPI method
- ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
- ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
- ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
detection issue
- nilfs2: fix kernel bug due to missing clearing of buffer delay flag
- fs: don't try and remove empty rbtree node
- xfs: don't fail repairs on metadata files with no attr fork
- openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
- KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
- KVM: arm64: Unregister redistributor for failed vCPU creation
- KVM: arm64: Fix shift-out-of-bounds bug
- KVM: arm64: Don't eagerly teardown the vgic on init error
- firewire: core: fix invalid port index for parent device
- x86/lam: Disable ADDRESS_MASKING in most cases
- [Config] updateconfigs to disable ADDRESS_MASKING
- x86/sev: Ensure that RMP table fixups are reserved
- ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
- ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
- LoongArch: Get correct cores_per_package for SMT systems
- LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
- LoongArch: Make KASAN usable for variable cpu_vabits
- xfrm: fix one more kernel-infoleak in algo dumping
- hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
- md/raid10: fix null ptr dereference in raid10_size()
- drm/bridge: Fix assignment of the of_node of the parent to aux bridge
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
- platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
addresses
- fgraph: Fix missing unlock in register_ftrace_graph()
- fgraph: Change the name of cpuhp state to "fgraph:online"
- net: phy: dp83822: Fix reset pin definitions
- nfsd: fix race between laundromat and free_stateid
- drm/amd/display: temp w/a for DP Link Layer compliance
- ata: libata: Set DID_TIME_OUT for commands that actually timed out
- ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC
- ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's
- ASoC: SOF: Intel: hda: Always clean up link DMA during stop
- ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs
- ASoC: dapm: avoid container_of() to get component
- ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
- ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
- ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
- Revert " fs/9p: mitigate inode collisions"
- Revert "fs/9p: remove redundant pointer v9ses"
- Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl"
- Revert "fs/9p: simplify iget to remove unnecessary paths"
- soundwire: intel_ace2x: Send PDI stream number during prepare
- x86: support user address masking instead of non-speculative conditional
- x86: fix whitespace in runtime-const assembler output
- x86: fix user address masking non-canonical speculation issue
- platform/x86: dell-wmi: Ignore suspend notifications
- ACPI: PRM: Clean up guid type in struct prm_handler_info
- ASoC: qcom: Select missing common Soundwire module code on SDM845
- Linux 6.11.6
* ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel
5.15.0-127.137 (LP: #2091990)
- netfilter: xtables: fix typo causing some targets not to load on IPv6
* By always inlining _compound_head(), clone() sees 3%+ performance increase
(LP: #2089327)
- mm: always inline _compound_head() with
CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
* Keyboard backlight controls do not work on Asus ROG Zephyrus GA503RM in
Oracular (LP: #2089113)
- hid-asus: use hid for brightness control on keyboard
* Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+
(LP: #2086587)
- SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx
* Add list of source files to linux-buildinfo (LP: #2086606)
- [Packaging] Sort build dependencies alphabetically
- [Packaging] Add list of used source files to buildinfo package
* asus: Fix thermal profile initialization on Lunar Lake (LP: #2085950)
- platform/x86: asus-wmi: Fix thermal profile initialization
* drm/xe: Fix LNL getting wedged after idling (LP: #2085944)
- drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
* UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
- ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
* Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983)
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
* Oracular update: v6.11.5 upstream stable release (LP: #2089152)
- ALSA: scarlett2: Add error check after retrieving PEQ filter values
- ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
- net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
- net: enetc: block concurrent XDP transmissions during ring reconfiguration
- net: enetc: disable Tx BD rings after they are empty
- net: enetc: disable NAPI after all rings are disabled
- net: enetc: add missing static descriptor and inline keyword
- udp: Compute L4 checksum as usual when not segmenting the skb
- arm64: dts: marvell: cn9130-sr-som: fix cp0 mdio pin numbers
- arm64: probes: Fix simulate_ldr*_literal()
- net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
link PHY
- selftests: mptcp: join: test for prohibited MPC to port-based endp
- fat: fix uninitialized variable
- mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace
point
- net: fec: Move `fec_ptp_read()` to the top of the file
- net: fec: Remove duplicated code
- mptcp: prevent MPC handshake on port-based signal endpoints
- s390/sclp: Deactivate sclp after all its users
- s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
- KVM: s390: gaccess: Check if guest address is in memslot
- KVM: s390: Change virtual to physical address access in diag 0x258 handler
- x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
- x86/cpufeatures: Add a IBPB_NO_RET BUG flag
- x86/entry: Have entry_ibpb() invalidate return predictions
- x86/bugs: Skip RSB fill at VMEXIT
- x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
- fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks
- Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
- io_uring/sqpoll: close race on waiting for sqring entries
- selftest: hid: add the missing tests directory
- Input: xpad - add support for MSI Claw A1M
- scsi: mpi3mr: Validate SAS port assignments
- scsi: ufs: core: Fix the issue of ICU failure
- scsi: ufs: core: Requeue aborted request
- drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
- drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible
mode
- drm/xe/xe_sync: initialise ufence.signalled
- drm/xe/ufence: ufence can be signaled right after wait_woken
- drm/vmwgfx: Cleanup kms setup without 3d
- drm/vmwgfx: Handle surface check failure correctly
- drm/amdgpu/mes: fix issue of writing to the same log buffer from 2 MES pipes
- drm/amdgpu/smu13: always apply the powersave optimization
- drm/amdgpu/swsmu: Only force workload setup on init
- drm/amdgpu: prevent BO_HANDLES error from being overwritten
- iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
- iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
- iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
- iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: hid-sensors: Fix an error handling path in
_hid_sensor_set_report_latency()
- iio: light: veml6030: fix ALS sensor resolution
- iio: light: opt3001: add missing full-scale range value
- iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
- iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
- iio: chemical: ens160: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: magnetometer: af8133j: add missing select IIO_(TRIGGERED_)BUFFER in
Kconfig
- iio: resolver: ad2s1210 add missing select REGMAP in Kconfig
- iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
- iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig
- iio: adc: ad7944: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
- Bluetooth: Remove debugfs directory on module init failure
- Bluetooth: btusb: Fix not being able to reconnect after suspend
- Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
- xhci: Fix incorrect stream context type macro
- xhci: Mitigate failed set dequeue pointer commands
- USB: serial: option: add support for Quectel EG916Q-GL
- USB: serial: option: add Telit FN920C04 MBIM compositions
- usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
- usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
- usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
- usb: dwc3: core: Fix system suspend on TI AM62 platforms
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM
device
- misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
- serial: imx: Update mctrl old_status on RTSD interrupt
- x86/resctrl: Annotate get_mem_config() functions as __init
- x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
- x86/entry_32: Do not clobber user EFLAGS.ZF
- irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
- irqchip/sifive-plic: Return error code on failure
- serial: qcom-geni: fix polled console initialisation
- serial: qcom-geni: revert broken hibernation support
- serial: qcom-geni: fix shutdown race
- serial: qcom-geni: fix dma rx cancellation
- serial: qcom-geni: fix receiver enable
- mm: vmscan.c: fix OOM on swap stress test
- ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
1000 G2
- Linux 6.11.5
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50192
- irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50069
- pinctrl: apple: check devm_kasprintf() returned value
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50070
- pinctrl: stm32: check devm_kasprintf() returned value
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50196
- pinctrl: ocelot: fix system hang on level based interrupts
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50197
- pinctrl: intel: platform: fix error path in device_for_each_child_node()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50071
- pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50072
- x86/bugs: Use code segment selector for VERW operand
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50073
- tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50193
- x86/entry_32: Clear CPU buffers after register restore in NMI return
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50074
- parport: Proper fix for array out-of-bounds access
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50100
- USB: gadget: dummy-hcd: Fix "task hung" problem
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50075
- xhci: tegra: fix checked USB2 port number
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50076
- vt: prevent kernel-infoleak in con_font_get()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50077
- Bluetooth: ISO: Fix multiple init when debugfs is disabled
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50078
- Bluetooth: Call iso_exit() on module unload
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50198
- iio: light: veml6030: fix IIO device retrieval from embedded device
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50201
- drm/radeon: Fix encoder->possible_clones
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50098
- scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50079
- io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50080
- ublk: don't allow user copy for unprivileged device
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50081
- blk-mq: setup queue ->tag_set before initializing hctx
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50082
- blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50101
- iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50083
- tcp: fix mptcp DSS corruption due to large pmtu xmit
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50068
- mm/damon/tests/sysfs-kunit.h: fix memory leak in
damon_sysfs_test_add_targets()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50199
- mm/swapfile: skip HugeTLB pages for unuse_vma
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50066
- mm/mremap: fix move_normal_pmd/retract_page_tables race
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50202
- nilfs2: propagate directory read errors from nilfs_find_entry()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50200
- maple_tree: correct tree corruption on spanning store
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50084
- net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50194
- arm64: probes: Fix uprobes for big-endian kernels
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50099
- arm64: probes: Remove broken LDR (literal) uprobe support
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50195
- posix-clock: Fix missing timespec64 check in pc_clock_settime()
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50085
- mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50086
- ksmbd: fix user-after-free from session log off
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50087
- btrfs: fix uninitialized pointer free on read_alloc_one_name() error
* Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
CVE-2024-50088
- btrfs: fix uninitialized pointer free in add_inode_ref()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068)
- net: fec: don't save PTP state if PTP is unsupported
- fs/ntfs3: Do not call file_modified if collapse range failed
- fs/ntfs3: Optimize large writes into sparse file
- fs/ntfs3: Fix sparse warning for bigendian
- fs/ntfs3: Fix sparse warning in ni_fiemap
- fs/ntfs3: Refactor enum_rstbl to suppress static checker
- vdpa/octeon_ep: Fix format specifier for pointers in debug messages
- virtio_console: fix misc probe bugs
- perf vdso: Missed put on 32-bit dsos
- perf build: Fix static compilation error when libdw is not installed
- perf build: Fix build feature-dwarf_getlocations fail for old libdw
- zram: don't free statically defined names
- bpf: Call the missed btf_record_free() when map creation fails
- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
- bpf: Check percpu map value size first
- s390/facility: Disable compile time optimization for decompressor code
- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
- bpf, x64: Fix a jit convergence issue
- ext4: nested locking for xattr inode
- s390/cpum_sf: Remove WARN_ON_ONCE statements
- s390/traps: Handle early warnings gracefully
- ktest.pl: Avoid false positives with grub2 skip regex
- soundwire: intel_bus_common: enable interrupts before exiting reset
- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
- clk: bcm: bcm53573: fix OF node leak in init
- PCI: Add ACS quirk for Qualcomm SA8775P
- i2c: i801: Use a different adapter-name for IDF adapters
- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
- mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
- riscv: Omit optimized string routines when using KASAN
- riscv: avoid Imbalance in RAS
- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
- PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
- PCI: endpoint: Assign PCI domain number for endpoint controllers
- soundwire: cadence: re-check Peripheral status with delayed_work
- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
unknown
- media: videobuf2-core: clear memory related fields in
__vb2_plane_dmabuf_put()
- remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
- usb: chipidea: udc: enable suspend interrupt after usb reset
- usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
Crashkernel Scenario
- xhci: dbc: Fix STALL transfer event handling
- usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
- comedi: ni_routing: tools: Check when the file could not be opened
- LoongArch: Fix memleak in pci_acpi_scan_root()
- netfilter: nf_nat: don't try nat source port reallocation for reverse dir
clash
- netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
- tools/iio: Add memory allocation failure check for trigger_name
- staging: vme_user: added bound check to geoid
- driver core: bus: Return -EIO instead of 0 when show/store invalid bus
attribute
- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
lpfc_els_flush_cmd()
- scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
KERN_WARNING
- NFSD: Mark filecache "down" if init fails
- nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net()
failed
- ice: set correct dst VSI in only LAN filters
- ice: clear port vlan config during reset
- ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
- ice: fix VLAN replay after reset
- SUNRPC: Fix integer overflow in decode_rc_list()
- net: phy: aquantia: AQR115c fix up PMA capabilities
- net: phy: aquantia: remove usage of phy_set_max_speed
- tcp: fix to allow timestamp undo if no retransmits were sent
- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
- rxrpc: Fix uninitialised variable in rxrpc_send_data()
- net: dsa: sja1105: fix reception from VLAN-unaware bridges
- selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids()
test
- net: pse-pd: Fix enabled status mismatch
- Bluetooth: btusb: Don't fail external suspend requests
- net: phy: bcm84881: Fix some error handling paths
- net: ethernet: adi: adin1110: Fix some error handling path in
adin1110_read_fifo()
- net: dsa: b53: fix jumbo frame mtu check
- net: dsa: b53: fix max MTU for 1g switches
- net: dsa: b53: fix max MTU for BCM5325/BCM5365
- net: dsa: b53: allow lower MTUs on BCM5325/5365
- net: dsa: b53: fix jumbo frames on 10/100 ports
- drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
- nouveau/dmem: Fix privileged error in copy engine channel
- gpio: aspeed: Add the flush write to ensure the write complete.
- gpio: aspeed: Use devm_clk api to manage clock source
- x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
- powercap: intel_rapl_tpmi: Ignore minor version change
- ice: Fix entering Safe Mode
- ice: Fix netif_is_ice() in Safe Mode
- ice: Flush FDB entries before reset
- drm/xe: Restore GT freq on GSC load error
- drm/xe: Make wedged_mode debugfs writable
- net: ibm: emac: mal: fix wrong goto
- net: ti: icssg-prueth: Fix race condition for VLAN table access
- btrfs: zoned: fix missing RCU locking in error message when loading zone
info
- sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
- netfilter: fib: check correct rtable in vrf setups
- net: ibm: emac: mal: add dcr_unmap to _remove
- net: dsa: refuse cross-chip mirroring operations
- rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
- vxlan: Handle error of rtnl_register_module().
- bridge: Handle error of rtnl_register_module().
- mctp: Handle error of rtnl_register_module().
- mpls: Handle error of rtnl_register_module().
- phonet: Handle error of rtnl_register_module().
- rcu/nocb: Fix rcuog wake-up from offline softirq
- HID: multitouch: Add support for lenovo Y9000P Touchpad
- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
- hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
- HID: plantronics: Workaround for an unexcepted opposite volume key
- HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN
- Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
- usb: dwc3: core: Stop processing of pending events if controller is halted
- usb: xhci: Fix problem with xhci resume from suspend
- usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
- usb: dwc3: re-enable runtime PM after failed resume
- usb: gadget: core: force synchronous registration
- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
ish_fw_xfer_direct_dma
- ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
- ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
- drm/amdgpu: partially revert powerplay `__counted_by` changes
- drm/amd/display: Clear update flags after update has been applied
- drm/amdkfd: Fix an eviction fence leak
- drm/amd/display: fix hibernate entry for DCN35+
- drm/xe/guc_submit: fix xa_store() error checking
- drm/i915/hdcp: fix connector refcounting
- drm/xe/ct: fix xa_store() error checking
- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
- Revert "mmc: mvsdio: Use sg_miter for PIO"
- mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
- mptcp: fallback when MPTCP opts are dropped after 1st data
- ata: libata: avoid superfluous disk spin down + spin up during hibernation
- OPP: fix error code in dev_pm_opp_set_config()
- net: dsa: lan9303: ensure chip reset and wait for READY status
- net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY
- mptcp: pm: do not remove closing subflows
- powercap: intel_rapl_tpmi: Fix bogus register reading
- selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
- selftests/rseq: Fix mm_cid test failure
- btrfs: split remaining space to discard in chunks
- btrfs: add cancellation points to trim loops
- PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()
- idpf: use actual mbx receive payload length
- fs/proc/kcore.c: allow translation of physical memory addresses
- PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
- io_uring/rw: fix cflags posting for single issue multishot read
- Linux 6.11.4
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50182
- secretmem: disable memfd_secret() if arch cannot set direct map
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50019
- kthread: unpark only parked kthread
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50096
- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50020
- ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50021
- ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50022
- device-dax: correct pgoff align in dax_set_mapping()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50185
- mptcp: handle consistently DSS corruption
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50023
- net: phy: Remove LED entry from LEDs list on unregister
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50024
- net: Fix an unsafe loop on the list
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50186
- net: explicitly clear the sk pointer, when pf->create fails
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50025
- scsi: fnic: Move flush_work initialization out of if block
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50026
- scsi: wd33c93: Don't use stale scsi_pointer value
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50027
- thermal: core: Free tzp copy along with the thermal zone
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50028
- thermal: core: Reference count the zone in thermal_zone_get_by_id()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50029
- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50030
- drm/xe/ct: prevent UAF in send_recv()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50187
- drm/vc4: Stop the active perfmon before being destroyed
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50031
- drm/v3d: Stop the active perfmon before being destroyed
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50189
- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50033
- slip: make slhc_remember() more robust against malicious packets
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50034
- net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50035
- ppp: fix ppp_async_encode() illegal access
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50036
- net: do not delay dst_entries_add() in dst_release()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50037
- drm/fbdev-dma: Only cleanup deferred I/O if necessary
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50092
- net: netconsole: fix wrong warning
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50038
- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50039
- net/sched: accept TCA_STAB only for root qdisc
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50040
- igb: Do not bring the device up after non-fatal error
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50041
- i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50042
- ice: Fix increasing MSI-X on VF
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50093
- thermal: intel: int340x: processor: Fix warning during module unload
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50043
- nfsd: fix possible badness in FREE_STATEID
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50044
- Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50045
- netfilter: br_netfilter: fix panic with metadata_dst skb
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50094
- sfc: Don't invoke xdp_do_flush() from netpoll.
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50188
- net: phy: dp83869: fix memory corruption when enabling fiber
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50046
- NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50190
- ice: fix memleak in ice_init_tx_topology()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50180
- fbdev: sisfb: Fix strbuf array overflow
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50047
- smb: client: fix UAF in async decryption
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50048
- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50049
- drm/amd/display: Check null pointer before dereferencing se
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50090
- drm/xe/oa: Fix overflow in oa batch buffer
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50183
- scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
instance
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50055
- driver core: bus: Fix double free in driver API bus_register()
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50091
- dm vdo: don't refer to dedupe_context after releasing it
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50056
- usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50184
- virtio_pmem: Check device status before requesting flush
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50057
- usb: typec: tipd: Free IRQ only if it was requested before
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50058
- serial: protect uart_port_dtr_rts() in uart_shutdown() too
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50181
- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50059
- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
switchtec_ntb_remove due to race condition
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50060
- io_uring: check if we need to reschedule during overflow flush
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50061
- i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
Driver Due to Race Condition
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50062
- RDMA/rtrs-srv: Avoid null pointer deref during path establishment
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50095
- RDMA/mad: Improve handling of timed out WRs of mad agent
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50063
- bpf: Prevent tail call between progs attached to different hooks
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50191
- ext4: don't set SB_RDONLY after filesystem errors
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50064
- zram: free secondary algorithms names
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50065
- ntfs3: Change to non-blocking allocation in ntfs_d_hash
* Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
CVE-2024-50089
- unicode: Don't special case ignorable code points
* Oracular update: v6.11.3 upstream stable release (LP: #2089052)
- jump_label: Fix static_key_slow_dec() yet again
- scsi: st: Fix input/output error on empty drive reset
- scsi: pm8001: Do not overwrite PCI queue mapping
- drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
- drm/i915/display: BMG supports UHBR13.5
- drm/i915/dp: Fix AUX IO power enabling for eDP PSR
- drm/amdgpu: Fix get each xcp macro
- drm/amd/display: handle nulled pipe context in DCE110's set_drr()
- ksmbd: fix warning: comparison of distinct pointer types lacks a cast
- mailbox: ARM_MHU_V3 should depend on ARM64
- [Config] updateconfigs for ARM_MHU_V3
- mailbox: rockchip: fix a typo in module autoloading
- ceph: fix a memory leak on cap_auths in MDS client
- drm/i915/dp: Fix colorimetry detection
- ieee802154: Fix build error
- net: sparx5: Fix invalid timestamps
- net/mlx5: Added cond_resched() to crdump collection
- net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
- netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
- net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
- net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
- selftests: netfilter: Fix nft_audit.sh for newer nft binaries
- selftests: netfilter: Add missing return value
- Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
- afs: Fix missing wire-up of afs_retry_request()
- net: Add netif_get_gro_max_size helper for GRO
- net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
- net: fec: Restart PPS after link state change
- net: fec: Reload PTP registers after link-state change
- net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
- ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
- netfs: Fix missing wakeup after issuing writes
- net: phy: realtek: Check the index value in led_hw_control_get
- bridge: mcast: Fail MDB get request on empty entry
- iomap: constrain the file range passed to iomap_file_unshare
- dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
- ASoC: topology: Fix incorrect addressing assignments
- ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
uninitialized
- drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
- io_uring: fix memory leak when cache init fail
- rust: kbuild: split up helpers.c
- rust: kbuild: auto generate helper exports
- rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
- ALSA: mixer_oss: Remove some incorrect kfree_const() usages
- ALSA: hda/realtek: Fix the push button function for the ALC257
- cifs: Remove intermediate object of failed create reparse call
- drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
- ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
- ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
- drm/xe: Restore pci state upon resume
- drm/xe: Resume TDR after GT reset
- cifs: Do not convert delimiter when parsing NFS-style symlinks
- tools/rtla: Fix installation from out-of-tree build
- ALSA: gus: Fix some error handling paths related to get_bpos() usage
- ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
- drm/amd/display: Disable replay if VRR capability is false
- drm/amd/display: Fix VRR cannot enable
- drm/amd/display: Re-enable panel replay feature
- e1000e: avoid failing the system during pm_suspend
- wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
- crypto: x86/sha256 - Add parentheses around macros' single arguments
- crypto: octeontx - Fix authenc setkey
- crypto: octeontx2 - Fix authenc setkey
- ice: Adjust over allocation of memory in ice_sched_add_root_node() and
ice_sched_add_node()
- wifi: iwlwifi: mvm: Fix a race in scan abort flow
- wifi: iwlwifi: mvm: drop wrong STA selection in TX
- net: hisilicon: hip04: fix OF node leak in probe()
- net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
- net: hisilicon: hns_mdio: fix OF node leak in probe()
- ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
- ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
- ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
- wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
- net: sched: consistently use rcu_replace_pointer() in taprio_change()
- Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
- Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
- ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
- ACPI: CPPC: Add support for setting EPP register in FFH
- wifi: rtw88: select WANT_DEV_COREDUMP
- l2tp: free sessions using rcu
- l2tp: use rcu list add/del when updating lists
- ACPI: EC: Do not release locks during operation region accesses
- net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
- net: mvpp2: Increase size of queue_name buffer
- bnxt_en: Extend maximum length of version string by 1 byte
- ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
- wifi: rtw89: correct base HT rate mask for firmware
- netfilter: nf_tables: do not remove elements if set backend implements
.abort
- ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
- nvme-keyring: restrict match length for version '1' identifiers
- nvme-tcp: sanitize TLS key handling
- nvme-tcp: check for invalidated or revoked key
- net: atlantic: Avoid warning about potential string truncation
- crypto: simd - Do not call crypto_alloc_tfm during registration
- netpoll: Ensure clean state on setup failures
- tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
- wifi: iwlwifi: mvm: use correct key iteration
- wifi: iwlwifi: allow only CN mcc from WRDD
- virt: sev-guest: Ensure the SNP guest messages do not exceed a page
- wifi: mac80211: fix RCU list iterations
- ACPICA: iasl: handle empty connection_node
- proc: add config & param to block forcing mem writes
- [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
- vfs: use RCU in ilookup
- drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
- nvme: fix metadata handling in nvme-passthrough
- can: netlink: avoid call to do_set_data_bittiming callback with stale
can_priv::ctrlmode
- netdev-genl: Set extack and fix error on napi-get
- wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
- arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
- net: phy: Check for read errors in SIOCGMIIREG
- x86/bugs: Add missing NO_SSB flag
- x86/bugs: Fix handling when SRSO mitigation is disabled
- crypto: hisilicon - fix missed error branch
- wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
- wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
- netfs: Cancel dirty folios that have no storage destination
- nfp: Use IRQF_NO_AUTOEN flag in request_irq()
- ALSA: usb-audio: Add input value sanity checks for standard types
- x86/apic: Remove logical destination mode for 64-bit
- ALSA: usb-audio: Define macros for quirk table entries
- ALSA: usb-audio: Replace complex quirk lines with macros
- ALSA: usb-audio: Add quirk for RME Digiface USB
- ALSA: usb-audio: Add mixer quirk for RME Digiface USB
- ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
- ALSA: usb-audio: Add logitech Audio profile quirk
- ASoC: codecs: wsa883x: Handle reading version failure
- ALSA: control: Take power_ref lock primarily
- tools/x86/kcpuid: Protect against faulty "max subleaf" values
- x86/pkeys: Add PKRU as a parameter in signal handling functions
- x86/pkeys: Restore altstack access in sigreturn()
- x86/kexec: Add EFI config table identity mapping for kexec kernel
- ALSA: hdsp: Break infinite MIDI input flush loop
- tools/nolibc: powerpc: limit stack-protector workaround to GCC
- selftests/nolibc: avoid passing NULL to printf("%s")
- x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
- ASoC: Intel: boards: always check the result of
acpi_dev_get_first_match_dev()
- hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
- pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
- pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
- rcuscale: Provide clear error when async specified without primitives
- power: reset: brcmstb: Do not go into infinite loop if reset fails
- iommu/arm-smmu-v3: Match Stall behaviour for S2
- iommu/vt-d: Always reserve a domain ID for identity setup
- iommu/vt-d: Unconditionally flush device TLB for pasid table updates
- iommu/arm-smmu-v3: Do not use devm for the cd table allocations
- drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
- drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
- ata: pata_serverworks: Do not use the term blacklist
- ata: sata_sil: Rename sil_blacklist to sil_quirks
- selftests/bpf: fix uprobe.path leak in bpf_testmod
- scsi: smartpqi: Add new controller PCI IDs
- HID: Ignore battery for all ELAN I2C-HID devices
- drm/amd/display: Underflow Seen on DCN401 eGPU
- drm/xe: Name and document Wa_14019789679
- jfs: UBSAN: shift-out-of-bounds in dbFindBits
- scsi: smartpqi: correct stream detection
- scsi: smartpqi: add new controller PCI IDs
- drm/amdgpu: add raven1 gfxoff quirk
- drm/amdgpu: enable gfxoff quirk on HP 705G4
- drm/amdkfd: Fix resource leak in criu restore queue
- HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
- platform/x86: touchscreen_dmi: add nanote-next quirk
- platform/x86/amd: pmf: Add quirk for TUF Gaming A14
- drm/stm: ltdc: reset plane transparency after plane disable
- drm/amdgpu/gfx12: properly handle error ints on all pipes
- drm/amdgpu/gfx9: properly handle error ints on all pipes
- drm/amd/display: Fix possible overflow in integer multiplication
- drm/printer: Allow NULL data in devcoredump printer
- perf,x86: avoid missing caller address in stack traces captured in uprobe
- scsi: aacraid: Rearrange order of struct aac_srb_unit
- scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
topology
- scsi: lpfc: Update PRLO handling in direct attached topology
- drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
- drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
- drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
- perf: Fix event_function_call() locking
- scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
- drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
- drm/amd/display: Unlock Pipes Based On DET Allocation
- drm/amdgpu: fix ptr check warning in gfx9 ip_dump
- drm/amdgpu: fix ptr check warning in gfx10 ip_dump
- drm/amdgpu: fix ptr check warning in gfx11 ip_dump
- drm/amdgpu: Block MMR_READ IOCTL in reset
- drm/amdgpu/gfx9: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
- drm/xe: Use topology to determine page fault queue size
- drm/amdkfd: Check int source id for utcl2 poison event
- of/irq: Refer to actual buffer size in of_irq_parse_one()
- drm/amd/display: guard write a 0 post_divider value to HW
- powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
- ovl: fsync after metadata copy-up
- drm/amdgpu/gfx12: use rlc safe mode for soft recovery
- drm/amdgpu/gfx11: use rlc safe mode for soft recovery
- drm/amdgpu/gfx10: use rlc safe mode for soft recovery
- platform/x86: lenovo-ymc: Ignore the 0x0 state
- tools/hv: Add memory allocation check in hv_fcopy_start
- HID: i2c-hid: ensure various commands do not interfere with each other
- platform/mellanox: mlxbf-pmc: fix lockdep warning
- platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch
buttons LED
- bpf: Make the pointer returned by iter next method valid
- ext4: ext4_search_dir should return a proper error
- bpftool: Fix undefined behavior caused by shifting into the sign bit
- iomap: handle a post-direct I/O invalidate race in
iomap_write_delalloc_release
- EINJ, CXL: Fix CXL device SBDF calculation
- spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
- spi: spi-cadence: Fix missing spi_controller_is_target() check
- selftest: hid: add missing run-hid-tools-tests.sh
- spi: s3c64xx: fix timeout counters in flush_fifo
- kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
- selftests: breakpoints: use remaining time to check if suspend succeed
- accel/ivpu: Add missing MODULE_FIRMWARE metadata
- spi: rpc-if: Add missing MODULE_DEVICE_TABLE
- ALSA: control: Fix power_ref lock order for compat code, too
- perf callchain: Fix stitch LBR memory leaks
- perf: Really fix event_function_call() locking
- drm/xe: fixup xe_alloc_pf_queue
- drm/xe: Fix memory leak on xe_alloc_pf_queue failure
- selftests: vDSO: fix vDSO name for powerpc
- selftests: vDSO: fix vdso_config for powerpc
- selftests: vDSO: fix vDSO symbols lookup for powerpc64
- ext4: fix error message when rejecting the default hash
- selftests/mm: fix charge_reserved_hugetlb.sh test
- nvme-tcp: fix link failure for TCP auth
- f2fs: add write priority option based on zone UFS
- powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
- selftests: vDSO: fix ELF hash table entry size for s390x
- selftests: vDSO: fix vdso_config for s390
- f2fs: make BG GC more aggressive for zoned devices
- f2fs: introduce migration_window_granularity
- f2fs: increase BG GC migration window granularity when boosted for zoned
devices
- f2fs: do FG_GC when GC boosting is required for zoned devices
- f2fs: forcibly migrate to secure space for zoned device file pinning
- Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
- KVM: arm64: Fix kvm_has_feat*() handling of negative features
- i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
- i2c: xiic: Wait for TX empty to avoid missed TX NAKs
- i2c: core: Lock address during client device instantiation
- i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
- i2c: designware: fix controller is holding SCL low while ENABLE bit is
disabled
- i2c: synquacer: Deal with optional PCLK correctly
- rust: sync: require `T: Sync` for `LockedBy::access`
- ovl: fail if trusted xattrs are needed but caller lacks permission
- firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
- memory: tegra186-emc: drop unused to_tegra186_emc()
- dt-bindings: clock: exynos7885: Fix duplicated binding
- spi: bcm63xx: Fix module autoloading
- spi: bcm63xx: Fix missing pm_runtime_disable()
- power: supply: hwmon: Fix missing temp1_max_alarm attribute
- power: supply: Drop use_cnt check from power_supply_property_is_writeable()
- perf/core: Fix small negative period being ignored
- drm/v3d: Prevent out of bounds access in performance query extensions
- parisc: Fix itlb miss handler for 64-bit programs
- drm/mediatek: ovl_adaptor: Add missing of_node_put()
- drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
- ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
- ALSA: core: add isascii() check to card ID generator
- ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
- ALSA: usb-audio: Add native DSD support for Luxman D-08u
- ALSA: line6: add hw monitor volume control to POD HD500X
- ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
- ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
- ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
- ext4: correct encrypted dentry name hash when not casefolded
- ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
- ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
- ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
- ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
- ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
- ext4: fix fast commit inode enqueueing during a full journal commit
- ext4: use handle to mark fc as ineligible in __track_dentry_update()
- ext4: mark fc as ineligible using an handle in ext4_xattr_set()
- parisc: Fix 64-bit userspace syscall path
- parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
- parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
- drm/rockchip: vop: clear DMA stop bit on RK3066
- of: address: Report error on resource bounds overflow
- of/irq: Support #msi-cells=<0> in of_msi_get_domain
- lib/buildid: harden build ID parsing logic
- jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
- mm: krealloc: consider spare memory for __GFP_ZERO
- ocfs2: fix the la space leak when unmounting an ocfs2 volume
- ocfs2: fix uninit-value in ocfs2_get_block()
- scripts/gdb: fix timerlist parsing issue
- scripts/gdb: add iteration function for rbtree
- scripts/gdb: fix lx-mounts command error
- arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
- arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
- drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
- sched/deadline: Comment sched_dl_entity::dl_server variable
- sched/core: Add clearing of ->dl_server in put_prev_task_balance()
- sched/core: Clear prev->dl_server in CFS pick fast path
- sched: psi: fix bogus pressure spikes from aggregation race
- riscv: define ILLEGAL_POINTER_VALUE for 64bit
- [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv
- perf python: Disable -Wno-cast-function-type-mismatch if present on clang
- perf hist: Update hist symbol when updating maps
- nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
- NFSD: Fix NFSv4's PUTPUBFH operation
- sysctl: avoid spurious permanent empty tables
- RDMA/mana_ib: use the correct page table index based on hardware page size
- RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
- drivers/perf: riscv: Align errno for unsupported perf event
- riscv: Fix kernel stack size when KASAN is enabled
- media: imx335: Fix reset-gpio handling
- clk: rockchip: fix error for unknown clocks
- leds: pca9532: Remove irrelevant blink configuration error message
- media: videobuf2: Drop minimum allocation requirement of 2 buffers
- clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
- media: sun4i_csi: Implement link validate for sun4i_csi subdev
- clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
- media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
- dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
- clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
- clk: qcom: clk-rpmh: Fix overflow in BCM vote
- clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
- clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
- clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
- clk: qcom: gcc-sc8180x: Add GPLL9 support
- clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
- clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
- drm/amd/display: avoid set dispclk to 0
- smb: client: use actual path when queryfs
- smb3: fix incorrect mode displayed for read-only files
- iio: magnetometer: ak8975: Fix reading for ak099xx sensors
- iio: pressure: bmp280: Fix regmap for BMP280 device
- iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
- tomoyo: fallback to realpath if symlink's pathname does not exist
- kselftests: mm: fix wrong __NR_userfaultfd value
- rtc: at91sam9: fix OF node leak in probe() error path
- mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
- mm/gup: fix memfd_pin_folios hugetlb page allocation
- mm/hugetlb: simplify refs in memfd_alloc_folio
- Input: adp5589-keys - fix adp5589_gpio_get_value()
- HID: bpf: fix cfi stubs for hid_bpf_ops
- pidfs: check for valid pid namespace
- ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
- ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
- ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
- ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
- ACPI: resource: Add Asus ExpertBook B2502CVA to
irq1_level_low_skip_override[]
- btrfs: drop the backref cache during relocation if we commit
- btrfs: send: fix invalid clone operation for file that got its size
decreased
- cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
- gpio: davinci: fix lazy disable
- net: pcs: xpcs: fix the wrong register that was written back
- Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
- io_uring/net: harden multishot termination case for recv
- ceph: fix cap ref leak via netfs init_request
- tracing/hwlat: Fix a race during cpuhp processing
- tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
- rtla: Fix the help text in osnoise and timerlat top tools
- firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
- close_range(): fix the logics in descriptor table trimming
- drm/i915/gem: fix bitwise and logical AND mixup
- drm/panthor: Don't add write fences to the shared BOs
- drm/panthor: Don't declare a queue blocked if deferred operations are
pending
- drm/sched: Fix dynamic job-flow control race
- drm/sched: Add locking to drm_sched_entity_modify_sched
- drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
- drm/sched: Always increment correct scheduler score
- drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
- drm/amd/display: Add HDR workaround for specific eDP
- drm/amd/display: Enable idle workqueue for more IPS modes
- kconfig: fix infinite loop in sym_calc_choice()
- kconfig: qconf: move conf_read() before drawing tree pain
- kconfig: qconf: fix buffer overflow in debug links
- arm64: cputype: Add Neoverse-N3 definitions
- arm64: errata: Expand speculative SSBS workaround once more
- mm: z3fold: deprecate CONFIG_Z3FOLD
- [Config] updateconfigs after deprecating Z3FOLD
- drm/amd/display: Allow backlight to go below
`AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
- sunrpc: change sp_nrthreads from atomic_t to unsigned int.
- NFSD: Async COPY result needs to return a write verifier
- remoteproc: k3-r5: Acquire mailbox handle during probe routine
- remoteproc: k3-r5: Delay notification of wakeup event
- r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
- ACPI: battery: Simplify battery hook locking
- drm/xe: Clean up VM / exec queue file lock usage.
- drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
- drm/xe/vram: fix ccs offset calculation
- drm/sched: revert "Always increment correct scheduler score"
- ALSA: control: Fix leftover snd_power_unref()
- crypto: octeontx* - Select CRYPTO_AUTHENC
- drm/amd/display: Revert Avoid overflow assignment
- perf report: Fix segfault when 'sym' sort key is not used
- pmdomain: core: Reduce debug summary table width
- perf python: Allow checking for the existence of warning options in clang
- Linux 6.11.3
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49863
- vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49864
- rxrpc: Fix a race between socket set up and I/O thread creation
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49865
- drm/xe/vm: move xa_alloc to prevent UAF
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49955
- ACPI: battery: Fix possible crash when unregistering a battery hook
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49973
- r8169: add tally counter fields added with RTL8125
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49974
- NFSD: Limit the number of concurrent async COPY operations
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49975
- uprobes: fix kernel info leak via "[uprobes]" vma
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50003
- drm/amd/display: Fix system hang while resume with TBT monitor
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50173
- drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49866
- tracing/timerlat: Fix a race during cpuhp processing
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49976
- tracing/timerlat: Drop interface_lock in stop_kthread()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50005
- mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50012
- cpufreq: Avoid a bad reference count on CPU node
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49867
- btrfs: wait for fixup workers before stopping cleaner kthread during umount
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49868
- btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49869
- btrfs: send: fix buffer overflow detection when copying path to cache entry
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49870
- cachefiles: fix dentry leak in cachefiles_open_file()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49871
- Input: adp5589-keys - fix NULL pointer dereference
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49872
- mm/gup: fix memfd_pin_folios alloc race panic
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49964
- mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49873
- mm/filemap: fix filemap_get_folios_contig THP panic
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49977
- net: stmmac: Fix zero-division error when disabling tc cbs
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49978
- gso: fix udp gso fraglist segmentation after pull from frag_list
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49979
- net: gso: fix tcp fraglist segmentation after pull from frag_list
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49980
- vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49981
- media: venus: fix use after free bug in venus_remove due to race condition
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49956
- gfs2: fix double destroy_workqueue error
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50176
- remoteproc: k3-r5: Fix error handling when power-up failed
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49982
- aoe: fix the potential use-after-free problem in more places
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49874
- i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver
Due to Race Condition
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49875
- nfsd: map the EBADMSG to nfserr_io to avoid warning
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50013
- exfat: fix memory leak in exfat_load_bitmap()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49876
- drm/xe: fix UAF around queue destruction
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49877
- ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49957
- ocfs2: fix null-ptr-deref when journal load failed.
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49965
- ocfs2: remove unreasonable unlock in ocfs2_read_blocks
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49966
- ocfs2: cancel dqi_sync_work before freeing oinfo
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49958
- ocfs2: reserve space for inline xattr before attaching reflink tree
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49959
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49878
- resource: fix region_intersects() vs add_memory_driver_managed()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49879
- drm: omapdrm: Add missing check for alloc_ordered_workqueue
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49880
- ext4: fix off by one issue in alloc_flex_gd()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49881
- ext4: update orig_path in ext4_find_extent()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50014
- ext4: fix access to uninitialised lock in fc replay path
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49960
- ext4: fix timer use-after-free on failed mount
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49882
- ext4: fix double brelse() the buffer of the extents path
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49883
- ext4: aovid use-after-free in ext4_ext_insert_extent()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49983
- ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50015
- ext4: dax: fix overflowing extents beyond inode size when partially writing
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49884
- ext4: fix slab-use-after-free in ext4_split_extent_at()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49885
- mm, slub: avoid zeroing kmalloc redzone
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49961
- media: i2c: ar0521: Use cansleep version of gpiod_set_value()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49985
- i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49886
- platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49986
- platform/x86: x86-android-tablets: Fix use after free on
platform_device_register() errors
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49887
- f2fs: fix to don't panic system for no free segment fault injection
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49888
- bpf: Fix a sdiv overflow issue
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49987
- bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50006
- ext4: fix i_data_sem unlock order in ext4_ind_migrate()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49889
- ext4: avoid use-after-free in ext4_ext_show_leaf()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49968
- ext4: filesystems without casefold feature cannot be mounted with siphash
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49988
- ksmbd: add refcnt to ksmbd_conn struct
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49890
- drm/amd/pm: ensure the fw_info is not null before using it
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49891
- scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
paths
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49892
- drm/amd/display: Initialize get_bytes_per_element's default to 1
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50016
- drm/amd/display: Avoid overflow assignment in link_dp_cts
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49893
- drm/amd/display: Check stream_status before it is used
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49969
- drm/amd/display: Fix index out of bounds in DCN30 color transformation
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49970
- drm/amd/display: Implement bounds check for stream encoder creation in
DCN401
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49894
- drm/amd/display: Fix index out of bounds in degamma hardware format
translation
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49895
- drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
translation
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49971
- drm/amd/display: Increase array size of dummy_boolean
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49972
- drm/amd/display: Deallocate DML memory if allocation fails
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49896
- drm/amd/display: Check stream before comparing them
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49897
- drm/amd/display: Check phantom_stream before it is used
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49898
- drm/amd/display: Check null-initialized variables
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49899
- drm/amd/display: Initialize denominators' default to 1
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49900
- jfs: Fix uninit-value access of new_ea in ea_buffer
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49901
- drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49902
- jfs: check if leafidx greater than num leaves per dmap tree
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49903
- jfs: Fix uaf in dbFreeBits
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49904
- drm/amdgpu: add list empty check to avoid null pointer issue
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49989
- drm/amd/display: fix double free issue during amdgpu module unload
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49905
- drm/amd/display: Add null check for 'afb' in
amdgpu_dm_plane_handle_cursor_update (v2)
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49906
- drm/amd/display: Check null pointer before try to access it
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49907
- drm/amd/display: Check null pointers before using dc->clk_mgr
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49908
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50177
- drm/amd/display: fix a UBSAN warning in DML2.1
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49909
- drm/amd/display: Add NULL check for function pointer in
dcn32_set_output_transfer_func
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49910
- drm/amd/display: Add NULL check for function pointer in
dcn401_set_output_transfer_func
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49911
- drm/amd/display: Add NULL check for function pointer in
dcn20_set_output_transfer_func
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49912
- drm/amd/display: Handle null 'stream_status' in
'planes_changed_for_existing_stream'
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49913
- drm/amd/display: Add null check for top_pipe_to_program in
commit_planes_for_stream
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49914
- drm/amd/display: Add null check for pipe_ctx->plane_state in
dcn20_program_pipe
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49915
- drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49916
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn401_init_hw
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49917
- drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
dcn30_init_hw
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49918
- drm/amd/display: Add null check for head_pipe in
dcn32_acquire_idle_pipe_for_head_pipe_in_layer
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49919
- drm/amd/display: Add null check for head_pipe in
dcn201_acquire_free_pipe_for_layer
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49991
- drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49920
- drm/amd/display: Check null pointers before multiple uses
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49921
- drm/amd/display: Check null pointers before used
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49922
- drm/amd/display: Check null pointers before using them
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49923
- drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49992
- drm/stm: Avoid use-after-free issues with crtc and plane
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49993
- iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49925
- fbdev: efifb: Register sysfs groups through driver core
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49926
- rcu-tasks: Fix access non-existent percpu rtpcp variable in
rcu_tasks_need_gpcb()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50007
- ALSA: asihpi: Fix potential OOB array access
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50017
- x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49927
- x86/ioapic: Handle allocation failures gracefully
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50008
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_cmd_802_11_scan_ext()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50018
- net: napi: Prevent overflow of napi_defer_hard_irqs
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49928
- wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50178
- cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50009
- cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49994
- block: fix integer overflow in BLKSECDISCARD
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49929
- wifi: iwlwifi: mvm: avoid NULL pointer dereference
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49995
- tipc: guard against string buffer overrun
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49962
- ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
acpi_db_convert_to_package()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49930
- wifi: ath11k: fix array out-of-bound access in SoC stats
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49931
- wifi: ath12k: fix array out-of-bound access in SoC stats
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49932
- btrfs: don't readahead the relocation inode on RST
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49933
- blk_iocost: fix more out of bound shifts
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49934
- fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50010
- exec: don't WARN for racy path_noexec check
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49935
- ACPI: PAD: fix crash in exit_round_robin()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49936
- net/xen-netback: prevent UAF in xenvif_flush_hash()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49937
- wifi: cfg80211: Set correct chandef when starting CAC
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49938
- wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49939
- wifi: rtw89: avoid to add interface to list twice when SER
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49940
- l2tp: prevent possible tunnel refcount underflow
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49941
- gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49996
- cifs: Fix buffer overflow when parsing NFS reparse points
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49942
- drm/xe: Prevent null pointer access in xe_migrate_copy
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49943
- drm/xe/guc_submit: add missing locking in wedged_fini
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50011
- ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50174
- drm/panthor: Fix race when converting group handle to group object
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49944
- sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49945
- net/ncsi: Disable the ncsi work before freeing the associated structure
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49946
- ppp: do not assume bh is held in ppp_channel_bridge_input()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49947
- net: test for not too small csum_start in virtio_net_hdr_to_skb()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49948
- net: add more sanity checks to qdisc_pkt_len_init()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49949
- net: avoid potential underflow in qdisc_pkt_len_init() with UFO
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49997
- net: ethernet: lantiq_etop: fix memory disclosure
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49998
- net: dsa: improve shutdown sequence
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49999
- afs: Fix the setting of the server responding flag
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49950
- Bluetooth: L2CAP: Fix uaf in l2cap_connect
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49951
- Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49952
- netfilter: nf_tables: prevent nf_skb_duplicated corruption
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49953
- net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50000
- net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50001
- net/mlx5: Fix error path in multi-packet WQE transmit
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50179
- ceph: remove the incorrect Fw reference check when dirtying pages
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49963
- mailbox: bcm2835: Fix timeout during suspend mode
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-49954
- static_call: Replace pointless WARN_ON() in static_call_module_notify()
* Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
CVE-2024-50002
- static_call: Handle module init failure correctly in
static_call_del_module()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033)
- EDAC/synopsys: Fix error injection on Zynq UltraScale+
- crypto: xor - fix template benchmarking
- crypto: qat - disable IOV in adf_dev_stop()
- crypto: qat - fix recovery flow for VFs
- crypto: qat - ensure correct order in VF restarting handler
- ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
- eth: fbnic: select DEVLINK and PAGE_POOL
- wifi: brcmfmac: introducing fwil query functions
- wifi: ath9k: Remove error checks when creating debugfs entries
- wifi: ath12k: fix BSS chan info request WMI command
- wifi: ath12k: match WMI BSS chan info structure with firmware definition
- wifi: ath12k: fix invalid AMPDU factor calculation in
ath12k_peer_assoc_h_he()
- hwrng: cn10k - Enable by default CN10K driver if Thunder SoC is enabled
- crypto: x86/aes-gcm - fix PREEMPT_RT issue in gcm_crypt()
- net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
- virtio: rename virtio_config_enabled to virtio_config_core_enabled
- virtio: allow driver to disable the configure change notification
- virtio-net: synchronize operstate with admin state on up/down
- virtio-net: synchronize probe with ndo_set_features
- arm64: signal: Fix some under-bracketed UAPI macros
- wifi: rtw88: remove CPT execution branch never used
- RISC-V: KVM: Fix sbiret init before forwarding to userspace
- RISC-V: KVM: Allow legacy PMU access from guest
- RISC-V: KVM: Fix to allow hpmcounter31 from the guest
- mount: handle OOM on mnt_warn_timestamp_expiry
- autofs: fix missing fput for FSCONFIG_SET_FD
- netfilter: nf_tables: store new sets in dedicated list
- wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
- kselftest/arm64: signal: fix/refactor SVE vector length enumeration
- arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI
first
- thermal: core: Fold two functions into their respective callers
- thermal: core: Fix rounding of delay jiffies
- perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
- perf/dwc_pcie: Always register for PCIe bus notifier
- crypto: qat - fix "Full Going True" macro definition
- ACPI: video: force native for Apple MacbookPro9,2
- wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio
- wifi: iwlwifi: config: label 'gl' devices as discrete
- wifi: iwlwifi: mvm: increase the time between ranging measurements
- wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
- wifi: mac80211: fix the comeback long retry times
- wifi: iwlwifi: mvm: allow ESR when we the ROC expires
- wifi: mac80211: Check for missing VHT elements only for 5 GHz
- ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
- ACPICA: executer/exsystem: Don't nag user about every Stall() violating the
spec
- padata: Honor the caller's alignment in case of chunk_size 0
- drivers/perf: hisi_pcie: Record hardware counts correctly
- drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
- kselftest/arm64: Actually test SME vector length changes via sigreturn
- can: j1939: use correct function name in comment
- wifi: rtw89: wow: fix wait condition for AOAC report request
- ACPI: CPPC: Fix MASK_VAL() usage
- netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
- netfilter: nf_tables: reject element expiration with no timeout
- netfilter: nf_tables: reject expiration higher than timeout
- netfilter: nf_tables: remove annotation to access set timeout while holding
lock
- netfilter: nft_dynset: annotate data-races around set timeout
- perf/arm-cmn: Refactor node ID handling. Again.
- perf/arm-cmn: Fix CCLA register offset
- perf/arm-cmn: Ensure dtm_idx is big enough
- cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
- thermal: gov_bang_bang: Adjust states of all uninitialized instances
- wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
- wifi: mt76: mt7996: fix traffic delay when switching back to working channel
- wifi: mt76: mt7996: fix wmm set of station interface to 3
- wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
- wifi: mt76: mt7996: fix EHT beamforming capability check
- pm:cpupower: Add missing powercap_set_enabled() stub function
- crypto: ccp - do not request interrupt on cmd completion when irqs disabled
- crypto: hisilicon/hpre - mask cluster timeout error
- crypto: hisilicon/qm - reset device before enabling it
- wifi: mt76: mt7996: fix handling mbss enable/disable
- wifi: mt76: connac: fix checksum offload fields of connac3 RXD
- wifi: mt76: mt7603: fix mixed declarations and code
- wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
- wifi: mt76: mt7915: fix rx filter setting for bfee functionality
- wifi: mt76: mt7996: fix uninitialized TLV data
- wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
- af_unix: Don't call skb_get() for OOB skb.
- af_unix: Remove single nest in manage_oob().
- af_unix: Rename unlinked_skb in manage_oob().
- af_unix: Move spin_lock() in manage_oob().
- Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
- Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
- can: m_can: enable NAPI before enabling interrupts
- can: m_can: m_can_close(): stop clocks after device has been shut down
- Bluetooth: btusb: Fix not handling ZPL/short-transfer
- bareudp: Pull inner IP header in bareudp_udp_encap_recv().
- bareudp: Pull inner IP header on xmit.
- net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
- crypto: n2 - Set err to EINVAL if snprintf fails for hmac
- xsk: fix batch alloc API on non-coherent systems
- net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
- fbnic: Set napi irq value after calling netif_napi_add
- net: tipc: avoid possible garbage value
- ublk: move zone report data out of request pdu
- block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
- block, bfq: don't break merge chain in bfq_split_bfqq()
- cachefiles: Fix non-taking of sb_writers around set/removexattr
- nbd: correct the maximum value for discard sectors
- erofs: fix incorrect symlink detection in fast symlink
- erofs: fix error handling in z_erofs_init_decompressor
- block, bfq: fix uaf for accessing waker_bfqq after splitting
- block, bfq: fix procress reference leakage for bfqq in merge chain
- io_uring/io-wq: do not allow pinning outside of cpuset
- io_uring/io-wq: inherit cpuset of cgroup in io worker
- spi: ppc4xx: handle irq_of_parse_and_map() errors
- arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
- arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
- spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
- firmware: qcom: scm: Disable SDI and write no dump to dump mode
- regulator: Return actual error in of_regulator_bulk_get_all()
- arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
- arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
- ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
- arm64: tegra: Correct location of power-sensors for IGX Orin
- arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
- arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
- arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
- spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
- arm64: dts: qcom: x1e80100: Fix PHY for DP2
- ARM: dts: microchip: sama7g5: Fix RTT clock
- ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
- arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
- ARM: versatile: fix OF node leak in CPUs prepare
- reset: berlin: fix OF node leak in probe() error path
- reset: k210: fix OF node leak in probe() error path
- platform: cznic: turris-omnia-mcu: Fix error check in
omnia_mcu_register_trng()
- clocksource/drivers/qcom: Add missing iounmap() on errors in
msm_dt_timer_init()
- arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
- x86/mm: Use IPIs to synchronize LAM enablement
- ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
- ASoC: tas2781: Fix a compiling warning reported by robot kernel test due to
adding tas2563_dvc_table
- ASoC: tas2781-i2c: Drop weird GPIO code
- ASoC: tas2781-i2c: Get the right GPIO line
- selftests/ftrace: Add required dependency for kprobe tests
- ALSA: hda: cs35l41: fix module autoloading
- selftests/ftrace: Fix test to handle both old and new kernels
- x86/boot/64: Strip percpu address space when setting up GDT descriptors
- m68k: Fix kernel_clone_args.flags in m68k_clone()
- ASoC: loongson: fix error release
- selftests/ftrace: Fix eventfs ownership testcase to find mount point
- selftests:resctrl: Fix build failure on archs without __cpuid_count()
- cgroup/pids: Avoid spurious event notification
- hwmon: (max16065) Fix overflows seen when writing limits
- hwmon: (max16065) Fix alarm attributes
- iommu/arm-smmu: Un-demote unhandled-fault msg
- iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check
- mtd: slram: insert break after errors in parsing the map
- hwmon: (ntc_thermistor) fix module autoloading
- power: supply: axp20x_battery: Remove design from min and max voltage
- power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
- fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
- iommu/amd: Handle error path in amd_iommu_probe_device()
- iommu/amd: Allocate the page table root using GFP_KERNEL
- iommu/amd: Move allocation of the top table into v1_alloc_pgtable
- iommu/amd: Set the pgsize_bitmap correctly
- iommu/amd: Do not set the D bit on AMD v2 table entries
- mtd: powernv: Add check devm_kasprintf() returned value
- rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
- mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
- mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
- mtd: rawnand: mtk: Fix init error path
- iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
- iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
- iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
- pmdomain: core: Harden inter-column space in debug summary
- pmdomain: core: Fix "managed by" alignment in debug summary
- drm/stm: Fix an error handling path in stm_drm_platform_probe()
- drm/stm: ltdc: check memory returned by devm_kzalloc()
- drm/amd/display: free bo used for dmub bounding box
- drm/amdgpu: properly handle vbios fake edid sizing
- drm/radeon: properly handle vbios fake edid sizing
- drm/amd/display: Reset VRR config during resume
- scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
- scsi: sd: Don't check if a write for REQ_ATOMIC
- scsi: block: Don't check REQ_ATOMIC for reads
- scsi: NCR5380: Check for phase match during PDMA fixup
- drm/amd/amdgpu: Properly tune the size of struct
- drm/amd/display: Improve FAM control for DCN401
- drm/rockchip: vop: Allow 4096px width scaling
- drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
- drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
- drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
- drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
- drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
- drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
- powerpc/8xx: Fix initial memory mapping
- powerpc/8xx: Fix kernel vs user address comparison
- powerpc/vdso: Inconditionally use CFUNC macro
- drm/msm: Use a7xx family directly in gpu_state
- drm/msm: Dump correct dbgahb clusters on a750
- drm/msm: Fix CP_BV_DRAW_STATE_ADDR name
- drm/msm: Fix incorrect file name output in adreno_request_fw()
- drm/msm/a5xx: disable preemption in submits by default
- drm/msm/a5xx: properly clear preemption records on resume
- drm/msm/a5xx: fix races in preemption evaluation stage
- drm/msm/a5xx: workaround early ring-buffer emptiness check
- ipmi: docs: don't advertise deprecated sysfs entries
- drm/msm/dp: enable widebus on all relevant chipsets
- drm/msm/dsi: correct programming sequence for SM8350 / SM8450
- drm/msm: fix %s null argument error
- platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
- kselftest: dt: Ignore nodes that have ancestors disabled
- drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
- drm/amdgpu: fix invalid fence handling in amdgpu_vm_tlb_flush
- xen: use correct end address of kernel for conflict checking
- HID: wacom: Support sequence numbers smaller than 16-bit
- HID: wacom: Do not warn about dropped packets for first packet
- ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
- xen: introduce generic helper checking for memory map conflicts
- xen: move max_pfn in xen_memory_setup() out of function scope
- xen: add capability to remap non-RAM pages to different PFNs
- xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
- drm/xe: fix missing 'xe_vm_put'
- xen/swiotlb: add alignment check for dma buffers
- xen/swiotlb: fix allocated size
- sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
- bpf, x64: Fix tailcall hierarchy
- bpf, arm64: Fix tailcall hierarchy
- bpf: Fix compare error in function retval_range_within
- selftests/bpf: Workaround strict bpf_lsm return value check.
- selftests/bpf: Fix error linking uprobe_multi on mips
- selftests/bpf: Fix wrong binary in Makefile log output
- tools/runqslower: Fix LDFLAGS and add LDLIBS support
- selftests/bpf: Use pid_t consistently in test_progs.c
- selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
- selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
- selftests/bpf: Drop unneeded error.h includes
- selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
- selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
- selftests/bpf: Fix missing BUILD_BUG_ON() declaration
- selftests/bpf: Fix include of <sys/fcntl.h>
- selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
- selftests/bpf: Fix compiling kfree_skb.c with musl-libc
- selftests/bpf: Fix compiling flow_dissector.c with musl-libc
- selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
- selftests/bpf: Fix compiling core_reloc.c with musl-libc
- selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
- selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
- selftests/bpf: Fix errors compiling crypto_sanity.c with musl libc
- selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
- libbpf: Don't take direct pointers into BTF data from st_ops
- selftests/bpf: Fix arg parsing in veristat, test_progs
- selftests/bpf: Fix error compiling test_lru_map.c
- selftests/bpf: Fix C++ compile error from missing _Bool type
- selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
- selftests/bpf: Fix compile if backtrace support missing in libc
- selftests/bpf: Fix error compiling tc_redirect.c with musl libc
- s390/entry: Move early program check handler to entry.S
- s390/entry: Make early program check handler relocated lowcore aware
- libbpf: Fix license for btf_relocate.c
- samples/bpf: Fix compilation errors with cf-protection option
- selftests/bpf: no need to track next_match_pos in struct test_loader
- selftests/bpf: extract test_loader->expect_msgs as a data structure
- selftests/bpf: allow checking xlated programs in verifier_* tests
- selftests/bpf: __arch_* macro to limit test cases to specific archs
- selftests/bpf: fix to avoid __msg tag de-duplication by clang
- selftests/bpf: Fix incorrect parameters in NULL pointer checking
- libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
- s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
- libbpf: Ensure new BTF objects inherit input endianness
- xz: cleanup CRC32 edits from 2018
- kthread: fix task state in kthread worker if being frozen
- ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
- bpftool: Fix handling enum64 in btf dump sorting
- sched/deadline: Fix schedstats vs deadline servers
- smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
- ext4: avoid buffer_head leak in ext4_mark_inode_used()
- ext4: avoid potential buffer_head leak in __ext4_new_inode()
- ext4: avoid negative min_clusters in find_group_orlov()
- ext4: return error on ext4_find_inline_entry
- sched/numa: Fix the vma scan starving issue
- nilfs2: determine empty node blocks as corrupted
- sched/pelt: Use rq_clock_task() for hw_pressure
- bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
- bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
- perf scripts python cs-etm: Restore first sample log in verbose mode
- perf bpf: Move BPF disassembly routines to separate file to avoid clash with
capstone bpf headers
- perf mem: Free the allocated sort string, fixing a leak
- perf lock contention: Change stack_id type to s32
- perf vendor events: SKX, CLX, SNR uncore cache event fixes
- perf inject: Fix leader sampling inserting additional samples
- perf report: Fix --total-cycles --stdio output error
- perf build: Fix up broken capstone feature detection fast path
- perf sched timehist: Fix missing free of session in perf_sched__timehist()
- perf stat: Display iostat headers correctly
- perf dwarf-aux: Check allowed location expressions when collecting variables
- perf annotate-data: Fix off-by-one in location range check
- perf dwarf-aux: Handle bitfield members from pointer access
- perf hist: Don't set hpp_fmt_value for members in --no-group
- perf sched timehist: Fixed timestamp error when unable to confirm event
sched_in time
- perf time-utils: Fix 32-bit nsec parsing
- perf mem: Check mem_events for all eligible PMUs
- perf mem: Fix missed p-core mem events on ADL and RPL
- clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
- clk: imx: imx6ul: fix default parent for enet*_ref_sel
- clk: imx: composite-8m: Enable gate clk with mcore_booted
- clk: imx: composite-93: keep root clock on when mcore enabled
- clk: imx: composite-7ulp: Check the PCC present bit
- clk: imx: fracn-gppll: fix fractional part of PLL getting lost
- clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
- clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
- clk: imx: imx8qxp: Parent should be initialized earlier than the clock
- quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
- remoteproc: imx_rproc: Correct ddr alias for i.MX8M
- remoteproc: imx_rproc: Initialize workqueue earlier
- clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
- clk: qcom: dispcc-sm8550: fix several supposed typos
- clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
- clk: qcom: dispcc-sm8650: Update the GDSC flags
- clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
- leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
- pinctrl: renesas: rzg2l: Return -EINVAL if the pin doesn't support
PIN_CFG_OEN
- pinctrl: ti: ti-iodelay: Fix some error handling paths
- phy: phy-rockchip-samsung-hdptx: Explicitly include pm_runtime.h
- Input: ilitek_ts_i2c - avoid wrong input subsystem sync
- Input: ilitek_ts_i2c - add report id message validation
- media: raspberrypi: VIDEO_RASPBERRYPI_PISP_BE should depend on ARCH_BCM2835
- [Config] updateconfigs for VIDEO_RASPBERRYPI_PISP_BE
- PCI: Wait for Link before restoring Downstream Buses
- firewire: core: correct range of block for case of switch statement
- media: staging: media: starfive: camss: Drop obsolete return value
documentation
- clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
- clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
- leds: pca995x: Use device_for_each_child_node() to access device child nodes
- leds: pca995x: Fix device child node usage in pca995x_probe()
- x86/PCI: Check pcie_find_root_port() return for NULL
- PCI: xilinx-nwl: Fix register misspelling
- PCI: xilinx-nwl: Clean up clock on probe failure/removal
- leds: gpio: Set num_leds after allocation
- media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
- pinctrl: single: fix missing error code in pcs_probe()
- clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
- iommufd/selftest: Fix buffer read overrrun in the dirty test
- RDMA/bnxt_re: Fix the table size for PSN/MSN entries
- media: imagination: VIDEO_E5010_JPEG_ENC should depend on ARCH_K3
- [Config] updateconfigs for VIDEO_E5010_JPEG_ENC
- RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
- clk: ti: dra7-atl: Fix leak of of_nodes
- clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync()
usage
- clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
- nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
- nfsd: fix refcount leak when file is unhashed after being found
- pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
- dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with
fsl,lx2160ar2-pcie
- iommufd: Check the domain owner of the parent before creating a nesting
domain
- RDMA/erdma: Return QP state in erdma_query_qp
- RDMA/mlx5: Fix counter update on MR cache mkey creation
- RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
- RDMA/mlx5: Drop redundant work canceling from clean_keys()
- RDMA/mlx5: Fix MR cache temp entries cleanup
- watchdog: imx_sc_wdt: Don't disable WDT in suspend
- RDMA/hns: Don't modify rq next block addr in HIP09 QPC
- RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
- RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
- RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
- RDMA/hns: Optimize hem allocation performance
- RDMA/hns: Fix restricted __le16 degrades to integer issue
- Input: ims-pcu - fix calling interruptible mutex
- RDMA/mlx5: Obtain upper net device only when needed
- PCI: qcom-ep: Enable controller resources like PHY only after refclk is
available
- riscv: Fix fp alignment bug in perf_callchain_user()
- RDMA/hns: Fix ah error counter in sw stat not increasing
- RDMA/irdma: fix error message in irdma_modify_qp_roce()
- ntb_perf: Fix printk format
- ntb: Force physically contiguous allocation of rx ring buffers
- nfsd: untangle code in nfsd4_deleg_getattr_conflict()
- nfsd: fix initial getattr on write delegation
- crypto: caam - Pad SG length when allocating hash edesc
- crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
- [Config] disable CRYPTO_AES_GCM_P10
- f2fs: atomic: fix to avoid racing w/ GC
- f2fs: reduce expensive checkpoint trigger frequency
- f2fs: fix to avoid racing in between read and OPU dio write
- f2fs: Create COW inode from parent dentry for atomic write
- f2fs: fix to wait page writeback before setting gcing flag
- f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
- f2fs: compress: don't redirty sparse cluster during {,de}compress
- f2fs: prevent atomic file from being dirtied before commit
- spi: airoha: fix dirmap_{read,write} operations
- spi: airoha: fix airoha_snand_{write,read}_data data_len estimation
- spi: atmel-quadspi: Undo runtime PM changes at driver exit time
- spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
- lib/sbitmap: define swap_lock as raw_spinlock_t
- spi: airoha: remove read cache in airoha_snand_dirmap_read()
- spi: atmel-quadspi: Avoid overwriting delay register settings
- NFSv4.2: Fix detection of "Proxying of Times" server support
- nvme-multipath: system fails to create generic nvme device
- iio: adc: ad7606: fix oversampling gpio array
- iio: adc: ad7606: fix standby gpio state to match the documentation
- driver core: Fix error handling in driver API device_rename()
- ABI: testing: fix admv8818 attr description
- iio: chemical: bme680: Fix read/write ops to device by adding mutexes
- iio: magnetometer: ak8975: drop incorrect AK09116 compatible
- dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
- serial: 8250: omap: Cleanup on error in request_irq
- Coresight: Set correct cs_mode for TPDM to fix disable issue
- Coresight: Set correct cs_mode for dummy source to fix disable issue
- coresight: tmc: sg: Do not leak sg_table
- interconnect: icc-clk: Add missed num_nodes initialization
- interconnect: qcom: sm8250: Enable sync_state
- dm integrity: fix gcc 5 warning
- cxl/pci: Fix to record only non-zero ranges
- um: remove ARCH_NO_PREEMPT_DYNAMIC
- Revert "dm: requeue IO if mapping table not yet available"
- net: phy: aquantia: fix -ETIMEDOUT PHY probe failure when firmware not
present
- net: xilinx: axienet: Schedule NAPI in two steps
- net: xilinx: axienet: Fix packet counting
- net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
- net: qrtr: Update packets cloning when broadcasting
- net: phy: aquantia: fix setting active_low bit
- net: phy: aquantia: fix applying active_low bit after reset
- net: ravb: Fix maximum TX frame size for GbEth devices
- net: ravb: Fix R-Car RX frame size limit
- virtio_net: Fix mismatched buf address when unmapping for small packets
- netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
- netfilter: ctnetlink: compile ctnetlink_label_size with
CONFIG_NF_CONNTRACK_EVENTS
- netfilter: nf_tables: use rcu chain hook list iterator from netlink dump
path
- netfilter: nf_tables: missing objects with no memcg accounting
- selftests: netfilter: Avoid hanging ipvs.sh
- io_uring/sqpoll: do not allow pinning outside of cpuset
- io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
- io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
- mm: migrate: annotate data-race in migrate_folio_unmap()
- drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
- drm/amd/display: Add DSC Debug Log
- drm/amdgpu/display: Fix a mistake in revert commit
- xen: move checks for e820 conflicts further up
- xen: allow mapping ACPI data using a different physical address
- io_uring/sqpoll: retain test for whether the CPU is valid
- drm/amd/display: disable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc
before using it
- io_uring/sqpoll: do not put cpumask on stack
- selftests/bpf: correctly move 'log' upon successful match
- Remove *.orig pattern from .gitignore
- PCI: Revert to the original speed after PCIe failed link retraining
- PCI: Clear the LBMS bit after a link retrain
- PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
- PCI: imx6: Fix missing call to phy_power_off() in error handling
- PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP
- PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI
- PCI: Correct error reporting with PCIe failed link retraining
- PCI: Use an error code with PCIe failed link retraining
- PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
- PCI: dra7xx: Fix error handling when IRQ request fails in probe
- Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
- ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
- soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
- soc: fsl: cpm1: tsa: Fix tsa_write8()
- soc: versatile: integrator: fix OF node leak in probe() error path
- Revert "media: tuners: fix error return code of
hybrid_tuner_request_state()"
- iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all()
- Input: adp5588-keys - fix check on return code
- Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
- Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
- Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
- KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
- KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
- KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
- KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
- drm/amdgpu/mes12: reduce timeout
- drm/amdgpu/mes11: reduce timeout
- drm/amdkfd: Add SDMA queue quantum support for GFX12
- drm/amdgpu: update golden regs for gfx12
- drm/amdgpu/mes12: set enable_level_process_quantum_check
- drm/amdgpu/vcn: enable AV1 on both instances
- drm/amd/pm: update workload mask after the setting
- drm/amdgpu: fix PTE copy corruption for sdma 7
- drm/amdgpu: bump driver version for cleared VRAM
- drm/amdgpu/mes12: switch SET_SHADER_DEBUGGER pkt to mes schq pipe
- drm/amdgpu: Fix selfring initialization sequence on soc24
- drm/amd/display: Add HDMI DSC native YCbCr422 support
- drm/amd/display: Round calculated vtotal
- drm/amd/display: Clean up dsc blocks in accelerated mode
- drm/amd/display: Block timing sync for different output formats in pmo
- drm/amd/display: Validate backlight caps are sane
- drm/amd/display: Disable SYMCLK32_LE root clock gating
- drm/amd/display: Block dynamic IPS2 on DCN35 for incompatible FW versions
- drm/amd/display: Enable DML2 override_det_buffer_size_kbytes
- drm/amd/display: Skip to enable dsc if it has been off
- drm/amd/display: Fix underflow when setting underscan on DCN401
- drm/amd/display: Update IPS default mode for DCN35/DCN351
- objtool: Handle frame pointer related instructions
- powerpc/atomic: Use YZ constraints for DS-form instructions
- ksmbd: make __dir_empty() compatible with POSIX
- ksmbd: allow write with FILE_APPEND_DATA
- ksmbd: handle caseless file creation
- ata: libata-scsi: Fix ata_msense_control() CDL page reporting
- scsi: ufs: qcom: Update MODE_MAX cfg_bw value
- scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs
- scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
- scsi: mac_scsi: Refactor polling loop
- scsi: mac_scsi: Disallow bus errors during PDMA send
- can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
- wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
- usbnet: fix cyclical race on disconnect with work queue
- arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
- arm64: dts: mediatek: mt8395-nio-12l: Mark USB 3.0 on xhci1 as disabled
- USB: appledisplay: close race between probe and completion handler
- USB: misc: cypress_cy7c63: check for short transfer
- USB: class: CDC-ACM: fix race between get_serial and set_serial
- USB: misc: yurex: fix race between read and write
- usb: xhci: fix loss of data on Cadence xHC
- usb: cdnsp: Fix incorrect usb_request status
- usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
- usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
- usb: dwc2: drd: fix clock gating on USB role switch
- bus: integrator-lm: fix OF node leak in probe()
- bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems
- bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
- tty: rp2: Fix reset with non forgiving PCIe host bridges
- pps: add an error check in parport_attach
- serial: don't use uninitialized value in uart_poll_init()
- xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
- serial: qcom-geni: fix fifo polling timeout
- serial: qcom-geni: fix false console tx restart
- crypto: qcom-rng - fix support for ACPI-based systems
- crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
- drbd: Fix atomicity violation in drbd_uuid_set_bm()
- drbd: Add NULL check for net_conf to prevent dereference in state validation
- ACPI: resource: Do IRQ override on MECHREV GM7XG0M
- ACPI: resource: Add another DMI match for the TongFang GMxXGxx
- intel_idle: add Granite Rapids Xeon support
- intel_idle: fix ACPI _CST matching for newer Xeon platforms
- x86/entry: Remove unwanted instrumentation in common_interrupt()
- perf/x86/intel: Allow to setup LBR for counting event for BPF
- perf/x86/intel/pt: Fix sampling synchronization
- btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
- wifi: mt76: mt7921: Check devm_kasprintf() returned value
- wifi: mt76: mt7915: check devm_kasprintf() returned value
- idpf: fix netdev Tx queue stop/wake
- wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
- wifi: rtw88: 8822c: Fix reported RX band width
- wifi: rtw88: 8703b: Fix reported RX band width
- wifi: mt76: mt7615: check devm_kasprintf() returned value
- wifi: mt76: mt7925: fix a potential association failure upon resuming
- debugfs show actual source in /proc/mounts
- debugobjects: Fix conditions in fill_pool()
- btrfs: tree-checker: fix the wrong output of data backref objectid
- btrfs: always update fstrim_range on failure in FITRIM ioctl
- f2fs: fix several potential integer overflows in file offsets
- f2fs: prevent possible int overflow in dir_block_index()
- f2fs: avoid potential int overflow in sanity_check_area_boundary()
- hwrng: mtk - Use devm_pm_runtime_enable
- hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
- hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
- arm64: esr: Define ESR_ELx_EC_* constants as UL
- arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
- arm64: dts: mediatek: mt8186-corsola: Disable DPI display interface
- arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
- arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
- arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
- fs: Fix file_set_fowner LSM hook inconsistencies
- nfs: fix memory leak in error path of nfs4_do_reclaim
- EDAC/igen6: Fix conversion of system address to physical memory address
- eventpoll: Annotate data-race of busy_poll_usecs
- md: Don't flush sync_work in md_write_start()
- cpuidle: riscv-sbi: Use scoped device node handling to fix missing
of_node_put
- lsm: add the inode_free_security_rcu() LSM implementation hook
- spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
- dt-bindings: spi: nxp-fspi: add imx8ulp support
- ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
- ARM: dts: imx6ull-seeed-npi: fix fsl,pins property in tscgrp pinctrl
- tools/nolibc: include arch.h from string.h
- soc: versatile: realview: fix memory leak during device remove
- soc: versatile: realview: fix soc_dev leak during device remove
- usb: typec: ucsi: Call CANCEL from single location
- usb: typec: ucsi: Fix busy loop on ASUS VivoBooks
- soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
- serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
- serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
- serial: qcom-geni: fix console corruption
- thermal: core: Store trip sysfs attributes in thermal_trip_desc
- thermal: sysfs: Get to trips via attribute pointers
- thermal: sysfs: Refine the handling of trip hysteresis changes
- thermal: sysfs: Add sanity checks for trip temperature and hysteresis
- bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
- compiler.h: specify correct attribute for .rodata..c_jump_table
- lockdep: fix deadlock issue between lockdep and rcu
- mm/hugetlb_vmemmap: batch HVO work when demoting
- s390/ftrace: Avoid calling unwinder in ftrace_return_address()
- selftest mm/mseal: fix test_seal_mremap_move_dontunmap_anyaddr
- mm: only enforce minimum stack gap size if it's sensible
- spi: fspi: add support for imx8ulp
- module: Fix KCOV-ignored file name
- fbdev: xen-fbfront: Assign fb_info->device
- tpm: export tpm2_sessions_init() to fix ibmvtpm building
- mm/huge_memory: ensure huge_zero_folio won't have large_rmappable flag set
- mm: change vmf_anon_prepare() to __vmf_anon_prepare()
- mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu
read lock
- i2c: aspeed: Update the stop sw state when the bus recovery occurs
- i2c: isch: Add missed 'else'
- i2c: xiic: Try re-initialization on bus busy timeout
- Documentation: KVM: fix warning in "make htmldocs"
- spi: atmel-quadspi: Fix wrong register value written to MR
- Revert: "dm-verity: restart or panic on an I/O error"
- Linux 6.11.2
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47675
- bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47676
- mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47677
- exfat: resolve memory leak from exfat_create_upcase_table()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47725
- dm-verity: restart or panic on an I/O error
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47739
- padata: use integer wrap around to prevent deadlock on seq_nr overflow
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47678
- icmp: change the order of rate limits
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47733
- netfs: Delete subtree of 'fs/netfs' when netfs module exits
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47679
- vfs: fix race between evice_inodes() and find_inode()&iput()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49859
- f2fs: fix to check atomic_file in f2fs ioctl interfaces
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47680
- f2fs: check discard support for conventional zones
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47740
- f2fs: Require FMODE_WRITE for atomic write ioctls
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47726
- f2fs: fix to wait dio completion
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47741
- btrfs: fix race setting file private on concurrent lseek using same fd
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47681
- wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49858
- efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49860
- ACPI: sysfs: validate return type of _STR method
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47742
- firmware_loader: Block path traversal
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47682
- scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47743
- KEYS: prevent NULL pointer dereference in find_asymmetric_key()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47727
- x86/tdx: Fix "in-kernel MMIO" check
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47744
- KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47719
- iommufd: Protect against overflow of ALIGN() during iova allocation
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47745
- mm: call the security_mmap_file() LSM hook in remap_file_pages()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47746
- fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47734
- bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47684
- tcp: check skb is non-NULL in tcp_rto_delta_us()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47747
- net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
Condition
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47685
- netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47686
- ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47748
- vhost_vdpa: assign irq bypass producer token correctly
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47687
- vdpa/mlx5: Fix invalid mr resource destroy
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47688
- driver core: Fix a potential null-ptr-deref in module_add_driver()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47689
- f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47690
- f2fs: get rid of online repaire on corrupted directory
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47691
- f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47692
- nfsd: return -EINVAL when namelen is 0
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47737
- nfsd: call cache_put if xdr_reserve_space returns NULL
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2023-52917
- ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47749
- RDMA/cxgb4: Added NULL check for lookup_atid
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47735
- RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47750
- RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47751
- PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47693
- IB/core: Fix ib_cache_setup_one error flow cleanup
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47694
- IB/mlx5: Fix UMR pd cleanup on error flow of driver init
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47695
- RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47752
- media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47753
- media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47754
- media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47696
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47755
- nvdimm: Fix devs leaks in scan_labels()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47756
- PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47697
- drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47698
- drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47728
- bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49861
- bpf: Fix helper writes to read-only maps
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47757
- nilfs2: fix potential oob read in nilfs_btree_check_delete()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47699
- nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47700
- ext4: check stripe size compatibility on remount as well
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47701
- ext4: avoid OOB when system.data xattr changes underneath the filesystem
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49850
- bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47702
- bpf: Fail verification for sign-extension of packet data/data_end/data_meta
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47703
- bpf, lsm: Add check for BPF LSM return value
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49851
- tpm: Clean up TPM space after command failure
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47723
- jfs: fix out-of-bounds in dbNextAG() and diAlloc()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49852
- scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47720
- drm/amd/display: Add null check for set_output_gamma in
dcn30_set_output_transfer_func
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47704
- drm/amd/display: Check link_res->hpo_dp_link_enc before using it
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49853
- firmware: arm_scmi: Fix double free in OPTEE transport
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47705
- block: fix potential invalid pointer dereference in blk_add_partition
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47736
- erofs: handle overlapped pclusters out of crafted images properly
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47706
- block, bfq: fix possible UAF for bfqq->bic with merge chain
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49855
- nbd: fix race between timeout and normal completion
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47707
- ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47708
- netkit: Assign missing bpf_net_context
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47709
- can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47710
- sock_map: Add a cond_resched() in sock_hash_free()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47711
- af_unix: Don't return OOB skb in manage_oob().
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47712
- wifi: wilc1000: fix potential RCU dereference issue in
wilc_parse_join_bss_param
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47713
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47730
- crypto: hisilicon/qm - inject error before stopping queue
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49856
- x86/sgx: Fix deadlock in SGX NUMA node search
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47714
- wifi: mt76: mt7996: use hweight16 to get correct tx antenna
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47715
- wifi: mt76: mt7915: fix oops on non-dbdc mt7986
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49857
- wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47738
- wifi: mac80211: don't use rate mask for offchannel TX either
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47731
- drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-49862
- powercap: intel_rapl: Fix off by one in get_rpi()
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47716
- ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47717
- RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47721
- wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to
prevent out-of-bounds reading
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47732
- crypto: iaa - Fix potential use after free bug
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47718
- wifi: rtw88: always wait for both firmware loading attempts
* Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
CVE-2024-47724
- wifi: ath11k: use work queue to process beacon tx event
* Oracular update: v6.11.1 upstream stable release (LP: #2089020)
- powercap/intel_rapl: Add support for AMD family 1Ah
- powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs
- cpufreq/amd-pstate: Add the missing cpufreq_cpu_put()
- netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in
nft_socket_cgroup_subtree_level()
- ASoC: amd: acp: add ZSC control register programming sequence
- nvme-pci: qdepth 1 quirk
- USB: serial: pl2303: add device id for Macrosilicon MS3020
- powercap: intel_rapl: Change an error pointer to NULL
- Linux 6.11.1
* Oracular update: v6.11.1 upstream stable release (LP: #2089020) //
CVE-2024-47671
- USB: usbtmc: prevent kernel-usb-infoleak
* Oracular update: v6.11.1 upstream stable release (LP: #2089020) //
CVE-2024-46869
- Bluetooth: btintel_pcie: Allocate memory for driver private data
* CVE-2024-53164
- net: sched: fix ordering of qlen adjustment
* CVE-2024-53103
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
linux-hwe-6.11 (6.11.0-14.15~24.04.1) noble; urgency=medium
* noble/linux-hwe-6.11: 6.11.0-14.15~24.04.1 -proposed tracker (LP: #2093481)
[ Ubuntu: 6.11.0-14.15 ]
* oracular/linux: 6.11.0-14.15 -proposed tracker (LP: #2093483)
* CVE-2024-53164
- net: sched: fix ordering of qlen adjustment
* CVE-2024-53103
- hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer
linux-hwe-6.11 (6.11.0-13.14~24.04.1) noble; urgency=medium
* noble/linux-hwe-6.11: 6.11.0-13.14~24.04.1 -proposed tracker (LP: #2090459)
* Commit "net/mlx5e: Don't offload internal port if filter device is out
device" breaks OpenStack/OVN distributed gateway use case (LP: #2085018)
- SAUCE: net/mlx5e: Remove workaround to avoid syndrome for internal port
[ Ubuntu: 6.11.0-13.14 ]
* oracular/linux: 6.11.0-13.14 -proposed tracker (LP: #2090463)
* Packaging resync (LP: #1786013)
- [Packaging] resync git-ubuntu-log
* MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure
(LP: #2087886)
- mm/mglru: only clear kswapd_failures if reclaimable
* CVE-2024-50264
- vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
* CVE-2024-53057
- net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
* CVE-2024-49967
- ext4: no need to continue when the number of entries is 1
Date: 2025-01-20 20:57:33.834773+00:00
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/+source/linux-hwe-6.11/6.11.0-17.17~24.04.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list