# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-309.180.3.el9uek]
changelog:
  - net/mlx5: Reclaim max 50K pages at once (Anand Khoje) [Orabug: 36933755]
  - x86/sev: Fix position dependent variable references in startup code (Ard Biesheuvel) [Orabug: 37356711]
  - x86/PCI: Export find_cap() to be used in early PCI code (Rayan Dasoriya) [Orabug: 37356711]
  - x86/quirks: Scan all busses for early PCI quirks (Rayan Dasoriya) [Orabug: 37356711]
  - x86/quirks: Add parameter to clear MSIs early on boot (Rayan Dasoriya) [Orabug: 37356711]
  - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (Vasant Hegde) [Orabug: 37356711]
  - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (Vasant Hegde) [Orabug: 37356711]
  - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (Vasant Hegde) [Orabug: 37356711]
  - iommu/amd: Use put_pages_list (Matthew Wilcox) [Orabug: 37356711]
  - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (Steve Rutherford) [Orabug: 37356711]
  - iommu/amd: Simplify pagetable freeing (Robin Murphy) [Orabug: 37356711]
  - x86/kvm: Add kexec support for SEV Live Migration. (Ashish Kalra) [Orabug: 37356711]
  - nfsd: allow layout state to be admin-revoked. (Neil Brown) [Orabug: 37644985]
  - nfsd: allow delegation state ids to be revoked and then freed (Neil Brown) [Orabug: 37644985]
  - nfsd: allow open state ids to be revoked and then freed (Neil Brown) [Orabug: 37644985]
  - nfsd: allow lock state ids to be revoked and then freed (Neil Brown) [Orabug: 37644985]
  - nfsd: allow admin-revoked NFSv4.0 state to be freed. (Neil Brown) [Orabug: 37644985]
  - nfsd: report in /proc/fs/nfsd/clients/*/states when state is admin-revoke (Neil Brown) [Orabug: 37644985]
  - nfsd: allow state with no file to appear in /proc/fs/nfsd/clients/*/states (Neil Brown) [Orabug: 37644985]
  - nfsd: prepare for supporting admin-revocation of state (Neil Brown) [Orabug: 37644985]
  - nfsd: split sc_status out of sc_type (Neil Brown) [Orabug: 37644985]
  - nfsd: remove stale comment in nfs4_show_deleg() (Neil Brown) [Orabug: 37644985]
  - nfsd: avoid race after unhash_delegation_locked() (Neil Brown) [Orabug: 37644985]
  - nfsd: don't call functions with side-effecting inside WARN_ON() (Neil Brown) [Orabug: 37644985]
  - NFSD: Add nfsd_seq4_status trace event (Chuck Lever) [Orabug: 37644985]
  - NFSD: Clean up nfsd4_encode_layoutreturn() (Chuck Lever) [Orabug: 37644985]
  - NFSD: Make @lgp parameter of ->encode_layoutget a const pointer (Chuck Lever) [Orabug: 37644985]
  - NFSD: Clean up nfsd4_encode_stateid() (Chuck Lever) [Orabug: 37644985]
  - NFSD: Add simple u32, u64, and bool encoders (Chuck Lever) [Orabug: 37644985]
  - NFSD: Add encoders for NFSv4 clientids and verifiers (Chuck Lever) [Orabug: 37644985]
  - nfsd: add some kerneldoc comments for stateid preprocessing functions (Jeff Layton) [Orabug: 37644985]
  - nfsd: eliminate find_deleg_file_locked (Jeff Layton) [Orabug: 37644985]
  - nfsd: fix potential race in nfs4_find_file (Jeff Layton) [Orabug: 37644985]
  - vhost-scsi: Fix vhost_scsi_send_status() (Dongli Zhang) [Orabug: 37840544]
  - vhost-scsi: Fix vhost_scsi_send_bad_target() (Dongli Zhang) [Orabug: 37840544]
  - vhost-scsi: protect vq->log_used with vq->mutex (Dongli Zhang) [Orabug: 37840544,38095126] {CVE-2025-38074}
  - vhost-scsi: Reduce response iov mem use (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Allocate iov_iter used for unaligned copies when needed (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Stop duplicating se_cmd fields (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Dynamically allocate scatterlists (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Return queue full for page alloc failures during copy (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Add better resource allocation failure handling (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Allocate T10 PI structs only when enabled (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Reduce mem use by moving upages to per queue (Mike Christie) [Orabug: 37840544]
  - scsi: target: core: Use RCU helpers for INQUIRY t10_alua_tg_pt_gp (Mike Christie) [Orabug: 37840544]
  - scsi: target: Perform ALUA group changes in one step (Mike Christie) [Orabug: 37840544]
  - scsi: target: Replace lun_tg_pt_gp_lock with rcu in I/O path (Mike Christie) [Orabug: 37840544]
  - scsi: target: Fix write perf due to unneeded throttling (Mike Christie) [Orabug: 37840544]
  - vhost scsi: Allow user to control num virtqueues (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: Rename vhost_scsi_iov_to_sgl (Mike Christie) [Orabug: 37840544]
  - vhost-scsi: unbreak any layout for response (Jason Wang) [Orabug: 37840544]
  - Revert "vhost-scsi: protect vq->log_base with vq->mutex" (Mike Christie) [Orabug: 37840544]
  - Revert "vhost_scsi: log write descriptors" (Mike Christie) [Orabug: 37840544]
  - x86/bugs: Enabling Retbleed and SRSO mitigation can taint the kernel (Alexandre Chartre) [Orabug: 37945824]
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Pawan Gupta) [Orabug: 37945831]
  - x86/bpf: Add IBHF call at end of classic BPF (Daniel Sneddon) [Orabug: 37945831]
  - x86/bpf: Call branch history clearing sequence on exit (Daniel Sneddon) [Orabug: 37945831]
  - selftest/x86/bugs: Add selftests for ITS (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Pawan Gupta) [Orabug: 37945842] {CVE-2024-28956}
  - x86/alternatives: Remove faulty optimization (Josh Poimboeuf) [Orabug: 37945842] {CVE-2024-28956}
  - x86/alternative: Optimize returns patching (Borislav Petkov) [Orabug: 37945842] {CVE-2024-28956}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-309.180.4.el9uek]
changelog:
  - nvme: unblock ctrl state transition for firmware update (Daniel Wagner)
  - nfsd: decrease sc_count directly if fail to queue dl_recall (Li Lingfeng) [Orabug: 37938121] {CVE-2025-37871}
  - cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS (Rafael J. Wysocki)
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Luoxuanqiang) [Orabug: 37976780] {CVE-2025-37912}
  - usb: chipidea: ci_hdrc_imx: fix usbmisc handling (Fedor Pchelkin) [Orabug: 37938106] {CVE-2025-37811}
  - Revert "PCI: Avoid reset when disabled via sysfs" (Alex Williamson)
  - uek-rpm: CONFIG_PTP_1588_CLOCK_OCP enable for OCI (Vijayendra Suman) [Orabug: 37777354]
  - ptp: ocp: let ptp core report driver name instead of the drivers (Vijayendra Suman) [Orabug: 37777354]
  - ptp: ocp: Add .getmaxphase ptp_clock_info callback (Rahul Rameshbabu) [Orabug: 37777354]
  - ptp: ocp: remove flash image header check fallback (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: expose config and temperature for ART card (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: add serial port of mRO50 MAC on ART card (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: add Orolia timecard support (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: upgrade serial line information (Vadim Fedorenko) [Orabug: 37777354]
  - ] ptp: ocp: remove symlink for second GNSS (Vadim Fedorenko) [Orabug: 37777354]
  - ptp_ocp: use device_find_any_child() instead of custom approach (Andy Shevchenko) [Orabug: 37777354]
  - ptp_ocp: replace kzalloc(x*y) by kcalloc(y, x) (Andy Shevchenko) [Orabug: 37777354]
  - ptp_ocp: do not call pci_set_drvdata(pdev, NULL) (Andy Shevchenko) [Orabug: 37777354]
  - ptp_ocp: drop duplicate NULL check in ptp_ocp_detach() (Andy Shevchenko) [Orabug: 37777354]
  - ptp_ocp: use bits.h macros for all masks (Andy Shevchenko) [Orabug: 37777354]
  - ptp: ocp: Add firmware header checks (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: fix PPS source selector debugfs reporting (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: add .init function for sma_op vector (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: vectorize the sma accessor functions (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: constify selectors (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: parameterize input/output sma selectors (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: revise firmware display (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: add Celestica timecard PCI ids (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: Remove #ifdefs around PCI IDs (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: 32-bit fixups for pci start address (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: change sysfs attr group handling (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: have adjtime handle negative delta_ns correctly (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Use DIV64_U64_ROUND_UP for rounding. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: handle error from nvmem_device_find (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: use snprintf() in ptp_ocp_verify() (Dan Carpenter) [Orabug: 37777354]
  - ptp: ocp: Make debugfs variables the correct bitwidth (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Fix PTP_PF_* verification requests (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add 2 more timestampers (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add 4 frequency counters (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Program the signal generators via PTP_CLK_REQ_PEROUT (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add signal generators and update sysfs nodes (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add firmware capability bits for feature gating (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add GND and VCC output selectors (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Rename output selector 'GNSS' to 'GNSS1' (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add ability to disable input selectors. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add support for selectable SMA directions. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: add UPF_NO_THRE_TEST flag for serial ports (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Update devlink firmware display path. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: add nvmem interface for accessing eeprom (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: correct label for error path (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: off by in in ptp_ocp_tod_gnss_name() (Dan Carpenter) [Orabug: 37777354]
  - ptp: ocp: Add serial port information to the debug summary (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: adjust utc_tai_offset to TOD info (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: add tod_correction attribute (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: Expose clock status drift and offset (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: add TOD debug information (Vadim Fedorenko) [Orabug: 37777354]
  - ptp: ocp: Add ptp_ocp_adjtime_coarse for large adjustments (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Move devlink registration to be last devlink command (Leon Romanovsky) [Orabug: 37777354]
  - ptp: ocp: Avoid operator precedence warning in ptp_ocp_summary_show() (Nathan Chancellor) [Orabug: 37777354]
  - ptp: ocp: Add timestamp window adjustment (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Have FPGA fold in ns adjustment for adjtime. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Enable 4th timestamper / PPS generator (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add second GNSS device (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add NMEA output (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add debugfs entry for timecard (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Separate the init and info logic (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add sysfs attribute utc_tai_offset (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add IRIG-B output mode control (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add IRIG-B and DCF blocks (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add SMA selector and controls (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Add third timestamper (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Report error if resource registration fails. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Skip resources with out of range irqs (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Skip I2C flash read when there is no controller. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: Parameterize the TOD information display. (Jonathan Lemon) [Orabug: 37777354]
  - ptp: ocp: parameterize the i2c driver used (Jonathan Lemon) [Orabug: 37777354]
  - vhost-scsi: log event queue write descriptors (Dongli Zhang) [Orabug: 37884058]
  - vhost-scsi: log control queue write descriptors (Dongli Zhang) [Orabug: 37884058]
  - vhost-scsi: log I/O queue write descriptors (Dongli Zhang) [Orabug: 37884058]
  - vhost-scsi: adjust vhost_scsi_get_desc() to log vring descriptors (Dongli Zhang) [Orabug: 37884058]
  - vhost: modify vhost_log_write() for broader users (Dongli Zhang) [Orabug: 37884058]
  - mm: make page_mapped_in_vma() hugetlb walk aware (Jane Chu) [Orabug: 37956589]
  - mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk (Zhenwei Pi) [Orabug: 37956589]
  - ext4: update the backup superblock's at the end of the online resize (Theodore Ts'O) [Orabug: 37356729]
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington) [Orabug: 37356729]
  - gve: update gve.rst (Rushil Gupta) [Orabug: 37356729]
  - gve: RX path for DQO-QPL (Rushil Gupta) [Orabug: 37356729]
  - gve: Tx path for DQO-QPL (Rushil Gupta) [Orabug: 37356729]
  - gve: Control path for DQO-QPL (Rushil Gupta) [Orabug: 37356729]
  - gve: Fix gve interrupt names (Praveen Kaligineedi) [Orabug: 37356729]
  - gve: Handle alternate miss completions (Jeroen de Borst) [Orabug: 37356729]
  - gve: Adding a new AdminQ command to verify driver (Jeroen de Borst) [Orabug: 37356729]
  - gve: Fix error return code in gve_prefill_rx_pages() (Yang Yingliang) [Orabug: 37356729]
  - gve: Reduce alloc and copy costs in the GQ rx path (Shailend Chand) [Orabug: 37356729]
  - google/gve:fix repeated words in comments (Jilin Yuan) [Orabug: 37356729]
  - gve: Fix spelling mistake "droping" -> "dropping" (Colin Ian King) [Orabug: 37356729]
  - gve: enhance no queue page list detection (Haiyue Wang) [Orabug: 37356729]
  - gve: Recording rx queue before sending to napi (Tao Liu) [Orabug: 37356729]
  - ext4: add ioctls to get/set the ext4 superblock uuid (Jeremy Bongio) [Orabug: 37356729]
  - ext4: implement support for get/set fs label (Lukas Czerner) [Orabug: 37356729]
  - gve: Add tx|rx-coalesce-usec for DQO (Tao Liu) [Orabug: 37356729]
  - gve: Add consumed counts to ethtool stats (Jordan Kim) [Orabug: 37356729]
  - gve: Implement suspend/resume/shutdown (Catherine Sullivan) [Orabug: 37356729]
  - gve: Add optional metadata descriptor type GVE_TXD_MTD (Willem de Bruijn) [Orabug: 37356729]
  - gve: remove memory barrier around seqno (Catherine Sullivan) [Orabug: 37356729]
  - gve: Update gve_free_queue_page_list signature (Catherine Sullivan) [Orabug: 37356729]
  - gve: Move the irq db indexes out of the ntfy block struct (Catherine Sullivan) [Orabug: 37356729]
  - gve: Correct order of processing device options (Jeroen de Borst) [Orabug: 37356729]
  - gve: fix for null pointer dereference. (Ameer Hamza) [Orabug: 37356729]
  - gve: fix unmatched u64_stats_update_end() (Dan Carpenter) [Orabug: 37356729]
  - gve: Add a jumbo-frame device option. (Shailend Chand) [Orabug: 37356729]
  - gve: Implement packet continuation for RX. (David Awogbemila) [Orabug: 37356729]
  - gve: Allow pageflips on larger pages (Jordan Kim) [Orabug: 37356729]
  - gve: Add netif_set_xps_queue call (Catherine Sullivan) [Orabug: 37356729]
  - gve: Do lazy cleanup in TX path (Tao Liu) [Orabug: 37356729]
  - gve: Add rx buffer pagecnt bias (Catherine Sullivan) [Orabug: 37356729]
  - gve: Switch to use napi_complete_done (Yanchun Fu) [Orabug: 37356729]
  - gve: Use kvcalloc() instead of kvzalloc() (Gustavo A R Silva) [Orabug: 37356729]
  - selftests/net: optmem_max became per netns (Eric Dumazet) [Orabug: 37356732]
  - tcp: derive delack_max with tcp_rto_min helper (Kevin Yang) [Orabug: 37356732]
  - tcp: derive delack_max from rto_min (Eric Dumazet) [Orabug: 37356732]
  - tcp: add sysctl_tcp_rto_min_us (Kevin Yang) [Orabug: 37356732]
  - tcp: constify tcp_rto_min() and tcp_rto_min_us() argument (Eric Dumazet) [Orabug: 37356732]
  - net: constify sk_dst_get() and __sk_dst_get() argument (Eric Dumazet) [Orabug: 37356732]
  - net: Namespace-ify sysctl_optmem_max (Eric Dumazet) [Orabug: 37356732]
  - net: increase optmem_max default value (Eric Dumazet) [Orabug: 37356732]
  - net: phy: dp83867: Fix SGMII FIFO depth for non OF devices (Michael Sit Wei Hong) [Orabug: 37670821]
  - net: phy: dp83867: fix get nvmem cell fail (Nikita Shubin) [Orabug: 37670821]
  - net: phy: dp83867: implement support for io_impedance_ctrl nvmem cell (Rasmus Villemoes) [Orabug: 37670821]
  - net: phy: constify netdev->dev_addr references (Jakub Kicinski) [Orabug: 37670821]
  - net: phy: dp83867: introduce critical chip default init for non-of platform (Lay, Kuan Loon) [Orabug: 37670821]
  - RDS: use pin_user_pages_fast() (Stephen Brennan) [Orabug: 37872748]
  - uek-rpm: Reduce the size of the Bluefield 3 kernel (Henry Willard) [Orabug: 37910874]
  - uek-rpm: Make sure dtb directory exists for emb3. (Henry Willard) [Orabug: 37910874]
  - uek-rpm: Move the gve kernel module from extra to kernel-uek-core (Samasth Norway Ananda) [Orabug: 37940898]
  - platform/mellanox: mlxbf-pmc: Support additional PMC blocks (Shravan Kumar Ramani) [Orabug: 37955981]
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [Orabug: 37955981,37989158] {CVE-2025-37866}
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (Xiangrong Li) [Orabug: 37955981]
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (Ai Chao) [Orabug: 37955981]
  - drivers/platform/mellanox: Convert snprintf to sysfs_emit (Li Zhijian) [Orabug: 37955981]
  - certs: Add new Oracle Linux Driver Signing (key 1) certificate (Sherry Yang) [Orabug: 37967553]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-310.180.1.el9uek]
changelog:
  - uek-rpm: Enable CONFIG_ACPI_THERMAL and other ACPI config for Bluefield 3 (Thomas Tai) [Orabug: 38007368]
  - dt-bindings: trivial-devices: add onnn,adt7462 (Chanh Nguyen) [Orabug: 38006900]
  - mailbox: pcc: Check before sending MCTP PCC response ACK (Adam Young) [Orabug: 38006900]
  - media: dt-bindings: Add OV5642 (Fabio Estevam) [Orabug: 38006900]
  - hwmon: (xgene) Migrate to use generic PCC shmem related macros (Sudeep Holla) [Orabug: 38006900]
  - i2c: xgene-slimpro: Migrate to use generic PCC shmem related macros (Sudeep Holla) [Orabug: 38006900]
  - ACPI: PCC: Add PCC shared memory region command and status bitfields (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Support shared interrupt for multiple subspaces (Huisong Li) [Orabug: 38006900]
  - mailbox: pcc: Add support for platform notification handling (Huisong Li) [Orabug: 38006900]
  - mailbox: pcc: Use mbox_bind_client (Elliot Berman) [Orabug: 38006900]
  - mailbox: omap: Use mbox_bind_client (Elliot Berman) [Orabug: 38006900]
  - mailbox: Allow direct registration to a channel (Elliot Berman) [Orabug: 38006900]
  - mailbox: pcc: Reset pcc_chan_count to zero in case of PCC probe failure (Huisong Li) [Orabug: 38006900]
  - mailbox: pcc: Fix spelling mistake "Plaform" -> "Platform" (Colin Ian King) [Orabug: 38006900]
  - mailbox: pcc: Fix an invalid-load caught by the address sanitizer (Mario Limonciello) [Orabug: 38006900]
  - mailbox: pcc: Handle all PCC subtypes correctly in pcc_mbox_irq (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Avoid using the uninitialized variable 'dev' (Sudeep Holla) [Orabug: 38006900]
  - ACPI/PCC: Add maintainer for PCC mailbox driver (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Move bulk of PCCT parsing into pcc_mbox_probe (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Add support for PCCT extended PCC subspaces(type 3/4) (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Drop handling invalid bit-width in {read,write}_register (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Avoid accessing PCCT table in pcc_send_data and pcc_mbox_irq (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Add PCC register bundle and associated accessor functions (Sudeep Holla) [Orabug: 38006900]
  - mailbox: pcc: Rename doorbell ack to platform interrupt ack register (Sudeep Holla) [Orabug: 38006900]
  - uek-rpm: Enable CONFIG_VITESSE_PHY for Bluefield 3 (Thomas Tai) [Orabug: 37985802]
  - x86/its: Fix build errors when CONFIG_MODULES=n (Eric Biggers) [Orabug: 37970165]
  - x86/its: Use dynamic thunks for indirect branches (Peter Zijlstra) [Orabug: 37970165]
  - x86/modules: Set VM_FLUSH_RESET_PERMS in module_alloc() (Thomas Gleixner) [Orabug: 37970165]
  - uek-rpm/config-aarch64: Enable BT_HCIUART_BCM for RPi Bluetooth (Vijay Kumar) [Orabug: 37960844]
  - x86/its: its_native_only bug is not correctly reported (Alexandre Chartre) [Orabug: 37960160]
  - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 37358844]
  - amd_hsmp: Increase the SMU timeout to 500ms (Vijay Kumar) [Orabug: 37266677]
  - bpf/bpf_get,set_sockopt: add option to set TCP-BPF sock ops flags (Alan Maguire) [Orabug: 36699198]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-310.184.2.el9uek]
changelog:
  - LTS version: v5.15.184 (Vijayendra Suman)
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [Orabug: 38071844] {CVE-2024-56655}
  - netfilter: nf_tables: wait for rcu grace period on net_device removal (Pablo Neira Ayuso)
  - netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx (Florian Westphal)
  - btrfs: do not clean up repair bio if submit fails (Josef Bacik)
  - btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (Filipe Manana) [Orabug: 37074536] {CVE-2024-46751}
  - sctp: add mutual exclusion in proc_sctp_do_udp_port() (Eric Dumazet) [Orabug: 37844338] {CVE-2025-22062}
  - selftests/mm: compaction_test: support platform with huge mount of memory (Feng Tang)
  - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control() (Gong, Ruiqi)
  - usb: typec: fix potential array underflow in ucsi_ccg_sync_control() (Dan Carpenter) [Orabug: 37433551] {CVE-2024-53203}
  - usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group (Rd Babiera) [Orabug: 36642199] {CVE-2024-35790}
  - usb: typec: ucsi: displayport: Fix deadlock (Andrei Kuchynski) [Orabug: 37977019] {CVE-2025-37967}
  - clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable() (Sebastian Andrzej Siewior)
  - block: fix direct io NOWAIT flag not work (Fengnan Chang)
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Shuai Xue)
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Shuai Xue)
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Yemike Abhilash Chandra)
  - dmaengine: ti: k3-udma: Add missing locking (Ronald Wahl) [Orabug: 38094757] {CVE-2025-38005}
  - wifi: mt76: disable napi on driver removal (Fedor Pchelkin) [Orabug: 38094771] {CVE-2025-38009}
  - phy: renesas: rcar-gen3-usb2: Set timing registers only once (Claudiu Beznea)
  - phy: Fix error handling in tegra_xusb_port_init (Ma Ke)
  - tracing: samples: Initialize trace_array_printk() with the correct function (Steven Rostedt)
  - ftrace: Fix preemption accounting for stacktrace filter command (Donglin Peng)
  - ftrace: Fix preemption accounting for stacktrace trigger command (Donglin Peng)
  - ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera (Nicolas Chauvet)
  - ALSA: usb-audio: Add sample rate quirk for Audioengine D1 (Christian Heusel)
  - ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2() (Xu Wang)
  - ACPI: PPTT: Fix processor subtable walk (Jeremy Linton)
  - btrfs: fix discard worker infinite loop after disabling discard (Filipe Manana)
  - dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted" (Nathan Lynch)
  - x86/its: FineIBT-paranoid vs ITS (Peter Zijlstra)
  - x86/speculation: Remove the extra #ifdef around CALL_NOSPEC (Pawan Gupta)
  - x86/speculation: Add a conditional CS prefix to CALL_NOSPEC (Pawan Gupta)
  - x86/speculation: Simplify and make CALL_NOSPEC consistent (Pawan Gupta)
  - x86,nospec: Simplify {JMP,CALL}_NOSPEC (Peter Zijlstra)
  - NFSv4/pnfs: Reset the layout state after a layoutreturn (Trond Myklebust)
  - qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd() (Abdun Nihaal)
  - ALSA: sh: SND_AICA should depend on SH_DMA_API (Geert Uytterhoeven)
  - net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING (Vladimir Oltean)
  - net: cadence: macb: Fix a possible deadlock in macb_halt_tx. (Mathieu Othacehe)
  - net_sched: Flush gso_skb list too during ->change() (Cong Wang) [Orabug: 37998129] {CVE-2025-37992}
  - spi: loopback-test: Do not split 1024-byte hexdumps (Geert Uytterhoeven)
  - nfs: handle failure of nfs_get_lock_context in unlock path (Li Lingfeng) [Orabug: 38094819] {CVE-2025-38023}
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (Zhu Yanjun) [Orabug: 38094828] {CVE-2025-38024}
  - iio: chemical: sps30: use aligned_s64 for timestamp (David Lechner)
  - iio: adc: ad7768-1: Fix insufficient alignment of timestamp. (Jonathan Cameron)
  - tracing: probes: Fix a possible race in trace_probe_log APIs (Masami Hiramatsu)
  - platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection (Hans de Goede)
  - LTS version: v5.15.183 (Vijayendra Suman)
  - Revert "net: phy: microchip: force IRQ polling mode for lan88xx" (Greg Kroah-Hartman)
  - do_umount(): add missing barrier before refcount checks in sync case (Al Viro)
  - drm/panel: simple: Update timings for AUO G101EVN010 (Kevin Baker)
  - MIPS: Fix MAX_REG_OFFSET (Thorsten Blum)
  - iio: adc: dln2: Use aligned_s64 for timestamp (Jonathan Cameron)
  - types: Complement the aligned types with signed 64-bit one (Andy Shevchenko)
  - usb: usbtmc: Fix erroneous generic_read ioctl return (Dave Penkler)
  - usb: usbtmc: Fix erroneous wait_srq ioctl return (Dave Penkler)
  - usb: usbtmc: Fix erroneous get_stb ioctl error returns (Dave Penkler)
  - USB: usbtmc: use interruptible sleep in usbtmc_read (Oliver Neukum)
  - usb: typec: ucsi: displayport: Fix NULL pointer access (Andrei Kuchynski) [Orabug: 38015127] {CVE-2025-37994}
  - usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition (Rd Babiera)
  - usb: host: tegra: Prevent host controller crash when OTG port is used (Jim Lin)
  - usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN (Wayne Chang)
  - usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version (Pawel Laszczak)
  - usb: cdnsp: Fix issue with resuming from L1 (Pawel Laszczak)
  - ocfs2: stop quota recovery before disabling quotas (Jan Kara)
  - ocfs2: implement handshaking with ocfs2 recovery thread (Jan Kara)
  - ocfs2: switch osb->disable_recovery to enum (Jan Kara)
  - module: ensure that kobject_put() is safe for module type kobjects (Dmitry Antipov) [Orabug: 38015132] {CVE-2025-37995}
  - xenbus: Use kref to track req lifetime (Jason Andryuk) [Orabug: 37976935] {CVE-2025-37949}
  - usb: uhci-platform: Make the clock really optional (Alexey Charkov)
  - drm/amd/display: Fix wrong handling for AUX_DEFER case (Wayne Lin)
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo (Silvano Seva) [Orabug: 37977032] {CVE-2025-37969}
  - iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo (Silvano Seva) [Orabug: 37977038] {CVE-2025-37970}
  - iio: adis16201: Correct inclinometer channel resolution (Gabriel)
  - iio: adc: ad7606: fix serial register access (Angelo Dureghello)
  - staging: axis-fifo: Correct handling of tx_fifo_depth for size validation (Gabriel)
  - staging: axis-fifo: Remove hardware resets for user errors (Gabriel)
  - staging: iio: adc: ad7816: Correct conditional logic for store mode (Gabriel)
  - Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5 (Aditya Garg)
  - Input: synaptics - enable SMBus for HP Elitebook 850 G1 (Dmitry Torokhov)
  - Input: synaptics - enable InterTouch on Dell Precision M3800 (Aditya Garg)
  - Input: synaptics - enable InterTouch on Dynabook Portege X30L-G (Aditya Garg)
  - Input: synaptics - enable InterTouch on Dynabook Portege X30-D (Manuel Fombuena)
  - net: dsa: b53: fix learning on VLAN unaware bridges (Jonas Gorski)
  - net: dsa: b53: always rejoin default untagged VLAN on bridge leave (Jonas Gorski)
  - net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave (Jonas Gorski)
  - net: dsa: b53: fix flushing old pvid VLAN on pvid change (Jonas Gorski)
  - net: dsa: b53: fix clearing PVID of a port (Jonas Gorski)
  - net: dsa: b53: allow leaky reserved multicast (Jonas Gorski)
  - netfilter: ipset: fix region locking in hash types (Jozsef Kadlecsik) [Orabug: 38015142] {CVE-2025-37997}
  - can: gw: fix RCU/BH usage in cgw_create_job() (Oliver Hartkopp)
  - can: gw: use call_rcu() instead of costly synchronize_rcu() (Eric Dumazet)
  - gre: Fix again IPv6 link-local address generation. (Guillaume Nault)
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Eelco Chaudron) [Orabug: 38015149] {CVE-2025-37998}
  - can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls (Marc Kleine-Budde)
  - can: mcan: m_can_class_unregister(): fix order of unregistration calls (Marc Kleine-Budde)
  - LTS version: v5.15.182 (Vijayendra Suman)
  - dm: fix copying after src array boundaries (Tudor Ambarus)
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Nicolin Chen)
  - iommu/arm-smmu-v3: Use the new rb tree helpers (Jason Gunthorpe)
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (Suzuki K Poulose) [Orabug: 37930013] {CVE-2025-37819}
  - irqchip/gic-v2m: Mark a few functions __init (Thomas Gleixner)
  - irqchip/gic-v2m: Add const to of_device_id (Xiang Wangx)
  - Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" (Christian Hewitt)
  - net: phy: microchip: force IRQ polling mode for lan88xx (Fiona Klute)
  - ARM: dts: opos6ul: add ksz8081 phy properties (Sébastien Szymanski)
  - firmware: arm_scmi: Balance device refcount when destroying devices (Cristian Marussi) [Orabug: 37976753] {CVE-2025-37905}
  - net: hns3: fix deadlock issue when externel_lb and reset are executed together (Yonglong Liu)
  - of: module: add buffer overflow check in of_modalias() (Sergey Shtylyov) [Orabug: 36753381] {CVE-2024-38541}
  - PCI: imx6: Skip controller_id generation logic for i.MX7D (Richard Zhu)
  - net: hns3: defer calling ptp_clock_register() (Jian Shen)
  - net: hns3: fixed debugfs tm_qset size (Hao Lan)
  - net: hns3: fix an interrupt residual problem (Yonglong Liu)
  - net: hns3: add support for external loopback test (Yonglong Liu)
  - net: hns3: store rx VLAN tag offload state for VF (Jian Shen)
  - net: fec: ERR007885 Workaround for conventional TX (Mattias Barthel)
  - net: lan743x: Fix memleak issue when GSO enabled (Thangaraj Samynathan) [Orabug: 37976766] {CVE-2025-37909}
  - nvme-tcp: fix premature queue removal and I/O failover (Michael Liang)
  - bnxt_en: Fix ethtool -d byte order for 32-bit values (Michael Chan)
  - bnxt_en: Fix out-of-bound memcpy() during ethtool -w (Shruti Parab) [Orabug: 37976774] {CVE-2025-37911}
  - bnxt_en: Fix coredump logic to free allocated buffer (Shruti Parab)
  - net: ipv6: fix UDPv6 GSO segmentation with NAT (Felix Fietkau)
  - net: dlink: Correct endianness handling of led_mode (Simon Horman)
  - net_sched: qfq: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976784] {CVE-2025-37913}
  - net_sched: ets: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976789] {CVE-2025-37914}
  - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Victor Nogueira) [Orabug: 37967411] {CVE-2025-37890}
  - net_sched: drr: Fix double list add in class with netem as child qdisc (Victor Nogueira) [Orabug: 37976793] {CVE-2025-37915}
  - net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised (Louis-Alexis Eyraud)
  - net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll (Louis-Alexis Eyraud)
  - net: ethernet: mtk-star-emac: separate tx/rx handling with two NAPIs (Biao Huang)
  - net/mlx5: E-switch, Fix error handling for enabling roce (Chris Mi)
  - net/mlx5: E-Switch, Initialize MAC Address for Default GID (Maor Gottlieb)
  - net/sched: act_mirred: don't override retval if we already lost the skb (Jakub Kicinski) [Orabug: 36530679] {CVE-2024-26739}
  - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop (Sean Christopherson) [Orabug: 37685666] {CVE-2025-21839}
  - tracing: Fix oob write in trace_seq_to_buffer() (Jeongjun Park) [Orabug: 37976822] {CVE-2025-37923}
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Mingcong Bai)
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Pavel Paklov) [Orabug: 37976837] {CVE-2025-37927}
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski)
  - dm-integrity: fix a warning on invalid table line (Mikulas Patocka)
  - wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() (Xu Wang) [Orabug: 37977120] {CVE-2025-37990}
  - mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe (Ruslan Piasetskyi)
  - amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload (Vishal Badole)
  - parisc: Fix double SIGFPE crash (Helge Deller) [Orabug: 37977128] {CVE-2025-37991}
  - arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Will Deacon) [Orabug: 38071958] {CVE-2025-37929}
  - i2c: imx-lpi2c: Fix clock count when probe defers (Clark Wang)
  - EDAC/altera: Set DDR and SDMMC interrupt mask before registration (Niravkumar L Rabara)
  - EDAC/altera: Test the correct error reg offset (Niravkumar L Rabara)
  - drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() (Philipp Stanner) [Orabug: 37976851] {CVE-2025-37930}
  - ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset (Joachim Priesner)
  - LTS version: v5.15.181 (Vijayendra Suman)
  - PCI: Release resource invalidated by coalescing (Ross Lagerwall)
  - PCI: Fix dropping valid root bus resources with .end = zero (Geert Uytterhoeven)
  - PCI: Fix use-after-free in pci_bus_release_domain_nr() (Rob Herring)
  - nvme: fixup scan failure for non-ANA multipath controllers (Hannes Reinecke)
  - MIPS: cm: Fix warning if MIPS_CM is disabled (Thomas Bogendoerfer)
  - xdp: Reset bpf_redirect_info before running a xdp's BPF prog. (Sebastian Andrzej Siewior)
  - drm/amd/display: fix double free issue during amdgpu module unload (Tim Huang) [Orabug: 37206238] {CVE-2024-49989}
  - net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family (Marek Behún)
  - net: dsa: mv88e6xxx: enable PVT for 6321 switch (Marek Behún)
  - net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family (Marek Behún)
  - crypto: atmel-sha204a - Set hwrng quality to lowest possible (Marek Behún)
  - comedi: jr3_pci: Fix synchronous deletion of timer (Ian Abbott)
  - jfs: define xtree root and page independently (Dave Kleikamp)
  - md/raid1: Add check for missing source disk in process_checks() (Meir Elisha)
  - ubsan: Fix panic from test_ubsan_out_of_bounds (Mostafa Saleh)
  - loop: aio inherit the ioprio of original request (Yunlong Xing)
  - scsi: pm80xx: Set phy_attached to zero when device is gone (Igor Pylypiv)
  - scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes (Xingui Yang)
  - ext4: make block validity check resistent to sb bh corruption (Ojaswin Mujoo)
  - nvmet-fc: put ref when assoc->del_work is already scheduled (Daniel Wagner)
  - nvmet-fc: take tgtport reference only once (Daniel Wagner)
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Josh Poimboeuf)
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Josh Poimboeuf)
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Josh Poimboeuf)
  - selftests/mincore: Allow read-ahead pages to reach the end of the file (Qiuxu Zhuo)
  - objtool: Stop UNRET validation on UD2 (Josh Poimboeuf)
  - nvme: re-read ANA log page after ns scan completes (Hannes Reinecke)
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Jean-Marc Eurin)
  - nvme: requeue namespace scan on missed AENs (Hannes Reinecke)
  - xen: Change xen-acpi-processor dom0 dependency (Jason Andryuk)
  - selftests: ublk: fix test_stripe_04 (Ming Lei)
  - udmabuf: fix a buf size overflow issue during udmabuf creation (Xiaogang Chen) [Orabug: 37929938] {CVE-2025-37803}
  - KVM: s390: Don't use %pK through tracepoints (Thomas Weißschuh)
  - sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP (Oleg Nesterov)
  - ntb: reduce stack usage in idt_scan_mws (Arnd Bergmann)
  - qibfs: fix _another_ leak (Al Viro) [Orabug: 37977083] {CVE-2025-37983}
  - objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() (Josh Poimboeuf)
  - usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() (Chenyuan Yang) [Orabug: 37937503] {CVE-2025-37881}
  - usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running (Michał Pecio)
  - dmaengine: dmatest: Fix dmatest waiting less when interrupted (Vinicius Costa Gomes)
  - sound/virtio: Fix cancel_sync warnings on uninitialized work_structs (John Stultz) [Orabug: 37929953] {CVE-2025-37805}
  - usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield (Andy Shevchenko)
  - fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size (Edward Adam Davis)
  - usb: host: max3421-hcd: Add missing spi_device_id table (Alexander Stein)
  - s390/tty: Fix a potential memory leak bug (Haoxiang Li)
  - s390/sclp: Add check for get_zeroed_page() (Haoxiang Li) [Orabug: 37937517] {CVE-2025-37883}
  - parisc: PDT: Fix missing prototype warning (Yu-Chun Lin)
  - clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() (Heiko Stuebner)
  - crypto: null - Use spin lock instead of mutex (Herbert Xu) [Orabug: 37929973] {CVE-2025-37808}
  - MIPS: cm: Detect CM quirks from device tree (Gregory Clement)
  - USB: wdm: add annotation (Oliver Neukum)
  - USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context (Oliver Neukum)
  - USB: wdm: close race between wdm_open and wdm_wwan_port_stop (Oliver Neukum) [Orabug: 37977098] {CVE-2025-37985}
  - USB: wdm: handle IO errors in wdm_wwan_port_start (Oliver Neukum)
  - USB: VLI disk crashes if LPM is used (Oliver Neukum)
  - usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive (Miao Li)
  - usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive (Miao Li)
  - usb: dwc3: gadget: check that event count does not exceed event buffer length (Frode Isaksen) [Orabug: 37929981] {CVE-2025-37810}
  - USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) (Huacai Chen)
  - usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling (Fedor Pchelkin)
  - usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines (Fedor Pchelkin)
  - usb: cdns3: Fix deadlock when using NCM gadget (Ralph Siemsen) [Orabug: 37929988] {CVE-2025-37812}
  - USB: serial: simple: add OWON HDS200 series oscilloscope support (Craig Hesling)
  - USB: serial: option: add Sierra Wireless EM9291 (Adam Xue)
  - USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe (Michael Ehrenreich)
  - serial: sifive: lock port in startup()/shutdown() callbacks (Ryo Takakura)
  - KVM: x86: Reset IRTE to host control if *new* route isn't postable (Sean Christopherson) [Orabug: 37937535] {CVE-2025-37885}
  - mei: me: add panther lake H DID (Alexander Usyskin)
  - USB: storage: quirk for ADATA Portable HDD CH94 (Oliver Neukum)
  - mcb: fix a double free bug in chameleon_parse_gdd() (Haoxiang Li) [Orabug: 37930000] {CVE-2025-37817}
  - KVM: SVM: Allocate IR data using atomic allocation (Sean Christopherson)
  - drm/amd/display: Fix gpu reset in multidisplay config (Roman Li)
  - net: selftests: initialize TCP header and skb payload with zero (Oleksij Rempel)
  - virtio_console: fix missing byte order handling for cols and rows (Halil Pasic)
  - iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE (Sean Christopherson)
  - net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (Cong Wang) [Orabug: 37930028] {CVE-2025-37823}
  - net_sched: hfsc: Fix a UAF vulnerability in class handling (Cong Wang) [Orabug: 37908484] {CVE-2025-37797}
  - tipc: fix NULL pointer dereference in tipc_mon_reinit_self() (Tung Nguyen) [Orabug: 37930039] {CVE-2025-37824}
  - net: phy: leds: fix memory leak (Qingfang Deng) [Orabug: 37977112] {CVE-2025-37989}
  - cpufreq: cppc: Fix invalid return value in .get() callback (Marc Zyngier)
  - cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() (Henry Martin) [Orabug: 37930051] {CVE-2025-37829}
  - cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() (Henry Martin) [Orabug: 37930056] {CVE-2025-37830}
  - dma/contiguous: avoid warning about unused size_bytes (Arnd Bergmann)
  - drm/msm/a6xx: Fix stale rpmh votes from GPU (Akhil P Oommen)
  - drm/msm/a6xx: Avoid gx gbit halt during rpm suspend (Akhil P Oommen)
  - drm/msm/a6xx: Handle GMU prepare-slumber hfi failure (Akhil P Oommen)
  - drm/msm/a6xx: Improve gpu recovery sequence (Akhil P Oommen)
  - string: Add load_unaligned_zeropad() code path to sized_strscpy() (Peter Collingbourne)
  - kmsan: disable strscpy() optimization under KMSAN (Alexander Potapenko)
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Mark Brown)
  - ksmbd: Prevent integer overflow in calculation of deadtime (Denis Arefev)
  - PCI: Fix reference leak in pci_register_host_bridge() (Ma Ke) [Orabug: 37937272] {CVE-2025-37836}
  - PCI: Assign PCI domain IDs by ida_alloc() (Pali Rohár)
  - PCI: Coalesce host bridge contiguous apertures (Kai-Heng Feng)
  - gpio: tegra186: fix resource handling in ACPI probe path (Guixin Liu)
  - cifs: fix integer overflow in match_server() (Roman Smirnov)
  - cifs: avoid NULL pointer dereference in dbg call (Alexandra Diupina) [Orabug: 37937310] {CVE-2025-37844}
  - cifs: print TIDs as hex (Enzo Matsumiya)
  - backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() (Herve Codina) [Orabug: 37901610] {CVE-2025-23144}
  - backlight: led_bl: Convert to platform remove callback returning void (Uwe Kleine-König)
  - iio: adc: ad7768-1: Fix conversion result sign (Sergiu Cuciurean)
  - iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check (Jonathan Cameron)
  - soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() (Chenyuan Yang) [Orabug: 37901625] {CVE-2025-23148}
  - soc: samsung: exynos-chipid: Pass revision reg offsets (Sam Protsenko)
  - soc: samsung: exynos-chipid: avoid soc_device_to_device() (Krzysztof Kozlowski)
  - net: dsa: mv88e6xxx: fix VTU methods for 6320 family (Marek Behún)
  - auxdisplay: hd44780: Fix an API misuse in hd44780.c (Haoxiang Li)
  - auxdisplay: hd44780: Convert to platform remove callback returning void (Uwe Kleine-König)
  - media: streamzap: fix race between device disconnection and urb callback (Murad Masimov) [Orabug: 37844171] {CVE-2025-22027}
  - media: streamzap: remove unused struct members (Sean Young)
  - media: streamzap: less chatter (Sean Young)
  - media: streamzap: no need for usb pid/vid in device name (Sean Young)
  - media: streamzap: remove unnecessary ir_raw_event_reset and handle (Sean Young)
  - module: sign with sha512 instead of sha1 by default (Thorsten Leemhuis)
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (Luiz Augusto von Dentz) [Orabug: 37252400] {CVE-2024-50125}
  - f2fs: Add inline to f2fs_build_fault_attr() stub (Nathan Chancellor)
  - pmdomain: ti: Add a null pointer check to the omap_prm_domain_init (Kunwu Chan) [Orabug: 36643315] {CVE-2024-35943}
  - f2fs: check validation of fault attrs in f2fs_build_fault_attr() (Chao Yu) [Orabug: 36897956] {CVE-2024-42160}
  - mm: fix apply_to_existing_page_range() (Kirill A. Shutemov)
  - fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats (Oleg Nesterov) [Orabug: 36530401] {CVE-2024-26686}
  - drm/i915/gt: Cleanup partial engine discovery failures (Chris Wilson)
  - dm cache: fix flushing uninitialized delayed_work on cache_ctr error (Ming-Hung Tsai) [Orabug: 37298744] {CVE-2024-50280}
  - jfs: Fix shift-out-of-bounds in dbDiscardAG (Pei Li) [Orabug: 36993154] {CVE-2024-44938}
  - MIPS: ds1287: Match ds1287_set_base_clock() function types (Yuli Wang)
  - MIPS: cevt-ds1287: Add missing ds1287.h include (Yuli Wang)
  - MIPS: dec: Declare which_prom() as static (Yuli Wang)
  - net: defer final 'struct net' free in netns dismantle (Eric Dumazet) [Orabug: 37434229] {CVE-2024-56658}
  - scsi: ufs: bsg: Set bsg_queue to NULL after removal (Guixin Liu) [Orabug: 37649536] {CVE-2024-54458}
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Ilya Maximets) [Orabug: 38071902] {CVE-2025-21681}
  - net: openvswitch: fix race on port output (Felix Huettner)
  - ipvs: properly dereference pe in ip_vs_add_service (Chen Hanxiao) [Orabug: 36964418] {CVE-2024-42322}
  - ext4: fix timer use-after-free on failed mount (Xiaxi Shen) [Orabug: 37206114] {CVE-2024-49960}
  - blk-iocost: do not WARN if iocg was already offlined (Li Nan) [Orabug: 36683303] {CVE-2024-36908}
  - blk-cgroup: support to track if policy is online (Yu Kuai)
  - bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers (Hou Tao) [Orabug: 37283326] {CVE-2023-52621}
  - bpf: avoid holding freeze_mutex during mmap operation (Andrii Nakryiko) [Orabug: 37702062] {CVE-2025-21853}
  - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers (Qun-Wei Lin) [Orabug: 37388807] {CVE-2024-53128}
  - smb: client: fix potential UAF in cifs_stats_proc_show() (Paulo Alcantara) [Orabug: 36642549] {CVE-2024-35867}
  - smb: client: fix potential deadlock when releasing mids (Paulo Alcantara) [Orabug: 37283429] {CVE-2023-52757}
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() (Chenxiaosong) [Orabug: 37074481] {CVE-2024-46742}
  - smb: client: fix NULL ptr deref in crypto_aead_setkey() (Paulo Alcantara) [Orabug: 38071970] {CVE-2024-53185}
  - smb: client: fix UAF in async decryption (Enzo Matsumiya) [Orabug: 37206489] {CVE-2024-50047}
  - cifs: Fix UAF in cifs_demultiplex_thread() (Zhang Xiaoxu) [Orabug: 36983926] {CVE-2023-52572}
  - smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (Paulo Alcantara)
  - ksmbd: fix potencial out-of-bounds when buffer offset is invalid (Namjae Jeon) [Orabug: 36596770] {CVE-2024-26952}
  - smb: client: fix potential UAF in cifs_dump_full_key() (Paulo Alcantara) [Orabug: 36642544] {CVE-2024-35866}
  - nvmet-fc: Remove unused functions (Yuli Wang)
  - landlock: Add the errata interface (Mickaël Salaün)
  - drm/amdgpu: fix usage slab after free (Vitaly Prosyak) [Orabug: 37433728] {CVE-2024-56551}
  - drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing (Srinivasan Shanmugam)
  - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' (Srinivasan Shanmugam)
  - drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links (Hersen Wu) [Orabug: 37116370] {CVE-2024-46816}
  - wifi: ath10k: avoid NULL pointer error during sdio remove (Kang Yang) [Orabug: 37433947] {CVE-2024-56599}
  - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function (Miaoqian Lin)
  - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (Nathan Lynch) [Orabug: 37074647] {CVE-2024-46774}
  - x86/pvh: Call C code via the kernel virtual mapping (Ard Biesheuvel)
  - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (Souradeep Chakrabarti) [Orabug: 37074695] {CVE-2024-46784}
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Michal Schmidt) [Orabug: 36753377] {CVE-2024-38540}
  - phonet/pep: fix racy skb_queue_empty() use (Remi Denis-Courmont) [Orabug: 36642006] {CVE-2024-27402}
  - filemap: Fix bounds checking in filemap_read() (Trond Myklebust) [Orabug: 37298710] {CVE-2024-50272}
  - net: fix crash when config small gso_max_size/gso_ipv4_max_size (Wang Liang) [Orabug: 37268692] {CVE-2024-50258}
  - ipv6: release nexthop on device removal (Paolo Abeni) [Orabug: 37434497] {CVE-2024-56751}
  - misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type (Kunihiko Hayashi)
  - misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error (Kunihiko Hayashi)
  - misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error (Kunihiko Hayashi) [Orabug: 37901585] {CVE-2025-23140}
  - mptcp: sockopt: fix getting IPV6_V6ONLY (Matthieu Baerts)
  - kbuild: Add '-fno-builtin-wcslen' (Nathan Chancellor)
  - cpufreq: Reference count policy in cpufreq_update_limits() (Rafael J. Wysocki)
  - KVM: arm64: Eagerly switch ZCR_EL{1,2} (Mark Rutland)
  - KVM: arm64: Calculate cptr_el2 traps on activating traps (Fuad Tabba)
  - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN (Mark Rutland)
  - KVM: arm64: Remove host FPSIMD saving for non-protected KVM (Mark Rutland)
  - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state (Mark Rutland)
  - arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM (Mark Brown)
  - arm64/fpsimd: Have KVM explicitly say which FP registers to save (Mark Brown)
  - arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE (Mark Brown)
  - KVM: arm64: Discard any SVE state when entering KVM guests (Mark Brown)
  - KVM: arm64: Always start with clearing SVE flag on load (Marc Zyngier)
  - KVM: arm64: Get rid of host SVE tracking/saving (Mark Brown)
  - drm/sti: remove duplicate object names (Rolf Eike Beer)
  - drm/nouveau: prime: fix ttm_bo_delayed_delete oops (Chris Bainbridge) [Orabug: 37901817] {CVE-2025-37765}
  - drm/amdgpu/dma_buf: fix page_link check (Matthew Auld)
  - drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero (Denis Arefev) [Orabug: 37901823,37901827,37901830,37901840,37901847] {CVE-2025-37766,CVE-2025-37767,CVE-2025-37768,CVE-2025-37770,CVE-2025-37771}
  - drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero (Denis Arefev) [Orabug: 37901823,37901827,37901830,37901840,37901847] {CVE-2025-37766,CVE-2025-37767,CVE-2025-37768,CVE-2025-37770,CVE-2025-37771}
  - drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero (Denis Arefev) [Orabug: 37901823,37901827,37901830,37901840,37901847] {CVE-2025-37766,CVE-2025-37767,CVE-2025-37768,CVE-2025-37770,CVE-2025-37771}
  - drm/amd/pm/powerplay: Prevent division by zero (Denis Arefev) [Orabug: 37901823,37901827,37901830,37901840,37901847] {CVE-2025-37766,CVE-2025-37767,CVE-2025-37768,CVE-2025-37770,CVE-2025-37771}
  - drm/amd/pm: Prevent division by zero (Denis Arefev) [Orabug: 37901823,37901827,37901830,37901840,37901847] {CVE-2025-37766,CVE-2025-37767,CVE-2025-37768,CVE-2025-37770,CVE-2025-37771}
  - drm/repaper: fix integer overflows in repeat functions (Nikita Zhandarovich)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR (Kan Liang)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX (Kan Liang)
  - perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR (Kan Liang)
  - perf/x86/intel: Allow to update user space GPRs from PEBS records (Dapeng Mi)
  - virtiofs: add filesystem context source name check (Xiangsheng Hou) [Orabug: 37901854] {CVE-2025-37773}
  - tracing: Fix filter string testing (Steven Rostedt)
  - riscv: Avoid fortify warning in syscall_get_arguments() (Nathan Chancellor)
  - mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() (Baoquan He)
  - loop: LOOP_SET_FD: send uevents for partitions (Thomas Weißschuh)
  - loop: properly send KOBJ_CHANGED uevent for disk device (Thomas Weißschuh)
  - isofs: Prevent the use of too small fid (Edward Adam Davis) [Orabug: 37901889] {CVE-2025-37780}
  - i2c: cros-ec-tunnel: defer probe if parent EC is not present (Thadeu Lima de Souza Cascardo) [Orabug: 37901896] {CVE-2025-37781}
  - hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key (Vasiliy Kovalev)
  - crypto: caam/qi - Fix drv_ctx refcount bug (Herbert Xu)
  - btrfs: correctly escape subvol in btrfs_show_options() (Johannes Kimmel)
  - nfs: add missing selections of CONFIG_CRC32 (Eric Biggers)
  - nfs: move nfs_fhandle_hash to common include file (Jeff Layton)
  - asus-laptop: Fix an uninitialized variable (Denis Arefev)
  - ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels (Srinivas Kandagatla)
  - ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate (Srinivas Kandagatla)
  - writeback: fix false warning in inode_to_wb() (Andreas Gruenbacher)
  - riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break (Yuli Wang)
  - riscv: KGDB: Do not inline arch_kgdb_breakpoint() (Yuli Wang)
  - riscv: Properly export reserved regions in /proc/iomem (Björn Töpel)
  - net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails (Vladimir Oltean)
  - net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered (Vladimir Oltean) [Orabug: 37901916] {CVE-2025-37787}
  - net: b53: enable BPDU reception for management port (Jonas Gorski)
  - cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path (Abdun Nihaal) [Orabug: 37901919] {CVE-2025-37788}
  - net: openvswitch: fix nested key length validation in the set() action (Ilya Maximets) [Orabug: 37901922] {CVE-2025-37789}
  - net: mctp: Set SOCK_RCU_FREE (Matt Johnston) [Orabug: 37901929] {CVE-2025-37790}
  - igc: cleanup PTP module if probe fails (Christopher S Hall)
  - igc: handle the IGC_PTP_ENABLED flag correctly (Christopher S Hall)
  - igc: move ktime snapshot into PTM retry loop (Christopher S Hall)
  - igc: fix PTM cycle trigger logic (Christopher S Hall) [Orabug: 37937458] {CVE-2025-37875}
  - Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Johannes Berg)
  - Bluetooth: l2cap: Check encryption key size on incoming connection (Frédéric Danis)
  - Bluetooth: btrtl: Prevent potential NULL dereference (Dan Carpenter) [Orabug: 37901933] {CVE-2025-37792}
  - Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address (Luiz Augusto von Dentz)
  - RDMA/core: Silence oversized kvmalloc() warning (Shay Drory) [Orabug: 37937427] {CVE-2025-37867}
  - RDMA/hns: Fix wrong maximum DMA segment size (Chengchang Tang)
  - RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() (Yue Haibing)
  - md/raid10: fix missing discard IO accounting (Yu Kuai)
  - scsi: iscsi: Fix missing scsi_host_put() in error path (Miaoqian Lin)
  - wifi: wl1251: fix memory leak in wl1251_tx_work (Abdun Nihaal) [Orabug: 37977075] {CVE-2025-37982}
  - wifi: mac80211: Purge vif txq in ieee80211_do_stop() (Remi Pommarel) [Orabug: 37901939] {CVE-2025-37794}
  - wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() (Remi Pommarel)
  - wifi: at76c50x: fix use after free access in at76_disconnect (Abdun Nihaal) [Orabug: 37901952] {CVE-2025-37796}
  - scsi: hisi_sas: Enable force phy when SATA disk directly connected (Xingui Yang)
  - scsi: libsas: Add struct sas_tmf_task (John Garry)
  - scsi: libsas: Delete lldd_clear_aca callback (John Garry)
  - scsi: hisi_sas: Fix setting of hisi_sas_slot.is_internal (John Garry)
  - scsi: hisi_sas: Factor out task prep and delivery code (John Garry)
  - scsi: hisi_sas: Pass abort structure for internal abort (John Garry)
  - scsi: hisi_sas: Start delivery hisi_sas_task_exec() directly (John Garry)
  - Bluetooth: hci_uart: Fix another race during initialization (Arseniy Krasnov)
  - x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() (Myrrh Periwinkle)
  - ACPI: platform-profile: Fix CFI violation when accessing sysfs files (Nathan Chancellor)
  - arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Douglas Anderson)
  - HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition (Kaixin Wang) [Orabug: 37855340] {CVE-2025-37838}
  - pinctrl: qcom: Clear latched interrupt status when changing IRQ type (Stephan Gerhold)
  - PCI: Fix reference leak in pci_alloc_child_bus() (Ma Ke)
  - PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() (Stanimir Varbanov)
  - of/irq: Fix device node refcount leakages in of_irq_init() (Zijun Hu)
  - of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() (Zijun Hu)
  - of/irq: Fix device node refcount leakages in of_irq_count() (Zijun Hu)
  - ntb: use 64-bit arithmetic for the MSI doorbell mask (Fedor Pchelkin)
  - gpio: zynq: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - ftrace: Add cond_resched() to ftrace_graph_set_hash() (Zhoumin) [Orabug: 37976892] {CVE-2025-37940}
  - dm-integrity: set ti->error on memory allocation failure (Mikulas Patocka)
  - crypto: ccp - Fix check for the primary ASP device (Tom Lendacky)
  - thermal/drivers/rockchip: Add missing rk3328 mapping entry (Trevor Woerner)
  - sctp: detect and prevent references to a freed transport in sendmsg (Ricardo Cañuelo Navarro) [Orabug: 37901596] {CVE-2025-23142}
  - mm/hwpoison: do not send SIGBUS to processes with recovered clean pages (Shuai Xue)
  - mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock (Mathieu Desnoyers)
  - sparc/mm: disable preemption in lazy mmu mode (Ryan Roberts)
  - arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string (Chen-Yu Tsai)
  - mtd: rawnand: Add status chack in r852_ready() (Xu Wang)
  - mtd: inftlcore: Add error check for inftl_read_oob() (Xu Wang) [Orabug: 37976719] {CVE-2025-37892}
  - mptcp: only inc MPJoinAckHMacFailure for HMAC failures (Matthieu Baerts)
  - mptcp: fix NULL pointer in can_accept_new_subflow (Gang Yan) [Orabug: 37901614] {CVE-2025-23145}
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (T Pratham)
  - locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() (Boqun Feng)
  - mfd: ene-kb3930: Fix a potential NULL pointer dereference (Chenyuan Yang) [Orabug: 37901617] {CVE-2025-23146}
  - jbd2: remove wrong sb->s_sequence check (Jan Kara) [Orabug: 37937282] {CVE-2025-37839}
  - i3c: Add NULL pointer check in i3c_master_queue_ibi() (Manjunatha Venkatesh) [Orabug: 37901621] {CVE-2025-23147}
  - i3c: master: svc: Use readsb helper for reading MDB (Stanley Chu)
  - vdpa/mlx5: Fix oversized null mkey longer than 32bit (Si-Wei Liu)
  - ext4: fix off-by-one error in do_split (Artem Sadovnikov) [Orabug: 37901630] {CVE-2025-23150}
  - bus: mhi: host: Fix race between unprepare and queue_buf (Jeffrey Hugo) [Orabug: 37901637] {CVE-2025-23151}
  - ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path (Alexey Klimov)
  - wifi: mac80211: fix integer overflow in hwmp_route_info_get() (Gavrilov Ilia)
  - wifi: mt76: Add check for devm_kstrdup() (Haoxiang Li)
  - clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup (Alexandre Torgue)
  - mtd: Replace kcalloc() with devm_kcalloc() (Jiasheng Jiang)
  - net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family (Marek Behún)
  - mtd: Add check for devm_kcalloc() (Jiasheng Jiang)
  - media: venus: hfi_parser: refactor hfi packet parsing logic (Vikash Garodia) [Orabug: 37901647] {CVE-2025-23156}
  - media: venus: hfi_parser: add check to avoid out of bound access (Vikash Garodia) [Orabug: 37901652] {CVE-2025-23157}
  - media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO (Sakari Ailus)
  - media: i2c: ov7251: Set enable GPIO low in probe (Sakari Ailus)
  - media: i2c: ccs: Set the device's runtime PM status correctly in probe (Sakari Ailus)
  - media: i2c: ccs: Set the device's runtime PM status correctly in remove (Sakari Ailus)
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Karina Yankevich)
  - media: streamzap: prevent processing IR data on URB failure (Murad Masimov)
  - mtd: rawnand: brcmnand: fix PM resume warning (Kamal Dasu) [Orabug: 37937291] {CVE-2025-37840}
  - spi: cadence-qspi: Fix probe on AM62A LP SK (Miquel Raynal)
  - arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Douglas Anderson)
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Douglas Anderson)
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Douglas Anderson)
  - arm64: cputype: Add MIDR_CORTEX_A76AE (Douglas Anderson)
  - xenfs/xensyms: respect hypervisor's "next" indication (Jan Beulich)
  - media: siano: Fix error handling in smsdvb_module_init() (Yuan Can)
  - media: vim2m: print device name after registering device (Matthew Majewski)
  - media: venus: hfi: add check to handle incorrect queue size (Vikash Garodia) [Orabug: 37901656] {CVE-2025-23158}
  - media: venus: hfi: add a check to handle OOB in sfr region (Vikash Garodia) [Orabug: 37901661] {CVE-2025-23159}
  - media: i2c: adv748x: Fix test pattern selection mask (Niklas Söderlund)
  - ext4: don't treat fhandle lookup of ea_inode as FS corruption (Jann Horn)
  - bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags (Willem de Bruijn)
  - bpf: Add endian modifiers to fix endian warnings (Ben Dooks)
  - pwm: fsl-ftm: Handle clk_get_rate() returning 0 (Uwe Kleine-König)
  - pwm: rcar: Improve register calculation (Uwe Kleine-König)
  - pwm: rcar: Simplify multiplication/shift logic (Geert Uytterhoeven)
  - pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() (Josh Poimboeuf) [Orabug: 37937328] {CVE-2025-37850}
  - ktest: Fix Test Failures Due to Missing LOG_FILE Directories (Ayush Jain)
  - fbdev: omapfb: Add 'plane' value check (Leonid Arapov)
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Ryo Takakura) [Orabug: 37901667] {CVE-2025-23161}
  - drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off (AngeloGioacchino Del Regno)
  - drm/amdkfd: Fix pqm_destroy_queue race with GPU reset (Philip Yang)
  - drm/amdkfd: clamp queue size to minimum (David Yat Sin)
  - drivers: base: devres: Allow to release group on device release (Lucas De Marchi)
  - drm/bridge: panel: forbid initializing a panel with unknown connector type (Luca Ceresoli)
  - drm: panel-orientation-quirks: Add new quirk for GPD Win 2 (Andrew Wyatt)
  - drm: panel-orientation-quirks: Add support for AYANEO 2S (Andrew Wyatt)
  - drm/amd/display: Update Cursor request mode to the beginning prefetch always (Zhikai Zhai)
  - drm: allow encoder mode_set even when connectors change for crtc (Abhinav Kumar)
  - Bluetooth: hci_uart: fix race during initialization (Arseniy Krasnov)
  - tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER (Gabriele Paoloni)
  - net: vlan: don't propagate flags on open (Stanislav Fomichev) [Orabug: 37901683] {CVE-2025-23163}
  - wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table (Icenowy Zheng)
  - scsi: st: Fix array overflow in st_setup() (Kai Mäkisara) [Orabug: 37937378] {CVE-2025-37857}
  - ext4: ignore xattrs past end (Bhupesh) [Orabug: 37901690] {CVE-2025-37738}
  - ext4: protect ext4_release_dquot against freezing (Ojaswin Mujoo)
  - ahci: add PCI ID for Marvell 88SE9215 SATA Controller (Daniel Kral)
  - f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() (Chao Yu) [Orabug: 37901700] {CVE-2025-37739}
  - ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode (Niklas Cassel)
  - jfs: add sanity check for agwidth in dbMount (Edward Adam Davis) [Orabug: 37901706] {CVE-2025-37740}
  - jfs: Prevent copying of nlink with value 0 from disk inode (Edward Adam Davis) [Orabug: 37901715] {CVE-2025-37741}
  - fs/jfs: Prevent integer overflow in AG size calculation (Rand Deeb) [Orabug: 37937386] {CVE-2025-37858}
  - fs/jfs: cast inactags to s64 to prevent potential overflow (Rand Deeb)
  - jfs: Fix uninit-value access of imap allocated in the diMount() function (Zhongqiu Han) [Orabug: 37901723] {CVE-2025-37742}
  - page_pool: avoid infinite loop to schedule delayed worker (Jason Xing) [Orabug: 37937394] {CVE-2025-37859}
  - ALSA: usb-audio: Fix CME quirk for UF series keyboards (Ricard Wanderlof)
  - ASoC: fsl_audmix: register card device depends on 'dais' property (Shengjiu Wang)
  - ALSA: hda: intel: Fix Optimus when GPU has no sound (Maxim Mikityanskiy)
  - HID: pidff: Fix null pointer dereference in pidff_find_fields (Tomasz Pakuła) [Orabug: 37937409] {CVE-2025-37862}
  - HID: pidff: Do not send effect envelope if it's empty (Tomasz Pakuła)
  - HID: pidff: Convert infinite length from Linux API to PID standard (Tomasz Pakuła)
  - xen/mcelog: Add __nonstring annotations for unterminated strings (Kees Cook)
  - arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD (Douglas Anderson)
  - perf: arm_pmu: Don't disable counter in armpmu_add() (Mark Rutland)
  - x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine (Max Grobecker)
  - pm: cpupower: bench: Prevent NULL dereference on malloc failure (Zhongqiu Han) [Orabug: 37937296] {CVE-2025-37841}
  - umount: Allow superblock owners to force umount (Trond Myklebust)
  - nft_set_pipapo: fix incorrect avx2 match of 5th field octet (Florian Westphal)
  - net: ppp: Add bound checking for skb data on ppp_sync_txmung (Arnaud Lecomte) [Orabug: 37901765] {CVE-2025-37749}
  - nvmet-fcloop: swap list_add_tail arguments (Daniel Wagner)
  - ata: sata_sx4: Add error handling in pdc20621_i2c_read() (Xu Wang)
  - ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones (Hannes Reinecke)
  - net: ethtool: Don't call .cleanup_data when prepare_data fails (Maxime Chevallier)
  - net: tls: explicitly disallow disconnect (Jakub Kicinski) [Orabug: 37901782] {CVE-2025-37756}
  - tipc: fix memory leak in tipc_link_xmit (Tung Nguyen) [Orabug: 37901789] {CVE-2025-37757}
  - ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() (Henry Martin) [Orabug: 37901795] {CVE-2025-37758}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-310.184.3.el9uek]
changelog:
  - x86/its: Fix undefined reference to cpu_wants_rethunk_at() (Pawan Gupta)
  - padata: do not leak refcount in reorder_work (Dominik Grzegorzek) [Orabug: 38094844] {CVE-2025-38031}
  - Revert "drm/amd: Keep display off while going into S4" (Mario Limonciello)
  - memcg: always call cond_resched() after fn() (Breno Leitao)
  - lib: cpu_rmap: Use allocator for rmap entries (Eli Cohen) [Orabug: 38037237]
  - uek-rpm: build the fwctl mlx5 driver on UEK (Qing Huang) [Orabug: 37810637]
  - fwctl: Adapt upstream code for UEK7 (Mikhael Goikhman) [Orabug: 37810637]
  - mlx5: Create an auxiliary device for fwctl_mlx5 (Saeed Mahameed) [Orabug: 37810637]
  - fwctl/mlx5: Support for communicating with mlx5 fw (Saeed Mahameed) [Orabug: 37810637]
  - fwctl: Add documentation (Jason Gunthorpe) [Orabug: 37810637]
  - fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware (Jason Gunthorpe) [Orabug: 37810637]
  - taint: Add TAINT_FWCTL (Jason Gunthorpe) [Orabug: 37810637]
  - fwctl: FWCTL_INFO to return basic information about the device (Jason Gunthorpe) [Orabug: 37810637]
  - fwctl: Basic ioctl dispatch for the character device (Jason Gunthorpe) [Orabug: 37810637]
  - fwctl: Add basic structure for a class subsystem with a cdev (Jason Gunthorpe) [Orabug: 37810637]
  - net/mlx5: Add IFC related stuff for data direct (Yishai Hadas) [Orabug: 37810637]
  - Documentation: Add detailed explanation for 'N' taint flag (Benjamin Poirier) [Orabug: 37810637]
  - kernel/panic: initialize taint_flags[] using a macro (Jani Nikula) [Orabug: 37810637]
  - kernel/panic: return early from print_tainted() when not tainted (Jani Nikula) [Orabug: 37810637]
  - tools: Add new "test" taint to kernel-chktaint (Joe Fradley) [Orabug: 37810637]
  - panic: use error_report_end tracepoint on warnings (Marco Elver) [Orabug: 37810637]
  - Revert "fwctl: Add basic structure for a class subsystem with a cdev" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl: Basic ioctl dispatch for the character device" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl: FWCTL_INFO to return basic information about the device" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl: FWCTL_RPC to execute a Remote Procedure Call to device firmware" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl/mlx5: Support for communicating with mlx5 fw" (Qing Huang) [Orabug: 37810637]
  - Revert "mlx5: Create an auxiliary device for fwctl_mlx5" (Qing Huang) [Orabug: 37810637]
  - Revert "taint: Add TAINT_FWCTL" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl: Adapt code for UEK7" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl/mlx5: Add INTERNAL_DEV_RES uctx capability" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl: Allow up to 4k devices" (Qing Huang) [Orabug: 37810637]
  - Revert "fwctl: Expand adaption of code for UEK7" (Qing Huang) [Orabug: 37810637]
  - Revert "uek-rpm: build the fwctl mlx5 driver on UEK" (Qing Huang) [Orabug: 37810637]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-310.184.4.el9uek]
changelog:
  - vhost-scsi: Fix log flooding with target does not exist errors (Mike Christie) [Orabug: 37424174]
  - mm: do not write protect COW mappings when preserving across exec (Anthony Yznaga) [Orabug: 37734242]
  - mm: hold the source mmap write lock when copying PTEs (Anthony Yznaga) [Orabug: 37734242]
  - uek-rpm: Bluefield 3: Enable CONFIG_CONTIG_ALLOC (Thomas Tai) [Orabug: 38067846]
  - mm: shmem: remove unnecessary warning in shmem_writepage() (Ricardo Cañuelo Navarro) [Orabug: 38091965]
  - shmem: add support to ignore swap (Luis Chamberlain) [Orabug: 38091965]
  - shmem: update documentation (Luis Chamberlain) [Orabug: 38091965]
  - shmem: skip page split if we're not reclaiming (Luis Chamberlain) [Orabug: 38091965]
  - shmem: move reclaim check early on writepages() (Luis Chamberlain) [Orabug: 38091965]
  - shmem: set shmem_writepage() variables early (Luis Chamberlain) [Orabug: 38091965]
  - shmem: remove check for folio lock on writepage() (Luis Chamberlain) [Orabug: 38091965]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-310.184.5.el9uek]
changelog:
  - sched/numa: skip VMA scanning on memory pinned to one NUMA node via cpuset.mems (Libo Chen)  [Orabug: 38070120]
  - bridge: netfilter: Fix forwarding of fragmented packets (Ido Schimmel)  [Orabug: 38069363]
  - Revert "net: bridge: IP defragmentation failing for jumboframes" (Venkat Venkatsubra)  [Orabug: 38069363]
  - vhost-scsi: Change def inline_sg_cnt and max_io_vqs for exadata (Mike Christie)  [Orabug: 38053186]
  - rds: ib: Add cm_id generation scheme in order to detect new ones (Håkon Bugge)  [Orabug: 37799170]
  - Revert "i2c: designware: Fix corrupted memory seen in the ISR" (Vijay Kumar)  [Orabug: 37771338]
  - ipmi:ssif: Improve detecting during probing (Corey Minyard)  [Orabug: 37771338]
  - ipmi: ssif: replace strlcpy with strscpy (Jason Wang)  [Orabug: 37771338]
  - uek-rpm: Enable CONFIG_SERIAL_RP2 as m (Samasth Norway Ananda)  [Orabug: 37459981]
  - serial: update the rp2 driver code (Samasth Norway Ananda)  [Orabug: 37459981]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-310.184.5.1.el9uek]
changelog:
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38023240]  {CVE-2024-36350} {CVE-2024-36357}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-310.184.5.2.el9uek]
changelog:
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)   {CVE-2025-38089} 
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila)   {CVE-2025-37752} 
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila)   
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila)   
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet)   
  - net_sched: sch_sfq: annotate data-races around q->perturb_period (Eric Dumazet)   
  - block: assign bi_bdev for cloned bios in blk_rq_prep_clone (Christoph Hellwig)  [Orabug: 37931495]  
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov)  [Orabug: 38081922]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-310.184.5.2.el9uek]
changelog:
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)   {CVE-2025-38089}
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila)   {CVE-2025-37752}
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila)
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila)
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet)
  - net_sched: sch_sfq: annotate data-races around q->perturb_period (Eric Dumazet)
  - block: assign bi_bdev for cloned bios in blk_rq_prep_clone (Christoph Hellwig)  [Orabug: 37931495]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov)  [Orabug: 38081922]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-310.184.5.3.el9uek]
changelog:
  - nfs: clear SB_RDONLY before getting superblock (Li Lingfeng)   
  - nfs: ignore SB_RDONLY when remounting nfs (Li Lingfeng)  [Orabug: 38258810]  
  - net/rds: poll eq during user-reset (Praveen Kumar Kannoju)  [Orabug: 38258827]  
  - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju)  [Orabug: 38258830]  
  - vhost-scsi: Fix vhost_scsi struct use after free (Mike Christie)  [Orabug: 38258837]  
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38258844]  
  - x86: Pin task-stack in __get_wchan() (Peter Zijlstra)  [Orabug: 38258846]  
  - x86: Fix __get_wchan() for !STACKTRACE (Peter Zijlstra)  [Orabug: 38258846]  
  - sched: Add wrapper for get_wchan() to keep task blocked (Kees Cook)  [Orabug: 38258846]  
  - x86: Fix get_wchan() to support the ORC unwinder (Qi Zheng)  [Orabug: 38258846]  
  - mm: synchronise PGD in x86 when utilising dax vmemmap optimisation (Lorenzo Stoakes)  [Orabug: 38258866]  
  - rds: ib: Make sure a QP in INIT state is transitioned to ERR (Håkon Bugge)  [Orabug: 38258860]  
  - Reapply "rds: ib: Make sure receives are posted before connection is up" (Håkon Bugge)  [Orabug: 38258860]  
  - KVM: x86: revert APICV_INHIBIT_REASON_APIC_ID_MODIFIED clear path for uek=exadata (Dongli Zhang)  [Orabug: 38258871]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.184.1.el9uek]
changelog:
  - net/rds: tracepoints for rds_conn_kref_get and put (Sharath Srinivasan)  [Orabug: 38118655]
  - net/rds: Add krefs to struct rds_connection (Sharath Srinivasan)  [Orabug: 38118655]
  - net/rds: Add missing switch/break in rds_recv_worker() (Sharath Srinivasan)  [Orabug: 38118668]
  - net/mlx5: Expose ICM consumption per function (Akiva Goldberger)  [Orabug: 38063298]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Akiva Goldberger)  [Orabug: 38063298]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Akiva Goldberger)  [Orabug: 38063298]
  - KVM: x86: revert APICV_INHIBIT_REASON_APIC_ID_MODIFIED clear path for uek=exadata (Dongli Zhang)  [Orabug: 37944981]
  - arm64: pensando: kpcimgr: Support PSCI and XEN (Rob Gardner)  [Orabug: 37911761]
  - arm64: pensando: Add PL011 serial to config for XEN (Rob Gardner)  [Orabug: 37911761]
  - net/rds: Merge uses of conn->c_destroy_in_prog & RDS_DESTROY_PENDING (Sharath Srinivasan)  [Orabug: 35519912]
  - net_sched: sch_sfq: don't allow 1 packet limit (Octavian Purdila)  [Orabug: 37649663]  {CVE-2024-57996}
  - net_sched: sch_sfq: handle bigger packets (Eric Dumazet)  [Orabug: 38139143]
  - net_sched: sch_sfq: annotate data-races around q->perturb_period (Eric Dumazet)  [Orabug: 38139143]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.185.2.el9uek]
changelog:
  - Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older (Breno Leitao)
  - Revert "cpufreq: tegra186: Share policy per cluster" (Jon Hunter)
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Charalampos Mitrodimas)
  - tracing: Fix compilation warning on arm32 (Pan Taixi)
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki)
  - nfs: clear SB_RDONLY before getting superblock (Li Lingfeng)
  - usb: usbtmc: Fix read_stb function and get_stb ioctl (Dave Penkler)
  - acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio() (Gautham R. Shenoy)
  - LTS version: v5.15.185 (Vijayendra Suman)
  - perf/arm-cmn: Initialise cmn->cpu earlier (Robin Murphy)
  - platform/x86: thinkpad_acpi: Ignore battery threshold change event notification (Mark Pearson)
  - platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys (Valtteri Koskivuori)
  - tpm: tis: Double the timeout B to 4s (Michal Suchanek)
  - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Ilya Guterman)
  - spi: spi-sun4i: fix early activation (Alessandro Grassi)
  - um: let 'make clean' properly clean underlying SUBARCH as well (Masahiro Yamada)
  - platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS (John Chau)
  - nfs: don't share pNFS DS connections between net namespaces (Jeff Layton)
  - HID: quirks: Add ADATA XPG alpha wireless mouse support (Milton Barrera)
  - coredump: hand a pidfd to the usermode coredump helper (Christian Brauner)
  - fork: use pidfd_prepare() (Christian Brauner)
  - pid: add pidfd_prepare() (Christian Brauner)
  - coredump: fix error handling for replace_fd() (Christian Brauner)
  - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Pedro Tammela)
  - arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node (Alok Tiwari)
  - smb: client: Reset all search buffer pointers when releasing buffer (Wang Zhaolong)
  - smb: client: Fix use-after-free in cifs_fill_dirent (Wang Zhaolong)
  - drm/i915/gvt: fix unterminated-string-initialization warning (Jani Nikula)
  - xen/swiotlb: relax alignment requirements (Juergen Gross)
  - i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work() (Nathan Chancellor)
  - kbuild: Disable -Wdefault-const-init-unsafe (Nathan Chancellor)
  - spi: spi-fsl-dspi: Reset SR flags before sending a new message (Larisa Grigore)
  - spi: spi-fsl-dspi: Halt the module after a new message transfer (Bogdan-Gabriel Roman)
  - spi: spi-fsl-dspi: restrict register range for regmap access (Larisa Grigore)
  - Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection" (Jernej Skrabec)
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Tianyang Zhang)
  - drm/edid: fixed the bug that hdr metadata was not reset (feijuan.li)
  - platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store() (Vladimir Moskovkin)
  - llc: fix data loss when reading from a socket in llc_ui_recvmsg() (Ilia Gavrilov)
  - ALSA: pcm: Fix race of buffer access at PCM OSS layer (Takashi Iwai)
  - can: bcm: add missing rcu read protection for procfs content (Oliver Hartkopp)
  - can: bcm: add locking for bcm_op runtime updates (Oliver Hartkopp)
  - crypto: algif_hash - fix double free in hash_accept (Ivan Pravdin)
  - octeontx2-af: Set LMT_ENA bit for APR table entries (Subbaraya Sundeep)
  - net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (Wang Liang)
  - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Cong Wang)
  - net: dwmac-sun8i: Use parsed internal PHY address instead of 1 (Paul Kocialkowski)
  - Bluetooth: L2CAP: Fix not checking l2cap_chan security level (Luiz Augusto von Dentz)
  - xfrm: Sanitize marks before insert (Paul Chaignon)
  - remoteproc: qcom_wcnss: Fix on platforms without fallback regulators (Matti Lehtimäki)
  - __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock (Al Viro)
  - xenbus: Allow PVH dom0 a non-local xenstore (Jason Andryuk)
  - btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref (Goldwyn Rodrigues)
  - nvmet-tcp: don't restore null sk_state_change (Alistair Francis)
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx (Takashi Iwai)
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013 (Takashi Iwai)
  - pinctrl: meson: define the pull up/down resistor value as 60 kOhm (Martin Blumenstingl)
  - ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of() (Chenyuan Yang)
  - drm: Add valid clones check (Jessica Zhang)
  - drm/atomic: clarify the rules around drm_atomic_state->allow_modeset (Simona Vetter)
  - wifi: ath9k: return by of_get_mac_address (Rosen Penev)
  - regulator: ad5398: Add device tree support (Isaac Scott)
  - spi: zynqmp-gqspi: Always acknowledge interrupts (Sean Anderson)
  - wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate (Bitterblue Smith)
  - perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt (Ravi Bangoria)
  - bpftool: Fix readlink usage in get_fd_type (Viktor Malik)
  - drm/ast: Find VBIOS mode from regular display size (Thomas Zimmermann)
  - HID: usbkbd: Fix the bit shift number for LED_KANA (junan)
  - scsi: st: Restore some drive settings after reset (Kai Mäkisara)
  - scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine (Justin Tee)
  - net/mana: fix warning in the writer of client oob (Konstantin Taranov)
  - rcu: fix header guard for rcu_all_qs() (Ankur Arora)
  - rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y (Ankur Arora)
  - r8169: don't scan PHY addresses > 0 (Heiner Kallweit)
  - vxlan: Annotate FDB data races (Ido Schimmel)
  - media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available (Depeng Shao)
  - hwmon: (xgene-hwmon) use appropriate type for the latency value (Andrey Vatoropin)
  - clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs (Jordan Crouse)
  - wifi: rtw88: Fix download_firmware_validate() for RTL8814AU (Bitterblue Smith)
  - r8152: add vendor/device ID pair for Dell Alienware AW1022z (Aleksander Jan Bajkowski)
  - ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure(). (Kuniyuki Iwashima)
  - arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src (Athira Rajeev)
  - wifi: mac80211: remove misplaced drv_mgd_complete_tx() call (Johannes Berg)
  - wifi: mac80211: don't unconditionally call drv_mgd_complete_tx() (Johannes Berg)
  - net/mlx5e: reduce rep rxq depth to 256 for ECPF (William Tu)
  - net/mlx5e: set the tx_queue_len for pfifo_fast (William Tu)
  - net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB (Alexei Lazar)
  - drm/amd/display: Initial psr_version with correct setting (Tom Chung)
  - drm/amdgpu: reset psp->cmd to NULL after releasing the buffer (Jiang Liu)
  - phy: core: don't require set_mode() callback for phy_get_mode() to work (Dmitry Baryshkov)
  - net/mlx4_core: Avoid impossible mlx4_db_alloc() order value (Kees Cook)
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Sakari Ailus)
  - smack: recognize ipv4 CIPSO w/o categories (Konstantin Andreev)
  - pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map (Valentin Caron)
  - ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot() (Kuninori Morimoto)
  - ASoC: tas2764: Power up/down amp on mute ops (Hector Martin)
  - ASoC: ops: Enforce platform maximum on initial value (Martin Povišer)
  - net/mlx5: Apply rate-limiting to high temperature warning (Shahar Shitrit)
  - net/mlx5: Modify LSB bitmask in temperature event to include only the first bit (Shahar Shitrit)
  - ACPI: HED: Always initialize before evged (Xiaofei Tan)
  - PCI: Fix old_size lower bound in calculate_iosize() too (Ilpo Järvinen)
  - eth: mlx4: don't try to complete XDP frames in netpoll (Jakub Kicinski)
  - can: c_can: Use of_property_present() to test existence of DT property (Krzysztof Kozlowski)
  - RDMA/core: Fix best page size finding when it can cross SG entries (Michael Margolin)
  - EDAC/ie31200: work around false positive build warning (Arnd Bergmann)
  - net: pktgen: fix access outside of user given buffer in pktgen_thread_write() (Peter Seiderer)
  - wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31 (Bitterblue Smith)
  - wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU (Bitterblue Smith)
  - wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU (Bitterblue Smith)
  - scsi: mpt3sas: Send a diag reset if target reset fails (Shivasharan S)
  - clocksource: mips-gic-timer: Enable counter when CPUs start (Paul Burton)
  - MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core (Paul Burton)
  - MIPS: Use arch specific syscall name match function (Bibo Mao)
  - x86/kaslr: Reduce KASLR entropy on most x86 systems (Balbir Singh)
  - libbpf: Fix out-of-bound read (Nandakumar Edamana)
  - cpuidle: menu: Avoid discarding useful information (Rafael J. Wysocki)
  - x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus() (Waiman Long)
  - drm/amd/display: handle max_downscale_src_width fail check (Yihan Zhu)
  - x86/build: Fix broken copy command in genimage.sh when making isoimage (Nir Lichtman)
  - soc: ti: k3-socinfo: Do not use syscon helper to build regmap (Andrew Davis)
  - bonding: report duplicate MAC address in all situations (Hangbin Liu)
  - net: xgene-v2: remove incorrect ACPI_PTR annotation (Arnd Bergmann)
  - drm/amdkfd: KFD release_work possible circular locking (Philip Yang)
  - selftests/net: have `gro.sh -t` return a correct exit code (Kevin Krakauer)
  - net/mlx5: Avoid report two health errors on same syndrome (Moshe Shemesh)
  - firmware: arm_ffa: Set dma_mask for ffa devices (Viresh Kumar)
  - PCI: brcmstb: Add a softdep to MIP MSI-X driver (Stanimir Varbanov)
  - PCI: brcmstb: Expand inbound window size up to 64GB (Stanimir Varbanov)
  - fpga: altera-cvp: Increase credit timeout (Kuhanh Murugasen Krishnan)
  - drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence (AngeloGioacchino Del Regno)
  - ARM: at91: pm: fix at91_suspend_finish for ZQ calibration (Li Bin)
  - hwmon: (gpio-fan) Add missing mutex locks (Alexander Stein)
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Breno Leitao)
  - clk: imx8mp: inform CCF of maximum frequency of clocks (Ahmad Fatoum)
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Ricardo Ribalda)
  - ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config(). (Kuniyuki Iwashima)
  - net: pktgen: fix mpls maximum labels list parsing (Peter Seiderer)
  - net: ethernet: ti: cpsw_new: populate netdev of_node (Alexander Sverdlin)
  - pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned" (Artur Weber)
  - media: cx231xx: set device_caps for 417 (Hans Verkuil)
  - drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c (Victor Lu)
  - remoteproc: qcom_wcnss: Handle platforms with only single power domain (Matti Lehtimäki)
  - orangefs: Do not truncate file size (Matthew Wilcox (Oracle))
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Ming-Hung Tsai)
  - media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe() (Markus Elfring)
  - ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114 (Svyatoslav Ryhel)
  - ieee802154: ca8210: Use proper setters and getters for bitwise types (Andy Shevchenko)
  - rtc: ds1307: stop disabling alarms on probe (Alexandre Belloni)
  - tcp: bring back NUMA dispersion in inet_ehash_locks_alloc() (Eric Dumazet)
  - powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7 (Andreas Schwab)
  - arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator (Diogo Ivo)
  - crypto: lzo - Fix compression buffer overrun (Herbert Xu)
  - cpufreq: tegra186: Share policy per cluster (Aaron Kling)
  - ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup() (Alexey Klimov)
  - auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common" (Andy Shevchenko)
  - ipv6: save dontfrag in cork (Willem de Bruijn)
  - mmc: sdhci: Disable SD card clock before changing parameters (Erick Shepherd)
  - arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (Ryan Roberts)
  - netfilter: conntrack: Bound nf_conntrack sysctl writes (Nicolas Bouchinet)
  - timer_list: Don't use %pK through printk() (Thomas Weißschuh)
  - posix-timers: Add cond_resched() to posix_timer_add() search loop (Eric Dumazet)
  - RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject() (Maher Sanalla)
  - xen: Add support for XenServer 6.1 platform device (Frediano Ziglio)
  - dm: restrict dm device size to 2^63-512 bytes (Mikulas Patocka)
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Shashank Gupta)
  - kbuild: fix argument parsing in scripts/config (Seyediman Seyedarab)
  - ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect (Nícolas F. R. A. Prado)
  - rtc: rv3032: fix EERD location (Alexandre Belloni)
  - tcp: reorganize tcp_in_ack_event() and tcp_count_delivered() (Ilpo Järvinen)
  - vfio/pci: Handle INTx IRQ_NOTCONNECTED (Alex Williamson)
  - scsi: st: ERASE does not change tape location (Kai Mäkisara)
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Kai Mäkisara)
  - ext4: reorder capability check last (Christian Göttsche)
  - um: Update min_low_pfn to match changes in uml_reserved (Tiwei Bie)
  - um: Store full CSGSFS and SS register from mcontext (Benjamin Berg)
  - dlm: make tcp still work in multi-link env (Heming Zhao)
  - i3c: master: svc: Fix missing STOP for master request (Stanley Chu)
  - btrfs: send: return -ENAMETOOLONG when attempting a path that is too long (Filipe Manana)
  - btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work() (Filipe Manana)
  - btrfs: avoid linker error in btrfs_find_create_tree_block() (Mark Harmstone)
  - btrfs: make btrfs_discard_workfn() block_group ref explicit (Boris Burkov)
  - i2c: pxa: fix call balance of i2c->clk handling routines (Vitalii Mordan)
  - i2c: qup: Vote for interconnect bandwidth to DRAM (Stephan Gerhold)
  - wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2 (Felix Fietkau)
  - mmc: host: Wait for Vdd to settle on card power off (Erick Shepherd)
  - libnvdimm/labels: Fix divide error in nd_label_data_init() (Robert Richter)
  - PCI: vmd: Disable MSI remapping bypass under Xen (Roger Pau Monne)
  - pNFS/flexfiles: Report ENETDOWN as a connection error (Trond Myklebust)
  - tools/build: Don't pass test log files to linker (Ian Rogers)
  - PCI: dwc: ep: Ensure proper iteration over outbound map windows (Frank Li)
  - lockdep: Fix wait context check on softirq for PREEMPT_RT (Ryo Takakura)
  - dql: Fix dql->limit value when reset. (Jing Su)
  - thermal/drivers/qoriq: Power down TMU on system suspend (Alice Guo)
  - SUNRPC: rpcbind should never reset the port to the value '0' (Trond Myklebust)
  - SUNRPC: rpc_clnt_set_transport() must not change the autobind setting (Trond Myklebust)
  - NFSv4: Treat ENETUNREACH errors as fatal for state recovery (Trond Myklebust)
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Zsolt Kajtar)
  - fbcon: Use correct erase colour for clearing in fbcon (Zsolt Kajtar)
  - fbdev: fsl-diu-fb: add missing device_remove_file() (Shixiong Ou)
  - mailbox: use error ret code of of_parse_phandle_with_args() (Tudor Ambarus)
  - tracing: Mark binary printing functions with __printf() attribute (Andy Shevchenko)
  - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Trond Myklebust)
  - kconfig: merge_config: use an empty file as initfile (Daniel Gomez)
  - samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora (Haoran Jiang)
  - bpf: fix possible endless loop in BPF map iteration (Brandon Kammerdiener)
  - net: enetc: refactor bulk flipping of RX buffers to separate function (Vladimir Oltean)
  - cgroup: Fix compilation issue due to cgroup_mutex not being exported (gaoxu)
  - dma-mapping: avoid potential unused data compilation warning (Marek Szyprowski)
  - virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN (Zhongqiu Han)
  - scsi: target: iscsi: Fix timeout on deleted connection (Dmitry Bogdanov)


author: Brian Maly <brian.maly@oracle.com> [5.15.0-311.185.3.el9uek]
changelog:
  - net_sched: sch_sfq: move the limit validation (Octavian Purdila)  [Orabug: 38160459]  {CVE-2025-37752}
  - net_sched: sch_sfq: use a temporary work area for validating configuration (Octavian Purdila)
  - mm: synchronise PGD in x86 when utilising dax vmemmap optimisation (Lorenzo Stoakes)  [Orabug: 38055896]
  - rds: ib: Make sure a QP in INIT state is transitioned to ERR (Håkon Bugge)  [Orabug: 38119112]
  - Reapply "rds: ib: Make sure receives are posted before connection is up" (Håkon Bugge)  [Orabug: 38119112]
  - rds: Fix array index out of bounds in rds_message_purge() (Harshit Mogalapalli)  [Orabug: 38158026]
  - block: assign bi_bdev for cloned bios in blk_rq_prep_clone (Christoph Hellwig)  [Orabug: 38172722]
  - fs/proc: do_task_stat: use __for_each_thread() (Oleg Nesterov)  [Orabug: 38092818]
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/CPU/AMD: Add ZenX generations flags (Borislav Petkov (AMD))  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Free X86_BUG_AMD_APIC_C1E and X86_BUG_AMD_E400 bits (Boris Ostrovsky)  [Orabug: 38167060]  {CVE-2024-36350} {CVE-2024-36357}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.185.4.el9uek]
changelog:
  - KVM: arm64: Sanitize PM{C,I}NTEN{SET,CLR}, PMOVS{SET,CLR} before first run (Raghavendra Rao Ananta)  [Orabug: 38178527]
  - KVM: arm64: PMU: Add a helper to read a vCPU's PMCR_EL0 (Reiji Watanabe)  [Orabug: 38178527]
  - vhost-scsi: Fix vhost_scsi struct use after free (Mike Christie)  [Orabug: 38178300]
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137450]  {CVE-2025-38089}
  - bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (Michael Chan)  [Orabug: 35789734]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-311.185.5.el9uek]
changelog:
  - KVM: x86: Remove VT-d mention in posted interrupt tracepoint (Alejandro Jimenez)  [Orabug: 38195091]
  - KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled (Alejandro Jimenez)  [Orabug: 38195091]
  - KVM: x86: Print names of apicv inhibit reasons in traces (Alejandro Jimenez)  [Orabug: 38195091]
  - KVM: SVM: Always update local APIC on writes to logical dest register (Sean Christopherson)  [Orabug: 38195091]
  - x86: Pin task-stack in __get_wchan() (Peter Zijlstra)  [Orabug: 38161988]
  - x86: Fix __get_wchan() for !STACKTRACE (Peter Zijlstra)  [Orabug: 38161988]
  - sched: Add wrapper for get_wchan() to keep task blocked (Kees Cook)  [Orabug: 38161988]
  - x86: Fix get_wchan() to support the ORC unwinder (Qi Zheng)  [Orabug: 38161988]
  - nvme: tcp: avoid race between queue_lock lock and destroy (Hannes Reinecke)  [Orabug: 37331887]  {CVE-2024-53100}
  - PCI/AER: Add sysfs attributes for log ratelimits (Jon Pan-Doh)  [Orabug: 36952192]
  - PCI/AER: Ratelimit correctable and non-fatal error logging (Jon Pan-Doh)  [Orabug: 36952192]
  - PCI/AER: Simplify add_error_device() (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Convert aer_get_device_error_info(), aer_print_error() to index (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Reduce pci_print_aer() correctable error level to KERN_WARNING (Karolina Stolarek)  [Orabug: 36952192]
  - PCI/AER: Check log level once and remember it (Karolina Stolarek)  [Orabug: 36952192]
  - PCI/AER: Trace error event before ratelimiting (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Update statistics before ratelimiting (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Simplify pci_print_aer() (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Initialize aer_err_info before using it (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Move aer_print_source() earlier in file (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Rename aer_print_port_info() to aer_print_source() (Jon Pan-Doh)  [Orabug: 36952192]
  - PCI/AER: Extract bus/dev/fn in aer_print_port_info() with PCI_BUS_NUM(), etc (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Consolidate Error Source ID logging in aer_isr_one_error_type() (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Factor COR/UNCOR error handling out from aer_isr_one_error() (Bjorn Helgaas)  [Orabug: 36952192]
  - PCI/AER: Descope pci_printk() to aer_printk() (Ilpo Järvinen)  [Orabug: 36952192]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.185.6.el9uek]
changelog:
  - gre: Fix IPv6 multicast route creation. (Guillaume Nault)
  - pwm: mediatek: Ensure to disable clocks in error path (Uwe Kleine-König)
  - Revert "mmc: sdhci: Disable SD card clock before changing parameters" (Ulf Hansson)
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann)
  - Revert "ipv6: save dontfrag in cork" (Brett A C Sheffield (Librecast))
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38182990]
  - Revert "net/rds: Add krefs to struct rds_connection" (Håkon Bugge)  [Orabug: 38165949]
  - Revert "net/rds: tracepoints for rds_conn_kref_get and put" (Håkon Bugge)  [Orabug: 38165949]
  - sched: Change nr_uninterruptible type to unsigned long (Aruna Ramakrishna)  [Orabug: 37942383]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.185.7.el9uek]
changelog:
  - perf: Fix perf_event_validate_size() lockdep splat (Mark Rutland)  [Orabug: 36261485]  {CVE-2023-6931}
  - perf: Fix perf_event_validate_size() (Peter Zijlstra)  [Orabug: 36261485]  {CVE-2023-6931}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-311.185.8.el9uek]
changelog:
  - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju)  [Orabug: 38182400]
  - net/rds: poll eq during user-reset (Praveen Kumar Kannoju)  [Orabug: 38189328]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.185.6.el9uek]
changelog:
  - gre: Fix IPv6 multicast route creation. (Guillaume Nault)
  - pwm: mediatek: Ensure to disable clocks in error path (Uwe Kleine-König)
  - Revert "mmc: sdhci: Disable SD card clock before changing parameters" (Ulf Hansson)
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217338] {CVE-2025-38350}
  - Revert "ipv6: save dontfrag in cork" (Brett A C Sheffield)
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju) [Orabug: 38182990]
  - Revert "net/rds: Add krefs to struct rds_connection" (Håkon Bugge) [Orabug: 38165949]
  - Revert "net/rds: tracepoints for rds_conn_kref_get and put" (Håkon Bugge) [Orabug: 38165949]
  - sched: Change nr_uninterruptible type to unsigned long (Aruna Ramakrishna) [Orabug: 37942383]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-311.185.7.el9uek]
changelog:
  - perf: Fix perf_event_validate_size() lockdep splat (Mark Rutland) [Orabug: 36261485] {CVE-2023-6931}
  - perf: Fix perf_event_validate_size() (Peter Zijlstra) [Orabug: 36261485] {CVE-2023-6931}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-311.185.8.el9uek]
changelog:
  - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju) [Orabug: 38182400]
  - net/rds: poll eq during user-reset (Praveen Kumar Kannoju) [Orabug: 38189328]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.185.1.el9uek]
changelog:
  - uek-rpm: mips: Disable CONFIG_TRANSPARENT_HUGEPAGE (Dave Kleikamp) [Orabug: 38280961]
  - KVM: x86/MMU: Allow faulting at hugepages during dirty tracking (Joao Martins) [Orabug: 36409415]
  - KVM: x86/MMU: Dirty tracking without write-protection for shadow paging (Joao Martins) [Orabug: 36409415]
  - KVM: x86/MMU: Track rmap present pages (Joao Martins) [Orabug: 36409415]
  - nvme: check for valid nvme_identify_ns() before using it (Ewan D. Milne) [Orabug: 38207640]
  - nvme: bring back auto-removal of deleted namespaces during sequential scan (Christoph Hellwig) [Orabug: 38207640]
  - rds: tcp: block BH in TCP callbacks (Eric Dumazet) [Orabug: 38236843]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.2.el9uek]
changelog:
  - EDAC: Octeon: Fix compile error by replacing sdei_init() with acpi_sdei_init() (Vijayendra Suman) [Orabug: 38294908]
  - LTS version: v5.15.187 (Vijayendra Suman)
  - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38309912] {CVE-2025-38404}
  - platform/x86: think-lmi: Create ksets consecutively (Kurt Borja)
  - Logitech C-270 even more broken (Oliver Neukum)
  - i2c/designware: Fix an initialization issue (Michael J. Ruhl) [Orabug: 38253850] {CVE-2025-38380}
  - usb: cdnsp: do not disable slot for disabled slot (Peter Chen)
  - xhci: dbc: Flush queued requests before stopping dbc (Mathias Nyman)
  - xhci: dbctty: disable ECHO flag by default (Łukasz Bartosik)
  - platform/x86: dell-wmi-sysman: Fix class device unregistration (Kurt Borja)
  - platform/x86: think-lmi: Fix class device unregistration (Kurt Borja)
  - dpaa2-eth: fix xdp_rxq_info leak (Wangfushuai)
  - net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats (Ioana Ciornei)
  - dpaa2-eth: Update SINGLE_STEP register access (Radu Bulie)
  - dpaa2-eth: Update dpni_get_single_step_cfg command (Radu Bulie)
  - ethernet: atl1: Add missing DMA mapping error checks and count errors (Thomas Fourier)
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Trond Myklebust)
  - drm/v3d: Disable interrupts before resetting the GPU (Maíra Canal) [Orabug: 38253820] {CVE-2025-38371}
  - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug: 38253906] {CVE-2025-38395}
  - regulator: gpio: Add input_supply support in gpio_regulator_config (Jerome Neanne)
  - mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier (Avri Altman)
  - rcu: Return early if callback is not specified (Uladzislau Rezki)
  - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [Orabug: 38253863] {CVE-2025-38384}
  - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253874] {CVE-2025-38386}
  - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253945] {CVE-2025-38406}
  - wifi: mac80211: drop invalid source address OCB frames (Johannes Berg)
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi) [Orabug: 38253914] {CVE-2025-38399}
  - powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
  - ata: pata_cs5536: fix build on 32-bit UML (Johannes Berg)
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Takashi Iwai)
  - ALSA: sb: Don't allow changing the DMA mode during operations (Takashi Iwai)
  - drm/msm: Fix a fence leak in submit error path (Rob Clark) [Orabug: 38253967] {CVE-2025-38410}
  - nui: Fix dma_mapping_error() check (Thomas Fourier)
  - rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju) [Orabug: 38253841] {CVE-2025-38377}
  - enic: fix incorrect MTU comparison in enic_change_mtu() (Alok Tiwari)
  - amd-xgbe: align CL37 AN sequence as per databook (Raju Rangoju)
  - lib: test_objagg: Set error message in check_expect_hints_stats() (Dan Carpenter)
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Vitaly Lifshits)
  - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253886] {CVE-2025-38389}
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Kurt Borja) [Orabug: 38253976] {CVE-2025-38412}
  - drm/i915/selftests: Change mock_request() to return error pointers (Dan Carpenter)
  - spi: spi-fsl-dspi: Clear completion counter before initiating transfer (James Clark)
  - drm/exynos: fimd: Guard display clock control with runtime PM calls (Marek Szyprowski)
  - btrfs: fix missing error handling when searching for inode refs during log replay (Filipe Manana)
  - scsi: ufs: core: Fix spelling of a sysfs attribute name (Bart Van Assche)
  - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Thomas Fourier)
  - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() (Thomas Fourier)
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [Orabug: 38253900] {CVE-2025-38393}
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug: 38253922] {CVE-2025-38400}
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253880] {CVE-2025-38387}
  - platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment (David Thompson)
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky)
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu) [Orabug: 38253927] {CVE-2025-38401}
  - mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data (Masami Hiramatsu)
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253893] {CVE-2025-38391}
  - mmc: sdhci: Add a helper function for dump register in dynamic debug mode (Victor Shih)
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug: 38253936] {CVE-2025-38403}
  - rtc: cmos: use spin_lock_irqsave in cmos_interrupt (Mateusz Jończyk)
  - ARM: 9354/1: ptrace: Use bitfield helpers (Geert Uytterhoeven)
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [Orabug: 36530624] {CVE-2024-26726}
  - arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS (Nathan Chancellor)
  - s390/entry: Fix last breaking event handling in case of stack corruption (Heiko Carstens)
  - media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)
  - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Dexuan Cui)
  - drm/amd/display: Add null pointer check for get_first_active_display() (Xu Wang) [Orabug: 38253794] {CVE-2025-38362}
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)
  - drm/amdkfd: Fix race in GWS queue scheduling (Jay Cornwall)
  - drm/udl: Unregister device before cleaning up on disconnect (Thomas Zimmermann)
  - drm/tegra: Fix a possible null pointer dereference (Qiu-Ji Chen) [Orabug: 38253800] {CVE-2025-38363}
  - drm/tegra: Assign plane type before registration (Thierry Reding)
  - HID: wacom: fix kobject reference count leak (Qasim Ijaz)
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)
  - HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)
  - btrfs: update superblock's device bytes_used when dropping chunk (Mark Harmstone)
  - dm-raid: fix variable in journal device check (Heinz Mauelshagen)
  - Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frédéric Danis)
  - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive (Yao Zi)
  - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)
  - net: selftests: fix TCP packet checksum (Jakub Kicinski)
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug: 38175043] {CVE-2025-38245}
  - net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)
  - um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)
  - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)
  - af_unix: Don't set -ECONNRESET for consumed OOB skb. (Kuniyuki Iwashima)
  - wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Yuan Chen)
  - attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug: 38175063] {CVE-2025-38249}
  - atm: clip: prevent NULL deref in clip_push() (Eric Dumazet) [Orabug: 38175077] {CVE-2025-38251}
  - s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin) [Orabug: 38175091] {CVE-2025-38257}
  - i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)
  - i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)
  - platform/x86: ideapad-laptop: use usleep_range() for EC polling (Rongrong)
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Thomas Zimmermann)
  - tty: vt: make consw::con_switch() return a bool (Jiri Slaby)
  - tty: vt: sanitize arguments of consw::con_clear() (Jiri Slaby)
  - tty: vt: make init parameter of consw::con_init() a bool (Jiri Slaby)
  - vgacon: remove unneeded forward declarations (Jiri Slaby)
  - vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen() (Jiri Slaby)
  - tty/vt: consolemap: rename and document struct uni_pagedir (Jiri Slaby)
  - fbcon: delete a few unneeded forward decl (Daniel Vetter)
  - uio_hv_generic: Align ring size to system page (Long Li)
  - uio_hv_generic: Query the ringbuffer size for device (Saurabh Singh Sengar)
  - Drivers: hv: vmbus: Add utility function for querying ring size (Saurabh Singh Sengar)
  - Drivers: hv: Rename 'alloced' to 'allocated' (Vitaly Kuznetsov)
  - f2fs: don't over-report free space or inodes in statvfs (Chao Yu)
  - media: imx-jpeg: Drop the first error frames (Ming Qian)
  - clk: ti: am43xx: Add clkctrl data for am43xx ADC1 (Miquel Raynal)
  - media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: davinci: vpif: Fix memory leak in probe error path (Dmitry Nikiforov)
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [Orabug: 38158700] {CVE-2025-38230}
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)
  - ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)
  - ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Mario Limonciello)
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Vijendar Mukunda)
  - ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Chance Yang)
  - tty: serial: uartlite: register uart driver in init (Jakub Lewalski) [Orabug: 38175113] {CVE-2025-38262}
  - usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Michael Grzeschik)
  - coresight: Only check bottom two claim bits (James Clark)
  - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h (Sami Tolvanen)
  - iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)
  - bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng) [Orabug: 38175119] {CVE-2025-38263}
  - md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)
  - dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Namjae Jeon)
  - hwmon: (pmbus/max34440) Fix support for max34451 (Alexis Czezar Torreno)
  - leds: multicolor: Fix intensity setting while SW blinking (Sven Schwermer)
  - mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia)
  - NFSv4: Always set NLINK even if the server doesn't support it (Han Young)
  - cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohár)
  - LTS version: v5.15.186 (Vijayendra Suman)
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook)
  - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() (Vitaliy Shevtsov)
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [Orabug: 38180595] {CVE-2025-38320}
  - perf: Fix sample vs do_exit() (Peter Zijlstra) [Orabug: 38254029] {CVE-2025-38424}
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens)
  - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE (Paul Chaignon)
  - net: Fix checksum update for ILA adj-transport (Paul Chaignon)
  - ext4: avoid remount errors with 'abort' mount option (Jan Kara)
  - ext4: make 'abort' mount option handling standard (Jan Kara)
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976983] {CVE-2025-37958}
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158476] {CVE-2025-38193}
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (James Morse)
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977005] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976929] {CVE-2025-37948}
  - arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually (Liu Song)
  - arm64: proton-pack: Expose whether the branchy loop k value (James Morse)
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (James Morse)
  - arm64: insn: Add support for encoding DSB (James Morse)
  - arm64: insn: add encoders for atomic operations (Hou Tao)
  - arm64: move AARCH64_BREAK_FAULT into insn-def.h (Hou Tao)
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Claudiu Beznea)
  - ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms (Geert Uytterhoeven)
  - ARM: dts: am335x-bone-common: Increase MDIO reset deassert time (Colin Foster)
  - ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board (Shengyu Qu)
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [Orabug: 38158405] {CVE-2025-38180}
  - net: atm: add lec_mutex (Eric Dumazet) [Orabug: 38180611] {CVE-2025-38323}
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [Orabug: 38158412] {CVE-2025-38181}
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [Orabug: 38158424] {CVE-2025-38184}
  - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell)
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [Orabug: 38158433] {CVE-2025-38185}
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [Orabug: 38180617] {CVE-2025-38324}
  - wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov) [Orabug: 38254010] {CVE-2025-38420}
  - ptp: fix breakage after ptp_vclock_in_use() rework (Vladimir Oltean)
  - net: ice: Perform accurate aRFS flow match (Krishna Kumar)
  - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [Orabug: 38180627] {CVE-2025-38326}
  - pldmfw: Select CRC32 when PLDMFW is selected (Simon Horman)
  - hwmon: (occ) fix unaligned accesses (Arnd Bergmann)
  - hwmon: (occ) Rework attribute registration for stack usage (Arnd Bergmann)
  - hwmon: (occ) Add soft minimum power cap attribute (Eddie James)
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller)
  - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate (Krzysztof Kozlowski)
  - erofs: remove unused trace event erofs_destroy_inode (Gao Xiang)
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) [Orabug: 38132180] {CVE-2025-38085}
  - mm: hugetlb: independent PMD page table shared count (Liu Shixin) [Orabug: 37484959] {CVE-2024-57883}
  - mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn) [Orabug: 38132171] {CVE-2025-38084}
  - iio: accel: fxls8962af: Fix temperature calculation (Sean Nyekjaer)
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane)
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai)
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Wangdicheng)
  - Input: sparcspkr - avoid unannotated fall-through (Yuli Wang)
  - block: default BLOCK_LEGACY_AUTOLOAD to y (Christoph Hellwig)
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [Orabug: 38152876] {CVE-2025-38103}
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [Orabug: 38158457] {CVE-2025-38190}
  - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley)
  - selftests/x86: Add a test to detect infinite SIGTRAP handler loop (Xin Li)
  - udmabuf: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter)
  - scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui)
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [Orabug: 38180635] {CVE-2025-38328}
  - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [Orabug: 38158483] {CVE-2025-38194}
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [Orabug: 38137453] {CVE-2025-38090}
  - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N)
  - platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes)
  - platform/x86: dell_rbu: Fix list usage (Stuart Hayes) [Orabug: 38158494] {CVE-2025-38197}
  - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" (Alexander Sverdlin)
  - tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn)
  - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary)
  - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor)
  - watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson)
  - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Xu Wang)
  - bpf, sockmap: Fix data lost during EAGAIN retries (Jiayuan Chen)
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [Orabug: 38158517] {CVE-2025-38200}
  - sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu)
  - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [Orabug: 38180667] {CVE-2025-38332}
  - pinctrl: mcp23s08: Reset all pins to input at probe (Mike Looijmans)
  - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu) [Orabug: 38180730] {CVE-2025-38342}
  - vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel)
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Yong Wang)
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Sean Christopherson)
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee)
  - libbpf: Add identical pointer detection to btf_dedup_is_equiv() (Alan Maguire)
  - clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner)
  - wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg)
  - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos)
  - net: atlantic: generate software timestamp just before the doorbell (Jason Xing)
  - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior)
  - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows (Eric Dumazet)
  - tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet)
  - net: dlink: add synchronization for stats update (Moon Yeounsu)
  - i2c: npcm: Add clock toggle recovery (Tali Perry)
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mike Tipton)
  - sctp: Do not wake readers in __sctp_write_space() (Petr Malat)
  - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Henk Vergonet)
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari)
  - i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De)
  - tipc: use kfree_sensitive() for aead cleanup (Zilin Guan)
  - net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez)
  - cpufreq: Force sync policy boost with global boost on sysfs update (Viresh Kumar)
  - thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+ (George Moussalem)
  - pmdomain: ti: Fix STANDBY handling of PER power domain (Sukrut Bellary)
  - nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults (Simon Schuster)
  - media: i2c: imx334: update mode_3840x2160_regs array (Shravan Chippa)
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Xu Wang) [Orabug: 38175013] {CVE-2025-38237}
  - media: tc358743: ignore video while HPD is low (Hans Verkuil)
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Amber Lin)
  - drm/msm/dpu: don't select single flush for active CTL blocks (Dmitry Baryshkov)
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [Orabug: 38158545] {CVE-2025-38203}
  - drm/amdgpu/gfx9: fix CSIB handling (Alex Deucher)
  - drm/amdgpu/gfx8: fix CSIB handling (Alex Deucher)
  - ext4: prevent stale extent cache entries caused by concurrent get es_cache (Zhang Yi)
  - sunrpc: fix race in cache cleanup causing stale nextcheck time (Long Li)
  - media: rkvdec: Initialize the m2m context before the controls (Nicolas Dufresne)
  - media: ti: cal: Fix wrong goto on error path (Tomi Valkeinen)
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [Orabug: 38158552] {CVE-2025-38204}
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Zhang Yi)
  - drm/amdgpu/gfx7: fix CSIB handling (Alex Deucher)
  - media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition (Nas Chung)
  - media: ccs-pll: Better validate VT PLL branch (Sakari Ailus)
  - drm/amdgpu/gfx10: fix CSIB handling (Alex Deucher)
  - media: i2c: imx334: Fix runtime PM handling in remove function (Tarang Raval)
  - drm/msm/a6xx: Increase HFI response timeout (Akhil P Oommen)
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Srinivasan Shanmugam)
  - media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition (Nas Chung)
  - drm/msm/hdmi: add runtime PM calls to DDC transfer function (Dmitry Baryshkov)
  - media: i2c: imx334: Enable runtime PM before sub-device registration (Tarang Raval)
  - drm/bridge: anx7625: change the gpiod_set_value API (Ayushi Makhija)
  - exfat: fix double free in delayed_free (Namjae Jeon) [Orabug: 38158566] {CVE-2025-38206}
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Damon Ding)
  - sunrpc: update nextcheck time when adding new cache entries (Long Li)
  - drm/amdgpu/gfx6: fix CSIB handling (Alex Deucher)
  - ACPI: battery: negate current when discharging (Peter Marheine)
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla)
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Yuanjun Gong)
  - ACPICA: utilities: Fix overflow check in vsnprintf() (Philip Redkin)
  - power: supply: bq27xxx: Retrieve again when busy (Jerry Lv)
  - ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han) [Orabug: 38180747] {CVE-2025-38344}
  - ACPI: bus: Bail out if acpi_kobj registration fails (Armin Wolf)
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Hector Martin)
  - ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem)
  - clocksource: Fix the CPUs' choice in the watchdog per CPU verification (Guilherme G. Piccoli)
  - ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han) [Orabug: 38180755] {CVE-2025-38345}
  - iio: adc: ad7606_spi: fix reg write value mask (David Lechner)
  - iio: imu: inv_icm42600: Fix temperature calculation (Sean Nyekjaer)
  - iio: accel: fxls8962af: Fix temperature scan element sign (Sean Nyekjaer)
  - PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() (Diederik de Haas)
  - PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Järvinen)
  - PCI: Add ACS quirk for Loongson PCIe (Huacai Chen)
  - PCI: cadence-ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)
  - uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li)
  - remoteproc: core: Release rproc->clean_table after rproc_attach() fails (Xiaolei Wang) [Orabug: 38254002] {CVE-2025-38418}
  - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Xiaolei Wang) [Orabug: 38254006] {CVE-2025-38419}
  - regulator: max14577: Add error check for max14577_read_reg() (Xu Wang)
  - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj)
  - staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel)
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [Orabug: 38132188] {CVE-2025-38086}
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [Orabug: 38180767] {CVE-2025-38346}
  - dm-mirror: fix a tiny race condition (Mikulas Patocka)
  - mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Xu Wang)
  - mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Xu Wang)
  - mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng)
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug: 38158591] {CVE-2025-38211}
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [Orabug: 38158597] {CVE-2025-38212}
  - clk: meson-g12a: add missing fclk_div2 to spicc (Da Xue)
  - parisc: fix building with gcc-15 (Arnd Bergmann)
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (Gong, Ruiqi)
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [Orabug: 38158614] {CVE-2025-38214}
  - EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara)
  - NFC: nci: uart: Set tty->disc_data only in success path (Krzysztof Kozlowski) [Orabug: 38253991] {CVE-2025-38416}
  - f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu) [Orabug: 38158639] {CVE-2025-38218}
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim) [Orabug: 38158647] {CVE-2025-38219}
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter) [Orabug: 38254053] {CVE-2025-38428}
  - ext4: ensure i_size is smaller than maxbytes (Zhang Yi)
  - ext4: factor out ext4_get_maxbytes() (Zhang Yi)
  - ext4: fix calculation of credits for extent tree modification (Jan Kara)
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo) [Orabug: 38158661] {CVE-2025-38222}
  - bus: fsl-mc: fix GET/SET_TAILDROP command ids (Wan Junjie)
  - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei)
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis) [Orabug: 38180696] {CVE-2025-38336}
  - can: tcan4x5x: fix power regulator retrieval during probe (Brett Werling)
  - bus: mhi: host: Fix conflict between power_up and SYSERR (Jeffrey Hugo)
  - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 (Andreas Kemnade)
  - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim)
  - media: uvcvideo: Fix deferred probing error (Ricardo Ribalda)
  - media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)
  - media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)
  - media: vivid: Change the siize of the composing (Denis Arefev) [Orabug: 38158680] {CVE-2025-38226}
  - media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis) [Orabug: 38158685] {CVE-2025-38227}
  - media: videobuf2: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: venus: Fix probe error handling (Loic Poulain)
  - media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke)
  - media: gspca: Add error handling for stv06xx_read_sensor() (Xu Wang)
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158691] {CVE-2025-38229}
  - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case (Sakari Ailus)
  - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div (Sakari Ailus)
  - media: ccs-pll: Start OP pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: ccs-pll: Start VT pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: ov8856: suppress probe deferral errors (Johan Hovold)
  - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai)
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [Orabug: 38180706] {CVE-2025-38337}
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng) [Orabug: 38158706] {CVE-2025-38231}
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Neil Brown) [Orabug: 38254061] {CVE-2025-38430}
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter) [Orabug: 38180782] {CVE-2025-38348}
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Xu Wang)
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Xu Wang)
  - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (Gautam Menghani)
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Xu Wang)
  - gfs2: move msleep to sleepable context (Alexander Aring)
  - crypto: marvell/cesa - Do not chain submitted requests (Herbert Xu)
  - configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu)
  - xfs: allow inode inactivation during a ro mount log recovery (Darrick J. Wong)
  - kbuild: hdrcheck: fix cross build with clang (Arnd Bergmann)
  - kbuild: userprogs: fix bitsize and target detection on clang (Thomas Weißschuh)
  - drm/meson: Use 1000ULL when operating with mode->clock (I Hsin Cheng)
  - net: usb: aqc111: debug info before sanitation (Oliver Neukum)
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet)
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner) [Orabug: 38152863] {CVE-2025-38100}
  - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini)
  - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() (Amit Sunil Dhamne)
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman)
  - usb: cdnsp: Fix issue with detecting USB 3.2 speed (Pawel Laszczak)
  - usb: cdnsp: Fix issue with detecting command completion event (Pawel Laszczak)
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152868] {CVE-2025-38102}
  - drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang (Nathan Chancellor)
  - kbuild: Add KBUILD_CPPFLAGS to as-option invocation (Nathan Chancellor)
  - kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS (Masahiro Yamada)
  - kbuild: Add CLANG_FLAGS to as-instr (Nathan Chancellor)
  - mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation (Nathan Chancellor)
  - drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang (Nathan Chancellor)
  - kbuild: Update assembler calls to use proper flags and language target (Nick Desaulniers)
  - MIPS: Prefer cc-option for additions to cflags (Nathan Chancellor)
  - MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option (Nathan Chancellor)
  - x86/boot/compressed: prefer cc-option for CFLAGS additions (Nick Desaulniers)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [Orabug: 38223086] {CVE-2025-38352}
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (David Heimann)
  - perf: Ensure bpf_perf_link path is properly serialized (Peter Zijlstra)
  - nvmet-fcloop: access fcpreq only when holding reqlock (Daniel Wagner)
  - fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu)
  - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet) [Orabug: 38152893] {CVE-2025-38107}
  - sch_ets: make est_qlen_notify() idempotent (Cong Wang)
  - net_sched: tbf: fix a race in tbf_change() (Eric Dumazet)
  - net_sched: red: fix a race in __red_change() (Eric Dumazet) [Orabug: 38152898] {CVE-2025-38108}
  - net_sched: prio: fix a race in prio_tune() (Eric Dumazet) [Orabug: 38105333] {CVE-2025-38083}
  - net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad)
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Moshe Shemesh)
  - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski) [Orabug: 38152911] {CVE-2025-38111}
  - net: mdio: C22 is now optional, EOPNOTSUPP if not provided (Andrew Lunn)
  - macsec: MACsec SCI assignment for ES = 0 (Carlos Fernandez)
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [Orabug: 38152915] {CVE-2025-38112}
  - i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz)
  - i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz)
  - drm/meson: fix more rounding issues with 59.94Hz modes (Martin Blumenstingl)
  - drm/meson: use vclk_freq instead of pixel_freq in debug print (Martin Blumenstingl)
  - drm/meson: fix debug log statement when setting the HDMI clocks (Martin Blumenstingl)
  - drm/meson: use unsigned long long / Hz for frequency types (Martin Blumenstingl)
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Haren Myneni)
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani) [Orabug: 38137444] {CVE-2025-38088}
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [Orabug: 38152922] {CVE-2025-38115}
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari)
  - ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Caleb Connolly)
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park) [Orabug: 38180545] {CVE-2025-38305}
  - scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav) [Orabug: 38152945] {CVE-2025-38119}
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Claudiu Beznea)
  - serial: sh-sci: Check if TX data was written to device in .tx_empty() (Claudiu Beznea)
  - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 (Judith Mendez)
  - arm64: dts: ti: k3-am65-main: Fix sdhci node properties (Judith Mendez)
  - arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property (Nishanth Menon)
  - Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)
  - Input: synaptics-rmi4 - convert to use sysfs_emit() APIs (Zhang Songyi)
  - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [Orabug: 38256449] {CVE-2025-38498}
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) (Al Viro)
  - seg6: Fix validation of nexthop addresses (Ido Schimmel) [Orabug: 38180555] {CVE-2025-38310}
  - wireguard: device: enable threaded NAPI (Mirco Barone)
  - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal) [Orabug: 38152957] {CVE-2025-38120}
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari) [Orabug: 38152965] {CVE-2025-38122}
  - vmxnet3: correctly report gso type for UDP tunnels (Ronak Doshi)
  - net: dsa: tag_brcm: legacy: fix pskb_may_pull length (Álvaro Fernández Rojas)
  - ice: create new Tx scheduler nodes for new queues only (Michal Kubiak)
  - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz)
  - spi: bcm63xx-hsspi: fix shared reset (Álvaro Fernández Rojas)
  - spi: bcm63xx-spi: fix shared reset (Álvaro Fernández Rojas)
  - net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter)
  - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue (Yanqing Wang)
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Alok Tiwari)
  - net: stmmac: platform: guarantee uniqueness of bus_id (Quentin Schulz)
  - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre)
  - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a (Yuli Wang)
  - iio: adc: ad7124: Fix 3dB filter frequency reading (Uwe Kleine-König)
  - serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin) [Orabug: 38153011] {CVE-2025-38135}
  - usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar) [Orabug: 38153016] {CVE-2025-38136}
  - PCI/DPC: Initialize aer_err_info before using it (Bjorn Helgaas)
  - dmaengine: ti: Add NULL check in udma_probe() (Henry Martin) [Orabug: 38153029] {CVE-2025-38138}
  - PCI: cadence: Fix runtime atomic count underflow (Hans Zhang)
  - rtc: sh: assign correct interrupts with DT (Wolfram Sang)
  - perf record: Fix incorrect --user-regs comments (Dapeng Mi)
  - perf tests switch-tracking: Fix timestamp comparison (Leo Yan)
  - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov)
  - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe Jaillet)
  - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter)
  - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe (Dan Carpenter)
  - perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter)
  - backlight: pm8941: Add NULL check in wled_configure() (Henry Martin) [Orabug: 38153050] {CVE-2025-38143}
  - perf ui browser hists: Set actions->thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo)
  - perf build: Warn when libdebuginfod devel files are not available (Arnaldo Carvalho de Melo)
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [Orabug: 38180565] {CVE-2025-38312}
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin) [Orabug: 38153059] {CVE-2025-38145}
  - soc: aspeed: lpc: Fix impossible judgment condition (Su Hui)
  - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz)
  - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov)
  - bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei) [Orabug: 38180572] {CVE-2025-38313}
  - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi)
  - nilfs2: add pointer check for nilfs_direct_propagate() (Xu Wang)
  - ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery (Murad Masimov)
  - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [Orabug: 38253984] {CVE-2025-38415}
  - arm64: dts: imx8mn-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: imx8mm-beacon: Fix RTC capacitive load (Adam Ford)
  - ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang)
  - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang)
  - f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu)
  - f2fs: use d_inode(dentry) cleanup dentry->d_inode (Zhiguo Niu)
  - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Horatiu Vultur)
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [Orabug: 38153064] {CVE-2025-38146}
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [Orabug: 38153069] {CVE-2025-38147}
  - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan)
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails (Kafai Wan) [Orabug: 38180470] {CVE-2025-38280}
  - net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich) [Orabug: 38153088] {CVE-2025-38153}
  - netfilter: nft_tunnel: fix geneve_opt dump (Fernando Fernandez Mancera)
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [Orabug: 38153094] {CVE-2025-38154}
  - vfio/type1: Fix error unwind in migration dirty bitmap allocation (Li Rongqing)
  - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal)
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [Orabug: 38153109] {CVE-2025-38157}
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev) [Orabug: 38153121] {CVE-2025-38159}
  - s390/bpf: Store backchain even for leaf progs (Ilya Leoshkevich)
  - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz (Vincent Knecht)
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [Orabug: 38180488] {CVE-2025-38285}
  - pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko) [Orabug: 38180494] {CVE-2025-38286}
  - libbpf: Use proper errno value in nlattr (Anton Protopopov)
  - ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen)
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin) [Orabug: 38153131] {CVE-2025-38160}
  - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Anton Protopopov)
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad) [Orabug: 38153138] {CVE-2025-38161}
  - netfilter: nft_quota: match correctly when the quota just depleted (Zhongqiu Duan)
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang)
  - libbpf: Use proper errno value in linker (Anton Protopopov)
  - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() (Chao Yu)
  - f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu)
  - iommu: Protect against overflow in iommu_pgsize() (Jason Gunthorpe)
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang)
  - wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov)
  - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik)
  - net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta)
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [Orabug: 38153149] {CVE-2025-38163}
  - bpf, sockmap: fix duplicated data transmission (Jiayuan Chen)
  - IB/cm: use rwlock for MAD agent lock (Jacob Moroni)
  - wifi: ath11k: fix node corruption in ar->arvifs list (Stone Zhang) [Orabug: 38180515] {CVE-2025-38293}
  - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES (Huang Yiwei)
  - drm/tegra: rgb: Fix the unbound reference count (Biju Das)
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Kees Cook)
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das)
  - selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron)
  - firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin)
  - m68k: mac: Fix macintosh_config for Mac II (Finn Thain)
  - fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin) [Orabug: 38153172] {CVE-2025-38167}
  - media: rkvdec: Fix frame size enumeration (Jonas Karlman)
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han) [Orabug: 38180589] {CVE-2025-38319}
  - spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven)
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Armin Wolf)
  - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao)
  - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu)
  - power: reset: at91-reset: Optimize at91_reset() (Alexander Shiyan)
  - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) [Orabug: 38180524] {CVE-2025-38298}
  - crypto: sun8i-ce - move fallback ahash_request to the end of the struct (Ovidiu Panait)
  - crypto: xts - Only add ecb if it is not already there (Herbert Xu)
  - crypto: lrw - Only add ecb if it is not already there (Herbert Xu)
  - crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu)
  - crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu) [Orabug: 38153188] {CVE-2025-38173}
  - x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish)
  - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions (Corentin Labbe)
  - perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang)
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher)
  - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [Orabug: 38158383] {CVE-2025-38174}
  - usb: usbtmc: Fix timeout value in get_stb (Dave Penkler)
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Charles Yeh)
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie)
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li)
  - rtc: Fix offset calculation for .start_secs < 0 (Alexandre Mergnat)
  - rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat)
  - pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos)
  - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 (Gabor Juhos)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.3.el9uek]
changelog:
  - TIOCSTI: Document CAP_SYS_ADMIN behaviour in Kconfig (Günther Noack) [Orabug: 38255504]
  - TIOCSTI: always enable for CAP_SYS_ADMIN (Samuel Thibault) [Orabug: 38255504]
  - tty: Fix typo in LEGACY_TIOCSTI Kconfig description (Hanno Böck) [Orabug: 38255504]
  - tty: Move TIOCSTI toggle variable before kerndoc (Kees Cook) [Orabug: 38255504]
  - tty: Allow TIOCSTI to be disabled (Kees Cook) [Orabug: 38255504]
  - tty: Move sysctl setup into "core" tty logic (Kees Cook) [Orabug: 38255504]
  - tty: reformat kernel-doc in tty_io.c (Jiri Slaby) [Orabug: 38255504]
  - tty: reformat kernel-doc in tty_ldisc.c (Jiri Slaby) [Orabug: 38255504]
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Patrisious Haddad) [Orabug: 38236297]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Patrisious Haddad) [Orabug: 38236297]
  - net/mlx5: E-switch, refactor eswitch mode change (Patrisious Haddad) [Orabug: 38236297]
  - IB/mlx5: Support querying eswitch functions from DEVX (Bodong Wang) [Orabug: 38236297]
  - RDMA/mlx5: Fix HW counters query for non-representor devices (Patrisious Haddad) [Orabug: 38161800]
  - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 38161800]
  - Revert "RDMA/mlx5: Fix CC counters query for MPV" (Qing Huang) [Orabug: 38161800]
  - RDMA/mlx5: Fix vport loopback for MPV device (Patrisious Haddad) [Orabug: 38118599]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.4.el9uek]
changelog:
  - rds: Fix NULL ptr deref in xas_start (Håkon Bugge)  [Orabug: 38166374]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers)  [Orabug: 38319943]
  - hugetlb: arm64: add mte support (Dave Kleikamp)  [Orabug: 38177800]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.5.el9uek]
changelog:
  - Revert "mm: hugetlb: independent PMD page table shared count" (Harshit Mogalapalli)  [Orabug: 38327655]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-312.187.5.1.el9uek]
changelog:
  - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta)  [Orabug: 38343660]  
  - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta)  [Orabug: 38343660]  
  - x86/vmscape: Enable the mitigation (Pawan Gupta)  [Orabug: 38343660]  
  - x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta)  [Orabug: 38343660]  
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf)  [Orabug: 38343660]  
  - x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta)  [Orabug: 38343660]  
  - x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta)  [Orabug: 38343660]  
  - Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta)  [Orabug: 38343660]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-312.187.5.1.el9uek]
changelog:
  - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta)  [Orabug: 38343660]
  - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta)  [Orabug: 38343660]
  - x86/vmscape: Enable the mitigation (Pawan Gupta)  [Orabug: 38343660]
  - x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta)  [Orabug: 38343660]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf)  [Orabug: 38343660]
  - x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta)  [Orabug: 38343660]
  - x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta)  [Orabug: 38343660]
  - Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta)  [Orabug: 38343660]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.5.2.el9uek]
changelog:
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (D Scott Phillips)  [Orabug: 38435500]  
  - ARM: UEK: Disable arm64 erratum QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 38435500]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.5.2.el9uek]
changelog:
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (D Scott Phillips)  [Orabug: 38435500]
  - ARM: UEK: Disable arm64 erratum QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky)  [Orabug: 38435500]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.5.3.el9uek]
changelog:
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires)  [Orabug: 38454666]  {CVE-2025-38494} 
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic)  [Orabug: 38454665]  {CVE-2025-38618} 
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro)  [Orabug: 38454664]  {CVE-2025-38499} 
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires)  [Orabug: 38454662]  {CVE-2025-38495} 
  - nvme-tcp: sanitize request list handling (Hannes Reinecke)  [Orabug: 38454661]  {CVE-2025-38264} 
  - llist: add interface to check if a node is on a list. (NeilBrown)  [Orabug: 38454661]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-311.185.5.el9uek]
changelog:
  - KVM: x86: Remove VT-d mention in posted interrupt tracepoint (Alejandro Jimenez) [Orabug: 38195091]
  - KVM: x86: Only set APICV_INHIBIT_REASON_ABSENT if APICv is enabled (Alejandro Jimenez) [Orabug: 38195091]
  - KVM: x86: Print names of apicv inhibit reasons in traces (Alejandro Jimenez) [Orabug: 38195091]
  - KVM: SVM: Always update local APIC on writes to logical dest register (Sean Christopherson) [Orabug: 38195091]
  - x86: Pin task-stack in __get_wchan() (Peter Zijlstra) [Orabug: 38161988]
  - x86: Fix __get_wchan() for !STACKTRACE (Peter Zijlstra) [Orabug: 38161988]
  - sched: Add wrapper for get_wchan() to keep task blocked (Kees Cook) [Orabug: 38161988]
  - x86: Fix get_wchan() to support the ORC unwinder (Qi Zheng) [Orabug: 38161988]
  - nvme: tcp: avoid race between queue_lock lock and destroy (Hannes Reinecke) [Orabug: 37331887] {CVE-2024-53100}
  - PCI/AER: Add sysfs attributes for log ratelimits (Jon Pan-Doh) [Orabug: 36952192]
  - PCI/AER: Ratelimit correctable and non-fatal error logging (Jon Pan-Doh) [Orabug: 36952192]
  - PCI/AER: Simplify add_error_device() (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Convert aer_get_device_error_info(), aer_print_error() to index (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Reduce pci_print_aer() correctable error level to KERN_WARNING (Karolina Stolarek) [Orabug: 36952192]
  - PCI/AER: Check log level once and remember it (Karolina Stolarek) [Orabug: 36952192]
  - PCI/AER: Trace error event before ratelimiting (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Update statistics before ratelimiting (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Simplify pci_print_aer() (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Initialize aer_err_info before using it (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Move aer_print_source() earlier in file (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Rename aer_print_port_info() to aer_print_source() (Jon Pan-Doh) [Orabug: 36952192]
  - PCI/AER: Extract bus/dev/fn in aer_print_port_info() with PCI_BUS_NUM(), etc (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Consolidate Error Source ID logging in aer_isr_one_error_type() (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Factor COR/UNCOR error handling out from aer_isr_one_error() (Bjorn Helgaas) [Orabug: 36952192]
  - PCI/AER: Descope pci_printk() to aer_printk() (Ilpo Järvinen) [Orabug: 36952192]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.2.el9uek]
changelog:
  - EDAC: Octeon: Fix compile error by replacing sdei_init() with acpi_sdei_init() (Vijayendra Suman) [Orabug: 38294908]
  - LTS version: v5.15.187 (Vijayendra Suman)
  - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38309912] {CVE-2025-38404}
  - platform/x86: think-lmi: Create ksets consecutively (Kurt Borja)
  - Logitech C-270 even more broken (Oliver Neukum)
  - i2c/designware: Fix an initialization issue (Michael J. Ruhl)
  - usb: cdnsp: do not disable slot for disabled slot (Peter Chen)
  - xhci: dbc: Flush queued requests before stopping dbc (Mathias Nyman)
  - xhci: dbctty: disable ECHO flag by default (Łukasz Bartosik)
  - platform/x86: dell-wmi-sysman: Fix class device unregistration (Kurt Borja)
  - platform/x86: think-lmi: Fix class device unregistration (Kurt Borja)
  - dpaa2-eth: fix xdp_rxq_info leak (Wangfushuai)
  - net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats (Ioana Ciornei)
  - dpaa2-eth: Update SINGLE_STEP register access (Radu Bulie)
  - dpaa2-eth: Update dpni_get_single_step_cfg command (Radu Bulie)
  - ethernet: atl1: Add missing DMA mapping error checks and count errors (Thomas Fourier)
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Trond Myklebust)
  - drm/v3d: Disable interrupts before resetting the GPU (Maíra Canal) [Orabug: 38253820] {CVE-2025-38371}
  - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug: 38253906] {CVE-2025-38395}
  - regulator: gpio: Add input_supply support in gpio_regulator_config (Jerome Neanne)
  - mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier (Avri Altman)
  - rcu: Return early if callback is not specified (Uladzislau Rezki)
  - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [Orabug: 38253863] {CVE-2025-38384}
  - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253874] {CVE-2025-38386}
  - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253945] {CVE-2025-38406}
  - wifi: mac80211: drop invalid source address OCB frames (Johannes Berg)
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi) [Orabug: 38253914] {CVE-2025-38399}
  - powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
  - ata: pata_cs5536: fix build on 32-bit UML (Johannes Berg)
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Takashi Iwai)
  - ALSA: sb: Don't allow changing the DMA mode during operations (Takashi Iwai)
  - drm/msm: Fix a fence leak in submit error path (Rob Clark) [Orabug: 38253967] {CVE-2025-38410}
  - nui: Fix dma_mapping_error() check (Thomas Fourier)
  - rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju) [Orabug: 38253841] {CVE-2025-38377}
  - enic: fix incorrect MTU comparison in enic_change_mtu() (Alok Tiwari)
  - amd-xgbe: align CL37 AN sequence as per databook (Raju Rangoju)
  - lib: test_objagg: Set error message in check_expect_hints_stats() (Dan Carpenter)
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Vitaly Lifshits)
  - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253886] {CVE-2025-38389}
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Kurt Borja) [Orabug: 38253976] {CVE-2025-38412}
  - drm/i915/selftests: Change mock_request() to return error pointers (Dan Carpenter)
  - spi: spi-fsl-dspi: Clear completion counter before initiating transfer (James Clark)
  - drm/exynos: fimd: Guard display clock control with runtime PM calls (Marek Szyprowski)
  - btrfs: fix missing error handling when searching for inode refs during log replay (Filipe Manana)
  - scsi: ufs: core: Fix spelling of a sysfs attribute name (Bart Van Assche)
  - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Thomas Fourier)
  - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() (Thomas Fourier)
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [Orabug: 38253900] {CVE-2025-38393}
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug: 38253922] {CVE-2025-38400}
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253880] {CVE-2025-38387}
  - platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment (David Thompson)
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky)
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu) [Orabug: 38253927] {CVE-2025-38401}
  - mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data (Masami Hiramatsu)
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253893] {CVE-2025-38391}
  - mmc: sdhci: Add a helper function for dump register in dynamic debug mode (Victor Shih)
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug: 38253936] {CVE-2025-38403}
  - rtc: cmos: use spin_lock_irqsave in cmos_interrupt (Mateusz Jończyk)
  - ARM: 9354/1: ptrace: Use bitfield helpers (Geert Uytterhoeven)
  - btrfs: don't drop extent_map for free space inode on write error (Josef Bacik) [Orabug: 36530624] {CVE-2024-26726}
  - arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS (Nathan Chancellor)
  - s390/entry: Fix last breaking event handling in case of stack corruption (Heiko Carstens)
  - media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)
  - PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (Dexuan Cui)
  - drm/amd/display: Add null pointer check for get_first_active_display() (Xu Wang) [Orabug: 38253794] {CVE-2025-38362}
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)
  - drm/amdkfd: Fix race in GWS queue scheduling (Jay Cornwall)
  - drm/udl: Unregister device before cleaning up on disconnect (Thomas Zimmermann)
  - drm/tegra: Fix a possible null pointer dereference (Qiu-Ji Chen) [Orabug: 38253800] {CVE-2025-38363}
  - drm/tegra: Assign plane type before registration (Thierry Reding)
  - HID: wacom: fix kobject reference count leak (Qasim Ijaz)
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)
  - HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)
  - btrfs: update superblock's device bytes_used when dropping chunk (Mark Harmstone)
  - dm-raid: fix variable in journal device check (Heinz Mauelshagen)
  - Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frédéric Danis)
  - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive (Yao Zi)
  - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)
  - net: selftests: fix TCP packet checksum (Jakub Kicinski)
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug: 38175043] {CVE-2025-38245}
  - net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)
  - um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)
  - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)
  - af_unix: Don't set -ECONNRESET for consumed OOB skb. (Kuniyuki Iwashima)
  - wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Yuan Chen)
  - attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug: 38175063] {CVE-2025-38249}
  - atm: clip: prevent NULL deref in clip_push() (Eric Dumazet) [Orabug: 38175077] {CVE-2025-38251}
  - s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin) [Orabug: 38175091] {CVE-2025-38257}
  - i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)
  - i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)
  - platform/x86: ideapad-laptop: use usleep_range() for EC polling (Rongrong)
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Thomas Zimmermann)
  - tty: vt: make consw::con_switch() return a bool (Jiri Slaby)
  - tty: vt: sanitize arguments of consw::con_clear() (Jiri Slaby)
  - tty: vt: make init parameter of consw::con_init() a bool (Jiri Slaby)
  - vgacon: remove unneeded forward declarations (Jiri Slaby)
  - vgacon: switch vgacon_scrolldelta() and vgacon_restore_screen() (Jiri Slaby)
  - tty/vt: consolemap: rename and document struct uni_pagedir (Jiri Slaby)
  - fbcon: delete a few unneeded forward decl (Daniel Vetter)
  - uio_hv_generic: Align ring size to system page (Long Li)
  - uio_hv_generic: Query the ringbuffer size for device (Saurabh Singh Sengar)
  - Drivers: hv: vmbus: Add utility function for querying ring size (Saurabh Singh Sengar)
  - Drivers: hv: Rename 'alloced' to 'allocated' (Vitaly Kuznetsov)
  - f2fs: don't over-report free space or inodes in statvfs (Chao Yu)
  - media: imx-jpeg: Drop the first error frames (Ming Qian)
  - clk: ti: am43xx: Add clkctrl data for am43xx ADC1 (Miquel Raynal)
  - media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: davinci: vpif: Fix memory leak in probe error path (Dmitry Nikiforov)
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [Orabug: 38158700] {CVE-2025-38230}
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)
  - ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)
  - ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Mario Limonciello)
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Vijendar Mukunda)
  - ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Chance Yang)
  - tty: serial: uartlite: register uart driver in init (Jakub Lewalski) [Orabug: 38175113] {CVE-2025-38262}
  - usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Michael Grzeschik)
  - coresight: Only check bottom two claim bits (James Clark)
  - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h (Sami Tolvanen)
  - iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)
  - bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng) [Orabug: 38175119] {CVE-2025-38263}
  - md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)
  - dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Namjae Jeon)
  - hwmon: (pmbus/max34440) Fix support for max34451 (Alexis Czezar Torreno)
  - leds: multicolor: Fix intensity setting while SW blinking (Sven Schwermer)
  - mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia)
  - NFSv4: Always set NLINK even if the server doesn't support it (Han Young)
  - cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohár)
  - LTS version: v5.15.186 (Vijayendra Suman)
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook)
  - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() (Vitaliy Shevtsov)
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [Orabug: 38180595] {CVE-2025-38320}
  - perf: Fix sample vs do_exit() (Peter Zijlstra) [Orabug: 38254029] {CVE-2025-38424}
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens)
  - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE (Paul Chaignon)
  - net: Fix checksum update for ILA adj-transport (Paul Chaignon)
  - ext4: avoid remount errors with 'abort' mount option (Jan Kara)
  - ext4: make 'abort' mount option handling standard (Jan Kara)
  - mm/huge_memory: fix dereferencing invalid pmd migration entry (Gavin Guo) [Orabug: 37976983] {CVE-2025-37958}
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158476] {CVE-2025-38193}
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (James Morse)
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (James Morse) [Orabug: 37977005] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (James Morse) [Orabug: 37976929] {CVE-2025-37948}
  - arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually (Liu Song)
  - arm64: proton-pack: Expose whether the branchy loop k value (James Morse)
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (James Morse)
  - arm64: insn: Add support for encoding DSB (James Morse)
  - arm64: insn: add encoders for atomic operations (Hou Tao)
  - arm64: move AARCH64_BREAK_FAULT into insn-def.h (Hou Tao)
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Claudiu Beznea)
  - ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms (Geert Uytterhoeven)
  - ARM: dts: am335x-bone-common: Increase MDIO reset deassert time (Colin Foster)
  - ARM: dts: am335x-bone-common: Add GPIO PHY reset on revision C3 board (Shengyu Qu)
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [Orabug: 38158405] {CVE-2025-38180}
  - net: atm: add lec_mutex (Eric Dumazet) [Orabug: 38180611] {CVE-2025-38323}
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [Orabug: 38158412] {CVE-2025-38181}
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [Orabug: 38158424] {CVE-2025-38184}
  - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell)
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [Orabug: 38158433] {CVE-2025-38185}
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [Orabug: 38180617] {CVE-2025-38324}
  - wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov) [Orabug: 38254010] {CVE-2025-38420}
  - ptp: fix breakage after ptp_vclock_in_use() rework (Vladimir Oltean)
  - net: ice: Perform accurate aRFS flow match (Krishna Kumar)
  - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [Orabug: 38180627] {CVE-2025-38326}
  - pldmfw: Select CRC32 when PLDMFW is selected (Simon Horman)
  - hwmon: (occ) fix unaligned accesses (Arnd Bergmann)
  - hwmon: (occ) Rework attribute registration for stack usage (Arnd Bergmann)
  - hwmon: (occ) Add soft minimum power cap attribute (Eddie James)
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller)
  - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate (Krzysztof Kozlowski)
  - erofs: remove unused trace event erofs_destroy_inode (Gao Xiang)
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) [Orabug: 38132180] {CVE-2025-38085}
  - mm: hugetlb: independent PMD page table shared count (Liu Shixin) [Orabug: 37484959] {CVE-2024-57883}
  - mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn) [Orabug: 38132171] {CVE-2025-38084}
  - iio: accel: fxls8962af: Fix temperature calculation (Sean Nyekjaer)
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane)
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai)
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Wangdicheng)
  - Input: sparcspkr - avoid unannotated fall-through (Yuli Wang)
  - block: default BLOCK_LEGACY_AUTOLOAD to y (Christoph Hellwig)
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [Orabug: 38152876] {CVE-2025-38103}
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [Orabug: 38158457] {CVE-2025-38190}
  - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley)
  - selftests/x86: Add a test to detect infinite SIGTRAP handler loop (Xin Li)
  - udmabuf: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter)
  - scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui)
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [Orabug: 38180635] {CVE-2025-38328}
  - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [Orabug: 38158483] {CVE-2025-38194}
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [Orabug: 38137453] {CVE-2025-38090}
  - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N)
  - platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes)
  - platform/x86: dell_rbu: Fix list usage (Stuart Hayes) [Orabug: 38158494] {CVE-2025-38197}
  - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" (Alexander Sverdlin)
  - tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn)
  - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary)
  - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor)
  - watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson)
  - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Xu Wang)
  - bpf, sockmap: Fix data lost during EAGAIN retries (Jiayuan Chen)
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [Orabug: 38158517] {CVE-2025-38200}
  - sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu)
  - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [Orabug: 38180667] {CVE-2025-38332}
  - pinctrl: mcp23s08: Reset all pins to input at probe (Mike Looijmans)
  - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu) [Orabug: 38180730] {CVE-2025-38342}
  - vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel)
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Yong Wang)
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Sean Christopherson)
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee)
  - libbpf: Add identical pointer detection to btf_dedup_is_equiv() (Alan Maguire)
  - clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner)
  - wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg)
  - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos)
  - net: atlantic: generate software timestamp just before the doorbell (Jason Xing)
  - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior)
  - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows (Eric Dumazet)
  - tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet)
  - net: dlink: add synchronization for stats update (Moon Yeounsu)
  - i2c: npcm: Add clock toggle recovery (Tali Perry)
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mike Tipton)
  - sctp: Do not wake readers in __sctp_write_space() (Petr Malat)
  - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Henk Vergonet)
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari)
  - i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De)
  - tipc: use kfree_sensitive() for aead cleanup (Zilin Guan)
  - net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez)
  - cpufreq: Force sync policy boost with global boost on sysfs update (Viresh Kumar)
  - thermal/drivers/qcom/tsens: Update conditions to strictly evaluate for IP v2+ (George Moussalem)
  - pmdomain: ti: Fix STANDBY handling of PER power domain (Sukrut Bellary)
  - nios2: force update_mmu_cache on spurious tlb-permission--related pagefaults (Simon Schuster)
  - media: i2c: imx334: update mode_3840x2160_regs array (Shravan Chippa)
  - media: platform: exynos4-is: Add hardware sync wait to fimc_is_hw_change_mode() (Xu Wang) [Orabug: 38175013] {CVE-2025-38237}
  - media: tc358743: ignore video while HPD is low (Hans Verkuil)
  - drm/amdkfd: Set SDMA_RLCx_IB_CNTL/SWITCH_INSIDE_IB (Amber Lin)
  - drm/msm/dpu: don't select single flush for active CTL blocks (Dmitry Baryshkov)
  - jfs: Fix null-ptr-deref in jfs_ioc_trim (Dylan Wolff) [Orabug: 38158545] {CVE-2025-38203}
  - drm/amdgpu/gfx9: fix CSIB handling (Alex Deucher)
  - drm/amdgpu/gfx8: fix CSIB handling (Alex Deucher)
  - ext4: prevent stale extent cache entries caused by concurrent get es_cache (Zhang Yi)
  - sunrpc: fix race in cache cleanup causing stale nextcheck time (Long Li)
  - media: rkvdec: Initialize the m2m context before the controls (Nicolas Dufresne)
  - media: ti: cal: Fix wrong goto on error path (Tomi Valkeinen)
  - jfs: fix array-index-out-of-bounds read in add_missing_indices (Aditya Dutt) [Orabug: 38158552] {CVE-2025-38204}
  - ext4: ext4: unify EXT4_EX_NOCACHE|NOFAIL flags in ext4_ext_remove_space() (Zhang Yi)
  - drm/amdgpu/gfx7: fix CSIB handling (Alex Deucher)
  - media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition (Nas Chung)
  - media: ccs-pll: Better validate VT PLL branch (Sakari Ailus)
  - drm/amdgpu/gfx10: fix CSIB handling (Alex Deucher)
  - media: i2c: imx334: Fix runtime PM handling in remove function (Tarang Raval)
  - drm/msm/a6xx: Increase HFI response timeout (Akhil P Oommen)
  - drm/amd/display: Add NULL pointer checks in dm_force_atomic_commit() (Srinivasan Shanmugam)
  - media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition (Nas Chung)
  - drm/msm/hdmi: add runtime PM calls to DDC transfer function (Dmitry Baryshkov)
  - media: i2c: imx334: Enable runtime PM before sub-device registration (Tarang Raval)
  - drm/bridge: anx7625: change the gpiod_set_value API (Ayushi Makhija)
  - exfat: fix double free in delayed_free (Namjae Jeon) [Orabug: 38158566] {CVE-2025-38206}
  - drm/bridge: analogix_dp: Add irq flag IRQF_NO_AUTOEN instead of calling disable_irq() (Damon Ding)
  - sunrpc: update nextcheck time when adding new cache entries (Long Li)
  - drm/amdgpu/gfx6: fix CSIB handling (Alex Deucher)
  - ACPI: battery: negate current when discharging (Peter Marheine)
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla)
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Yuanjun Gong)
  - ACPICA: utilities: Fix overflow check in vsnprintf() (Philip Redkin)
  - power: supply: bq27xxx: Retrieve again when busy (Jerry Lv)
  - ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han) [Orabug: 38180747] {CVE-2025-38344}
  - ACPI: bus: Bail out if acpi_kobj registration fails (Armin Wolf)
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Hector Martin)
  - ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem)
  - clocksource: Fix the CPUs' choice in the watchdog per CPU verification (Guilherme G. Piccoli)
  - ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han) [Orabug: 38180755] {CVE-2025-38345}
  - iio: adc: ad7606_spi: fix reg write value mask (David Lechner)
  - iio: imu: inv_icm42600: Fix temperature calculation (Sean Nyekjaer)
  - iio: accel: fxls8962af: Fix temperature scan element sign (Sean Nyekjaer)
  - PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() (Diederik de Haas)
  - PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Järvinen)
  - PCI: Add ACS quirk for Loongson PCIe (Huacai Chen)
  - PCI: cadence-ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)
  - uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li)
  - remoteproc: core: Release rproc->clean_table after rproc_attach() fails (Xiaolei Wang) [Orabug: 38254002] {CVE-2025-38418}
  - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Xiaolei Wang) [Orabug: 38254006] {CVE-2025-38419}
  - regulator: max14577: Add error check for max14577_read_reg() (Xu Wang)
  - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj)
  - staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel)
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [Orabug: 38132188] {CVE-2025-38086}
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [Orabug: 38180767] {CVE-2025-38346}
  - dm-mirror: fix a tiny race condition (Mikulas Patocka)
  - mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Xu Wang)
  - mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Xu Wang)
  - mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng)
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug: 38158591] {CVE-2025-38211}
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [Orabug: 38158597] {CVE-2025-38212}
  - clk: meson-g12a: add missing fclk_div2 to spicc (Da Xue)
  - parisc: fix building with gcc-15 (Arnd Bergmann)
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (Gong, Ruiqi)
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [Orabug: 38158614] {CVE-2025-38214}
  - EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara)
  - NFC: nci: uart: Set tty->disc_data only in success path (Krzysztof Kozlowski) [Orabug: 38253991] {CVE-2025-38416}
  - f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu) [Orabug: 38158639] {CVE-2025-38218}
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim) [Orabug: 38158647] {CVE-2025-38219}
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter) [Orabug: 38254053] {CVE-2025-38428}
  - ext4: ensure i_size is smaller than maxbytes (Zhang Yi)
  - ext4: factor out ext4_get_maxbytes() (Zhang Yi)
  - ext4: fix calculation of credits for extent tree modification (Jan Kara)
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo) [Orabug: 38158661] {CVE-2025-38222}
  - bus: fsl-mc: fix GET/SET_TAILDROP command ids (Wan Junjie)
  - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei)
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis) [Orabug: 38180696] {CVE-2025-38336}
  - can: tcan4x5x: fix power regulator retrieval during probe (Brett Werling)
  - bus: mhi: host: Fix conflict between power_up and SYSERR (Jeffrey Hugo)
  - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 (Andreas Kemnade)
  - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim)
  - media: uvcvideo: Fix deferred probing error (Ricardo Ribalda)
  - media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)
  - media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)
  - media: vivid: Change the siize of the composing (Denis Arefev) [Orabug: 38158680] {CVE-2025-38226}
  - media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis) [Orabug: 38158685] {CVE-2025-38227}
  - media: videobuf2: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: venus: Fix probe error handling (Loic Poulain)
  - media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke)
  - media: gspca: Add error handling for stv06xx_read_sensor() (Xu Wang)
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158691] {CVE-2025-38229}
  - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case (Sakari Ailus)
  - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div (Sakari Ailus)
  - media: ccs-pll: Start OP pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: ccs-pll: Start VT pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: ov8856: suppress probe deferral errors (Johan Hovold)
  - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai)
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [Orabug: 38180706] {CVE-2025-38337}
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng) [Orabug: 38158706] {CVE-2025-38231}
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Neil Brown) [Orabug: 38254061] {CVE-2025-38430}
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter) [Orabug: 38180782] {CVE-2025-38348}
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Xu Wang)
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Xu Wang)
  - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (Gautam Menghani)
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Xu Wang)
  - gfs2: move msleep to sleepable context (Alexander Aring)
  - crypto: marvell/cesa - Do not chain submitted requests (Herbert Xu)
  - configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu)
  - xfs: allow inode inactivation during a ro mount log recovery (Darrick J. Wong)
  - kbuild: hdrcheck: fix cross build with clang (Arnd Bergmann)
  - kbuild: userprogs: fix bitsize and target detection on clang (Thomas Weißschuh)
  - drm/meson: Use 1000ULL when operating with mode->clock (I Hsin Cheng)
  - net: usb: aqc111: debug info before sanitation (Oliver Neukum)
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet)
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner) [Orabug: 38152863] {CVE-2025-38100}
  - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini)
  - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() (Amit Sunil Dhamne)
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman)
  - usb: cdnsp: Fix issue with detecting USB 3.2 speed (Pawel Laszczak)
  - usb: cdnsp: Fix issue with detecting command completion event (Pawel Laszczak)
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152868] {CVE-2025-38102}
  - drm/amd/display: Do not add '-mhard-float' to dcn2{1,0}_resource.o for clang (Nathan Chancellor)
  - kbuild: Add KBUILD_CPPFLAGS to as-option invocation (Nathan Chancellor)
  - kbuild: add $(CLANG_FLAGS) to KBUILD_CPPFLAGS (Masahiro Yamada)
  - kbuild: Add CLANG_FLAGS to as-instr (Nathan Chancellor)
  - mips: Include KBUILD_CPPFLAGS in CHECKFLAGS invocation (Nathan Chancellor)
  - drm/amd/display: Do not add '-mhard-float' to dml_ccflags for clang (Nathan Chancellor)
  - kbuild: Update assembler calls to use proper flags and language target (Nick Desaulniers)
  - MIPS: Prefer cc-option for additions to cflags (Nathan Chancellor)
  - MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option (Nathan Chancellor)
  - x86/boot/compressed: prefer cc-option for CFLAGS additions (Nick Desaulniers)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [Orabug: 38223086] {CVE-2025-38352}
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (David Heimann)
  - perf: Ensure bpf_perf_link path is properly serialized (Peter Zijlstra)
  - nvmet-fcloop: access fcpreq only when holding reqlock (Daniel Wagner)
  - fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu)
  - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet) [Orabug: 38152893] {CVE-2025-38107}
  - sch_ets: make est_qlen_notify() idempotent (Cong Wang)
  - net_sched: tbf: fix a race in tbf_change() (Eric Dumazet)
  - net_sched: red: fix a race in __red_change() (Eric Dumazet) [Orabug: 38152898] {CVE-2025-38108}
  - net_sched: prio: fix a race in prio_tune() (Eric Dumazet) [Orabug: 38105333] {CVE-2025-38083}
  - net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad)
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Moshe Shemesh)
  - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski) [Orabug: 38152911] {CVE-2025-38111}
  - net: mdio: C22 is now optional, EOPNOTSUPP if not provided (Andrew Lunn)
  - macsec: MACsec SCI assignment for ES = 0 (Carlos Fernandez)
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [Orabug: 38152915] {CVE-2025-38112}
  - i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz)
  - i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz)
  - drm/meson: fix more rounding issues with 59.94Hz modes (Martin Blumenstingl)
  - drm/meson: use vclk_freq instead of pixel_freq in debug print (Martin Blumenstingl)
  - drm/meson: fix debug log statement when setting the HDMI clocks (Martin Blumenstingl)
  - drm/meson: use unsigned long long / Hz for frequency types (Martin Blumenstingl)
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Haren Myneni)
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani) [Orabug: 38137444] {CVE-2025-38088}
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [Orabug: 38152922] {CVE-2025-38115}
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari)
  - ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Caleb Connolly)
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park) [Orabug: 38180545] {CVE-2025-38305}
  - scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav) [Orabug: 38152945] {CVE-2025-38119}
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Claudiu Beznea)
  - serial: sh-sci: Check if TX data was written to device in .tx_empty() (Claudiu Beznea)
  - arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0 (Judith Mendez)
  - arm64: dts: ti: k3-am65-main: Fix sdhci node properties (Judith Mendez)
  - arm64: dts: ti: k3-am65-main: Drop deprecated ti,otap-del-sel property (Nishanth Menon)
  - Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)
  - Input: synaptics-rmi4 - convert to use sysfs_emit() APIs (Zhang Songyi)
  - pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id() (Dan Carpenter)
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [Orabug: 38256449] {CVE-2025-38498}
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) (Al Viro)
  - seg6: Fix validation of nexthop addresses (Ido Schimmel) [Orabug: 38180555] {CVE-2025-38310}
  - wireguard: device: enable threaded NAPI (Mirco Barone)
  - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal) [Orabug: 38152957] {CVE-2025-38120}
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari) [Orabug: 38152965] {CVE-2025-38122}
  - vmxnet3: correctly report gso type for UDP tunnels (Ronak Doshi)
  - net: dsa: tag_brcm: legacy: fix pskb_may_pull length (Álvaro Fernández Rojas)
  - ice: create new Tx scheduler nodes for new queues only (Michal Kubiak)
  - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz)
  - spi: bcm63xx-hsspi: fix shared reset (Álvaro Fernández Rojas)
  - spi: bcm63xx-spi: fix shared reset (Álvaro Fernández Rojas)
  - net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter)
  - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue (Yanqing Wang)
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Alok Tiwari)
  - net: stmmac: platform: guarantee uniqueness of bus_id (Quentin Schulz)
  - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre)
  - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a (Yuli Wang)
  - iio: adc: ad7124: Fix 3dB filter frequency reading (Uwe Kleine-König)
  - serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin) [Orabug: 38153011] {CVE-2025-38135}
  - usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar) [Orabug: 38153016] {CVE-2025-38136}
  - PCI/DPC: Initialize aer_err_info before using it (Bjorn Helgaas)
  - dmaengine: ti: Add NULL check in udma_probe() (Henry Martin) [Orabug: 38153029] {CVE-2025-38138}
  - PCI: cadence: Fix runtime atomic count underflow (Hans Zhang)
  - rtc: sh: assign correct interrupts with DT (Wolfram Sang)
  - perf record: Fix incorrect --user-regs comments (Dapeng Mi)
  - perf tests switch-tracking: Fix timestamp comparison (Leo Yan)
  - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov)
  - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe Jaillet)
  - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter)
  - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe (Dan Carpenter)
  - perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter)
  - backlight: pm8941: Add NULL check in wled_configure() (Henry Martin) [Orabug: 38153050] {CVE-2025-38143}
  - perf ui browser hists: Set actions->thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo)
  - perf build: Warn when libdebuginfod devel files are not available (Arnaldo Carvalho de Melo)
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [Orabug: 38180565] {CVE-2025-38312}
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin) [Orabug: 38153059] {CVE-2025-38145}
  - soc: aspeed: lpc: Fix impossible judgment condition (Su Hui)
  - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz)
  - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov)
  - bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei) [Orabug: 38180572] {CVE-2025-38313}
  - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi)
  - nilfs2: add pointer check for nilfs_direct_propagate() (Xu Wang)
  - ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery (Murad Masimov)
  - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [Orabug: 38253984] {CVE-2025-38415}
  - arm64: dts: imx8mn-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: imx8mm-beacon: Fix RTC capacitive load (Adam Ford)
  - ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang)
  - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang)
  - f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu)
  - f2fs: use d_inode(dentry) cleanup dentry->d_inode (Zhiguo Niu)
  - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Horatiu Vultur)
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [Orabug: 38153064] {CVE-2025-38146}
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [Orabug: 38153069] {CVE-2025-38147}
  - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan)
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails (Kafai Wan) [Orabug: 38180470] {CVE-2025-38280}
  - net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich) [Orabug: 38153088] {CVE-2025-38153}
  - netfilter: nft_tunnel: fix geneve_opt dump (Fernando Fernandez Mancera)
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [Orabug: 38153094] {CVE-2025-38154}
  - vfio/type1: Fix error unwind in migration dirty bitmap allocation (Li Rongqing)
  - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal)
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [Orabug: 38153109] {CVE-2025-38157}
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev) [Orabug: 38153121] {CVE-2025-38159}
  - s390/bpf: Store backchain even for leaf progs (Ilya Leoshkevich)
  - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz (Vincent Knecht)
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [Orabug: 38180488] {CVE-2025-38285}
  - pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko) [Orabug: 38180494] {CVE-2025-38286}
  - libbpf: Use proper errno value in nlattr (Anton Protopopov)
  - ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen)
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin) [Orabug: 38153131] {CVE-2025-38160}
  - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Anton Protopopov)
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad) [Orabug: 38153138] {CVE-2025-38161}
  - netfilter: nft_quota: match correctly when the quota just depleted (Zhongqiu Duan)
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang)
  - libbpf: Use proper errno value in linker (Anton Protopopov)
  - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() (Chao Yu)
  - f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu)
  - iommu: Protect against overflow in iommu_pgsize() (Jason Gunthorpe)
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang)
  - wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov)
  - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik)
  - net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta)
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [Orabug: 38153149] {CVE-2025-38163}
  - bpf, sockmap: fix duplicated data transmission (Jiayuan Chen)
  - IB/cm: use rwlock for MAD agent lock (Jacob Moroni)
  - wifi: ath11k: fix node corruption in ar->arvifs list (Stone Zhang) [Orabug: 38180515] {CVE-2025-38293}
  - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES (Huang Yiwei)
  - drm/tegra: rgb: Fix the unbound reference count (Biju Das)
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Kees Cook)
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das)
  - selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron)
  - firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin)
  - m68k: mac: Fix macintosh_config for Mac II (Finn Thain)
  - fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin) [Orabug: 38153172] {CVE-2025-38167}
  - media: rkvdec: Fix frame size enumeration (Jonas Karlman)
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han) [Orabug: 38180589] {CVE-2025-38319}
  - spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven)
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Armin Wolf)
  - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao)
  - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu)
  - power: reset: at91-reset: Optimize at91_reset() (Alexander Shiyan)
  - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) [Orabug: 38180524] {CVE-2025-38298}
  - crypto: sun8i-ce - move fallback ahash_request to the end of the struct (Ovidiu Panait)
  - crypto: xts - Only add ecb if it is not already there (Herbert Xu)
  - crypto: lrw - Only add ecb if it is not already there (Herbert Xu)
  - crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu)
  - crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu) [Orabug: 38153188] {CVE-2025-38173}
  - x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish)
  - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions (Corentin Labbe)
  - perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang)
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher)
  - thunderbolt: Do not double dequeue a configuration request (Sergey Senozhatsky) [Orabug: 38158383] {CVE-2025-38174}
  - usb: usbtmc: Fix timeout value in get_stb (Dave Penkler)
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Charles Yeh)
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Hongyu Xie)
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Jiayi Li)
  - rtc: Fix offset calculation for .start_secs < 0 (Alexandre Mergnat)
  - rtc: Make rtc_time64_to_tm() support dates before 1970 (Alexandre Mergnat)
  - pinctrl: armada-37xx: set GPIO output value before setting direction (Gabor Juhos)
  - pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31 (Gabor Juhos)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.4.el9uek]
changelog:
  - rds: Fix NULL ptr deref in xas_start (Håkon Bugge) [Orabug: 38166374]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [Orabug: 38319943,38440301] {CVE-2025-39823}
  - hugetlb: arm64: add mte support (Dave Kleikamp) [Orabug: 38177800]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-312.187.5.el9uek]
changelog:
  - Revert "mm: hugetlb: independent PMD page table shared count" (Harshit Mogalapalli) [Orabug: 38327655]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.187.1.el9uek]
changelog:
  - drm/amdgpu: Remove ATC L2 access for MMHUB 2.1.x (Lijo Lazar) [Orabug: 37778293]
  - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() (Stefan Roese) [Orabug: 37778293]
  - PCI/AER: Enable error reporting when AER is native (Stefan Roese) [Orabug: 37778293]
  - PCI/AER: Configure ECRC for every device (Stefan Roese) [Orabug: 37778293]
  - net/rds: Add support for RDS_CMSG_TOS (Gerd Rausch) [Orabug: 38058308]
  - net/rds: Add support RDS_FEATURE ELF notes (Gerd Rausch) [Orabug: 38063328]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.2.el9uek]
changelog:
  - LTS version: v5.15.189 (Vijayendra Suman)
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [Orabug: 38095071] {CVE-2025-38067}
  - x86/mm: Disable hugetlb page table sharing on 32-bit (Jann Horn)
  - Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (Hans de Goede)
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324278] {CVE-2025-38540}
  - HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY (Zhang Heng)
  - vt: add missing notification when switching back to text mode (Nicolas Pitre)
  - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 (Akira Inoue)
  - net: usb: qmi_wwan: add SIMCom 8230C composition (Xiaowei Li)
  - um: vector: Reduce stack usage in vector_eth_configure() (Tiwei Bie)
  - atm: idt77252: Add missing `dma_map_error()` (Thomas Fourier)
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254089] {CVE-2025-38439}
  - bnxt_en: Fix DCB ETS validation (Shravya Kn)
  - net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam() (Alok Tiwari)
  - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level (Sean Nyekjaer)
  - net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Oleksij Rempel)
  - net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu) [Orabug: 38324289] {CVE-2025-38542}
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (Eric Dumazet) [Orabug: 38254095] {CVE-2025-38441}
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() (Al Viro)
  - smb: server: make use of rdma_destroy_qp() (Stefan Metzmacher)
  - nbd: fix uaf in nbd_genl_connect() error path (Zheng Qixing) [Orabug: 38254101] {CVE-2025-38443}
  - raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [Orabug: 38254105] {CVE-2025-38444}
  - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254108] {CVE-2025-38445}
  - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug: 38324160] {CVE-2025-38513}
  - dma-buf: fix timeout handling in dma_resv_wait_timeout v2 (Christian König)
  - dma-buf: use new iterator in dma_resv_wait_timeout (Christian König)
  - dma-buf: add dma_resv_for_each_fence_unlocked v8 (Christian König)
  - usb: dwc3: Abort suspend on soft disconnect failure (Kuen-Han Tsai)
  - usb: cdnsp: Fix issue with CV Bad Descriptor test (Pawel Laszczak)
  - usb: cdnsp: Replace snprintf() with the safer scnprintf() variant (Lee Jones)
  - usb:cdnsp: remove TRB_FLUSH_ENDPOINT command (Pawel Laszczak)
  - Input: xpad - support Acer NGR 200 Controller (Nilton Perim Neto)
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Hongyu Xie)
  - usb: xhci: quirk for data loss in ISOC transfers (Raju Rangoju)
  - xhci: Allow RPM on the USB controller (1022:43f7) by default (Basavaraj Natikar)
  - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug: 38253833] {CVE-2025-38375}
  - netlink: make sure we allow at least one dump skb (Jakub Kicinski)
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima)
  - btrfs: use btrfs_record_snapshot_destroy() during rmdir (Filipe Manana)
  - btrfs: propagate last_unlink_trans earlier when doing a rmdir (Filipe Manana)
  - Revert "ACPI: battery: negate current when discharging" (Rafael J. Wysocki)
  - usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254117] {CVE-2025-38448}
  - drm/gem: Fix race in drm_gem_handle_create_tail() (Simona Vetter)
  - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324179] {CVE-2025-38515}
  - pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324185] {CVE-2025-38516}
  - x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Jp Kobryn)
  - x86/mce: Don't remove sysfs if thresholding sysfs init fails (Yazen Ghannam)
  - x86/mce/amd: Fix threshold limit reset (Yazen Ghannam)
  - xen: replace xen_remap() with memremap() (Juergen Gross)
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis) [Orabug: 36993160] {CVE-2024-44939}
  - bpf, sockmap: Fix skb refcnt race after locking changes (John Fastabend)
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [Orabug: 36530894] {CVE-2024-26775}
  - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR (Lee, Chun-Yi) [Orabug: 37283277] {CVE-2022-48703}
  - bpf: fix precision backtracking instruction iteration (Andrii Nakryiko)
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells) [Orabug: 38324169] {CVE-2025-38514}
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254146] {CVE-2025-38457}
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254152] {CVE-2025-38458}
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254160] {CVE-2025-38459}
  - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324308] {CVE-2025-38546}
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254166] {CVE-2025-38460}
  - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX (Oleksij Rempel)
  - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap (Oleksij Rempel)
  - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local` (Michal Luczaj)
  - vsock: Fix transport_* TOCTOU (Michal Luczaj) [Orabug: 38254172] {CVE-2025-38461}
  - vsock: Fix transport_{g2h,h2g} TOCTOU (Michal Luczaj) [Orabug: 38254175] {CVE-2025-38462}
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254180] {CVE-2025-38464}
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254187] {CVE-2025-38465}
  - fix proc_sys_compare() handling of in-lookup dentries (Al Viro)
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes (Peter Zijlstra) [Orabug: 38254196] {CVE-2025-38466}
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Shengjiu Wang)
  - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug: 38254202] {CVE-2025-38467}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.3.el9uek]
changelog:
  - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38424092]
  - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38424092]
  - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38424092]
  - x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38424092]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf) [Orabug: 38424092]
  - x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38424092]
  - x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38424092]
  - Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38424092]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38454665,38351770] {CVE-2025-38618}
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [Orabug: 38254347,38454662] {CVE-2025-38495}
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254339,38454666] {CVE-2025-38494}
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38310006,38454664] {CVE-2025-38499}
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Valdikss) [Orabug: 38343660]
  - Input: xpad - set correct controller type for Acer NGR200 (Nilton Perim Neto)
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Kuninori Morimoto)
  - squashfs: fix memory leak in squashfs_fill_super (Phillip Lougher) [Orabug: 38343660]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Arnd Bergmann)
  - compiler: remove __ADDRESSABLE_ASM{_STR,}() again (Jan Beulich)
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (Tu Jinjiang)
  - KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix (Will Deacon)
  - benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334975] {CVE-2025-38569}
  - smb: client: fix use-after-free in crypt_message when using async crypto (Wang Zhaolong) [Orabug: 38254323] {CVE-2025-38488}
  - kbuild: userprogs: use correct linker when mixing clang and GNU ld (Thomas Weißschuh)
  - ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS (Nathan Chancellor)
  - NFSv4.2: another fix for listxattr (Olga Kornievskaia)
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Rafael J. Wysocki)
  - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38395124] {CVE-2025-38727}
  - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" (Helge Deller) [Orabug: 38343660]
  - bpf, sockmap: Fix panic when calling skb_linearize (Jiayuan Chen) [Orabug: 38394723] {CVE-2025-38165}
  - netfilter: nf_tables: adjust lockdep assertions handling (Fedor Pchelkin)
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (D Scott Phillips) [Orabug: 38166347]
  - ARM: UEK: Disable arm64 erratum QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky) [Orabug: 38166347]
  - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (Alok Tiwari) [Orabug: 38324335]
  - mm/hugetlb: fix copy_hugetlb_page_range() to check ->pt_share_count (Jane Chu) [Orabug: 38346475]
  - Reapply "mm: hugetlb: independent PMD page table shared count" (Jane Chu) [Orabug: 38346475]
  - uek-rpm: pensando: enable config options for fips (Joseph Dobosenski) [Orabug: 38354692]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.5.el9uek]
changelog:
  - net/rds: tracepoints for rds_conn_kref_get and put (Sharath Srinivasan) [Orabug: 37793025]
  - net/rds: Add krefs to struct rds_connection (Sharath Srinivasan) [Orabug: 37793025]
  - nvme-tcp: sanitize request list handling (Hannes Reinecke) [Orabug: 38175126,38454661] {CVE-2025-38264}
  - llist: add interface to check if a node is on a list. (Neil Brown) [Orabug: 38175126] {CVE-2025-38264}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.5.1.el9uek]
changelog:
  - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima)  [Orabug: 38528187]  {CVE-2025-38236} 
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue)  [Orabug: 38528183]  {CVE-2025-39866} 
  - rtnetlink: Fix L3 stats disable handling in rtnl_offload_xstats_fill() (Vijayendra Suman)  [Orabug: 38528177]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.2.el9uek]
changelog:
  - LTS version: v5.15.189 (Vijayendra Suman)
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [Orabug: 38095071] {CVE-2025-38067}
  - x86/mm: Disable hugetlb page table sharing on 32-bit (Jann Horn)
  - Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (Hans de Goede)
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324278] {CVE-2025-38540}
  - HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY (Zhang Heng)
  - vt: add missing notification when switching back to text mode (Nicolas Pitre)
  - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 (Akira Inoue)
  - net: usb: qmi_wwan: add SIMCom 8230C composition (Xiaowei Li)
  - um: vector: Reduce stack usage in vector_eth_configure() (Tiwei Bie)
  - atm: idt77252: Add missing `dma_map_error()` (Thomas Fourier)
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254089] {CVE-2025-38439}
  - bnxt_en: Fix DCB ETS validation (Shravya Kn)
  - net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam() (Alok Tiwari)
  - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level (Sean Nyekjaer)
  - net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Oleksij Rempel)
  - net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu)
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (Eric Dumazet) [Orabug: 38254095] {CVE-2025-38441}
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() (Al Viro)
  - smb: server: make use of rdma_destroy_qp() (Stefan Metzmacher)
  - nbd: fix uaf in nbd_genl_connect() error path (Zheng Qixing) [Orabug: 38254101] {CVE-2025-38443}
  - raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [Orabug: 38254105] {CVE-2025-38444}
  - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254108] {CVE-2025-38445}
  - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug: 38324160] {CVE-2025-38513}
  - dma-buf: fix timeout handling in dma_resv_wait_timeout v2 (Christian König)
  - dma-buf: use new iterator in dma_resv_wait_timeout (Christian König)
  - dma-buf: add dma_resv_for_each_fence_unlocked v8 (Christian König)
  - usb: dwc3: Abort suspend on soft disconnect failure (Kuen-Han Tsai)
  - usb: cdnsp: Fix issue with CV Bad Descriptor test (Pawel Laszczak)
  - usb: cdnsp: Replace snprintf() with the safer scnprintf() variant (Lee Jones)
  - usb:cdnsp: remove TRB_FLUSH_ENDPOINT command (Pawel Laszczak)
  - Input: xpad - support Acer NGR 200 Controller (Nilton Perim Neto)
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Hongyu Xie)
  - usb: xhci: quirk for data loss in ISOC transfers (Raju Rangoju)
  - xhci: Allow RPM on the USB controller (1022:43f7) by default (Basavaraj Natikar)
  - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug: 38253833] {CVE-2025-38375}
  - netlink: make sure we allow at least one dump skb (Jakub Kicinski)
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima)
  - btrfs: use btrfs_record_snapshot_destroy() during rmdir (Filipe Manana)
  - btrfs: propagate last_unlink_trans earlier when doing a rmdir (Filipe Manana)
  - Revert "ACPI: battery: negate current when discharging" (Rafael J. Wysocki)
  - usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254117] {CVE-2025-38448}
  - drm/gem: Fix race in drm_gem_handle_create_tail() (Simona Vetter)
  - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324179] {CVE-2025-38515}
  - pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324185] {CVE-2025-38516}
  - x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Jp Kobryn)
  - x86/mce: Don't remove sysfs if thresholding sysfs init fails (Yazen Ghannam)
  - x86/mce/amd: Fix threshold limit reset (Yazen Ghannam)
  - xen: replace xen_remap() with memremap() (Juergen Gross)
  - jfs: fix null ptr deref in dtInsertEntry (Edward Adam Davis)
  - bpf, sockmap: Fix skb refcnt race after locking changes (John Fastabend)
  - aoe: avoid potential deadlock at set_capacity (Maksim Kiselev) [Orabug: 36530894] {CVE-2024-26775}
  - thermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR (Lee, Chun-Yi) [Orabug: 37283277] {CVE-2022-48703}
  - bpf: fix precision backtracking instruction iteration (Andrii Nakryiko)
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells)
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254146] {CVE-2025-38457}
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254152] {CVE-2025-38458}
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254160] {CVE-2025-38459}
  - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324308] {CVE-2025-38546}
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254166] {CVE-2025-38460}
  - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX (Oleksij Rempel)
  - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap (Oleksij Rempel)
  - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local` (Michal Luczaj)
  - vsock: Fix transport_* TOCTOU (Michal Luczaj) [Orabug: 38254172] {CVE-2025-38461}
  - vsock: Fix transport_{g2h,h2g} TOCTOU (Michal Luczaj) [Orabug: 38254175] {CVE-2025-38462}
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254180] {CVE-2025-38464}
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254187] {CVE-2025-38465}
  - fix proc_sys_compare() handling of in-lookup dentries (Al Viro)
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes (Peter Zijlstra) [Orabug: 38254196] {CVE-2025-38466}
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Shengjiu Wang)
  - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug: 38254202] {CVE-2025-38467}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.3.el9uek]
changelog:
  - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38424092]
  - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38424092]
  - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38424092]
  - x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38424092]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf) [Orabug: 38424092]
  - x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38424092]
  - x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38424092]
  - Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38424092]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38351770,38454665] {CVE-2025-38618}
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [Orabug: 38254347,38454662] {CVE-2025-38495}
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254339,38454666] {CVE-2025-38494}
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38310006,38454664] {CVE-2025-38499}
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Valdikss) [Orabug: 38343660]
  - Input: xpad - set correct controller type for Acer NGR200 (Nilton Perim Neto)
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Kuninori Morimoto)
  - squashfs: fix memory leak in squashfs_fill_super (Phillip Lougher) [Orabug: 38343660]
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Arnd Bergmann)
  - compiler: remove __ADDRESSABLE_ASM{_STR,}() again (Jan Beulich)
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (Tu Jinjiang)
  - KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix (Will Deacon)
  - benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334975] {CVE-2025-38569}
  - smb: client: fix use-after-free in crypt_message when using async crypto (Wang Zhaolong)
  - kbuild: userprogs: use correct linker when mixing clang and GNU ld (Thomas Weißschuh)
  - ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS (Nathan Chancellor)
  - NFSv4.2: another fix for listxattr (Olga Kornievskaia)
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Rafael J. Wysocki)
  - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38395124] {CVE-2025-38727}
  - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" (Helge Deller) [Orabug: 38343660]
  - bpf, sockmap: Fix panic when calling skb_linearize (Jiayuan Chen) [Orabug: 38394723] {CVE-2025-38165}
  - netfilter: nf_tables: adjust lockdep assertions handling (Fedor Pchelkin)
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (D Scott Phillips) [Orabug: 38166347]
  - ARM: UEK: Disable arm64 erratum QCOM_FALKOR_ERRATUM_1003 (Boris Ostrovsky) [Orabug: 38166347]
  - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (Alok Tiwari) [Orabug: 38324335]
  - mm/hugetlb: fix copy_hugetlb_page_range() to check ->pt_share_count (Jane Chu) [Orabug: 38346475]
  - Reapply "mm: hugetlb: independent PMD page table shared count" (Jane Chu) [Orabug: 38346475]
  - uek-rpm: pensando: enable config options for fips (Joseph Dobosenski) [Orabug: 38354692]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.5.1.el9uek]
changelog:
  - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) [Orabug: 38528187] {CVE-2025-38236}
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38528183] {CVE-2025-39866}
  - rtnetlink: Fix L3 stats disable handling in rtnl_offload_xstats_fill() (Vijayendra Suman) [Orabug: 38528177]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.5.2.el9uek]
changelog:
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton)  [Orabug: 38575798]  {CVE-2025-38724} 
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  [Orabug: 38575792]  
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38575792]  {CVE-2025-39964}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.5.2.el9uek]
changelog:
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton)  [Orabug: 38575798]  {CVE-2025-38724}
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)  [Orabug: 38575792]
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)  [Orabug: 38575792]  {CVE-2025-39964}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-313.189.5.3.el9uek]
changelog:
  - i40e: add validation for ring_len param (Lukasz Czapnik)  [Orabug: 38603025]  {CVE-2025-39973} 
  - i40e: increase max descriptors for XL710 (Justin Bronder)  [Orabug: 38603025]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.60.1.el9uek]
changelog:
  - net: mana: Add the Linux MANA PF driver (Dexuan Cui)  [Orabug: 34405108]  
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34488341]  
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34488341]  
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan)  [Orabug: 34620700]  
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock" (Imran Khan)  [Orabug: 34620700]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.2.el9uek]
changelog:
  - LTS version: v5.15.70 (Jack Vogel)   
  - ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)   
  - KVM: SEV: add cache flush to solve SEV cache incoherency issues (Mingwei Zhang)   
  - net: Find dst with sk's xfrm policy not ctl_sk (sewookseo)   
  - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)   
  - mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)   
  - drm/panfrost: devfreq: set opp to the recommended one to configure regulator (Clément Péron)   
  - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)   
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells)   
  - net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)   
  - ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar)   
  - ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)   
  - wifi: mac80211_hwsim: check length for virtio packets (Soenke Huster)   
  - rxrpc: Fix calc of resend age (David Howells)   
  - rxrpc: Fix local destruction being repeated (David Howells)   
  - scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (Hannes Reinecke)   
  - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)   
  - ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)   
  - arm64: dts: juno: Add missing MHU secure-irq (Jassi Brar)   
  - video: fbdev: i740fb: Error out if 'pixclock' equals zero (Zheyu Ma)   
  - binder: remove inaccurate mmap_assert_locked() (Carlos Llamas)   
  - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (Alex Deucher)   
  - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (Alex Deucher)   
  - drm/amdgpu: Don't enable LTR if not supported (Lijo Lazar)   
  - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa (Ben Hutchings)   
  - parisc: Allow CONFIG_64BIT with ARCH=parisc (Helge Deller)   
  - cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher)   
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)   
  - cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg)   
  - of/device: Fix up of_dma_configure_id() stub (Thierry Reding)   
  - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)   
  - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (Stefan Roesch)   
  - drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy)   
  - drm/meson: Correct OSD1 global alpha value (Stuart Menefy)   
  - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohár)   
  - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust)   
  - pinctrl: sunxi: Fix name for A100 R_PIO (Michael Wu)   
  - pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH (João H. Spies)   
  - pinctrl: qcom: sc8180x: Fix wrong pin numbers (Molly Sophia)   
  - pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Molly Sophia)   
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)   
  - tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga)   
  - serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo)   
  - drm/tegra: vic: Fix build warning when CONFIG_PM=n (YueHaibing)   
  - LTS version: v5.15.69 (Jack Vogel)   
  - Input: goodix - add compatible string for GT1158 (Jarrah Gosbell)   
  - RDMA/irdma: Use s/g array in post send only when its valid (Sindhu-Devale)   
  - usb: gadget: f_uac2: fix superspeed transfer (Jing Leng)   
  - usb: gadget: f_uac2: clean up some inconsistent indenting (Colin Ian King)   
  - soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride)   
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)   
  - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS (Hu Xiaoying)   
  - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)   
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe)   
  - net: dsa: hellcreek: Print warning only once (Kurt Kanzenbach)   
  - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (Chengming Gui)   
  - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi)   
  - Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli)   
  - ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)   
  - gpio: mockup: remove gpio debugfs when remove device (Wei Yongjun)   
  - tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)   
  - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu)   
  - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)   
  - dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (Krzysztof Kozlowski)   
  - drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)   
  - platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (Maximilian Luz)   
  - Input: goodix - add support for GT1158 (Ondrej Jirman)   
  - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (Lu Baolu)   
  - tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)   
  - tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou)   
  - task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov)   
  - x86/mm: Force-inline __phys_addr_nodebug() (Borislav Petkov)   
  - lockdep: Fix -Wunused-parameter for _THIS_IP_ (Nick Desaulniers)   
  - ARM: dts: at91: sama7g5ek: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: dts: at91: fix low limit for CPU regulator (Claudiu Beznea)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (Marco Felsch)   
  - ARM: dts: imx: align SPI NOR node name with dtschema (Krzysztof Kozlowski)   
  - ACPI: resource: skip IRQ override on AMD Zen platforms (Chuanhong Guo)   
  - NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (Dave Wysochanski)   
  - LTS version: v5.15.68 (Jack Vogel)   
  - ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency (Claudiu Beznea)   
  - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) (Arnaldo Carvalho de Melo)   
  - drm/bridge: display-connector: implement bus fmts callbacks (Neil Armstrong)   
  - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Ionela Voinescu)   
  - iommu/vt-d: Correctly calculate sagaw value of IOMMU (Lu Baolu)   
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Brown)   
  - Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" (Sasha Levin)   
  - hwmon: (mr75203) enable polling for all VM channels (Eliav Farber)   
  - hwmon: (mr75203) fix multi-channel voltage reading (Eliav Farber)   
  - hwmon: (mr75203) fix voltage equation for negative source input (Eliav Farber)   
  - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors (Eliav Farber)   
  - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined (Eliav Farber)   
  - s390/boot: fix absolute zero lowcore corruption on boot (Alexander Gordeev)   
  - iommu/amd: use full 64-bit value in build_completion_wait() (John Sperbeck)   
  - swiotlb: avoid potential left shift overflow (Chao Gao)   
  - i40e: Fix ADQ rate limiting for PF (Przemyslaw Patynowski)   
  - i40e: Refactor tc mqprio checks (Przemyslaw Patynowski)   
  - kbuild: disable header exports for UML in a straightforward way (Masahiro Yamada)   
  - MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)   
  - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (Nathan Chancellor)   
  - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (Claudiu Beznea)   
  - hwmon: (tps23861) fix byte order in resistance register (Alexandru Gagniuc)   
  - perf script: Fix Cannot print 'iregs' field for hybrid systems (Zhengjun Xing)   
  - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)   
  - RDMA/irdma: Report RNR NAK generation in device caps (Sindhu-Devale)   
  - RDMA/irdma: Return correct WC error for bind operation failure (Sindhu-Devale)   
  - RDMA/irdma: Report the correct max cqes from query device (Sindhu-Devale)   
  - nvmet: fix mar and mor off-by-one errors (Dennis Maisenbacher)   
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)   
  - nvme-tcp: fix regression that causes sporadic requests to time out (Sagi Grimberg)   
  - nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)   
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang)   
  - RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)   
  - IB/core: Fix a nested dead lock as part of ODP flow (Yishai Hadas)   
  - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)   
  - RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)   
  - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (Paul Durrant)   
  - iavf: Detach device during reset task (Ivan Vecera)   
  - i40e: Fix kernel crash during module removal (Ivan Vecera)   
  - ice: use bitmap_free instead of devm_kfree (Michal Swiatkowski)   
  - tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet)   
  - net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov)   
  - tipc: fix shift wrapping bug in map_get() (Dan Carpenter)   
  - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)   
  - Revert "net: phy: meson-gxl: improve link-up behavior" (Heiner Kallweit)   
  - afs: Use the operation issue time instead of the reply time for callbacks (David Howells)   
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)   
  - rxrpc: Fix ICMP/ICMP6 error handling (David Howells)   
  - ALSA: usb-audio: Register card again for iface over delayed_register option (Takashi Iwai)   
  - ALSA: usb-audio: Inform the delayed registration more properly (Takashi Iwai)   
  - RDMA/srp: Set scmnd->result only when scmnd is not NULL (yangx.jy@fujitsu.com)   
  - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)   
  - netfilter: nf_tables: clean up hook list when offload flags check fails (Pablo Neira Ayuso)   
  - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)   
  - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time (Claudiu Beznea)   
  - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time (Claudiu Beznea)   
  - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh (Claudiu Beznea)   
  - ARM: at91: pm: fix self-refresh for sama7g5 (Claudiu Beznea)   
  - wifi: wilc1000: fix DMA on stack objects (Ajay.Kathat@microchip.com)   
  - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (Wenpeng Liang)   
  - RDMA/hns: Fix supported page size (Chengchang Tang)   
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)   
  - RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)   
  - tee: fix compiler warning in tee_shm_register() (Jens Wiklander)   
  - regulator: core: Clean up on enable failure (Andrew Halaney)   
  - soc: imx: gpcv2: Assert reset before ungating clock (Marek Vasut)   
  - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)   
  - RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (Jack Wang)   
  - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (Jack Wang)   
  - ASoC: qcom: sm8250: add missing module owner (Srinivas Kandagatla)   
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)   
  - NFS: Fix another fsync() issue after a server reboot (Trond Myklebust)   
  - NFS: Save some space in the inode (Trond Myklebust)   
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust)   
  - scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)   
  - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)   
  - drm/i915: Implement WaEdpLinkRateDataReload (Ville Syrjälä)   
  - nvmet: fix a use-after-free (Bart Van Assche)   
  - drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman)   
  - debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)   
  - kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)   
  - vfio/type1: Unpin zero pages (Alex Williamson)   
  - btrfs: zoned: set pseudo max append zone limit in zone emulation mode (Shin'ichiro Kawasaki)   
  - tracing: Fix to check event_mutex is held while accessing trigger list (Masami Hiramatsu (Google))   
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)   
  - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (Takashi Iwai)   
  - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)   
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)   
  - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai)   
  - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)   
  - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)   
  - fbdev: fbcon: Destroy mutex on freeing struct fb_info (Shigeru Yoshida)   
  - md: Flush workqueue md_rdev_misc_wq in md_alloc() (David Sloan)   
  - net/core/skbuff: Check the return value of skb_copy_bits() (lily)   
  - cpufreq: check only freq_table in __resolve_freq() (Lukasz Luba)   
  - netfilter: conntrack: work around exceeded receive window (Florian Westphal)   
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)   
  - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)   
  - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)   
  - Revert "parisc: Show error if wrong 32/64-bit compiler is being used" (Helge Deller)   
  - scsi: ufs: core: Reduce the power mode change timeout (Bart Van Assche)   
  - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)   
  - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)   
  - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (YiPeng Chai)   
  - drm/gem: Fix GEM handle release errors (Jeffy Chen)   
  - scsi: megaraid_sas: Fix double kfree() (Guixin Liu)   
  - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (Tony Battersby)   
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee)   
  - fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)   
  - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)   
  - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)   
  - efi: libstub: Disable struct randomization (Ard Biesheuvel)   
  - net: wwan: iosm: remove pointless null check (Jakub Kicinski)   
  - LTS version: v5.15.67 (Jack Vogel)   
  - kbuild: fix up permissions on scripts/pahole-flags.sh (Greg Kroah-Hartman)   
  - LTS version: v5.15.66 (Jack Vogel)   
  - USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)   
  - USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)   
  - usb: dwc3: disable USB core PHY management (Johan Hovold)   
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)   
  - usb: dwc3: fix PHY disable sequence (Johan Hovold)   
  - kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo)   
  - kbuild: Unify options for BTF generation for vmlinux and modules (Jiri Olsa)   
  - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Mazin Al Haddad)   
  - drm/i915: Skip wm/ddb readout for disabled pipes (Ville Syrjälä)   
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)   
  - ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)   
  - ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)   
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (Kacper Michajłow)   
  - net: mac802154: Fix a condition in the receive path (Miquel Raynal)   
  - net: Use u64_stats_fetch_begin_irq() for stats fetch. (Sebastian Andrzej Siewior)   
  - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)   
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)   
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)   
  - driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)   
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)   
  - usb: xhci-mtk: fix bandwidth release issue (Chunfeng Yun)   
  - usb: xhci-mtk: relax TT periodic bandwidth allocation (Chunfeng Yun)   
  - USB: core: Prevent nested device-reset calls (Alan Stern)   
  - s390: fix nospec table alignments (Josh Poimboeuf)   
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)   
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)   
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)   
  - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (Pawel Laszczak)   
  - usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak)   
  - usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)   
  - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (Badhri Jagan Sridharan)   
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (Utkarsh Patel)   
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)   
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)   
  - USB: serial: option: add Quectel EM060K modem (Yonglin Tan)   
  - USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)   
  - USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)   
  - xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)   
  - media: mceusb: Use new usb_control_msg_*() routines (Alan Stern)   
  - usb: dwc3: pci: Add support for Intel Raptor Lake (Heikki Krogerus)   
  - thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)   
  - xen-blkfront: Cache feature_persistent value before advertisement (SeongJae Park)   
  - xen-blkfront: Advertise feature-persistent as user requested (SeongJae Park)   
  - xen-blkback: Advertise feature-persistent as user requested (SeongJae Park)   
  - mm: pagewalk: Fix race between unmap and page walker (Steven Price)   
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (Dan Carpenter)   
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)   
  - gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)   
  - hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)   
  - clk: bcm: rpi: Add missing newline (Stefan Wahren)   
  - clk: bcm: rpi: Prevent out-of-bounds access (Stefan Wahren)   
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET)   
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)   
  - Input: rk805-pwrkey - fix module autoloading (Peter Robinson)   
  - clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)   
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd)   
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)   
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)   
  - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (Jim Mattson)   
  - cifs: fix small mempool leak in SMB2_negotiate() (Enzo Matsumiya)   
  - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas)   
  - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)   
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Adrian Hunter)   
  - mmc: core: Fix UHS-I SD 1.8V workaround branch (Adrian Hunter)   
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)   
  - misc: fastrpc: fix memory corruption on open (Johan Hovold)   
  - misc: fastrpc: fix memory corruption on probe (Johan Hovold)   
  - iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)   
  - iio: ad7292: Prevent regulator double disable (Matti Vaittinen)   
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)   
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)   
  - musb: fix USB_MUSB_TUSB6010 dependency (Arnd Bergmann)   
  - vt: Clear selection before changing the font (Helge Deller)   
  - powerpc: align syscall table for ppc32 (Masahiro Yamada)   
  - staging: r8188eu: add firmware dependency (Grzegorz Szymaszek)   
  - staging: rtl8712: fix use after free bugs (Dan Carpenter)   
  - serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)   
  - soundwire: qcom: fix device status array range (Srinivas Kandagatla)   
  - net/smc: Remove redundant refcount increase (Yacan Liu)   
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski)   
  - tcp: annotate data-race around challenge_timestamp (Eric Dumazet)   
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Høiland-Jørgensen)   
  - kcm: fix strp_init() order and cleanup (Cong Wang)   
  - mlxbf_gige: compute MDIO period based on i1clk (David Thompson)   
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)   
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Wang Hai)   
  - net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)   
  - net: dsa: xrs700x: Use irqsave variant for u64 stats update (Sebastian Andrzej Siewior)   
  - openvswitch: fix memory leak at failed datapath creation (Andrey Zhadchenko)   
  - net: smsc911x: Stop and start PHY during suspend and resume (Florian Fainelli)   
  - net: sparx5: fix handling uneven length packets in manual extraction (Casper Andersson)   
  - Revert "xhci: turn off port power in shutdown" (Mathias Nyman)   
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)   
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (Peter Ujfalusi)   
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg (Pierre-Louis Bossart)   
  - drm/i915/display: avoid warnings when registering dual panel backlight (Arun R Murthy)   
  - drm/i915/backlight: extract backlight code to a separate file (Jani Nikula)   
  - ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)   
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui)   
  - bpf: Restrict bpf_sys_bpf to CAP_PERFMON (YiFei Zhu)   
  - skmsg: Fix wrong last sg check in sk_msg_recvmsg() (Liu Jian)   
  - iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)   
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)   
  - drm/msm/dsi: Fix number of regulators for SDM660 (Douglas Anderson)   
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)   
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (Kuogee Hsieh)   
  - drm/msm/dsi: fix the inconsistent indenting (sunliming)   
  - LTS version: v5.15.65 (Jack Vogel)   
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)   
  - android: binder: fix lockdep check on clearing vma (Liam Howlett)   
  - btrfs: fix space cache corruption and potential double allocations (Omar Sandoval)   
  - kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)   
  - btrfs: tree-checker: check for overlapping extent items (Josef Bacik)   
  - btrfs: fix lockdep splat with reloc root extent buffers (Josef Bacik)   
  - btrfs: move lockdep class helpers to locking.c (Josef Bacik)   
  - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal)   
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)   
  - drm/amd/display: avoid doing vm_init multiple time (Charlene Liu)   
  - drm/amdgpu: Increase tlb flush timeout for sriov (Dusica Milinkovic)   
  - drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)   
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Evan Quan)   
  - ksmbd: don't remove dos attribute xattr on O_TRUNC open (Namjae Jeon)   
  - s390/hypfs: avoid error message under KVM (Juergen Gross)   
  - neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)   
  - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured (Namjae Jeon)   
  - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)   
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME" (Alvin Lee)   
  - drm/amd/display: Fix HDMI VSIF V3 incorrect issue (Leo Ma)   
  - drm/amd/display: Avoid MPC infinite loop (Josip Pavic)   
  - ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path (Biju Das)   
  - fs/ntfs3: Fix work with fragmented xattr (Konstantin Komarov)   
  - btrfs: fix warning during log replay when bumping inode link count (Filipe Manana)   
  - btrfs: add and use helper for unlinking inode during log replay (Filipe Manana)   
  - btrfs: remove no longer needed logic for replaying directory deletes (Filipe Manana)   
  - btrfs: remove root argument from btrfs_unlink_inode() (Filipe Manana)   
  - mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Liming Sun)   
  - mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Sebastian Reichel)   
  - mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Yifeng Zhao)   
  - mmc: mtk-sd: Clear interrupts when cqe off/disable (Wenbin Mei)   
  - drm/i915/gt: Skip TLB invalidations once wedged (Chris Wilson)   
  - HID: thrustmaster: Add sparco wheel and fix array length (Michael Hübner)   
  - HID: asus: ROG NKey: Ignore portion of 0x5a report (Josh Kilmer)   
  - HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (Akihiko Odaki)   
  - HID: add Lenovo Yoga C630 battery quirk (Steev Klimaszewski)   
  - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (Takashi Iwai)   
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn)   
  - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)   
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)   
  - fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)   
  - net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei)   
  - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)   
  - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)   
  - udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)   
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)   
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" (Greg Kroah-Hartman)   
  - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)   
  - kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)   
  - io_uring: fix UAF due to missing POLLFREE handling (Pavel Begunkov)   
  - io_uring: fix wrong arm_poll error handling (Pavel Begunkov)   
  - io_uring: fail links when poll fails (Pavel Begunkov)   
  - io_uring: bump poll refs to full 31-bits (Jens Axboe)   
  - io_uring: remove poll entry from list when canceling all (Jens Axboe)   
  - io_uring: Remove unused function req_ref_put (Jiapeng Chong)   
  - io_uring: poll rework (Pavel Begunkov)   
  - io_uring: inline io_poll_complete (Pavel Begunkov)   
  - io_uring: kill poll linking optimisation (Pavel Begunkov)   
  - io_uring: move common poll bits (Pavel Begunkov)   
  - io_uring: refactor poll update (Pavel Begunkov)   
  - io_uring: clean cqe filling functions (Pavel Begunkov)   
  - io_uring: correct fill events helpers types (Pavel Begunkov)   
  - arm64: errata: Add Cortex-A510 to the repeat tlbi list (James Morse)   
  - mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (Miaohe Lin)   
  - Drivers: hv: balloon: Support status report for larger page sizes (Boqun Feng)   
  - crypto: lib - remove unneeded selection of XOR_BLOCKS (Eric Biggers)   
  - firmware: tegra: bpmp: Do only aligned access to IPC memory area (Timo Alho)   
  - drm/vc4: hdmi: Depends on CONFIG_PM (Maxime Ripard)   
  - drm/vc4: hdmi: Rework power up (Maxime Ripard)   
  - ACPI: thermal: drop an always true check (Adam Borowski)   
  - drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled (Maxime Ripard)   
  - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)   
  - LTS version: v5.15.64 (Jack Vogel)   
  - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann)   
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)   
  - scsi: ufs: core: Enable link lost interrupt (Kiwoong Kim)   
  - perf stat: Clear evsel->reset_group for each stat run (Ian Rogers)   
  - perf/x86/intel/ds: Fix precise store latency handling (Stephane Eranian)   
  - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)   
  - perf python: Fix build when PYTHON_CONFIG is user supplied (James Clark)   
  - blk-mq: fix io hung due to missing commit_rqs (Yu Kuai)   
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso)   
  - x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)   
  - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett)   
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (Zenghui Yu)   
  - mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (Yonglong Li)   
  - md: call __md_stop_writes in md_stop (Guoqing Jiang)   
  - Revert "md-raid: destroy the bitmap after destroying the thread" (Guoqing Jiang)   
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)   
  - Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" (Greg Kroah-Hartman)   
  - Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" (Greg Kroah-Hartman)   
  - io_uring: fix issue with io_write() not always undoing sb_start_write() (Jens Axboe)   
  - riscv: traps: add missing prototype (Conor Dooley)   
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross)   
  - smb3: missing inode locks in punch hole (David Howells)   
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf (Karol Herbst)   
  - ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)   
  - Revert "memcg: cleanup racy sum avoidance code" (Shakeel Butt)   
  - fbdev: fbcon: Properly revert changes when vc_resize() failed (Shigeru Yoshida)   
  - s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)   
  - bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (Liu Shixin)   
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)   
  - mm/damon/dbgfs: avoid duplicate context directory creation (Badari Pulavarty)   
  - asm-generic: sections: refactor memory_intersects (Quanyang Wang)   
  - writeback: avoid use-after-free after removing device (Khazhismel Kumykov)   
  - loop: Check for overflow while configuring loop (Siddh Raman Pant)   
  - x86/nospec: Unwreck the RSB stuffing (Peter Zijlstra)   
  - x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta)   
  - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)   
  - perf/x86/lbr: Enable the branch type for the Arch LBR by default (Kan Liang)   
  - btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (Zixuan Fu)   
  - btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)   
  - btrfs: add info when mount fails due to stale replace target (Anand Jain)   
  - btrfs: replace: drop assert for suspended replace (Anand Jain)   
  - btrfs: fix silent failure when deleting root reference (Filipe Manana)   
  - net: stmmac: work around sporadic tx issue on link-up (Heiner Kallweit)   
  - ionic: VF initial random MAC address if no assigned mac (R Mohamed Shah)   
  - ionic: fix up issues with handling EAGAIN on FW cmds (Shannon Nelson)   
  - ionic: clear broken state on generation change (Shannon Nelson)   
  - ionic: widen queue_lock use around lif init and deinit (Shannon Nelson)   
  - rxrpc: Fix locking in rxrpc's sendmsg (David Howells)   
  - i40e: Fix incorrect address type for IPv6 flow rules (Sylwester Dziedziuch)   
  - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)   
  - net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_devconf_inherit_init_net. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. (Kuniyuki Iwashima)   
  - net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_max_skb_frags. (Kuniyuki Iwashima)   
  - mptcp: stop relying on tcp_tx_skb_cache (Paolo Abeni)   
  - tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers (Paolo Abeni)   
  - net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_optmem_max. (Kuniyuki Iwashima)   
  - ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)   
  - net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)   
  - net: Fix data-races around netdev_max_backlog. (Kuniyuki Iwashima)   
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_[rw]mem_(max|default). (Kuniyuki Iwashima)   
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Pablo Neira Ayuso)   
  - netfilter: flowtable: add function to invoke garbage collection immediately (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow binding to already bound chain (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow jump to implicit chain from set element (Pablo Neira Ayuso)   
  - netfilter: nf_tables: upfront validation of data via nft_data_init() (Pablo Neira Ayuso)   
  - netfilter: bitwise: improve error goto labels (Jeremy Sowden)   
  - netfilter: nft_cmp: optimize comparison for 16-bytes (Pablo Neira Ayuso)   
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso)   
  - netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)   
  - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not leave chain stats enabled on error (Pablo Neira Ayuso)   
  - netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)   
  - netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)   
  - netfilter: nf_tables: make table handle allocation per-netns friendly (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow updates of implicit chain (Pablo Neira Ayuso)   
  - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)   
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski)   
  - bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)   
  - net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)   
  - net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() (Xiaolei Wang)   
  - net: ipa: don't assume SMEM is page-aligned (Alex Elder)   
  - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (Maor Dickman)   
  - net/mlx5e: Fix wrong application of the LRO state (Aya Levin)   
  - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Moshe Shemesh)   
  - net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)   
  - ice: xsk: prohibit usage of non-balanced queue id (Maciej Fijalkowski)   
  - ice: xsk: Force rings to be sized to power of 2 (Maciej Fijalkowski)   
  - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (Duoming Zhou)   
  - r8152: fix the RX FIFO settings when suspending (Hayes Wang)   
  - r8152: fix the units of some registers for RTL8156A (Hayes Wang)   
  - rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux)   
  - ntfs: fix acl handling (Christian Brauner)   
  - mm/smaps: don't access young/dirty bit if pte unpresent (Peter Xu)   
  - SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust)   
  - NFSv4.2 fix problems with __nfs42_ssc_open (Olga Kornievskaia)   
  - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() (Trond Myklebust)   
  - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca)   
  - net: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski)   
  - fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts (Seth Forshee)   
  - xfrm: policy: fix metadata dst->dev xmit null pointer dereference (Nikolay Aleksandrov)   
  - xfrm: clone missing x->lastused in xfrm_do_migrate (Antony Antony)   
  - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)   
  - riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit (Chen Lifu)   
  - riscv: lib: uaccess: fold fixups into body (Jisheng Zhang)   
  - btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() (Qu Wenruo)   
  - btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (Filipe Manana)   
  - btrfs: put initial index value of a directory in a constant (Filipe Manana)   
  - scsi: qla2xxx: edif: Fix dropped IKE message (Quinn Tran)   
  - scsi: qla2xxx: Fix response queue handler reading stale packets (Arun Easi)   
  - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld)   
  - Input: i8042 - add additional TUXEDO devices to i8042 quirk tables (Werner Sembach)   
  - Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach)   
  - Input: i8042 - merge quirk tables (Werner Sembach)   
  - Input: i8042 - move __initconst to fix code styling warning (Werner Sembach)   
  - btrfs: convert count_max_extents() to use fs_info->max_extent_size (Naohiro Aota)   
  - btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (Naohiro Aota)   
  - btrfs: zoned: revive max_zone_append_bytes (Naohiro Aota)   
  - block: add bdev_max_segments() helper (Naohiro Aota)   
  - block: add a bdev_max_zone_append_sectors helper (Christoph Hellwig)   
  - x86/entry: Move CLD to the start of the idtentry macro (Lai Jiangshan)   
  - kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)   
  - parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)   
  - parisc: Make CONFIG_64BIT available for ARCH=parisc64 only (Helge Deller)   
  - cgroup: Fix race condition at rebind_subsystems() (Jing-Ting Wu)   
  - audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)   
  - eth: sun: cassini: remove dead code (Martin Liška)   
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
  - LTS version: v5.15.63 (Jack Vogel)   
  - xfs: revert "xfs: actually bump warning counts when we send warnings" (Eric Sandeen)   
  - xfs: fix soft lockup via spinning in filestream ag selection loop (Brian Foster)   
  - xfs: fix overfilling of reserve pool (Darrick J. Wong)   
  - xfs: always succeed at setting the reserve pool size (Darrick J. Wong)   
  - xfs: remove infinite loop when reserving free block pool (Darrick J. Wong)   
  - xfs: reserve quota for target dir expansion when renaming files (Darrick J. Wong)   
  - xfs: reserve quota for dir expansion when linking/unlinking files (Darrick J. Wong)   
  - scsi: ufs: ufs-mediatek: Fix build error and type mismatch (Ren Zhijie)   
  - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Fedor Pchelkin)   
  - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 (Nathan Chancellor)   
  - video: fbdev: i740fb: Check the argument of i740_calc_vclk() (Zheyu Ma)   
  - venus: pm_helpers: Fix warning in OPP during probe (Stanimir Varbanov)   
  - powerpc/64: Init jump labels before parse_early_param() (Zhouyi Zhou)   
  - smb3: check xattr value length earlier (Steve French)   
  - f2fs: fix to do sanity check on segment type in build_sit_entries() (Chao Yu)   
  - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() (Chao Yu)   
  - ALSA: control: Use deferred fasync helper (Takashi Iwai)   
  - ALSA: timer: Use deferred fasync helper (Takashi Iwai)   
  - ALSA: core: Add async signal helpers (Takashi Iwai)   
  - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (Alexey Kardashevskiy)   
  - ovl: warn if trusted xattr creation fails (Miklos Szeredi)   
  - powerpc/32: Don't always pass -mcpu=powerpc to the compiler (Christophe Leroy)   
  - powerpc/32: Set an IBAT covering up to _einittext during init (Christophe Leroy)   
  - watchdog: export lockup_detector_reconfigure (Laurent Dufour)   
  - RISC-V: Add fast call path of crash_kexec() (Xianting Tian)   
  - riscv: mmap with PROT_WRITE but no PROT_READ is invalid (Celeste Liu)   
  - riscv: dts: canaan: Add k210 topology information (Conor Dooley)   
  - riscv: dts: sifive: Add fu740 topology information (Conor Dooley)   
  - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() (Kuninori Morimoto)   
  - modules: Ensure natural alignment for .altinstructions and __bug_table sections (Helge Deller)   
  - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (Yunfei Wang)   
  - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (Liang He)   
  - vfio: Clear the caps->buf to NULL after free (Schspa Shi)   
  - KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings (Fabiano Rosas)   
  - tty: serial: Fix refcount leak bug in ucc_uart.c (Liang He)   
  - lib/list_debug.c: Detect uninitialized lists (Guenter Roeck)   
  - ext4: avoid resizing to a partial cluster size (Kiselev, Oleg)   
  - ext4: avoid remove directory when directory is corrupted (Ye Bin)   
  - drivers:md:fix a potential use-after-free bug (Wentao_Liang)   
  - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (Sagi Grimberg)   
  - md: Notify sysfs sync_completed in md_reap_sync_thread() (Logan Gunthorpe)   
  - phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks (Marek Szyprowski)   
  - openrisc: io: Define iounmap argument as volatile (Stafford Horne)   
  - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (Uwe Kleine-König)   
  - selftests/kprobe: Do not test for GRP/ without event failures (Steven Rostedt (Google))   
  - csky/kprobe: reclaim insn_slot on kprobe unregistration (Liao Chang)   
  - RDMA/rxe: Limit the number of calls to each tasklet (Bob Pearson)   
  - dmaengine: dw-axi-dmac: ignore interrupt if no descriptor (Ben Dooks)   
  - dmaengine: dw-axi-dmac: do not print NULL LLI during error (Ben Dooks)   
  - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups (Jason A. Donenfeld)   
  - PCI/ACPI: Guard ARM64-specific mcfg_quirks (Huacai Chen)   
  - cxl: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - pinctrl: intel: Check against matching data instead of ACPI companion (Andy Shevchenko)   
  - mmc: tmio: avoid glitches when resetting (Wolfram Sang)   
  - habanalabs/gaudi: mask constant value before cast (Oded Gabbay)   
  - habanalabs/gaudi: fix shift out of bounds (Ofir Bitton)   
  - coresight: etm4x: avoid build failure with unrolled loops (Nick Desaulniers)   
  - gadgetfs: ep_io - wait until IRQ finishes (Jozef Martiniak)   
  - scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (James Smart)   
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (James Smart)   
  - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description (Vladimir Zapolskiy)   
  - zram: do not lookup algorithm in backends table (Sergey Senozhatsky)   
  - uacce: Handle parent device removal or parent driver module rmmod (Jean-Philippe Brucker)   
  - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (Robert Marko)   
  - vboxguest: Do not use devm for irq (Pascal Terjan)   
  - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch (Amelie Delaunay)   
  - usb: renesas: Fix refcount leak bug (Liang He)   
  - usb: host: ohci-ppc-of: Fix refcount leak bug (Liang He)   
  - scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators (Po-Wen Kao)   
  - clk: ti: Stop using legacy clkctrl names for omap4 and 5 (Tony Lindgren)   
  - drm/meson: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)   
  - irqchip/tegra: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)   
  - PCI: aardvark: Fix reporting Slot capabilities on emulated bridge (Pali Rohár)   
  - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (Michael Grzeschik)   
  - usb: gadget: uvc: calculate the number of request depending on framesize (Michael Grzeschik)   
  - usb: cdns3: fix random warning message when driver load (Frank Li)   
  - usb: cdns3 fix use-after-free at workaround 2 (Frank Li)   
  - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported (Tzung-Bi Shih)   
  - PCI: Add ACS quirk for Broadcom BCM5750x NICs (Pavan Chebbi)   
  - HID: multitouch: new device class fix Lenovo X12 trackpad sticky (Tao Jin)   
  - KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (Oliver Upton)   
  - KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (Oliver Upton)   
  - net: qrtr: start MHI channel after endpoit creation (Maxim Kochetkov)   
  - drm/sun4i: dsi: Prevent underflow when computing packet sizes (Samuel Holland)   
  - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (Liang He)   
  - ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() (Takashi Iwai)   
  - ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc (Ranjani Sridharan)   
  - drm/imx/dcss: get rid of HPD warning message (Laurentiu Palcu)   
  - tracing/eprobes: Fix reading of string fields (Steven Rostedt (Google))   
  - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (Andrew Donnellan)   
  - kbuild: fix the modules order between drivers and libs (Masahiro Yamada)   
  - igb: Add lock to avoid data race (Lin Ma)   
  - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() (Christophe JAILLET)   
  - fec: Fix timer capture timing in `fec_ptp_enable_pps()` (Csókás Bence)   
  - i40e: Fix to stop tx_timeout recovery if GLOBR fails (Alan Brady)   
  - regulator: pca9450: Remove restrictions for regulator-name (Frieder Schrempf)   
  - i2c: imx: Make sure to unregister adapter on remove() (Uwe Kleine-König)   
  - ice: Ignore EEXIST when setting promisc mode (Grzegorz Siwik)   
  - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() (Rustam Subkhankulov)   
  - net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it (Vladimir Oltean)   
  - net: genl: fix error path memory leak in policy dumping (Jakub Kicinski)   
  - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters (Vladimir Oltean)   
  - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (Arun Ramadoss)   
  - net: fix potential refcount leak in ndisc_router_discovery() (Xin Xiong)   
  - net: moxa: pass pdev instead of ndev to DMA functions (Sergei Antonov)   
  - mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice (Amit Cohen)   
  - net: dsa: mv88e6060: prevent crash on an unused port (Sergei Antonov)   
  - net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (Xin Xiong)   
  - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages (Neil Armstrong)   
  - powerpc/pci: Fix get_phb_number() locking (Michael Ellerman)   
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (Pablo Neira Ayuso)   
  - netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso)   
  - netfilter: nf_tables: really skip inactive sets when allocating name (Pablo Neira Ayuso)   
  - netfilter: nf_tables: possible module reference underflow in error path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (Pablo Neira Ayuso)   
  - fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() (Dan Carpenter)   
  - netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access (Pablo Neira Ayuso)   
  - ASoC: codec: tlv320aic32x4: fix mono playback via I2S (Philipp Zabel)   
  - ASoC: tas2770: Fix handling of mute/unmute (Martin Povišer)   
  - ASoC: tas2770: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2770: Allow mono streams (Martin Povišer)   
  - ASoC: tas2770: Set correct FSYNC polarity (Martin Povišer)   
  - ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (Takashi Iwai)   
  - iavf: Fix reset error handling (Przemyslaw Patynowski)   
  - iavf: Fix adminq error handling (Przemyslaw Patynowski)   
  - nios2: add force_successful_syscall_return() (Al Viro)   
  - nios2: restarts apply only to the first sigframe we build... (Al Viro)   
  - nios2: fix syscall restart checks (Al Viro)   
  - nios2: traced syscall does need to check the syscall number (Al Viro)   
  - nios2: don't leave NULLs in sys_call_table[] (Al Viro)   
  - nios2: page fault et.al. are *not* restartable syscalls... (Al Viro)   
  - fs/ntfs3: Fix missing i_op in ntfs_read_mft (Konstantin Komarov)   
  - fs/ntfs3: Do not change mode if ntfs_set_ea failed (Konstantin Komarov)   
  - fs/ntfs3: Fix double free on remount (Konstantin Komarov)   
  - fs/ntfs3: Don't clear upper bits accidentally in log_replay() (Dan Carpenter)   
  - fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr (Pavel Skripkin)   
  - fs/ntfs3: Fix using uninitialized value n when calling indx_read (Yan Lei)   
  - dpaa2-eth: trace the allocated address instead of page struct (Chen Lin)   
  - perf tests: Fix Track with sched_switch test for hybrid case (Adrian Hunter)   
  - perf parse-events: Fix segfault when event parser gets an error (Adrian Hunter)   
  - perf probe: Fix an error handling path in 'parse_perf_probe_command()' (Christophe JAILLET)   
  - geneve: fix TOS inheriting for ipv4 (Matthias May)   
  - atm: idt77252: fix use-after-free bugs caused by tst_timer (Duoming Zhou)   
  - xen/xenbus: fix return type in xenbus_file_read() (Dan Carpenter)   
  - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` (Yu Xiao)   
  - NTB: ntb_tool: uninitialized heap data in tool_fn_write() (Dan Carpenter)   
  - tools build: Switch to new openssl API for test-libcrypto (Roberto Sassu)   
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc (Ondrej Mosnacek)   
  - ceph: don't leak snap_rwsem in handle_cap_grant (Jeff Layton)   
  - tools/vm/slabinfo: use alphabetic order when two values are equal (Yuanzheng Song)   
  - ceph: use correct index when encoding client supported features (Luís Henriques)   
  - spi: dt-bindings: zynqmp-qspi: add missing 'required' (Krzysztof Kozlowski)   
  - spi: dt-bindings: cadence: add missing 'required' (Krzysztof Kozlowski)   
  - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources (Dmitry Baryshkov)   
  - dt-bindings: arm: qcom: fix MSM8994 boards compatibles (Krzysztof Kozlowski)   
  - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles (Krzysztof Kozlowski)   
  - dt-bindings: arm: qcom: fix Longcheer L8150 compatibles (Krzysztof Kozlowski)   
  - dt-bindings: gpio: zynq: Add missing compatible strings (Michal Simek)   
  - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (Peilin Ye)   
  - vsock: Fix memory leak in vsock_connect() (Peilin Ye)   
  - plip: avoid rcu debug splat (Florian Westphal)   
  - ipv6: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - mlx5: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - geneve: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (Sakari Ailus)   
  - octeontx2-af: Fix key checking for source mac (Subbaraya Sundeep)   
  - octeontx2-af: Fix mcam entry resource leak (Subbaraya Sundeep)   
  - octeontx2-af: suppress external profile loading warning (Harman Kalra)   
  - octeontx2-af: Apply tx nibble fixup always (Stanislaw Kardach)   
  - octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli)   
  - Input: exc3000 - fix return value check of wait_for_completion_timeout (Miaoqian Lin)   
  - pinctrl: qcom: sm8250: Fix PDC map (Jianhua Lu)   
  - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (Samuel Holland)   
  - pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar)   
  - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (Nikita Travkin)   
  - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (Miaoqian Lin)   
  - dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles (Krzysztof Kozlowski)   
  - selftests: forwarding: Fix failing tests with old libnet (Ido Schimmel)   
  - net: bgmac: Fix a BUG triggered by wrong bytes_compl (Sandor Bodo-Merle)   
  - net: bcmgenet: Indicate MAC is in charge of PHY PM (Florian Fainelli)   
  - net: phy: Warn about incorrect mdio_bus_phy_resume() state (Florian Fainelli)   
  - devlink: Fix use-after-free after a failed reload (Ido Schimmel)   
  - virtio_net: fix memory leak inside XPD_TX with mergeable (Xuan Zhuo)   
  - SUNRPC: Reinitialise the backchannel request buffers before reuse (Trond Myklebust)   
  - SUNRPC: Fix xdr_encode_bool() (Chuck Lever)   
  - sunrpc: fix expiry of auth creds (Dan Aloni)   
  - m68k: coldfire/device.c: protect FLEXCAN blocks (Randy Dunlap)   
  - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao (AceLan))   
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin)   
  - can: mcp251x: Fix race condition on receive interrupt (Sebastian Würl)   
  - bpf: Check the validity of max_rdwr_access for sock local storage map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for hash map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for array map iterator (Hou Tao)   
  - bpf: Don't reinit map value in prealloc_lru_pop (Kumar Kartikeya Dwivedi)   
  - BPF: Fix potential bad pointer dereference in bpf_sys_bpf() (Jinghao Jia)   
  - NFSv4/pnfs: Fix a use-after-free bug in open (Trond Myklebust)   
  - NFSv4.1: RECLAIM_COMPLETE must handle EACCES (Zhang Xianwei)   
  - NFSv4: Fix races in the legacy idmapper upcall (Trond Myklebust)   
  - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly (Trond Myklebust)   
  - NFSv4.1: Don't decrease the value of seq_nr_highest_sent (Trond Myklebust)   
  - Documentation: ACPI: EINJ: Fix obsolete example (Qifu Zhang)   
  - apparmor: Fix memleak in aa_simple_write_to_buffer() (Xiu Jianfeng)   
  - apparmor: fix reference count leak in aa_pivotroot() (Xin Xiong)   
  - apparmor: fix overlapping attachment computation (John Johansen)   
  - apparmor: fix setting unconfined mode on a loaded profile (John Johansen)   
  - apparmor: fix aa_label_asxprint return check (Tom Rix)   
  - apparmor: Fix failed mount permission check error message (John Johansen)   
  - apparmor: fix absroot causing audited secids to begin with = (John Johansen)   
  - apparmor: fix quiet_denied for file rules (John Johansen)   
  - can: ems_usb: fix clang's -Wunaligned-access warning (Marc Kleine-Budde)   
  - dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional (Nícolas F. R. A. Prado)   
  - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II (Takashi Iwai)   
  - tracing: Have filter accept "common_cpu" to be consistent (Steven Rostedt (Google))   
  - tracing/probes: Have kprobes and uprobes use $COMM too (Steven Rostedt (Google))   
  - tracing/eprobes: Have event probes be consistent with kprobes and uprobes (Steven Rostedt (Google))   
  - tracing/eprobes: Do not hardcode $comm as a string (Steven Rostedt (Google))   
  - tracing/eprobes: Do not allow eprobes to use $stack, or % for regs (Steven Rostedt (Google))   
  - tracing/perf: Fix double put of trace event when init fails (Steven Rostedt (Google))   
  - x86/kprobes: Fix JNG/JNLE emulation (Nadav Amit)   
  - cifs: Fix memory leak on the deferred close (Zhang Xiaoxu)   
  - btrfs: fix lost error handling when looking up extended ref on log replay (Filipe Manana)   
  - btrfs: reset RO counter on block group if we fail to relocate (Josef Bacik)   
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
  - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() (Christophe JAILLET)   
  - mmc: pxamci: Fix an error handling path in pxamci_probe() (Christophe JAILLET)   
  - mmc: pxamci: Fix another error handling path in pxamci_probe() (Christophe JAILLET)   
  - ata: libata-eh: Add missing command name (Damien Le Moal)   
  - drm/amd/display: Check correct bounds for stream encoder instances for DCN303 (Aurabindo Pillai)   
  - drm/ttm: Fix dummy res NULL ptr deref bug (Arunpravin Paneer Selvam)   
  - drm/nouveau: recognise GA103 (Karol Herbst)   
  - x86/mm: Use proper mask when setting PUD mapping (Aaron Lu)   
  - KVM: Unconditionally get a ref to /dev/kvm module when creating a VM (Sean Christopherson)   
  - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU (Christoffer Sandberg)   
  - ALSA: info: Fix llseek return value when using callback (Amadeusz Sławiński)   
  - LTS version: v5.15.62 (Jack Vogel)   
  - btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() (Qu Wenruo)   
  - btrfs: only write the sectors in the vertical stripe which has data stripes (Qu Wenruo)   
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)   
  - x86/ibt,ftrace: Make function-graph play nice (Peter Zijlstra)   
  - Revert "x86/ftrace: Use alternative RET encoding" (Thadeu Lima de Souza Cascardo)   
  - ksmbd: fix heap-based overflow in set_ntacl_dacl() (Namjae Jeon)   
  - ksmbd: prevent out of bound read for SMB2_WRITE (Hyunchul Lee)   
  - net_sched: cls_route: disallow handle of 0 (Jamal Hadi Salim)   
  - tee: add overflow check in register_shm_helper() (Jens Wiklander)   
  - io_uring: use original request task for inflight tracking (Jens Axboe)   
  - LTS version: v5.15.61 (Jack Vogel)   
  - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (James Smart)   
  - scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() (James Smart)   
  - scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() (James Smart)   
  - drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c (Maxime Ripard)   
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Luiz Augusto von Dentz)   
  - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" (Jose Alonso)   
  - io_uring: mem-account pbuf buckets (Pavel Begunkov)   
  - drm/meson: Fix refcount leak in meson_encoder_hdmi_init (Miaoqian Lin)   
  - drm/msm: Fix dirtyfb refcounting (Rob Clark)   
  - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (Kees Cook)   
  - drm/vc4: change vc4_dma_range_matches from a global to static (Tom Rix)   
  - net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode (Lukas Wunner)   
  - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function (Marek Vasut)   
  - Revert "s390/smp: enforce lowcore protection on CPU restart" (Alexander Gordeev)   
  - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" (Greg Kroah-Hartman)   
  - crypto: lib/blake2s - reduce stack frame usage in self test (Jason A. Donenfeld)   
  - tcp: fix over estimation in sk_forced_mem_schedule() (Eric Dumazet)   
  - mac80211: fix a memory leak where sta_info is not freed (Ahmed Zaki)   
  - tracing: Use a struct alignof to determine trace event field alignment (Steven Rostedt (Google))   
  - powerpc: Fix eh field when calling lwarx on PPC32 (Christophe Leroy)   
  - xen-blkfront: Apply 'feature_persistent' parameter when connect (SeongJae Park)   
  - xen-blkback: Apply 'feature_persistent' parameter when connect (Maximilian Heyne)   
  - xen-blkback: fix persistent grants negotiation (SeongJae Park)   
  - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH (Huacai Chen)   
  - KEYS: asymmetric: enforce SM2 signature use pkey algo (Tianjia Zhang)   
  - ext4: fix race when reusing xattr blocks (Jan Kara)   
  - ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara)   
  - ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang)   
  - ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara)   
  - ext4: make sure ext4_append() always allocates new block (Lukas Czerner)   
  - ext4: check if directory block is within i_size (Lukas Czerner)   {CVE-2022-1184} 
  - ext4: fix warning in ext4_iomap_begin as race between bmap and write (Ye Bin)   
  - ext4: correct the misjudgment in ext4_iget_extra_inode (Baokun Li)   
  - ext4: correct max_inline_xattr_value_size computing (Baokun Li)   
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)   
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)   
  - ext4: fix extent status tree race in writeback error recovery path (Eric Whitney)   
  - ext4: update s_overhead_clusters in the superblock during an on-line resize (Theodore Ts'o)   
  - tracing: Avoid -Warray-bounds warning for __rel_loc macro (Masami Hiramatsu)   
  - tracing: Add '__rel_loc' using trace event macros (Masami Hiramatsu)   
  - dm raid: fix address sanitizer warning in raid_resume (Mikulas Patocka)   
  - dm raid: fix address sanitizer warning in raid_status (Mikulas Patocka)   
  - KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (Sean Christopherson)   
  - KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (Sean Christopherson)   
  - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl (Like Xu)   
  - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (Sean Christopherson)   
  - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter (Like Xu)   
  - powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 (Jason A. Donenfeld)   
  - ACPI: CPPC: Do not prevent CPPC from working in the future (Rafael J. Wysocki)   
  - btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA (Nikolay Borisov)   
  - btrfs: reset block group chunk force if we have to wait (Josef Bacik)   
  - btrfs: ensure pages are unlocked on cow_file_range() failure (Naohiro Aota)   
  - block: don't allow the same type rq_qos add more than once (Jinke Han)   
  - block: remove the struct blk_queue_ctx forward declaration (Christoph Hellwig)   
  - locking/csd_lock: Change csdlock_debug from early_param to __setup (Chen Zhongjin)   
  - timekeeping: contribute wall clock to rng on time change (Jason A. Donenfeld)   
  - ARM: remove some dead code (Ard Biesheuvel)   
  - net/9p: Initialize the iounit field during fid creation (Tyler Hicks)   
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng)   
  - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification (Michal Suchanek)   
  - dm writecache: set a default MAX_WRITEBACK_JOBS (Mikulas Patocka)   
  - tty: 8250: Add support for Brainboxes PX cards. (Cameron Williams)   
  - serial: 8250: Add proper clock handling for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Fold EndRun device support into OxSemi Tornado code (Maciej W. Rozycki)   
  - serial: 8250_pci: Replace dev_*() by pci_*() macros (Andy Shevchenko)   
  - serial: 8250_pci: Refactor the loop in pci_ite887x_init() (Andy Shevchenko)   
  - PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (Robert Marko)   
  - PCI/AER: Iterate over error counters instead of error strings (Mohamed Khalfella)   
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin)   
  - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (Sean Christopherson)   
  - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors (Lev Kujawski)   
  - intel_th: pci: Add Raptor Lake-S CPU support (Alexander Shishkin)   
  - intel_th: pci: Add Raptor Lake-S PCH support (Alexander Shishkin)   
  - intel_th: pci: Add Meteor Lake-P support (Alexander Shishkin)   
  - scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (James Smart)   
  - scsi: lpfc: SLI path split: Refactor SCSI paths (James Smart)   
  - scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 (James Smart)   
  - scsi: lpfc: SLI path split: Refactor lpfc_iocbq (James Smart)   
  - scsi: lpfc: Fix EEH support for NVMe I/O (James Smart)   
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Sudeep Holla)   
  - usbnet: smsc95xx: Fix deadlock on runtime resume (Lukas Wunner)   
  - usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling (Lukas Wunner)   
  - usbnet: smsc95xx: Avoid link settings race on interrupt reception (Lukas Wunner)   
  - usbnet: smsc95xx: Don't clear read-only PHY interrupt (Lukas Wunner)   
  - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component (Dave Stevenson)   
  - drm/dp/mst: Read the extended DPCD capabilities during system resume (Imre Deak)   
  - crypto: blake2s - remove shash module (Jason A. Donenfeld)   
  - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer (Jitao Shi)   
  - drm/mediatek: Allow commands to be sent during video mode (Julien STEPHAN)   
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (David Collins)   
  - __follow_mount_rcu(): verify that mount_lock remains unchanged (Al Viro)   
  - Input: gscps2 - check return value of ioremap() in gscps2_probe() (Xie Shaowen)   
  - SMB3: fix lease break timeout when multiple deferred close handles for the same file. (Bharath SM)   
  - x86/olpc: fix 'logical not is only applied to the left hand side' (Alexander Lobakin)   
  - x86/kprobes: Update kcb status flag after singlestepping (Masami Hiramatsu (Google))   
  - ftrace/x86: Add back ftrace_expected assignment (Steven Rostedt (Google))   
  - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (Kim Phillips)   
  - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (Arun Easi)   
  - scsi: qla2xxx: Fix losing target when it reappears during delete (Arun Easi)   
  - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (Arun Easi)   
  - scsi: qla2xxx: Wind down adapter after PCIe error (Quinn Tran)   
  - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Quinn Tran)   
  - scsi: qla2xxx: Fix excessive I/O error messages by default (Arun Easi)   
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Arun Easi)   
  - scsi: qla2xxx: Turn off multi-queue for 8G adapters (Quinn Tran)   
  - scsi: qla2xxx: Fix discovery issues in FC-AL topology (Arun Easi)   
  - scsi: qla2xxx: Fix imbalance vha->vref_count (Quinn Tran)   
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Steffen Maier)   
  - scsi: ufs: core: Correct ufshcd_shutdown() flow (Peter Wang)   
  - video: fbdev: s3fb: Check the size of screen before memset_io() (Zheyu Ma)   
  - video: fbdev: arkfb: Check the size of screen before memset_io() (Zheyu Ma)   
  - video: fbdev: vt8623fb: Check the size of screen before memset_io() (Zheyu Ma)   
  - f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED (Jaewook Kim)   
  - f2fs: allow compression for mmap files in compress_mode=user (Sungjong Seo)   
  - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (Andrea Righi)   
  - sched/core: Do not requeue task on CPU excluded from cpus_mask (Mel Gorman)   
  - sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle (Tianchen Ding)   
  - sched: Fix the check of nr_running at queue wakelist (Tianchen Ding)   
  - tools/thermal: Fix possible path truncations (Florian Fainelli)   
  - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (Zheyu Ma)   
  - x86/numa: Use cpumask_available instead of hardcoded NULL check (Siddh Raman Pant)   
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (Waiman Long)   
  - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (Dietmar Eggemann)   
  - scripts/faddr2line: Fix vmlinux detection on arm64 (Josh Poimboeuf)   
  - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO (Arnaldo Carvalho de Melo)   
  - powerpc/pci: Fix PHB numbering when using opal-phbid (Michael Ellerman)   
  - x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero (Chenyi Qiang)   
  - kprobes: Forbid probing on trampoline and BPF code areas (Chen Zhongjin)   
  - perf symbol: Fail to read phdr workaround (Ian Rogers)   
  - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address (Miaoqian Lin)   
  - powerpc/xive: Fix refcount leak in xive_get_max_prio (Miaoqian Lin)   
  - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader (Miaoqian Lin)   
  - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time (Chao Liu)   
  - s390/smp: enforce lowcore protection on CPU restart (Alexander Gordeev)   
  - s390/maccess: rework absolute lowcore accessors (Alexander Gordeev)   
  - s390/smp: cleanup control register update routines (Alexander Gordeev)   
  - s390/smp: cleanup target CPU callback starting (Alexander Gordeev)   
  - s390/dump: fix os_info virtual vs physical address confusion (Alexander Gordeev)   
  - tty: serial: fsl_lpuart: correct the count of break characters (Sherry Sun)   
  - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias (Pali Rohár)   
  - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (Alexey Kardashevskiy)   
  - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 (Christophe Leroy)   
  - powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. (Christophe Leroy)   
  - ASoC: mchp-spdifrx: disable end of block interrupt on failures (Claudiu Beznea)   
  - video: fbdev: sis: fix typos in SiS_GetModeID() (Rustam Subkhankulov)   
  - video: fbdev: amba-clcd: Fix refcount leak bugs (Liang He)   
  - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (William Dean)   
  - watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource (Jean Delvare)   
  - ASoC: audio-graph-card: Add of_node_put() in fail path (Liang He)   
  - fuse: Remove the control interface for virtio-fs (Xie Yongji)   
  - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (Christophe JAILLET)   
  - ASoC: imx-card: use snd_pcm_format_t type for asrc_format (Shengjiu Wang)   
  - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format (Shengjiu Wang)   
  - ASoC: fsl-asoc-card: force cast the asrc_format type (Shengjiu Wang)   
  - ASoC: fsl_asrc: force cast the asrc_format type (Shengjiu Wang)   
  - s390/zcore: fix race when reading from hardware system area (Alexander Gordeev)   
  - s390/crash: fix incorrect number of bytes to copy to user space (Alexander Gordeev)   
  - s390/maccess: fix semantics of memcpy_real() and its callers (Alexander Gordeev)   
  - s390/dump: fix old lowcore virtual vs physical address confusion (Alexander Gordeev)   
  - perf tools: Fix dso_id inode generation comparison (Adrian Hunter)   
  - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (Liang He)   
  - mfd: max77620: Fix refcount leak in max77620_initialise_fps (Miaoqian Lin)   
  - mfd: t7l66xb: Drop platform disable callback (Uwe Kleine-König)   
  - remoteproc: sysmon: Wait for SSCTL service to come up (Sibi Sankar)   
  - remoteproc: qcom: pas: Check if coredump is enabled (Siddharth Gupta)   
  - proc: fix a dentry lock race between release_task and lookup (Zhihao Cheng)   
  - lib/smp_processor_id: fix imbalanced instrumentation_end() call (Tetsuo Handa)   
  - kfifo: fix kfifo_to_user() return type (Dan Carpenter)   
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Miaoqian Lin)   
  - MIPS: Fixed __debug_virt_addr_valid() (Florian Fainelli)   
  - net: 9p: fix refcount leak in p9_read_work() error handling (Hangyu Hua)   
  - 9p: Add client parameter to p9_req_put() (Kent Overstreet)   
  - 9p: Drop kref usage (Kent Overstreet)   
  - 9p: fix a bunch of checkpatch warnings (Dominique Martinet)   
  - iommu/exynos: Handle failed IOMMU device registration properly (Sam Protsenko)   
  - serial: 8250_bcm7271: Save/restore RTS in suspend/resume (Doug Berger)   
  - ASoC: mt6359: Fix refcount leak bug (Liang He)   
  - swiotlb: fail map correctly with failed io_tlb_default_mem (Robin Murphy)   
  - MIPS: vdso: Utilize __pa() for gic_pfn (Florian Fainelli)   
  - tty: n_gsm: fix missing corner cases in gsmld_poll() (Daniel Starke)   
  - tty: n_gsm: fix DM command (Daniel Starke)   
  - tty: n_gsm: fix wrong T1 retry count handling (Daniel Starke)   
  - serial: 8250_fsl: Don't report FE, PE and OE twice (Uwe Kleine-König)   
  - vfio/ccw: Do not change FSM state in subchannel event (Eric Farman)   
  - remoteproc: qcom: wcnss: Fix handling of IRQs (Sireesh Kodali)   
  - ASoC: imx-card: Fix DSD/PDM mclk frequency (Shengjiu Wang)   
  - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() (Liang He)   
  - tty: n_gsm: fix resource allocation order in gsm_activate_mux() (Daniel Starke)   
  - tty: n_gsm: fix race condition in gsmld_write() (Daniel Starke)   
  - tty: n_gsm: fix packet re-transmission without open control channel (Daniel Starke)   
  - tty: n_gsm: fix non flow control frames during mux flow off (Daniel Starke)   
  - tty: n_gsm: fix missing timer to handle stalled links (Daniel Starke)   
  - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() (Daniel Starke)   
  - tty: n_gsm: fix tty registration before control channel open (Daniel Starke)   
  - tty: n_gsm: fix user open not possible at responder until initiator open (Daniel Starke)   
  - tty: n_gsm: Delete gsmtty open SABM frame when config requester (Zhenguo Zhao)   
  - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables (Tom Rix)   
  - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable (Athira Rajeev)   
  - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header (Krzysztof Kozlowski)   
  - remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init (Miaoqian Lin)   
  - profiling: fix shift too large makes kernel panic (Chen Zhongjin)   
  - selftests/livepatch: better synchronize test_klp_callbacks_busy (Joe Lawrence)   
  - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init (Miaoqian Lin)   
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (AngeloGioacchino Del Regno)   
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Shengjiu Wang)   
  - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)   
  - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)   
  - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (Ilpo Järvinen)   
  - serial: 8250: dma: Allow driver operations before starting DMA transfers (Miquel Raynal)   
  - serial: 8250: Export ICR access helpers for internal use (Maciej W. Rozycki)   
  - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe (Miaoqian Lin)   
  - ASoC: codecs: da7210: add check for i2c_add_driver (Jiasheng Jiang)   
  - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (Miaoqian Lin)   
  - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe (Miaoqian Lin)   
  - ASoC: imx-audmux: Silence a clang warning (Fabio Estevam)   
  - ASoC: samsung: Fix error handling in aries_audio_probe (Miaoqian Lin)   
  - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe (Miaoqian Lin)   
  - opp: Fix error check in dev_pm_opp_attach_genpd() (Tang Bin)   
  - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() (Nathan Chancellor)   
  - jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted (Zhihao Cheng)   
  - ext4: recover csum seed of tmp_inode after migrating to extents (Li Lingfeng)   
  - jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (Zhang Yi)   
  - block: ensure iov_iter advances for added pages (Keith Busch)   
  - block/bio: remove duplicate append pages code (Keith Busch)   
  - nvme: catch -ENODEV from nvme_revalidate_zones again (Christoph Hellwig)   
  - nvme: don't return an error from nvme_configure_metadata (Christoph Hellwig)   
  - nvme: disable namespace access for unsupported metadata (Keith Busch)   
  - nvme: define compat_ioctl again to unbreak 32-bit userspace. (Nick Bowler)   
  - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (Bean Huo)   
  - null_blk: fix ida error handling in null_add_dev() (Dan Carpenter)   
  - block/rnbd-srv: Set keep_id to true after mutex_trylock (Md Haris Iqbal)   
  - RDMA/rxe: Fix error unwind in rxe_create_qp() (Zhu Yanjun)   
  - RDMA/rxe: Remove the is_user members of struct rxe_sq/rxe_rq/rxe_srq (Xiao Yang)   
  - RDMA/rxe: Add memory barriers to kernel queues (Bob Pearson)   
  - RDMA/mlx5: Add missing check for return value in get namespace flow (Maor Gottlieb)   
  - of/fdt: declared return type does not match actual return type (Xu Qiang)   
  - selftests: kvm: set rax before vmcall (Andrei Vagin)   
  - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region (Miaohe Lin)   
  - android: binder: stop saving a pointer to the VMA (Liam R. Howlett)   
  - RDMA/srpt: Fix a use-after-free (Bart Van Assche)   
  - RDMA/srpt: Introduce a reference count in struct srpt_device (Bart Van Assche)   
  - RDMA/srpt: Duplicate port name members (Bart Van Assche)   
  - platform/olpc: Fix uninitialized data in debugfs write (Dan Carpenter)   
  - KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP (Sean Christopherson)   
  - mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() (Patrice Chotard)   
  - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() (Andrey Strachuk)   
  - USB: serial: fix tty-port initialized comments (Johan Hovold)   
  - HID: amd_sfh: Handle condition of "no sensors" (Basavaraj Natikar)   
  - PCI: tegra194: Fix link up retry sequence (Vidya Sagar)   
  - PCI: tegra194: Fix Root Port interrupt handling (Vidya Sagar)   
  - RDMA/rxe: For invalidate compare according to set keys in mr (Md Haris Iqbal)   
  - HID: alps: Declare U1_UNICORN_LEGACY support (Artem Borisov)   
  - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (Liang He)   
  - mmc: cavium-octeon: Add of_node_put() when breaking out of loop (Liang He)   
  - RDMA/rxe: Fix mw bind to allow any consumer key portion (Bob Pearson)   
  - scripts/gdb: fix 'lx-dmesg' on 32 bits arch (Antonio Borneo)   
  - scripts/gdb: lx-dmesg: read records individually (John Ogness)   
  - dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) (Fabio Estevam)   
  - HID: amd_sfh: Add NULL check for hid device (Basavaraj Natikar)   
  - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() (Harshit Mogalapalli)   
  - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (Liang He)   
  - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (Jianglei Nie)   
  - clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk (Bryan O'Donoghue)   
  - iio: cros: Register FIFO callback after sensor is registered (Gwendal Grignou)   
  - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (Cheng Xu)   
  - RDMA/hns: Fix incorrect clearing of interrupt status register (Haoyue Xu)   
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (Jianglei Nie)   
  - RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (Md Haris Iqbal)   
  - RDMA/rtrs-clt: Rename rtrs_clt_sess to rtrs_clt_path (Vaishali Thakkar)   
  - RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path (Vaishali Thakkar)   
  - RDMA/rtrs: Rename rtrs_sess to rtrs_path (Vaishali Thakkar)   
  - RDMA/rtrs: Do not allow sessname to contain special symbols / and . (Md Haris Iqbal)   
  - RDMA/rtrs: Introduce destroy_cq helper (Md Haris Iqbal)   
  - RDMA/rtrs: Replace duplicate check with is_pollqueue helper (Jack Wang)   
  - RDMA/rtrs: Fix warning when use poll mode on client side. (Jack Wang)   
  - RDMA/rtrs-srv: Fix modinfo output for stringify (Jack Wang)   
  - RDMA/irdma: Fix setting of QP context err_rq_idx_valid field (Mustafa Ismail)   
  - RDMA/irdma: Fix VLAN connection with wildcard address (Mustafa Ismail)   
  - RDMA/irdma: Fix a window for use-after-free (Mustafa Ismail)   
  - um: random: Don't initialise hwrng struct with zero (Christopher Obbard)   
  - interconnect: imx: fix max_node_id (Peng Fan)   
  - phy: stm32: fix error return in stm32_usbphyc_phy_init (Fabrice Gasnier)   
  - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() (Dan Carpenter)   
  - usb: dwc3: qcom: fix missing optional irq warnings (Johan Hovold)   
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup (Rohith Kollalsi)   
  - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET (Thinh Nguyen)   
  - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() (Liang He)   
  - usb: gadget: udc: amd5536 depends on HAS_DMA (Randy Dunlap)   
  - xtensa: iss: fix handling error cases in iss_net_configure() (Yang Yingliang)   
  - xtensa: iss/network: provide release() callback (Max Filippov)   
  - scsi: smartpqi: Fix DMA direction for RAID requests (Mahesh Rajashekhara)   
  - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (Christian Marangi)   
  - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() (Stefan Roese)   
  - KVM: s390: pv: leak the topmost page table when destroy fails (Claudio Imbrenda)   
  - mmc: block: Add single read for 4k sector cards (Christian Loehle)   
  - of: device: Fix missing of_node_put() in of_dma_set_restricted_buffer (Liang He)   
  - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (Eugen Hristev)   
  - memstick/ms_block: Fix a memory leak (Christophe JAILLET)   
  - memstick/ms_block: Fix some incorrect memory allocation (Christophe JAILLET)   
  - mmc: renesas_sdhi: Get the reset handle early in the probe (Lad Prabhakar)   
  - mmc: mxcmmc: Silence a clang warning (Fabio Estevam)   
  - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (Miaoqian Lin)   
  - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (Duoming Zhou)   
  - binder: fix redefinition of seq_file attributes (Carlos Llamas)   
  - intel_th: msu: Fix vmalloced buffers (Alexander Shishkin)   
  - intel_th: msu-sink: Potential dereference of null pointer (Jiasheng Jiang)   
  - intel_th: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (Dan Carpenter)   
  - PCI: endpoint: Don't stop controller when unbinding endpoint function (Shunsuke Mie)   
  - dmaengine: sf-pdma: Add multithread support for a DMA channel (Viacheslav Mitrofanov)   
  - KVM: arm64: Don't return from void function (Quentin Perret)   
  - soundwire: revisit driver bind/unbind and callbacks (Pierre-Louis Bossart)   
  - soundwire: bus_type: fix remove and shutdown support (Pierre-Louis Bossart)   
  - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists (Serge Semin)   
  - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (Serge Semin)   
  - PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address (Serge Semin)   
  - PCI: dwc: Disable outbound windows only for controllers using iATU (Serge Semin)   
  - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (Serge Semin)   
  - PCI: dwc: Stop link on host_init errors and de-initialization (Serge Semin)   
  - mm/mempolicy: fix get_nodes out of bound access (Tianyu Li)   
  - clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register (Nikita Travkin)   
  - clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled. (Nikita Travkin)   
  - clk: qcom: camcc-sm8250: Fix topology around titan_top power domain (Vladimir Zapolskiy)   
  - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (Vladimir Zapolskiy)   
  - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (Robert Marko)   
  - clk: qcom: ipq8074: fix NSS port frequency tables (Robert Marko)   
  - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (Robert Marko)   
  - clk: qcom: ipq8074: fix NSS core PLL-s (Robert Marko)   
  - RDMA/rxe: Fix deadlock in rxe_do_local_ops() (Bob Pearson)   
  - usb: host: xhci: use snprintf() in xhci_decode_trb() (Sergey Shtylyov)   
  - clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC (Bryan O'Donoghue)   
  - clk: qcom: clk-krait: unlock spin after mux completion (Ansuel Smith)   
  - driver core: fix potential deadlock in __driver_attach (Zhang Wensheng)   
  - misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Christophe JAILLET)   
  - clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level (Vladimir Zapolskiy)   
  - mtd: dataflash: Add SPI ID table (Mark Brown)   
  - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics (Serge Semin)   
  - scsi: iscsi: Fix session removal on shutdown (Mike Christie)   
  - scsi: iscsi: Add helper to remove a session from the kernel (Mike Christie)   
  - scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel (Mike Christie)   
  - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv (Duoming Zhou)   
  - mwifiex: Ignore BTCOEX events from the 88W8897 firmware (Jonas Dreßler)   
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson)   
  - lib/test_hmm: avoid accessing uninitialized pages (Miaohe Lin)   
  - clk: mediatek: reset: Fix written reset bit offset (Rex-BC Chen)   
  - iio: accel: bma400: Reordering of header files (Jagath Jog J)   
  - platform/chrome: cros_ec: Always expose last resume result (Stephen Boyd)   
  - iio: accel: bma400: Fix the scale min and max macro values (Jagath Jog J)   
  - scsi: qla2xxx: edif: Fix no logout on delete for N2N (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix session thrash (Quinn Tran)   
  - scsi: qla2xxx: edif: Tear down session if keys have been removed (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix no login after app start (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce disruption due to multiple app start (Quinn Tran)   
  - scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (Quinn Tran)   
  - netfilter: xtables: Bring SPDX identifier back (Thomas Gleixner)   
  - usb: xhci: tegra: Fix error check (Tang Bin)   
  - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() (Tang Bin)   
  - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (Miaoqian Lin)   
  - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (Miaoqian Lin)   
  - fpga: altera-pr-ip: fix unsigned comparison with less than zero (Marco Pagani)   
  - PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (Miaoqian Lin)   
  - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (Uwe Kleine-König)   
  - mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset (Miaoqian Lin)   
  - mtd: partitions: Fix refcount leak in parse_redboot_of (Miaoqian Lin)   
  - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (Duoming Zhou)   
  - HID: cp2112: prevent a buffer overflow in cp2112_xfer() (Harshit Mogalapalli)   
  - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() (Miaoqian Lin)   
  - PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() (Miaoqian Lin)   
  - phy: samsung: exynosautov9-ufs: correct TSRV register configurations (Chanho Park)   
  - scsi: qla2xxx: edif: Fix n2n login retry for secure device (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (Quinn Tran)   
  - scsi: qla2xxx: edif: Add retry for ELS passthrough (Quinn Tran)   
  - scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix inconsistent check of db_flags (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce connection thrash (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix potential stuck session in sa update (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (Quinn Tran)   
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Vaibhav Jain)   
  - mtd: rawnand: meson: Fix a potential double free issue (Christophe JAILLET)   
  - mtd: maps: Fix refcount leak in ap_flash_init (Miaoqian Lin)   
  - mtd: maps: Fix refcount leak in of_flash_probe_versatile (Miaoqian Lin)   
  - clk: renesas: r9a06g032: Fix UART clkgrp bitsel (Ralph Siemsen)   
  - HID: amd_sfh: Don't show client init failed as error when discovery fails (Mario Limonciello)   
  - wireguard: allowedips: don't corrupt stack when detecting overflow (Jason A. Donenfeld)   
  - wireguard: ratelimiter: use hrtimer in selftest (Jason A. Donenfeld)   
  - net: usb: make USB_RTL8153_ECM non user configurable (Maciej Żenczykowski)   
  - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock (Hangyu Hua)   
  - net: ionic: fix error check for vlan flags in ionic_set_nic_features() (Jian Shen)   
  - net: rose: fix netdev reference changes (Eric Dumazet)   
  - netdevsim: Avoid allocation warnings triggered from user space (Jakub Kicinski)   
  - iavf: Fix 'tc qdisc show' listing too many queues (Przemyslaw Patynowski)   
  - iavf: Fix max_rate limiting (Przemyslaw Patynowski)   
  - wifi: rtw88: check the return value of alloc_workqueue() (William Dean)   
  - netdevsim: fib: Fix reference count leak on route deletion failure (Ido Schimmel)   
  - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set (Mike Manning)   
  - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() (Eric Dumazet)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() (Eric Dumazet)   
  - crypto: hisilicon/sec - fix auth key size error (Kai Ye)   
  - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (Pali Rohár)   
  - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq (Zhengchao Shao)   
  - net/mlx5: Adjust log_max_qp to be 18 at most (Maher Sanalla)   
  - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (Maxim Mikityanskiy)   
  - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (Gal Pressman)   
  - media: cedrus: hevc: Add check for invalid timestamp (Jernej Skrabec)   
  - wifi: libertas: Fix possible refcount leak in if_usb_probe() (Hangyu Hua)   
  - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (Jose Ignacio Tornos Martinez)   
  - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (Ammar Faizi)   
  - i2c: mux-gpmux: Add of_node_put() when breaking out of loop (Liang He)   
  - i2c: cadence: Support PEC for SMBus block read (Lars-Peter Clausen)   
  - Bluetooth: hci_intel: Add check for platform_driver_register (Jiasheng Jiang)   
  - can: pch_can: pch_can_error(): initialize errc before using it (Vincent Mailhol)   
  - can: error: specify the values of data[5..7] of CAN error frames (Vincent Mailhol)   
  - can: usb_8dev: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: sun4i_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: hi311x: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: sja1000: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: rcar_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: pch_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - libbpf: fix an snprintf() overflow check (Dan Carpenter)   
  - selftests/bpf: fix a test for snprintf() overflow (Dan Carpenter)   
  - wifi: p54: add missing parentheses in p54_flush() (Rustam Subkhankulov)   
  - wifi: p54: Fix an error handling path in p54spi_probe() (Christophe JAILLET)   
  - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (Dan Carpenter)   
  - media: staging: media: hantro: Fix typos (Sebastian Fricke)   
  - media: hevc: Embedded indexes in RPS (Benjamin Gaignard)   
  - media: hantro: Simplify postprocessor (Ezequiel Garcia)   
  - media: hantro: postproc: Fix motion vector space size (Ezequiel Garcia)   
  - media: cedrus: h265: Fix flag name (Jernej Skrabec)   
  - fs: check FMODE_LSEEK to control internal pipe splicing (Jason A. Donenfeld)   
  - bpf: Fix subprog names in stack traces. (Alexei Starovoitov)   
  - selftests: timers: clocksource-switch: fix passing errors from child (Wolfram Sang)   
  - selftests: timers: valid-adjtimex: build fix for newer toolchains (Wolfram Sang)   
  - libbpf: Fix the name of a reused map (Anquan Wu)   
  - tcp: make retransmitted SKB fit into the send window (Yonglong Li)   
  - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. (Jian Zhang)   
  - skmsg: Fix invalid last sg check in sk_msg_recvmsg() (Liu Jian)   
  - mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() (Liang He)   
  - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (Liang He)   
  - mt76: mt7921: enlarge maximum VHT MPDU length to 11454 (Deren Wu)   
  - mt76: mt7921: fix aggregation subframes setting to HE max (Deren Wu)   
  - ieee80211: add EHT 1K aggregation definitions (Mordechay Goodstein)   
  - mt76: mt7615: do not update pm stats in case of error (Lorenzo Bianconi)   
  - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (Lorenzo Bianconi)   
  - drm/msm/dpu: Fix for non-visible planes (Rob Clark)   
  - drm/msm: Avoid dirtyfb stalls on video mode displays (v2) (Rob Clark)   
  - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment (AngeloGioacchino Del Regno)   
  - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq (Zhengchao Shao)   
  - crypto: hisilicon/sec - don't sleep when in softirq (Zhengchao Shao)   
  - drm/msm/mdp5: Fix global state lock backoff (Rob Clark)   
  - net: hinic: avoid kernel hung in hinic_get_stats64() (Qiao Ma)   
  - net: hinic: fix bug that ethtool get wrong stats (Qiao Ma)   
  - hinic: Use the bitmap API when applicable (Christophe JAILLET)   
  - drm: bridge: sii8620: fix possible off-by-one (Hangyu Hua)   
  - drm/mediatek: dpi: Only enable dpi after the bridge is enabled (Guillaume Ranquet)   
  - drm/mediatek: dpi: Remove output format of YUV (Bo-Chen Chen)   
  - drm/rockchip: Fix an error handling path rockchip_dp_probe() (Christophe JAILLET)   
  - drm/rockchip: vop: Don't crash for invalid duplicate_state() (Brian Norris)   
  - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 (Maciej Fijalkowski)   
  - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (Qian Cai)   
  - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes (Dave Stevenson)   
  - drm/vc4: hdmi: Fix timings for interlaced modes (Mateusz Kwiatkowski)   
  - drm/vc4: hdmi: Reset HDMI MISC_CONTROL register (Dave Stevenson)   
  - drm/vc4: hdmi: Avoid full hdmi audio fifo writes (Dom Cobley)   
  - drm/vc4: hdmi: Fix HPD GPIO detection (Maxime Ripard)   
  - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration (Dave Stevenson)   
  - drm/vc4: dsi: Fix dsi0 interrupt support (Dave Stevenson)   
  - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type (Dave Stevenson)   
  - drm/vc4: dsi: Correct pixel order for DSI0 (Dave Stevenson)   
  - drm/vc4: dsi: Correct DSI divider calculations (Dave Stevenson)   
  - drm/vc4: dsi: Release workaround buffer and DMA (Dave Stevenson)   
  - drm/vc4: Use of_device_get_match_data() (Minghao Chi (CGEL ZTE))   
  - drm/vc4: dsi: Switch to devm_drm_of_get_bridge (Maxime Ripard)   
  - drm/bridge: Add a function to abstract away panels (Maxime Ripard)   
  - drm/vc4: plane: Fix margin calculations for the right/bottom edges (Dave Stevenson)   
  - drm/vc4: plane: Remove subpixel positioning check (Dom Cobley)   
  - media: tw686x: Fix memory leak in tw686x_video_init (Miaoqian Lin)   
  - media: driver/nxp/imx-jpeg: fix a unexpected return value problem (Jian Zhang)   
  - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set (Ming Qian)   
  - media: hdpvr: fix error value returns in hdpvr_read (Niels Dossche)   
  - drm/mcde: Fix refcount leak in mcde_dsi_bind (Miaoqian Lin)   
  - media: imx-jpeg: Disable slot interrupt when frame done (Ming Qian)   
  - drm: bridge: adv7511: Add check for mipi_dsi_driver_register (Jiasheng Jiang)   
  - crypto: ccp - During shutdown, check SEV data pointer before using (Tom Lendacky)   
  - test_bpf: fix incorrect netdev features (Jian Shen)   
  - rcutorture: Fix ksoftirqd boosting timing and iteration (Frederic Weisbecker)   
  - rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed (Paul E. McKenney)   
  - rcutorture: Warn on individual rcu_torture_init() error conditions (Paul E. McKenney)   
  - drm/radeon: fix incorrrect SPDX-License-Identifiers (Alex Deucher)   
  - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (Alexey Kodanev)   
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)   
  - media: imx-jpeg: Implement drain using v4l2-mem2mem helpers (Ming Qian)   
  - media: imx-jpeg: Align upwards buffer size (Ming Qian)   
  - media: imx-jpeg: Support dynamic resolution change (Ming Qian)   
  - media: imx-jpeg: Handle source change in a function (Ming Qian)   
  - media: imx-jpeg: Identify and handle precision correctly (Ming Qian)   
  - media: imx-jpeg: Refactor function mxc_jpeg_parse (Ming Qian)   
  - media: imx-jpeg: Set V4L2_BUF_FLAG_LAST at eos (Ming Qian)   
  - media: imx-jpeg: use NV12M to represent non contiguous NV12 (Ming Qian)   
  - media: imx-jpeg: Add pm-runtime support for imx-jpeg (Mirela Rabulea)   
  - media: imx-jpeg: Leave a blank space before the configuration data (Ming Qian)   
  - media: imx-jpeg: Correct some definition according specification (Ming Qian)   
  - media: tw686x: Register the irq at the end of probe (Zheyu Ma)   
  - media: atmel: atmel-sama7g5-isc: fix warning in configs without OF (Eugen Hristev)   
  - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() (Alexey Khoroshilov)   
  - i2c: Fix a potential use after free (Xu Wang)   
  - can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback (Marc Kleine-Budde)   
  - can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback (Marc Kleine-Budde)   
  - net: fix sk_wmem_schedule() and sk_rmem_schedule() errors (Eric Dumazet)   
  - crypto: sun8i-ss - fix error codes in allocate_flows() (Dan Carpenter)   
  - crypto: sun8i-ss - do not allocate memory when handling hash requests (Corentin Labbe)   
  - drm: adv7511: override i2c address of cec before accessing it (Antonio Borneo)   
  - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (Miaoqian Lin)   
  - drm/shmem-helper: Pass GEM shmem object in public interfaces (Thomas Zimmermann)   
  - drm/shmem-helper: Export dedicated wrappers for GEM object functions (Thomas Zimmermann)   
  - drm/shmem-helper: Unexport drm_gem_shmem_create_with_handle() (Thomas Zimmermann)   
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong)   
  - i2c: mxs: Silence a clang warning (Fabio Estevam)   
  - i2c: npcm: Correct slave role behavior (Tali Perry)   
  - i2c: npcm: Remove own slave addresses 2:10 (Tali Perry)   
  - drm/bridge: lt9611uxc: Cancel only driver's work (Bjorn Andersson)   
  - drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init (Miaoqian Lin)   
  - drm/meson: encoder_hdmi: switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR (Neil Armstrong)   
  - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (Xinlei Lee)   
  - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs (Jitao Shi)   
  - drm/mediatek: Modify dsi funcs to atomic operations (Xinlei Lee)   
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (Alexey Kodanev)   
  - ath11k: Fix incorrect debug_mask mappings (Manikanta Pubbisetty)   
  - drm/mipi-dbi: align max_chunk to 2 in spi_transfer (Yunhao Tian)   
  - ath11k: fix netdev open race (Johan Hovold)   
  - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (Dan Carpenter)   
  - drm/panel: Fix build error when CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y && CONFIG_DRM_DISPLAY_HELPER=m (Gao Chao)   
  - drm/st7735r: Fix module autoloading for Okaya RH128128T (Javier Martinez Canillas)   
  - ath10k: do not enforce interrupt trigger type (Krzysztof Kozlowski)   
  - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function (Marek Vasut)   
  - drm/dp: Export symbol / kerneldoc fixes for DP AUX bus (Douglas Anderson)   
  - pwm: lpc18xx: Fix period handling (Uwe Kleine-König)   
  - pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() (Uwe Kleine-König)   
  - pwm: lpc18xx-sct: Reduce number of devm memory allocations (Uwe Kleine-König)   
  - pwm: sifive: Shut down hardware only after pwmchip_remove() completed (Uwe Kleine-König)   
  - pwm: sifive: Ensure the clk is enabled exactly once per running PWM (Uwe Kleine-König)   
  - pwm: sifive: Simplify offset calculation for PWMCMP registers (Uwe Kleine-König)   
  - dm: return early from dm_pr_call() if DM device is suspended (Mike Snitzer)   
  - thermal/tools/tmon: Include pthread and time headers in tmon.h (Markus Mayer)   
  - selftests/seccomp: Fix compile warning when CC=clang (YiFei Zhu)   
  - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() (Nicolas Saenz Julienne)   
  - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX (Anshuman Khandual)   
  - irqdomain: Report irq number for NOMAP domains (Xu Qiang)   
  - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment (Sumit Garg)   
  - soc: qcom: Make QCOM_RPMPD depend on PM (Konrad Dybcio)   
  - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (Liang He)   
  - dm writecache: count number of blocks discarded, not number of discard bios (Mikulas Patocka)   
  - dm writecache: count number of blocks written, not number of write bios (Mikulas Patocka)   
  - dm writecache: count number of blocks read, not number of read bios (Mikulas Patocka)   
  - dm writecache: return void from functions (Mikulas Patocka)   
  - PM: domains: Ensure genpd_debugfs_dir exists before remove (Hsin-Yi Wang)   
  - blktrace: Trace remapped requests correctly (Bart Van Assche)   
  - hwmon: (drivetemp) Add module alias (Linus Walleij)   
  - spi: tegra20-slink: fix UAF in tegra_slink_remove() (Yang Yingliang)   
  - spi: Fix simplification of devm_spi_register_controller (Yang Yingliang)   
  - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created (Ming Lei)   
  - erofs: avoid consecutive detection for Highmem memory (Gao Xiang)   
  - arm64: tegra: Fix SDMMC1 CD on P2888 (Tamás Szűcs)   
  - arm64: tegra: Mark BPMP channels as no-memory-wc (Mikko Perttunen)   
  - arm64: tegra: Update Tegra234 BPMP channel addresses (Mikko Perttunen)   
  - arm64: tegra: Fixup SYSRAM references (Thierry Reding)   
  - arm64: dts: mt7622: fix BPI-R64 WPS button (Nick Hainke)   
  - arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells (Johan Hovold)   
  - arm64: dts: qcom: sm6125: Append -state suffix to pinctrl nodes (Marijn Suijten)   
  - arm64: dts: qcom: sm6125: Move sdc2 pinctrl from seine-pdx201 to sm6125 (Marijn Suijten)   
  - ACPI: VIOT: Fix ACS setup (Eric Auger)   
  - drivers/iio: Remove all strcpy() uses (Len Baker)   
  - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue)   
  - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali)   
  - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings (GONG, Ruiqi)   
  - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (Yang Yingliang)   
  - ARM: dts: qcom: pm8841: add required thermal-sensor-cells (Krzysztof Kozlowski)   
  - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (Miaoqian Lin)   
  - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem (Miaoqian Lin)   
  - ARM: dts: qcom-msm8974: fix irq type on blsp2_uart1 (Luca Weiss)   
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP (Dan Williams)   
  - regulator: qcom_smd: Fix pm8916_pldo range (Stephan Gerhold)   
  - cpufreq: zynq: Fix refcount leak in zynq_get_revision (Miaoqian Lin)   
  - arm64: dts: qcom: sdm636-sony-xperia-ganges-mermaid: correct sdc2 pinconf (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: fix gpu's interconnect path (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: fix the qusb2phy ref clock (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: disable GPU by default (Dmitry Baryshkov)   
  - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (Miaoqian Lin)   
  - ARM: OMAP2+: Fix refcount leak in omapdss_init_of (Miaoqian Lin)   
  - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg (Krzysztof Kozlowski)   
  - block: fix infinite loop for invalid zone append (Keith Busch)   
  - soc: fsl: guts: machine variable might be unset (Michael Walle)   
  - arm64: dts: qcom: sc7180: Remove ipa_fw_mem node on trogdor (Stephen Boyd)   
  - locking/lockdep: Fix lockdep_init_map_*() confusion (Peter Zijlstra)   
  - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (Alexandru Elisei)   
  - arm64: select TRACE_IRQFLAGS_NMI_SUPPORT (Mark Rutland)   
  - arm64: dts: mt8192: Fix idle-states entry-method (Nícolas F. R. A. Prado)   
  - arm64: dts: mt8192: Fix idle-states nodes naming scheme (Nícolas F. R. A. Prado)   
  - ARM: dts: ast2600-evb-a1: fix board compatible (Krzysztof Kozlowski)   
  - ARM: dts: ast2600-evb: fix board compatible (Krzysztof Kozlowski)   
  - ARM: dts: ast2500-evb: fix board compatible (Krzysztof Kozlowski)   
  - x86/pmem: Fix platform-device leak in error path (Johan Hovold)   
  - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors (Geert Uytterhoeven)   
  - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (Liang He)   
  - dt-bindings: iio: accel: Add DT binding doc for ADXL355 (Puranjay Mohan)   
  - scsi: hisi_sas: Use managed PCI functions (Xiang Chen)   
  - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values (Geert Uytterhoeven)   
  - ARM: dts: imx7d-colibri-emmc: add cpu1 supply (Marcel Ziswiler)   
  - ACPI: processor/idle: Annotate more functions to live in cpuidle section (Guilherme G. Piccoli)   
  - ARM: bcm: Fix refcount leak in bcm_kona_smc_init (Miaoqian Lin)   
  - spi: spi-altera-dfl: Fix an error handling path (Christophe JAILLET)   
  - arm64: dts: renesas: beacon: Fix regulator node names (Geert Uytterhoeven)   
  - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (Miaoqian Lin)   
  - ARM: findbit: fix overflowing offset (Russell King (Oracle))   
  - spi: spi-rspi: Fix PIO fallback on RZ platforms (Biju Das)   
  - powerpc/64s: Disable stack variable initialisation for prom_init (Michael Ellerman)   
  - drm/amdgpu: Remove one duplicated ef removal (xinhui pan)   
  - kasan: test: Silence GCC 12 warnings (Kees Cook)   
  - selinux: Add boundary check in put_entry() (Xiu Jianfeng)   
  - selinux: fix memleak in security_read_state_kernel() (Xiu Jianfeng)   
  - PM: hibernate: defer device probing when resuming from hibernation (Tetsuo Handa)   
  - hwmon: (sht15) Fix wrong assumptions in device remove callback (Uwe Kleine-König)   
  - hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist (Armin Wolf)   
  - firmware: tegra: Fix error check return value of debugfs_create_file() (Lv Ruyi)   
  - ARM: shmobile: rcar-gen2: Increase refcount for new reference (Liang He)   
  - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name (Samuel Holland)   
  - arm64: dts: qcom: ipq8074: fix NAND node name (Robert Marko)   
  - ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART (Manivannan Sadhasivam)   
  - ACPI: LPSS: Fix missing check in register_device_clock() (huhai)   
  - ACPI: PM: save NVS memory for Lenovo G40-45 (Manyi Li)   
  - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk (Hans de Goede)   
  - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (Hans de Goede)   
  - ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (Liang He)   
  - ARM: OMAP2+: display: Fix refcount leak bug (Liang He)   
  - spi: synquacer: Add missing clk_disable_unprepare() (Guo Mengqi)   
  - ARM: dts: ux500: Fix Gavini accelerometer mounting matrix (Linus Walleij)   
  - ARM: dts: ux500: Fix Codina accelerometer mounting matrix (Linus Walleij)   
  - ARM: dts: BCM5301X: Add DT for Meraki MR26 (Christian Lamparter)   
  - ARM: dts: imx6ul: fix qspi node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix lcdif node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix csi node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix keypad compatible (Alexander Stein)   
  - ARM: dts: imx6ul: change operating-points to uint32-matrix (Alexander Stein)   
  - ARM: dts: imx6ul: add missing properties for sram (Alexander Stein)   
  - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Juri Lelli)   
  - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() (William Dean)   
  - sched/core: Always flush pending blk_plug (John Keeping)   
  - genirq: GENERIC_IRQ_IPI depends on SMP (Samuel Holland)   
  - irqchip/mips-gic: Only register IPI domain when SMP is enabled (Samuel Holland)   
  - genirq: Don't return error on missing optional irq_request_resources() (Antonio Borneo)   
  - sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg (Chen Yu)   
  - ext2: Add more validity checks for inode counts (Jan Kara)   
  - arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" (Catalin Marinas)   
  - arm64: fix oops in concurrently setting insn_emulation sysctls (haibinzhang (张海斌))   
  - arm64: Do not forget syscall when starting a new thread. (Francis Laniel)   
  - arch: make TRACE_IRQFLAGS_NMI_SUPPORT generic (Mark Rutland)   
  - x86: Handle idle=nomwait cmdline properly for x86_idle (Wyes Karny)   
  - epoll: autoremove wakers even more aggressively (Benjamin Segall)   
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)   
  - usb: dwc3: gadget: fix high speed multiplier setting (Michael Grzeschik)   
  - usb: dwc3: gadget: refactor dwc3_repare_one_trb (Michael Grzeschik)   
  - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (Kunihiko Hayashi)   
  - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC (Kunihiko Hayashi)   
  - USB: HCD: Fix URB giveback issue in tasklet function (Weitao Wang)   
  - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion (Linyu Yuan)   
  - coresight: Clear the connection field properly (Suzuki K Poulose)   
  - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - powerpc/powernv: Avoid crashing if rng is NULL (Michael Ellerman)   
  - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E (Christophe Leroy)   
  - powerpc/fsl-pci: Fix Class Code of PCIe Root Port (Pali Rohár)   
  - PCI: Add defines for normal and subtractive PCI bridges (Pali Rohár)   
  - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() (Alexander Lobakin)   
  - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator (Xiaomeng Tong)   
  - mbcache: add functions to delete entry if unused (Jan Kara)   
  - mbcache: don't reclaim used entries (Jan Kara)   
  - md-raid10: fix KASAN warning (Mikulas Patocka)   
  - md-raid: destroy the bitmap after destroying the thread (Mikulas Patocka)   
  - serial: mvebu-uart: uart2 error bits clearing (Narendra Hadke)   
  - fuse: ioctl: translate ENOSYS (Miklos Szeredi)   
  - fuse: limit nsec (Miklos Szeredi)   
  - ksmbd: fix use-after-free bug in smb2_tree_disconect (Namjae Jeon)   
  - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT (Hyunchul Lee)   
  - ksmbd: fix memory leak in smb2_handle_negotiate (Namjae Jeon)   
  - soundwire: qcom: Check device status before reading devid (Srinivas Kandagatla)   
  - scsi: qla2xxx: Zero undefined mailbox IN registers (Bikash Hazarika)   
  - scsi: qla2xxx: Fix incorrect display of max frame size (Bikash Hazarika)   
  - scsi: sg: Allow waiting for commands to complete on removed device (Tony Battersby)   
  - iio: light: isl29028: Fix the warning in isl29028_remove() (Zheyu Ma)   
  - iio: fix iio_format_avail_range() printing for none IIO_VAL_INT (Fawzi Khaber)   
  - um: seed rng using host OS rng (Jason A. Donenfeld)   
  - um: Remove straying parenthesis (Benjamin Beichler)   
  - mtd: rawnand: arasan: Update NAND bus clock instead of system clock (Amit Kumar Mahapatra)   
  - mtd: rawnand: arasan: Fix clock rate in NV-DDR (Olga Kitaina)   
  - btrfs: reject log replay if there is unsupported RO compat flag (Qu Wenruo)   
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs (Tadeusz Struk)   
  - drm/amdgpu: fix check in fbdev init (Alex Deucher)   
  - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (Leo Li)   
  - drm/nouveau/kms: Fix failure path for creating DP connectors (Lyude Paul)   
  - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime (Lyude Paul)   
  - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() (Lyude Paul)   
  - drm/nouveau: fix another off-by-one in nvbios_addr (Timur Tabi)   
  - drm/hyperv-drm: Include framebuffer and EDID headers (Thomas Zimmermann)   
  - drm/vc4: hdmi: Disable audio if dmas property is present but empty (Phil Elwell)   
  - drm/shmem-helper: Add missing vunmap on error (Dmitry Osipenko)   
  - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (Dmitry Osipenko)   
  - rtc: rx8025: fix 12/24 hour mode detection on RX-8035 (Mathew McBride)   
  - RISC-V: Add modules to virtual kernel memory layout dump (Xianting Tian)   
  - RISC-V: Fixup schedule out issue in machine_crash_shutdown() (Xianting Tian)   
  - RISC-V: Fixup get incorrect user mode PC for kernel mode regs (Xianting Tian)   
  - RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context (Xianting Tian)   
  - dt-bindings: riscv: fix SiFive l2-cache's cache-sets (Conor Dooley)   
  - riscv:uprobe fix SR_SPIE set/clear handling (Yipeng Zou)   
  - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode (Helge Deller)   
  - parisc: Check the return value of ioremap() in lba_driver_probe() (William Dean)   
  - parisc: Drop pa_swapper_pg_lock spinlock (Helge Deller)   
  - parisc: Fix device names in /proc/iomem (Helge Deller)   
  - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Jiachen Zhang)   
  - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (John Allen)   
  - fix short copy handling in copy_mc_pipe_to_iter() (Al Viro)   
  - usbnet: Fix linkwatch use-after-free on disconnect (Lukas Wunner)   
  - fbcon: Fix accelerated fbdev scrolling while logo is still shown (Helge Deller)   
  - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Helge Deller)   
  - thermal: sysfs: Fix cooling_device_stats_setup() error code path (Rafael J. Wysocki)   
  - fs: Add missing umask strip in vfs_tmpfile (Yang Xu)   
  - vfs: Check the truncate maximum size in inode_newsize_ok() (David Howells)   
  - tty: vt: initialize unicode screen buffer (Tetsuo Handa)   
  - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED (Bedant Patnaik)   
  - ALSA: hda/realtek: Add quirk for another Asus K42JZ model (Meng Tang)   
  - ALSA: hda/cirrus - support for iMac 12,1 model (Allen Ballway)   
  - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (Meng Tang)   
  - riscv: set default pm_power_off to NULL (Dimitri John Ledkov)   
  - KVM: x86: revalidate steal time cache if MSR value changes (Paolo Bonzini)   
  - KVM: x86: do not report preemption if the steal time cache is stale (Paolo Bonzini)   
  - KVM: x86: Tag kvm_mmu_x86_module_init() with __init (Sean Christopherson)   
  - KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (Vitaly Kuznetsov)   
  - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (Sean Christopherson)   
  - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (Sean Christopherson)   
  - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 (Sean Christopherson)   
  - KVM: nVMX: Account for KVM reserved CR4 bits in consistency checks (Sean Christopherson)   
  - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value (Sean Christopherson)   
  - KVM: x86: Split kvm_is_valid_cr4() and export only the non-vendor bits (Sean Christopherson)   
  - KVM: s390: pv: don't present the ecall interrupt twice (Nico Boehr)   
  - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (Sean Christopherson)   
  - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (Sean Christopherson)   
  - HID: wacom: Don't register pad_input for touch switch (Ping Cheng)   
  - HID: wacom: Only report rotation for art pen (Ping Cheng)   
  - HID: hid-input: add Surface Go battery quirk (Maximilian Luz)   
  - lockd: detect and reject lock arguments that overflow (Jeff Layton)   
  - add barriers to buffer_uptodate and set_buffer_uptodate (Mikulas Patocka)   
  - wifi: mac80211_hwsim: use 32-bit skb cookie (Johannes Berg)   
  - wifi: mac80211_hwsim: add back erroneously removed cast (Johannes Berg)   
  - wifi: mac80211_hwsim: fix race condition in pending packet (Jeongik Cha)   
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx (Ivan Hasenkampf)   
  - ALSA: hda/realtek: Add quirk for Clevo NV45PZ (Tim Crawford)   
  - ALSA: bcd2000: Fix a UAF bug on the error path of probing (Zheyu Ma)   
  - ALSA: usb-audio: Add quirk for Behringer UMC202HD (Takashi Iwai)   
  - nfsd: eliminate the NFSD_FILE_BREAK_* flags (Jeff Layton)   
  - NFSD: Clean up the show_nf_flags() macro (Chuck Lever)   
  - pNFS/flexfiles: Report RDMA connection errors to the server (Trond Myklebust)   
  - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" (Nilesh Javali)   
  - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" (Trond Myklebust)   
  - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)   
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)   
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Dave Hansen)  [Orabug: 34671450]  
  - uek-rpm: config-x86_64*: enable more LPSS bus options for hardware support (Todd Vierling)  [Orabug: 34576146]  
  - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34644238]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.3.el9uek]
changelog:
  - Revert "Makefile: link with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)   
  - Revert "x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.4.el9uek]
changelog:
  - xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer)  [Orabug: 34512197]  
  - net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578048]  
  - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662659]  
  - RDMA/cma: Use output interface for net_dev check (Håkon Bugge)  [Orabug: 34694979]  
  - crypto: qat - add support for 401xx devices (Giovanni Cabiddu)  [Orabug: 34686738]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.el9uek]
changelog:
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34595591]  
  - Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE" (John Donnelly)  [Orabug: 34678989]  
  - RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684321]  
  - fs: remove no_llseek (Jason A. Donenfeld)  [Orabug: 34705082]  
  - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]  
  - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]  
  - fs: do not compare against ->llseek (Jason A. Donenfeld)  [Orabug: 34705082]  
  - fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld)  [Orabug: 34705082]  
  - hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710681]  
  - hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710681]  
  - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34716070]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.2.el9uek]
changelog:
  - Revert "sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle" (Samasth Norway Ananda)  [Orabug: 34783367]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.70.1.el9uek]
changelog:
  - net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34500806]  
  - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34488375]  
  - iommu/vt-d: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724809]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.76.2.el9uek]
changelog:
  - LTS version: v5.15.76 (Jack Vogel)   
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins)   
  - mmc: core: Add SD card quirk for broken discard (Avri Altman)   
  - Makefile.debug: re-enable debug info for .S files (Nick Desaulniers)   
  - x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB (Nathan Chancellor)   
  - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)   
  - perf: Skip and warn on unknown format 'configN' attrs (Rob Herring)   
  - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction (Prathamesh Shete)   
  - tracing: Do not free snapshot if tracer is on cmdline (Steven Rostedt (Google))   
  - tracing: Simplify conditional compilation code in tracing_set_tracer() (sunliming)   
  - ksmbd: fix incorrect handling of iterate_dir (Namjae Jeon)   
  - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small (Namjae Jeon)   
  - arm64: mte: move register initialization to C (Peter Collingbourne)   
  - fs: dlm: fix invalid derefence of sb_lvbptr (Alexander Aring)   
  - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)   
  - iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() (Charlotte Tan)   
  - net: phy: dp83822: disable MDI crossover status change interrupt (Felix Riemann)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)   
  - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)   
  - wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (Yang Yingliang)   
  - sfc: include vport_id in filter spec hash and equal() (Pieter Jansen van Vuuren)   
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao)   
  - net: sched: delete duplicate cleanup of backlog and qlen (Zhengchao Shao)   
  - net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao)   
  - nvmet: fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)   
  - nvme-hwmon: kmalloc the NVME SMART log buffer (Serge Semin)   
  - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (Christoph Hellwig)   
  - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements (Pablo Neira Ayuso)   
  - ionic: catch NULL pointer issue on reconfig (Brett Creeley)   
  - net: hsr: avoid possible NULL deref in skb_clone() (Eric Dumazet)   
  - dm: remove unnecessary assignment statement in alloc_dev() (Genjian Zhang)   
  - cifs: Fix xid leak in cifs_ses_add_channel() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_flock() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_copy_file_range() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_create() (Zhang Xiaoxu)   
  - udp: Update reuse->has_conns under reuseport_lock. (Kuniyuki Iwashima)   
  - scsi: lpfc: Fix memory leak in lpfc_create_port() (Rafael Mendonca)   
  - net: phylink: add mac_managed_pm in phylink_config structure (Shenwei Wang)   
  - net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam)   
  - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)   
  - sfc: Change VF mac via PF as first preference if available. (Jonathan Cooper)   
  - HID: magicmouse: Do not set BTN_MOUSE on double report (José Expósito)   
  - i40e: Fix DMA mappings leak (Jan Sokolowski)   
  - tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko)   
  - tipc: Fix recognition of trial period (Mark Tomlinson)   
  - ACPI: extlog: Handle multiple records (Tony Luck)   
  - drm/vc4: Add module dependency on hdmi-codec (Maxime Ripard)   
  - btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana)   
  - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)   
  - x86/topology: Fix duplicated core ID within a package (Zhang Rui)   
  - x86/topology: Fix multiple packages shown on a single-package system (Zhang Rui)   
  - media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue)   
  - media: mceusb: set timeout to at least timeout provided (Sean Young)   
  - media: ipu3-imgu: Fix NULL pointer dereference in active selection access (Sakari Ailus)   
  - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)   
  - kvm: Add support for arch compat vm ioctls (Alexander Graf)   
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel)   
  - drm/amdgpu: fix sdma doorbell init ordering on APUs (Alex Deucher)   
  - cpufreq: qcom: fix memory leak in error path (Fabien Parent)   
  - x86/resctrl: Fix min_cbm_bits for AMD (Babu Moger)   
  - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)   
  - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)   
  - hwmon/coretemp: Handle large core ID value (Zhang Rui)   
  - x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)   
  - i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (Bryan O'Donoghue)   
  - cpufreq: qcom: fix writes in read-only memory region (Fabien Parent)   
  - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (GONG, Ruiqi)   
  - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)   
  - ocfs2: clear dinode links count in case of error (Joseph Qi)   
  - btrfs: enhance unsupported compat RO flags handling (Qu Wenruo)   
  - perf/x86/intel/pt: Relax address filter validation (Adrian Hunter)   
  - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)   
  - usb: gadget: uvc: improve sg exit condition (Michael Grzeschik)   
  - usb: gadget: uvc: giveback vb2 buffer on req complete (Michael Grzeschik)   
  - usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer (Michael Grzeschik)   
  - usb: gadget: uvc: use on returned header len in video_encode_isoc_sg (Michael Grzeschik)   
  - usb: gadget: uvc: consistently use define for headerlen (Michael Grzeschik)   
  - arm64/mm: Consolidate TCR_EL1 fields (Anshuman Khandual)   
  - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - LTS version: v5.15.75 (Jack Vogel)   
  - io-wq: Fix memory leak in worker creation (Rafael Mendonca)   
  - gcov: support GCC 12.1 and newer compilers (Martin Liska)   
  - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)   
  - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee 李修賢)   
  - lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 (Nathan Chancellor)   
  - Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT (Masahiro Yamada)   
  - Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 (Masahiro Yamada)   
  - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (Nathan Chancellor)   
  - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa)   
  - Revert "net/ieee802154: reject zero-sized raw_sendmsg()" (Alexander Aring)   
  - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (Randy Dunlap)   
  - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (Yu Kuai)   
  - ALSA: usb-audio: Fix last interface check for registration (Takashi Iwai)   
  - net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring)   
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin)   
  - io_uring/rw: fix unexpected link breakage (Pavel Begunkov)   
  - io_uring/rw: fix error'ed retry return values (Pavel Begunkov)   
  - io_uring/rw: fix short rw error handling (Pavel Begunkov)   
  - io_uring: correct pinned_vm accounting (Pavel Begunkov)   
  - io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)   
  - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter)   
  - clk: bcm2835: Round UART input clock up (Ivan T. Ivanov)   
  - clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard)   
  - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu)   
  - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash)   
  - nvme: copy firmware_rev on each init (Keith Busch)   
  - ext2: Use kvmalloc() for group descriptor array (Jan Kara)   
  - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (Arun Easi)   
  - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang)   
  - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (Xiaoke Wang)   
  - Revert "usb: storage: Add quirk for Samsung Fit flash" (sunghwan jung)   
  - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (Piyush Mehta)   
  - arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (Alexander Stein)   
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)   
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie)   
  - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe)   
  - eventfd: guard wake_up in eventfd fs calls as well (Dylan Yudaken)   
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)   
  - soundwire: intel: fix error handling on dai registration issues (Pierre-Louis Bossart)   
  - soundwire: cadence: Don't overwrite msg->buf during write commands (Richard Fitzgerald)   
  - bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li)   
  - ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin)   
  - blk-throttle: prevent overflow while calculating wait time (Yu Kuai)   
  - staging: vt6655: fix potential memory leak (Nam Cao)   
  - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun)   
  - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (Yicong Yang)   
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida)   
  - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren)   
  - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (Vaishnav Achath)   
  - usb: host: xhci-plat: suspend/resume clks for brcm (Justin Chen)   
  - usb: host: xhci-plat: suspend and resume clocks (Justin Chen)   
  - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang)   
  - media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc (Hangyu Hua)   
  - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma)   
  - clk: zynqmp: Fix stack-out-of-bounds in strncpy` (Ian Nam)   
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (Alex Sverdlin)   
  - btrfs: don't print information about space cache or tree every remount (Maciej S. Szmigiero)   
  - btrfs: scrub: try to fix super block errors (Qu Wenruo)   
  - btrfs: dump extra info if one free space cache has more bitmaps than it should (Qu Wenruo)   
  - arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply (Sebastian Krzyszkowiak)   
  - kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (Mark Brown)   
  - ARM: dts: imx6sx: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sll: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6q: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen)   
  - drm/amd/display: Remove interface for periodic interrupt 1 (Aric Cyr)   
  - drm/dp: Don't rewrite link config when setting phy test pattern (Khaled Almahallawy)   
  - mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan)   
  - drm/meson: explicitly remove aggregate driver at module unload time (Adrián Larumbe)   
  - drm/meson: reorder driver deinit sequence to fix use-after-free bug (Adrián Larumbe)   
  - drm/amdgpu: fix initial connector audio value (hongao)   
  - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (Jairaj Arava)   
  - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede)   
  - platform/chrome: cros_ec: Notify the PM of wake events during resume (Jameson Thies)   
  - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk)   
  - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski)   
  - ALSA: usb-audio: Register card at the last interface (Takashi Iwai)   
  - drm: bridge: dw_hdmi: only trigger hotplug event on link change (Lucas Stach)   
  - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (Vivek Kasireddy)   
  - drm/amd/display: fix overflow on MIN_I64 definition (David Gow)   
  - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (Zeng Jingxiang)   
  - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook (Liviu Dudau)   
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)   
  - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)   
  - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie)   
  - r8152: Rate limit overflow messages (Andrew Gaul)   
  - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz)   
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian)   
  - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (Jason A. Donenfeld)   
  - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle)   
  - wifi: rt2x00: set SoC wmac clock register (Daniel Golle)   
  - wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle)   
  - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle)   
  - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle)   
  - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan)   
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz)   
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa)   
  - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value (Sean Wang)   
  - regulator: core: Prevent integer underflow (Patrick Rudolph)   
  - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Kiran K)   
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin)   
  - iavf: Fix race between iavf_close and iavf_reset_task (Michal Jaron)   
  - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum)   
  - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (Mika Westerberg)   
  - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa)   
  - x86/mce: Retrieve poison range from hardware (Jane Chu)   
  - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet)   
  - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick)   
  - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick)   
  - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (Ravi Gunasekaran)   
  - ice: set tx_tstamps when creating new Tx rings via ethtool (Jacob Keller)   
  - bpftool: Clear errno after libcap's checks (Quentin Monnet)   
  - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng)   
  - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker)   
  - x86/entry: Work around Clang __bdos() bug (Kees Cook)   
  - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (Mario Limonciello)   
  - ARM: decompressor: Include .data.rel.ro.local (Kees Cook)   
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada)   
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin)   
  - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook)   
  - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode (Doug Smythies)   
  - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address (Hans de Goede)   
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander)   
  - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() (Zqiang)   
  - rcu: Back off upon fill_page_cache_func() allocation failure (Michal Hocko)   
  - rcu: Avoid triggering strict-GP irq-work when RCU is idle (Zqiang)   
  - fs: dlm: fix race in lowcomms (Alexander Aring)   
  - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle (Stefan Berger)   
  - f2fs: fix to account FS_CP_DATA_IO correctly (Chao Yu)   
  - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong)   
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue)   
  - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Vincent Knecht)   
  - crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter)   
  - crypto: marvell/octeontx - prevent integer overflows (Dan Carpenter)   
  - kbuild: rpm-pkg: fix breakage when V=1 is used (Janis Schoetterl-Glausch)   
  - kbuild: remove the target in signal traps when interrupted (Masahiro Yamada)   
  - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (Nico Pache)   
  - tracing: kprobe: Make gen test module work in arm and riscv (Yipeng Zou)   
  - tracing: kprobe: Fix kprobe event gen test module on exit (Yipeng Zou)   
  - iommu/iova: Fix module config properly (Robin Murphy)   
  - cifs: return correct error in ->calc_signature() (Enzo Matsumiya)   
  - crypto: qat - fix DMA transfer direction (Damian Muszynski)   
  - crypto: inside-secure - Change swab to swab32 (Peter Harliman Liem)   
  - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko)   
  - crypto: akcipher - default implementation for setting a private key (Ignat Korchagin)   
  - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter)   
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long)   
  - crypto: hisilicon/qm - fix missing put dfx access (Weili Qian)   
  - crypto: qat - fix default value of WDT timer (Lucas Segarra Fernandez)   
  - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() (Kshitiz Varshney)   
  - cgroup: Honor caller's cgroup NS when resolving path (Michal Koutný)   
  - hwrng: arm-smccc-trng - fix NO_ENTROPY handling (James Cowgill)   
  - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Ye Weihua)   
  - crypto: sahara - don't sleep when in softirq (Zhengchao Shao)   
  - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL (Haren Myneni)   
  - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Li Huafei)   
  - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohár)   
  - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin)   
  - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov)   
  - powerpc: Fix fallocate and fadvise64_64 compat parameter combination (Rohan McLure)   
  - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun)   
  - powerpc/pci_dn: Add missing of_node_put() (Liang He)   
  - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He)   
  - powerpc/math_emu/efp: Include module.h (Nathan Chancellor)   
  - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig (Michael Ellerman)   
  - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang)   
  - mailbox: mpfs: account for mbox offsets while sending (Conor Dooley)   
  - mailbox: mpfs: fix handling of the reg property (Conor Dooley)   
  - clk: ast2600: BCLK comes from EPLL (Joel Stanley)   
  - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin)   
  - clk: imx: scu: fix memleak on platform_device_add() fails (Lin Yujun)   
  - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren)   
  - clk: baikal-t1: Add SATA internal ref clock buffer (Serge Semin)   
  - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (Serge Semin)   
  - clk: baikal-t1: Fix invalid xGMAC PTP clock divider (Serge Semin)   
  - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (Serge Semin)   
  - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins)   
  - usb: mtu3: fix failed runtime suspend in host only mode (Chunfeng Yun)   
  - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang)   
  - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai)   
  - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang)   
  - mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter)   
  - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET)   
  - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET)   
  - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET)   
  - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET)   
  - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang)   
  - RDMA/rxe: Fix resize_finish() in rxe_queue.c (Bob Pearson)   
  - clk: qcom: gcc-sm6115: Override default Alpha PLL regs (Adam Skladowski)   
  - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (Robert Marko)   
  - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (Mike Christie)   
  - scsi: iscsi: Run recv path from workqueue (Mike Christie)   
  - scsi: iscsi: Add recv workqueue helpers (Mike Christie)   
  - scsi: iscsi: Rename iscsi_conn_queue_work() (Mike Christie)   
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou)   
  - serial: 8250: Fix restoring termios speed after suspend (Pali Rohár)   
  - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli)   
  - slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON (Krzysztof Kozlowski)   
  - staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao)   
  - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu)   
  - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun)   
  - serial: 8250: Toggle IER bits on only after irq has been set up (Ilpo Järvinen)   
  - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter)   
  - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe)   
  - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello)   
  - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (Daisuke Matsuda)   
  - RDMA/cm: Use SLID in the work completion as the DLID in responder side (Mark Zhang)   
  - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (David Sloan)   
  - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe)   
  - md: Replace snprintf with scnprintf (Saurabh Sengar)   
  - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter)   
  - ata: fix ata_id_has_dipm() (Niklas Cassel)   
  - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel)   
  - ata: fix ata_id_has_devslp() (Niklas Cassel)   
  - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel)   
  - RDMA/siw: Fix QP destroy to wait for all references dropped. (Bernard Metzler)   
  - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler)   
  - RDMA/srp: Fix srp_abort() (Bart Van Assche)   
  - RDMA/irdma: Align AE id codes to correct flush code and event (Sindhu-Devale)   
  - mtd: rawnand: fsl_elbc: Fix none ECC mode (Pali Rohár)   
  - mtd: rawnand: intel: Remove undocumented compatible string (Martin Blumenstingl)   
  - mtd: rawnand: intel: Read the chip-select line from the correct OF node (Martin Blumenstingl)   
  - phy: phy-mtk-tphy: fix the phy type setting issue (Chunfeng Yun)   
  - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (Liang He)   
  - mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean)   
  - clk: qcom: sm6115: Select QCOM_GDSC (Dang Huynh)   
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries (Jim Cromie)   
  - dyndbg: let query-modname override actual module name (Jim Cromie)   
  - dyndbg: fix module.dyndbg handling (Jim Cromie)   
  - dyndbg: fix static_branch manipulation (Jim Cromie)   
  - dmaengine: hisilicon: Add multi-thread support for a DMA channel (Jie Hai)   
  - dmaengine: hisilicon: Fix CQ head update (Jie Hai)   
  - dmaengine: hisilicon: Disable channels when unregister hisi_dma (Jie Hai)   
  - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Dan Carpenter)   
  - misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua)   
  - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun)   
  - RDMA/rxe: Fix "kernel NULL pointer dereference" error (Zhu Yanjun)   
  - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin)   
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)   
  - media: uvcvideo: Fix memory leak in uvc_gpio_parse (José Expósito)   
  - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (Xu Qiang)   
  - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta)   
  - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He)   
  - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang)   
  - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin)   
  - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin)   
  - clk: sprd: Hold reference returned by of_get_parent() (Liang He)   
  - clk: berlin: Add of_node_put() for of_get_parent() (Liang He)   
  - clk: qoriq: Hold reference returned by of_get_parent() (Liang He)   
  - clk: oxnas: Hold reference returned by of_get_parent() (Liang He)   
  - clk: meson: Hold reference returned by of_get_parent() (Liang He)   
  - usb: common: debug: Check non-standard control requests (Thinh Nguyen)   
  - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey (Aharon Landau)   
  - iio: magnetometer: yas530: Change data type of hard_offsets to signed (Jakob Hauser)   
  - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron)   
  - iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (Nuno Sá)   
  - iio: inkern: only release the device node when done with it (Nuno Sá)   
  - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea)   
  - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov)   
  - arm64: ftrace: fix module PLTs with mcount (Mark Rutland)   
  - ext4: don't run ext4lazyinit for read-only filesystems (Josh Triplett)   
  - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven)   
  - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov)   
  - arm64: dts: ti: k3-j7200: fix main pinmux range (Matt Ranostay)   
  - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (Dmitry Osipenko)   
  - ia64: export memory_add_physaddr_to_nid to fix cxl build error (Randy Dunlap)   
  - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle)   
  - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle)   
  - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behún)   
  - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (Lucas Stach)   
  - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He)   
  - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He)   
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein)   
  - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (Liang He)   
  - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He)   
  - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He)   
  - ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai)   
  - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong)   
  - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong)   
  - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong)   
  - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET)   
  - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape)   
  - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (Christophe JAILLET)   
  - ASoC: codecs: tx-macro: fix kcontrol put (Srinivas Kandagatla)   
  - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (Rafael Mendonca)   
  - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (Kuogee Hsieh)   
  - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov)   
  - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He)   
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET)   
  - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (Rafael Mendonca)   
  - drm/omap: dss: Fix refcount leak bugs (Liang He)   
  - drm/bochs: fix blanking (Gerd Hoffmann)   
  - ALSA: hda: beep: Simplify keep-power-at-enable behavior (Takashi Iwai)   
  - ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang)   
  - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma)   
  - drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() (Yang Yingliang)   
  - platform/chrome: cros_ec_typec: Correct alt mode index (Prashant Malani)   
  - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede)   
  - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede)   
  - ASoC: tas2764: Fix mute/unmute (Martin Povišer)   
  - ASoC: tas2764: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2764: Allow mono streams (Martin Povišer)   
  - platform/chrome: fix memory corruption in ioctl (Dan Carpenter)   
  - platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov)   
  - ASoC: mt6359: fix tests for platform_get_irq() failure (Dan Carpenter)   
  - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() (Liang He)   
  - drm/dp_mst: fix drm_dp_dpcd_read return value checks (Simon Ser)   
  - drm/bridge: parade-ps8640: Fix regulator supply order (Chen-Yu Tsai)   
  - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (Dmitry Osipenko)   
  - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard)   
  - drm/bridge: Avoid uninitialized variable warning (Dan Carpenter)   
  - drm: bridge: adv7511: unregister cec i2c device after cec adapter (Alvin Šipraga)   
  - drm: bridge: adv7511: fix CEC power down control register offset (Alvin Šipraga)   
  - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle))   
  - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet)   
  - net/ieee802154: reject zero-sized raw_sendmsg() (Tetsuo Handa)   
  - net: wwan: iosm: Call mutex_init before locking it (Maxim Mikityanskiy)   
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie)   
  - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller (Oleksandr Shamray)   
  - spi: Ensure that sg_table won't be used after being freed (Marek Szyprowski)   
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell)   
  - sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long)   
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)   
  - eth: alx: take rtnl_lock on resume (Jakub Kicinski)   
  - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa)   
  - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM (Bitterblue Smith)   
  - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch)   
  - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter)   
  - xfrm: Reinject transport-mode packets through workqueue (Liu Jian)   
  - Bluetooth: hci_core: Fix not handling link timeouts propertly (Luiz Augusto von Dentz)   
  - i2c: mlxbf: support lock mechanism (Asmaa Mnebhi)   
  - skmsg: Schedule psock work if the cached skb exists on the psock (Liu Jian)   
  - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong)   
  - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe (Zhang Qilong)   
  - x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype (Luciano Leão)   
  - x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook)   
  - wifi: ath11k: fix number of VHT beamformee spatial streams (Jesus Fernandez Manzano)   
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart)   
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart)   
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Tetsuo Handa)   
  - bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones)   
  - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun)   
  - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (Luiz Augusto von Dentz)   
  - wifi: mt76: mt7915: do not check state before configuring implicit beamform (Howard Hsu)   
  - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload (Lorenzo Bianconi)   
  - wifi: mt76: sdio: fix transmitting packet hangs (YN Chen)   
  - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask (Bitterblue Smith)   
  - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith)   
  - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer)   
  - spi: meson-spicc: do not rely on busy flag in pow2 clk ops (Neil Armstrong)   
  - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang)   
  - selftests/xsk: Avoid use-after-free on ctx (Ian Rogers)   
  - wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() (Yang Yingliang)   
  - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter)   
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (Sean Wang)   
  - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy (Hou Tao)   
  - bpf: Propagate error from htab_lock_bucket() to userspace (Hou Tao)   
  - bpf: Disable preemption when increasing per-cpu map_locked (Hou Tao)   
  - xsk: Fix backpressure mechanism on Tx (Maciej Fijalkowski)   
  - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu)   
  - spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)   
  - bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai)   
  - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan)   
  - bpf: Fix reference state management for synchronous callbacks (Kumar Kartikeya Dwivedi)   
  - leds: lm3601x: Don't use mutex after it was destroyed (Uwe Kleine-König)   
  - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - NFSD: Fix handling of oversized NFSv4 COMPOUND requests (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Chuck Lever)   
  - nfsd: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - objtool: Preserve special st_shndx indexes in elf_update_symbol (Sami Tolvanen)   
  - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng)   
  - ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() (Wang Kefeng)   
  - MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (Lin Yujun)   
  - MIPS: SGI-IP27: Free some unused memory (Christophe JAILLET)   
  - sh: machvec: Use char[] for section boundaries (Kees Cook)   
  - thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() (Xuewen Yan)   
  - ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers (Christian Brauner)   
  - userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek)   
  - ima: fix blocking of security.ima xattrs of unsupported algorithms (Mimi Zohar)   
  - selinux: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - smb3: must initialize two ACL struct fields to zero (Steve French)   
  - drm/amd/display: Fix vblank refcount in vrr transition (Yunxiang Li)   
  - drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ MC CCS modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ RC CCS modifier (Ville Syrjälä)   
  - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie)   
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul)   
  - staging: greybus: audio_helper: remove unused and wrong debugfs usage (Greg Kroah-Hartman)   
  - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson)   
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 (Sean Christopherson)   
  - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" (Sean Christopherson)   
  - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj)   
  - blk-wbt: call rq_qos_add() after wb_normal is initialized (Yu Kuai)   
  - media: cedrus: Fix endless loop in cedrus_h265_skip_bits() (Dmitry Osipenko)   
  - media: cedrus: Set the platform driver data earlier (Dmitry Osipenko)   
  - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel)   
  - thunderbolt: Explicitly enable lane adapter hotplug events at startup (Mario Limonciello)   
  - tracing: Fix reading strings from synthetic events (Steven Rostedt (Google))   
  - tracing: Add "(fault)" name injection to kernel probes (Steven Rostedt (Google))   
  - tracing: Move duplicate code of trace_kprobe/eprobe.c into header (Steven Rostedt (Google))   
  - tracing: Add ioctl() to force ring buffer waiters to wake up (Steven Rostedt (Google))   
  - tracing: Wake up waiters when tracing is disabled (Steven Rostedt (Google))   
  - tracing: Wake up ring buffer waiters on closing of the file (Steven Rostedt (Google))   
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long)   
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google))   
  - ring-buffer: Add ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google))   
  - ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google))   
  - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google))   
  - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian)   
  - livepatch: fix race between fork and KLP transition (Rik van Riel)   
  - ext4: update 'state->fc_regions_size' after successful memory allocation (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_regions() (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (Ye Bin)   
  - ext4: fix miss release buffer head in ext4_fc_write_inode (Ye Bin)   
  - ext4: fix dir corruption when ext4_dx_add_entry() fails (Zhihao Cheng)   
  - ext4: place buffer head allocation before handle start (Jinke Han)   
  - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (Zhang Yi)   
  - ext4: don't increase iversion counter for ea_inodes (Lukas Czerner)   
  - ext4: fix check for block being out of directory size (Jan Kara)   {CVE-2022-1184} 
  - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran)   
  - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li)   
  - ext4: avoid crash when inline data creation follows DIO write (Jan Kara)   
  - jbd2: add miss release buffer head in fc_do_one_pass() (Ye Bin)   
  - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (Ye Bin)   
  - jbd2: fix potential buffer head reference count leak (Ye Bin)   
  - jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko)   
  - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero (Kees Cook)   
  - hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO (Kees Cook)   
  - f2fs: fix to do sanity check on summary info (Chao Yu)   
  - f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu)   
  - f2fs: increase the limit for reserve_root (Jaegeuk Kim)   
  - f2fs: flush pending checkpoints when freezing super (Jaegeuk Kim)   
  - f2fs: complete checkpoints during remount (Jaegeuk Kim)   
  - btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer (Tetsuo Handa)   
  - btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana)   
  - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (Lukas Czerner)   
  - ksmbd: Fix user namespace mapping (Mickaël Salaün)   
  - ksmbd: Fix wrong return value and message length check in smb2_ioctl() (Zhang Xiaoxu)   
  - ksmbd: fix endless loop when encryption for response fails (Namjae Jeon)   
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim)   
  - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback (Quentin Schulz)   
  - gpio: rockchip: request GPIO mux to pinctrl when setting direction (Quentin Schulz)   
  - scsi: qedf: Populate sysfs attributes for vport (Saurav Kashyap)   
  - slimbus: qcom-ngd: cleanup in probe error path (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure (Krzysztof Kozlowski)   
  - powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohár)   
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui)   
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Chuck Lever)   
  - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Let drivers request full 16550A feature probing (Maciej W. Rozycki)   
  - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki)   
  - xen/gntdev: Accommodate VMA splitting (M. Vefa Bicakci)   
  - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci)   
  - mm/mmap: undo ->mmap() when arch_validate_flags() fails (Carlos Llamas)   
  - mm/damon: validate if the pmd entry is present before accessing (Baolin Wang)   
  - arm64: errata: Add Cortex-A55 to the repeat tlbi list (James Morse)   
  - drm/udl: Restore display mode on resume (Takashi Iwai)   
  - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (Dmitry Osipenko)   
  - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error (Dmitry Osipenko)   
  - drm/virtio: Check whether transferred 2D BO is shmem (Dmitry Osipenko)   
  - dmaengine: mxs: use platform_driver_register (Dario Binacchi)   
  - Revert "drm/amdgpu: use dirty framebuffer helper" (Hamza Mahfooz)   
  - nvme-pci: set min_align_mask before calculating max_hw_sectors (Rishabh Bhatnagar)   
  - nvme-multipath: fix possible hang in live ns resize with ANA access (Sagi Grimberg)   
  - nvmem: core: Fix memleak in nvmem_register() (Gaosheng Cui)   
  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - riscv: Pass -mno-relax only on lld < 15.0.0 (Fangrui Song)   
  - riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb (Wenting Zhang)   
  - riscv: Make VM_WRITE imply VM_READ (Andrew Bresticker)   
  - riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker)   
  - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller)   
  - RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki)   
  - riscv: topology: fix default topology reporting (Conor Dooley)   
  - arm64: topology: move store_cpu_topology() to shared code (Conor Dooley)   
  - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij)   
  - net: thunderbolt: Enable DMA paths only after rings are enabled (Mika Westerberg)   
  - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API (Liang He)   
  - ASoC: wcd934x: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (Patryk Duda)   
  - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng)   
  - HID: multitouch: Add memory barriers (Andri Yngvason)   
  - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring)   
  - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring)   
  - i2c: designware: Fix handling of real but unexpected device interrupts (Jarkko Nikula)   
  - mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen)   
  - can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula)   
  - can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - xhci: dbc: Fix memory leak in xhci_alloc_dbc() (Rafael Mendonca)   
  - iio: pressure: dps310: Reset chip after timeout (Eddie James)   
  - iio: pressure: dps310: Refactor startup procedure (Eddie James)   
  - iio: adc: ad7923: fix channel readings for some variants (Nuno Sá)   
  - iio: ltc2497: Fix reading conversion results (Uwe Kleine-König)   
  - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich)   
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu)   
  - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg)   
  - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli)   
  - io_uring/net: don't update msg_name if not provided (Pavel Begunkov)   
  - mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus)   
  - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal)   
  - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Correct pin configs for ASUS G533Z (Luke D. Jones)   
  - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (Callum Osmotherly)   
  - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai)   
  - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai)   
  - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai)   
  - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai)   
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Sasha Levin)   
  - LTS version: v5.15.74 (Jack Vogel)   
  - wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg)   
  - mac80211: fix memory leaks with element parsing (Johannes Berg)   
  - mac80211: always allocate struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mlme: find auth challenge directly (Johannes Berg)   
  - mac80211: move CRC into struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mesh: clean up rx_bcn_presp API (Johannes Berg)   
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (Shunsuke Mie)   
  - misc: pci_endpoint_test: Aggregate params checking for xfer (Shunsuke Mie)   
  - Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman)   
  - Input: xpad - add supported devices as contributed on github (Pavel Rojtberg)   
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON (Johannes Berg)   
  - wifi: mac80211: fix crash in beacon protection for P2P-device (Johannes Berg)   
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg)   
  - wifi: cfg80211: avoid nontransmitted BSS list corruption (Johannes Berg)   
  - wifi: cfg80211: fix BSS refcounting bugs (Johannes Berg)   
  - wifi: cfg80211: ensure length byte is present before access (Johannes Berg)   
  - wifi: cfg80211/mac80211: reject bad MBSSID elements (Johannes Berg)   
  - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (Johannes Berg)   
  - Revert "crypto: qat - reduce size of mapped region" (Giovanni Cabiddu)   
  - Revert "powerpc/rtas: Implement reentrant rtas call" (Nathan Lynch)   
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)   
  - efi: Correct Macmini DMI match in uefi cert quirk (Orlando Chamberlain)   
  - ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai)   
  - random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld)   
  - random: restore O_NONBLOCK support (Jason A. Donenfeld)   
  - ceph: don't truncate file in atomic_open (Hu Weiwen)   
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi)   
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi)   
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi)   
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi)   
  - LTS version: v5.15.73 (Jack Vogel)   
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" (Sasha Levin)   
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski)   
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold)   
  - usb: mon: make mmapped memory read only (Tadeusz Struk)   
  - net/mlx5: Disable irq when locking lag_lock (Vlad Buslov)   
  - wifi: cfg80211: fix MCS divisor value (Tamizh Chelvam Raja)   
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all() (Naoya Horiguchi)   
  - mm/huge_memory: minor cleanup for split_huge_pages_all (Miaohe Lin)   
  - perf parse-events: Identify broken modifiers (Ian Rogers)   
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris)   
  - mmc: core: Replace with already defined values for readability (ChanWoo Lee)   
  - drm/amd/display: skip audio setup when audio stream is enabled (zhikzhai)   
  - drm/amd/display: update gamut remap if plane has changed (Hugo Hu)   
  - drm/amd/display: Assume an LTTPR is always present on fixed_vs links (Michael Strauss)   
  - drm/amd/display: Fix double cursor on non-video RGB MPO (Leo Li)   
  - net: atlantic: fix potential memory leak in aq_ndev_close() (Jianglei Nie)   
  - arch: um: Mark the stack non-executable to fix a binutils warning (David Gow)   
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub)   
  - um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub)   
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream (Jaroslav Kysela)   
  - net: marvell: prestera: add support for for Aldrin2 (Oleksandr Mazur)   
  - net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang)   
  - scsi: qedf: Fix a UAF bug in __qedf_probe() (Letu Ren)   
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov)   
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal)   
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal)   
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal)   
  - firmware: arm_scmi: Add SCMI PM driver remove routine (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the sensor domains (Cristian Marussi)   
  - firmware: arm_scmi: Improve checks in the info_get operations (Cristian Marussi)   
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu)   
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush (Yang Shi)   
  - mm: gup: fix the fast GUP race against THP collapse (Yang Shi)   
  - xsk: Inherit need_wakeup flag for shared sockets (Jalal Mostafa)   
  - docs: update mediator information in CoC docs (Shuah Khan)   
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen)   
  - LTS version: v5.15.72 (Jack Vogel)   
  - drm/i915/gem: Really move i915_gem_context.link under ref protection (Chris Wilson)   
  - x86/alternative: Fix race in try_get_desc() (Nadav Amit)   
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Jim Mattson)   
  - clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli)   
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (Han Xu)   
  - fs: split off setxattr_copy and do_setxattr function from setxattr (Stefan Roesch)   
  - vdpa/ifcvf: fix the calculation of queuepair (Angus Chen)   
  - selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen)   
  - net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume() (Lukas Wunner)   
  - net: stmmac: power up/down serdes in stmmac_open/release (Junxiao Chang)   
  - wifi: mac80211: fix regression with non-QoS drivers (Hans de Goede)   
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley)   
  - net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe (Peng Wu)   
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (Rafael Mendonca)   
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init() (Hangyu Hua)   
  - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye)   
  - gpio: mvebu: Fix check for pwm support on non-A8K platforms (Pali Rohár)   
  - Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang)   
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" (Brian Norris)   
  - drm/bridge: lt8912b: fix corrupted image output (Francesco Dolcini)   
  - drm/bridge: lt8912b: set hdmi or dvi mode (Philippe Schenker)   
  - drm/bridge: lt8912b: add vsync hsync (Philippe Schenker)   
  - ASoC: tas2770: Reinit regcache on reset (Martin Povišer)   
  - arm64: dts: qcom: sm8350: fix UFS PHY serdes size (Johan Hovold)   
  - ASoC: imx-card: Fix refcount issue with of_node_put (Shengjiu Wang)   
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland)   
  - soc: sunxi: sram: Fix probe function ordering issues (Samuel Holland)   
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing)   
  - soc: sunxi: sram: Prevent the driver from being unbound (Samuel Holland)   
  - soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland)   
  - ARM: dts: am5748: keep usb4_tm disabled (Romain Naour)   
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support (Richard Zhu)   
  - ARM: dts: am33xx: Fix MMCHS0 dma properties (YuTong Chang)   
  - swiotlb: max mapping size takes min align mask into account (Tianyu Lan)   
  - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (Hans Verkuil)   
  - media: rkvdec: Disable H.264 error detection (Nicolas Dufresne)   
  - media: dvb_vb2: fix possible out of bound access (Hangyu Hua)   
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)   
  - mm: fix madivse_pageout mishandling on non-LRU page (Minchan Kim)   
  - mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple)   
  - mm: fix dereferencing possible ERR_PTR (Binyi Han)   
  - mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi)   
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman)   
  - mmc: hsq: Fix data stomping during mmc recovery (Wenchao Chen)   
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov)   
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (Niklas Cassel)   
  - vduse: prevent uninitialized memory accesses (Maxime Coquelin)   
  - drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV (Bokun Zhang)   
  - drm/i915/gt: Restrict forced preemption to the active context (Chris Wilson)   
  - Revert "firmware: arm_scmi: Add clock management to the SCMI power domain" (Ulf Hansson)   
  - net: mt7531: only do PLL once after the reset (Alexander Couzens)   
  - mm/damon/dbgfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong)   
  - ARM: dts: integrator: Tag PCI host with device_type (Linus Walleij)   
  - x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd (Jarkko Sakkinen)   
  - clk: ingenic-tcu: Properly enable registers before accessing timers (Aidan MacDonald)   
  - can: c_can: don't cache TX messages for C_CAN cores (Marc Kleine-Budde)   
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address (Sebastian Krzyszkowiak)   
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value (Mario Limonciello)   
  - usb: typec: ucsi: Remove incorrect warning (Heikki Krogerus)   
  - uas: ignore UAS for Thinkplus chips (Hongling Zeng)   
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng)   
  - uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng)   
  - cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (Ming Lei)   
  - cgroup: reduce dependency on cgroup_mutex (Shakeel Butt)   
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 (Alexander Sergeyev)   
  - ALSA: hda: Fix Nvidia dp infoframe (Mohan Kumar)   
  - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (Takashi Iwai)   
  - ALSA: hda: Do disconnect jacks at codec unbind (Takashi Iwai)   
  - LTS version: v5.15.71 (Jack Vogel)   
  - ext4: use locality group preallocation for small closed files (Jan Kara)   
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara)   
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara)   
  - ext4: limit the number of retries after discarding preallocations blocks (Theodore Ts'o)   
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques)   
  - ext4: make directory inode spreading reflect flexbg size (Jan Kara)   
  - devdax: Fix soft-reservation memory description (Dan Williams)   
  - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust)   
  - drm/amdgpu: don't register a dirty callback for non-atomic (Alex Deucher)   
  - i2c: mlxbf: Fix frequency calculation (Asmaa Mnebhi)   
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Asmaa Mnebhi)   
  - i2c: mlxbf: incorrect base address passed during io write (Asmaa Mnebhi)   
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible (Uwe Kleine-König)   
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Tetsuo Handa)   
  - fsdax: Fix infinite loop in dax_iomap_rw() (Li Jinlin)   
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (Nathan Huckleberry)   
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() (Nathan Chancellor)   
  - drm/amd/display: Limit user regamma to a valid value (Yao Wang1)   
  - drm/amdgpu: use dirty framebuffer helper (Hamza Mahfooz)   
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards (Guchun Chen)   
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors (Hans de Goede)   
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov)   
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV (Jingwen Chen)   
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland)   
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: Create uart_xmit_advance() (Ilpo Järvinen)   
  - serial: fsl_lpuart: Reset prior to registration (Lukas Wunner)   
  - KVM: x86/mmu: Fold rmap_recycle into rmap_add (David Matlack)   
  - selftests: forwarding: add shebang for sch_red.sh (Hangbin Liu)   
  - bnxt: prevent skb UAF after handing over to PTP worker (Jakub Kicinski)   
  - net: sched: fix possible refcount leak in tc_new_tfilter() (Hangyu Hua)   
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD (Sean Anderson)   
  - bonding: fix NULL deref in bond_rr_gen_slave_id (Jonathan Toppins)   
  - net/smc: Stop the CLC flow if no link to map buffers on (Wen Gu)   
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() (Nícolas F. R. A. Prado)   
  - perf tools: Honor namespace when synthesizing build-ids (Namhyung Kim)   
  - perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter)   
  - perf jit: Include program header in ELF files (Lieven Hey)   
  - perf stat: Fix BPF program section name (Namhyung Kim)   
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition (Marc Kleine-Budde)   
  - net: sh_eth: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - net: ravb: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal)   
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() (Tetsuo Handa)   
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() (Tetsuo Handa)   
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs (Vladimir Oltean)   
  - net/sched: taprio: avoid disabling offload when it was never enabled (Vladimir Oltean)   
  - net: enetc: deny offload of tc-based TSN features on VF interfaces (Vladimir Oltean)   
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features() (Vladimir Oltean)   
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr (Jason A. Donenfeld)   
  - wireguard: ratelimiter: disable timings test by default (Jason A. Donenfeld)   
  - net: ipa: properly limit modem routing table use (Alex Elder)   
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He)   
  - drm/hisilicon: Add depends on MMU (Randy Dunlap)   
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled (Javier Martinez Canillas)   
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet)   
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet)   
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Michal Jaron)   
  - i40e: Fix VF set max MTU size (Michal Jaron)   
  - iavf: Fix set max MTU size with port VLAN and jumbo frames (Michal Jaron)   
  - mlxbf_gige: clear MDIO gateway lock after read (David Thompson)   
  - iavf: Fix bad page state (Norbert Zulinski)   
  - um: fix default console kernel parameter (Christian Lamparter)   
  - MIPS: Loongson32: Fix PHY-mode being left unspecified (Serge Semin)   
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap)   
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format (Heiko Schocher)   
  - net: team: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Share lacpdu_mcast_addr definition (Benjamin Poirier)   
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask() (Sreekanth Reddy)   
  - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (Rafael Mendonca)   
  - net: phy: aquantia: wait for the suspend/resume operations to finish (Ioana Ciornei)   
  - net: core: fix flow symmetric hash (Ludovic Cintrat)   
  - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Lu Wei)   
  - iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley)   
  - ice: Don't double unplug aux on peer initiated reset (Dave Ertman)   
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Pablo Neira Ayuso)   
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)   
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov)   
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam)   
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (Liang He)   
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (zain wang)   
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks (AngeloGioacchino Del Regno)   
  - arm64: dts: rockchip: Fix typo in lisense text for PX30.Core (Jagan Teki)   
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (Brian Norris)   
  - firmware: arm_scmi: Fix the asynchronous reset requests (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - xfs: validate inode fork size against fork format (Dave Chinner)   
  - xfs: fix xfs_ifree() error handling to not leak perag ref (Brian Foster)   
  - xfs: reorder iunlink remove operation in xfs_ifree (Dave Chinner)   
  - vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment (Will Deacon)   
  - arm64: topology: fix possible overflow in amu_fie_setup() (Sergey Shtylyov)   
  - KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (Sean Christopherson)   
  - mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. (Maurizio Lombardi)   
  - mm/slub: fix to return errno if kmalloc() fails (Chao Yu)   
  - net: mana: Add rmb after checking owner bits (Haiyang Zhang)   
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true (Marc Kleine-Budde)   
  - kasan: call kasan_malloc() from __kmalloc_*track_caller() (Peter Collingbourne)   
  - riscv: fix a nasty sigreturn bug... (Al Viro)   
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (Meng Li)   
  - gpio: mockup: Fix potential resource leakage when register a chip (Andy Shevchenko)   
  - gpio: mockup: fix NULL pointer dereference when removing debugfs (Bartosz Golaszewski)   
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation (Felix Fietkau)   
  - efi: libstub: check Shim mode using MokSBStateRT (Ard Biesheuvel)   
  - efi: x86: Wipe setup_data on pure EFI boot (Ard Biesheuvel)   
  - thunderbolt: Add support for Intel Maple Ridge single port controller (Gil Fine)   
  - usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA (William Wu)   
  - media: flexcop-usb: fix endpoint type check (Johan Hovold)   
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana)   
  - btrfs: fix hang during unmount when stopping block group reclaim worker (Filipe Manana)   
  - iommu/vt-d: Check correct capability for sagaw determination (Yi Liu)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Re-arrange quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (huangwenhui)   
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen)   
  - ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar)   
  - ALSA: core: Fix double-free at snd_card_new() (Takashi Iwai)   
  - Revert "ALSA: usb-audio: Split endpoint setups for hw_params and prepare" (Takashi Iwai)   
  - USB: serial: option: add Quectel RM520N (jerry meng)   
  - USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin(殷张成))   
  - USB: core: Fix RST error in hub.c (Alan Stern)   
  - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (Phil Auld)   
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" (Greg Kroah-Hartman)   
  - Revert "usb: add quirks for Lenovo OneLink+ Dock" (Greg Kroah-Hartman)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (Wesley Cheng)   
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Refactor pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Prevent repeat pullup() (Thinh Nguyen)   
  - usb: dwc3: Issue core soft reset before enabling run/stop (Wesley Cheng)   
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (Wesley Cheng)   
  - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables (Larry Finger)   
  - staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179) (Candy Febriyanto)   
  - drm/amdgpu: make sure to init common IP before gmc (Alex Deucher)   
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange (Victor Skvortsov)   
  - bnxt_en: reclaim max resources if sriov enable fails (Kashyap Desai)  [Orabug: 34083583]  
  - eth: bnxt: make ulp_id unsigned to make GCC 12 happy (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: Enable packet timestamping for all RX packets (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Configure ptp filters during bnxt open (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.95 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Initiallize bp->ptp_lock first before using it (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Properly report no pause support on some cards (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: add more error checks to HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: refactor error handling of HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: Handle async event when the PHC is updated in RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Implement .adjtime() for PTP RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Add driver support to use Real Time Counter for PTP (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: PTP: Refactor PTP initialization functions (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.73 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Use page frag RX buffers for better software GRO performance (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: convert to xdp_do_flush (Edwin Peer)  [Orabug: 34083583]  
  - bnxt_en: enable interrupt sampling on 5750X for DIM (Andy Gospodarek)  [Orabug: 34083583]  
  - bnxt_en: Log error report for dropped doorbell (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Add event handler for PAUSE Storm event (Somnath Kotur)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.63 (Michael Chan)  [Orabug: 34083583]  
  - bnxt: use netif_is_rxfh_configured instead of open code (Juhee Kang)  [Orabug: 34083583]  
  - uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716172]  
  - uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734247]  
  - uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734247]  
  - uek-rpm: ol9: disable CONFIG_MISDN and dependent drivers on OL9/UEK7 (Harshit Mogalapalli)  [Orabug: 34734324]


