# changelog

author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.33.1.el9uek]
changelog:
  - net/mlx5: Expose ICM consumption per function (Akiva Goldberger)  [Orabug: 38063374]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Akiva Goldberger)  [Orabug: 38063374]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Akiva Goldberger)  [Orabug: 38063374]
  - mm: memcontrol: remove memcg from LRU on release instead of offline (Harry Yoo)  [Orabug: 38092785]
  - net/rds: tracepoints for rds_conn_kref_get and put (Sharath Srinivasan)  [Orabug: 38118654]
  - net/rds: Add krefs to struct rds_connection (Sharath Srinivasan)  [Orabug: 38118654]
  - net/rds: Add missing switch/break in rds_recv_worker() (Sharath Srinivasan)  [Orabug: 38118666]
  - net/rds: Merge uses of conn->c_destroy_in_prog & RDS_DESTROY_PENDING (Sharath Srinivasan)  [Orabug: 38118675]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.2.el9uek]
changelog:
  - LTS version: v6.12.36 (Jack Vogel)
  - spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao)
  - btrfs: fix use-after-free on inode when scanning root during em shrinking (Sasha Levin)
  - btrfs: zoned: fix extent range end unlock in cow_file_range() (Naohiro Aota)
  - spi: fsl-qspi: use devm function instead of driver remove (Han Xu)
  - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng)
  - drm/amdkfd: Fix instruction hazard in gfx12 trap handler (Jay Cornwall)
  - drm/amdkfd: remove gfx 12 trap handler page size cap (Jonathan Kim)
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Andres Traumann)
  - arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi (Dragan Simic)
  - riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Sasha Levin)
  - btrfs: do regular iput instead of delayed iput during extent map shrinking (Filipe Manana)
  - btrfs: make the extent map shrinker run asynchronously as a work queue job (Filipe Manana)
  - btrfs: skip inodes without loaded extent maps when shrinking extent maps (Filipe Manana)
  - drm/fbdev-dma: Add shadow buffering for deferred I/O (Thomas Zimmermann)
  - drm/msm/dp: account for widebus and yuv420 during mode validation (Sasha Levin)
  - usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY (Sasha Levin)
  - drm/xe: Carve out wopcm portion from the stolen memory (Sasha Levin)
  - iio: dac: ad3552r-common: fix ad3541/2r ranges (Angelo Dureghello)
  - iio: dac: ad3552r: extract common code (no changes in behavior intended) (Angelo Dureghello)
  - iio: dac: ad3552r: changes to use FIELD_PREP (Angelo Dureghello)
  - btrfs: do proper folio cleanup when cow_file_range() failed (Qu Wenruo)
  - net: phy: realtek: add RTL8125D-internal PHY (Heiner Kallweit)
  - net: phy: realtek: merge the drivers for internal NBase-T PHY's (Heiner Kallweit)
  - r8169: add support for RTL8125D (Heiner Kallweit)
  - mm/vma: reset VMA iterator on commit_merge() OOM failure (Lorenzo Stoakes)
  - io_uring/kbuf: flag partial buffer mappings (Jens Axboe)
  - io_uring/net: mark iov as dynamically allocated even for single segments (Jens Axboe)
  - io_uring/net: always use current transfer count for buffer put (Jens Axboe)
  - io_uring/net: only consider msg_inq if larger than 1 (Jens Axboe)
  - io_uring/net: only retry recv bundle for a full transfer (Jens Axboe)
  - io_uring/net: improve recv bundles (Jens Axboe)
  - io_uring/rsrc: don't rely on user vaddr alignment (Pavel Begunkov)
  - io_uring/rsrc: fix folio unpinning (Pavel Begunkov)
  - io_uring: fix potential page leak in io_sqe_buffer_register() (Penglei Jiang)
  - net: libwx: fix Tx L4 checksum (Jiawen Wu)
  - x86/pkeys: Simplify PKRU update in signal frame (Chang S. Bae)
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (Chang S. Bae)
  - media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)
  - drm/amd/display: Fix mpv playback corruption on weston (Alex Hung)
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (Alex Deucher)
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Jesse Zhang)
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Ville Syrjälä)
  - drm/xe: Fix early wedge on GuC load failure (Daniele Ceraolo Spurio)
  - drm/xe: Fix taking invalid lock on wedge (Lucas De Marchi)
  - drm/xe: Fix memset on iomem (Lucas De Marchi)
  - drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung)
  - drm/amdgpu: Add kicker device detection (Frank Min)
  - drm/amd/display: Fix RMCM programming seq errors (Yihan Zhu)
  - drm/xe/guc_submit: add back fix (Matthew Auld)
  - drm/xe/sched: stop re-submitting signalled jobs (Matthew Auld)
  - drm/xe/vm: move rebind_work init earlier (Matthew Auld)
  - drm/amd/display: Correct non-OLED pre_T11_delay. (Zhongwei Zhang)
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (John Olender)
  - drm/amd/display: Add null pointer check for get_first_active_display() (Wentao Liang)
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)
  - drm/amdkfd: Fix race in GWS queue scheduling (Jay Cornwall)
  - drm/msm/gpu: Fix crash when throttling GPU immediately during boot (Stephan Gerhold)
  - drm/udl: Unregister device before cleaning up on disconnect (Thomas Zimmermann)
  - drm/tegra: Fix a possible null pointer dereference (Qiu-ji Chen)
  - drm/tegra: Assign plane type before registration (Thierry Reding)
  - drm/etnaviv: Protect the scheduler's pending list with its lock (Maíra Canal)
  - drm/cirrus-qemu: Fix pitch programming (Thomas Zimmermann)
  - drm/ast: Fix comment on modeset lock (Thomas Zimmermann)
  - scsi: ufs: core: Fix clk scaling to be conditional in reset and restore (anvithdosapati)
  - scsi: megaraid_sas: Fix invalid node index (Chen Yu)
  - HID: wacom: fix kobject reference count leak (Qasim Ijaz)
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)
  - HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)
  - HID: lenovo: Restrict F7/9/11 mode to compact keyboards only (Iusico Maxim)
  - f2fs: fix to zero post-eof page (Chao Yu)
  - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" (David Hildenbrand)
  - maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (Liam R. Howlett)
  - net: libwx: fix the creation of page_pool (Jiawen Wu)
  - spi: spi-cadence-quadspi: Fix pm runtime unbalance (Khairul Anuar Romli)
  - btrfs: update superblock's device bytes_used when dropping chunk (Mark Harmstone)
  - btrfs: fix a race between renames and directory logging (Filipe Manana)
  - dm-raid: fix variable in journal device check (Heinz Mauelshagen)
  - Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frédéric Danis)
  - serial: imx: Restore original RXTL for console to fix data loss (Fabio Estevam)
  - serial: core: restore of_node information in sysfs (Aidan Stewart)
  - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive (Yao Zi)
  - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)
  - x86/traps: Initialize DR6 by writing its architectural reset value (Xin Li (Intel))
  - EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs (Avadhut Naik)
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (David Howells)
  - cifs: Fix the smbd_response slab to allow usercopy (David Howells)
  - smb: client: make use of common smbdirect_socket_parameters (Stefan Metzmacher)
  - smb: smbdirect: introduce smbdirect_socket_parameters (Stefan Metzmacher)
  - smb: client: make use of common smbdirect_socket (Stefan Metzmacher)
  - smb: smbdirect: add smbdirect_socket.h (Stefan Metzmacher)
  - smb: smbdirect: add smbdirect.h with public structures (Stefan Metzmacher)
  - smb: client: make use of common smbdirect_pdu.h (Stefan Metzmacher)
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Stefan Metzmacher)
  - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara)
  - drm/xe: Process deferred GGTT node removals on device unwind (Michal Wajdeczko)
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Jayesh Choudhary)
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Wolfram Sang)
  - drm/i915: fix build error some more (Arnd Bergmann)
  - drm/amd: Adjust output for discovery error handling (Mario Limonciello)
  - drm/amdgpu/discovery: optionally use fw based ip discovery (Alex Deucher)
  - net: selftests: fix TCP packet checksum (Jakub Kicinski)
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Salvatore Bonaccorso)
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima)
  - netlink: specs: tc: replace underscores with dashes in names (Jakub Kicinski)
  - net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)
  - libbpf: Fix possible use-after-free for externs (Adin Scannell)
  - um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)
  - bnxt: properly flush XDP redirect lists (Yan Zhai)
  - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)
  - wifi: mac80211: finish link init before RCU publish (Johannes Berg)
  - wifi: mac80211: Create separate links for VLAN interfaces (Muna Sinada)
  - wifi: mac80211: Add link iteration macro for link data (Muna Sinada)
  - af_unix: Don't set -ECONNRESET for consumed OOB skb. (Kuniyuki Iwashima)
  - wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)
  - ethernet: ionic: Fix DMA mapping tests (Thomas Fourier)
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Yuan Chen)
  - attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee)
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima)
  - atm: clip: prevent NULL deref in clip_push() (Eric Dumazet)
  - HID: wacom: fix crash in wacom_aes_battery_handler() (Thomas Zeitlhofer)
  - drm/xe/display: Add check for alloc_ordered_workqueue() (Haoxiang Li)
  - Revert "riscv: misaligned: fix sleeping function called during misaligned access handling" (Nam Cao)
  - Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" (Nam Cao)
  - lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() (Yu Kuai)
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (David Hildenbrand)
  - s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin)
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Oliver Schramm)
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write (SeongJae Park)
  - smb: client: remove 	 from TP_printk statements (Stefan Metzmacher)
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Niklas Cassel)
  - i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)
  - i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)
  - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima)
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (Karol Wachowski)
  - accel/ivpu: Add debugfs interface for setting HWS priority bands (Karol Wachowski)
  - accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation (Karol Wachowski)
  - accel/ivpu: Make command queue ID allocated on XArray (Karol Wachowski)
  - accel/ivpu: Remove copy engine support (Andrzej Kacprowski)
  - accel/ivpu: Do not fail on cmdq if failed to allocate preemption buffers (Karol Wachowski)
  - PCI: apple: Set only available ports up (Janne Grunau)
  - PCI: apple: Use helper function for_each_child_of_node_scoped() (Zhang Zekun)
  - f2fs: don't over-report free space or inodes in statvfs (Chao Yu)
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Krzysztof Kozlowski)
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Peng Fan)
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev)
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)
  - btrfs: fix qgroup reservation leak on failure to allocate ordered extent (Filipe Manana)
  - btrfs: use unsigned types for constants defined as bit shifts (David Sterba)
  - btrfs: factor out nocow ordered extent and extent map generation into a helper (Qu Wenruo)
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (Joonas Lahtinen)
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Ville Syrjälä)
  - btrfs: handle csum tree error with rescue=ibadroots correctly (Qu Wenruo)
  - ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)
  - scsi: ufs: core: Don't perform UFS clkscaling during host async scan (Ziqi Chen)
  - ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Shuming Fan)
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Mario Limonciello)
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Vijendar Mukunda)
  - ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)
  - riscv: add a data fence for CMODX in the kernel mode (Andy Chiu)
  - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Michael Grzeschik)
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)
  - usb: gadget: f_hid: wake up readers on disable/unbind (Peter Korsgaard)
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Chance Yang)
  - tty: serial: uartlite: register uart driver in init (Jakub Lewalski)
  - usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)
  - misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() (Chenyuan Yang)
  - iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos (Purva Yeshi)
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Michael Grzeschik)
  - coresight: Only check bottom two claim bits (James Clark)
  - 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0 and later devices (Rengarajan S)
  - um: use proper care when taking mmap lock during segfault (Benjamin Berg)
  - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h (Sami Tolvanen)
  - iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)
  - drm/scheduler: signal scheduled fence when kill job (Lin.Cao)
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Philip Yang)
  - bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng)
  - amd/amdkfd: fix a kfd_process ref leak (Yifan Zhang)
  - md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)
  - nvme-tcp: sanitize request list handling (Hannes Reinecke)
  - nvme-tcp: fix I/O stalls on congested sockets (Hannes Reinecke)
  - PCI: imx6: Add workaround for errata ERR051624 (Richard Zhu)
  - PCI: apple: Fix missing OF node reference in apple_pcie_setup_port (Hector Martin)
  - PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane (Wenbin Yao)
  - dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Yi Sun)
  - rust: arm: fix unknown (to Clang) argument '-mno-fdpic' (Rudraksha Gupta)
  - rust: module: place cleanup_module() in .exit.text section (FUJITA Tomonori)
  - ksmbd: provide zero as a unique ID to the Mac client (Namjae Jeon)
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Namjae Jeon)
  - hwmon: (pmbus/max34440) Fix support for max34451 (Alexis Czezar Torreno)
  - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew)
  - cxl/region: Add a dev_err() on missing target list entries (Robert Richter)
  - fuse: fix race between concurrent setattrs from multiple nodes (Guang Yuan Wu)
  - leds: multicolor: Fix intensity setting while SW blinking (Sven Schwermer)
  - dm vdo indexer: don't read request structure after enqueuing (Matthew Sakai)
  - sunrpc: don't immediately retransmit on seqno miss (Nikhil Jha)
  - mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)
  - NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Sagi Grimberg)
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia)
  - NFSv4: Always set NLINK even if the server doesn't support it (Han Young)
  - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode (Pali Rohár)
  - cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohár)
  - cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Pali Rohár)
  - LTS version: v6.12.35 (Jack Vogel)
  - bpftool: Fix cgroup command to only show cgroup bpf programs (Martin KaFai Lau)
  - cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function (Pali Rohár)
  - gpio: mlxbf3: only get IRQ for device instance 0 (David Thompson)
  - perf test: Directory file descriptor leak (Ian Rogers)
  - perf evsel: Missed close() when probing hybrid core PMUs (Ian Rogers)
  - gpio: pca953x: fix wrong error probe return value (Sascha Hauer)
  - RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs (Anup Patel)
  - RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls (Anup Patel)
  - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() (Vitaliy Shevtsov)
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu)
  - perf/core: Fix WARN in perf_cgroup_switch() (Luo Gengkun)
  - perf: Fix cgroup state vs ERROR (Peter Zijlstra)
  - perf: Fix sample vs do_exit() (Peter Zijlstra)
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens)
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Stefan Metzmacher)
  - smb: client: fix first command failure during re-negotiation (zhangjian)
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Claudiu Beznea)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - smb: Log an error when close_all_cached_dirs fails (Paul Aurich)
  - dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties (Akhil R)
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Avadhut Naik)
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet)
  - net: atm: add lec_mutex (Eric Dumazet)
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson)
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima)
  - drm/xe/bmg: Update Wa_16023588340 (Vinay Belgaumkar)
  - drm/xe/gt: Update handling of xe_force_wake_get return (Himal Prasad Ghimiray)
  - drm/xe: Wire up device shutdown handler (Maarten Lankhorst)
  - ublk: santizize the arguments from userspace when adding a device (Ronnie Sahlberg)
  - net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (Alexey Kodanev)
  - eth: fbnic: avoid double free when failing to DMA-map FW msg (Jakub Kicinski)
  - tcp: fix passive TFO socket having invalid NAPI ID (David Wei)
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu)
  - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell)
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima)
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima)
  - wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov)
  - ptp: allow reading of currently dialed frequency to succeed on free-running clocks (Vladimir Oltean)
  - ptp: fix breakage after ptp_vclock_in_use() rework (Vladimir Oltean)
  - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Pavan Chebbi)
  - bnxt_en: Add a helper function to configure MRU and RSS (Pavan Chebbi)
  - eth: bnxt: fix out-of-range access of vnic_info array (Taehee Yoo)
  - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Kalesh AP)
  - net: netmem: fix skb_ensure_writable with unreadable skbs (Mina Almasry)
  - ksmbd: add free_transport ops in ksmbd connection (Namjae Jeon)
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Chuyi Zhou)
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Vitaly Lifshits)
  - ice: fix eswitch code memory leak in reset scenario (Grzegorz Nitka)
  - net: ice: Perform accurate aRFS flow match (Krishna Kumar)
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jens Axboe)
  - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders)
  - pldmfw: Select CRC32 when PLDMFW is selected (Simon Horman)
  - hwmon: (ltc4282) avoid repeated register write (Nuno Sá)
  - hwmon: (occ) fix unaligned accesses (Arnd Bergmann)
  - hwmon: (occ) Rework attribute registration for stack usage (Arnd Bergmann)
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Tzung-Bi Shih)
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller)
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Brett Creeley)
  - drm/ssd130x: fix ssd132x_clear_screen() columns (John Keeping)
  - drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (Connor Abbott)
  - drm/msm: Fix CP_RESET_CONTEXT_STATE bitfield names (Connor Abbott)
  - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate (Krzysztof Kozlowski)
  - drm/msm/disp: Correct porch timing for SDM845 (James A. MacInnes)
  - smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels (Bharath SM)
  - ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn)
  - ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn)
  - x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c (Nathan Chancellor)
  - Kunit to check the longest symbol length (Sergio González Collado)
  - drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` (Maíra Canal)
  - nfsd: use threads array as-is in netlink interface (Jeff Layton)
  - erofs: remove unused trace event erofs_destroy_inode (Gao Xiang)
  - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE (Paul Chaignon)
  - net: Fix checksum update for ILA adj-transport (Paul Chaignon)
  - rust: compile libcore with edition 2024 for 1.87+ (Gary Guo)
  - kbuild: rust: add rustc-min-version support function (Miguel Ojeda)
  - drm/amdgpu: read back register after written for VCN v4.0.5 (David (Ming Qiang) Wu)
  - mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn)
  - iio: accel: fxls8962af: Fix temperature calculation (Sean Nyekjaer)
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Richard Fitzgerald)
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Chris Chiu)
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane)
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Edip Hazuri)
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai)
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (wangdicheng)
  - arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis)
  - wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path (Manivannan Sadhasivam)
  - Input: sparcspkr - avoid unannotated fall-through (WangYuli)
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Dhananjay Ugwekar)
  - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power (Ping-Ke Shih)
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima)
  - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() (Tejun Heo)
  - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (Srinivas Pandruvada)
  - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley)
  - platform/x86: ideapad-laptop: use usleep_range() for EC polling (Rong Zhang)
  - ksmbd: fix null pointer dereference in destroy_previous_session (Namjae Jeon)
  - selftests/x86: Add a test to detect infinite SIGTRAP handler loop (Xin Li (Intel))
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Kai Huang)
  - udmabuf: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - mm: close theoretical race where stale TLB entries could linger (Ryan Roberts)
  - net: clear the dst when changing skb protocol (Jakub Kicinski)
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet)
  - nvme: always punt polled uring_cmd end_io work to task_work (Jens Axboe)
  - scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter)
  - scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui)
  - smb: improve directory cache reuse for readdir operations (Bharath SM)
  - cifs: do not disable interface polling on failure (Shyam Prasad N)
  - cifs: serialize other channels when query server interfaces is pending (Shyam Prasad N)
  - cifs: deal with the channel loading lag while picking channels (Shyam Prasad N)
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin)
  - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov)
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang)
  - LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg (Huacai Chen)
  - LoongArch: vDSO: Correctly use asm parameters in syscall wrappers (Thomas Weißschuh)
  - platform/loongarch: laptop: Add backlight power control support (Yao Zi)
  - platform/loongarch: laptop: Unregister generic_sub_drivers on exit (Yao Zi)
  - platform/loongarch: laptop: Get brightness setting from EC on probe (Yao Zi)
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton)
  - io_uring: fix task leak issue in io_wq_create() (Penglei Jiang)
  - io_uring/kbuf: don't truncate end buffer for multiple buffer peeks (Jens Axboe)
  - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N)
  - powerpc/vdso: Fix build of VDSO32 with pcrel (Christophe Leroy)
  - platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes)
  - platform/x86: dell_rbu: Fix list usage (Stuart Hayes)
  - platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice (Mario Limonciello)
  - platform/x86/amd: pmc: Clear metrics table at start of cycle (Mario Limonciello)
  - fs/xattr.c: fix simple_xattr_list() (Stephen Smalley)
  - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" (Alexander Sverdlin)
  - tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn)
  - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary)
  - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor)
  - watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson)
  - fbcon: Make sure modelist not set on unregistered console (Kees Cook)
  - net/mlx5: HWS, Harden IP version definer checks (Vlad Dogaru)
  - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz (Suraj P Kizhakkethil)
  - wifi: ath12k: fix incorrect CE addresses (Balamurugan S)
  - wifi: ath12k: fix link valid field initialization in the monitor Rx (Hari Chandrakanthan)
  - wifi: ath11k: determine PM policy based on machine model (Baochen Qiang)
  - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Wentao Liang)
  - net: ethernet: cortina: Use TOE/TSO on all TCP (Linus Walleij)
  - bpf, sockmap: Fix data lost during EAGAIN retries (Jiayuan Chen)
  - f2fs: fix to set atomic write status more clear (Chao Yu)
  - usbnet: asix AX88772: leave the carrier control to phylink (Krzysztof Hałasa)
  - ice: fix check for existing switch rule (Mateusz Pacuszka)
  - RDMA/hns: initialize db in update_srq_db() (Chen Linxuan)
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Rand Deeb)
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo)
  - sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu)
  - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner)
  - wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping (Aditya Kumar Singh)
  - pinctrl: mcp23s08: Reset all pins to input at probe (Mike Looijmans)
  - isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry (Jonas 'Sortie' Termansen)
  - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu)
  - net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER (Michael Walle)
  - wifi: ath12k: using msdu end descriptor to check for rx multicast packets (Sarika Sharma)
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Kalesh AP)
  - vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel)
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Yong Wang)
  - net: bridge: mcast: update multicast contex when vlan state is changed (Yong Wang)
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0 (Víctor Gonzalo)
  - Revert "mac80211: Dynamically set CoDel parameters per station" (Toke Høiland-Jørgensen)
  - wifi: mac80211: VLAN traffic in multicast path (Muna Sinada)
  - bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index (Shung-Hsi Yu)
  - net/mlx5: HWS, Fix IP version decision (Vlad Dogaru)
  - netdevsim: Mark NAPI ID on skb in nsim_rcv (Joe Damato)
  - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled (Edward Adam Davis)
  - wifi: rtw89: 8922a: fix TX fail with wrong VCO setting (Kuan-Chung Chen)
  - wifi: iwlwifi: pcie: make sure to lock rxq->read (Miri Korenblit)
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Sean Christopherson)
  - scsi: smartpqi: Add new PCI IDs (David Strahan)
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee)
  - libbpf: Add identical pointer detection to btf_dedup_is_equiv() (Alan Maguire)
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso)
  - f2fs: fix to bail out in get_new_segment() (Chao Yu)
  - wifi: iwlwifi: mvm: fix beacon CCK flag (Johannes Berg)
  - hid-asus: check ROG Ally MCU version and warn (Luke D. Jones)
  - clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner)
  - wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg)
  - wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn() (Salah Triki)
  - net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi (Stefan Wahren)
  - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos)
  - libbpf: Check bpf_map_skeleton link for NULL (Mykyta Yatsenko)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos)
  - net: stmmac: generate software timestamp just before the doorbell (Jason Xing)
  - bpf: Pass the same orig_call value to trampoline functions (Ilya Leoshkevich)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos)
  - net: atlantic: generate software timestamp just before the doorbell (Jason Xing)
  - xfrm: validate assignment of maximal possible SEQ number (Leon Romanovsky)
  - net: page_pool: Don't recycle into cache on PREEMPT_RT (Sebastian Andrzej Siewior)
  - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior)
  - x86/sgx: Prevent attempts to reclaim poisoned pages (Andrew Zaborowski)
  - tcp: add receive queue awareness in tcp_rcv_space_adjust() (Eric Dumazet)
  - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows (Eric Dumazet)
  - tcp: remove zero TCP TS samples for autotuning (Eric Dumazet)
  - tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet)
  - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode (Dian-Syuan Yang)
  - iommu/amd: Allow matching ACPI HID devices without matching UIDs (Mario Limonciello)
  - wifi: ath11k: Fix QMI memory reuse logic (Muhammad Usama Anjum)
  - wifi: ath12k: fix a possible dead lock caused by ab->base_lock (Baochen Qiang)
  - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET (Kang Yang)
  - net: dlink: add synchronization for stats update (Moon Yeounsu)
  - clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks (Taniya Das)
  - i2c: npcm: Add clock toggle recovery (Tali Perry)
  - i2c: tegra: check msg length in SMBUS block read (Akhil R)
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mike Tipton)
  - libbpf/btf: Fix string handling to support multi-split BTF (Alan Maguire)
  - sctp: Do not wake readers in __sctp_write_space() (Petr Malat)
  - wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO (Aditya Kumar Singh)
  - wifi: mt76: mt7925: introduce thermal protection (Leon Yen)
  - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device (Samuel Williams)
  - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Henk Vergonet)
  - Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925 (Jiande Lu)
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari)
  - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA (Benjamin Lin)
  - i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De)
  - Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922 (Liwei Sun)
  - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (Hou Tao)
  - f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx (Chao Yu)
  - tipc: use kfree_sensitive() for aead cleanup (Zilin Guan)
  - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices (Rengarajan S)
  - net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez)
  - ACPI: battery: negate current when discharging (Peter Marheine)
  - power: supply: max17040: adjust thermal channel scaling (Svyatoslav Ryhel)
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla)
  - gpiolib: of: Add polarity quirk for s5m8767 (Peng Fan)
  - Make 'cc-option' work correctly for the -Wno-xyzzy pattern (Linus Torvalds)
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Yuanjun Gong)
  - platform-msi: Add msi_remove_device_irq_domain() in platform_device_msi_free_irqs_all() (Frank Li)
  - ACPICA: utilities: Fix overflow check in vsnprintf() (gldrk)
  - pmdomain: core: Reset genpd->states to avoid freeing invalid data (Ulf Hansson)
  - power: supply: bq27xxx: Retrieve again when busy (Jerry Lv)
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Stefan Binding)
  - ACPICA: Apply pack(1) to union aml_resource (Tamir Duberstein)
  - ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han)
  - ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case (Mario Limonciello)
  - ACPI: bus: Bail out if acpi_kobj registration fails (Armin Wolf)
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (I Hsin Cheng)
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Hector Martin)
  - ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem)
  - mmc: Add quirk to disable DDR50 tuning (Erick Shepherd)
  - power: supply: collie: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - clocksource: Fix the CPUs' choice in the watchdog per CPU verification (Guilherme G. Piccoli)
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Talhah Peerbhai)
  - ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han)
  - iio: adc: ad7606_spi: fix reg write value mask (David Lechner)
  - iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build (Arthur-Prince)
  - iio: adc: ad7944: mask high bits on direct read (David Lechner)
  - iio: imu: inv_icm42600: Fix temperature calculation (Sean Nyekjaer)
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn)
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Thomas Zimmermann)
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Jacek Lawrynowicz)
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Jacek Lawrynowicz)
  - accel/ivpu: Use firmware names from upstream repo (Jacek Lawrynowicz)
  - accel/ivpu: Improve buffer object logging (Jacek Lawrynowicz)
  - iio: accel: fxls8962af: Fix temperature scan element sign (Sean Nyekjaer)
  - PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() (Diederik de Haas)
  - PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from rockchip_pcie_link_up() (Shawn Lin)
  - PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Järvinen)
  - PCI: Add ACS quirk for Loongson PCIe (Huacai Chen)
  - PCI: dwc: ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)
  - PCI: cadence-ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)
  - uio_hv_generic: Align ring size to system page (Long Li)
  - uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li)
  - Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (Long Li)
  - smb: client: add NULL check in automount_fullpath (Ruben Devos)
  - cifs: dns resolution is needed only for primary channel (Shyam Prasad N)
  - cifs: update dstaddr whenever channel iface is updated (Shyam Prasad N)
  - cifs: reset connections for all channels when reconnect requested (Shyam Prasad N)
  - remoteproc: k3-m4: Don't assert reset in detach routine (Beleswar Padhi)
  - remoteproc: core: Release rproc->clean_table after rproc_attach() fails (Xiaolei Wang)
  - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Xiaolei Wang)
  - regulator: max14577: Add error check for max14577_read_reg() (Wentao Liang)
  - ovl: Fix nested backing file paths (André Almeida)
  - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj)
  - staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel Shahrouzi)
  - pwm: axi-pwmgen: fix missing separate external clock (David Lechner)
  - video: screen_info: Relocate framebuffers behind PCI bridges (Thomas Zimmermann)
  - sysfb: Fix screen_info type check for VGA (Thomas Zimmermann)
  - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Lorenzo Stoakes)
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz)
  - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Xu Yang)
  - dm: lock limits when reading them (Mikulas Patocka)
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin)
  - mtd: rawnand: qcom: Fix read len for onfi param page (Md Sadre Alam)
  - dm-verity: fix a memory leak if some arguments are specified multiple times (Mikulas Patocka)
  - dm-mirror: fix a tiny race condition (Mikulas Patocka)
  - KVM: VMX: Flush shadow VMCS on emergency reboot (Chao Gao)
  - KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs (Yosry Ahmed)
  - mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Wentao Liang)
  - mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Wentao Liang)
  - firmware: arm_scmi: Ensure that the message-id supports fastchannel (Sibi Sankar)
  - configfs-tsm-report: Fix NULL dereference of tsm_ops (Dan Williams)
  - soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events (Johan Hovold)
  - mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng)
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'ichiro Kawasaki)
  - watchdog: fix watchdog may detect false positive of softlockup (Luo Gengkun)
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park)
  - clk: meson-g12a: add missing fclk_div2 to spicc (Da Xue)
  - parisc: fix building with gcc-15 (Arnd Bergmann)
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (GONG Ruiqi)
  - parisc/unaligned: Fix hex output to show 8 hex chars (Helge Deller)
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov)
  - EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara)
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov)
  - iommu/vt-d: Restore context entry setup order for aliased devices (Lu Baolu)
  - net: ftgmac100: select FIXED_PHY (Heiner Kallweit)
  - net/sched: fix use-after-free in taprio_dev_notifier (Hyunwoo Kim)
  - NFC: nci: uart: Set tty->disc_data only in success path (Krzysztof Kozlowski)
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read() (Gui-Dong Han)
  - f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu)
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim)
  - f2fs: fix to do sanity check on ino and xnid (Chao Yu)
  - Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer() (Gatien Chevallier)
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter)
  - ext4: only dirty folios when data journaling regular files (Brian Foster)
  - ext4: ensure i_size is smaller than maxbytes (Zhang Yi)
  - ext4: factor out ext4_get_maxbytes() (Zhang Yi)
  - ext4: fix calculation of credits for extent tree modification (Jan Kara)
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo)
  - bus: fsl-mc: fix GET/SET_TAILDROP command ids (Wan Junjie)
  - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei)
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Mikko Korhonen)
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Niklas Cassel)
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis)
  - bus: firewall: Fix missing static inline annotations for stubs (Krzysztof Kozlowski)
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Chen Ridong)
  - ceph: set superblock s_magic for IMA fsmagic matching (Dennis Marttinen)
  - ceph: avoid kernel BUG for encrypted inode with unaligned file size (Viacheslav Dubeyko)
  - can: tcan4x5x: fix power regulator retrieval during probe (Brett Werling)
  - can: kvaser_pciefd: refine error prone echo_skb_max handling logic (Fedor Pchelkin)
  - bus: mhi: host: Fix conflict between power_up and SYSERR (Jeff Hugo)
  - bus: mhi: ep: Update read pointer only after buffer is written (Sumit Kumar)
  - block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Damien Le Moal)
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Krzysztof Kozlowski)
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Krzysztof Kozlowski)
  - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 (Andreas Kemnade)
  - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim)
  - arm64/mm: Close theoretical race where stale TLB entry remains valid (Ryan Roberts)
  - media: uvcvideo: Fix deferred probing error (Ricardo Ribalda)
  - media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)
  - media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)
  - media: imx-jpeg: Cleanup after an allocation error (Ming Qian)
  - media: imx-jpeg: Reset slot data pointers when freed (Ming Qian)
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead (Ming Qian)
  - media: imx-jpeg: Drop the first error frames (Ming Qian)
  - media: vivid: Change the siize of the composing (Denis Arefev)
  - media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis)
  - media: videobuf2: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: venus: Fix probe error handling (Loic Poulain)
  - media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke)
  - media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: mediatek: vcodec: Correct vsi_core framebuffer size (Fei Shao)
  - media: ipu6: Remove workaround for Meteor Lake ES2 (Hao Yao)
  - media: intel/ipu6: Fix dma mask for non-secure mode (Stanislaw Gruszka)
  - media: imagination: fix a potential memory leak in e5010_probe() (Haoxiang Li)
  - media: i2c: imx335: Fix frame size enumeration (Kieran Bingham)
  - media: gspca: Add error handling for stv06xx_read_sensor() (Wentao Liang)
  - media: davinci: vpif: Fix memory leak in probe error path (Dmitry Nikiforov)
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis)
  - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case (Sakari Ailus)
  - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div (Sakari Ailus)
  - media: ccs-pll: Start OP pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: ov2740: Move pm-runtime cleanup on probe-errors to proper place (Hans de Goede)
  - media: ccs-pll: Start VT pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: i2c: ds90ub913: Fix returned fmt from .set_fmt() (Tomi Valkeinen)
  - media: nxp: imx8-isi: better handle the m2m usage_count (Laurentiu Palcu)
  - media: imx335: Use correct register width for HNUM (Umang Jain)
  - media: ov5675: suppress probe deferral errors (Johan Hovold)
  - media: ov8856: suppress probe deferral errors (Johan Hovold)
  - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai)
  - wifi: rtw88: usb: Reduce control message timeout to 500 ms (Bitterblue Smith)
  - svcrdma: Unregister the device if svc_rdma_accept() fails (Chuck Lever)
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park)
  - wifi: ath12k: fix ring-buffer corruption (Johan Hovold)
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Max Kellermann)
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew)
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Chuck Lever)
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng)
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (NeilBrown)
  - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute (Chuck Lever)
  - NFSD: fix race between nfsd registration and exports_proc (Maninder Singh)
  - NFSD: unregister filesystem in case genl_register_family() fails (Maninder Singh)
  - wifi: ath11k: fix ring-buffer corruption (Johan Hovold)
  - wifi: rtw88: usb: Upload the firmware in bigger chunks (Bitterblue Smith)
  - wifi: ath11k: fix rx completion meta data corruption (Johan Hovold)
  - wifi: mt76: mt7925: fix host interrupt register initialization (Michael Lo)
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter)
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Wentao Liang)
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Wentao Liang)
  - regulator: max20086: Change enable gpio to optional (João Paulo Gonçalves)
  - regulator: max20086: Fix MAX200086 chip id (João Paulo Gonçalves)
  - s390/pci: Serialize device addition and removal (Niklas Schnelle)
  - s390/pci: Allow re-add of a reserved but not yet removed device (Niklas Schnelle)
  - s390/pci: Prevent self deletion in disable_slot() (Niklas Schnelle)
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Niklas Schnelle)
  - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (Gautam Menghani)
  - io_uring/kbuf: account ring io_buffer_list memory (Pavel Begunkov)
  - io_uring: account drain memory to cgroup (Pavel Begunkov)
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Vijendar Mukunda)
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Wentao Liang)
  - crypto: qat - add shutdown handler to qat_dh895xcc (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_c62x (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_4xxx (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_420xx (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_c3xxx (Giovanni Cabiddu)
  - gfs2: move msleep to sleepable context (Alexander Aring)
  - crypto: marvell/cesa - Do not chain submitted requests (Herbert Xu)
  - configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu)
  - LTS version: v6.12.34 (Jack Vogel)
  - thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit (Arnd Bergmann)
  - drm/meson: Use 1000ULL when operating with mode->clock (I Hsin Cheng)
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price)
  - overflow: Introduce __DEFINE_FLEX for having no initializer (Kees Cook)
  - net: usb: aqc111: debug info before sanitation (Oliver Neukum)
  - usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Arnd Bergmann)
  - regulator: dt-bindings: mt6357: Drop fixed compatible requirement (Nícolas F. R. A. Prado)
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet)
  - x86/fred/signal: Prevent immediate repeat of single step trap on return from SIGTRAP handler (Xin Li (Intel))
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner)
  - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini)
  - xfs: don't assume perags are initialised when trimming AGs (Dave Chinner)
  - ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Steven Rostedt)
  - ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Dmitry Antipov)
  - ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Steven Rostedt)
  - 9p: Add a migrate_folio method (Matthew Wilcox (Oracle))
  - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (RD Babiera)
  - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() (Amit Sunil Dhamne)
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman)
  - usb: cdnsp: Fix issue with detecting USB 3.2 speed (Pawel Laszczak)
  - usb: cdnsp: Fix issue with detecting command completion event (Pawel Laszczak)
  - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Jonathan Stroud)
  - tty: serial: 8250_omap: fix TX with DMA for am33xx (Jiri Slaby (SUSE))
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Wupeng Ma)
  - usb: usbtmc: Fix read_stb function and get_stb ioctl (Dave Penkler)
  - nvmem: zynqmp_nvmem: unbreak driver after cleanup (Peter Korsgaard)
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov)
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge)
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (David Heimann)
  - Revert "wifi: mwifiex: Fix HT40 bandwidth issue." (Francesco Dolcini)
  - tools/resolve_btfids: Fix build when cross compiling kernel with clang. (Suleiman Souhlal)
  - objtool/rust: relax slice condition to cover more `noreturn` Rust functions (Miguel Ojeda)
  - block: Fix bvec_set_folio() for very large folios (Matthew Wilcox (Oracle))
  - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Matthew Wilcox (Oracle))
  - io_uring: consistently use rcu semantics with sqpoll thread (Keith Busch)
  - block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Christoph Hellwig)
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Penglei Jiang)
  - block: use q->elevator with ->elevator_lock held in elv_iosched_show() (Ming Lei)
  - perf: Ensure bpf_perf_link path is properly serialized (Peter Zijlstra)
  - nvmet-fcloop: access fcpreq only when holding reqlock (Daniel Wagner)
  - btrfs: exit after state split error at set_extent_bit() (Filipe Manana)
  - gfs2: pass through holder from the VFS for freeze/thaw (Christian Brauner)
  - fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu)
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana)
  - net: drv: netdevsim: don't napi_complete() from netpoll (Jakub Kicinski)
  - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet)
  - net_sched: tbf: fix a race in tbf_change() (Eric Dumazet)
  - net_sched: red: fix a race in __red_change() (Eric Dumazet)
  - net_sched: prio: fix a race in prio_tune() (Eric Dumazet)
  - net/mlx5e: Fix leak of Geneve TLV option object (Jianbo Liu)
  - net/mlx5: HWS, fix missing ip_version handling in definer (Yevgeny Kliteynik)
  - net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad)
  - net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin)
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Moshe Shemesh)
  - Bluetooth: MGMT: Fix sparse errors (Luiz Augusto von Dentz)
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data (Luiz Augusto von Dentz)
  - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance (Luiz Augusto von Dentz)
  - Bluetooth: Fix NULL pointer deference on eir_get_service_data (Luiz Augusto von Dentz)
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Jakub Raczynski)
  - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski)
  - macsec: MACsec SCI assignment for ES = 0 (Carlos Fernandez)
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj)
  - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui)
  - i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz)
  - i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz)
  - drm/meson: fix more rounding issues with 59.94Hz modes (Martin Blumenstingl)
  - drm/meson: use vclk_freq instead of pixel_freq in debug print (Martin Blumenstingl)
  - drm/meson: fix debug log statement when setting the HDMI clocks (Martin Blumenstingl)
  - drm/meson: use unsigned long long / Hz for frequency types (Martin Blumenstingl)
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Haren Myneni)
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani (IBM))
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet)
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari)
  - pinctrl: qcom: pinctrl-qcm2290: Add missing pins (Wojciech Slenska)
  - spi: omap2-mcspi: Disable multi-mode when the previous message kept CS asserted (Félix Piédallu)
  - spi: omap2-mcspi: Disable multi mode when CS should be kept asserted after message (Félix Piédallu)
  - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt() (Dan Carpenter)
  - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (Baochen Qiang)
  - wifi: ath12k: refactor ath12k_hw_regs structure (P Praneesh)
  - wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready (Rodrigo Gobbi)
  - wifi: ath11k: move some firmware stats related functions outside of debugfs (Baochen Qiang)
  - wifi: ath11k: don't wait when there is no vdev started (Baochen Qiang)
  - wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process() (Baochen Qiang)
  - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request() (Baochen Qiang)
  - wifi: ath11k: convert timeouts to secs_to_jiffies() (Easwar Hariharan)
  - ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Caleb Connolly)
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park)
  - net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0 (Jonas Gorski)
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz)
  - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (Dr. David Alan Gilbert)
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (Luiz Augusto von Dentz)
  - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race condition (Chandrashekar Devegowda)
  - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count (Chandrashekar Devegowda)
  - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers (Kiran K)
  - Bluetooth: hci_core: fix list_for_each_entry_rcu usage (Pauli Virtanen)
  - scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav)
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Claudiu Beznea)
  - dt-bindings: pwm: adi,axi-pwmgen: Fix clocks (David Lechner)
  - dt-bindings: pwm: Correct indentation and style in DTS example (Krzysztof Kozlowski)
  - dt-bindings: pwm: adi,axi-pwmgen: Increase #pwm-cells to 3 (Uwe Kleine-König)
  - pinctrl: samsung: add gs101 specific eint suspend/resume callbacks (Peter Griffin)
  - pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks (Peter Griffin)
  - pinctrl: samsung: refactor drvdata suspend & resume callbacks (Peter Griffin)
  - arm64: dts: qcom: x1e80100: Add GPU cooling (Stephan Gerhold)
  - arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown (Stephan Gerhold)
  - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576 (Nicolas Frattaroli)
  - pmdomain: core: Introduce dev_pm_genpd_rpm_always_on() (Ulf Hansson)
  - Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)
  - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)
  - ALSA: hda/realtek - Support mute led function for HP platform (Kailang Yang)
  - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 (Chris Chiu)
  - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 (Chris Chiu)
  - tools/power turbostat: Fix AMD package-energy reporting (Gautham R. Shenoy)
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro)
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) (Al Viro)
  - path_overmount(): avoid false negatives (Al Viro)
  - iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec (Nitesh Shetty)
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Yuuki NAGAO)
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Cezary Rojewski)
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Cezary Rojewski)
  - ASoC: codecs: hda: Fix RPM usage count underflow (Cezary Rojewski)
  - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init() (Nitin Rawat)
  - riscv: misaligned: fix sleeping function called during misaligned access handling (Nylon Chen)
  - seg6: Fix validation of nexthop addresses (Ido Schimmel)
  - wireguard: device: enable threaded NAPI (Mirco Barone)
  - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing (Daniele Palmas)
  - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (Lachlan Hodges)
  - net: dsa: b53: do not touch DLL_IQQD on bcm53115 (Jonas Gorski)
  - net: dsa: b53: allow RGMII for bcm63xx RGMII ports (Jonas Gorski)
  - net: dsa: b53: do not enable RGMII delay on bcm63xx (Jonas Gorski)
  - net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces. (Meghana Malladi)
  - netfilter: nf_nat: also check reverse tuple to obtain clashing entry (Florian Westphal)
  - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal)
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Michael Walle)
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari)
  - nvme: fix command limits status code (Keith Busch)
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki)
  - selftests: net: build net/lib dependency in all target (Bui Quang Minh)
  - vmxnet3: correctly report gso type for UDP tunnels (Ronak Doshi)
  - net: wwan: t7xx: Fix napi rx poll issue (Jinjian Song)
  - net: fix udp gso skb_segment after pull from frag_list (Shiming Cheng)
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Jesus Narvaez)
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Jouni Högander)
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Jesus Narvaez)
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré)
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothoré)
  - net: dsa: tag_brcm: legacy: fix pskb_may_pull length (Álvaro Fernández Rojas)
  - idpf: avoid mailbox timeout delays during reset (Emil Tantilov)
  - idpf: fix a race in txq wakeup (Brian Vazquez)
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Michal Kubiak)
  - ice: create new Tx scheduler nodes for new queues only (Michal Kubiak)
  - ice: fix Tx scheduler error handling in XDP callback (Michal Kubiak)
  - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz)
  - spi: bcm63xx-hsspi: fix shared reset (Álvaro Fernández Rojas)
  - spi: bcm63xx-spi: fix shared reset (Álvaro Fernández Rojas)
  - net: lan966x: Make sure to insert the vlan tags also in host mode (Horatiu Vultur)
  - net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter)
  - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue (Yanqing Wang)
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Charalampos Mitrodimas)
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Alok Tiwari)
  - net: stmmac: platform: guarantee uniqueness of bus_id (Quentin Schulz)
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen)
  - Fix sock_exceed_buf_limit not being triggered in __sk_mem_raise_allocated (Tengteng Yang)
  - drm/xe: Make xe_gt_freq part of the Documentation (Rodrigo Vivi)
  - loop: add file_start_write() and file_end_write() (Ming Lei)
  - USB: typec: fix const issue in typec_match() (Greg Kroah-Hartman)
  - USB: gadget: udc: fix const issue in gadget_match_driver() (Greg Kroah-Hartman)
  - iio: adc: mcp3911: fix device dependent mappings for conversion result registers (Marcus Folkesson)
  - iio: adc: PAC1934: fix typo in documentation link (Marius Cristea)
  - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array() (Hans de Goede)
  - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre)
  - coresight: prevent deactivate active config while enabling the config (Yeoreum Yun)
  - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() (Qasim Ijaz)
  - counter: interrupt-cnt: Protect enable/disable OPs with mutex (Alexander Sverdlin)
  - coresight: catu: Introduce refcount and spinlock for enabling/disabling (Yabin Cui)
  - coresight: Fixes device's owner field for registered using coresight_init_driver() (Junhao He)
  - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a (WangYuli)
  - usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() (Chenyuan Yang)
  - iio: adc: ad7124: Fix 3dB filter frequency reading (Uwe Kleine-König)
  - iio: filter: admv8818: Support frequencies >= 2^32 (Brian Pellegrino)
  - iio: filter: admv8818: fix range calculation (Sam Winchenbach)
  - iio: filter: admv8818: fix integer overflow (Sam Winchenbach)
  - iio: filter: admv8818: fix band 4, state 15 (Sam Winchenbach)
  - thunderbolt: Fix a logic error in wake on connect (Mario Limonciello)
  - serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin)
  - usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar)
  - PCI: endpoint: Retain fixed-size BAR size as well as aligned size (Jerome Brunet)
  - rtc: loongson: Add missing alarm notifications for ACPI RTC events (Liu Dalin)
  - PCI/DPC: Log Error Source ID only when valid (Bjorn Helgaas)
  - PCI/DPC: Initialize aer_err_info before using it (Bjorn Helgaas)
  - PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root() (Zhe Qiao)
  - dmaengine: ti: Add NULL check in udma_probe() (Henry Martin)
  - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (Chenyuan Yang)
  - PCI: apple: Use gpiod_set_value_cansleep in probe flow (Hector Martin)
  - PCI: cadence: Fix runtime atomic count underflow (Hans Zhang)
  - PCI: rcar-gen4: set ep BAR4 fixed size (Jerome Brunet)
  - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus() (Wilfred Mallawa)
  - phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy->rate in case of errors (Cristian Ciocaltea)
  - phy: rockchip: samsung-hdptx: Fix clock ratio setup (Cristian Ciocaltea)
  - rtc: sh: assign correct interrupts with DT (Wolfram Sang)
  - rust: alloc: add missing invariant in Vec::set_len() (Danilo Krummrich)
  - cifs: Fix validation of SMB1 query reparse point response (Pali Rohár)
  - perf callchain: Always populate the addr_location map when adding IP (Ian Rogers)
  - perf trace: Set errpid to false for rseq and set_robust_list (Anubhav Shelat)
  - nfs: ignore SB_RDONLY when remounting nfs (Li Lingfeng)
  - nfs: clear SB_RDONLY before getting superblock (Li Lingfeng)
  - perf trace: Always print return value for syscalls returning a pid (Anubhav Shelat)
  - perf record: Fix incorrect --user-regs comments (Dapeng Mi)
  - perf symbol: Fix use-after-free in filename__read_build_id (Ian Rogers)
  - mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting (Jason-JH Lin)
  - mailbox: imx: Fix TXDB_V2 sending (Peng Fan)
  - perf tests switch-tracking: Fix timestamp comparison (Leo Yan)
  - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov)
  - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe JAILLET)
  - mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe() (Christophe JAILLET)
  - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter)
  - remoteproc: k3-dsp: Drop check performed in k3_dsp_rproc_{mbox_callback/kick} (Siddharth Vadapalli)
  - remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick} (Siddharth Vadapalli)
  - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe (Dan Carpenter)
  - perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter)
  - perf intel-pt: Fix PEBS-via-PT data_src (Adrian Hunter)
  - perf tests: Fix 'perf report' tests installation (Michael Petlan)
  - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Namhyung Kim)
  - dm-flakey: make corrupting read bios work (Benjamin Marzinski)
  - dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski)
  - dm: fix dm_blk_report_zones (Benjamin Marzinski)
  - perf symbol-minimal: Fix double free in filename__read_build_id (Ian Rogers)
  - hwmon: (asus-ec-sensors) check sensor index in read_string() (Alexei Safin)
  - mtd: nand: ecc-mxic: Fix use of uninitialized variable ret (Mikhail Arkhipov)
  - x86/irq: Ensure initial PIR loads are performed exactly once (Sean Christopherson)
  - backlight: pm8941: Add NULL check in wled_configure() (Henry Martin)
  - dm: free table mempools if not used in __bind (Benjamin Marzinski)
  - dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski)
  - perf ui browser hists: Set actions->thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo)
  - perf build: Warn when libdebuginfod devel files are not available (Arnaldo Carvalho de Melo)
  - randstruct: gcc-plugin: Fix attribute addition (Kees Cook)
  - randstruct: gcc-plugin: Remove bogus void member (Kees Cook)
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov)
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin)
  - soc: aspeed: lpc: Fix impossible judgment condition (Su Hui)
  - ARM: aspeed: Don't select SRAM (Joel Stanley)
  - arm64: dts: mt6359: Rename RTC node to match binding expectations (Julien Massot)
  - arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups (Thuan Nguyen)
  - arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects (Dmitry Baryshkov)
  - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz)
  - arm64: defconfig: mediatek: enable PHY drivers (Vignesh Raman)
  - ARM: dts: qcom: apq8064: move replicator out of soc node (Dmitry Baryshkov)
  - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov)
  - ARM: dts: qcom: apq8064: add missing clocks to the timer node (Dmitry Baryshkov)
  - dt-bindings: vendor-prefixes: Add Liontron name (Andre Przywara)
  - bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei)
  - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi)
  - nilfs2: add pointer check for nilfs_direct_propagate() (Wentao Liang)
  - Squashfs: check return result of sb_min_blocksize (Phillip Lougher)
  - soc: qcom: smp2p: Fix fallback to qcom,ipc parse (Barnabás Czémán)
  - arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E (Prasanth Babu Mantena)
  - arm64: tegra: Add uartd serial alias for Jetson TX1 module (Aaron Kling)
  - arm64: tegra: Drop remaining serial clock-names and reset-names (Aaron Kling)
  - arm64: dts: rockchip: Update eMMC for NanoPi R5 series (Peter Robinson)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c (Peter Robinson)
  - arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning (Alexey Minnekhanov)
  - arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply (Alexey Minnekhanov)
  - arm64: dts: mt6359: Add missing 'compatible' property to regulators node (Julien Massot)
  - arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles (Nícolas F. R. A. Prado)
  - arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford)
  - arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford)
  - arm64: dts: imx8mp-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: imx8mn-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: imx8mm-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: mt8183: Add port node to mt8183.dtsi (Pin-yen Lin)
  - arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO (Alexey Minnekhanov)
  - arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains (AngeloGioacchino Del Regno)
  - ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang)
  - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang)
  - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588 (Chukun Pan)
  - arm64: dts: qcom: ipq9574: Fix USB vdd info (Varadarajan Narayanan)
  - arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies (Stephan Gerhold)
  - arm64: dts: qcom: sm8250: Fix CPU7 opp table (Xilin Wu)
  - arm64: dts: qcom: sm8350: Reenable crypto & cryptobam (Luca Weiss)
  - arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios (Dzmitry Sankouski)
  - arm64: dts: qcom: sdm845-starqltechn: refactor node order (Dzmitry Sankouski)
  - arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake (Dzmitry Sankouski)
  - arm64: dts: qcom: sdm845-starqltechn: remove wifi (Dzmitry Sankouski)
  - arm64: dts: qcom: x1e80100-romulus: Keep L12B and L15B always on (Konrad Dybcio)
  - arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the mdss node (Neil Armstrong)
  - arm64: dts: qcom: sm8650: setup gpu thermal with higher temperatures (Neil Armstrong)
  - arm64: dts: qcom: x1e80100: Mark usb_2 as dma-coherent (Mark Kettenis)
  - f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu)
  - f2fs: use d_inode(dentry) cleanup dentry->d_inode (Zhiguo Niu)
  - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Horatiu Vultur)
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo)
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima)
  - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback (Hariprasad Kelam)
  - octeontx2-pf: QOS: Perform cache sync on send queue teardown (Hariprasad Kelam)
  - net: phy: mscc: Fix memory leak when using one step timestamping (Horatiu Vultur)
  - net: lan743x: Fix PHY reset handling during initialization and WOL (Thangaraj Samynathan)
  - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan)
  - net: phy: fix up const issues in to_mdio_device() and to_phy_device() (Greg Kroah-Hartman)
  - net: phy: clear phydev->devlink when the link is deleted (Wei Fang)
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails (KaFai Wan)
  - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in dmaengine xmit (Suraj Gupta)
  - net: lan966x: Fix 1-step timestamping over ipv4 or ipv6 (Horatiu Vultur)
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Jack Morgenstein)
  - vsock/virtio: fix `rx_bytes` accounting for stream sockets (Stefano Garzarella)
  - net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich)
  - RISC-V: KVM: lock the correct mp_state during reset (Radim Krčmář)
  - netfilter: nft_tunnel: fix geneve_opt dump (Fernando Fernandez Mancera)
  - netfilter: nf_tables: nft_fib: consistent l3mdev handling (Florian Westphal)
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen)
  - Bluetooth: btintel: Check dsbr size from EFI variable (Kees Cook)
  - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach() (Dmitry Antipov)
  - vfio/type1: Fix error unwind in migration dirty bitmap allocation (Li RongQing)
  - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal)
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal)
  - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic" (Di Shen)
  - wifi: mt76: mt7996: fix RX buffer size of MCU event (Shayne Chen)
  - wifi: mt76: mt7996: set EHT max ampdu length capability (Peter Chiu)
  - wifi: mt76: mt7925: ensure all MCU commands wait for response (Michael Lo)
  - wifi: mt76: mt7925: refine the sniffer commnad (Ming Yen Hsieh)
  - wifi: mt76: mt7925: prevent multiple scan commands (Ming Yen Hsieh)
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (Henry Martin)
  - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() (Henry Martin)
  - Bluetooth: ISO: Fix not using SID from adv report (Luiz Augusto von Dentz)
  - kernfs: Relax constraint in draining guard (Michal Koutný)
  - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort() (ping.gao)
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen)
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver (Longfang Liu)
  - hisi_acc_vfio_pci: add eq and aeq interruption restore (Longfang Liu)
  - hisi_acc_vfio_pci: fix XQE dma address error (Longfang Liu)
  - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (Rajat Soni)
  - iommu: remove duplicate selection of DMAR_TABLE (Rolf Eike Beer)
  - wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips (Chin-Yen Lee)
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev)
  - wifi: rtw89: pci: enlarge retry times of RX tag to 1000 (Ping-Ke Shih)
  - s390/bpf: Store backchain even for leaf progs (Ilya Leoshkevich)
  - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz (Vincent Knecht)
  - dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference (Rob Herring (Arm))
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen)
  - pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko)
  - libbpf: Use proper errno value in nlattr (Anton Protopopov)
  - ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen)
  - of: unittest: Unlock on error in unittest_data_add() (Dan Carpenter)
  - tracing: Fix error handling in event_trigger_parse() (Miaoqian Lin)
  - tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Steven Rostedt)
  - selftests/bpf: Fix caps for __xlated/jited_unpriv (Luis Gerhorst)
  - efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Hans Zhang)
  - wifi: iwlfiwi: mvm: Fix the rate reporting (Ilan Peer)
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin)
  - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels (YiFei Zhu)
  - clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - tracing: Move histogram trigger variables from stack to per CPU structure (Steven Rostedt)
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Anton Protopopov)
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad)
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso)
  - netfilter: nft_quota: match correctly when the quota just depleted (Zhongqiu Duan)
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang)
  - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps (Lorenzo Bianconi)
  - libbpf: Use proper errno value in linker (Anton Protopopov)
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Yi Zhang)
  - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() (Chao Yu)
  - f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu)
  - bonding: assign random address if device address is same as bond (Hangbin Liu)
  - iommu: Protect against overflow in iommu_pgsize() (Jason Gunthorpe)
  - Use thread-safe function pointer in libbpf_print (Jonathan Wiepert)
  - libbpf: Remove sample_period init in perf_buffer (Tao Chen)
  - libbpf: Fix event name too long error (Feng Yang)
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk (Yihang Li)
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang)
  - wifi: ath12k: fix node corruption in ar->arvifs list (Maharaja Kennadyrajan)
  - wifi: ath12k: Fix the QoS control field offset to build QoS header (Ramasamy Kaliappan)
  - wifi: ath12k: Add MSDU length validation for TKIP MIC error (P Praneesh)
  - wifi: ath12k: fix invalid access to memory (Sarika Sharma)
  - wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov)
  - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally (Zhen XIN)
  - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT (Zhen XIN)
  - xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu)
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Cosmin Ratiu)
  - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik)
  - net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta)
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen)
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen)
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu)
  - f2fs: prevent the current section from being selected as a victim during GC (yohan.joung)
  - f2fs: clean up unnecessary indentation (Jaegeuk Kim)
  - wifi: ath12k: Fix buffer overflow in debugfs (Dan Carpenter)
  - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc (Ramya Gnanasekar)
  - wifi: ath12k: fix cleanup path after mhi init (Raj Kumar Bhagat)
  - f2fs: zone: fix to avoid inconsistence in between SIT and SSA (Chao Yu)
  - bpf, sockmap: Fix panic when calling skb_linearize (Jiayuan Chen)
  - bpf, sockmap: fix duplicated data transmission (Jiayuan Chen)
  - bpf: fix ktls panic with sockmap (Jiayuan Chen)
  - selftests/bpf: Fix bpf_nf selftest failure (Saket Kumar Bhaskar)
  - bpf: Check link_create.flags parameter for multi_kprobe (Tao Chen)
  - IB/cm: use rwlock for MAD agent lock (Jacob Moroni)
  - wifi: ath12k: Fix invalid memory access while forming 802.11 header (P Praneesh)
  - wifi: ath12k: Fix memory leak during vdev_id mismatch (P Praneesh)
  - wifi: ath11k: fix node corruption in ar->arvifs list (Stone Zhang)
  - xen/x86: fix initial memory balloon target (Roger Pau Monne)
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Chuck Lever)
  - media: verisilicon: Free post processor buffers on error (Detlev Casanova)
  - drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err (AngeloGioacchino Del Regno)
  - drm/mediatek: Fix kobject put for component sub-drivers (AngeloGioacchino Del Regno)
  - drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr (AngeloGioacchino Del Regno)
  - drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3 (Konrad Dybcio)
  - selftests/seccomp: fix negative_ENOSYS tracer tests on arm32 (Terry Tritton)
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Anand Moon)
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook)
  - overflow: Fix direct struct member initialization in _DEFINE_FLEX() (Gustavo A. R. Silva)
  - arm64/fpsimd: Do not discard modified SVE state (Mark Rutland)
  - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES (Huang Yiwei)
  - drm/tegra: rgb: Fix the unbound reference count (Biju Das)
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Kees Cook)
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das)
  - drm/msm/dpu: enable SmartDMA on SC8180X (Dmitry Baryshkov)
  - drm/msm/dpu: enable SmartDMA on SM8150 (Dmitry Baryshkov)
  - selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron)
  - arm64/fpsimd: Avoid warning when sve_to_fpsimd() is unused (Mark Rutland)
  - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX (Kornel Dulęba)
  - firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin)
  - m68k: mac: Fix macintosh_config for Mac II (Finn Thain)
  - watchdog: exar: Shorten identity name to fit correctly (Kees Cook)
  - kunit/usercopy: Disable u64 test on 32-bit SPARC (Thomas Weißschuh)
  - fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr (Lizhi Xu)
  - fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin)
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Christophe JAILLET)
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Casey Connolly)
  - perf: arm-ni: Fix missing platform_set_drvdata() (Hongbo Yao)
  - perf: arm-ni: Unregister PMUs on probe failure (Hongbo Yao)
  - drm/panthor: Update panthor_mmu::irq::mask when needed (Boris Brezillon)
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Boris Brezillon)
  - arm64/fpsimd: Fix merging of FPSIMD state during signal return (Mark Rutland)
  - arm64/fpsimd: Reset FPMR upon exec() (Mark Rutland)
  - arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP (Mark Rutland)
  - arm64/fpsimd: Don't corrupt FPMR when streaming mode changes (Mark Brown)
  - arm64/fpsimd: Discard stale CPU state when handling SME traps (Mark Brown)
  - arm64/fpsimd: Avoid RES0 bits in the SME trap handler (Mark Rutland)
  - media: rkvdec: Fix frame size enumeration (Jonas Karlman)
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han)
  - drm/vc4: tests: Use return instead of assert (Maxime Ripard)
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Badal Nilawar)
  - drm/vmwgfx: Fix dumb buffer leak (Ian Forbes)
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Keisuke Nishimura)
  - drm/vmwgfx: Add seqno waiter for sync_files (Ian Forbes)
  - ALSA: core: fix up bus match const issues. (Greg Kroah-Hartman)
  - ASoC: apple: mca: Constrain channels according to TDM mask (Martin Povišer)
  - spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven)
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Armin Wolf)
  - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure (AngeloGioacchino Del Regno)
  - PM: sleep: Print PM debug messages during hibernation (Rafael J. Wysocki)
  - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao)
  - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mingcong Bai)
  - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu)
  - ASoC: SOF: amd: add missing acp descriptor field (Vijendar Mukunda)
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Kees Cook)
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian)
  - power: reset: at91-reset: Optimize at91_reset() (Alexander Shiyan)
  - spi: tegra210-quad: modify chip select (CS) deactivation (Vishwaroop A)
  - spi: tegra210-quad: remove redundant error handling code (Vishwaroop A)
  - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers (Vishwaroop A)
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0 (Qiuxu Zhuo)
  - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo)
  - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() (Julien Massot)
  - ASoC: tas2764: Enable main IRQs (Hector Martin)
  - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Daniil Tatianin)
  - crypto: api - Redo lookup on EEXIST (Herbert Xu)
  - kunit: Fix wrong parameter to kunit_deactivate_static_stub() (Tzung-Bi Shih)
  - crypto: sun8i-ce - move fallback ahash_request to the end of the struct (Ovidiu Panait)
  - crypto: xts - Only add ecb if it is not already there (Herbert Xu)
  - crypto: lrw - Only add ecb if it is not already there (Herbert Xu)
  - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Yongliang Gao)
  - btrfs: fix invalid data space release when truncating block in NOCOW mode (Filipe Manana)
  - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches (Qu Wenruo)
  - btrfs: scrub: update device stats when an error is detected (Qu Wenruo)
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Gaurav Batra)
  - erofs: avoid using multiple devices with different type (Sheng Yong)
  - erofs: fix file handle encoding for 64-bit NIDs (Hongbo Li)
  - crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu)
  - crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu)
  - kselftest: cpufreq: Get rid of double suspend in rtcwake case (Nícolas F. R. A. Prado)
  - brd: fix discard end sector (Yu Kuai)
  - brd: fix aligned_sector from brd_do_discard() (Yu Kuai)
  - x86/insn: Fix opcode map (!REX2) superscript tags (Masami Hiramatsu (Google))
  - x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish)
  - crypto: sun8i-ce - undo runtime PM changes during driver removal (Ovidiu Panait)
  - x86/microcode/AMD: Do not return error when microcode update is not necessary (Annie Li)
  - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed tasks (John Stultz)
  - powerpc/crash: Fix non-smp kexec preparation (Eddie James)
  - powerpc: do not build ppc_save_regs.o always (Jiri Slaby (SUSE))
  - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions (Corentin Labbe)
  - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() (Ovidiu Panait)
  - perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang)
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher)
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher)
  - perf/x86/amd/uncore: Prevent UMC counters from saturating (Sandipan Das)
  - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member (Sandipan Das)
  - sched: Fix trace_sched_switch(.prev_state) (Peter Zijlstra)
  - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run() (Ovidiu Panait)
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Andrew Cooper)
  - tools/x86/kcpuid: Fix error handling (Ahmed S. Darwish)
  - uek-rpm: Set USBIP_VHCI_NR_HCS to 4 in UEK8U1 (Harshit Mogalapalli)  [Orabug: 38012102]
  - mptcp: disable by default (Harshvardhan Jha)  [Orabug: 38035668]
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton)  [Orabug: 38137447]  {CVE-2025-38089}
  - x86/sev/docs: Document the SNP Reverse Map Table (RMP) (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Add full support for a segmented RMP table (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Treat the contiguous RMP table as a single RMP segment (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Map only the RMP table entries instead of the full RMP range (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Move the SNP probe routine out of the way (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Require the RMPREAD instruction after Zen4 (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Add support for the RMPREAD instruction (Tom Lendacky)  [Orabug: 38149216]
  - x86/sev: Prepare for using the RMPREAD instruction to access the RMP (Tom Lendacky)  [Orabug: 38149216]
  - rds: Fix array index out of bounds in rds_message_purge() (Harshit Mogalapalli)  [Orabug: 38158033]
  - Add Zen34 clients (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips)  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
  - Add normal counters (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov (AMD))  [Orabug: 38172252]  {CVE-2024-36350} {CVE-2024-36357}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.3.el9uek]
changelog:
  - aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump for 64K kernels (Brian Maly)  [Orabug: 38001657]
  - fs: use new field for kstat.atomic_write_unit_max_opt to avoid KABI issue (John Garry)  [Orabug: 38026089]
  - nvme: all namespaces in a subsystem must adhere to a common atomic write size (Alan Adamson)  [Orabug: 38026089]
  - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Alan Adamson)  [Orabug: 38026089]
  - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (John Garry)  [Orabug: 38026089]
  - xfs: allow sysadmins to specify a maximum atomic write limit at mount time (John Garry)  [Orabug: 38026089]
  - xfs: update atomic write limits (John Garry)  [Orabug: 38026089]
  - xfs: add xfs_calc_atomic_write_unit_max() (John Garry)  [Orabug: 38026089]
  - xfs: add xfs_file_dio_write_atomic() (John Garry)  [Orabug: 38026089]
  - xfs: commit CoW-based atomic writes atomically (John Garry)  [Orabug: 38026089]
  - xfs: add large atomic writes checks in xfs_direct_write_iomap_begin() (John Garry)  [Orabug: 38026089]
  - xfs: add xfs_atomic_write_cow_iomap_begin() (John Garry)  [Orabug: 38026089]
  - xfs: refine atomic write size check in xfs_file_write_iter() (John Garry)  [Orabug: 38026089]
  - xfs: refactor xfs_reflink_end_cow_extent() (John Garry)  [Orabug: 38026089]
  - xfs: allow block allocator to take an alignment hint (John Garry)  [Orabug: 38026089]
  - xfs: ignore HW which cannot atomic write a single block (Darrick J. Wong)  [Orabug: 38026089]
  - xfs: add helpers to compute transaction reservation for finishing intent items (Darrick J. Wong)  [Orabug: 38026089]
  - xfs: add helpers to compute log item overhead (Darrick J. Wong)  [Orabug: 38026089]
  - xfs: separate out setting buftarg atomic writes limits (Darrick J. Wong)  [Orabug: 38026089]
  - xfs: rename xfs_inode_can_atomicwrite() -> xfs_inode_can_hw_atomic_write() (John Garry)  [Orabug: 38026089]
  - xfs: only call xfs_setsize_buftarg once per buffer target (Darrick J. Wong)  [Orabug: 38026089]
  - fs: add atomic write unit max opt to statx (John Garry)  [Orabug: 38026089]
  - xfs: stop using set_blocksize (Darrick J. Wong)  [Orabug: 38026089]
  - block: hoist block size validation code to a separate function (Darrick J. Wong)  [Orabug: 38026089]
  - xfs: cleanup xfs_vn_getattr (Christoph Hellwig)  [Orabug: 38026089]
  - fs: reformat the statx definition (Christoph Hellwig)  [Orabug: 38026089]
  - dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (John Garry)  [Orabug: 38026089]
  - iomap: rework IOMAP atomic flags (John Garry)  [Orabug: 38026089]
  - iomap: comment on atomic write checks in iomap_dio_bio_iter() (John Garry)  [Orabug: 38026089]
  - iomap: inline iomap_dio_bio_opflags() (John Garry)  [Orabug: 38026089]
  - iomap: Lift blocksize restriction on atomic writes (Ritesh Harjani (IBM))  [Orabug: 38026089]
  - iomap: Support SW-based atomic writes (John Garry)  [Orabug: 38026089]
  - iomap: Rename IOMAP_ATOMIC -> IOMAP_ATOMIC_HW (John Garry)  [Orabug: 38026089]
  - iomap: Minor code simplification in iomap_dio_bio_iter() (John Garry)  [Orabug: 38026089]
  - dm-mirror: Support atomic writes (John Garry)  [Orabug: 38026089]
  - dm-io: Warn on creating multiple atomic write bios for a region (John Garry)  [Orabug: 38026089]
  - dm-stripe: Enable atomic writes (John Garry)  [Orabug: 38026089]
  - dm-linear: Enable atomic writes (John Garry)  [Orabug: 38026089]
  - dm: Ensure cloned bio is same length for atomic write (John Garry)  [Orabug: 38026089]
  - dm-table: atomic writes support (John Garry)  [Orabug: 38026089]
  - block: Don't trim an atomic write (John Garry)  [Orabug: 38026089]
  - block: Add common atomic writes enable flag (John Garry)  [Orabug: 38026089]
  - block: Change blk_stack_atomic_writes_limits() unit_min check (John Garry)  [Orabug: 38026089]
  - block: Ensure start sector is aligned for stacking atomic writes (John Garry)  [Orabug: 38026089]
  - md/raid10: Atomic write support (John Garry)  [Orabug: 38026089]
  - md/raid1: Atomic write support (John Garry)  [Orabug: 38026089]
  - md/raid0: Atomic write support (John Garry)  [Orabug: 38026089]
  - block: Support atomic writes limits for stacked devices (John Garry)  [Orabug: 38026089]
  - block: Add extra checks in blk_validate_atomic_write_limits() (John Garry)  [Orabug: 38026089]
  - md/raid10: Handle bio_split() errors (John Garry)  [Orabug: 38026089]
  - md/raid1: Handle bio_split() errors (John Garry)  [Orabug: 38026089]
  - md/raid0: Handle bio_split() errors (John Garry)  [Orabug: 38026089]
  - block: Handle bio_split() errors in bio_submit_split() (John Garry)  [Orabug: 38026089]
  - block: Error an attempt to split an atomic write in bio_split() (John Garry)  [Orabug: 38026089]
  - block: Rework bio_split() return value (John Garry)  [Orabug: 38026089]
  - ext4: Do not fallback to buffered-io for DIO atomic write (Ritesh Harjani (IBM))  [Orabug: 38026089]
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Ritesh Harjani (IBM))  [Orabug: 38026089]
  - ext4: Check for atomic writes support in write iter (Ritesh Harjani (IBM))  [Orabug: 38026089]
  - ext4: Add statx support for atomic writes (Ritesh Harjani (IBM))  [Orabug: 38026089]
  - xfs: Support setting FMODE_CAN_ATOMIC_WRITE (John Garry)  [Orabug: 38026089]
  - xfs: Validate atomic writes (John Garry)  [Orabug: 38026089]
  - xfs: Support atomic write for statx (John Garry)  [Orabug: 38026089]
  - fs: iomap: Atomic write support (John Garry)  [Orabug: 38026089]
  - fs: Export generic_atomic_write_valid() (John Garry)  [Orabug: 38026089]
  - block: Add bdev atomic write limits helpers (John Garry)  [Orabug: 38026089]
  - Revert "SUNRPC: Don't allow waiting for exiting tasks" (Harshvardhan Jha)  [Orabug: 38162684]
  - Revert "Add normal counters" (Boris Ostrovsky)  [Orabug: 38184971]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.4.el9uek]
changelog:
  - PCI/AER: Add sysfs attributes for log ratelimits (Jon Pan-Doh)  [Orabug: 38126943]
  - PCI/AER: Ratelimit correctable and non-fatal error logging (Jon Pan-Doh)  [Orabug: 38126943]
  - PCI/AER: Simplify add_error_device() (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Convert aer_get_device_error_info(), aer_print_error() to index (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Reduce pci_print_aer() correctable error level to KERN_WARNING (Karolina Stolarek)  [Orabug: 38126943]
  - PCI/AER: Check log level once and remember it (Karolina Stolarek)  [Orabug: 38126943]
  - PCI/AER: Trace error event before ratelimiting (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Update statistics before ratelimiting (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Simplify pci_print_aer() (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Initialize aer_err_info before using it (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Move aer_print_source() earlier in file (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Rename aer_print_port_info() to aer_print_source() (Jon Pan-Doh)  [Orabug: 38126943]
  - PCI/AER: Extract bus/dev/fn in aer_print_port_info() with PCI_BUS_NUM(), etc (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Consolidate Error Source ID logging in aer_isr_one_error_type() (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Factor COR/UNCOR error handling out from aer_isr_one_error() (Bjorn Helgaas)  [Orabug: 38126943]
  - PCI/AER: Descope pci_printk() to aer_printk() (Ilpo Järvinen)  [Orabug: 38126943]
  - md/md-bitmap: fix GPF in bitmap_get_stats() (Håkon Bugge)  [Orabug: 38137957]
  - Revert "net/rds: Add krefs to struct rds_connection" (Håkon Bugge)  [Orabug: 38184408]
  - Revert "net/rds: tracepoints for rds_conn_kref_get and put" (Håkon Bugge)  [Orabug: 38184408]
  - sched: Change nr_uninterruptible type to unsigned long (Aruna Ramakrishna)  [Orabug: 38195223]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.5.el9uek]
changelog:
  - uek-rpm: Enable few modules related to various subsystems in UEK8U1 (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Enable more sound related options in UEK8U1 (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Enable few desktop related modules (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Enable few wireless modules in UEK8U1 (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Enable few USB related modules in UEK8U1 (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Add accessibility related modules to UEK8U1 (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: intel: Enable few platform and thermal drivers (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Enable few config options in both Architectures (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Enable SOUND related config options to UEK8 (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Re-sort modules.yaml files as a cleanup (Harshit Mogalapalli)  [Orabug: 37846468]
  - uek-rpm: Run savedefconfig for UEK8U1 (Harshit Mogalapalli)  [Orabug: 37846468]
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju)  [Orabug: 38182989]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.5.1.el9uek]
changelog:
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann)  [Orabug: 38217337]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.33.1.el9uek]
changelog:
  - net/mlx5: Expose ICM consumption per function (Akiva Goldberger) [Orabug: 38063374]
  - net/mlx5: Rename and move mlx5_esw_query_vport_vhca_id (Akiva Goldberger) [Orabug: 38063374]
  - net/mlx5: Add nic_cap_reg and vhca_icm_ctrl registers (Akiva Goldberger) [Orabug: 38063374]
  - mm: memcontrol: remove memcg from LRU on release instead of offline (Harry Yoo) [Orabug: 38092785]
  - net/rds: tracepoints for rds_conn_kref_get and put (Sharath Srinivasan) [Orabug: 38118654]
  - net/rds: Add krefs to struct rds_connection (Sharath Srinivasan) [Orabug: 38118654]
  - net/rds: Add missing switch/break in rds_recv_worker() (Sharath Srinivasan) [Orabug: 38118666]
  - net/rds: Merge uses of conn->c_destroy_in_prog & RDS_DESTROY_PENDING (Sharath Srinivasan) [Orabug: 38118675]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.2.el9uek]
changelog:
  - LTS version: v6.12.36 (Jack Vogel)
  - spi: fsl-qspi: Fix double cleanup in probe error path (Kevin Hao)
  - btrfs: fix use-after-free on inode when scanning root during em shrinking (Sasha Levin) [Orabug: 38180088] {CVE-2025-21879}
  - btrfs: zoned: fix extent range end unlock in cow_file_range() (Naohiro Aota) [Orabug: 38180166] {CVE-2025-21942}
  - spi: fsl-qspi: use devm function instead of driver remove (Han Xu) [Orabug: 37937304] {CVE-2025-37842}
  - net: stmmac: Fix accessing freed irq affinity_hint (Qingfang Deng) [Orabug: 37901643] {CVE-2025-23155}
  - drm/amdkfd: Fix instruction hazard in gfx12 trap handler (Jay Cornwall)
  - drm/amdkfd: remove gfx 12 trap handler page size cap (Jonathan Kim)
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Andres Traumann)
  - arm64: dts: rockchip: Add avdd HDMI supplies to RockPro64 board dtsi (Dragan Simic)
  - riscv/atomic: Do proper sign extension also for unsigned in arch_cmpxchg (Sasha Levin)
  - btrfs: do regular iput instead of delayed iput during extent map shrinking (Filipe Manana)
  - btrfs: make the extent map shrinker run asynchronously as a work queue job (Filipe Manana)
  - btrfs: skip inodes without loaded extent maps when shrinking extent maps (Filipe Manana)
  - drm/fbdev-dma: Add shadow buffering for deferred I/O (Thomas Zimmermann) [Orabug: 37766318] {CVE-2024-58091}
  - drm/msm/dp: account for widebus and yuv420 during mode validation (Sasha Levin)
  - usb: typec: tcpm: PSSourceOffTimer timeout in PR_Swap enters ERROR_RECOVERY (Sasha Levin)
  - drm/xe: Carve out wopcm portion from the stolen memory (Sasha Levin)
  - iio: dac: ad3552r-common: fix ad3541/2r ranges (Angelo Dureghello)
  - iio: dac: ad3552r: extract common code (no changes in behavior intended) (Angelo Dureghello)
  - iio: dac: ad3552r: changes to use FIELD_PREP (Angelo Dureghello)
  - btrfs: do proper folio cleanup when cow_file_range() failed (Qu Wenruo) [Orabug: 37649587] {CVE-2024-57976}
  - net: phy: realtek: add RTL8125D-internal PHY (Heiner Kallweit)
  - net: phy: realtek: merge the drivers for internal NBase-T PHY's (Heiner Kallweit)
  - r8169: add support for RTL8125D (Heiner Kallweit)
  - mm/vma: reset VMA iterator on commit_merge() OOM failure (Lorenzo Stoakes)
  - io_uring/kbuf: flag partial buffer mappings (Jens Axboe)
  - io_uring/net: mark iov as dynamically allocated even for single segments (Jens Axboe)
  - io_uring/net: always use current transfer count for buffer put (Jens Axboe)
  - io_uring/net: only consider msg_inq if larger than 1 (Jens Axboe)
  - io_uring/net: only retry recv bundle for a full transfer (Jens Axboe)
  - io_uring/net: improve recv bundles (Jens Axboe)
  - io_uring/rsrc: don't rely on user vaddr alignment (Pavel Begunkov)
  - io_uring/rsrc: fix folio unpinning (Pavel Begunkov) [Orabug: 38175088] {CVE-2025-38256}
  - io_uring: fix potential page leak in io_sqe_buffer_register() (Penglei Jiang)
  - net: libwx: fix Tx L4 checksum (Jiawen Wu) [Orabug: 37844457] {CVE-2025-22101}
  - x86/pkeys: Simplify PKRU update in signal frame (Chang S. Bae)
  - x86/fpu: Refactor xfeature bitmask update code for sigframe XSAVE (Chang S. Bae)
  - media: uvcvideo: Rollback non processed entities on error (Ricardo Ribalda)
  - drm/amd/display: Fix mpv playback corruption on weston (Alex Hung)
  - drm/amdgpu: switch job hw_fence to amdgpu_fence (Alex Deucher)
  - drm/amdgpu: Fix SDMA UTC_L1 handling during start/stop sequences (Jesse Zhang)
  - drm/i915/dsi: Fix off by one in BXT_MIPI_TRANS_VTOTAL (Ville Syrjälä)
  - drm/xe: Fix early wedge on GuC load failure (Daniele Ceraolo Spurio)
  - drm/xe: Fix taking invalid lock on wedge (Lucas De Marchi) [Orabug: 38253765] {CVE-2025-38353}
  - drm/xe: Fix memset on iomem (Lucas De Marchi)
  - drm/amd/display: Check dce_hwseq before dereferencing it (Alex Hung) [Orabug: 38253789] {CVE-2025-38361}
  - drm/amdgpu: Add kicker device detection (Frank Min)
  - drm/amd/display: Fix RMCM programming seq errors (Yihan Zhu)
  - drm/xe/guc_submit: add back fix (Matthew Auld)
  - drm/xe/sched: stop re-submitting signalled jobs (Matthew Auld)
  - drm/xe/vm: move rebind_work init earlier (Matthew Auld)
  - drm/amd/display: Correct non-OLED pre_T11_delay. (Zhongwei)
  - drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram (John Olender)
  - drm/amd/display: Add null pointer check for get_first_active_display() (Xu Wang) [Orabug: 38253793] {CVE-2025-38362}
  - drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Check return value when getting default PHY config (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix connecting to next bridge (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix phy de-init and flag it so (Aradhya Bhatia)
  - drm/bridge: cdns-dsi: Fix the clock variable for mode_valid() (Aradhya Bhatia)
  - drm/amdkfd: Fix race in GWS queue scheduling (Jay Cornwall)
  - drm/msm/gpu: Fix crash when throttling GPU immediately during boot (Stephan Gerhold) [Orabug: 38253767] {CVE-2025-38354}
  - drm/udl: Unregister device before cleaning up on disconnect (Thomas Zimmermann)
  - drm/tegra: Fix a possible null pointer dereference (Qiu-Ji Chen) [Orabug: 38253799] {CVE-2025-38363}
  - drm/tegra: Assign plane type before registration (Thierry Reding)
  - drm/etnaviv: Protect the scheduler's pending list with its lock (Maíra Canal)
  - drm/cirrus-qemu: Fix pitch programming (Thomas Zimmermann)
  - drm/ast: Fix comment on modeset lock (Thomas Zimmermann)
  - scsi: ufs: core: Fix clk scaling to be conditional in reset and restore (Anvithdosapati)
  - scsi: megaraid_sas: Fix invalid node index (Chen Yu) [Orabug: 38175024] {CVE-2025-38239}
  - HID: wacom: fix kobject reference count leak (Qasim Ijaz)
  - HID: wacom: fix memory leak on sysfs attribute creation failure (Qasim Ijaz)
  - HID: wacom: fix memory leak on kobject creation failure (Qasim Ijaz)
  - HID: lenovo: Restrict F7/9/11 mode to compact keyboards only (Iusico Maxim)
  - f2fs: fix to zero post-eof page (Chao Yu)
  - mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked" (David Hildenbrand)
  - maple_tree: fix MA_STATE_PREALLOC flag in mas_preallocate() (Liam R. Howlett) [Orabug: 38253803] {CVE-2025-38364}
  - net: libwx: fix the creation of page_pool (Jiawen Wu)
  - spi: spi-cadence-quadspi: Fix pm runtime unbalance (Khairul Anuar Romli)
  - btrfs: update superblock's device bytes_used when dropping chunk (Mark Harmstone)
  - btrfs: fix a race between renames and directory logging (Filipe Manana) [Orabug: 38253806] {CVE-2025-38365}
  - dm-raid: fix variable in journal device check (Heinz Mauelshagen)
  - Bluetooth: L2CAP: Fix L2CAP MTU negotiation (Frédéric Danis)
  - serial: imx: Restore original RXTL for console to fix data loss (Fabio Estevam)
  - serial: core: restore of_node information in sysfs (Aidan Stewart)
  - dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive (Yao Zi)
  - staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher() (Nathan Chancellor)
  - x86/traps: Initialize DR6 by writing its architectural reset value (Xin Li)
  - EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs (Avadhut Naik)
  - cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (David Howells)
  - cifs: Fix the smbd_response slab to allow usercopy (David Howells) [Orabug: 38324203] {CVE-2025-38523}
  - smb: client: make use of common smbdirect_socket_parameters (Stefan Metzmacher)
  - smb: smbdirect: introduce smbdirect_socket_parameters (Stefan Metzmacher)
  - smb: client: make use of common smbdirect_socket (Stefan Metzmacher)
  - smb: smbdirect: add smbdirect_socket.h (Stefan Metzmacher)
  - smb: smbdirect: add smbdirect.h with public structures (Stefan Metzmacher)
  - smb: client: make use of common smbdirect_pdu.h (Stefan Metzmacher)
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Stefan Metzmacher)
  - smb: client: fix potential deadlock when reconnecting channels (Paulo Alcantara) [Orabug: 38175038] {CVE-2025-38244}
  - drm/xe: Process deferred GGTT node removals on device unwind (Michal Wajdeczko) [Orabug: 38253772] {CVE-2025-38355}
  - drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type (Jayesh Choudhary)
  - drm/bridge: ti-sn65dsi86: make use of debugfs_init callback (Wolfram Sang)
  - drm/i915: fix build error some more (Arnd Bergmann)
  - drm/amd: Adjust output for discovery error handling (Mario Limonciello)
  - drm/amdgpu/discovery: optionally use fw based ip discovery (Alex Deucher)
  - net: selftests: fix TCP packet checksum (Jakub Kicinski)
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR (Salvatore Bonaccorso)
  - atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). (Kuniyuki Iwashima) [Orabug: 38175041] {CVE-2025-38245}
  - netlink: specs: tc: replace underscores with dashes in names (Jakub Kicinski)
  - net: enetc: Correct endianness handling in _enetc_rd_reg64 (Simon Horman)
  - libbpf: Fix possible use-after-free for externs (Adin Scannell)
  - um: ubd: Add missing error check in start_io_thread() (Tiwei Bie)
  - bnxt: properly flush XDP redirect lists (Yan Zhai) [Orabug: 38175053] {CVE-2025-38246}
  - vsock/uapi: fix linux/vm_sockets.h userspace compilation errors (Stefano Garzarella)
  - wifi: mac80211: finish link init before RCU publish (Johannes Berg)
  - wifi: mac80211: Create separate links for VLAN interfaces (Muna Sinada)
  - wifi: mac80211: Add link iteration macro for link data (Muna Sinada)
  - af_unix: Don't set -ECONNRESET for consumed OOB skb. (Kuniyuki Iwashima)
  - wifi: mac80211: fix beacon interval calculation overflow (Lachlan Hodges)
  - ethernet: ionic: Fix DMA mapping tests (Thomas Fourier)
  - libbpf: Fix null pointer dereference in btf_dump__free on allocation failure (Yuan Chen)
  - attach_recursive_mnt(): do not lock the covering tree when sliding something under it (Al Viro)
  - ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3() (Youngjun Lee) [Orabug: 38175062] {CVE-2025-38249}
  - Bluetooth: hci_core: Fix use-after-free in vhci_flush() (Kuniyuki Iwashima) [Orabug: 38175067] {CVE-2025-38250}
  - atm: clip: prevent NULL deref in clip_push() (Eric Dumazet) [Orabug: 38175076] {CVE-2025-38251}
  - HID: wacom: fix crash in wacom_aes_battery_handler() (Thomas Zeitlhofer) [Orabug: 38175083] {CVE-2025-38253}
  - drm/xe/display: Add check for alloc_ordered_workqueue() (Haoxiang Li)
  - Revert "riscv: misaligned: fix sleeping function called during misaligned access handling" (Nam Cao)
  - Revert "riscv: Define TASK_SIZE_MAX for __access_ok()" (Nam Cao)
  - lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly() (Yu Kuai) [Orabug: 38175086] {CVE-2025-38255}
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (David Hildenbrand)
  - s390/pkey: Prevent overflow in size calculation for memdup_user() (Fedor Pchelkin) [Orabug: 38175090] {CVE-2025-38257}
  - ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15 (Oliver Schramm)
  - mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write (Seongjae Park) [Orabug: 38175095] {CVE-2025-38258}
  - smb: client: remove \t from TP_printk statements (Stefan Metzmacher)
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Niklas Cassel)
  - i2c: robotfuzz-osif: disable zero-length read messages (Wolfram Sang)
  - i2c: tiny-usb: disable zero-length read messages (Wolfram Sang)
  - af_unix: Don't leave consecutive consumed OOB skbs. (Kuniyuki Iwashima) [Orabug: 38175006] {CVE-2025-38236}
  - accel/ivpu: Trigger device recovery on engine reset/resume failure (Karol Wachowski)
  - accel/ivpu: Add debugfs interface for setting HWS priority bands (Karol Wachowski)
  - accel/ivpu: Separate DB ID and CMDQ ID allocations from CMDQ allocation (Karol Wachowski)
  - accel/ivpu: Make command queue ID allocated on XArray (Karol Wachowski)
  - accel/ivpu: Remove copy engine support (Andrzej Kacprowski)
  - accel/ivpu: Do not fail on cmdq if failed to allocate preemption buffers (Karol Wachowski)
  - PCI: apple: Set only available ports up (Janne Grunau)
  - PCI: apple: Use helper function for_each_child_of_node_scoped() (Zhang Zekun)
  - f2fs: don't over-report free space or inodes in statvfs (Chao Yu)
  - ASoC: codecs: wcd9335: Fix missing free of regulator supplies (Krzysztof Kozlowski) [Orabug: 38175097] {CVE-2025-38259}
  - ASoC: codec: wcd9335: Convert to GPIO descriptors (Peng Fan)
  - jfs: validate AG parameters in dbMount() to prevent crashes (Vasiliy Kovalev) [Orabug: 38158699] {CVE-2025-38230}
  - fs/jfs: consolidate sanity checking in dbMount (Dave Kleikamp)
  - btrfs: fix qgroup reservation leak on failure to allocate ordered extent (Filipe Manana)
  - btrfs: use unsigned types for constants defined as bit shifts (David Sterba)
  - btrfs: factor out nocow ordered extent and extent map generation into a helper (Qu Wenruo)
  - Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1" (Joonas Lahtinen)
  - drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1 (Ville Syrjälä)
  - btrfs: handle csum tree error with rescue=ibadroots correctly (Qu Wenruo) [Orabug: 38175101] {CVE-2025-38260}
  - ovl: Check for NULL d_inode() in ovl_dentry_upper() (Kees Cook)
  - scsi: ufs: core: Don't perform UFS clkscaling during host async scan (Ziqi Chen)
  - ceph: fix possible integer overflow in ceph_zero_objects() (Dmitry Kandybka)
  - ASoC: rt1320: fix speaker noise when volume bar is 100% (Shuming Fan)
  - ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock (Mario Limonciello)
  - ALSA: hda: Add new pci id for AMD GPU display HD audio controller (Vijendar Mukunda)
  - ALSA: hda: Ignore unsol events for cards being shut down (Cezary Rojewski)
  - riscv: add a data fence for CMODX in the kernel mode (Andy Chiu)
  - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Michael Grzeschik)
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Jos Wang)
  - usb: gadget: f_hid: wake up readers on disable/unbind (Peter Korsgaard)
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Robert Hodaszi)
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Andy Shevchenko)
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Chance Yang)
  - tty: serial: uartlite: register uart driver in init (Jakub Lewalski) [Orabug: 38175112] {CVE-2025-38262}
  - usb: potential integer overflow in usbg_make_tpg() (Chen Yufeng)
  - misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe() (Chenyuan Yang) [Orabug: 38253811] {CVE-2025-38368}
  - iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos (Purva Yeshi)
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Michael Grzeschik)
  - coresight: Only check bottom two claim bits (James Clark)
  - 8250: microchip: pci1xxxx: Add PCIe Hot reset disable support for Rev C0 and later devices (Rengarajan S)
  - um: use proper care when taking mmap lock during segfault (Benjamin Berg)
  - um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h (Sami Tolvanen)
  - iio: pressure: zpa2326: Use aligned_s64 for the timestamp (Jonathan Cameron)
  - drm/scheduler: signal scheduled fence when kill job (Lin Cao) [Orabug: 38254074] {CVE-2025-38436}
  - drm/amdgpu: seq64 memory unmap uses uninterruptible lock (Philip Yang)
  - bcache: fix NULL pointer in cache_set_flush() (Linggang Zeng) [Orabug: 38175118] {CVE-2025-38263}
  - amd/amdkfd: fix a kfd_process ref leak (Yifan Zhang)
  - md/md-bitmap: fix dm-raid max_write_behind setting (Yu Kuai)
  - nvme-tcp: sanitize request list handling (Hannes Reinecke) [Orabug: 38175125] {CVE-2025-38264}
  - nvme-tcp: fix I/O stalls on congested sockets (Hannes Reinecke)
  - PCI: imx6: Add workaround for errata ERR051624 (Richard Zhu)
  - PCI: apple: Fix missing OF node reference in apple_pcie_setup_port (Hector Martin)
  - PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane (Wenbin Yao)
  - dmaengine: xilinx_dma: Set dma_device directions (Thomas Gessler)
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Yi Sun) [Orabug: 38253813] {CVE-2025-38369}
  - rust: arm: fix unknown (to Clang) argument '-mno-fdpic' (Rudraksha Gupta)
  - rust: module: place cleanup_module() in .exit.text section (Fujita Tomonori)
  - ksmbd: provide zero as a unique ID to the Mac client (Namjae Jeon)
  - ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension (Namjae Jeon)
  - hwmon: (pmbus/max34440) Fix support for max34451 (Alexis Czezar Torreno)
  - NFSv4: xattr handlers should check for absent nfs filehandles (Scott Mayhew)
  - cxl/region: Add a dev_err() on missing target list entries (Robert Richter)
  - fuse: fix race between concurrent setattrs from multiple nodes (Guang Yuan Wu)
  - leds: multicolor: Fix intensity setting while SW blinking (Sven Schwermer)
  - dm vdo indexer: don't read request structure after enqueuing (Matthew Sakai)
  - sunrpc: don't immediately retransmit on seqno miss (Nikhil Jha)
  - mfd: max14577: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - mailbox: Not protect module_put with spin_lock_irqsave (Peng Fan)
  - NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Sagi Grimberg)
  - NFSv4.2: fix listxattr to return selinux security label (Olga Kornievskaia)
  - NFSv4: Always set NLINK even if the server doesn't support it (Han Young)
  - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode (Pali Rohár)
  - cifs: Fix cifs_query_path_info() for Windows NT servers (Pali Rohár)
  - cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Pali Rohár)
  - LTS version: v6.12.35 (Jack Vogel)
  - bpftool: Fix cgroup command to only show cgroup bpf programs (Martin Kafai Lau)
  - cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function (Pali Rohár)
  - gpio: mlxbf3: only get IRQ for device instance 0 (David Thompson)
  - perf test: Directory file descriptor leak (Ian Rogers)
  - perf evsel: Missed close() when probing hybrid core PMUs (Ian Rogers)
  - gpio: pca953x: fix wrong error probe return value (Sascha Hauer)
  - RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs (Anup Patel)
  - RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls (Anup Patel)
  - scsi: elx: efct: Fix memory leak in efct_hw_parse_filter() (Vitaliy Shevtsov)
  - arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() (Tengda Wu) [Orabug: 38180594] {CVE-2025-38320}
  - perf/core: Fix WARN in perf_cgroup_switch() (Luo Gengkun)
  - perf: Fix cgroup state vs ERROR (Peter Zijlstra)
  - perf: Fix sample vs do_exit() (Peter Zijlstra) [Orabug: 38254028] {CVE-2025-38424}
  - s390/pci: Fix __pcilg_mio_inuser() inline assembly (Heiko Carstens)
  - smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Stefan Metzmacher) [Orabug: 38158402] {CVE-2025-38179}
  - smb: client: fix first command failure during re-negotiation (Zhangjian)
  - serial: sh-sci: Increment the runtime usage counter for the earlycon device (Claudiu Beznea)
  - serial: sh-sci: Clean sci_ports[0] after at earlycon exit (Claudiu Beznea)
  - smb: Log an error when close_all_cached_dirs fails (Paul Aurich) [Orabug: 38180601] {CVE-2025-38321}
  - dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties (Akhil R)
  - EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh (Avadhut Naik)
  - net: atm: fix /proc/net/atm/lec handling (Eric Dumazet) [Orabug: 38158404] {CVE-2025-38180}
  - net: atm: add lec_mutex (Eric Dumazet) [Orabug: 38180610] {CVE-2025-38323}
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson)
  - calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). (Kuniyuki Iwashima) [Orabug: 38158411] {CVE-2025-38181}
  - drm/xe/bmg: Update Wa_16023588340 (Vinay Belgaumkar)
  - drm/xe/gt: Update handling of xe_force_wake_get return (Himal Prasad Ghimiray)
  - drm/xe: Wire up device shutdown handler (Maarten Lankhorst)
  - ublk: santizize the arguments from userspace when adding a device (Ronnie Sahlberg) [Orabug: 38158417] {CVE-2025-38182}
  - net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get() (Alexey Kodanev) [Orabug: 38158420] {CVE-2025-38183}
  - eth: fbnic: avoid double free when failing to DMA-map FW msg (Jakub Kicinski) [Orabug: 38180727] {CVE-2025-38341}
  - tcp: fix passive TFO socket having invalid NAPI ID (David Wei)
  - tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (Haixia Qu) [Orabug: 38158423] {CVE-2025-38184}
  - tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior (Neal Cardwell)
  - atm: atmtcp: Free invalid length skb in atmtcp_c_send(). (Kuniyuki Iwashima) [Orabug: 38158430] {CVE-2025-38185}
  - mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu(). (Kuniyuki Iwashima) [Orabug: 38180616] {CVE-2025-38324}
  - wifi: carl9170: do not ping device which has failed to load firmware (Dmitry Antipov) [Orabug: 38254009] {CVE-2025-38420}
  - ptp: allow reading of currently dialed frequency to succeed on free-running clocks (Vladimir Oltean)
  - ptp: fix breakage after ptp_vclock_in_use() rework (Vladimir Oltean)
  - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Pavan Chebbi)
  - bnxt_en: Add a helper function to configure MRU and RSS (Pavan Chebbi)
  - eth: bnxt: fix out-of-range access of vnic_info array (Taehee Yoo) [Orabug: 37844650] {CVE-2025-22112}
  - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Kalesh Ap) [Orabug: 38158439] {CVE-2025-38186}
  - net: netmem: fix skb_ensure_writable with unreadable skbs (Mina Almasry)
  - ksmbd: add free_transport ops in ksmbd connection (Namjae Jeon) [Orabug: 38180823] {CVE-2025-38325}
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Chuyi Zhou)
  - e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13 (Vitaly Lifshits)
  - ice: fix eswitch code memory leak in reset scenario (Grzegorz Nitka) [Orabug: 38253997] {CVE-2025-38417}
  - net: ice: Perform accurate aRFS flow match (Krishna Kumar)
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jens Axboe)
  - aoe: clean device rq_list in aoedev_downdev() (Justin Sanders) [Orabug: 38180626] {CVE-2025-38326}
  - pldmfw: Select CRC32 when PLDMFW is selected (Simon Horman)
  - hwmon: (ltc4282) avoid repeated register write (Nuno Sa)
  - hwmon: (occ) fix unaligned accesses (Arnd Bergmann)
  - hwmon: (occ) Rework attribute registration for stack usage (Arnd Bergmann)
  - drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled (Tzung-Bi Shih)
  - drm/nouveau/bl: increase buffer size to avoid truncate warning (Jacob Keller)
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Brett Creeley)
  - drm/ssd130x: fix ssd132x_clear_screen() columns (John Keeping)
  - drm/msm/a7xx: Call CP_RESET_CONTEXT_STATE (Connor Abbott) [Orabug: 38158445] {CVE-2025-38188}
  - drm/msm: Fix CP_RESET_CONTEXT_STATE bitfield names (Connor Abbott)
  - drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate (Krzysztof Kozlowski)
  - drm/msm/disp: Correct porch timing for SDM845 (James A. MacInnes)
  - smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels (Bharath Sm)
  - ipv6: replace ipcm6_init calls with ipcm6_init_sk (Willem de Bruijn) [Orabug: 38175246]
  - ipv6: remove leftover ip6 cookie initializer (Willem de Bruijn) [Orabug: 38175246]
  - x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c (Nathan Chancellor)
  - Kunit to check the longest symbol length (Sergio González Collado)
  - drm/v3d: Avoid NULL pointer dereference in `v3d_job_update_stats()` (Maíra Canal) [Orabug: 38158447] {CVE-2025-38189}
  - nfsd: use threads array as-is in netlink interface (Jeff Layton)
  - erofs: remove unused trace event erofs_destroy_inode (Gao Xiang)
  - bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE (Paul Chaignon)
  - net: Fix checksum update for ILA adj-transport (Paul Chaignon)
  - rust: compile libcore with edition 2024 for 1.87+ (Gary Guo)
  - kbuild: rust: add rustc-min-version support function (Miguel Ojeda)
  - drm/amdgpu: read back register after written for VCN v4.0.5 (David (Ming Qiang) Wu)
  - mm/hugetlb: unshare page tables during VMA split, not before (Jann Horn) [Orabug: 38132168] {CVE-2025-38084}
  - iio: accel: fxls8962af: Fix temperature calculation (Sean Nyekjaer)
  - ALSA: hda/realtek: Add quirk for Asus GU605C (Richard Fitzgerald)
  - ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X513EA (Chris Chiu)
  - ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged (Jonathan Lane)
  - ALSA: hda/realtek - Add mute LED support for HP Victus 16-s1xxx and HP Victus 15-fa1xxx (Edip Hazuri)
  - ALSA: hda/intel: Add Thinkpad E15 to PM deny list (Takashi Iwai)
  - ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card (Wangdicheng)
  - arm64: Restrict pagetable teardown to avoid false warning (Dev Jain)
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [Orabug: 37844643] {CVE-2025-22119}
  - wifi: ath12k: Clear affinity hint before calling ath12k_pci_free_irq() in error path (Manivannan Sadhasivam) [Orabug: 37844541] {CVE-2025-22128}
  - Input: sparcspkr - avoid unannotated fall-through (Yuli Wang)
  - cpufreq/amd-pstate: Add missing NULL ptr check in amd_pstate_update (Dhananjay Ugwekar) [Orabug: 37844700] {CVE-2025-23137}
  - wifi: rtw89: phy: add dummy C2H event handler for report of TAS power (Ping-Ke Shih)
  - atm: Revert atm_account_tx() if copy_from_iter_full() fails. (Kuniyuki Iwashima) [Orabug: 38158456] {CVE-2025-38190}
  - sched_ext, sched/core: Don't call scx_group_set_weight() prematurely from sched_create_group() (Tejun Heo)
  - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (Srinivas Pandruvada)
  - selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len (Stephen Smalley)
  - platform/x86: ideapad-laptop: use usleep_range() for EC polling (Rongrong)
  - ksmbd: fix null pointer dereference in destroy_previous_session (Namjae Jeon) [Orabug: 38158463] {CVE-2025-38191}
  - selftests/x86: Add a test to detect infinite SIGTRAP handler loop (Xin Li)
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Kai Huang)
  - udmabuf: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - mm: close theoretical race where stale TLB entries could linger (Ryan Roberts)
  - net: clear the dst when changing skb protocol (Jakub Kicinski) [Orabug: 38158470] {CVE-2025-38192}
  - net_sched: sch_sfq: reject invalid perturb period (Eric Dumazet) [Orabug: 38158475] {CVE-2025-38193}
  - nvme: always punt polled uring_cmd end_io work to task_work (Jens Axboe)
  - scsi: s390: zfcp: Ensure synchronous unit_add (Peter Oberparleiter)
  - scsi: storvsc: Increase the timeouts to storvsc_timeout (Dexuan Cui)
  - smb: improve directory cache reuse for readdir operations (Bharath Sm)
  - cifs: do not disable interface polling on failure (Shyam Prasad N)
  - cifs: serialize other channels when query server interfaces is pending (Shyam Prasad N)
  - cifs: deal with the channel loading lag while picking channels (Shyam Prasad N)
  - jffs2: check jffs2_prealloc_raw_node_refs() result in few other places (Fedor Pchelkin) [Orabug: 38180634] {CVE-2025-38328}
  - jffs2: check that raw node were preallocated before writing summary (Artem Sadovnikov) [Orabug: 38158482] {CVE-2025-38194}
  - LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset() (Tianyang Zhang) [Orabug: 38158775] {CVE-2025-38195}
  - LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg (Huacai Chen)
  - LoongArch: vDSO: Correctly use asm parameters in syscall wrappers (Thomas Weißschuh)
  - platform/loongarch: laptop: Add backlight power control support (Yao Zi)
  - platform/loongarch: laptop: Unregister generic_sub_drivers on exit (Yao Zi)
  - platform/loongarch: laptop: Get brightness setting from EC on probe (Yao Zi)
  - drivers/rapidio/rio_cm.c: prevent possible heap overwrite (Andrew Morton) [Orabug: 38137452] {CVE-2025-38090}
  - io_uring: fix task leak issue in io_wq_create() (Penglei Jiang)
  - io_uring/kbuf: don't truncate end buffer for multiple buffer peeks (Jens Axboe)
  - powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery (Narayana Murty N)
  - powerpc/vdso: Fix build of VDSO32 with pcrel (Christophe Leroy)
  - platform/x86: dell_rbu: Stop overwriting data buffer (Stuart Hayes)
  - platform/x86: dell_rbu: Fix list usage (Stuart Hayes) [Orabug: 38158493] {CVE-2025-38197}
  - platform/x86/amd: pmf: Prevent amd_pmf_tee_deinit() from running twice (Mario Limonciello)
  - platform/x86/amd: pmc: Clear metrics table at start of cycle (Mario Limonciello)
  - fs/xattr.c: fix simple_xattr_list() (Stephen Smalley)
  - Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first" (Alexander Sverdlin)
  - tee: Prevent size calculation wraparound on 32-bit kernels (Jann Horn)
  - ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY (Sukrut Bellary)
  - bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value (Laurentiu Tudor)
  - watchdog: da9052_wdt: respect TWDMIN (Marcus Folkesson)
  - fbcon: Make sure modelist not set on unregistered console (Kees Cook) [Orabug: 38158496] {CVE-2025-38198}
  - net/mlx5: HWS, Harden IP version definer checks (Vlad Dogaru)
  - wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz (Suraj P Kizhakkethil)
  - wifi: ath12k: fix incorrect CE addresses (Balamurugan S)
  - wifi: ath12k: fix link valid field initialization in the monitor Rx (Hari Chandrakanthan)
  - wifi: ath11k: determine PM policy based on machine model (Baochen Qiang)
  - octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer() (Xu Wang)
  - net: ethernet: cortina: Use TOE/TSO on all TCP (Linus Walleij) [Orabug: 38180658] {CVE-2025-38331}
  - bpf, sockmap: Fix data lost during EAGAIN retries (Jiayuan Chen)
  - f2fs: fix to set atomic write status more clear (Chao Yu)
  - usbnet: asix AX88772: leave the carrier control to phylink (Krzysztof Hałasa)
  - ice: fix check for existing switch rule (Mateusz Pacuszka)
  - RDMA/hns: initialize db in update_srq_db() (Chen Linxuan)
  - ixgbe: Fix unreachable retry logic in combined and byte I2C write functions (Rand Deeb)
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Kyungwook Boo) [Orabug: 38158516] {CVE-2025-38200}
  - sock: Correct error checking condition for (assign|release)_proto_idx() (Zijun Hu)
  - scsi: lpfc: Use memcpy() for BIOS version (Daniel Wagner) [Orabug: 38180666] {CVE-2025-38332}
  - wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping (Aditya Kumar Singh)
  - pinctrl: mcp23s08: Reset all pins to input at probe (Mike Looijmans)
  - isofs: fix Y2038 and Y2156 issues in Rock Ridge TF entry (Jonas 'Sortie' Termansen)
  - software node: Correct a OOB check in software_node_get_reference_args() (Zijun Hu) [Orabug: 38180729] {CVE-2025-38342}
  - net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER (Michael Walle)
  - wifi: ath12k: using msdu end descriptor to check for rx multicast packets (Sarika Sharma)
  - bnxt_en: Remove unused field "ref_count" in struct bnxt_ulp (Kalesh Ap)
  - vxlan: Do not treat dst cache initialization errors as fatal (Ido Schimmel)
  - net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions (Yong Wang)
  - net: bridge: mcast: update multicast contex when vlan state is changed (Yong Wang)
  - wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0 (Víctor Gonzalo)
  - Revert "mac80211: Dynamically set CoDel parameters per station" (Toke Høiland-Jørgensen)
  - wifi: mac80211: VLAN traffic in multicast path (Muna Sinada)
  - bpf: Use proper type to calculate bpf_raw_tp_null_args.mask index (Shung-Hsi Yu)
  - net/mlx5: HWS, Fix IP version decision (Vlad Dogaru)
  - netdevsim: Mark NAPI ID on skb in nsim_rcv (Joe Damato)
  - wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled (Edward Adam Davis)
  - wifi: rtw89: 8922a: fix TX fail with wrong VCO setting (Kuan-Chung Chen)
  - wifi: iwlwifi: pcie: make sure to lock rxq->read (Miri Korenblit)
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Sean Christopherson)
  - scsi: smartpqi: Add new PCI IDs (David Strahan)
  - scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands (Justin Tee)
  - libbpf: Add identical pointer detection to btf_dedup_is_equiv() (Alan Maguire)
  - netfilter: nft_set_pipapo: clamp maximum map bucket size to INT_MAX (Pablo Neira Ayuso) [Orabug: 38158525] {CVE-2025-38201}
  - f2fs: fix to bail out in get_new_segment() (Chao Yu) [Orabug: 38180672] {CVE-2025-38333}
  - wifi: iwlwifi: mvm: fix beacon CCK flag (Johannes Berg)
  - hid-asus: check ROG Ally MCU version and warn (Luke D. Jones)
  - clk: rockchip: rk3036: mark ddrphy as critical (Heiko Stuebner)
  - wifi: mac80211: do not offer a mesh path if forwarding is disabled (Benjamin Berg)
  - wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn() (Salah Triki)
  - net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi (Stefan Wahren)
  - net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info (Jason Xing)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get() (Gabor Juhos)
  - libbpf: Check bpf_map_skeleton link for NULL (Mykyta Yatsenko)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction() (Gabor Juhos)
  - net: stmmac: generate software timestamp just before the doorbell (Jason Xing)
  - bpf: Pass the same orig_call value to trampoline functions (Ilya Leoshkevich)
  - pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction() (Gabor Juhos)
  - pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name() (Gabor Juhos)
  - net: atlantic: generate software timestamp just before the doorbell (Jason Xing)
  - xfrm: validate assignment of maximal possible SEQ number (Leon Romanovsky)
  - net: page_pool: Don't recycle into cache on PREEMPT_RT (Sebastian Andrzej Siewior)
  - ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT (Sebastian Andrzej Siewior)
  - x86/sgx: Prevent attempts to reclaim poisoned pages (Andrew Zaborowski) [Orabug: 38180683] {CVE-2025-38334}
  - tcp: add receive queue awareness in tcp_rcv_space_adjust() (Eric Dumazet)
  - tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows (Eric Dumazet)
  - tcp: remove zero TCP TS samples for autotuning (Eric Dumazet)
  - tcp: always seek for minimal rtt in tcp_rcv_rtt_update() (Eric Dumazet)
  - wifi: rtw89: leave idle mode when setting WEP encryption for AP mode (Dian-Syuan Yang)
  - iommu/amd: Allow matching ACPI HID devices without matching UIDs (Mario Limonciello)
  - wifi: ath11k: Fix QMI memory reuse logic (Muhammad Usama Anjum)
  - wifi: ath12k: fix a possible dead lock caused by ab->base_lock (Baochen Qiang)
  - wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET (Kang Yang)
  - net: dlink: add synchronization for stats update (Moon Yeounsu)
  - clk: qcom: gcc-x1e80100: Set FORCE MEM CORE for UFS clocks (Taniya Das)
  - i2c: npcm: Add clock toggle recovery (Tali Perry)
  - i2c: tegra: check msg length in SMBUS block read (Akhil R) [Orabug: 38254037] {CVE-2025-38425}
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mike Tipton)
  - libbpf/btf: Fix string handling to support multi-split BTF (Alan Maguire)
  - sctp: Do not wake readers in __sctp_write_space() (Petr Malat)
  - wifi: mac80211: validate SCAN_FLAG_AP in scan request during MLO (Aditya Kumar Singh)
  - wifi: mt76: mt7925: introduce thermal protection (Leon Yen)
  - wifi: mt76: mt7921: add 160 MHz AP for mt7922 device (Samuel Williams)
  - wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R (Henk Vergonet)
  - Bluetooth: btusb: Add new VID/PID 13d3/3630 for MT7925 (Jiande Lu)
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Alok Tiwari)
  - wifi: mt76: mt7996: drop fragments with multicast or broadcast RA (Benjamin Lin) [Orabug: 38180737] {CVE-2025-38343}
  - i2c: designware: Invoke runtime suspend on quick slave re-registration (Tan En De)
  - Bluetooth: btusb: Add new VID/PID 13d3/3584 for MT7922 (Liwei Sun)
  - bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem() (Hou Tao) [Orabug: 38158533] {CVE-2025-38202}
  - f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx (Chao Yu)
  - tipc: use kfree_sensitive() for aead cleanup (Zilin Guan)
  - net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices (Rengarajan S) [Orabug: 38254019] {CVE-2025-38422}
  - net: macb: Check return value of dma_set_mask_and_coherent() (Sergio Perez Gonzalez)
  - ACPI: battery: negate current when discharging (Peter Marheine)
  - power: supply: max17040: adjust thermal channel scaling (Svyatoslav Ryhel)
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Charan Teja Kalla)
  - gpiolib: of: Add polarity quirk for s5m8767 (Peng Fan)
  - Make 'cc-option' work correctly for the -Wno-xyzzy pattern (Linus Torvalds)
  - ASoC: tegra210_ahub: Add check to of_device_get_match_data() (Yuanjun Gong)
  - platform-msi: Add msi_remove_device_irq_domain() in platform_device_msi_free_irqs_all() (Frank Li)
  - ACPICA: utilities: Fix overflow check in vsnprintf() (Philip Redkin)
  - pmdomain: core: Reset genpd->states to avoid freeing invalid data (Ulf Hansson)
  - power: supply: bq27xxx: Retrieve again when busy (Jerry Lv)
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Acer Helios laptops (Stefan Binding)
  - ACPICA: Apply pack(1) to union aml_resource (Tamir Duberstein)
  - ACPICA: fix acpi parse and parseext cache leaks (Seunghun Han) [Orabug: 38180746] {CVE-2025-38344}
  - ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case (Mario Limonciello)
  - ACPI: bus: Bail out if acpi_kobj registration fails (Armin Wolf)
  - ASoC: intel/sdw_utils: Assign initial value in asoc_sdw_rt_amp_spk_rtd_init() (I Hsin Cheng)
  - ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change (Hector Martin)
  - ACPICA: Avoid sequence overread in call to strncmp() (Ahmed Salem)
  - mmc: Add quirk to disable DDR50 tuning (Erick Shepherd)
  - power: supply: collie: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - clocksource: Fix the CPUs' choice in the watchdog per CPU verification (Guilherme G. Piccoli)
  - ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9 (Talhah Peerbhai)
  - ACPICA: fix acpi operand cache leak in dswstate.c (Seunghun Han) [Orabug: 38180753] {CVE-2025-38345}
  - iio: adc: ad7606_spi: fix reg write value mask (David Lechner)
  - iio: adc: ti-ads1298: Kconfig: add kfifo dependency to fix module build (Arthur-Prince)
  - iio: adc: ad7944: mask high bits on direct read (David Lechner)
  - iio: imu: inv_icm42600: Fix temperature calculation (Sean Nyekjaer)
  - mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Jann Horn) [Orabug: 38132179] {CVE-2025-38085}
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Thomas Zimmermann)
  - accel/ivpu: Fix warning in ivpu_gem_bo_free() (Jacek Lawrynowicz)
  - accel/ivpu: Use dma_resv_lock() instead of a custom mutex (Jacek Lawrynowicz)
  - accel/ivpu: Use firmware names from upstream repo (Jacek Lawrynowicz)
  - accel/ivpu: Improve buffer object logging (Jacek Lawrynowicz)
  - iio: accel: fxls8962af: Fix temperature scan element sign (Sean Nyekjaer)
  - PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit() (Diederik de Haas)
  - PCI: dw-rockchip: Remove PCIE_L0S_ENTRY check from rockchip_pcie_link_up() (Shawn Lin)
  - PCI: Fix lock symmetry in pci_slot_unlock() (Ilpo Järvinen)
  - PCI: Add ACS quirk for Loongson PCIe (Huacai Chen)
  - PCI: dwc: ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)
  - PCI: cadence-ep: Correct PBA offset in .set_msix() callback (Niklas Cassel)
  - uio_hv_generic: Align ring size to system page (Long Li)
  - uio_hv_generic: Use correct size for interrupt and monitor pages (Long Li)
  - Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary (Long Li)
  - smb: client: add NULL check in automount_fullpath (Ruben Devos) [Orabug: 38158578] {CVE-2025-38208}
  - cifs: dns resolution is needed only for primary channel (Shyam Prasad N)
  - cifs: update dstaddr whenever channel iface is updated (Shyam Prasad N)
  - cifs: reset connections for all channels when reconnect requested (Shyam Prasad N)
  - remoteproc: k3-m4: Don't assert reset in detach routine (Beleswar Padhi)
  - remoteproc: core: Release rproc->clean_table after rproc_attach() fails (Xiaolei Wang) [Orabug: 38254000] {CVE-2025-38418}
  - remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach() (Xiaolei Wang) [Orabug: 38254005] {CVE-2025-38419}
  - regulator: max14577: Add error check for max14577_read_reg() (Xu Wang)
  - ovl: Fix nested backing file paths (André Almeida)
  - mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS (Khem Raj)
  - staging: iio: ad5933: Correct settling cycles encoding per datasheet (Gabriel)
  - pwm: axi-pwmgen: fix missing separate external clock (David Lechner)
  - video: screen_info: Relocate framebuffers behind PCI bridges (Thomas Zimmermann) [Orabug: 38254049] {CVE-2025-38427}
  - sysfb: Fix screen_info type check for VGA (Thomas Zimmermann)
  - KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY (Lorenzo Stoakes)
  - net: ch9200: fix uninitialised access during mii_nway_restart (Qasim Ijaz) [Orabug: 38132187] {CVE-2025-38086}
  - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Xu Yang)
  - dm: lock limits when reading them (Mikulas Patocka)
  - ftrace: Fix UAF when lookup kallsym after ftrace disabled (Ye Bin) [Orabug: 38180766] {CVE-2025-38346}
  - mtd: rawnand: qcom: Fix read len for onfi param page (Md Sadre Alam)
  - dm-verity: fix a memory leak if some arguments are specified multiple times (Mikulas Patocka)
  - dm-mirror: fix a tiny race condition (Mikulas Patocka)
  - KVM: VMX: Flush shadow VMCS on emergency reboot (Chao Gao)
  - KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs (Yosry Ahmed)
  - mtd: nand: sunxi: Add randomizer configuration before randomizer enable (Xu Wang)
  - mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk (Xu Wang)
  - firmware: arm_scmi: Ensure that the message-id supports fastchannel (Sibi Sankar)
  - configfs-tsm-report: Fix NULL dereference of tsm_ops (Dan Williams) [Orabug: 38158587] {CVE-2025-38210}
  - soc: qcom: pmic_glink_altmode: fix spurious DP hotplug events (Johan Hovold)
  - mm: fix ratelimit_pages update error in dirty_ratio_handler() (Jinliang Zheng)
  - RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (Shin'Ichiro Kawasaki) [Orabug: 38158590] {CVE-2025-38211}
  - watchdog: fix watchdog may detect false positive of softlockup (Luo Gengkun)
  - ipc: fix to protect IPCS lookups using RCU (Jeongjun Park) [Orabug: 38158596] {CVE-2025-38212}
  - clk: meson-g12a: add missing fclk_div2 to spicc (Da Xue)
  - parisc: fix building with gcc-15 (Arnd Bergmann)
  - vgacon: Add check for vc_origin address range in vgacon_scroll() (Gong, Ruiqi)
  - parisc/unaligned: Fix hex output to show 8 hex chars (Helge Deller)
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [Orabug: 38158613] {CVE-2025-38214}
  - EDAC/altera: Use correct write width with the INTTEST register (Niravkumar L Rabara)
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Murad Masimov) [Orabug: 38158624] {CVE-2025-38215}
  - iommu/vt-d: Restore context entry setup order for aliased devices (Lu Baolu) [Orabug: 38158633] {CVE-2025-38216}
  - net: ftgmac100: select FIXED_PHY (Heiner Kallweit)
  - net/sched: fix use-after-free in taprio_dev_notifier (Hyunwoo Kim) [Orabug: 38137441] {CVE-2025-38087}
  - NFC: nci: uart: Set tty->disc_data only in success path (Krzysztof Kozlowski) [Orabug: 38253990] {CVE-2025-38416}
  - hwmon: (ftsteutates) Fix TOCTOU race in fts_read() (Gui-Dong Han) [Orabug: 38158635] {CVE-2025-38217}
  - f2fs: fix to do sanity check on sit_bitmap_size (Chao Yu) [Orabug: 38158638] {CVE-2025-38218}
  - f2fs: prevent kernel warning due to negative i_nlink from corrupted image (Jaegeuk Kim) [Orabug: 38158646] {CVE-2025-38219}
  - f2fs: fix to do sanity check on ino and xnid (Chao Yu) [Orabug: 38180772] {CVE-2025-38347}
  - Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer() (Gatien Chevallier)
  - Input: ims-pcu - check record size in ims_pcu_flash_firmware() (Dan Carpenter) [Orabug: 38254052] {CVE-2025-38428}
  - ext4: only dirty folios when data journaling regular files (Brian Foster) [Orabug: 38158657] {CVE-2025-38220}
  - ext4: ensure i_size is smaller than maxbytes (Zhang Yi)
  - ext4: factor out ext4_get_maxbytes() (Zhang Yi)
  - ext4: fix calculation of credits for extent tree modification (Jan Kara)
  - ext4: inline: fix len overflow in ext4_prepare_inline_data (Thadeu Lima de Souza Cascardo) [Orabug: 38158660] {CVE-2025-38222}
  - bus: fsl-mc: fix GET/SET_TAILDROP command ids (Wan Junjie)
  - bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device (Ioana Ciornei)
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Mikko Korhonen)
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Niklas Cassel)
  - ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330 (Tasos Sahanidis) [Orabug: 38180695] {CVE-2025-38336}
  - bus: firewall: Fix missing static inline annotations for stubs (Krzysztof Kozlowski)
  - cgroup,freezer: fix incomplete freezing when attaching tasks (Chen Ridong)
  - ceph: set superblock s_magic for IMA fsmagic matching (Dennis Marttinen)
  - ceph: avoid kernel BUG for encrypted inode with unaligned file size (Viacheslav Dubeyko) [Orabug: 38158671] {CVE-2025-38223}
  - can: tcan4x5x: fix power regulator retrieval during probe (Brett Werling)
  - can: kvaser_pciefd: refine error prone echo_skb_max handling logic (Fedor Pchelkin) [Orabug: 38158777] {CVE-2025-38224}
  - bus: mhi: host: Fix conflict between power_up and SYSERR (Jeffrey Hugo)
  - bus: mhi: ep: Update read pointer only after buffer is written (Sumit Kumar) [Orabug: 38254058] {CVE-2025-38429}
  - block: Clear BIO_EMULATES_ZONE_APPEND flag on BIO completion (Damien Le Moal)
  - ASoC: codecs: wcd937x: Drop unused buck_supply (Krzysztof Kozlowski)
  - ASoC: codecs: wcd9375: Fix double free of regulator supplies (Krzysztof Kozlowski) [Orabug: 38254026] {CVE-2025-38423}
  - ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4 (Andreas Kemnade)
  - ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap() (Ross Stutterheim)
  - arm64/mm: Close theoretical race where stale TLB entry remains valid (Ryan Roberts)
  - media: uvcvideo: Fix deferred probing error (Ricardo Ribalda)
  - media: uvcvideo: Send control events for partial succeeds (Ricardo Ribalda)
  - media: uvcvideo: Return the number of processed controls (Ricardo Ribalda)
  - media: imx-jpeg: Cleanup after an allocation error (Ming Qian) [Orabug: 38158675] {CVE-2025-38225}
  - media: imx-jpeg: Reset slot data pointers when freed (Ming Qian)
  - media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead (Ming Qian)
  - media: imx-jpeg: Drop the first error frames (Ming Qian)
  - media: vivid: Change the siize of the composing (Denis Arefev) [Orabug: 38158679] {CVE-2025-38226}
  - media: vidtv: Terminating the subsequent process of initialization failure (Edward Adam Davis) [Orabug: 38158684] {CVE-2025-38227}
  - media: videobuf2: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: venus: Fix probe error handling (Loic Poulain)
  - media: v4l2-dev: fix error handling in __video_register_device() (Ma Ke)
  - media: omap3isp: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - media: mediatek: vcodec: Correct vsi_core framebuffer size (Fei Shao)
  - media: ipu6: Remove workaround for Meteor Lake ES2 (Hao Yao)
  - media: intel/ipu6: Fix dma mask for non-secure mode (Stanislaw Gruszka)
  - media: imagination: fix a potential memory leak in e5010_probe() (Haoxiang Li) [Orabug: 38158688] {CVE-2025-38228}
  - media: i2c: imx335: Fix frame size enumeration (Kieran Bingham)
  - media: gspca: Add error handling for stv06xx_read_sensor() (Xu Wang)
  - media: davinci: vpif: Fix memory leak in probe error path (Dmitry Nikiforov)
  - media: cxusb: no longer judge rbuf when the write fails (Edward Adam Davis) [Orabug: 38158690] {CVE-2025-38229}
  - media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case (Sakari Ailus)
  - media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div (Sakari Ailus)
  - media: ccs-pll: Start OP pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: ov2740: Move pm-runtime cleanup on probe-errors to proper place (Hans de Goede)
  - media: ccs-pll: Start VT pre-PLL multiplier search from correct value (Sakari Ailus)
  - media: i2c: ds90ub913: Fix returned fmt from .set_fmt() (Tomi Valkeinen)
  - media: nxp: imx8-isi: better handle the m2m usage_count (Laurentiu Palcu)
  - media: imx335: Use correct register width for HNUM (Umang Jain)
  - media: ov5675: suppress probe deferral errors (Johan Hovold)
  - media: ov8856: suppress probe deferral errors (Johan Hovold)
  - wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723 (Mingcong Bai)
  - wifi: rtw88: usb: Reduce control message timeout to 500 ms (Bitterblue Smith)
  - svcrdma: Unregister the device if svc_rdma_accept() fails (Chuck Lever)
  - jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata() (Jeongjun Park) [Orabug: 38180704] {CVE-2025-38337}
  - wifi: ath12k: fix ring-buffer corruption (Johan Hovold)
  - fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio() (Max Kellermann) [Orabug: 38180713] {CVE-2025-38338}
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew)
  - SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls (Chuck Lever)
  - nfsd: Initialize ssc before laundromat_work to prevent NULL dereference (Li Lingfeng) [Orabug: 38158705] {CVE-2025-38231}
  - nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request (Neil Brown) [Orabug: 38254060] {CVE-2025-38430}
  - NFSD: Implement FATTR4_CLONE_BLKSIZE attribute (Chuck Lever)
  - NFSD: fix race between nfsd registration and exports_proc (Maninder Singh) [Orabug: 38158711] {CVE-2025-38232}
  - NFSD: unregister filesystem in case genl_register_family() fails (Maninder Singh)
  - wifi: ath11k: fix ring-buffer corruption (Johan Hovold)
  - wifi: rtw88: usb: Upload the firmware in bigger chunks (Bitterblue Smith)
  - wifi: ath11k: fix rx completion meta data corruption (Johan Hovold)
  - wifi: mt76: mt7925: fix host interrupt register initialization (Michael Lo)
  - wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback() (Christian Lamparter) [Orabug: 38180780] {CVE-2025-38348}
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Xu Wang)
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Xu Wang)
  - regulator: max20086: Change enable gpio to optional (João Paulo Gonçalves)
  - regulator: max20086: Fix MAX200086 chip id (João Paulo Gonçalves)
  - s390/pci: Serialize device addition and removal (Niklas Schnelle)
  - s390/pci: Allow re-add of a reserved but not yet removed device (Niklas Schnelle)
  - s390/pci: Prevent self deletion in disable_slot() (Niklas Schnelle)
  - s390/pci: Remove redundant bus removal and disable from zpci_release_device() (Niklas Schnelle)
  - powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states (Gautam Menghani)
  - io_uring/kbuf: account ring io_buffer_list memory (Pavel Begunkov)
  - io_uring: account drain memory to cgroup (Pavel Begunkov)
  - ASoC: amd: sof_amd_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Vijendar Mukunda)
  - ASoC: meson: meson-card-utils: use of_property_present() for DT parsing (Martin Blumenstingl)
  - ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params() (Xu Wang)
  - crypto: qat - add shutdown handler to qat_dh895xcc (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_c62x (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_4xxx (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_420xx (Giovanni Cabiddu)
  - crypto: qat - add shutdown handler to qat_c3xxx (Giovanni Cabiddu)
  - gfs2: move msleep to sleepable context (Alexander Aring)
  - crypto: marvell/cesa - Do not chain submitted requests (Herbert Xu)
  - configfs: Do not override creating attribute file failure in populate_attrs() (Zijun Hu)
  - LTS version: v6.12.34 (Jack Vogel)
  - thermal/drivers/mediatek/lvts: Remove unused lvts_debugfs_exit (Arnd Bergmann)
  - drm/meson: Use 1000ULL when operating with mode->clock (I Hsin Cheng)
  - gfs2: Don't clear sb->s_fs_info in gfs2_sys_fs_add (Andrew Price)
  - overflow: Introduce __DEFINE_FLEX for having no initializer (Kees Cook)
  - net: usb: aqc111: debug info before sanitation (Oliver Neukum)
  - usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Arnd Bergmann)
  - regulator: dt-bindings: mt6357: Drop fixed compatible requirement (Nícolas F R A Prado)
  - calipso: unlock rcu before returning -EAFNOSUPPORT (Eric Dumazet)
  - x86/fred/signal: Prevent immediate repeat of single step trap on return from SIGTRAP handler (Xin Li)
  - x86/iopl: Cure TIF_IO_BITMAP inconsistencies (Thomas Gleixner) [Orabug: 38152862] {CVE-2025-38100}
  - xen/arm: call uaccess_ttbr0_enable for dm_op hypercall (Stefano Stabellini)
  - xfs: don't assume perags are initialised when trimming AGs (Dave Chinner)
  - ring-buffer: Move cpus_read_lock() outside of buffer->mutex (Steven Rostedt)
  - ring-buffer: Fix buffer locking in ring_buffer_subbuf_order_set() (Dmitry Antipov) [Orabug: 38152865] {CVE-2025-38101}
  - ring-buffer: Do not trigger WARN_ON() due to a commit_overrun (Steven Rostedt) [Orabug: 38180430] {CVE-2025-38267}
  - 9p: Add a migrate_folio method (Matthew Wilcox)
  - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (Rd Babiera) [Orabug: 38180435] {CVE-2025-38268}
  - usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx() (Amit Sunil Dhamne)
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Mathias Nyman)
  - usb: cdnsp: Fix issue with detecting USB 3.2 speed (Pawel Laszczak)
  - usb: cdnsp: Fix issue with detecting command completion event (Pawel Laszczak)
  - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Jonathan Stroud)
  - tty: serial: 8250_omap: fix TX with DMA for am33xx (Jiri Slaby)
  - VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify (Ma Wupeng) [Orabug: 38152867] {CVE-2025-38102}
  - usb: usbtmc: Fix read_stb function and get_stb ioctl (Dave Penkler)
  - nvmem: zynqmp_nvmem: unbreak driver after cleanup (Peter Korsgaard) [Orabug: 38180534] {CVE-2025-38301}
  - posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (Oleg Nesterov) [Orabug: 38223085] {CVE-2025-38352}
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Terry Junge) [Orabug: 38152875] {CVE-2025-38103}
  - ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1 (David Heimann)
  - Revert "wifi: mwifiex: Fix HT40 bandwidth issue." (Francesco Dolcini)
  - tools/resolve_btfids: Fix build when cross compiling kernel with clang. (Suleiman Souhlal)
  - objtool/rust: relax slice condition to cover more `noreturn` Rust functions (Miguel Ojeda)
  - block: Fix bvec_set_folio() for very large folios (Matthew Wilcox)
  - bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP (Matthew Wilcox)
  - io_uring: consistently use rcu semantics with sqpoll thread (Keith Busch)
  - block: don't use submit_bio_noacct_nocheck in blk_zone_wplug_bio_work (Christoph Hellwig) [Orabug: 38180537] {CVE-2025-38302}
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Penglei Jiang) [Orabug: 38152890] {CVE-2025-38106}
  - block: use q->elevator with ->elevator_lock held in elv_iosched_show() (Ming Lei)
  - perf: Ensure bpf_perf_link path is properly serialized (Peter Zijlstra)
  - nvmet-fcloop: access fcpreq only when holding reqlock (Daniel Wagner)
  - btrfs: exit after state split error at set_extent_bit() (Filipe Manana)
  - gfs2: pass through holder from the VFS for freeze/thaw (Christian Brauner)
  - fs/filesystems: Fix potential unsigned integer underflow in fs_name() (Zijun Hu)
  - btrfs: exit after state insertion failure at btrfs_convert_extent_bit() (Filipe Manana) [Orabug: 38180438] {CVE-2025-38269}
  - net: drv: netdevsim: don't napi_complete() from netpoll (Jakub Kicinski) [Orabug: 38180445] {CVE-2025-38270}
  - net_sched: ets: fix a race in ets_qdisc_change() (Eric Dumazet) [Orabug: 38152892] {CVE-2025-38107}
  - net_sched: tbf: fix a race in tbf_change() (Eric Dumazet)
  - net_sched: red: fix a race in __red_change() (Eric Dumazet) [Orabug: 38152897] {CVE-2025-38108}
  - net_sched: prio: fix a race in prio_tune() (Eric Dumazet) [Orabug: 38105332] {CVE-2025-38083}
  - net/mlx5e: Fix leak of Geneve TLV option object (Jianbo Liu)
  - net/mlx5: HWS, fix missing ip_version handling in definer (Yevgeny Kliteynik)
  - net/mlx5: Fix return value when searching for existing flow group (Patrisious Haddad)
  - net/mlx5: Fix ECVF vports unload on shutdown flow (Amir Tzin) [Orabug: 38152902] {CVE-2025-38109}
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Moshe Shemesh)
  - Bluetooth: MGMT: Fix sparse errors (Luiz Augusto von Dentz)
  - Bluetooth: eir: Fix possible crashes on eir_create_adv_data (Luiz Augusto von Dentz) [Orabug: 38180540] {CVE-2025-38303}
  - Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance (Luiz Augusto von Dentz)
  - Bluetooth: Fix NULL pointer deference on eir_get_service_data (Luiz Augusto von Dentz) [Orabug: 38180542] {CVE-2025-38304}
  - net/mdiobus: Fix potential out-of-bounds clause 45 read/write access (Jakub Raczynski) [Orabug: 38152906] {CVE-2025-38110}
  - net/mdiobus: Fix potential out-of-bounds read/write access (Jakub Raczynski) [Orabug: 38152909] {CVE-2025-38111}
  - macsec: MACsec SCI assignment for ES = 0 (Carlos Fernandez)
  - net: Fix TOCTOU issue in sk_is_readable() (Michal Luczaj) [Orabug: 38152914] {CVE-2025-38112}
  - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Yunhui Cui) [Orabug: 38152918] {CVE-2025-38113}
  - i40e: retry VFLR handling if there is ongoing VF reset (Robert Malz)
  - i40e: return false from i40e_reset_vf if reset is in progress (Robert Malz)
  - drm/meson: fix more rounding issues with 59.94Hz modes (Martin Blumenstingl)
  - drm/meson: use vclk_freq instead of pixel_freq in debug print (Martin Blumenstingl)
  - drm/meson: fix debug log statement when setting the HDMI clocks (Martin Blumenstingl)
  - drm/meson: use unsigned long long / Hz for frequency types (Martin Blumenstingl)
  - powerpc/vas: Return -EINVAL if the offset is non-zero in mmap() (Haren Myneni)
  - powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap (Ritesh Harjani) [Orabug: 38137443] {CVE-2025-38088}
  - net_sched: sch_sfq: fix a potential crash on gso_skb handling (Eric Dumazet) [Orabug: 38152921] {CVE-2025-38115}
  - scsi: iscsi: Fix incorrect error path labels for flashnode operations (Alok Tiwari)
  - pinctrl: qcom: pinctrl-qcm2290: Add missing pins (Wojciech Slenska)
  - spi: omap2-mcspi: Disable multi-mode when the previous message kept CS asserted (Félix Piédallu)
  - spi: omap2-mcspi: Disable multi mode when CS should be kept asserted after message (Félix Piédallu)
  - regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt() (Dan Carpenter)
  - wifi: ath12k: fix GCC_GCC_PCIE_HOT_RST definition for WCN7850 (Baochen Qiang) [Orabug: 38253981] {CVE-2025-38414}
  - wifi: ath12k: refactor ath12k_hw_regs structure (P Praneesh)
  - wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready (Rodrigo Gobbi)
  - wifi: ath11k: move some firmware stats related functions outside of debugfs (Baochen Qiang)
  - wifi: ath11k: don't wait when there is no vdev started (Baochen Qiang)
  - wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process() (Baochen Qiang)
  - wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request() (Baochen Qiang)
  - wifi: ath11k: convert timeouts to secs_to_jiffies() (Easwar Hariharan)
  - ath10k: snoc: fix unbalanced IRQ enable in crash recovery (Caleb Connolly)
  - ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use() (Jeongjun Park) [Orabug: 38180544] {CVE-2025-38305}
  - net: dsa: b53: fix untagged traffic sent via cpu tagged with VID 0 (Jonas Gorski)
  - Bluetooth: MGMT: Protect mgmt_pending list with its own lock (Luiz Augusto von Dentz) [Orabug: 38152928] {CVE-2025-38117}
  - Bluetooth: MGMT: Remove unused mgmt_pending_find_data (Dr. David Alan Gilbert)
  - Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (Luiz Augusto von Dentz) [Orabug: 38152938] {CVE-2025-38118}
  - Bluetooth: btintel_pcie: Reduce driver buffer posting to prevent race condition (Chandrashekar Devegowda)
  - Bluetooth: btintel_pcie: Increase the tx and rx descriptor count (Chandrashekar Devegowda)
  - Bluetooth: btintel_pcie: Fix driver not posting maximum rx buffers (Kiran K)
  - Bluetooth: hci_core: fix list_for_each_entry_rcu usage (Pauli Virtanen)
  - scsi: core: ufs: Fix a hang in the error handler (Sanjeev Yadav) [Orabug: 38152943] {CVE-2025-38119}
  - serial: sh-sci: Move runtime PM enable to sci_probe_single() (Claudiu Beznea)
  - dt-bindings: pwm: adi,axi-pwmgen: Fix clocks (David Lechner)
  - dt-bindings: pwm: Correct indentation and style in DTS example (Krzysztof Kozlowski)
  - dt-bindings: pwm: adi,axi-pwmgen: Increase #pwm-cells to 3 (Uwe Kleine-König)
  - pinctrl: samsung: add gs101 specific eint suspend/resume callbacks (Peter Griffin)
  - pinctrl: samsung: add dedicated SoC eint suspend/resume callbacks (Peter Griffin)
  - pinctrl: samsung: refactor drvdata suspend & resume callbacks (Peter Griffin)
  - arm64: dts: qcom: x1e80100: Add GPU cooling (Stephan Gerhold) [Orabug: 38147977] {CVE-2025-38093}
  - arm64: dts: qcom: x1e80100: Apply consistent critical thermal shutdown (Stephan Gerhold)
  - mmc: sdhci-of-dwcmshc: add PD workaround on RK3576 (Nicolas Frattaroli)
  - pmdomain: core: Introduce dev_pm_genpd_rpm_always_on() (Ulf Hansson)
  - Input: synaptics-rmi - fix crash with unsupported versions of F34 (Dmitry Torokhov)
  - ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup (Chris Chiu)
  - ALSA: hda/realtek - Support mute led function for HP platform (Kailang Yang)
  - ALSA: hda/realtek: Add support for various HP Laptops using CS35L41 HDA (Stefan Binding)
  - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3247 (Chris Chiu)
  - ALSA: hda/realtek: fix micmute LEDs on HP Laptops with ALC3315 (Chris Chiu)
  - tools/power turbostat: Fix AMD package-energy reporting (Gautham R. Shenoy)
  - do_change_type(): refuse to operate on unmounted/not ours mounts (Al Viro) [Orabug: 38256448] {CVE-2025-38498}
  - fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2) (Al Viro)
  - path_overmount(): avoid false negatives (Al Viro)
  - iov_iter: use iov_offset for length calculation in iov_iter_aligned_bvec (Nitesh Shetty)
  - ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init (Yuuki Nagao)
  - ASoC: Intel: avs: Verify content returned by parse_int_array() (Cezary Rojewski) [Orabug: 38180550] {CVE-2025-38307}
  - ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX (Cezary Rojewski)
  - ASoC: codecs: hda: Fix RPM usage count underflow (Cezary Rojewski)
  - scsi: ufs: qcom: Prevent calling phy_exit() before phy_init() (Nitin Rawat)
  - riscv: misaligned: fix sleeping function called during misaligned access handling (Nylon Chen)
  - seg6: Fix validation of nexthop addresses (Ido Schimmel) [Orabug: 38180554] {CVE-2025-38310}
  - wireguard: device: enable threaded NAPI (Mirco Barone)
  - net: wwan: mhi_wwan_mbim: use correct mux_id for multiplexing (Daniele Palmas)
  - wifi: cfg80211/mac80211: correctly parse S1G beacon optional elements (Lachlan Hodges)
  - net: dsa: b53: do not touch DLL_IQQD on bcm53115 (Jonas Gorski)
  - net: dsa: b53: allow RGMII for bcm63xx RGMII ports (Jonas Gorski)
  - net: dsa: b53: do not enable RGMII delay on bcm63xx (Jonas Gorski)
  - net: ti: icssg-prueth: Fix swapped TX stats for MII interfaces. (Meghana Malladi)
  - netfilter: nf_nat: also check reverse tuple to obtain clashing entry (Florian Westphal)
  - netfilter: nf_set_pipapo_avx2: fix initial map fill (Florian Westphal) [Orabug: 38152956] {CVE-2025-38120}
  - drm/panel-simple: fix the warnings for the Evervision VGG644804 (Michael Walle)
  - gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO (Alok Tiwari) [Orabug: 38152963] {CVE-2025-38122}
  - nvme: fix command limits status code (Keith Busch)
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Rafael J. Wysocki)
  - selftests: net: build net/lib dependency in all target (Bui Quang Minh)
  - vmxnet3: correctly report gso type for UDP tunnels (Ronak Doshi)
  - net: wwan: t7xx: Fix napi rx poll issue (Jinjian Song) [Orabug: 38152967] {CVE-2025-38123}
  - net: fix udp gso skb_segment after pull from frag_list (Shiming Cheng) [Orabug: 38152970] {CVE-2025-38124}
  - drm/i915/guc: Handle race condition where wakeref count drops below 0 (Jesus Narvaez)
  - drm/i915/psr: Fix using wrong mask in REG_FIELD_PREP (Jouni Högander)
  - drm/i915/guc: Check if expecting reply before decrementing outstanding_submission_g2h (Jesus Narvaez)
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré) [Orabug: 38152972] {CVE-2025-38125}
  - net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping (Alexis Lothoré) [Orabug: 38152977] {CVE-2025-38126}
  - net: dsa: tag_brcm: legacy: fix pskb_may_pull length (Álvaro Fernández Rojas)
  - idpf: avoid mailbox timeout delays during reset (Emil Tantilov)
  - idpf: fix a race in txq wakeup (Brian Vazquez)
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Michal Kubiak)
  - ice: create new Tx scheduler nodes for new queues only (Michal Kubiak)
  - ice: fix Tx scheduler error handling in XDP callback (Michal Kubiak) [Orabug: 38152985] {CVE-2025-38127}
  - Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION (Luiz Augusto von Dentz)
  - spi: bcm63xx-hsspi: fix shared reset (Álvaro Fernández Rojas)
  - spi: bcm63xx-spi: fix shared reset (Álvaro Fernández Rojas)
  - net: lan966x: Make sure to insert the vlan tags also in host mode (Horatiu Vultur)
  - net/mlx4_en: Prevent potential integer overflow calculating Hz (Dan Carpenter)
  - driver: net: ethernet: mtk_star_emac: fix suspend/resume issue (Yanqing Wang)
  - net: tipc: fix refcount warning in tipc_aead_encrypt (Charalampos Mitrodimas) [Orabug: 38180820] {CVE-2025-38273}
  - gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt (Alok Tiwari)
  - net: stmmac: platform: guarantee uniqueness of bus_id (Quentin Schulz)
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [Orabug: 38152993] {CVE-2025-38129}
  - Fix sock_exceed_buf_limit not being triggered in __sk_mem_raise_allocated (Tengteng Yang)
  - drm/xe: Make xe_gt_freq part of the Documentation (Rodrigo Vivi)
  - loop: add file_start_write() and file_end_write() (Ming Lei)
  - USB: typec: fix const issue in typec_match() (Greg Kroah-Hartman)
  - USB: gadget: udc: fix const issue in gadget_match_driver() (Greg Kroah-Hartman)
  - iio: adc: mcp3911: fix device dependent mappings for conversion result registers (Marcus Folkesson)
  - iio: adc: PAC1934: fix typo in documentation link (Marius Cristea)
  - mei: vsc: Cast tx_buf to (__be32 *) when passed to cpu_to_be32_array() (Hans de Goede)
  - vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl() (Nicolas Pitre)
  - coresight: prevent deactivate active config while enabling the config (Levi Yun) [Orabug: 38152999] {CVE-2025-38131}
  - fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt() (Qasim Ijaz) [Orabug: 38180453] {CVE-2025-38274}
  - counter: interrupt-cnt: Protect enable/disable OPs with mutex (Alexander Sverdlin)
  - coresight: catu: Introduce refcount and spinlock for enabling/disabling (Yabin Cui)
  - coresight: Fixes device's owner field for registered using coresight_init_driver() (Junhao He)
  - MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a (Yuli Wang)
  - usb: acpi: Prevent null pointer dereference in usb_acpi_add_usb4_devlink() (Chenyuan Yang) [Orabug: 38153007] {CVE-2025-38134}
  - iio: adc: ad7124: Fix 3dB filter frequency reading (Uwe Kleine-König)
  - iio: filter: admv8818: Support frequencies >= 2^32 (Brian Pellegrino)
  - iio: filter: admv8818: fix range calculation (Sam Winchenbach)
  - iio: filter: admv8818: fix integer overflow (Sam Winchenbach)
  - iio: filter: admv8818: fix band 4, state 15 (Sam Winchenbach)
  - thunderbolt: Fix a logic error in wake on connect (Mario Limonciello)
  - serial: Fix potential null-ptr-deref in mlb_usio_probe() (Henry Martin) [Orabug: 38153010] {CVE-2025-38135}
  - usb: renesas_usbhs: Reorder clock handling and power management in probe (Lad Prabhakar) [Orabug: 38153015] {CVE-2025-38136}
  - PCI: endpoint: Retain fixed-size BAR size as well as aligned size (Jerome Brunet)
  - rtc: loongson: Add missing alarm notifications for ACPI RTC events (Liu Dalin)
  - PCI/DPC: Log Error Source ID only when valid (Bjorn Helgaas)
  - PCI/DPC: Initialize aer_err_info before using it (Bjorn Helgaas)
  - PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root() (Zhe Qiao)
  - dmaengine: ti: Add NULL check in udma_probe() (Henry Martin) [Orabug: 38153028] {CVE-2025-38138}
  - phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug (Chenyuan Yang) [Orabug: 38180455] {CVE-2025-38275}
  - PCI: apple: Use gpiod_set_value_cansleep in probe flow (Hector Martin)
  - PCI: cadence: Fix runtime atomic count underflow (Hans Zhang)
  - PCI: rcar-gen4: set ep BAR4 fixed size (Jerome Brunet)
  - PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus() (Wilfred Mallawa)
  - phy: rockchip: samsung-hdptx: Do no set rk_hdptx_phy->rate in case of errors (Cristian Ciocaltea)
  - phy: rockchip: samsung-hdptx: Fix clock ratio setup (Cristian Ciocaltea)
  - rtc: sh: assign correct interrupts with DT (Wolfram Sang)
  - rust: alloc: add missing invariant in Vec::set_len() (Danilo Krummrich)
  - cifs: Fix validation of SMB1 query reparse point response (Pali Rohár)
  - perf callchain: Always populate the addr_location map when adding IP (Ian Rogers)
  - perf trace: Set errpid to false for rseq and set_robust_list (Anubhav Shelat)
  - nfs: ignore SB_RDONLY when remounting nfs (Li Lingfeng) [Orabug: 37781252]
  - nfs: clear SB_RDONLY before getting superblock (Li Lingfeng)
  - perf trace: Always print return value for syscalls returning a pid (Anubhav Shelat)
  - perf record: Fix incorrect --user-regs comments (Dapeng Mi)
  - perf symbol: Fix use-after-free in filename__read_build_id (Ian Rogers)
  - mailbox: mtk-cmdq: Refine GCE_GCTL_VALUE setting (Jason-JH Lin)
  - mailbox: imx: Fix TXDB_V2 sending (Peng Fan)
  - perf tests switch-tracking: Fix timestamp comparison (Leo Yan)
  - mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE (Alexey Gladkov)
  - mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove() (Christophe Jaillet)
  - mfd: exynos-lpass: Fix an error handling path in exynos_lpass_probe() (Christophe Jaillet)
  - rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send() (Dan Carpenter)
  - remoteproc: k3-dsp: Drop check performed in k3_dsp_rproc_{mbox_callback/kick} (Siddharth Vadapalli)
  - remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick} (Siddharth Vadapalli)
  - remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe (Dan Carpenter)
  - perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3 (Adrian Hunter)
  - perf intel-pt: Fix PEBS-via-PT data_src (Adrian Hunter)
  - perf tests: Fix 'perf report' tests installation (Michael Petlan)
  - perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids() (Namhyung Kim)
  - dm-flakey: make corrupting read bios work (Benjamin Marzinski)
  - dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski)
  - dm: fix dm_blk_report_zones (Benjamin Marzinski) [Orabug: 38153040] {CVE-2025-38141}
  - perf symbol-minimal: Fix double free in filename__read_build_id (Ian Rogers)
  - hwmon: (asus-ec-sensors) check sensor index in read_string() (Alexei Safin) [Orabug: 38153043] {CVE-2025-38142}
  - mtd: nand: ecc-mxic: Fix use of uninitialized variable ret (Mikhail Arkhipov) [Orabug: 38180461] {CVE-2025-38277}
  - x86/irq: Ensure initial PIR loads are performed exactly once (Sean Christopherson)
  - backlight: pm8941: Add NULL check in wled_configure() (Henry Martin) [Orabug: 38153049] {CVE-2025-38143}
  - dm: free table mempools if not used in __bind (Benjamin Marzinski)
  - dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski)
  - perf ui browser hists: Set actions->thread before calling do_zoom_thread() (Arnaldo Carvalho de Melo)
  - perf build: Warn when libdebuginfod devel files are not available (Arnaldo Carvalho de Melo)
  - randstruct: gcc-plugin: Fix attribute addition (Kees Cook)
  - randstruct: gcc-plugin: Remove bogus void member (Kees Cook)
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Sergey Shtylyov) [Orabug: 38180564] {CVE-2025-38312}
  - soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop() (Henry Martin) [Orabug: 38153058] {CVE-2025-38145}
  - soc: aspeed: lpc: Fix impossible judgment condition (Su Hui)
  - ARM: aspeed: Don't select SRAM (Joel Stanley)
  - arm64: dts: mt6359: Rename RTC node to match binding expectations (Julien Massot)
  - arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups (Thuan Nguyen)
  - arm64: dts: qcom: qcm2290: fix (some) of QUP interconnects (Dmitry Baryshkov)
  - arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou (Quentin Schulz)
  - arm64: defconfig: mediatek: enable PHY drivers (Vignesh Raman)
  - ARM: dts: qcom: apq8064: move replicator out of soc node (Dmitry Baryshkov)
  - ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device (Dmitry Baryshkov)
  - ARM: dts: qcom: apq8064: add missing clocks to the timer node (Dmitry Baryshkov)
  - dt-bindings: vendor-prefixes: Add Liontron name (Andre Przywara)
  - bus: fsl-mc: fix double-free on mc_dev (Ioana Ciornei) [Orabug: 38180570] {CVE-2025-38313}
  - nilfs2: do not propagate ENOENT error from nilfs_btree_propagate() (Ryusuke Konishi)
  - nilfs2: add pointer check for nilfs_direct_propagate() (Xu Wang)
  - Squashfs: check return result of sb_min_blocksize (Phillip Lougher) [Orabug: 38253983] {CVE-2025-38415}
  - soc: qcom: smp2p: Fix fallback to qcom,ipc parse (Barnabás Czémán)
  - arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E (Prasanth Babu Mantena)
  - arm64: tegra: Add uartd serial alias for Jetson TX1 module (Aaron Kling)
  - arm64: tegra: Drop remaining serial clock-names and reset-names (Aaron Kling)
  - arm64: dts: rockchip: Update eMMC for NanoPi R5 series (Peter Robinson)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3566-rock3c (Peter Robinson)
  - arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning (Alexey Minnekhanov)
  - arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply (Alexey Minnekhanov)
  - arm64: dts: mt6359: Add missing 'compatible' property to regulators node (Julien Massot)
  - arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles (Nícolas F R A Prado)
  - arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford)
  - arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio (Adam Ford)
  - arm64: dts: imx8mp-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: imx8mn-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: imx8mm-beacon: Fix RTC capacitive load (Adam Ford)
  - arm64: dts: mt8183: Add port node to mt8183.dtsi (Pin-Yen Lin)
  - arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO (Alexey Minnekhanov)
  - arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains (AngeloGioacchino Del Regno)
  - ARM: dts: at91: at91sam9263: fix NAND chip selects (Wolfram Sang)
  - ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select (Wolfram Sang)
  - arm64: dts: rockchip: Move SHMEM memory to reserved memory on rk3588 (Chukun Pan)
  - arm64: dts: qcom: ipq9574: Fix USB vdd info (Varadarajan Narayanan)
  - arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies (Stephan Gerhold)
  - arm64: dts: qcom: sm8250: Fix CPU7 opp table (Xilin Wu)
  - arm64: dts: qcom: sm8350: Reenable crypto & cryptobam (Luca Weiss)
  - arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios (Dzmitry Sankouski)
  - arm64: dts: qcom: sdm845-starqltechn: refactor node order (Dzmitry Sankouski)
  - arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake (Dzmitry Sankouski)
  - arm64: dts: qcom: sdm845-starqltechn: remove wifi (Dzmitry Sankouski)
  - arm64: dts: qcom: x1e80100-romulus: Keep L12B and L15B always on (Konrad Dybcio)
  - arm64: dts: qcom: sm8650: add missing cpu-cfg interconnect path in the mdss node (Neil Armstrong)
  - arm64: dts: qcom: sm8650: setup gpu thermal with higher temperatures (Neil Armstrong)
  - arm64: dts: qcom: x1e80100: Mark usb_2 as dma-coherent (Mark Kettenis)
  - f2fs: fix to correct check conditions in f2fs_cross_rename (Zhiguo Niu)
  - f2fs: use d_inode(dentry) cleanup dentry->d_inode (Zhiguo Niu)
  - net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames (Horatiu Vultur)
  - net: openvswitch: Fix the dead loop of MPLS parse (Faicker Mo) [Orabug: 38153063] {CVE-2025-38146}
  - calipso: Don't call calipso functions for AF_INET sk. (Kuniyuki Iwashima) [Orabug: 38153067] {CVE-2025-38147}
  - octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback (Hariprasad Kelam) [Orabug: 38180463] {CVE-2025-38278}
  - octeontx2-pf: QOS: Perform cache sync on send queue teardown (Hariprasad Kelam)
  - net: phy: mscc: Fix memory leak when using one step timestamping (Horatiu Vultur) [Orabug: 38153075] {CVE-2025-38148}
  - net: lan743x: Fix PHY reset handling during initialization and WOL (Thangaraj Samynathan)
  - net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy (Thangaraj Samynathan)
  - net: phy: fix up const issues in to_mdio_device() and to_phy_device() (Greg Kroah-Hartman)
  - net: phy: clear phydev->devlink when the link is deleted (Wei Fang) [Orabug: 38153079] {CVE-2025-38149}
  - bpf: Avoid __bpf_prog_ret0_warn when jit fails (Kafai Wan) [Orabug: 38180469] {CVE-2025-38280}
  - net: xilinx: axienet: Fix Tx skb circular buffer occupancy check in dmaengine xmit (Suraj Gupta)
  - net: lan966x: Fix 1-step timestamping over ipv4 or ipv6 (Horatiu Vultur)
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Jack Morgenstein) [Orabug: 38153083] {CVE-2025-38151}
  - vsock/virtio: fix `rx_bytes` accounting for stream sockets (Stefano Garzarella)
  - net: usb: aqc111: fix error handling of usbnet read calls (Nikita Zhandarovich) [Orabug: 38153087] {CVE-2025-38153}
  - RISC-V: KVM: lock the correct mp_state during reset (Radim Krčmář)
  - netfilter: nft_tunnel: fix geneve_opt dump (Fernando Fernandez Mancera)
  - netfilter: nf_tables: nft_fib: consistent l3mdev handling (Florian Westphal)
  - bpf, sockmap: Avoid using sk_socket after free when sending (Jiayuan Chen) [Orabug: 38153093] {CVE-2025-38154}
  - Bluetooth: btintel: Check dsbr size from EFI variable (Kees Cook) [Orabug: 38180581] {CVE-2025-38315}
  - Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach() (Dmitry Antipov)
  - vfio/type1: Fix error unwind in migration dirty bitmap allocation (Li Rongqing)
  - netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy (Florian Westphal)
  - netfilter: xtables: support arpt_mark and ipv6 optstrip for iptables-nft only builds (Florian Westphal)
  - bpf: Revert "bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic" (Di Shen)
  - wifi: mt76: mt7996: fix RX buffer size of MCU event (Shayne Chen)
  - wifi: mt76: mt7996: set EHT max ampdu length capability (Peter Chiu)
  - wifi: mt76: mt7925: ensure all MCU commands wait for response (Michael Lo)
  - wifi: mt76: mt7925: refine the sniffer commnad (Ming Yen Hsieh)
  - wifi: mt76: mt7925: prevent multiple scan commands (Ming Yen Hsieh)
  - wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init() (Henry Martin) [Orabug: 38153099] {CVE-2025-38155}
  - wifi: mt76: mt7996: Fix null-ptr-deref in mt7996_mmio_wed_init() (Henry Martin) [Orabug: 38153103] {CVE-2025-38156}
  - Bluetooth: ISO: Fix not using SID from adv report (Luiz Augusto von Dentz)
  - kernfs: Relax constraint in draining guard (Michal Koutný) [Orabug: 38180476] {CVE-2025-38282}
  - scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort() (Ping Gao)
  - wifi: ath9k_htc: Abort software beacon handling if disabled (Toke Høiland-Jørgensen) [Orabug: 38153107] {CVE-2025-38157}
  - hisi_acc_vfio_pci: bugfix live migration function without VF device driver (Longfang Liu) [Orabug: 38180480] {CVE-2025-38283}
  - hisi_acc_vfio_pci: add eq and aeq interruption restore (Longfang Liu)
  - hisi_acc_vfio_pci: fix XQE dma address error (Longfang Liu) [Orabug: 38153117] {CVE-2025-38158}
  - wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event (Rajat Soni)
  - iommu: remove duplicate selection of DMAR_TABLE (Rolf Eike Beer)
  - wifi: rtw89: fix firmware scan delay unit for WiFi 6 chips (Chin-Yen Lee)
  - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (Alexey Kodanev) [Orabug: 38153120] {CVE-2025-38159}
  - wifi: rtw89: pci: enlarge retry times of RX tag to 1000 (Ping-Ke Shih)
  - s390/bpf: Store backchain even for leaf progs (Ilya Leoshkevich)
  - clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz (Vincent Knecht)
  - dt-bindings: soc: fsl,qman-fqd: Fix reserved-memory.yaml reference (Rob Herring)
  - bpf: Fix WARN() in get_bpf_raw_tp_regs (Tao Chen) [Orabug: 38180487] {CVE-2025-38285}
  - pinctrl: at91: Fix possible out-of-boundary access (Andy Shevchenko) [Orabug: 38180493] {CVE-2025-38286}
  - libbpf: Use proper errno value in nlattr (Anton Protopopov)
  - ktls, sockmap: Fix missing uncharge operation (Jiayuan Chen)
  - of: unittest: Unlock on error in unittest_data_add() (Dan Carpenter)
  - tracing: Fix error handling in event_trigger_parse() (Miaoqian Lin)
  - tracing: Rename event_trigger_alloc() to trigger_data_alloc() (Steven Rostedt)
  - selftests/bpf: Fix caps for __xlated/jited_unpriv (Luis Gerhorst)
  - efi/libstub: Describe missing 'out' parameter in efi_load_initrd (Hans Zhang)
  - wifi: iwlfiwi: mvm: Fix the rate reporting (Ilan Peer)
  - clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (Henry Martin) [Orabug: 38153129] {CVE-2025-38160}
  - bpftool: Fix regression of "bpftool cgroup tree" EINVAL on older kernels (Yifei Zhu)
  - clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs (Luca Weiss)
  - tracing: Move histogram trigger variables from stack to per CPU structure (Steven Rostedt)
  - bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ (Anton Protopopov)
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Patrisious Haddad) [Orabug: 38153137] {CVE-2025-38161}
  - netfilter: nft_set_pipapo: prevent overflow in lookup table allocation (Pablo Neira Ayuso) [Orabug: 38153145] {CVE-2025-38162}
  - netfilter: nft_quota: match correctly when the quota just depleted (Zhongqiu Duan)
  - netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it (Huajian Yang)
  - bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps (Lorenzo Bianconi)
  - libbpf: Use proper errno value in linker (Anton Protopopov)
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Yi Zhang) [Orabug: 38180501] {CVE-2025-38288}
  - f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed() (Chao Yu)
  - f2fs: clean up w/ fscrypt_is_bounce_page() (Chao Yu)
  - bonding: assign random address if device address is same as bond (Hangbin Liu)
  - iommu: Protect against overflow in iommu_pgsize() (Jason Gunthorpe)
  - Use thread-safe function pointer in libbpf_print (Jonathan Wiepert)
  - libbpf: Remove sample_period init in perf_buffer (Tao Chen)
  - libbpf: Fix event name too long error (Feng Yang)
  - scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk (Yihang Li)
  - RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h (Junxian Huang)
  - wifi: ath12k: fix node corruption in ar->arvifs list (Maharaja Kennadyrajan) [Orabug: 38180505] {CVE-2025-38290}
  - wifi: ath12k: Fix the QoS control field offset to build QoS header (Ramasamy Kaliappan)
  - wifi: ath12k: Add MSDU length validation for TKIP MIC error (P Praneesh)
  - wifi: ath12k: fix invalid access to memory (Sarika Sharma) [Orabug: 38180511] {CVE-2025-38292}
  - wifi: rtw88: do not ignore hardware read error during DPK (Dmitry Antipov)
  - wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally (Zhen Xin)
  - wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT (Zhen Xin)
  - xfrm: Use xdo.dev instead of xdo.real_dev (Cosmin Ratiu)
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Cosmin Ratiu)
  - libbpf: Fix buffer overflow in bpf_object__init_prog (Viktor Malik)
  - net: ncsi: Fix GCPS 64-bit member variables (Hari Kalavakunta)
  - page_pool: Track DMA-mapped pages and unmap them when destroying the pool (Toke Høiland-Jørgensen)
  - page_pool: Move pp_magic check into helper functions (Toke Høiland-Jørgensen)
  - f2fs: fix to do sanity check on sbi->total_valid_block_count (Chao Yu) [Orabug: 38153148] {CVE-2025-38163}
  - f2fs: prevent the current section from being selected as a victim during GC (Yohan Joung)
  - f2fs: clean up unnecessary indentation (Jaegeuk Kim)
  - wifi: ath12k: Fix buffer overflow in debugfs (Dan Carpenter) [Orabug: 38180584] {CVE-2025-38317}
  - wifi: ath12k: Fix WMI tag for EHT rate in peer assoc (Ramya Gnanasekar)
  - wifi: ath12k: fix cleanup path after mhi init (Raj Kumar Bhagat)
  - f2fs: zone: fix to avoid inconsistence in between SIT and SSA (Chao Yu) [Orabug: 38153159] {CVE-2025-38164}
  - bpf, sockmap: Fix panic when calling skb_linearize (Jiayuan Chen) [Orabug: 38153161] {CVE-2025-38165}
  - bpf, sockmap: fix duplicated data transmission (Jiayuan Chen)
  - bpf: fix ktls panic with sockmap (Jiayuan Chen) [Orabug: 38153165] {CVE-2025-38166}
  - selftests/bpf: Fix bpf_nf selftest failure (Saket Kumar Bhaskar)
  - bpf: Check link_create.flags parameter for multi_kprobe (Tao Chen)
  - IB/cm: use rwlock for MAD agent lock (Jacob Moroni)
  - wifi: ath12k: Fix invalid memory access while forming 802.11 header (P Praneesh)
  - wifi: ath12k: Fix memory leak during vdev_id mismatch (P Praneesh)
  - wifi: ath11k: fix node corruption in ar->arvifs list (Stone Zhang) [Orabug: 38180514] {CVE-2025-38293}
  - xen/x86: fix initial memory balloon target (Roger Pau Monné)
  - svcrdma: Reduce the number of rdma_rw contexts per-QP (Chuck Lever)
  - media: verisilicon: Free post processor buffers on error (Detlev Casanova)
  - drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err (AngeloGioacchino Del Regno)
  - drm/mediatek: Fix kobject put for component sub-drivers (AngeloGioacchino Del Regno)
  - drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr (AngeloGioacchino Del Regno)
  - drm/msm/a6xx: Disable rgb565_predicator on Adreno 7c3 (Konrad Dybcio)
  - selftests/seccomp: fix negative_ENOSYS tracer tests on arm32 (Terry Tritton)
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Anand Moon) [Orabug: 38180518] {CVE-2025-38295}
  - scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops (Kees Cook)
  - overflow: Fix direct struct member initialization in _DEFINE_FLEX() (Gustavo A R Silva)
  - arm64/fpsimd: Do not discard modified SVE state (Mark Rutland)
  - firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES (Huang Yiwei)
  - drm/tegra: rgb: Fix the unbound reference count (Biju Das)
  - drm/vkms: Adjust vkms_state->active_planes allocation type (Kees Cook)
  - drm: rcar-du: Fix memory leak in rcar_du_vsps_init() (Biju Das)
  - drm/msm/dpu: enable SmartDMA on SC8180X (Dmitry Baryshkov)
  - drm/msm/dpu: enable SmartDMA on SM8150 (Dmitry Baryshkov)
  - selftests/seccomp: fix syscall_restart test for arm compat (Neill Kapron)
  - arm64/fpsimd: Avoid warning when sve_to_fpsimd() is unused (Mark Rutland)
  - arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX (Kornel Dulęba)
  - firmware: psci: Fix refcount leak in psci_dt_init (Miaoqian Lin)
  - m68k: mac: Fix macintosh_config for Mac II (Finn Thain)
  - watchdog: exar: Shorten identity name to fit correctly (Kees Cook)
  - kunit/usercopy: Disable u64 test on 32-bit SPARC (Thomas Weißschuh)
  - fs/ntfs3: Add missing direct_IO in ntfs_aops_cmpr (Lizhi Xu)
  - fs/ntfs3: handle hdr_first_de() return value (Andrey Vatoropin) [Orabug: 38153171] {CVE-2025-38167}
  - drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe() (Christophe Jaillet)
  - drm/panel: samsung-sofef00: Drop s6e3fc2x01 support (Casey Connolly)
  - perf: arm-ni: Fix missing platform_set_drvdata() (Hongbo Yao) [Orabug: 38180586] {CVE-2025-38318}
  - perf: arm-ni: Unregister PMUs on probe failure (Hongbo Yao) [Orabug: 38153175] {CVE-2025-38168}
  - drm/panthor: Update panthor_mmu::irq::mask when needed (Boris Brezillon)
  - drm/panthor: Fix GPU_COHERENCY_ACE[_LITE] definitions (Boris Brezillon)
  - arm64/fpsimd: Fix merging of FPSIMD state during signal return (Mark Rutland)
  - arm64/fpsimd: Reset FPMR upon exec() (Mark Rutland)
  - arm64/fpsimd: Avoid clobbering kernel FPSIMD state with SMSTOP (Mark Rutland) [Orabug: 38153177] {CVE-2025-38169}
  - arm64/fpsimd: Don't corrupt FPMR when streaming mode changes (Mark Brown)
  - arm64/fpsimd: Discard stale CPU state when handling SME traps (Mark Brown) [Orabug: 38153179] {CVE-2025-38170}
  - arm64/fpsimd: Avoid RES0 bits in the SME trap handler (Mark Rutland)
  - media: rkvdec: Fix frame size enumeration (Jonas Karlman)
  - drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table (Charles Han) [Orabug: 38180588] {CVE-2025-38319}
  - drm/vc4: tests: Use return instead of assert (Maxime Ripard)
  - drm/xe/d3cold: Set power state to D3Cold during s2idle/s3 (Badal Nilawar)
  - drm/vmwgfx: Fix dumb buffer leak (Ian Forbes)
  - drm/vmwgfx: Add error path for xa_store in vmw_bo_add_detached_resource (Keisuke Nishimura)
  - drm/vmwgfx: Add seqno waiter for sync_files (Ian Forbes)
  - ALSA: core: fix up bus match const issues. (Greg Kroah-Hartman)
  - ASoC: apple: mca: Constrain channels according to TDM mask (Martin Povišer)
  - spi: sh-msiof: Fix maximum DMA transfer size (Geert Uytterhoeven)
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Armin Wolf)
  - thermal/drivers/mediatek/lvts: Fix debugfs unregister on failure (AngeloGioacchino Del Regno)
  - PM: sleep: Print PM debug messages during hibernation (Rafael J. Wysocki)
  - x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges() (Jiaqing Zhao)
  - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mingcong Bai)
  - PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks() (Zijun Hu)
  - ASoC: SOF: amd: add missing acp descriptor field (Vijendar Mukunda)
  - ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type (Kees Cook)
  - PM: EM: Fix potential division-by-zero error in em_compute_costs() (Yaxiong Tian) [Orabug: 38180521] {CVE-2025-38297}
  - power: reset: at91-reset: Optimize at91_reset() (Alexander Shiyan)
  - spi: tegra210-quad: modify chip select (CS) deactivation (Vishwaroop A)
  - spi: tegra210-quad: remove redundant error handling code (Vishwaroop A)
  - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers (Vishwaroop A)
  - EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0 (Qiuxu Zhuo)
  - EDAC/skx_common: Fix general protection fault (Qiuxu Zhuo) [Orabug: 38180523] {CVE-2025-38298}
  - ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() (Julien Massot) [Orabug: 38180528] {CVE-2025-38299}
  - ASoC: tas2764: Enable main IRQs (Hector Martin)
  - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Daniil Tatianin)
  - crypto: api - Redo lookup on EEXIST (Herbert Xu)
  - kunit: Fix wrong parameter to kunit_deactivate_static_stub() (Tzung-Bi Shih)
  - crypto: sun8i-ce - move fallback ahash_request to the end of the struct (Ovidiu Panait)
  - crypto: xts - Only add ecb if it is not already there (Herbert Xu)
  - crypto: lrw - Only add ecb if it is not already there (Herbert Xu)
  - rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture (Yongliang Gao)
  - btrfs: fix invalid data space release when truncating block in NOCOW mode (Filipe Manana)
  - btrfs: scrub: fix a wrong error type when metadata bytenr mismatches (Qu Wenruo)
  - btrfs: scrub: update device stats when an error is detected (Qu Wenruo)
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Gaurav Batra)
  - erofs: avoid using multiple devices with different type (Sheng Yong) [Orabug: 38153185] {CVE-2025-38172}
  - erofs: fix file handle encoding for 64-bit NIDs (Hongbo Li)
  - crypto: marvell/cesa - Avoid empty transfer descriptor (Herbert Xu)
  - crypto: marvell/cesa - Handle zero-length skcipher requests (Herbert Xu) [Orabug: 38153187] {CVE-2025-38173}
  - kselftest: cpufreq: Get rid of double suspend in rtcwake case (Nícolas F R A Prado)
  - brd: fix discard end sector (Yu Kuai)
  - brd: fix aligned_sector from brd_do_discard() (Yu Kuai)
  - x86/insn: Fix opcode map (!REX2) superscript tags (Masami Hiramatsu)
  - x86/cpu: Sanitize CPUID(0x80000000) output (Ahmed S. Darwish)
  - crypto: sun8i-ce - undo runtime PM changes during driver removal (Ovidiu Panait)
  - x86/microcode/AMD: Do not return error when microcode update is not necessary (Annie Li)
  - sched/core: Tweak wait_task_inactive() to force dequeue sched_delayed tasks (John Stultz)
  - powerpc/crash: Fix non-smp kexec preparation (Eddie James)
  - powerpc: do not build ppc_save_regs.o always (Jiri Slaby)
  - crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions (Corentin Labbe)
  - crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare() (Ovidiu Panait) [Orabug: 38180531] {CVE-2025-38300}
  - perf/core: Fix broken throttling when max_samples_per_tick=1 (Qing Wang)
  - gfs2: gfs2_create_inode error handling fix (Andreas Gruenbacher)
  - gfs2: replace sd_aspace with sd_inode (Andreas Gruenbacher)
  - perf/x86/amd/uncore: Prevent UMC counters from saturating (Sandipan Das)
  - perf/x86/amd/uncore: Remove unused 'struct amd_uncore_ctx::node' member (Sandipan Das)
  - sched: Fix trace_sched_switch(.prev_state) (Peter Zijlstra)
  - crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run() (Ovidiu Panait)
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Andrew Cooper) [Orabug: 38264060]
  - tools/x86/kcpuid: Fix error handling (Ahmed S. Darwish)
  - uek-rpm: Set USBIP_VHCI_NR_HCS to 4 in UEK8U1 (Harshit Mogalapalli) [Orabug: 38012102]
  - mptcp: disable by default (Harshvardhan Jha) [Orabug: 38035668]
  - sunrpc: handle SVC_GARBAGE during svc auth processing as auth error (Jeff Layton) [Orabug: 38137447,38178286] {CVE-2025-38089}
  - x86/sev/docs: Document the SNP Reverse Map Table (RMP) (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Add full support for a segmented RMP table (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Treat the contiguous RMP table as a single RMP segment (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Map only the RMP table entries instead of the full RMP range (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Move the SNP probe routine out of the way (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Require the RMPREAD instruction after Zen4 (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Add support for the RMPREAD instruction (Tom Lendacky) [Orabug: 38149216]
  - x86/sev: Prepare for using the RMPREAD instruction to access the RMP (Tom Lendacky) [Orabug: 38149216]
  - rds: Fix array index out of bounds in rds_message_purge() (Harshit Mogalapalli) [Orabug: 38158033]
  - Add Zen34 clients (Borislav Petkov) [Orabug: 38172252] {CVE-2024-36350,CVE-2024-36357}
  - x86/process: Move the buffer clearing before MONITOR (Kim Phillips) [Orabug: 38172252] {CVE-2024-36350,CVE-2024-36357}
  - Add normal counters (Borislav Petkov) [Orabug: 38172252] {CVE-2024-36350,CVE-2024-36357}
  - KVM: SVM: Advertize TSA CPUID bits to guests (Borislav Petkov) [Orabug: 38172252] {CVE-2024-36350,CVE-2024-36357}
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38172252] {CVE-2024-36350,CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38172252] {CVE-2024-36350,CVE-2024-36357}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.3.el9uek]
changelog:
  - aarch64: increase DEFAULT_CRASH_KERNEL_LOW_SIZE for kdump for 64K kernels (Brian Maly) [Orabug: 38001657]
  - fs: use new field for kstat.atomic_write_unit_max_opt to avoid KABI issue (John Garry) [Orabug: 38026089]
  - nvme: all namespaces in a subsystem must adhere to a common atomic write size (Alan Adamson) [Orabug: 38026089]
  - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Alan Adamson) [Orabug: 38026089]
  - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (John Garry) [Orabug: 38026089]
  - xfs: allow sysadmins to specify a maximum atomic write limit at mount time (John Garry) [Orabug: 38026089]
  - xfs: update atomic write limits (John Garry) [Orabug: 38026089]
  - xfs: add xfs_calc_atomic_write_unit_max() (John Garry) [Orabug: 38026089]
  - xfs: add xfs_file_dio_write_atomic() (John Garry) [Orabug: 38026089]
  - xfs: commit CoW-based atomic writes atomically (John Garry) [Orabug: 38026089]
  - xfs: add large atomic writes checks in xfs_direct_write_iomap_begin() (John Garry) [Orabug: 38026089]
  - xfs: add xfs_atomic_write_cow_iomap_begin() (John Garry) [Orabug: 38026089]
  - xfs: refine atomic write size check in xfs_file_write_iter() (John Garry) [Orabug: 38026089]
  - xfs: refactor xfs_reflink_end_cow_extent() (John Garry) [Orabug: 38026089]
  - xfs: allow block allocator to take an alignment hint (John Garry) [Orabug: 38026089]
  - xfs: ignore HW which cannot atomic write a single block (Darrick J. Wong) [Orabug: 38026089]
  - xfs: add helpers to compute transaction reservation for finishing intent items (Darrick J. Wong) [Orabug: 38026089]
  - xfs: add helpers to compute log item overhead (Darrick J. Wong) [Orabug: 38026089]
  - xfs: separate out setting buftarg atomic writes limits (Darrick J. Wong) [Orabug: 38026089]
  - xfs: rename xfs_inode_can_atomicwrite() -> xfs_inode_can_hw_atomic_write() (John Garry) [Orabug: 38026089]
  - xfs: only call xfs_setsize_buftarg once per buffer target (Darrick J. Wong) [Orabug: 38026089]
  - fs: add atomic write unit max opt to statx (John Garry) [Orabug: 38026089]
  - xfs: stop using set_blocksize (Darrick J. Wong) [Orabug: 38026089]
  - block: hoist block size validation code to a separate function (Darrick J. Wong) [Orabug: 38026089]
  - xfs: cleanup xfs_vn_getattr (Christoph Hellwig) [Orabug: 38026089]
  - fs: reformat the statx definition (Christoph Hellwig) [Orabug: 38026089]
  - dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (John Garry) [Orabug: 38026089]
  - iomap: rework IOMAP atomic flags (John Garry) [Orabug: 38026089]
  - iomap: comment on atomic write checks in iomap_dio_bio_iter() (John Garry) [Orabug: 38026089]
  - iomap: inline iomap_dio_bio_opflags() (John Garry) [Orabug: 38026089]
  - iomap: Lift blocksize restriction on atomic writes (Ritesh Harjani) [Orabug: 38026089]
  - iomap: Support SW-based atomic writes (John Garry) [Orabug: 38026089]
  - iomap: Rename IOMAP_ATOMIC -> IOMAP_ATOMIC_HW (John Garry) [Orabug: 38026089]
  - iomap: Minor code simplification in iomap_dio_bio_iter() (John Garry) [Orabug: 38026089]
  - dm-mirror: Support atomic writes (John Garry) [Orabug: 38026089]
  - dm-io: Warn on creating multiple atomic write bios for a region (John Garry) [Orabug: 38026089]
  - dm-stripe: Enable atomic writes (John Garry) [Orabug: 38026089]
  - dm-linear: Enable atomic writes (John Garry) [Orabug: 38026089]
  - dm: Ensure cloned bio is same length for atomic write (John Garry) [Orabug: 38026089]
  - dm-table: atomic writes support (John Garry) [Orabug: 38026089]
  - block: Don't trim an atomic write (John Garry) [Orabug: 38026089]
  - block: Add common atomic writes enable flag (John Garry) [Orabug: 38026089]
  - block: Change blk_stack_atomic_writes_limits() unit_min check (John Garry) [Orabug: 38026089]
  - block: Ensure start sector is aligned for stacking atomic writes (John Garry) [Orabug: 38026089]
  - md/raid10: Atomic write support (John Garry) [Orabug: 38026089]
  - md/raid1: Atomic write support (John Garry) [Orabug: 38026089]
  - md/raid0: Atomic write support (John Garry) [Orabug: 38026089]
  - block: Support atomic writes limits for stacked devices (John Garry) [Orabug: 38026089]
  - block: Add extra checks in blk_validate_atomic_write_limits() (John Garry) [Orabug: 38026089]
  - md/raid10: Handle bio_split() errors (John Garry) [Orabug: 38026089]
  - md/raid1: Handle bio_split() errors (John Garry) [Orabug: 38026089]
  - md/raid0: Handle bio_split() errors (John Garry) [Orabug: 38026089]
  - block: Handle bio_split() errors in bio_submit_split() (John Garry) [Orabug: 38026089]
  - block: Error an attempt to split an atomic write in bio_split() (John Garry) [Orabug: 38026089]
  - block: Rework bio_split() return value (John Garry) [Orabug: 38026089]
  - ext4: Do not fallback to buffered-io for DIO atomic write (Ritesh Harjani) [Orabug: 38026089]
  - ext4: Support setting FMODE_CAN_ATOMIC_WRITE (Ritesh Harjani) [Orabug: 38026089]
  - ext4: Check for atomic writes support in write iter (Ritesh Harjani) [Orabug: 38026089]
  - ext4: Add statx support for atomic writes (Ritesh Harjani) [Orabug: 38026089]
  - xfs: Support setting FMODE_CAN_ATOMIC_WRITE (John Garry) [Orabug: 38026089]
  - xfs: Validate atomic writes (John Garry) [Orabug: 38026089]
  - xfs: Support atomic write for statx (John Garry) [Orabug: 38026089]
  - fs: iomap: Atomic write support (John Garry) [Orabug: 38026089]
  - fs: Export generic_atomic_write_valid() (John Garry) [Orabug: 38026089]
  - block: Add bdev atomic write limits helpers (John Garry) [Orabug: 38026089]
  - Revert "SUNRPC: Don't allow waiting for exiting tasks" (Harshvardhan Jha) [Orabug: 38162684]
  - Revert "Add normal counters" (Boris Ostrovsky) [Orabug: 38184971]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.4.el9uek]
changelog:
  - PCI/AER: Add sysfs attributes for log ratelimits (Jon Pan-Doh) [Orabug: 38126943]
  - PCI/AER: Ratelimit correctable and non-fatal error logging (Jon Pan-Doh) [Orabug: 38126943]
  - PCI/AER: Simplify add_error_device() (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Convert aer_get_device_error_info(), aer_print_error() to index (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Reduce pci_print_aer() correctable error level to KERN_WARNING (Karolina Stolarek) [Orabug: 38126943]
  - PCI/AER: Check log level once and remember it (Karolina Stolarek) [Orabug: 38126943]
  - PCI/AER: Trace error event before ratelimiting (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Update statistics before ratelimiting (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Simplify pci_print_aer() (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Initialize aer_err_info before using it (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Move aer_print_source() earlier in file (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Rename aer_print_port_info() to aer_print_source() (Jon Pan-Doh) [Orabug: 38126943]
  - PCI/AER: Extract bus/dev/fn in aer_print_port_info() with PCI_BUS_NUM(), etc (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Consolidate Error Source ID logging in aer_isr_one_error_type() (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Factor COR/UNCOR error handling out from aer_isr_one_error() (Bjorn Helgaas) [Orabug: 38126943]
  - PCI/AER: Descope pci_printk() to aer_printk() (Ilpo Järvinen) [Orabug: 38126943]
  - md/md-bitmap: fix GPF in bitmap_get_stats() (Håkon Bugge) [Orabug: 38137957,38254392] {CVE-2025-38451}
  - Revert "net/rds: Add krefs to struct rds_connection" (Håkon Bugge) [Orabug: 38184408]
  - Revert "net/rds: tracepoints for rds_conn_kref_get and put" (Håkon Bugge) [Orabug: 38184408]
  - sched: Change nr_uninterruptible type to unsigned long (Aruna Ramakrishna) [Orabug: 38195223]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-102.36.5.el9uek]
changelog:
  - uek-rpm: Enable few modules related to various subsystems in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Enable more sound related options in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Enable few desktop related modules (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Enable few wireless modules in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Enable few USB related modules in UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Add accessibility related modules to UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: intel: Enable few platform and thermal drivers (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Enable few config options in both Architectures (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Enable SOUND related config options to UEK8 (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Re-sort modules.yaml files as a cleanup (Harshit Mogalapalli) [Orabug: 37846468]
  - uek-rpm: Run savedefconfig for UEK8U1 (Harshit Mogalapalli) [Orabug: 37846468]
  - net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery (Praveen Kumar Kannoju) [Orabug: 38182989]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-103.36.1.el9uek]
changelog:
  - rds: tcp: block BH in TCP callbacks (Eric Dumazet) [Orabug: 38233600]
  - mm: memcontrol: fix MM statistics during lruvec reparenting on MGLRU (Harry Yoo) [Orabug: 38002245]
  - memcg: add folio_memcg_charged() stub for !memcg (Kamalesh Babulal) [Orabug: 38002245]
  - mm: memcontrol: fix a build error on CONFIG_MEMCG=n (Harry Yoo) [Orabug: 38002245]
  - net/mlx5: Add poll-eq API to be used by ULP's (Praveen Kumar Kannoju) [Orabug: 38182399]
  - net/rds: poll eq during user-reset (Praveen Kumar Kannoju) [Orabug: 38189326]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-103.40.2.el9uek]
changelog:
  - arm64: sysreg: Drag linux/kconfig.h to work around vdso build issue (Marc Zyngier) [Orabug: 38194015]
  - arm64: errata: Work around AmpereOne's erratum AC04_CPU_23 (D Scott Phillips) [Orabug: 38194015]
  - scsi: fnic: Set appropriate logging level for log message (Karan Tilak Kumar) [Orabug: 38226429]
  - scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (Karan Tilak Kumar) [Orabug: 38226429]
  - scsi: fnic: Turn off FDMI ACTIVE flags on link down (Karan Tilak Kumar) [Orabug: 38226429]
  - scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (Karan Tilak Kumar) [Orabug: 38175020,38226429] {CVE-2025-38238}
  - fnic: treewide: Switch/rename to timer_delete[_sync]() (Thomas Gleixner) [Orabug: 38226429]
  - LTS version: v6.12.40 (Jack Vogel)
  - KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls (Manuel Andreas) [Orabug: 38254220] {CVE-2025-38469}
  - iommu/vt-d: Fix misplaced domain_attached assignment (Bbaa)
  - smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Stefan Metzmacher)
  - drm/xe: Move page fault init after topology init (Matthew Brost)
  - drm/xe/mocs: Initialize MOCS index early (Balasubramani Vivekanandan)
  - sched,freezer: Remove unnecessary warning in __thaw_task (Chen Ridong)
  - i2c: omap: fix deprecated of_property_read_bool() use (Johan Hovold)
  - i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe() (Christophe Jaillet)
  - i2c: omap: Fix an error handling path in omap_i2c_probe() (Christophe Jaillet)
  - i2c: omap: Add support for setting mux (Jayesh Choudhary)
  - selftests/bpf: Set test path for token/obj_priv_implicit_token_envvar (Ihor Solodrai)
  - rust: use `#[used(compiler)]` to fix build and `modpost` with Rust >= 1.89.0 (Miguel Ojeda)
  - net: libwx: fix multicast packets received count (Jiawen Wu)
  - usb: dwc3: qcom: Don't leave BCR asserted (Krishna Kurapati)
  - usb: hub: Don't try to recover devices lost during warm reset. (Mathias Nyman)
  - usb: hub: Fix flushing of delayed work used for post resume purposes (Mathias Nyman)
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Mathias Nyman)
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Mathias Nyman)
  - btrfs: fix block group refcount race in btrfs_create_pending_block_groups() (Boris Burkov) [Orabug: 37844509] {CVE-2025-22115}
  - clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Al Viro) [Orabug: 38310005] {CVE-2025-38499}
  - efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths (Breno Leitao) [Orabug: 38324320] {CVE-2025-38549}
  - libbpf: Fix handling of BPF arena relocations (Andrii Nakryiko)
  - drm/mediatek: only announce AFBC if really supported (Icenowy Zheng)
  - drm/mediatek: Add wait_event_timeout when disabling plane (Jason-JH Lin)
  - Revert "cgroup_freezer: cgroup_freezing: Check if not frozen" (Chen Ridong)
  - rxrpc: Fix transmission of an abort in response to an abort (David Howells)
  - rxrpc: Fix recv-recv race of completed call (David Howells) [Orabug: 38324205] {CVE-2025-38524}
  - net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree (William Liu) [Orabug: 38254212] {CVE-2025-38468}
  - net: bridge: Do not offload IGMP/MLD messages (Joseph Huang)
  - net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime (Dong Chenchen) [Orabug: 38254223] {CVE-2025-38470}
  - tls: always refresh the queue when reading sock (Jakub Kicinski) [Orabug: 38254232] {CVE-2025-38471}
  - virtio-net: fix recursived rtnl_lock() during probe() (Zigit Zo) [Orabug: 38324329] {CVE-2025-38551}
  - hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Li Tian)
  - Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU (Luiz Augusto von Dentz)
  - drm/xe/pf: Prepare to stop SR-IOV support prior GT reset (Michal Wajdeczko)
  - drm/xe/pf: Move VFs reprovisioning to worker (Michal Wajdeczko)
  - drm/xe/pf: Sanitize VF scratch registers on FLR (Michal Wajdeczko)
  - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (Florian Westphal) [Orabug: 38254235] {CVE-2025-38472}
  - net: fix segmentation after TCP/UDP fraglist GRO (Felix Fietkau)
  - ipv6: mcast: Delay put pmc->idev in mld_del_delrec() (Yue Haibing) [Orabug: 38324325] {CVE-2025-38550}
  - net/mlx5: Correctly set gso_size when LRO is used (Christoph Paasch)
  - Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID (Zijun Hu)
  - Bluetooth: hci_core: add missing braces when using macro parameters (Christian Eggers)
  - Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout (Luiz Augusto von Dentz)
  - Bluetooth: SMP: If an unallowed command is received consider it a failure (Luiz Augusto von Dentz)
  - Bluetooth: hci_sync: fix connectable extended advertising when using static random address (Alessandro Gasbarroni)
  - Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb() (Kuniyuki Iwashima) [Orabug: 38254239] {CVE-2025-38473}
  - riscv: traps_misaligned: properly sign extend value in misaligned load handler (Andreas Schwab)
  - riscv: Enable interrupt during exception handling (Nam Cao)
  - loop: use kiocb helpers to fix lockdep warning (Ming Lei)
  - usb: net: sierra: check for no status endpoint (Oliver Neukum) [Orabug: 38254247] {CVE-2025-38474}
  - ice: check correct pointer in fwlog debugfs (Michal Swiatkowski)
  - ice: add NULL check in eswitch lag check (Dave Ertman) [Orabug: 38324213] {CVE-2025-38526}
  - hwmon: (corsair-cpro) Validate the size of the received input buffer (Marius Zachmann) [Orabug: 38324317] {CVE-2025-38548}
  - selftests: net: increase inter-packet timeout in udpgro.sh (Paolo Abeni)
  - can: tcan4x5x: fix reset gpio usage during probe (Brett Werling)
  - can: tcan4x5x: add option for selecting nWKRQ voltage (Sean Nyekjaer)
  - wifi: cfg80211: remove scan request n_channels counted_by (Johannes Berg)
  - nvmet-tcp: fix callback lock for TLS handshake (Maurizio Lombardi)
  - nvme: fix misaccounting of nvme-mpath inflight I/O (Yu Kuai)
  - net: phy: Don't register LEDs for genphy (Sean Anderson) [Orabug: 38324260] {CVE-2025-38537}
  - smc: Fix various oops due to inet_sock type confusion. (Kuniyuki Iwashima) [Orabug: 38254256] {CVE-2025-38475}
  - nvme: fix endianness of command word prints in nvme_log_err_passthru() (John Garry)
  - nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() (Zheng Qixing)
  - fix a leak in fcntl_dirnotify() (Al Viro)
  - smb: client: fix use-after-free in cifs_oplock_break (Wang Zhaolong) [Orabug: 38324216] {CVE-2025-38527}
  - rpl: Fix use-after-free in rpl_do_srh_inline(). (Kuniyuki Iwashima) [Orabug: 38254259] {CVE-2025-38476}
  - net/sched: sch_qfq: Fix race condition on qfq_aggregate (Xiang Mei) [Orabug: 38254264] {CVE-2025-38477}
  - block: fix kobject leak in blk_unregister_queue (Ming Lei)
  - net: emaclite: Fix missing pointer increment in aligned_read() (Alok Tiwari)
  - cachefiles: Fix the incorrect return value in __cachefiles_write() (Zizhi Wo)
  - selftests/sched_ext: Fix exit selftest hang on UP (Andrea Righi)
  - bpf: Reject %p% format string in bprintf-like helpers (Paul Chaignon) [Orabug: 38324225] {CVE-2025-38528}
  - arm64: dts: imx95: Correct the DMA interrupter number of pcie0_ep (Richard Zhu)
  - soundwire: amd: fix for clearing command status register (Vijendar Mukunda)
  - soundwire: amd: fix for handling slave alerts after link is down (Vijendar Mukunda)
  - arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi 4B (Andy Yan)
  - arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi CM5 (Andy Yan)
  - comedi: Fix initialization of data for instructions that write to subdevice (Ian Abbott) [Orabug: 38254270] {CVE-2025-38478}
  - comedi: Fix use of uninitialized data in insn_rw_emulate_bits() (Ian Abbott) [Orabug: 38254276] {CVE-2025-38480}
  - comedi: Fix some signed shift left operations (Ian Abbott)
  - comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large (Ian Abbott) [Orabug: 38254283] {CVE-2025-38481}
  - comedi: das6402: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38254291] {CVE-2025-38482}
  - comedi: das16m1: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38254299] {CVE-2025-38483}
  - comedi: aio_iiro_16: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38324229] {CVE-2025-38529}
  - comedi: pcl812: Fix bit shift out of bounds (Ian Abbott) [Orabug: 38324236] {CVE-2025-38530}
  - iio: common: st_sensors: Fix use of uninitialize device structs (Maud Spierings) [Orabug: 38324242] {CVE-2025-38531}
  - iio: backend: fix out-of-bound write (Markus Burri) [Orabug: 38254383] {CVE-2025-38484}
  - iio: adc: stm32-adc: Fix race in installing chained IRQ handler (Chen Ni)
  - iio: adc: max1363: Reorder mode_list[] entries (Fabio Estevam)
  - iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[] (Fabio Estevam)
  - iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps (Chen-Yu Tsai) [Orabug: 38324314] {CVE-2025-38547}
  - iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush (Sean Nyekjaer) [Orabug: 38254306] {CVE-2025-38485}
  - soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled (Andrew Jeffery)
  - soc: aspeed: lpc-snoop: Cleanup resources in stack-order (Andrew Jeffery)
  - smb: client: fix use-after-free in crypt_message when using async crypto (Wang Zhaolong) [Orabug: 38254322] {CVE-2025-38488}
  - s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again (Ilya Leoshkevich) [Orabug: 38254325] {CVE-2025-38489}
  - pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov (Maulik Shah)
  - net: libwx: properly reset Rx ring descriptor (Jiawen Wu) [Orabug: 38324251] {CVE-2025-38532}
  - net: libwx: fix the using of Rx buffer DMA (Jiawen Wu) [Orabug: 38324253] {CVE-2025-38533}
  - net: libwx: remove duplicate page_pool_put_full_page() (Jiawen Wu) [Orabug: 38254327] {CVE-2025-38490}
  - net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback (Markus Blöchl)
  - mmc: sdhci_am654: Workaround for Errata i2312 (Judith Mendez)
  - mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models (Edson Juliano Drosdeck)
  - mmc: bcm2835: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() (Nathan Chancellor)
  - isofs: Verify inode mode when loading from disk (Jan Kara)
  - dmaengine: nbpfaxi: Fix memory corruption in probe() (Dan Carpenter) [Orabug: 38324262] {CVE-2025-38538}
  - cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Daniel Lezcano)
  - Bluetooth: btintel: Check if controller is ISO capable on btintel_classify_pkt_type (Luiz Augusto von Dentz)
  - af_packet: fix soft lockup issue caused by tpacket_snd() (Yun Lu)
  - af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd() (Yun Lu)
  - arm64: dts: rockchip: use cs-gpios for spi1 on ringneck (Jakob Unterwurzacher)
  - arm64: dts: imx8mp-venice-gw73xx: fix TPM SPI frequency (Tim Harvey)
  - arm64: dts: imx8mp-venice-gw72xx: fix TPM SPI frequency (Tim Harvey)
  - arm64: dts: imx8mp-venice-gw71xx: fix TPM SPI frequency (Tim Harvey)
  - arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on (Francesco Dolcini)
  - arm64: dts: add big-endian property back into watchdog node (Meng Li)
  - arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency (Tim Harvey)
  - net/mlx5: Update the list of the PCI supported devices (Maor Gottlieb)
  - phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept() (Nathan Chancellor)
  - mptcp: reset fallback status gracefully at disconnect() time (Paolo Abeni)
  - mptcp: plug races between subflow fail and subflow creation (Paolo Abeni) [Orabug: 38324332] {CVE-2025-38552}
  - mptcp: make fallback action and fallback decision atomic (Paolo Abeni) [Orabug: 38254329] {CVE-2025-38491}
  - io_uring/poll: fix POLLERR handling (Pavel Begunkov)
  - ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS (Takashi Iwai)
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx (Edip Hazuri)
  - drm/amd/display: Free memory allocation (Clayton King)
  - drm/amd/display: Disable CRTC degamma LUT for DCN401 (Melissa Wen)
  - drm/amdgpu: Increase reset counter only on success (Lijo Lazar)
  - drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume (Eeli Haapalainen)
  - objtool/rust: add one more `noreturn` Rust function for Rust 1.89.0 (Miguel Ojeda)
  - tracing/osnoise: Fix crash in timerlat_dump_stack() (Tomas Glozar) [Orabug: 38254335] {CVE-2025-38493}
  - tracing: Add down_write(trace_event_sem) when adding trace event (Steven Rostedt) [Orabug: 38324268] {CVE-2025-38539}
  - tracing/probes: Avoid using params uninitialized in parse_btf_arg() (Nathan Chancellor)
  - HID: core: do not bypass hid_hw_raw_request (Benjamin Tissoires) [Orabug: 38254338] {CVE-2025-38494}
  - HID: core: ensure __hid_request reserves the report ID as the first byte (Benjamin Tissoires)
  - HID: core: ensure the allocated report buffer can contain the reserved report ID (Benjamin Tissoires) [Orabug: 38254346] {CVE-2025-38495}
  - dm-bufio: fix sched in atomic context (Sheng Yong) [Orabug: 38254353] {CVE-2025-38496}
  - spi: Add check for 8-bit transfer with 8 IO mode support (Cheng Ming Lin)
  - pch_uart: Fix dma_sync_sg_for_device() nents value (Thomas Fourier)
  - Input: xpad - set correct controller type for Acer NGR200 (Nilton Perim Neto)
  - nvmem: layouts: u-boot-env: remove crc32 endianness conversion (Michael C. Pratt)
  - nvmem: imx-ocotp: fix MAC address byte length (Steffen Bätz)
  - Revert "staging: vchiq_arm: Create keep-alive thread during probe" (Stefan Wahren)
  - thunderbolt: Fix bit masking in tb_dp_port_set_hops() (Alok Tiwari)
  - thunderbolt: Fix wake on connect at runtime (Mario Limonciello)
  - i2c: stm32f7: unmap DMA mapped buffer (Clément Le Goffic)
  - i2c: stm32: fix the device used for the DMA map (Clément Le Goffic)
  - usb: gadget: configfs: Fix OOB read on empty string write (Xinyu Liu) [Orabug: 38254356] {CVE-2025-38497}
  - usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY (Minas Harutyunyan)
  - usb: musb: fix gadget state on disconnect (Drew Hamilton)
  - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (Ryan Mann)
  - USB: serial: option: add Foxconn T99W640 (Slark Xiao)
  - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition (Fabio Porcedda)
  - phy: tegra: xusb: Disable periodic tracking on Tegra234 (Haotien Hsu)
  - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode (Wayne Chang)
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Wayne Chang) [Orabug: 38324256] {CVE-2025-38535}
  - LTS version: v6.12.39 (Jack Vogel)
  - KVM: SVM: Set synthesized TSA CPUID flags (Borislav Petkov)
  - rseq: Fix segfault on registration when rseq_cs is non-zero (Michael Jeanson) [Orabug: 38095070] {CVE-2025-38067}
  - crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP() (Lukas Wunner) [Orabug: 37977089] {CVE-2025-37984}
  - arm64: Filter out SME hwcaps when FEAT_SME isn't implemented (Mark Brown)
  - ksmbd: fix potential use-after-free in oplock/lease break ack (Namjae Jeon) [Orabug: 38254080] {CVE-2025-38437}
  - kasan: remove kasan_find_vm_area() to prevent possible deadlock (Levi Yun) [Orabug: 38324146] {CVE-2025-38510}
  - net: wangxun: revert the adjustment of the IRQ vector sequence (Jiawen Wu)
  - erofs: fix rare pcluster memory leak after unmounting (Gao Xiang)
  - selftests/bpf: adapt one more case in test_lru_map to the new target_free (Willem de Bruijn)
  - HID: nintendo: avoid bluetooth suspend/resume stalls (Daniel J. Ogorchock) [Orabug: 38324137] {CVE-2025-38507}
  - HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras (Chia-Lin Kao) [Orabug: 38324277] {CVE-2025-38540}
  - HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY (Zhang Heng)
  - riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment (Fangrui Song)
  - bpf: Adjust free target to avoid global starvation of LRU map (Willem de Bruijn)
  - vt: add missing notification when switching back to text mode (Nicolas Pitre)
  - btrfs: fix assertion when building free space tree (Filipe Manana) [Orabug: 38324119] {CVE-2025-38503}
  - net: mana: Record doorbell physical address in PF mode (Long Li)
  - HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2 (Akira Inoue)
  - driver: bluetooth: hci_qca:fix unable to load the BT driver (Shuai Zhang)
  - net: usb: qmi_wwan: add SIMCom 8230C composition (Xiaowei Li)
  - ALSA: hda/realtek: Add quirks for some Clevo laptops (Tim Crawford)
  - ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100 (Yasmin Fitzgerald)
  - ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic (Yuzuru)
  - io_uring: make fallocate be hashed work (Fengnan Chang)
  - ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606 (Takashi Iwai)
  - ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak. (Tamura Dai) [Orabug: 38254084] {CVE-2025-38438}
  - um: vector: Reduce stack usage in vector_eth_configure() (Tiwei Bie)
  - atm: idt77252: Add missing `dma_map_error()` (Thomas Fourier)
  - ublk: sanity check add_dev input for underflow (Ronnie Sahlberg)
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Somnath Kotur) [Orabug: 38254088] {CVE-2025-38439}
  - bnxt_en: Fix DCB ETS validation (Shravya Kn)
  - net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam() (Alok Tiwari)
  - net/mlx5e: Add new prio for promiscuous mode (Jianbo Liu)
  - net/mlx5e: Fix race between DIM disable and net_dim() (Carolina Jubran) [Orabug: 38254092] {CVE-2025-38440}
  - can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level (Sean Nyekjaer)
  - drm/xe/pm: Correct comment of xe_pm_set_vram_threshold() (Shuicheng Lin)
  - selftests: net: lib: fix shift count out of range (Hangbin Liu)
  - selftests: net: lib: Move logging from forwarding/lib.sh here (Petr Machata)
  - net: phy: microchip: limit 100M workaround to link-down events on LAN88xx (Oleksij Rempel)
  - net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits (Oleksij Rempel)
  - ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mingming Cao)
  - net: appletalk: Fix device refcount leak in atrtr_create() (Kito Xu) [Orabug: 38324288] {CVE-2025-38542}
  - netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() (Eric Dumazet) [Orabug: 38254094] {CVE-2025-38441}
  - erofs: fix to add missing tracepoint in erofs_readahead() (Chao Yu)
  - erofs: refine readahead tracepoint (Gao Xiang)
  - erofs: tidy up zdata.c (Gao Xiang)
  - erofs: get rid of `z_erofs_next_pcluster_t` (Gao Xiang)
  - erofs: free pclusters if no cached folio is attached (Chunhai Guo)
  - drm/xe/pf: Clear all LMTT pages on alloc (Michal Wajdeczko) [Orabug: 38324148] {CVE-2025-38511}
  - nbd: fix uaf in nbd_genl_connect() error path (Zheng Qixing) [Orabug: 38254100] {CVE-2025-38443}
  - wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() (Henry Martin) [Orabug: 38324286] {CVE-2025-38541}
  - drm/nouveau/gsp: fix potential leak of memory used during acpi init (Ben Skeggs)
  - wifi: rt2x00: fix remove callback type mismatch (Felix Fietkau)
  - wifi: mac80211: fix non-transmitted BSSID profile search (Johannes Berg)
  - wifi: mac80211: correctly identify S1G short beacon (Lachlan Hodges)
  - raid10: cleanup memleak at raid10_make_request (Nigel Croxon) [Orabug: 38254103] {CVE-2025-38444}
  - md/raid1: Fix stack memory use after return in raid1_reshape (Wang Jinchao) [Orabug: 38254107] {CVE-2025-38445}
  - drm/tegra: nvdec: Fix dma_alloc_coherent error check (Mikko Perttunen) [Orabug: 38324294] {CVE-2025-38543}
  - wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev() (Daniil Dulov) [Orabug: 38324159] {CVE-2025-38513}
  - wifi: cfg80211: fix S1G beacon head validation in nl80211 (Lachlan Hodges)
  - netfs: Fix ref leak on inserted extra subreq in write retry (David Howells)
  - netlink: make sure we allow at least one dump skb (Jakub Kicinski)
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Kuniyuki Iwashima)
  - ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count (Peter Ujfalusi)
  - erofs: address D-cache aliasing (Gao Xiang)
  - erofs: fix to add missing tracepoint in erofs_read_folio() (Chao Yu)
  - ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked() (Al Viro)
  - smb: server: make use of rdma_destroy_qp() (Stefan Metzmacher)
  - clk: scmi: Handle case where child clocks are initialized before their parents (Sascha Hauer)
  - x86/mm: Disable hugetlb page table sharing on 32-bit (Jann Horn)
  - x86/rdrand: Disable RDSEED on AMD Cyan Skillfish (Mikhail Paulyshka)
  - clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data (Xiaolei Wang) [Orabug: 38254112] {CVE-2025-38446}
  - rust: init: allow `dead_code` warnings for Rust >= 1.89.0 (Miguel Ojeda)
  - lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users() (Harry Yoo) [Orabug: 38324192] {CVE-2025-38517}
  - mm/vmalloc: leave lazy MMU mode on PTE mapping error (Alexander Gordeev)
  - scripts/gdb: fix interrupts.py after maple tree conversion (Florian Fainelli)
  - scripts/gdb: de-reference per-CPU MCE interrupts (Florian Fainelli)
  - scripts/gdb: fix interrupts display after MCP on x86 (Florian Fainelli)
  - mm: fix the inaccurate memory statistics issue for users (Baolin Wang)
  - maple_tree: fix mt_destroy_walk() on root leaf node (Wei Yang)
  - kallsyms: fix build without execinfo (Achill Gilgenast)
  - Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()" (Zhe Qiao)
  - Revert "ACPI: battery: negate current when discharging" (Rafael J. Wysocki)
  - drm/xe: Allocate PF queue size on pow2 boundary (Matthew Brost)
  - drm/framebuffer: Acquire internal references on GEM handles (Thomas Zimmermann)
  - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io" (Kuen-Han Tsai)
  - usb: gadget: u_serial: Fix race condition in TTY wakeup (Kuen-Han Tsai) [Orabug: 38254116] {CVE-2025-38448}
  - Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2" (Matthew Brost)
  - drm/xe/bmg: fix compressed VRAM handling (Matthew Auld)
  - drm/gem: Fix race in drm_gem_handle_create_tail() (Simona Vetter)
  - drm/ttm: fix error handling in ttm_buffer_object_transfer (Christian König)
  - drm/sched: Increment job count before swapping tail spsc queue (Matthew Brost) [Orabug: 38324178] {CVE-2025-38515}
  - drm/gem: Acquire references on GEM handles for framebuffers (Thomas Zimmermann) [Orabug: 38254122] {CVE-2025-38449}
  - drm/amdkfd: Don't call mmput from MMU notifier callback (Philip Yang) [Orabug: 38324196] {CVE-2025-38520}
  - drm/imagination: Fix kernel crash when hard resetting the GPU (Alessio Belle) [Orabug: 38324199] {CVE-2025-38521}
  - wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan (Michael Lo)
  - wifi: mt76: mt7925: fix the wrong config for tx interrupt (Ming Yen Hsieh)
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() (Deren Wu) [Orabug: 38254130] {CVE-2025-38450}
  - wifi: mt76: mt7921: prevent decap offload config before STA initialization (Deren Wu)
  - wifi: mwifiex: discard erroneous disassoc frames on STA interface (Vitor Soares) [Orabug: 38324132] {CVE-2025-38505}
  - wifi: prevent A-MSDU attacks in mesh networks (Mathy Vanhoef) [Orabug: 38324151] {CVE-2025-38512}
  - pwm: mediatek: Ensure to disable clocks in error path (Uwe Kleine-König)
  - pwm: Fix invalid state detection (Uwe Kleine-König)
  - pinctrl: qcom: msm: mark certain pins as invalid for interrupts (Bartosz Golaszewski) [Orabug: 38324184] {CVE-2025-38516}
  - net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe() (Haoxiang Li) [Orabug: 38254133] {CVE-2025-38452}
  - gre: Fix IPv6 multicast route creation. (Guillaume Nault)
  - ASoC: fsl_sai: Force a software reset when starting in consumer mode (Arun Raghavan)
  - ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp() (Thorsten Blum) [Orabug: 38254137] {CVE-2025-38454}
  - KVM: Allow CPU to reschedule while setting per-page memory attributes (Liam Merwick) [Orabug: 38324134] {CVE-2025-38506}
  - KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight (Sean Christopherson) [Orabug: 38254139] {CVE-2025-38455}
  - KVM: SVM: Add missing member in SNP_LAUNCH_START command structure (Nikunj A Dadhania)
  - KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table. (David Woodhouse)
  - x86/mce: Make sure CMCI banks are cleared during shutdown on Intel (Jp Kobryn)
  - x86/mce: Ensure user polling settings are honored when restarting timer (Yazen Ghannam)
  - x86/mce: Don't remove sysfs if thresholding sysfs init fails (Yazen Ghannam)
  - x86/mce/amd: Fix threshold limit reset (Yazen Ghannam)
  - x86/mce/amd: Add default names for MCA banks and blocks (Yazen Ghannam)
  - ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Dan Carpenter) [Orabug: 38254142] {CVE-2025-38456}
  - rxrpc: Fix oops due to non-existence of prealloc backlog struct (David Howells) [Orabug: 38324168] {CVE-2025-38514}
  - rxrpc: Fix bug due to prealloc collision (David Howells) [Orabug: 38324296] {CVE-2025-38544}
  - net/sched: Abort __tc_modify_qdisc if parent class does not exist (Victor Nogueira) [Orabug: 38254145] {CVE-2025-38457}
  - net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info (Chintan Vankar) [Orabug: 38324304] {CVE-2025-38545}
  - atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (Yue Haibing) [Orabug: 38254151] {CVE-2025-38458}
  - atm: clip: Fix infinite recursive call of clip_push(). (Kuniyuki Iwashima) [Orabug: 38254159] {CVE-2025-38459}
  - atm: clip: Fix memory leak of struct clip_vcc. (Kuniyuki Iwashima) [Orabug: 38324307] {CVE-2025-38546}
  - atm: clip: Fix potential null-ptr-deref in to_atmarpd(). (Kuniyuki Iwashima) [Orabug: 38254165] {CVE-2025-38460}
  - net: phy: smsc: Fix link failure in forced mode with Auto-MDIX (Oleksij Rempel)
  - net: phy: smsc: Force predictable MDI-X state on LAN87xx (Oleksij Rempel)
  - net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap (Oleksij Rempel)
  - net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2 (Ericchan)
  - vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local` (Michal Luczaj)
  - vsock: Fix transport_* TOCTOU (Michal Luczaj) [Orabug: 38254171] {CVE-2025-38461}
  - vsock: Fix transport_{g2h,h2g} TOCTOU (Michal Luczaj) [Orabug: 38254174] {CVE-2025-38462}
  - tcp: Correct signedness in skb remaining space calculation (Jiayuan Chen) [Orabug: 38254177] {CVE-2025-38463}
  - tipc: Fix use-after-free in tipc_conn_close(). (Kuniyuki Iwashima) [Orabug: 38254179] {CVE-2025-38464}
  - vsock: fix `vsock_proto` declaration (Stefano Garzarella)
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Kuniyuki Iwashima) [Orabug: 38254186] {CVE-2025-38465}
  - net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol() (Luo Jie)
  - net: phy: qcom: move the WoL function to shared library (Luo Jie)
  - arm64: poe: Handle spurious Overlay faults (Kevin Brodsky)
  - bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL (Jason Xing)
  - sched/deadline: Fix dl_server runtime calculation formula (Kuyo Chang)
  - fix proc_sys_compare() handling of in-lookup dentries (Al Viro)
  - pinctrl: amd: Clear GPIO debounce for suspend (Mario Limonciello)
  - Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected (Luiz Augusto von Dentz)
  - Bluetooth: hci_sync: Fix not disabling advertising instance (Luiz Augusto von Dentz)
  - ASoC: cs35l56: probe() should fail if the device ID is not recognized (Richard Fitzgerald)
  - perf: Revert to requiring CAP_SYS_ADMIN for uprobes (Peter Zijlstra) [Orabug: 38254195] {CVE-2025-38466}
  - sched/core: Fix migrate_swap() vs. hotplug (Peter Zijlstra)
  - irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ (Nam Cao)
  - perf/core: Fix the WARN_ON_ONCE is out of lock protected region (Luo Gengkun)
  - ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches (Charles Keepax)
  - ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops (Bard Liao)
  - ASoC: Intel: add sof_sdw_get_tplg_files ops (Bard Liao)
  - ASoC: soc-acpi: add get_function_tplg_files ops (Bard Liao)
  - ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops (Simon Trimmer)
  - ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct (Simon Trimmer)
  - ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH (Bard Liao)
  - ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode (Shengjiu Wang)
  - drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV (Srinivasan Shanmugam) [Orabug: 37855415] {CVE-2025-38104}
  - crypto: s390/sha - Fix uninitialized variable in SHA-1 and SHA-2 (Eric Biggers)
  - drm/amdgpu/ip_discovery: add missing ip_discovery fw (Flora Cui)
  - drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics (Flora Cui)
  - drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling (Kaustabh Chakraborty) [Orabug: 38254201] {CVE-2025-38467}
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (Linus Torvalds) [Orabug: 38209551] {CVE-2025-38349}
  - LTS version: v6.12.38 (Jack Vogel)
  - x86/CPU/AMD: Properly check the TSA microcode (Borislav Petkov)
  - LTS version: v6.12.37 (Jack Vogel)
  - x86/process: Move the buffer clearing before MONITOR (Borislav Petkov)
  - x86/microcode/AMD: Add TSA microcode SHAs (Borislav Petkov)
  - KVM: SVM: Advertise TSA CPUID bits to guests (Borislav Petkov)
  - x86/bugs: Add a Transient Scheduler Attacks mitigation (Borislav Petkov) [Orabug: 38023239,38129827] {CVE-2024-36350,CVE-2024-36357}
  - x86/bugs: Rename MDS machinery to something more generic (Borislav Petkov) [Orabug: 38023239,38129827] {CVE-2024-36350,CVE-2024-36357}
  - x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt() (Andrew Cooper) [Orabug: 38264060]
  - Revert "x86/bugs: Rename MDS machinery to something more generic" (Boris Ostrovsky) [Orabug: 38264060]
  - Revert "x86/bugs: Add a Transient Scheduler Attacks mitigation" (Boris Ostrovsky) [Orabug: 38264060]
  - Revert "KVM: SVM: Advertize TSA CPUID bits to guests" (Boris Ostrovsky) [Orabug: 38264060]
  - Revert "x86/process: Move the buffer clearing before MONITOR" (Boris Ostrovsky) [Orabug: 38264060]
  - Revert "Add Zen34 clients" (Boris Ostrovsky) [Orabug: 38264060]
  - Revert "x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt()" (Boris Ostrovsky) [Orabug: 38264060]
  - mm: userfaultfd: fix race of userfaultfd_move and swap cache (Kairui Song) [Orabug: 38175034] {CVE-2025-38242}
  - mm/vmalloc: fix data race in show_numa_info() (Jeongjun Park) [Orabug: 38253860] {CVE-2025-38383}
  - powerpc/kernel: Fix ppc_save_regs inclusion in build (Madhavan Srinivasan)
  - usb: typec: displayport: Fix potential deadlock (Andrei Kuchynski) [Orabug: 38254393] {CVE-2025-38404}
  - platform/x86: think-lmi: Fix sysfs group cleanup (Kurt Borja)
  - platform/x86: think-lmi: Fix kobject cleanup (Kurt Borja)
  - platform/x86: think-lmi: Create ksets consecutively (Kurt Borja)
  - riscv: cpu_ops_sbi: Use static array for boot_data (Vivian Wang) [Orabug: 38253953] {CVE-2025-38407}
  - powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed (Zhang Rui)
  - iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU (Simon Xue)
  - optee: ffa: fix sleep in atomic context (Jens Wiklander) [Orabug: 38253830] {CVE-2025-38374}
  - Logitech C-270 even more broken (Oliver Neukum)
  - i2c/designware: Fix an initialization issue (Michael J. Ruhl) [Orabug: 38253849] {CVE-2025-38380}
  - dma-buf: fix timeout handling in dma_resv_wait_timeout v2 (Christian König)
  - cifs: all initializations for tcon should happen in tcon_info_alloc (Shyam Prasad N)
  - smb: client: fix readdir returning wrong type with POSIX extensions (Philipp Kerling)
  - usb: acpi: fix device link removal (Krogerus Heikki)
  - usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume (Xu Yang) [Orabug: 38253838] {CVE-2025-38376}
  - usb: dwc3: Abort suspend on soft disconnect failure (Kuen-Han Tsai)
  - usb: cdnsp: Fix issue with CV Bad Descriptor test (Pawel Laszczak)
  - usb: cdnsp: do not disable slot for disabled slot (Peter Chen)
  - Input: iqs7222 - explicitly define number of external channels (Jeff Labundy)
  - Input: xpad - support Acer NGR 200 Controller (Nilton Perim Neto)
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Hongyu Xie)
  - xhci: dbc: Flush queued requests before stopping dbc (Mathias Nyman)
  - xhci: dbctty: disable ECHO flag by default (Łukasz Bartosik)
  - usb: xhci: quirk for data loss in ISOC transfers (Raju Rangoju)
  - Revert "usb: xhci: Implement xhci_handshake_check_state() helper" (Roy Luo)
  - usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed (Roy Luo)
  - NFSv4/flexfiles: Fix handling of NFS level errors in I/O (Trond Myklebust)
  - drm/xe: Allow dropping kunit dependency as built-in (Harry Austen)
  - drm/xe/bmg: Update Wa_22019338487 (Vinay Belgaumkar)
  - IB/mlx5: Fix potential deadlock in MR deregistration (Or Har-Toov) [Orabug: 38253826] {CVE-2025-38373}
  - RDMA/mlx5: Fix cache entry update on dereg error (Michael Guralnik)
  - fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Shivank Garg) [Orabug: 38253909] {CVE-2025-38396}
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper (Peter Zijlstra)
  - add a string-to-qstr constructor (Al Viro)
  - rcu: Return early if callback is not specified (Uladzislau Rezki)
  - mtd: spinand: fix memory leak of ECC engine conf (Pablo Martin-Gomez) [Orabug: 38253862] {CVE-2025-38384}
  - ACPICA: Refuse to evaluate a method if arguments are missing (Rafael J. Wysocki) [Orabug: 38253873] {CVE-2025-38386}
  - wifi: ath6kl: remove WARN on bad firmware input (Johannes Berg) [Orabug: 38253944] {CVE-2025-38406}
  - wifi: mac80211: drop invalid source address OCB frames (Johannes Berg)
  - aoe: defer rexmit timer downdev work to workqueue (Justin Sanders)
  - scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port() (Maurizio Lombardi) [Orabug: 38253913] {CVE-2025-38399}
  - regulator: fan53555: add enable_time support and soft-start times (Heiko Stuebner)
  - ASoC: amd: yc: update quirk data for HP Victus (Raven Black)
  - powerpc: Fix struct termio related ioctl macros (Madhavan Srinivasan)
  - genirq/irq_sim: Initialize work context pointers properly (Gyeyoung Baek) [Orabug: 38253955] {CVE-2025-38408}
  - platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list (Mario Limonciello)
  - ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic (Gabriel Santese)
  - ata: pata_cs5536: fix build on 32-bit UML (Johannes Berg)
  - ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled (Tasos Sahanidis)
  - ALSA: sb: Force to disable DMAs once when DMA mode is changed (Takashi Iwai)
  - ALSA: sb: Don't allow changing the DMA mode during operations (Takashi Iwai)
  - drm/msm: Fix another leak in the submit error path (Rob Clark) [Orabug: 38253959] {CVE-2025-38409}
  - drm/msm: Fix a fence leak in submit error path (Rob Clark) [Orabug: 38253966] {CVE-2025-38410}
  - scsi: lpfc: Restore clearing of NLP_UNREG_INP in ndlp->nlp_flag (Ewan D. Milne)
  - sched_ext: Make scx_group_set_weight() always update tg->scx.weight (Tejun Heo)
  - drm/amdgpu/mes: add missing locking in helper functions (Alex Deucher)
  - arm64: dts: qcom: x1e80100-crd: mark l12b and l15b always-on (Johan Hovold)
  - drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (Nicholas Kazlauskas) [Orabug: 38253787] {CVE-2025-38360}
  - drm/amdgpu: add kicker fws loading for gfx11/smu13/psp13 (Frank Min)
  - drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read (Imre Deak)
  - drm/amdgpu: VCN v5_0_1 to prevent FW checking RB during DPG pause (Sonny Jiang)
  - drm/simpledrm: Do not upcast in release helpers (Thomas Zimmermann)
  - selinux: change security_compute_sid to return the ssid or tsid on match (Stephen Smalley)
  - drm/xe/guc: Explicitly exit CT safe mode on unwind (Michal Wajdeczko) [Orabug: 38253775] {CVE-2025-38356}
  - drm/xe/guc: Dead CT helper (John Harrison)
  - drm/xe: Replace double space with single space after comma (Gote, Nitin R)
  - drm/xe: move DPT l2 flush to a more sensible place (Matthew Auld)
  - drm/xe: Allow bo mapping on multiple ggtts (Niranjana Vishwanathapura)
  - drm/xe: add interface to request physical alignment for buffer objects (Juha-Pekka Heikkila)
  - drm/xe: Move DSB l2 flush to a more sensible place (Maarten Lankhorst)
  - drm/xe: Fix DSB buffer coherency (Maarten Lankhorst)
  - mfd: exynos-lpass: Fix another error handling path in exynos_lpass_probe() (Christophe Jaillet)
  - netfs: Fix oops in write-retry from mis-resetting the subreq iterator (David Howells) [Orabug: 38153033] {CVE-2025-38139}
  - remoteproc: k3-r5: Refactor sequential core power up/down operations (Beleswar Padhi)
  - remoteproc: k3-r5: Use devm_rproc_add() helper (Beleswar Padhi)
  - remoteproc: k3-r5: Use devm_ioremap_wc() helper (Beleswar Padhi)
  - remoteproc: k3-r5: Use devm_kcalloc() helper (Beleswar Padhi)
  - remoteproc: k3-r5: Add devm action to release reserved memory (Beleswar Padhi)
  - remoteproc: k3: Call of_node_put(rmem_np) only once in three functions (Markus Elfring)
  - ubsan: integer-overflow: depend on BROKEN to keep this out of CI (Kees Cook)
  - arm64: dts: qcom: sm8650: add the missing l2 cache node (Pengyu Luo)
  - arm64: dts: renesas: white-hawk-single: Improve Ethernet TSN description (Geert Uytterhoeven)
  - arm64: dts: renesas: Factor out White Hawk Single board support (Geert Uytterhoeven)
  - arm64: dts: renesas: Use interrupts-extended for Ethernet PHYs (Geert Uytterhoeven)
  - arm64: dts: qcom: sm8650: Fix domain-idle-state for CPU2 (Luca Weiss)
  - arm64: dts: qcom: sm8650: change labels to lower-case (Krzysztof Kozlowski)
  - bpf: Do not include stack ptr register in precision backtracking bookkeeping (Yonghong Song) [Orabug: 38180467] {CVE-2025-38279}
  - bpf: use common instruction history across all states (Andrii Nakryiko)
  - hisi_acc_vfio_pci: bugfix the problem of uninstalling driver (Longfang Liu)
  - hisi_acc_vfio_pci: bugfix cache write-back issue (Longfang Liu)
  - scsi: lpfc: Avoid potential ndlp use-after-free in dev_loss_tmo_callbk (Justin Tee) [Orabug: 38180503] {CVE-2025-38289}
  - f2fs: zone: fix to calculate first_zoned_segno correctly (Chao Yu)
  - f2fs: zone: introduce first_zoned_segno in f2fs_sb_info (Chao Yu)
  - f2fs: decrease spare area for pinned files for zoned devices (Daeho Jeong)
  - iommu: ipmmu-vmsa: avoid Wformat-security warning (Arnd Bergmann)
  - RDMA/rxe: Fix "trying to register non-static key in rxe_qp_do_cleanup" bug (Zhu Yanjun)
  - wifi: ath12k: fix wrong handling of CCMP256 and GCMP ciphers (Rameshkumar Sundaram)
  - wifi: ath12k: Handle error cases during extended skb allocation (P Praneesh)
  - wifi: ath12k: fix skb_ext_desc leak in ath12k_dp_tx() error path (Nicolas Escande)
  - bonding: Mark active offloaded xfrm_states (Cosmin Ratiu)
  - ACPI: thermal: Execute _SCP before reading trip points (Armin Wolf)
  - ACPI: thermal: Fix stale comment regarding trip points (Xueqin Luo)
  - ASoC: tas2764: Reinit cache on part reset (Martin Povišer)
  - ASoC: tas2764: Extend driver to SN012776 (Martin Povišer)
  - gfs2: Don't start unnecessary transactions during log flush (Andreas Gruenbacher)
  - gfs2: Move gfs2_trans_add_databufs (Andreas Gruenbacher)
  - sched/fair: Fixup wake_up_sync() vs DELAYED_DEQUEUE (Xuewen Yan)
  - sched/fair: Add new cfs_rq.h_nr_runnable (Vincent Guittot)
  - sched/fair: Rename h_nr_running into h_nr_queued (Vincent Guittot)
  - btrfs: fix wrong start offset for delalloc space release during mmap write (Filipe Manana)
  - btrfs: prepare btrfs_page_mkwrite() for large folios (Qu Wenruo)
  - gfs2: deallocate inodes in gfs2_create_inode (Andreas Gruenbacher)
  - gfs2: Move GIF_ALLOC_FAILED check out of gfs2_ea_dealloc (Andreas Gruenbacher)
  - gfs2: Move gfs2_dinode_dealloc (Andreas Gruenbacher)
  - gfs2: Replace GIF_DEFER_DELETE with GLF_DEFER_DELETE (Andreas Gruenbacher)
  - gfs2: Add GLF_PENDING_REPLY flag (Andreas Gruenbacher)
  - gfs2: Decode missing glock flags in tracepoints (Andreas Gruenbacher)
  - gfs2: Prevent inode creation race (Andreas Gruenbacher)
  - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher)
  - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher)
  - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher)
  - kunit: qemu_configs: Disable faulting tests on 32-bit SPARC (David Gow)
  - kunit: qemu_configs: sparc: Explicitly enable CONFIG_SPARC32=y (Thomas Weißschuh)
  - kunit: qemu_configs: sparc: use Zilog console (Thomas Weißschuh)
  - crypto: zynqmp-sha - Add locking (Herbert Xu)
  - spinlock: extend guard with spinlock_bh variants (Christian Marangi)
  - crypto: iaa - Do not clobber req->base.data (Herbert Xu)
  - crypto: iaa - Remove dst_null support (Herbert Xu)
  - arm64: dts: rockchip: fix internal USB hub instability on RK3399 Puma (Lukasz Czechowski)
  - smb: client: fix race condition in negotiate timeout by using more precise timing (Wang Zhaolong)
  - amd-xgbe: do not double read link status (Raju Rangoju)
  - net/sched: Always pass notifications when child class becomes empty (Lion Ackermann) [Orabug: 38217337] {CVE-2025-38350}
  - nui: Fix dma_mapping_error() check (Thomas Fourier)
  - rose: fix dangling neighbour pointers in rose_rt_device_down() (Kohei Enju) [Orabug: 38253840] {CVE-2025-38377}
  - enic: fix incorrect MTU comparison in enic_change_mtu() (Alok Tiwari)
  - amd-xgbe: align CL37 AN sequence as per databook (Raju Rangoju)
  - lib: test_objagg: Set error message in check_expect_hints_stats() (Dan Carpenter)
  - netfs: Fix i_size updating (David Howells)
  - smb: client: set missing retry flag in cifs_writev_callback() (Paulo Alcantara)
  - smb: client: set missing retry flag in cifs_readv_callback() (Paulo Alcantara)
  - smb: client: set missing retry flag in smb2_writev_callback() (Paulo Alcantara)
  - igc: disable L1.2 PCI-E link substate to avoid performance issue (Vitaly Lifshits)
  - idpf: convert control queue mutex to a spinlock (Ahmed Zaki) [Orabug: 38253897] {CVE-2025-38392}
  - idpf: return 0 size for RSS key if not supported (Michal Swiatkowski) [Orabug: 38253932] {CVE-2025-38402}
  - drm/i915/gsc: mei interrupt top half should be in irq disabled context (Junxiao Chang)
  - drm/i915/gt: Fix timeline left held on VMA alloc error (Janusz Krzysztofik) [Orabug: 38253885] {CVE-2025-38389}
  - net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect (Oleksij Rempel) [Orabug: 38253870] {CVE-2025-38385}
  - smb: client: fix warning when reconnecting channel (Paulo Alcantara) [Orabug: 38254386] {CVE-2025-38379}
  - drm/bridge: aux-hpd-bridge: fix assignment of the of_node (Dmitry Baryshkov)
  - platform/mellanox: mlxreg-lc: Fix logic error in power state check (Alok Tiwari)
  - platform/x86: dell-wmi-sysman: Fix class device unregistration (Kurt Borja)
  - platform/x86: dell-sysman: Directly use firmware_attributes_class (Thomas Weißschuh)
  - platform/x86: think-lmi: Fix class device unregistration (Kurt Borja)
  - platform/x86: think-lmi: Directly use firmware_attributes_class (Thomas Weißschuh)
  - platform/x86: firmware_attributes_class: Simplify API (Thomas Weißschuh)
  - platform/x86: firmware_attributes_class: Move include linux/device/class.h (Thomas Weißschuh)
  - platform/x86: hp-bioscfg: Fix class device unregistration (Kurt Borja)
  - platform/x86: hp-bioscfg: Directly use firmware_attributes_class (Thomas Weißschuh)
  - platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks (Kurt Borja) [Orabug: 38253975] {CVE-2025-38412}
  - nvmet: fix memory leak of bio integrity (Dmitry Bogdanov) [Orabug: 38253942] {CVE-2025-38405}
  - nvme: Fix incorrect cdw15 value in passthru error logging (Alok Tiwari)
  - drm/i915/selftests: Change mock_request() to return error pointers (Dan Carpenter)
  - spi: spi-fsl-dspi: Clear completion counter before initiating transfer (James Clark)
  - drm/exynos: fimd: Guard display clock control with runtime PM calls (Marek Szyprowski)
  - dpaa2-eth: fix xdp_rxq_info leak (Wangfushuai)
  - ethernet: atl1: Add missing DMA mapping error checks and count errors (Thomas Fourier)
  - btrfs: use btrfs_record_snapshot_destroy() during rmdir (Filipe Manana)
  - btrfs: propagate last_unlink_trans earlier when doing a rmdir (Filipe Manana)
  - btrfs: record new subvolume in parent dir earlier to avoid dir logging races (Filipe Manana)
  - btrfs: fix inode lookup error handling during log replay (Filipe Manana)
  - btrfs: fix invalid inode pointer dereferences during log replay (Filipe Manana) [Orabug: 38288149] {CVE-2025-38243}
  - btrfs: return a btrfs_inode from read_one_inode() (Filipe Manana)
  - btrfs: return a btrfs_inode from btrfs_iget_logging() (Filipe Manana)
  - btrfs: fix iteration of extrefs during log replay (Filipe Manana) [Orabug: 38253858] {CVE-2025-38382}
  - btrfs: fix missing error handling when searching for inode refs during log replay (Filipe Manana)
  - Bluetooth: Prevent unintended pause by checking if advertising is active (Yang Li)
  - platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message (Alok Tiwari)
  - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (Alok Tiwari)
  - RDMA/mlx5: Fix vport loopback for MPV device (Patrisious Haddad) [Orabug: 38118599]
  - scsi: ufs: core: Fix spelling of a sysfs attribute name (Bart Van Assche)
  - scsi: sd: Fix VPD page 0xb7 length check (Jackysliu)
  - scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu() (Thomas Fourier)
  - scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database() (Thomas Fourier)
  - NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN (Benjamin Coddington) [Orabug: 38253899] {CVE-2025-38393}
  - nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails. (Kuniyuki Iwashima) [Orabug: 38253921] {CVE-2025-38400}
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Mark Zhang) [Orabug: 38253879] {CVE-2025-38387}
  - RDMA/mlx5: Fix unsafe xarray access in implicit ODP handling (Or Har-Toov) [Orabug: 38253824] {CVE-2025-38372}
  - platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment (David Thompson)
  - arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename (Janne Grunau)
  - firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context (Sudeep Holla) [Orabug: 38253883] {CVE-2025-38388}
  - firmware: arm_ffa: Move memory allocation outside the mutex locking (Sudeep Holla)
  - firmware: arm_ffa: Fix memory leak by freeing notifier callback node (Sudeep Holla) [Orabug: 38253890] {CVE-2025-38390}
  - drm/v3d: Disable interrupts before resetting the GPU (Maíra Canal) [Orabug: 38253819] {CVE-2025-38371}
  - mtk-sd: reset host->mrq on prepare_data() error (Sergey Senozhatsky)
  - mtk-sd: Prevent memory corruption from DMA map failure (Masami Hiramatsu) [Orabug: 38253926] {CVE-2025-38401}
  - mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data (Masami Hiramatsu)
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Rd Babiera) [Orabug: 38253892] {CVE-2025-38391}
  - Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt() (Yunshui) [Orabug: 38253852] {CVE-2025-38381}
  - regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods (Manivannan Sadhasivam) [Orabug: 38253905] {CVE-2025-38395}
  - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes (Nicolin Chen)
  - Bluetooth: MGMT: mesh_send: check instances prior disabling advertising (Christian Eggers)
  - Bluetooth: MGMT: set_mesh: update LE scan interval and window (Christian Eggers)
  - Bluetooth: hci_sync: revert some mesh modifications (Christian Eggers)
  - Bluetooth: HCI: Set extended advertising data synchronously (Christian Eggers)
  - mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier (Avri Altman)
  - Revert "mmc: sdhci: Disable SD card clock before changing parameters" (Ulf Hansson)
  - mmc: sdhci: Add a helper function for dump register in dynamic debug mode (Victor Shih)
  - net: libwx: fix the incorrect display of the queue number (Jiawen Wu)
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (Harshavardhana S A) [Orabug: 38253935] {CVE-2025-38403}
  - net: txgbe: request MISC IRQ in ndo_open (Jiawen Wu)
  - s390/pci: Do not try re-enabling load/store if device is disabled (Niklas Schnelle)
  - s390/pci: Fix stale function handles in error handling (Niklas Schnelle)
  - virtio-net: ensure the received length does not exceed allocated size (Bui Quang Minh) [Orabug: 38253832] {CVE-2025-38375}
  - virtio-net: xsk: rx: fix the frame's length check (Bui Quang Minh) [Orabug: 38253978] {CVE-2025-38413}
  - rtc: cmos: use spin_lock_irqsave in cmos_interrupt (Mateusz Jończyk)
  - rtc: pcf2127: fix SPI command byte for PCF2131 (Elena Popa)
  - rtc: pcf2127: add missing semicolon after statement (Hugo Villeneuve)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-103.40.3.el9uek]
changelog:
  - enic: get max rq & wq entries supported by hw, 16K queues (Satish Kharat) [Orabug: 38058289]
  - enic: cleanup of enic wq request completion path (Satish Kharat) [Orabug: 38058289]
  - enic: added enic_wq.c and enic_wq.h (Satish Kharat) [Orabug: 38058289]
  - enic: remove unused function cq_enet_wq_desc_dec (Satish Kharat) [Orabug: 38058289]
  - enic: enable rq extended cq support (Satish Kharat) [Orabug: 38058289]
  - enic: enic rq extended cq defines (Satish Kharat) [Orabug: 38058289]
  - enic: enic rq code reorg (Satish Kharat) [Orabug: 38058289]
  - enic: Move function from header file to c file (Satish Kharat) [Orabug: 38058289]
  - enic: add dependency on Page Pool (John Daley) [Orabug: 38058289]
  - enic: remove copybreak tunable (John Daley) [Orabug: 38058289]
  - enic: Use the Page Pool API for RX (John Daley) [Orabug: 38058289]
  - enic: Simplify RX handler function (John Daley) [Orabug: 38058289]
  - enic: Move RX functions to their own file (John Daley) [Orabug: 38058289]
  - enic: Fix typo in comment in table indexed by link speed (John Daley) [Orabug: 38058289]
  - enic: Obtain the Link speed only after the link comes up (John Daley) [Orabug: 38058289]
  - enic: Move RX coalescing set function (John Daley) [Orabug: 38058289]
  - enic: Move kdump check into enic_adjust_resources() (Nelson Escobar) [Orabug: 38058289]
  - enic: Move enic resource adjustments to separate function (Nelson Escobar) [Orabug: 38058289]
  - enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (Nelson Escobar) [Orabug: 38058289]
  - enic: Allocate arrays in enic struct based on VIC config (Nelson Escobar) [Orabug: 38058289]
  - enic: Save resource counts we read from HW (Nelson Escobar) [Orabug: 38058289]
  - enic: Make MSI-X I/O interrupts come after the other required ones (Nelson Escobar) [Orabug: 38058289]
  - enic: Create enic_wq/rq structures to bundle per wq/rq data (Nelson Escobar) [Orabug: 38058289]
  - RDMA/mlx5: Fix HW counters query for non-representor devices (Patrisious Haddad) [Orabug: 38161799]
  - RDMA/mlx5: Fix CC counters query for MPV (Patrisious Haddad) [Orabug: 38161799]
  - Revert "RDMA/mlx5: Fix CC counters query for MPV" (Qing Huang) [Orabug: 38161799]
  - block: use chunk_sectors when evaluating stacked atomic write limits (John Garry) [Orabug: 38279050]
  - dm-stripe: limit chunk_sectors to the stripe size (John Garry) [Orabug: 38279050]
  - md/raid10: set chunk_sectors limit (John Garry) [Orabug: 38279050]
  - md/raid0: set chunk_sectors limit (John Garry) [Orabug: 38279050]
  - block: sanitize chunk_sectors for atomic write limits (John Garry) [Orabug: 38279050]
  - ilog2: add max_pow_of_two_factor() (John Garry) [Orabug: 38279050]
  - net/mlx5: E-Switch, Fix switching to switchdev mode in MPV (Patrisious Haddad) [Orabug: 38281424]
  - net/mlx5: E-Switch, Fix switching to switchdev mode with IB device disabled (Patrisious Haddad) [Orabug: 38281424]
  - net/mlx5: E-switch, refactor eswitch mode change (Patrisious Haddad) [Orabug: 38281424]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-103.40.4.el9uek]
changelog:
  - rds: Fix NULL ptr deref in xas_start (Håkon Bugge) [Orabug: 38169301]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [Orabug: 38325898]


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
  - Addresses CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: EL Errata <el-errata_ww@oracle.com> - 4:20240910-1.0.1
changelog:
  - don't bother calling dracut if virtualized [Orabug: 35710094]
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eric Sandeen <sandeen@redhat.com> - 6.10.1-1
changelog:
  - Update to latest upstream version
  - Fix C++ compilation errors in xfs_fs.h
  - Related: rhbz#2309693, rhbz#2308609


author: Darrick J. Wong <darrick.wong@oracle.com> 6.12.0-1.0.1
changelog:
  - Add mkfs configuration files for OL.
  - Add mkfs.xmem script.
  - Enable background online fsck services by default.  Users must set autofsck=1 on their filesystems.
  - Rebase atop latest upstream.


