# changelog

author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.63.2.el9uek]
changelog:
  - LTS version: v6.12.63 (Jack Vogel)
  - ASoC: codecs: nau8325: Silence uninitialized variables warnings (Krzysztof Kozlowski)
  - ALSA: wavefront: Fix integer overflow in sample size validation (Junrui Luo)
  - ALSA: dice: fix buffer overflow in detect_stream_formats() (Junrui Luo)
  - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required (Sven Peter)
  - usb: phy: Initialize struct usb_phy list_head (Diogo Ivo)
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Haotien Hsu)
  - tcp_metrics: use dst_dev_net_rcu() (Eric Dumazet) [Orabug: 38592188] {CVE-2025-40075}
  - net: dst: introduce dst->dev_rcu (Eric Dumazet)
  - net: lan743x: Allocate rings outside ZONE_DMA (Thangaraj Samynathan)
  - LoongArch: Add machine_kexec_mask_interrupts() implementation (Huacai Chen)
  - ocfs2: fix memory leak in ocfs2_merge_rec_left() (Dmitry Antipov)
  - irqchip/mchp-eic: Fix error code in mchp_eic_domain_alloc() (Dan Carpenter)
  - scsi: imm: Fix use-after-free bug caused by unfinished delayed work (Duoming Zhou) [Orabug: 38783113] {CVE-2025-68324}
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Mauro Carvalho Chehab)
  - efi/cper: Adjust infopfx size to accept an extra space (Mauro Carvalho Chehab)
  - efi/cper: Add a new helper function to print bitmasks (Mauro Carvalho Chehab)
  - dm log-writes: Add missing set_freezable() for freezable kthread (Xu Wang)
  - dm-raid: fix possible NULL dereference with undefined raid type (Alexey Simakov)
  - block: return unsigned int from queue_dma_alignment (Christoph Hellwig)
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (Mohamed Khalfella) [Orabug: 38818209] {CVE-2025-68756}
  - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() (Pangliyuan)
  - ALSA: firewire-motu: add bounds check in put_user loop for DSP events (Junrui Luo)
  - rtc: gamecube: Check the return value of ioremap() (Xu Wang)
  - drm/amdkfd: Use huge page size to check split svm range alignment (Xiaogang Chen)
  - ALSA: uapi: Fix typo in asound.h comment (Andres J Rosa)
  - docs: hwmon: fix link to g762 devicetree binding (Kathara Sasikumar)
  - cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB2 (David Howells)
  - drm/nouveau: refactor deprecated strcpy (Madhur Kumar)
  - ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events (Junrui Luo)
  - regulator: fixed: Rely on the core freeing the enable GPIO (Mark Brown)
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Dan Carpenter)
  - nvme-auth: use kvfree() for memory allocated with kvcalloc() (Israel Rukshin)
  - block: fix memory leak in __blkdev_issue_zero_pages (Shaurya Rane) [Orabug: 38798772] {CVE-2025-68348}
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (Shechenglong)
  - blk-mq: Abort suspend when wakeup events are pending (Cong Zhang)
  - ASoC: ak5558: Disable regulator when error happens (Shengjiu Wang)
  - ASoC: ak4458: Disable regulator when error happens (Shengjiu Wang)
  - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() (Xu Wang)
  - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led (Anton Khirnov)
  - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() (Armin Wolf)
  - NFS: Fix inheritance of the block sizes when automounting (Trond Myklebust)
  - Expand the type of nfs_fattr->valid (Trond Myklebust)
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Trond Myklebust) [Orabug: 38818236] {CVE-2025-68764}
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Trond Myklebust)
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Trond Myklebust)
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Trond Myklebust)
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Jonathan Curley) [Orabug: 38798774] {CVE-2025-68349}
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Trond Myklebust)
  - nfs/vfs: discard d_exact_alias() (Neil Brown)
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Trond Myklebust)
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Trond Myklebust)
  - fs/nls: Fix utf16 to utf8 conversion (Armin Wolf)
  - NFS: Avoid changing nlink when file removes and attribute updates race (Trond Myklebust)
  - f2fs: maintain one time GC mode is enabled during whole zoned GC cycle (Daeho Jeong)
  - f2fs: add gc_boost_gc_greedy sysfs node (Daeho Jeong)
  - f2fs: add gc_boost_gc_multiple sysfs node (Daeho Jeong)
  - f2fs: introduce reserved_pin_section sysfs entry (Chao Yu)
  - f2fs: sysfs: add encoding_flags entry (Chao Yu)
  - f2fs: add carve_out sysfs node (Daeho Jeong)
  - f2fs: fix to avoid running out of free segments (Chao Yu)
  - f2fs: add a sysfs entry to reclaim POSIX_FADV_NOREUSE pages (Jaegeuk Kim)
  - f2fs: keep POSIX_FADV_NOREUSE ranges (Jaegeuk Kim)
  - platform/x86:intel/pmc: Update Arrow Lake telemetry GUID (Xi Pardee)
  - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out (Xupengbo)
  - 9p: fix cache/debug options printing in v9fs_show_options (Eric Sandeen)
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (Abdun Nihaal)
  - pinctrl: single: Fix incorrect type for error return variable (Xu Wang)
  - perf hist: In init, ensure mem_info is put on error paths (Ian Rogers)
  - perf tools: Fix split kallsyms DSO counting (Namhyung Kim)
  - perf tools: Mark split kallsyms DSOs as loaded (Namhyung Kim)
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Xiang Mei) [Orabug: 38783136] {CVE-2025-68325}
  - net: dsa: xrs700x: reject unsupported HSR configurations (Vladimir Oltean)
  - net: hsr: create an API to get hsr port type (Xiaoliang Yang)
  - net: hsr: Create and export hsr_get_port_ndev() (Md Danish Anwar)
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Eric Dumazet)
  - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Eric Dumazet)
  - clk: keystone: fix compile testing (Johan Hovold)
  - md/raid5: fix IO hang when array is broken with IO inflight (Yu Kuai)
  - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs (Alexandru Gagniuc)
  - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds (Ivan Stepchenko)
  - selftests: bonding: add delay before each xvlan_over_bond connectivity check (Hangbin Liu)
  - selftests: bonding: add ipvlan over bond testing (Etienne Champetier)
  - net: phy: aquantia: check for NVMEM deferral (Robert Marko)
  - vfio/pci: Use RCU for error/request triggers to avoid circular locking (Alex Williamson)
  - spi: ch341: fix out-of-bounds memory access in ch341_transfer_one (Tianchu Chen)
  - mtd: rawnand: renesas: Handle devm_pm_runtime_enable() errors (Xu Wang)
  - net: stmmac: fix rx limit check in stmmac_rx_zc() (Alexey Kodanev)
  - netfilter: nft_connlimit: update the count if add was skipped (Fernando Fernandez Mancera)
  - netfilter: nf_conncount: rework API to use sk_buff directly (Fernando Fernandez Mancera)
  - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan (Pablo Neira Ayuso)
  - Reinstate "resource: avoid unnecessary lookups in find_next_iomem_res()" (Ilias Stamatis)
  - resource: introduce is_type_match() helper and use it (Andy Shevchenko)
  - resource: replace open coded resource_intersection() (Andy Shevchenko)
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex (Sparkhuang) [Orabug: 38798786] {CVE-2025-68354}
  - ARM: dts: samsung: exynos4412-midas: turn off SDIO WLAN chip during system suspend (Marek Szyprowski)
  - ARM: dts: samsung: exynos4210-trats: turn off SDIO WLAN chip during system suspend (Marek Szyprowski)
  - ARM: dts: samsung: exynos4210-i9100: turn off SDIO WLAN chip during system suspend (Marek Szyprowski)
  - ARM: dts: samsung: universal_c210: turn off SDIO WLAN chip during system suspend (Marek Szyprowski)
  - spi: airoha-snfi: en7523: workaround flash damaging if UART_TXD was short to GND (Mikhail Kshevetskiy)
  - ASoC: Intel: catpt: Fix error path in hw_params() (Cezary Rojewski)
  - vdpa/pds: use %pe for ERR_PTR() in event handler registration (Alok Tiwari)
  - vhost: Fix kthread worker cgroup failure handling (Mike Christie)
  - vdpa/mlx5: Fix incorrect error code reporting in query_virtqueues (Alok Tiwari)
  - virtio: fix virtqueue_set_affinity() docs (Michael S. Tsirkin)
  - virtio: fix grammar in virtio_queue_info docs (Michael S. Tsirkin)
  - virtio: fix whitespace in virtio_config_ops (Michael S. Tsirkin)
  - virtio: fix typo in virtio_device_ready() comment (Michael S. Tsirkin)
  - virtio_vdpa: fix misleading return in void function (Alok Tiwari)
  - of: Skip devicetree kunit tests when RISCV+ACPI doesn't populate root node (Guenter Roeck)
  - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation (Yongjian Sun)
  - ublk: prevent invalid access with DEBUG (Kevin Brodsky)
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (René Rebe)
  - hwmon: sy7636a: Fix regulator_enable resource leak on error path (Xu Wang)
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Dan Carpenter)
  - greybus: gb-beagleplay: Fix timeout handling in bootloader functions (Xu Wang)
  - firmware_loader: make RUST_FW_LOADER_ABSTRACTIONS select FW_LOADER (Alexandre Courbot)
  - ASoC: fsl_xcvr: clear the channel status control memory (Shengjiu Wang)
  - gfs2: Prevent recursive memory reclaim (Andreas Gruenbacher) [Orabug: 38798793] {CVE-2025-68356}
  - ASoC: nau8325: add missing build config (Jaroslav Kysela)
  - ASoC: nau8325: use simple i2c probe function (Jaroslav Kysela)
  - drm/panthor: Avoid adding of kernel BOs to extobj list (Akash Goel)
  - RDMA/irdma: Do not directly rely on IB_PD_UNSAFE_GLOBAL_RKEY (Jacob Moroni)
  - RDMA/irdma: Fix data race in irdma_free_pble (Krzysztof Czurylo)
  - RDMA/irdma: Fix data race in irdma_sc_ccq_arm (Krzysztof Czurylo)
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Stephan Gerhold)
  - backlight: lp855x: Fix lp855x.h kernel-doc warnings (Randy Dunlap)
  - backlight: led-bl: Add devlink to supplier LEDs (Luca Ceresoli)
  - wifi: ieee80211: correct FILS status codes (Ria Thomas)
  - iomap: always run error completions in user context (Christoph Hellwig)
  - iomap: factor out a iomap_dio_done helper (Christoph Hellwig)
  - um: Don't rename vmap to kernel_vmap (David Gow)
  - drm/nouveau: restrict the flush page to a 32-bit address (Timur Tabi)
  - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition (Shawn Lin)
  - btrfs: fix leaf leak in an error path in btrfs_del_items() (Filipe Manana)
  - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables (Ryan Huang)
  - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() (Jianglei Nie)
  - firmware: stratix10-svc: fix make htmldocs warning for stratix10_svc (Dinh Nguyen)
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Zilin Guan)
  - ASoC: tas2781: correct the wrong period (Shenghao Ding)
  - RDMA/bnxt_re: Pass correct flag for dma mr creation (Selvin Xavier)
  - RDMA/bnxt_re: Fix the inline size for GenP7 devices (Selvin Xavier)
  - erofs: limit the level of fs stacking for file-backed mounts (Gao Xiang)
  - RISC-V: KVM: Fix guest page fault within HLV* instructions (Fangyu Yu)
  - crypto: ccree - Correctly handle return of sg_nents_for_len (Xu Wang)
  - crypto: starfive - Correctly handle return of sg_nents_for_len (Xu Wang)
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Matt Bobrowski)
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Matt Bobrowski)
  - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE (Gopi Krishna Menon)
  - usb: dwc2: fix hang during suspend if set as peripheral (Jisheng Zhang)
  - usb: dwc2: fix hang during shutdown if set as peripheral (Jisheng Zhang)
  - usb: dwc2: disable platform lowlevel hw resources during shutdown (Jisheng Zhang)
  - usb: chaoskey: fix locking for O_NONBLOCK (Oliver Neukum)
  - ima: Handle error code returned by ima_filter_rule_match() (Zhao Yipeng) [Orabug: 38798921] {CVE-2025-68740}
  - RAS: Report all ARM processor CPER information to userspace (Jason Tian)
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() (Seungjin Bae) [Orabug: 38798814] {CVE-2025-68362}
  - cpuset: Treat cpusets in attaching as populated (Chen Ridong)
  - net: phy: adin1100: Fix software power-down ready condition (Alexander Dahl)
  - phy: rockchip: samsung-hdptx: Prevent Inter-Pair Skew from exceeding the limits (Cristian Ciocaltea)
  - phy: rockchip: samsung-hdptx: Reduce ROPLL loop bandwidth (Cristian Ciocaltea)
  - phy: freescale: Initialize priv->lock (Xiaolei Wang)
  - phy: renesas: rcar-gen3-usb2: Fix an error handling path in rcar_gen3_phy_usb2_probe() (Christophe Jaillet)
  - leds: rgb: leds-qcom-lpg: Don't enable TRILED when configuring PWM (Fenglin Wu)
  - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path (Xu Wang)
  - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path (Xu Wang)
  - wifi: mac80211: fix CMAC functions not handling errors (Chien Wong)
  - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb (Aashish Sharma)
  - scsi: qla2xxx: Fix improper freeing of purex item (Zilin Guan) [Orabug: 38798928] {CVE-2025-68741}
  - pwm: bcm2835: Make sure the channel is enabled after pwm_request() (Uwe Kleine-König)
  - perf arm_spe: Fix memset subclass in operation (Leo Yan)
  - perf arm-spe: Extend branch operations (Leo Yan)
  - ipv6: clear RA flags when adding a static route (Fernando Fernandez Mancera)
  - drm/msm/a6xx: Improve MX rail fallback in RPMH vote init (Akhil P Oommen)
  - drm/msm/a6xx: Fix the gemnoc workaround (Akhil P Oommen)
  - drm/msm/a6xx: Flush LRZ cache before PT switch (Akhil P Oommen)
  - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue (Jay Liu)
  - fs/ntfs3: Prevent memory leaks in add sub record (Edward Adam Davis)
  - fs/ntfs3: out1 also needs to put mi (Edward Adam Davis)
  - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format (Ritesh Harjani)
  - powerpc/64s/hash: Restrict stress_hpt_struct memblock region to within RMA limit (Ritesh Harjani)
  - bpf: Fix invalid prog->stats access when update_effective_progs fails (Pu Lehui) [Orabug: 38798931] {CVE-2025-68742}
  - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() (Abdun Nihaal) [Orabug: 38818221] {CVE-2025-68759}
  - drm/msm/a2xx: stop over-complaining about the legacy firmware (Dmitry Baryshkov)
  - block/blk-throttle: Fix throttle slice time for SSDs (Guenter Roeck)
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Sergey Bashirov)
  - tracefs: fix a leak in eventfs_create_events_dir() (Al Viro)
  - watchdog: starfive: Fix resource leak in probe error path (Xu Wang)
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Xu Wang)
  - bpf: Check skb->transport_header is set in bpf_skb_check_mtu (Martin Kafai Lau) [Orabug: 38798820] {CVE-2025-68363}
  - selftests/bpf: Fix failure paths in send_signal test (Alexei Starovoitov)
  - bpf: Handle return value of ftrace_set_filter_ip in register_fentry (Menglong Dong)
  - ps3disk: use memcpy_{from,to}_bvec index (René Rebe)
  - drm/msm/dpu: drop dpu_hw_dsc_destroy() prototype (Dmitry Baryshkov)
  - crypto: iaa - Fix incorrect return value in save_iaa_wq() (Zilin Guan)
  - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 3C (Fukaumi Naoki)
  - arm64: dts: rockchip: Add eeprom vcc-supply for Radxa ROCK 5A (Fukaumi Naoki)
  - arm64: dts: rockchip: Move the EEPROM to correct I2C bus on Radxa ROCK 5A (Fukaumi Naoki)
  - PCI: keystone: Exit ks_pcie_probe() for invalid mode (Siddharth Vadapalli)
  - bpf: Free special fields when update [lru_,]percpu_hash maps (Leon Hwang) [Orabug: 38798936] {CVE-2025-68744}
  - leds: netxbig: Fix GPIO descriptor leak in error paths (Xu Wang)
  - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls (Xu Wang)
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Xu Wang)
  - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() (Dmitry Antipov) [Orabug: 38798823] {CVE-2025-68364}
  - lib/vsprintf: Check pointer before dereferencing in time_and_date() (Andy Shevchenko)
  - clk: renesas: r9a06g032: Fix memory leak in error path (Xu Wang)
  - coresight: etm4x: Add context synchronization before enabling trace (Leo Yan)
  - coresight: etm4x: Extract the trace unit controlling (Leo Yan)
  - coresight: etm4x: Correct polling IDLE bit (Leo Yan)
  - coresight: Change device mode to atomic type (Leo Yan)
  - nbd: defer config unlock in nbd_genl_connect (Zheng Qixing) [Orabug: 38798832] {CVE-2025-68366}
  - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() (Abdun Nihaal)
  - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (Long Li) [Orabug: 38798837] {CVE-2025-68367}
  - powerpc/32: Fix unpaired stwcx. on interrupt exit (Christophe Leroy)
  - powerpc/kdump: Fix size calculation for hot-removed memory ranges (Sourabh Jain)
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (Gautham R. Shenoy)
  - scsi: ufs: core: fix incorrect buffer duplication in ufshcd_read_string_desc() (Bean Huo)
  - drm/panthor: Fix potential memleak of vma structure (Akash Goel)
  - ntfs3: init run lock for extend inode (Edward Adam Davis)
  - ARM: dts: stm32: stm32mp157c-phycore: Fix STMPE811 touchscreen node properties (Jihed Chaibi)
  - RDMA/rtrs: server: Fix error handling in get_or_create_srv (Ma Ke)
  - dt-bindings: PCI: amlogic: Fix the register name of the DBI region (Manivannan Sadhasivam)
  - scsi: smartpqi: Fix device resources accessed after device removal (Mike Mcgowen) [Orabug: 38798847] {CVE-2025-68371}
  - scsi: stex: Fix reboot_notifier leak in probe error path (Xu Wang)
  - nbd: defer config put in recv_work (Zheng Qixing) [Orabug: 38798850] {CVE-2025-68372}
  - md: fix rcu protection in md_wakeup_thread (Yun Zhou) [Orabug: 38798857] {CVE-2025-68374}
  - regulator: core: disable supply if enabling main regulator fails (Gabor Juhos)
  - perf/x86/intel: Correct large PEBS flag check (Dapeng Mi)
  - ext4: correct the checking of quota files before moving extents (Zhang Yi)
  - mfd: da9055: Fix missing regmap_del_irq_chip() in error path (Xu Wang)
  - locktorture: Fix memory leak in param_set_cpumask() (Wang Liang)
  - efi/libstub: Fix page table access in 5-level to 4-level paging transition (Usama Arif)
  - x86/boot: Fix page table access in 5-level to 4-level paging transition (Usama Arif)
  - ARM: dts: omap3: n900: Correct obsolete TWL4030 power compatible (Jihed Chaibi)
  - ARM: dts: omap3: beagle-xm: Correct obsolete TWL4030 power compatible (Jihed Chaibi)
  - ARM: dts: am335x-netcom-plus-2xx: add missing GPIO labels (Yegor Yefremov)
  - libbpf: Fix parsing of multi-split BTF (Alan Maguire)
  - spi: tegra210-quad: Fix timeout handling (Vishwaroop A) [Orabug: 38798943] {CVE-2025-68746}
  - drm/panthor: Fix UAF on kernel BO VA nodes (Boris Brezillon)
  - drm/panthor: Fix race with suspend during unplug (Ketil Johnsen)
  - drm/panthor: Fix UAF race between device unplug and FW event processing (Ketil Johnsen)
  - drm/panthor: Fix group_free_queue() for partially initialized queues (Boris Brezillon)
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (Boris Brezillon)
  - fs/9p: Don't open remote file with APPEND mode when writeback cache is used (Tingmao Wang)
  - scsi: target: Do not write NUL characters into ASCII configfs output (Bart Van Assche)
  - power: supply: apm_power: only unset own apm_get_power_status (Ahelenia Ziemiańska)
  - power: supply: wm831x: Check wm831x_set_bits() return value (Ivan Abramov)
  - power: supply: rt9467: Prevent using uninitialized local variable in rt9467_set_value_from_ranges() (Murad Masimov)
  - power: supply: rt9467: Return error on failure in rt9467_set_value_from_ranges() (Ivan Abramov)
  - power: supply: max17040: Check iio_read_channel_processed() return code (Ivan Abramov)
  - power: supply: cw2015: Check devm_delayed_work_autocancel() return code (Ivan Abramov)
  - power: supply: rt5033_charger: Fix device node reference leaks (Xu Wang)
  - perf record: skip synthesize event when open evsel failed (Shuai Xue)
  - perf lock contention: Load kernel map before lookup (Namhyung Kim)
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Geert Uytterhoeven)
  - interconnect: debugfs: Fix incorrect error handling for NULL path (Kuan-Wei Chiu)
  - arm64: dts: qcom: msm8996: add interconnect paths to USB2 controller (Dmitry Baryshkov)
  - interconnect: qcom: msm8996: add missing link to SLAVE_USB_HS (Dmitry Baryshkov)
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Abdun Nihaal)
  - i3c: master: svc: Prevent incomplete IBI transaction (Stanley Chu)
  - i3c: fix refcount inconsistency in i3c_master_register (Frank Li)
  - pinctrl: stm32: fix hwspinlock resource leak in probe function (Xu Wang)
  - soc: qcom: smem: fix hwspinlock resource leak in probe error paths (Xu Wang)
  - tools/nolibc/stdio: let perror work when NOLIBC_IGNORE_ERRNO is set (Benjamin Berg)
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() (Tengda Wu)
  - task_work: Fix NMI race condition (Peter Zijlstra)
  - perf/x86/intel/cstate: Remove PC3 support from LunarLake (Zhang Rui)
  - bpf: Fix stackmap overflow check in __bpf_get_stackid() (Arnaud Lecomte) [Orabug: 38798864] {CVE-2025-68378}
  - bpf: Refactor stack map trace depth calculation into helper function (Arnaud Lecomte)
  - perf: Remove get_perf_callchain() init_nr argument (Josh Poimboeuf)
  - mtd: rawnand: lpc32xx_slc: fix GPIO descriptor leak on probe error and remove (Xu Wang)
  - mtd: nand: relax ECC parameter validation check (Aryan Srivastava)
  - Revert "mtd: rawnand: marvell: fix layouts" (Aryan Srivastava)
  - ARM: dts: renesas: r9a06g032-rzn1d400-db: Drop invalid #cells properties (Wolfram Sang)
  - ARM: dts: renesas: gose: Remove superfluous port property (Wolfram Sang)
  - RDMA/rxe: Fix null deref on srq->rq.queue after resize failure (Zhu Yanjun) [Orabug: 38798867] {CVE-2025-68379}
  - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Kuniyuki Iwashima)
  - phy: mscc: Fix PTP for VSC8574 and VSC8572 (Horatiu Vultur)
  - arm64: dts: qcom: qcm6490-shift-otter: Add missing reserved-memory (Alexander Martinz)
  - arm64: dts: qcom: sm8650: set ufs as dma coherent (Neil Armstrong)
  - arm64: dts: qcom: sdm845-oneplus: Correct gpio used for slider (Gergo Koteles)
  - arm64: dts: qcom: x1e80100: Add missing quirk for HS only USB controller (Krishna Kurapati)
  - arm64: dts: qcom: x1e80100: Fix compile warnings for USB HS controller (Krishna Kurapati)
  - firmware: imx: scu-irq: fix OF node leak in (Peng Fan)
  - arm64: dts: ti: k3-am62p: Fix memory ranges for GPU (Randolph Sapp)
  - s390/ap: Don't leak debug feature files if AP instructions are not available (Heiko Carstens)
  - s390/smp: Fix fallback CPU detection (Heiko Carstens)
  - wifi: ath11k: fix peer HE MCS assignment (Baochen Qiang) [Orabug: 38798872] {CVE-2025-68380}
  - wifi: ath11k: fix VHT MCS assignment (Baochen Qiang)
  - crypto: hisilicon/qm - restore original qos values (Nieweiqiang)
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Thorsten Blum) [Orabug: 38798874] {CVE-2025-68724}
  - soc: qcom: gsbi: fix double disable caused by devm (Xu Wang)
  - soc: Switch back to struct platform_driver::remove() (Uwe Kleine-König)
  - clk: qcom: camcc-sm7150: Fix PLL config of PLL2 (Luca Weiss)
  - clk: qcom: camcc-sm6350: Fix PLL config of PLL2 (Luca Weiss)
  - clk: qcom: camcc-sm6350: Specify Titan GDSC power domain as a parent to other (Vladimir Zapolskiy)
  - clk: qcom: camcc-sm8550: Specify Titan GDSC power domain as a parent to other (Vladimir Zapolskiy)
  - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe (Li Qiang)
  - PCI: rcar-gen2: Drop ARM dependency from PCI_RCAR_GEN2 (Geert Uytterhoeven)
  - arm64: dts: exynos: gs101: fix sysreg_apm reg property (Peter Griffin)
  - perf annotate: Check return value of evsel__get_arch() properly (Tianyou Li)
  - arm64: dts: imx8mp-venice-gw702x: remove off-board sdhc1 (Tim Harvey)
  - arm64: dts: imx8mp-venice-gw702x: remove off-board uart (Tim Harvey)
  - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl (Tim Harvey)
  - arm64: dts: freescale: imx8mp-venice-gw7905-2x: remove duplicate usdhc1 props (Tim Harvey)
  - block/mq-deadline: Switch back to a single dispatch list (Bart Van Assche)
  - block/mq-deadline: Introduce dd_start_request() (Bart Van Assche)
  - firmware: qcom: tzmem: fix qcom_tzmem_policy kernel-doc (Randy Dunlap)
  - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member (Francesco Lavra)
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Luoxuanqiang)
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Luoxuanqiang)
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Luoxuanqiang)
  - clk: qcom: gcc-x1e80100: Add missing USB4 clocks/resets (Konrad Dybcio)
  - dt-bindings: clock: qcom,x1e80100-gcc: Add missing USB4 clocks/resets (Konrad Dybcio)
  - dt-bindings: clock: qcom,x1e80100-gcc: Add missing video resets (Stephan Gerhold)
  - ntfs3: Fix uninit buffer allocated by __getname() (Sidharth Seela)
  - ntfs3: fix uninit memory after failed mi_read in mi_format_new (Raphael Pinsonneault-Thibeault)
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Herbert Xu)
  - irqchip/qcom-irq-combiner: Fix section mismatch (Johan Hovold)
  - irqchip/starfive-jh8100: Fix section mismatch (Johan Hovold)
  - irqchip/renesas-rzg2l: Fix section mismatch (Johan Hovold)
  - irqchip/imx-mu-msi: Fix section mismatch (Johan Hovold)
  - irqchip/irq-brcmstb-l2: Fix section mismatch (Johan Hovold)
  - irqchip/irq-bcm7120-l2: Fix section mismatch (Johan Hovold)
  - irqchip/irq-bcm7038-l1: Fix section mismatch (Johan Hovold)
  - sched/fair: Forfeit vruntime on yield (Fernand Sieber)
  - wifi: ath11k: restore register window after global reset (Baochen Qiang)
  - wifi: ath10k: move recovery check logic into a new work (Kang Yang)
  - wifi: ath10k: Add missing include of export.h (Jeff Johnson)
  - wifi: ath10k: Avoid vdev delete timeout when firmware is already down (Loic Poulain)
  - objtool: Fix weak symbol detection (Josh Poimboeuf)
  - objtool: Fix standalone --hacks=jump_label (Dylan Hatch)
  - HID: logitech-hidpp: Do not assume FAP in hidpp_send_message_sync() (Mavroudis Chatzilazaridis)
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Cyrille Pitchen)
  - clk: renesas: cpg-mssr: Read back reset registers to assure values latched (Marek Vasut)
  - clk: renesas: Pass sub struct of cpg_mssr_priv to cpg_clk_register (Thierry Bultel)
  - clk: renesas: Use str_on_off() helper (Geert Uytterhoeven)
  - clk: renesas: cpg-mssr: Add missing 1ms delay into reset toggle callback (Marek Vasut)
  - pinctrl: renesas: rzg2l: Fix PMC restore (Biju Das)
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Seungjin Bae)
  - drm/vgem-fence: Fix potential deadlock on release (Janusz Krzysztofik) [Orabug: 38818211] {CVE-2025-68757}
  - accel/ivpu: Fix DCT active percent format (Karol Wachowski)
  - accel/ivpu: Make function parameter names consistent (Jacek Lawrynowicz)
  - drm/panel: visionox-rm69299: Don't clear all mode flags (Guido Günther)
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Karol Wachowski)
  - accel/ivpu: Prevent runtime suspend during context abort work (Andrzej Kacprowski)
  - gpu: host1x: Fix race in syncpt alloc/free (Mainak Sen) [Orabug: 38798898] {CVE-2025-68732}
  - smack: fix bug: setting task label silently ignores input garbage (Konstantin Andreev)
  - smack: fix bug: unprivileged task can create labels (Konstantin Andreev)
  - smack: fix bug: invalid label of unix socket file (Konstantin Andreev)
  - smack: always "instantiate" inode in smack_inode_init_security() (Konstantin Andreev)
  - smack: deduplicate xattr setting in smack_inode_init_security() (Konstantin Andreev)
  - smack: fix bug: SMACK64TRANSMUTE set on non-directory (Konstantin Andreev)
  - smack: deduplicate "does access rule request transmutation" (Konstantin Andreev)
  - net/mlx5e: Set default burst period for TX and RX reporters (Shahar Shitrit) [Orabug: 38636804]
  - devlink: Make health reporter burst period configurable (Shahar Shitrit) [Orabug: 38636804]
  - devlink: Introduce burst period for health reporter (Shahar Shitrit) [Orabug: 38636804]
  - devlink: Move health reporter recovery abort logic to a separate function (Shahar Shitrit) [Orabug: 38636804]
  - devlink: Move graceful period parameter to reporter ops (Shahar Shitrit) [Orabug: 38636804]
  - devlink: use devlink_nl_put_u64() helper (Przemek Kitszel) [Orabug: 38636804]
  - devlink: introduce devlink_nl_put_u64() (Przemek Kitszel) [Orabug: 38636804]
  - Revert "net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery" (Qing Huang) [Orabug: 38636804]
  - net/rds: improve conn destroy printk message (Sharath Srinivasan) [Orabug: 38728739]
  - net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 38728739]
  - net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 38728739]
  - net/rds: rds_sendmsg must use rs_conn only when not being destroyed (Sharath Srinivasan) [Orabug: 38728742]
  - Revert "iommu/amd: Skip enabling command/event buffers for kdump" (Dongli Zhang) [Orabug: 38766139]
  - mm: list_lru: avoid using NULL list_lru_one. (Imran Khan) [Orabug: 38787957]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.64.4.el9uek]
changelog:
  - fuse: fix runtime warning on truncate_folio_batch_exceptionals() (Haiyue Wang) [Orabug: 38516705] {CVE-2025-38357}
  - PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (Breno Leitao) [Orabug: 38597009] {CVE-2025-40034}
  - bnxt_en: Shutdown FW DMA in bnxt_shutdown() (Michael Chan) [Orabug: 38747442] {CVE-2025-40330}
  - mlx5: Fix default values in create CQ (Akiva Goldberger) [Orabug: 38750222,38773368] {CVE-2025-68209}
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Håkon Bugge) [Orabug: 38753653]
  - bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (Gautam R A) [Orabug: 38773315] {CVE-2025-68197}
  - LTS version: v6.12.64 (Jack Vogel)
  - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() (Damien Le Moal)
  - iomap: allocate s_dio_done_wq for async reads as well (Christoph Hellwig) [Orabug: 38798795] {CVE-2025-68357}
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() (Seongjae Park)
  - vfio/pci: Disable qword access to the PCI ROM bar (Kevin Tian)
  - media: amphion: Remove vpu_vb_is_codecconfig (Ming Qian)
  - media: amphion: Make some vpu_v4l2 functions static (Laurent Pinchart)
  - media: amphion: Add a frame flush mode for decoder (Ming Qian)
  - media: mediatek: vcodec: Use spinlock for context list protection lock (Chen-Yu Tsai)
  - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages (David Hildenbrand)
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() (David Hildenbrand)
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list (David Hildenbrand)
  - PCI: brcmstb: Fix disabling L0s capability (Jim Quinlan)
  - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present (Jim Quinlan)
  - PCI: brcmstb: Reuse pcie_cfg_data structure (Stanimir Varbanov)
  - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width (Biju Das)
  - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime (Srinivas Kandagatla)
  - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter (Pierre-Louis Bossart)
  - block: handle zone management operations completions (Damien Le Moal)
  - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode (Biju Das)
  - gve: defer interrupt enabling until NAPI registration (Ankit Garg)
  - hrtimers: Make hrtimer_update_function() less expensive (Thomas Gleixner)
  - idpf: remove obsolete stashing code (Joshua Hay)
  - idpf: stop Tx if there are insufficient buffer resources (Joshua Hay)
  - idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay)
  - idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay)
  - idpf: improve when to set RE bit logic (Joshua Hay)
  - idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay)
  - idpf: trigger SW interrupt when exiting wb_on_itr mode (Joshua Hay)
  - idpf: add support for SW triggered interrupts (Joshua Hay)
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Quan Zhou)
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Quan Zhou)
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Quan Zhou)
  - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio (Dave Stevenson)
  - x86/microcode/AMD: Select which microcode patch to load (Borislav Petkov)
  - tty: fix tty_port_tty_*hangup() kernel-doc (Jiri Slaby)
  - serial: core: Fix serial device initialization (Alexander Stein)
  - usbnet: Fix using smp_processor_id() in preemptible code warnings (Zqiang) [Orabug: 38649205] {CVE-2025-40164}
  - net: use dst_dev_rcu() in sk_setup_caps() (Eric Dumazet) [Orabug: 38649240] {CVE-2025-40170}
  - ipv6: adopt dst_dev() helper (Eric Dumazet)
  - net: ipv6: ioam6: use consistent dst names (Justin Iurman)
  - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (Boris Brezillon)
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Xiao Ni) [Orabug: 37855392] {CVE-2025-40325}
  - netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko) [Orabug: 38773355] {CVE-2025-68206}
  - gpiolib: acpi: Add quirk for Dell Precision 7780 (Askar Safin)
  - gpiolib: acpi: Add quirk for ASUS ProArt PX13 (Mario Limonciello)
  - gpiolib: acpi: Add a quirk for Acer Nitro V15 (Mario Limonciello)
  - gpiolib: acpi: Move quirks to a separate file (Andy Shevchenko)
  - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter (Andy Shevchenko)
  - gpiolib: acpi: Handle deferred list via new API (Andy Shevchenko)
  - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() (Andy Shevchenko)
  - f2fs: fix to propagate error from f2fs_enable_checkpoint() (Chao Yu)
  - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() (Chao Yu)
  - f2fs: add timeout in f2fs_enable_checkpoint() (Chao Yu)
  - f2fs: clear SBI_POR_DOING before initing inmem curseg (Sheng Yong)
  - serial: xilinx_uartps: fix rs485 delay_rts_after_send (Jakub Turek)
  - serial: xilinx_uartps: Use helper function hrtimer_update_function() (Nam Cao)
  - hrtimers: Introduce hrtimer_update_function() (Nam Cao)
  - drm/displayid: add quirk to ignore DisplayID checksum errors (Jani Nikula)
  - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() (Tejun Heo)
  - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() (Tejun Heo)
  - tpm2-sessions: Fix tpm2_read_public range checks (Jarkko Sakkinen)
  - block: freeze queue when updating zone resources (Damien Le Moal)
  - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 (Nicolas Ferre)
  - svcrdma: bound check rq_pages index in inline path (Joshua Rogers) [Orabug: 38847975] {CVE-2025-71068}
  - mm/ksm: fix exec/fork inheritance support for prctl (Xu Xin)
  - mptcp: pm: ignore unknown endpoint flags (Matthieu Baerts)
  - serial: core: Restore sysfs fwnode information (Andy Shevchenko)
  - serial: core: fix OF node leak (Johan Hovold)
  - f2fs: fix to avoid updating compression context during writeback (Chao Yu)
  - f2fs: drop inode from the donation list when the last file is closed (Jaegeuk Kim)
  - f2fs: use global inline_xattr_slab instead of per-sb slab cache (Chao Yu)
  - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() (Chao Yu)
  - xhci: dbgtty: fix device unregister: fixup (Łukasz Bartosik)
  - tty: introduce and use tty_port_tty_vhangup() helper (Jiri Slaby)
  - jbd2: fix the inconsistency between checksum and data in memory for journal sb (Ye Bin)
  - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks (Zqiang)
  - erofs: fix unexpected EIO under memory pressure (Junbeom Yeom)
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Peter Zijlstra)
  - btrfs: don't rewrite ret from inode_permission (Josef Bacik)
  - gfs2: fix freeze error handling (Alexey Velichayshiy)
  - lib/crypto: riscv/chacha: Avoid s0/fp register (Vivian Wang)
  - drm/imagination: Disallow exporting of PM/FW protected objects (Alessio Belle)
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Lyude Paul)
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Niemiec, Krzysztof) [Orabug: 38852366] {CVE-2025-71130}
  - drm/msm/dpu: Add missing NULL pointer check for pingpong interface (Nikolay Kuratov) [Orabug: 38852395] {CVE-2025-71138}
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Thomas Hellström)
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (Matthew Brost)
  - drm/xe: Adjust long-running workload timeslices to reasonable values (Matthew Brost)
  - drm/xe/oa: Disallow 0 OA property values (Ashutosh Dixit)
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Thomas Hellström)
  - drm/mgag200: Fix big-endian support (René Rebe)
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Simon Richter) [Orabug: 38848051] {CVE-2025-71083}
  - drm/i915: Fix format string truncation warning (Ard Biesheuvel)
  - drm/amdkfd: Trap handler support for expert scheduling mode (Jay Cornwall)
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (Jonathan Kim)
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Mario Limonciello)
  - drm/mediatek: Fix probe device leaks (Johan Hovold)
  - drm/mediatek: Fix probe memory leak (Johan Hovold)
  - drm/mediatek: Fix probe resource leaks (Johan Hovold)
  - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() (Miaoqian Lin)
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Sanjay Yadav)
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Jani Nikula)
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Thomas Zimmermann)
  - drm/buddy: Separate clear and dirty free block trees (Arunpravin Paneer Selvam)
  - drm/buddy: Optimize free block management with RB tree (Arunpravin Paneer Selvam)
  - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers (Akhil P Oommen)
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Alex Deucher)
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Pierre-Eric Pelloux-Prayer)
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Alex Deucher)
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (Mario Limonciello)
  - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() (Xiaolei Wang)
  - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write (Deepanshu Kartikey)
  - net: usb: sr9700: fix incorrect command used to write single register (Ethan Nelson-Moore)
  - nfsd: Drop the client reference in client_states_open() (Haoxiang Li)
  - LoongArch: BPF: Sign extend kfunc call arguments (Hengqi Chen)
  - LoongArch: BPF: Zero-extend bpf_tail_call() index (Hengqi Chen)
  - LoongArch: Refactor register restoration in ftrace_common_return (Duan Chenghao)
  - fjes: Add missing iounmap in fjes_hw_init() (Haoxiang Li)
  - e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [Orabug: 38848098] {CVE-2025-71093}
  - RDMA/cm: Fix leaking the multicast GID table reference (Jason Gunthorpe) [Orabug: 38848057] {CVE-2025-71084}
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Jason Gunthorpe) [Orabug: 38848116] {CVE-2025-71096}
  - samples/ftrace: Adjust LoongArch register restore order in direct calls (Duan Chenghao)
  - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting (Kaushlendra Kumar)
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Rongrong)
  - mm/page_owner: fix memory leak in page_owner_stack_fops->release() (Ran Xiaokai)
  - idr: fix idr_alloc() returning an ID out of range (Matthew Wilcox)
  - lockd: fix vfs_test_lock() calls (Neil Brown)
  - kasan: unpoison vms[area] addresses with a common tag (Maciej Wieczor-Retman)
  - kasan: refactor pcpu kasan vmalloc unpoison (Maciej Wieczor-Retman)
  - compiler_types.h: add "auto" as a macro for "__auto_type" (H. Peter Anvin)
  - pmdomain: imx: Fix reference count leak in imx_gpc_probe() (Xu Wang)
  - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() (Seongjae Park)
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() (Seongjae Park)
  - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() (Seongjae Park)
  - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() (Seongjae Park)
  - LoongArch: Use unsigned long for _end and _text (Tiezhu Yang)
  - LoongArch: Use __pmd()/__pte() for swap entry conversions (Wangyuli)
  - LoongArch: Fix build errors for CONFIG_RANDSTRUCT (Huacai Chen)
  - LoongArch: Correct the calculation logic of thread_count (Maqiang)
  - LoongArch: Add new PCI ID for pci_fixup_vgadev() (Huacai Chen)
  - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() (Haoxiang Li)
  - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: amphion: Cancel message work before releasing the VPU core (Ming Qian)
  - media: vpif_display: fix section mismatch (Johan Hovold)
  - media: vpif_capture: fix section mismatch (Johan Hovold)
  - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path (Xu Wang)
  - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index (Nicolas Dufresne)
  - media: TDA1997x: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: samsung: exynos4-is: fix potential ABBA deadlock on init (Marek Szyprowski)
  - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled (Miaoqian Lin)
  - media: platform: mtk-mdp3: fix device leaks at probe (Johan Hovold)
  - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() (Ivan Abramov)
  - media: cec: Fix debugfs leak on bus_register() failure (Xu Wang)
  - fbdev: tcx.c fix mem_map to correct smem_start offset (René Rebe)
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Thorsten Blum)
  - fbdev: gbefb: fix to use physical address instead of dma address (René Rebe)
  - dm-bufio: align write boundary on physical block size (Mikulas Patocka)
  - dm-ebs: Mark full buffer dirty even on partial write (Uladzislau Rezki)
  - firmware: stratix10-svc: Add mutex in stratix10 memory management (Mahesh Rao)
  - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() (Ivan Abramov)
  - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION (David Hildenbrand)
  - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error (Sandipan Das)
  - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() (Sven Schnelle)
  - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace (Sven Schnelle)
  - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips (Miquel Raynal)
  - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions (Christian Marangi)
  - media: verisilicon: Fix CPU stalls on G2 bus error (Nicolas Dufresne)
  - media: rc: st_rc: Fix reset control resource leak (Xu Wang)
  - mfd: max77620: Fix potential IRQ chip conflict when probing two devices (Krzysztof Kozlowski)
  - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup (Johan Hovold)
  - clk: samsung: exynos-clkout: Assign .num before accessing .hws (Nathan Chancellor) [Orabug: 38852404] {CVE-2025-71143}
  - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs (Damien Le Moal)
  - leds: leds-lp50xx: Enable chip before any communication (Christian Hitz)
  - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs (Christian Hitz)
  - leds: leds-lp50xx: Allow LED 0 to be added to module bank (Christian Hitz)
  - leds: leds-cros_ec: Skip LEDs without color components (Thomas Weißschuh)
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Donet Tom)
  - powerpc, mm: Fix mprotect on book3s 32-bit (Dave Vasilevsky)
  - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator (Siddharth Vadapalli)
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Lukas Wunner)
  - fgraph: Check ftrace_pids_enabled on registration for early filtering (Shengming Hu)
  - fgraph: Initialize ftrace_ops->private for function graph ops (Shengming Hu)
  - HID: logitech-dj: Remove duplicate error logging (Hans de Goede)
  - iommu: disable SVA when CONFIG_X86 is set (Lu Baolu) [Orabug: 38848082] {CVE-2025-71089}
  - iommu/tegra: fix device leak on probe_device() (Johan Hovold)
  - iommu/sun50i: fix device leak on of_xlate() (Johan Hovold)
  - iommu/qcom: fix device leak on of_xlate() (Johan Hovold)
  - iommu/omap: fix device leaks on probe_device() (Johan Hovold)
  - iommu/mediatek: fix device leak on of_xlate() (Johan Hovold)
  - iommu/mediatek-v1: fix device leaks on probe() (Johan Hovold)
  - iommu/mediatek-v1: fix device leak on probe_device() (Johan Hovold)
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Johan Hovold)
  - iommu/exynos: fix device leak on of_xlate() (Johan Hovold)
  - iommu/apple-dart: fix device leak on of_xlate() (Johan Hovold)
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jinhui Guo)
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jinhui Guo)
  - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla)
  - ASoC: qcom: q6adm: the the copp device only during last instance (Srinivas Kandagatla)
  - ASoC: qcom: q6asm-dai: perform correct state check before closing (Srinivas Kandagatla)
  - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr (Srinivas Kandagatla)
  - ASoC: codecs: lpass-tx-macro: fix SM6115 support (Srinivas Kandagatla)
  - ASoC: stm32: sai: fix OF node leak on probe (Johan Hovold)
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure (Johan Hovold)
  - ASoC: stm32: sai: fix device leak on probe (Johan Hovold)
  - ASoC: codecs: wcd939x: fix regmap leak on probe failure (Johan Hovold)
  - ntfs: Do not overwrite uptodate pages (Matthew Wilcox)
  - selftests/ftrace: traceonoff_triggers: strip off names (Yipeng Zou)
  - blk-mq: skip CPU offline notify on unmapped hctx (Cong Zhang)
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Thomas Fourier)
  - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation (Lihonggang)
  - ksmbd: Fix memory leak in get_file_all_info() (Zilin Guan)
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Tuo Li) [Orabug: 38852384] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Li Nan)
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Kalesh Ap)
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Alok Tiwari)
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Tetsuo Handa)
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Alok Tiwari)
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Jang Ingyu)
  - RDMA/efa: Remove possible negative shift (Michael Margolin)
  - RDMA/irdma: avoid invalid read in irdma_net_event (Michal Schmidt) [Orabug: 38852378] {CVE-2025-71133}
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Jiayuan Chen) [Orabug: 38848033] {CVE-2025-71080}
  - net: rose: fix invalid array index in rose_kill_by_device() (Pwnverse)
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Ido Schimmel) [Orabug: 38848124] {CVE-2025-71097}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [Orabug: 38848060] {CVE-2025-71085}
  - net: stmmac: fix the crash issue for zero copy XDP_TX action (Wei Fang) [Orabug: 38848110] {CVE-2025-71095}
  - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (Anshumali Gaur)
  - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing (Junrui Luo) [Orabug: 38848146] {CVE-2025-71101}
  - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() (Zilin Guan)
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Bagas Sanjaya)
  - net: usb: asix: validate PHY address before use (Deepanshu Kartikey) [Orabug: 38848106] {CVE-2025-71094}
  - kbuild: fix compilation of dtb specified on command-line without make rule (Thomas De Schampheleire)
  - net: dsa: b53: skip multicast entries for fdb_dump() (Jonas Gorski)
  - firewire: nosy: Fix dma_free_coherent() size (Thomas Fourier)
  - genalloc.h: fix htmldocs warning (Andrew Morton)
  - smc91x: fix broken irq-context in PREEMPT_RT (Levi Yun) [Orabug: 38852375] {CVE-2025-71132}
  - selftests: net: fix "buffer overflow detected" for tap.c (Alice C. Munduruca)
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (Deepakkumar Karn)
  - amd-xgbe: reset retries and mode on RX adapt failures (Raju Rangoju)
  - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() (Vladimir Oltean)
  - team: fix check for port enabled in team_queue_override_port_prio_changed() (Jiri Pirko) [Orabug: 38848087] {CVE-2025-71091}
  - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic (Junrui Luo)
  - platform/x86: msi-laptop: add missing sysfs_remove_group() (Thomas Fourier)
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (Shravan Kumar Ramani)
  - ip6_gre: make ip6gre_header() robust (Eric Dumazet) [Orabug: 38848130] {CVE-2025-71098}
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Toke Høiland-Jørgensen)
  - net: mdio: aspeed: add dummy read to avoid read-after-write issue (Jacky Chou)
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (Raphael Pinsonneault-Thibeault) [Orabug: 38848042] {CVE-2025-71082}
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Herbert Xu) [Orabug: 38852369] {CVE-2025-71131}
  - idpf: reduce mbx_task schedule delay to 300us (Brian Vazquez)
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Kohei Enju) [Orabug: 38848072] {CVE-2025-71087}
  - i40e: validate ring_len parameter against hardware-specific values (Gregory Herrero)
  - i40e: fix scheduling in set_rx_mode (Przemyslaw Korba)
  - wifi: mac80211: do not use old MBSSID elements (Aloka Dixit)
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Dan Carpenter)
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Morning Star) [Orabug: 38848143] {CVE-2025-71100}
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Ping-Ke Shih)
  - fuse: fix readahead reclaim deadlock (Joanne Koong) [Orabug: 38847945] {CVE-2025-68821}
  - iommu/mediatek: fix use-after-free on probe deferral (Johan Hovold)
  - x86/msi: Make irq_retrigger() functional for posted MSI (Thomas Gleixner)
  - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 (Nicolas Ferre)
  - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU (Gui-Dong Han)
  - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (Gui-Dong Han) [Orabug: 38852299] {CVE-2025-71111}
  - hwmon: (max6697) fix regmap leak on probe failure (Johan Hovold)
  - hwmon: (max16065) Use local variable to avoid TOCTOU (Gui-Dong Han)
  - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes (Raviteja Laggyshetty)
  - i2c: amd-mp2: fix reference leak in MP2 PCI device (Ma Ke)
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args (Bartosz Golaszewski)
  - rpmsg: glink: fix rpmsg device leak (Srinivas Kandagatla)
  - soc: amlogic: canvas: fix device leak on lookup (Johan Hovold)
  - soc: apple: mailbox: fix device leak on lookup (Johan Hovold)
  - soc: qcom: ocmem: fix device leak on lookup (Johan Hovold)
  - soc: qcom: pbs: fix device leak on lookup (Johan Hovold)
  - soc: samsung: exynos-pmu: fix device leak on regmap lookup (Johan Hovold)
  - tracing: Fix fixed array of synthetic event (Steven Rostedt)
  - virtio: vdpa: Fix reference count leak in octep_sriov_enable() (Miaoqian Lin)
  - amba: tegra-ahb: Fix device leak on SMMU enable (Johan Hovold)
  - crypto: caam - Add check for kcalloc() in test_len() (Guangshuo Li)
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Shivani Agarwal) [Orabug: 38852311] {CVE-2025-71113}
  - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - arm64: Revamp HCR_EL2.E2H RES1 detection (Marc Zyngier)
  - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() (Ahmed Genidi)
  - KVM: arm64: Initialize HCR_EL2.E2H early (Mark Rutland)
  - sched/rt: Fix race in push_rt_task (Harshit Agarwal) [Orabug: 38158721] {CVE-2025-38234}
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Hangbin Liu)
  - pinctrl: renesas: rzg2l: Fix ISEL restore on resume (Claudiu Beznea)
  - ALSA: wavefront: Clear substream pointers on close (Junrui Luo)
  - ALSA: wavefront: Use guard() for spin locks (Takashi Iwai)
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (Denis Arefev)
  - drm/displayid: pass iter to drm_find_displayid_extension() (Jani Nikula)
  - drm/amd/display: Fix scratch registers offsets for DCN351 (Ray Wu)
  - drm/amd/display: Fix scratch registers offsets for DCN35 (Ray Wu)
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Alex Deucher)
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (Mario Limonciello)
  - io_uring: fix min_wait wakeups for SQPOLL (Jens Axboe)
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jens Axboe)
  - gpio: regmap: Fix memleak in error path in gpio_regmap_register() (Guan Wentao)
  - s390/ipl: Clear SBP flag when bootprog is set (Sven Schnelle)
  - btrfs: don't log conflicting inode if it's a dir moved in the current transaction (Filipe Manana) [Orabug: 38847745] {CVE-2025-68778}
  - powerpc/kexec: Enable SMT before waking offline CPUs (Nysal Jan K.A.)
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852340] {CVE-2025-71120}
  - svcrdma: use rc_pageoff for memcpy byte offset (Joshua Rogers) [Orabug: 38847896] {CVE-2025-68811}
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Joshua Rogers)
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Andy Shevchenko)
  - NFSD: NFSv4 file creation neglects setting ACL (Chuck Lever) [Orabug: 38847871] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Chuck Lever)
  - net/handshake: restore destructor on submit failure (Caoping)
  - fsnotify: do not generate ACCESS/MODIFY events on child for special files (Amir Goldstein) [Orabug: 38847799] {CVE-2025-68788}
  - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write (Thorsten Blum)
  - r8169: fix RTL8117 Wake-on-Lan in DASH mode (René Rebe)
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Rafael J. Wysocki)
  - tracing: Do not register unsupported perf events (Steven Rostedt) [Orabug: 38852354] {CVE-2025-71125}
  - xfs: fix a UAF problem in xattr repair (Darrick J. Wong) [Orabug: 38847781] {CVE-2025-68784}
  - xfs: fix stupid compiler warning (Darrick J. Wong)
  - xfs: fix a memory leak in xfs_buf_item_init() (Haoxiang Li)
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Sean Christopherson)
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Sean Christopherson)
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Dongli Zhang)
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Jim Mattson)
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Yosry Ahmed)
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Jim Mattson)
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Yosry Ahmed)
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Fuqiang Wang) [Orabug: 38852272] {CVE-2025-71104}
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Fuqiang Wang)
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Sean Christopherson)
  - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() (Finn Thain)
  - libceph: make decode_pool() more resilient against corrupted osdmaps (Ilya Dryomov) [Orabug: 38852324] {CVE-2025-71116}
  - parisc: Do not reprogram affinitiy on ASP chip (Helge Deller)
  - scs: fix a wrong parameter in __scs_magic (Zhichi Lin)
  - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver (Tzung-Bi Shih)
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky)
  - ocfs2: fix kernel BUG in ocfs2_find_victim_chain (Prithvi Tambewagh) [Orabug: 38847687] {CVE-2025-68771}
  - media: vidtv: initialize local pointers upon transfer of memory ownership (Jeongjun Park)
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Sean Christopherson) [Orabug: 38847894] {CVE-2025-68810}
  - tools/testing/nvdimm: Use per-DIMM device handle (Alison Schofield)
  - f2fs: fix return value of f2fs_recover_fsync_data() (Chao Yu)
  - f2fs: fix uninitialized one_time_gc in victim_sel_policy (Xiaole He)
  - f2fs: fix age extent cache insertion skip on counter overflow (Xiaole He)
  - f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey)
  - f2fs: fix to avoid updating zero-sized extent in extent cache (Chao Yu)
  - f2fs: fix to avoid potential deadlock (Chao Yu)
  - f2fs: ensure node page reads complete before f2fs_put_super() finishes (Jan Prusakowski)
  - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error (Seunghwan Baek)
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil)
  - scsi: target: Reset t_task_cdb pointer in error case (Andrey Vatoropin) [Orabug: 38847769] {CVE-2025-68782}
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Dai Ngo)
  - scsi: aic94xx: fix use-after-free in device removal path (Junrui Luo) [Orabug: 38848008] {CVE-2025-71075}
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (Tony Battersby) [Orabug: 38847928] {CVE-2025-68818}
  - cpufreq: nforce2: fix reference count leak in nforce2 (Miaoqian Lin)
  - cpuidle: governors: teo: Drop misguided target residency check (Rafael J. Wysocki)
  - serial: sh-sci: Check that the DMA cookie is valid (Claudiu Beznea)
  - mei: gsc: add dependency on Xe driver (Junxiao Chang)
  - intel_th: Fix error handling in intel_th_output_open (Ma Ke)
  - char: applicom: fix NULL pointer dereference in ac_ioctl (Tianchu Chen)
  - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() (Haoxiang Li)
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Udipto Goswami)
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Miaoqian Lin)
  - usb: gadget: lpc32xx_udc: fix clock imbalance in error path (Johan Hovold)
  - usb: phy: isp1301: fix non-OF device reference imbalance (Johan Hovold)
  - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal (Duoming Zhou)
  - USB: lpc32xx_udc: Fix error handling in probe (Ma Ke)
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Haoxiang Li)
  - usb: ohci-nxp: fix device leak on probe failure (Johan Hovold)
  - phy: broadcom: bcm63xx-usbh: fix section mismatches (Johan Hovold)
  - media: pvrusb2: Fix incorrect variable used in trace message (Colin Ian King)
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (Jeongjun Park) [Orabug: 38847936] {CVE-2025-68819}
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Chenchangcheng)
  - mptcp: avoid deadlock on fallback while reinjecting (Paolo Abeni) [Orabug: 38852415] {CVE-2025-71126}
  - mptcp: schedule rtx timer only after pushing data (Paolo Abeni)
  - selftests: mptcp: pm: ensure unknown flags are ignored (Matthieu Baerts)
  - media: v4l2-mem2mem: Fix outdated documentation (Laurent Pinchart)
  - jbd2: use a weaker annotation in journal handling (Byungchul Park)
  - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key (Tetsuo Handa)
  - ext4: align max orphan file size with e2fsprogs limit (Baokun Li)
  - ext4: fix incorrect group number assertion in mb_check_buddy (Yongjian Sun)
  - ext4: clear i_state_flags when alloc inode (Haibo Chen)
  - ext4: xattr: fix null pointer deref in ext4_raw_inode() (Karina Yankevich) [Orabug: 38848274] {CVE-2025-68820}
  - ext4: fix string copying in parse_apply_sb_mount_options() (Fedor Pchelkin) [Orabug: 38852413] {CVE-2025-71123}
  - tpm: Cap the number of PCR banks (Jarkko Sakkinen) [Orabug: 38848016] {CVE-2025-71077}
  - ktest.pl: Fix uninitialized var in config-bisect.pl (Steven Rostedt)
  - fs/ntfs3: fix mount failure for sparse runs in run_unpack() (Konstantin Komarov)
  - kallsyms: Fix wrong "big" kernel symbol type read from procfs (Zheng Yejian)
  - floppy: fix for PAGE_SIZE != 4KB (René Rebe)
  - block: rate-limit capacity change info log (Li Chen)
  - wifi: mt76: Fix DTS power-limits on little endian systems (Sven Eckelmann)
  - s390/dasd: Fix gendisk parent after copy pair swap (Stefan Haberland)
  - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit (Eric Biggers)
  - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() (Ma Ke)
  - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition (Sarthak Garg)
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Avadhut Naik)
  - io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 38847904] {CVE-2025-68814}
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Jarkko Sakkinen)
  - cifs: Fix memory and information leak in smb3_reconfigure() (Zilin Guan)
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella)
  - block: rnbd-clt: Fix signedness bug in init_dev() (Dan Carpenter)
  - scsi: scsi_debug: Fix atomic write enable module param description (John Garry)
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory Clement)
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Chia-Lin Kao)
  - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures (Justin Tee)
  - nvme-fc: don't hold rport lock when putting ctrl (Daniel Wagner)
  - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware (Jinhui Guo)
  - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src (Jens Reidel)
  - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map (Ian Rogers)
  - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready (Wenhua Lin)
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Chenchangcheng)
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Hongyu Xie)
  - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains (Pei Xiao)
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Mark Pearson) [Orabug: 38852284] {CVE-2025-71108}
  - usbip: Fix locking bug in RT-enabled kernels (Lizhi Xu)
  - exfat: zero out post-EOF page cache on file extension (Yuezhang Mo)
  - exfat: fix remount failure in different process environments (Yuezhang Mo)
  - reset: fix BIT macro reference (Yongchao Jia)
  - via_wdt: fix critical boot hang due to unnamed resource allocation (Li Qiang) [Orabug: 38852317] {CVE-2025-71114}
  - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write (Bernd Schubert)
  - fuse: Always flush the page cache before FOPEN_DIRECT_IO write (Bernd Schubert)
  - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp (Tony Battersby)
  - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive (Tony Battersby)
  - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled (Tony Battersby)
  - powerpc/addnote: Fix overflow on 32-bit builds (Ben Collins)
  - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 (Josua Mayer)
  - scsi: smartpqi: Add support for Hurray Data new controller PCI device (David Strahan)
  - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx (Matthias Schiffer)
  - firmware: imx: scu-irq: Init workqueue before request mbox channel (Peng Fan)
  - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition (Peter Wang)
  - ipmi: Fix __scan_channels() failing to rescan channels (Jinhui Guo)
  - ipmi: Fix the race between __scan_channels() and deliver_response() (Jinhui Guo)
  - nfsd: fix memory leak in nfsd_create_serv error paths (Shardul Bankar)
  - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ (Mike Snitzer)
  - nfsd: update percpu_ref to manage references on nfsd_net (Mike Snitzer)
  - ASoC: ak4458: remove the reset operation in probe and remove (Shengjiu Wang)
  - ALSA: usb-mixer: us16x08: validate meter packet indices (Shipei Qu) [Orabug: 38847774] {CVE-2025-68783}
  - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path (Xu Wang)
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (Xu Wang)
  - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures (Yongxin Liu)
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Shaurya Rane) [Orabug: 38847723] {CVE-2025-68776}
  - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml (Andrew Jeffery)
  - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds (Sai Krishna Potthuri)
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas)
  - spi: fsl-cpm: Check length parity before switching to 16 bit mode (Christophe Leroy)
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Pengjie Zhang)
  - ACPI: PCC: Fix race condition by removing static qualifier (Pengjie Zhang)
  - soc/tegra: fuse: Do not register SoC device on ACPI boot (Kartik)
  - can: gs_usb: gs_can_open(): fix error handling (Marc Kleine-Budde)
  - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails (Christoph Hellwig)
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Duoming Zhou) [Orabug: 38847948] {CVE-2025-68822}
  - Input: lkkbd - disable pending work before freeing device (Minseong Kim)
  - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation (Junjie Cao)
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Ping Cheng)
  - ksmbd: fix buffer validation by including null terminator size in EA length (Namjae Jeon)
  - ksmbd: Fix refcount leak when invalid session is found on session lookup (Namjae Jeon)
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow (Qianchang Zhao)
  - hwmon: (ltc4282): Fix reset_history file permissions (Nuno Sa)
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (Shuicheng Lin)
  - drm/xe: Limit num_syncs to prevent oversized allocations (Shuicheng Lin)
  - block: rnbd-clt: Fix leaked ID in init_dev() (Thomas Fourier)
  - spi: cadence-quadspi: Fix clock disable on probe failure path (Anurag Dutta)
  - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder (Jianpeng Chang)
  - x86/xen: Fix sparse warning in enlighten_pv.c (Juergen Gross)
  - x86/xen: Move Xen upcall handler (Brian Gerst)
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Marijn Suijten)
  - MIPS: Fix a reference leak bug in ip22_check_gio() (Haoxiang Li)
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (Jan Maslak)
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (Junxiao Chang)
  - hwmon: (tmp401) fix overflow caused by default conversion rate value (Alexey Simakov)
  - hwmon: (ibmpex) fix use-after-free in high/low store (Junrui Luo) [Orabug: 38847806] {CVE-2025-68789}
  - hwmon: (dell-smm) Limit fan multiplier to avoid overflow (Denis Sergeev)
  - net: hns3: add VLAN id validation before using (Jian Shen)
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx (Jian Shen)
  - net: hns3: using the num_tqps in the vf driver to apply for resources (Jian Shen)
  - net: enetc: do not transmit redirected XDP frames when the link is down (Wei Fang)
  - net/handshake: duplicate handshake cancellations leak socket (Scott Mayhew) [Orabug: 38847719] {CVE-2025-68775}
  - net/mlx5: Serialize firmware reset with devlink (Shay Drory)
  - net/mlx5: fw_tracer, Handle escaped percent properly (Shay Drory)
  - net/mlx5: fw_tracer, Validate format string parameters (Shay Drory) [Orabug: 38847913] {CVE-2025-68816}
  - net/mlx5: Drain firmware reset in shutdown callback (Moshe Shemesh)
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Moshe Shemesh)
  - ethtool: Avoid overflowing userspace buffer on stats query (Gal Pressman) [Orabug: 38847825] {CVE-2025-68795}
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Jason Gunthorpe)
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Jason Gunthorpe)
  - iommufd/selftest: Update hw_info coverage for an input data_type (Nicolin Chen)
  - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (Yi Liu)
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal)
  - netfilter: nf_tables: remove redundant chain validation on register store (Pablo Neira Ayuso)
  - netfilter: nf_nat: remove bogus direction check (Florian Westphal)
  - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() (Dan Carpenter)
  - net/sched: ets: Remove drr class from the active list if it changes to strict (Victor Nogueira) [Orabug: 38847909] {CVE-2025-68815}
  - caif: fix integer underflow in cffrml_receive() (Junrui Luo)
  - ipvs: fix ipv4 null-ptr-deref in route error path (Slavin Liu) [Orabug: 38847899] {CVE-2025-68813}
  - netfilter: nf_conncount: fix leaked ct in error paths (Fernando Fernandez Mancera)
  - broadcom: b44: prevent uninitialized value usage (Alexey Simakov)
  - net: openvswitch: fix middle attribute validation in push_nsh() action (Ilya Maximets) [Orabug: 38847783] {CVE-2025-68785}
  - bnxt_en: Fix XDP_TX path (Michael Chan) [Orabug: 38847683] {CVE-2025-68770}
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (Ido Schimmel)
  - mlxsw: spectrum_router: Fix neighbour use-after-free (Ido Schimmel)
  - mlxsw: spectrum_router: Fix possible neighbour reference count leak (Ido Schimmel)
  - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() (Dmitry Skorodumov)
  - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (Jamal Hadi Salim) [Orabug: 38847964] {CVE-2025-71066}
  - netrom: Fix memory leak in nr_sendmsg() (Wang Liang)
  - net: fec: ERR007885 Workaround for XDP TX path (Wei Fang)
  - gfs2: Fix use of bio_chain (Andreas Gruenbacher)
  - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (Max Chou)
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (Gongwei Li)
  - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (Chris Lu)
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (Chris Lu)
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (Chingbin Li)
  - ksmbd: vfs: fix race on m_flags in vfs_cache (Qianchang Zhao)
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Namjae Jeon)
  - smb/server: fix return value of smb2_ioctl() (Chenxiaosong)
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher)
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher)
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical (Qu Wenruo)
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Hans de Goede)
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Quan Zhou)
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Johannes Berg)
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Johannes Berg)
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Bitterblue Smith)
  - fs/ntfs3: check for shutdown in fsync (Konstantin Komarov)
  - hfsplus: fix volume corruption issue for generic/073 (Viacheslav Dubeyko)
  - hfsplus: Verify inode mode when loading from disk (Tetsuo Handa)
  - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create (Yang Chenzhi)
  - hfsplus: fix volume corruption issue for generic/070 (Viacheslav Dubeyko)
  - ntfs: set dummy blocksize to read boot_block when mounting (Pedro Demarchi Gomes)
  - kbuild: Use objtree for module signing key path (Mikhail Malyshev)
  - fs/ntfs3: Support timestamps prior to epoch (Konstantin Komarov)
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Song Liu)
  - cpuidle: menu: Use residency threshold in polling state override decisions (Aboorva Devarajan)
  - cpufreq: s5pv210: fix refcount leak (Shuhao Fu)
  - ACPI: fan: Workaround for 64-bit firmware bug (Armin Wolf)
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Hal Feng)
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Sakari Ailus)
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia Pukngae) [Orabug: 38852332] {CVE-2025-71118}
  - x86/ptrace: Always inline trivial accessors (Peter Zijlstra)
  - sched/deadline: only set free_cpus for online runqueues (Doug Berger) [Orabug: 38847752] {CVE-2025-68780}
  - perf/x86/amd: Check event before enable to avoid GPF (George Kennedy) [Orabug: 38847848] {CVE-2025-68798}
  - scripts/faddr2line: Fix "Argument list too long" error (Pankaj Raghav)
  - iomap: account for unaligned end offsets when truncating read range (Joanne Koong)
  - iomap: adjust read range correctly for non-block-aligned positions (Joanne Koong) [Orabug: 38847819] {CVE-2025-68794}
  - shmem: fix recovery on rename failures (Al Viro) [Orabug: 38847988] {CVE-2025-71072}
  - btrfs: fix memory leak of fs_devices in degraded seed device path (Deepanshu Kartikey)
  - bpf, arm64: Do not audit capability check in do_jit() (Ondrej Mosnacek)
  - btrfs: fix a potential path leak in print_data_reloc_error() (Qu Wenruo)
  - btrfs: do not skip logging new dentries when logging a new name (Filipe Manana)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.64.5.el9uek]
changelog:
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Jianbo Liu) [Orabug: 38859067]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.64.6.el9uek]
changelog:
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima)  [Orabug: 38649136]  {CVE-2025-40149}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.64.6.2.el9uek]
changelog:
  - Revert "net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn" (Sharath Srinivasan)  [Orabug: 38937451]
  - Revert "net/rds: expand kref coverage to rds_notifier->n_conn" (Sharath Srinivasan)  [Orabug: 38937451]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.64.4.el9uek]
changelog:
  - fuse: fix runtime warning on truncate_folio_batch_exceptionals() (Haiyue Wang) [Orabug: 38516705] {CVE-2025-38357}
  - PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (Breno Leitao) [Orabug: 38597009] {CVE-2025-40034}
  - bnxt_en: Shutdown FW DMA in bnxt_shutdown() (Michael Chan) [Orabug: 38747442] {CVE-2025-40330}
  - mlx5: Fix default values in create CQ (Akiva Goldberger) [Orabug: 38750222,38773368] {CVE-2025-68209}
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Håkon Bugge) [Orabug: 38753653]
  - bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() (Gautam R A) [Orabug: 38773315] {CVE-2025-68197}
  - LTS version: v6.12.64 (Jack Vogel)
  - block: fix NULL pointer dereference in blk_zone_reset_all_bio_endio() (Damien Le Moal)
  - iomap: allocate s_dio_done_wq for async reads as well (Christoph Hellwig) [Orabug: 38798795] {CVE-2025-68357}
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failres in damon_test_new_filter() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() (Seongjae Park)
  - vfio/pci: Disable qword access to the PCI ROM bar (Kevin Tian)
  - media: amphion: Remove vpu_vb_is_codecconfig (Ming Qian)
  - media: amphion: Make some vpu_v4l2 functions static (Laurent Pinchart)
  - media: amphion: Add a frame flush mode for decoder (Ming Qian)
  - media: mediatek: vcodec: Use spinlock for context list protection lock (Chen-Yu Tsai)
  - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages (David Hildenbrand)
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() (David Hildenbrand)
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list (David Hildenbrand)
  - PCI: brcmstb: Fix disabling L0s capability (Jim Quinlan)
  - PCI: brcmstb: Set MLW based on "num-lanes" DT property if present (Jim Quinlan)
  - PCI: brcmstb: Reuse pcie_cfg_data structure (Stanimir Varbanov)
  - ASoC: renesas: rz-ssi: Fix rz_ssi_priv::hw_params_cache::sample_width (Biju Das)
  - ASoC: qcom: sdw: fix memory leak for sdw_stream_runtime (Srinivas Kandagatla)
  - soundwire: stream: extend sdw_alloc_stream() to take 'type' parameter (Pierre-Louis Bossart)
  - block: handle zone management operations completions (Damien Le Moal)
  - ASoC: renesas: rz-ssi: Fix channel swap issue in full duplex mode (Biju Das)
  - gve: defer interrupt enabling until NAPI registration (Ankit Garg) [Orabug: 38887626] {CVE-2025-71156}
  - hrtimers: Make hrtimer_update_function() less expensive (Thomas Gleixner)
  - idpf: remove obsolete stashing code (Joshua Hay)
  - idpf: stop Tx if there are insufficient buffer resources (Joshua Hay)
  - idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay)
  - idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay)
  - idpf: improve when to set RE bit logic (Joshua Hay)
  - idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay)
  - idpf: trigger SW interrupt when exiting wb_on_itr mode (Joshua Hay)
  - idpf: add support for SW triggered interrupts (Joshua Hay)
  - wifi: mt76: mt7925: add handler to hif suspend/resume event (Quan Zhou)
  - wifi: mt76: mt7925: fix CLC command timeout when suspend/resume (Quan Zhou)
  - wifi: mt76: mt7925: fix the unfinished command of regd_notifier before suspend (Quan Zhou)
  - media: i2c: imx219: Fix 1920x1080 mode to use 1:1 pixel aspect ratio (Dave Stevenson)
  - x86/microcode/AMD: Select which microcode patch to load (Borislav Petkov)
  - tty: fix tty_port_tty_*hangup() kernel-doc (Jiri Slaby)
  - serial: core: Fix serial device initialization (Alexander Stein)
  - usbnet: Fix using smp_processor_id() in preemptible code warnings (Zqiang) [Orabug: 38649205] {CVE-2025-40164}
  - net: use dst_dev_rcu() in sk_setup_caps() (Eric Dumazet) [Orabug: 38649240] {CVE-2025-40170}
  - ipv6: adopt dst_dev() helper (Eric Dumazet)
  - net: ipv6: ioam6: use consistent dst names (Justin Iurman)
  - drm/panthor: Flush shmem writes before mapping buffers CPU-uncached (Boris Brezillon)
  - md/raid10: wait barrier before returning discard request with REQ_NOWAIT (Xiao Ni) [Orabug: 37855392] {CVE-2025-40325}
  - netfilter: nft_ct: add seqadj extension for natted connections (Andrii Melnychenko) [Orabug: 38773355] {CVE-2025-68206}
  - gpiolib: acpi: Add quirk for Dell Precision 7780 (Askar Safin)
  - gpiolib: acpi: Add quirk for ASUS ProArt PX13 (Mario Limonciello)
  - gpiolib: acpi: Add a quirk for Acer Nitro V15 (Mario Limonciello)
  - gpiolib: acpi: Move quirks to a separate file (Andy Shevchenko)
  - gpiolib: acpi: Add acpi_gpio_need_run_edge_events_on_boot() getter (Andy Shevchenko)
  - gpiolib: acpi: Handle deferred list via new API (Andy Shevchenko)
  - gpiolib: acpi: Switch to use enum in acpi_gpio_in_ignore_list() (Andy Shevchenko)
  - f2fs: fix to propagate error from f2fs_enable_checkpoint() (Chao Yu)
  - f2fs: dump more information for f2fs_{enable,disable}_checkpoint() (Chao Yu)
  - f2fs: add timeout in f2fs_enable_checkpoint() (Chao Yu)
  - f2fs: clear SBI_POR_DOING before initing inmem curseg (Sheng Yong)
  - serial: xilinx_uartps: fix rs485 delay_rts_after_send (Jakub Turek)
  - serial: xilinx_uartps: Use helper function hrtimer_update_function() (Nam Cao)
  - hrtimers: Introduce hrtimer_update_function() (Nam Cao)
  - drm/displayid: add quirk to ignore DisplayID checksum errors (Jani Nikula)
  - sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() (Tejun Heo)
  - sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() (Tejun Heo)
  - tpm2-sessions: Fix tpm2_read_public range checks (Jarkko Sakkinen)
  - block: freeze queue when updating zone resources (Damien Le Moal)
  - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 (Nicolas Ferre)
  - svcrdma: bound check rq_pages index in inline path (Joshua Rogers) [Orabug: 38847975] {CVE-2025-71068}
  - mm/ksm: fix exec/fork inheritance support for prctl (Xu Xin)
  - mptcp: pm: ignore unknown endpoint flags (Matthieu Baerts)
  - serial: core: Restore sysfs fwnode information (Andy Shevchenko)
  - serial: core: fix OF node leak (Johan Hovold)
  - f2fs: fix to avoid updating compression context during writeback (Chao Yu)
  - f2fs: drop inode from the donation list when the last file is closed (Jaegeuk Kim)
  - f2fs: use global inline_xattr_slab instead of per-sb slab cache (Chao Yu)
  - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() (Chao Yu)
  - xhci: dbgtty: fix device unregister: fixup (Łukasz Bartosik)
  - tty: introduce and use tty_port_tty_vhangup() helper (Jiri Slaby)
  - jbd2: fix the inconsistency between checksum and data in memory for journal sb (Ye Bin)
  - sched_ext: Fix incorrect sched_class settings for per-cpu migration tasks (Zqiang)
  - erofs: fix unexpected EIO under memory pressure (Junbeom Yeom)
  - sched/eevdf: Fix min_vruntime vs avg_vruntime (Peter Zijlstra)
  - btrfs: don't rewrite ret from inode_permission (Josef Bacik)
  - gfs2: fix freeze error handling (Alexey Velichayshiy)
  - lib/crypto: riscv/chacha: Avoid s0/fp register (Vivian Wang)
  - drm/imagination: Disallow exporting of PM/FW protected objects (Alessio Belle)
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Lyude Paul)
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Niemiec, Krzysztof) [Orabug: 38852366] {CVE-2025-71130}
  - drm/msm/dpu: Add missing NULL pointer check for pingpong interface (Nikolay Kuratov) [Orabug: 38852395] {CVE-2025-71138}
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Thomas Hellström)
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (Matthew Brost)
  - drm/xe: Adjust long-running workload timeslices to reasonable values (Matthew Brost)
  - drm/xe/oa: Disallow 0 OA property values (Ashutosh Dixit)
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Thomas Hellström)
  - drm/mgag200: Fix big-endian support (René Rebe)
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Simon Richter) [Orabug: 38848051] {CVE-2025-71083}
  - drm/i915: Fix format string truncation warning (Ard Biesheuvel)
  - drm/amdkfd: Trap handler support for expert scheduling mode (Jay Cornwall)
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (Jonathan Kim)
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Mario Limonciello)
  - drm/mediatek: Fix probe device leaks (Johan Hovold)
  - drm/mediatek: Fix probe memory leak (Johan Hovold)
  - drm/mediatek: Fix probe resource leaks (Johan Hovold)
  - drm/mediatek: Fix device node reference leak in mtk_dp_dt_parse() (Miaoqian Lin)
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Sanjay Yadav)
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Jani Nikula)
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Thomas Zimmermann)
  - drm/buddy: Separate clear and dirty free block trees (Arunpravin Paneer Selvam)
  - drm/buddy: Optimize free block management with RB tree (Arunpravin Paneer Selvam)
  - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers (Akhil P Oommen)
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Alex Deucher)
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Pierre-Eric Pelloux-Prayer)
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Alex Deucher)
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (Mario Limonciello)
  - net: macb: Relocate mog_init_rings() callback from macb_mac_link_up() to macb_open() (Xiaolei Wang)
  - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write (Deepanshu Kartikey)
  - net: usb: sr9700: fix incorrect command used to write single register (Ethan Nelson-Moore)
  - nfsd: Drop the client reference in client_states_open() (Haoxiang Li)
  - LoongArch: BPF: Sign extend kfunc call arguments (Hengqi Chen)
  - LoongArch: BPF: Zero-extend bpf_tail_call() index (Hengqi Chen)
  - LoongArch: Refactor register restoration in ftrace_common_return (Duan Chenghao)
  - fjes: Add missing iounmap in fjes_hw_init() (Haoxiang Li)
  - e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [Orabug: 38848098] {CVE-2025-71093}
  - RDMA/cm: Fix leaking the multicast GID table reference (Jason Gunthorpe) [Orabug: 38848057] {CVE-2025-71084}
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Jason Gunthorpe) [Orabug: 38848116] {CVE-2025-71096}
  - samples/ftrace: Adjust LoongArch register restore order in direct calls (Duan Chenghao)
  - tools/mm/page_owner_sort: fix timestamp comparison for stable sorting (Kaushlendra Kumar)
  - x86/microcode/AMD: Fix Entrysign revision check for Zen5/Strix Halo (Rongrong)
  - mm/page_owner: fix memory leak in page_owner_stack_fops->release() (Ran Xiaokai)
  - idr: fix idr_alloc() returning an ID out of range (Matthew Wilcox)
  - lockd: fix vfs_test_lock() calls (Neil Brown)
  - kasan: unpoison vms[area] addresses with a common tag (Maciej Wieczor-Retman)
  - kasan: refactor pcpu kasan vmalloc unpoison (Maciej Wieczor-Retman)
  - compiler_types.h: add "auto" as a macro for "__auto_type" (H. Peter Anvin)
  - pmdomain: imx: Fix reference count leak in imx_gpc_probe() (Xu Wang)
  - mm/damon/tests/core-kunit: handle alloc failure on damon_test_set_attrs() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_ops_registration() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_update_monitoring_result() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures in damon_test_set_regions() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() (Seongjae Park)
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() (Seongjae Park)
  - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() (Seongjae Park)
  - mm/damon/tests/sysfs-kunit: handle alloc failures on damon_sysfs_test_add_targets() (Seongjae Park)
  - LoongArch: Use unsigned long for _end and _text (Tiezhu Yang)
  - LoongArch: Use __pmd()/__pte() for swap entry conversions (Wangyuli)
  - LoongArch: Fix build errors for CONFIG_RANDSTRUCT (Huacai Chen)
  - LoongArch: Correct the calculation logic of thread_count (Maqiang)
  - LoongArch: Add new PCI ID for pci_fixup_vgadev() (Huacai Chen)
  - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() (Haoxiang Li)
  - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: amphion: Cancel message work before releasing the VPU core (Ming Qian)
  - media: vpif_display: fix section mismatch (Johan Hovold)
  - media: vpif_capture: fix section mismatch (Johan Hovold)
  - media: videobuf2: Fix device reference leak in vb2_dc_alloc error path (Xu Wang)
  - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index (Nicolas Dufresne)
  - media: TDA1997x: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: samsung: exynos4-is: fix potential ABBA deadlock on init (Marek Szyprowski)
  - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled (Miaoqian Lin)
  - media: platform: mtk-mdp3: fix device leaks at probe (Johan Hovold)
  - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() (Ivan Abramov)
  - media: cec: Fix debugfs leak on bus_register() failure (Xu Wang)
  - fbdev: tcx.c fix mem_map to correct smem_start offset (René Rebe)
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Thorsten Blum)
  - fbdev: gbefb: fix to use physical address instead of dma address (René Rebe)
  - dm-bufio: align write boundary on physical block size (Mikulas Patocka)
  - dm-ebs: Mark full buffer dirty even on partial write (Uladzislau Rezki)
  - firmware: stratix10-svc: Add mutex in stratix10 memory management (Mahesh Rao)
  - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() (Ivan Abramov)
  - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION (David Hildenbrand)
  - perf/x86/amd/uncore: Fix the return value of amd_uncore_df_event_init() on error (Sandipan Das)
  - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() (Sven Schnelle)
  - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace (Sven Schnelle)
  - mtd: spi-nor: winbond: Add support for W25H02NWxxAM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25H01NWxxAM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25H512NWxxAM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25Q02NWxxIM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25Q01NWxxIM chips (Miquel Raynal)
  - mtd: spi-nor: winbond: Add support for W25Q01NWxxIQ chips (Miquel Raynal)
  - mtd: mtdpart: ignore error -ENOENT from parsers on subpartitions (Christian Marangi)
  - media: verisilicon: Fix CPU stalls on G2 bus error (Nicolas Dufresne)
  - media: rc: st_rc: Fix reset control resource leak (Xu Wang)
  - mfd: max77620: Fix potential IRQ chip conflict when probing two devices (Krzysztof Kozlowski)
  - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup (Johan Hovold)
  - clk: samsung: exynos-clkout: Assign .num before accessing .hws (Nathan Chancellor) [Orabug: 38852404] {CVE-2025-71143}
  - block: Clear BLK_ZONE_WPLUG_PLUGGED when aborting plugged BIOs (Damien Le Moal)
  - leds: leds-lp50xx: Enable chip before any communication (Christian Hitz)
  - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs (Christian Hitz)
  - leds: leds-lp50xx: Allow LED 0 to be added to module bank (Christian Hitz)
  - leds: leds-cros_ec: Skip LEDs without color components (Thomas Weißschuh)
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Donet Tom)
  - powerpc, mm: Fix mprotect on book3s 32-bit (Dave Vasilevsky)
  - arm64: dts: ti: k3-j721e-sk: Fix pinmux for pin Y1 used by power regulator (Siddharth Vadapalli)
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Lukas Wunner)
  - fgraph: Check ftrace_pids_enabled on registration for early filtering (Shengming Hu)
  - fgraph: Initialize ftrace_ops->private for function graph ops (Shengming Hu)
  - HID: logitech-dj: Remove duplicate error logging (Hans de Goede)
  - iommu: disable SVA when CONFIG_X86 is set (Lu Baolu) [Orabug: 38848082] {CVE-2025-71089}
  - iommu/tegra: fix device leak on probe_device() (Johan Hovold)
  - iommu/sun50i: fix device leak on of_xlate() (Johan Hovold)
  - iommu/qcom: fix device leak on of_xlate() (Johan Hovold)
  - iommu/omap: fix device leaks on probe_device() (Johan Hovold)
  - iommu/mediatek: fix device leak on of_xlate() (Johan Hovold)
  - iommu/mediatek-v1: fix device leaks on probe() (Johan Hovold)
  - iommu/mediatek-v1: fix device leak on probe_device() (Johan Hovold)
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Johan Hovold)
  - iommu/exynos: fix device leak on of_xlate() (Johan Hovold)
  - iommu/apple-dart: fix device leak on of_xlate() (Johan Hovold)
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jinhui Guo)
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jinhui Guo)
  - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla)
  - ASoC: qcom: q6adm: the the copp device only during last instance (Srinivas Kandagatla)
  - ASoC: qcom: q6asm-dai: perform correct state check before closing (Srinivas Kandagatla)
  - ASoC: qcom: q6apm-dai: set flags to reflect correct operation of appl_ptr (Srinivas Kandagatla)
  - ASoC: codecs: lpass-tx-macro: fix SM6115 support (Srinivas Kandagatla)
  - ASoC: stm32: sai: fix OF node leak on probe (Johan Hovold)
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure (Johan Hovold)
  - ASoC: stm32: sai: fix device leak on probe (Johan Hovold)
  - ASoC: codecs: wcd939x: fix regmap leak on probe failure (Johan Hovold)
  - ntfs: Do not overwrite uptodate pages (Matthew Wilcox)
  - selftests/ftrace: traceonoff_triggers: strip off names (Yipeng Zou)
  - blk-mq: skip CPU offline notify on unmapped hctx (Cong Zhang)
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Thomas Fourier)
  - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation (Lihonggang)
  - ksmbd: Fix memory leak in get_file_all_info() (Zilin Guan)
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Tuo Li) [Orabug: 38852384] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Li Nan)
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Kalesh Ap)
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Alok Tiwari)
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Tetsuo Handa) [Orabug: 38887628] {CVE-2025-71157}
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Alok Tiwari)
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Jang Ingyu)
  - RDMA/efa: Remove possible negative shift (Michael Margolin)
  - RDMA/irdma: avoid invalid read in irdma_net_event (Michal Schmidt) [Orabug: 38852378] {CVE-2025-71133}
  - ipv6: fix a BUG in rt6_get_pcpu_route() under PREEMPT_RT (Jiayuan Chen) [Orabug: 38848033] {CVE-2025-71080}
  - net: rose: fix invalid array index in rose_kill_by_device() (Pwnverse)
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Ido Schimmel) [Orabug: 38848124] {CVE-2025-71097}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [Orabug: 38848060] {CVE-2025-71085}
  - net: stmmac: fix the crash issue for zero copy XDP_TX action (Wei Fang) [Orabug: 38848110] {CVE-2025-71095}
  - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (Anshumali Gaur)
  - platform/x86: hp-bioscfg: Fix out-of-bounds array access in ACPI package parsing (Junrui Luo) [Orabug: 38848146] {CVE-2025-71101}
  - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() (Zilin Guan)
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Bagas Sanjaya)
  - net: usb: asix: validate PHY address before use (Deepanshu Kartikey) [Orabug: 38848106] {CVE-2025-71094}
  - kbuild: fix compilation of dtb specified on command-line without make rule (Thomas De Schampheleire)
  - net: dsa: b53: skip multicast entries for fdb_dump() (Jonas Gorski)
  - firewire: nosy: Fix dma_free_coherent() size (Thomas Fourier)
  - genalloc.h: fix htmldocs warning (Andrew Morton)
  - smc91x: fix broken irq-context in PREEMPT_RT (Levi Yun) [Orabug: 38852375] {CVE-2025-71132}
  - selftests: net: fix "buffer overflow detected" for tap.c (Alice C. Munduruca)
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (Deepakkumar Karn) [Orabug: 38887618] {CVE-2025-71154}
  - amd-xgbe: reset retries and mode on RX adapt failures (Raju Rangoju)
  - net: dsa: fix missing put_device() in dsa_tree_find_first_conduit() (Vladimir Oltean)
  - team: fix check for port enabled in team_queue_override_port_prio_changed() (Jiri Pirko) [Orabug: 38848087] {CVE-2025-71091}
  - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic (Junrui Luo)
  - platform/x86: msi-laptop: add missing sysfs_remove_group() (Thomas Fourier)
  - platform/mellanox: mlxbf-pmc: Remove trailing whitespaces from event names (Shravan Kumar Ramani)
  - ip6_gre: make ip6gre_header() robust (Eric Dumazet) [Orabug: 38848130] {CVE-2025-71098}
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Toke Høiland-Jørgensen)
  - net: mdio: aspeed: add dummy read to avoid read-after-write issue (Jacky Chou)
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (Raphael Pinsonneault-Thibeault) [Orabug: 38848042] {CVE-2025-71082}
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Herbert Xu) [Orabug: 38852369] {CVE-2025-71131}
  - idpf: reduce mbx_task schedule delay to 300us (Brian Vazquez)
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Kohei Enju) [Orabug: 38848072] {CVE-2025-71087}
  - i40e: validate ring_len parameter against hardware-specific values (Gregory Herrero)
  - i40e: fix scheduling in set_rx_mode (Przemyslaw Korba)
  - wifi: mac80211: do not use old MBSSID elements (Aloka Dixit)
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Dan Carpenter)
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Morning Star) [Orabug: 38848143] {CVE-2025-71100}
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Ping-Ke Shih)
  - fuse: fix readahead reclaim deadlock (Joanne Koong) [Orabug: 38847945] {CVE-2025-68821}
  - iommu/mediatek: fix use-after-free on probe deferral (Johan Hovold)
  - x86/msi: Make irq_retrigger() functional for posted MSI (Thomas Gleixner)
  - ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 (Nicolas Ferre)
  - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU (Gui-Dong Han)
  - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (Gui-Dong Han) [Orabug: 38852299] {CVE-2025-71111}
  - hwmon: (max6697) fix regmap leak on probe failure (Johan Hovold)
  - hwmon: (max16065) Use local variable to avoid TOCTOU (Gui-Dong Han)
  - interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes (Raviteja Laggyshetty)
  - i2c: amd-mp2: fix reference leak in MP2 PCI device (Ma Ke)
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args (Bartosz Golaszewski)
  - rpmsg: glink: fix rpmsg device leak (Srinivas Kandagatla)
  - soc: amlogic: canvas: fix device leak on lookup (Johan Hovold)
  - soc: apple: mailbox: fix device leak on lookup (Johan Hovold)
  - soc: qcom: ocmem: fix device leak on lookup (Johan Hovold)
  - soc: qcom: pbs: fix device leak on lookup (Johan Hovold)
  - soc: samsung: exynos-pmu: fix device leak on regmap lookup (Johan Hovold)
  - tracing: Fix fixed array of synthetic event (Steven Rostedt)
  - virtio: vdpa: Fix reference count leak in octep_sriov_enable() (Miaoqian Lin)
  - amba: tegra-ahb: Fix device leak on SMMU enable (Johan Hovold)
  - crypto: caam - Add check for kcalloc() in test_len() (Guangshuo Li)
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Shivani Agarwal) [Orabug: 38852311] {CVE-2025-71113}
  - dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets (Krzysztof Kozlowski)
  - arm64: Revamp HCR_EL2.E2H RES1 detection (Marc Zyngier)
  - KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() (Ahmed Genidi)
  - KVM: arm64: Initialize HCR_EL2.E2H early (Mark Rutland)
  - sched/rt: Fix race in push_rt_task (Harshit Agarwal) [Orabug: 38158721] {CVE-2025-38234}
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Hangbin Liu)
  - pinctrl: renesas: rzg2l: Fix ISEL restore on resume (Claudiu Beznea)
  - ALSA: wavefront: Clear substream pointers on close (Junrui Luo)
  - ALSA: wavefront: Use guard() for spin locks (Takashi Iwai)
  - ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() (Denis Arefev)
  - drm/displayid: pass iter to drm_find_displayid_extension() (Jani Nikula)
  - drm/amd/display: Fix scratch registers offsets for DCN351 (Ray Wu)
  - drm/amd/display: Fix scratch registers offsets for DCN35 (Ray Wu)
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Alex Deucher)
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (Mario Limonciello)
  - io_uring: fix min_wait wakeups for SQPOLL (Jens Axboe)
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jens Axboe) [Orabug: 38887603] {CVE-2025-71149}
  - gpio: regmap: Fix memleak in error path in gpio_regmap_register() (Guan Wentao)
  - s390/ipl: Clear SBP flag when bootprog is set (Sven Schnelle)
  - btrfs: don't log conflicting inode if it's a dir moved in the current transaction (Filipe Manana) [Orabug: 38847745] {CVE-2025-68778}
  - powerpc/kexec: Enable SMT before waking offline CPUs (Nysal Jan K.A.)
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852340] {CVE-2025-71120}
  - svcrdma: use rc_pageoff for memcpy byte offset (Joshua Rogers) [Orabug: 38847896] {CVE-2025-68811}
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Joshua Rogers)
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Andy Shevchenko)
  - NFSD: NFSv4 file creation neglects setting ACL (Chuck Lever) [Orabug: 38847871] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Chuck Lever)
  - net/handshake: restore destructor on submit failure (Caoping) [Orabug: 38887600] {CVE-2025-71148}
  - fsnotify: do not generate ACCESS/MODIFY events on child for special files (Amir Goldstein) [Orabug: 38847799] {CVE-2025-68788}
  - net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write (Thorsten Blum)
  - r8169: fix RTL8117 Wake-on-Lan in DASH mode (René Rebe)
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Rafael J. Wysocki)
  - tracing: Do not register unsupported perf events (Steven Rostedt) [Orabug: 38852354] {CVE-2025-71125}
  - xfs: fix a UAF problem in xattr repair (Darrick J. Wong) [Orabug: 38847781] {CVE-2025-68784}
  - xfs: fix stupid compiler warning (Darrick J. Wong)
  - xfs: fix a memory leak in xfs_buf_item_init() (Haoxiang Li)
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Sean Christopherson)
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Sean Christopherson)
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Dongli Zhang)
  - KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN (Jim Mattson)
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Yosry Ahmed)
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Jim Mattson)
  - KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (Yosry Ahmed)
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Fuqiang Wang) [Orabug: 38852272] {CVE-2025-71104}
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Fuqiang Wang)
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Sean Christopherson)
  - powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() (Finn Thain)
  - libceph: make decode_pool() more resilient against corrupted osdmaps (Ilya Dryomov) [Orabug: 38852324] {CVE-2025-71116}
  - parisc: Do not reprogram affinitiy on ASP chip (Helge Deller)
  - scs: fix a wrong parameter in __scs_magic (Zhichi Lin)
  - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver (Tzung-Bi Shih)
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky)
  - ocfs2: fix kernel BUG in ocfs2_find_victim_chain (Prithvi Tambewagh) [Orabug: 38847687] {CVE-2025-68771}
  - media: vidtv: initialize local pointers upon transfer of memory ownership (Jeongjun Park)
  - KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot (Sean Christopherson) [Orabug: 38847894] {CVE-2025-68810}
  - tools/testing/nvdimm: Use per-DIMM device handle (Alison Schofield)
  - f2fs: fix return value of f2fs_recover_fsync_data() (Chao Yu)
  - f2fs: fix uninitialized one_time_gc in victim_sel_policy (Xiaole He)
  - f2fs: fix age extent cache insertion skip on counter overflow (Xiaole He)
  - f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey)
  - f2fs: fix to avoid updating zero-sized extent in extent cache (Chao Yu)
  - f2fs: fix to avoid potential deadlock (Chao Yu)
  - f2fs: ensure node page reads complete before f2fs_put_super() finishes (Jan Prusakowski)
  - scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error (Seunghwan Baek)
  - scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow (Chandrakanth Patil)
  - scsi: target: Reset t_task_cdb pointer in error case (Andrey Vatoropin) [Orabug: 38847769] {CVE-2025-68782}
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Dai Ngo)
  - scsi: aic94xx: fix use-after-free in device removal path (Junrui Luo) [Orabug: 38848008] {CVE-2025-71075}
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (Tony Battersby) [Orabug: 38847928] {CVE-2025-68818}
  - cpufreq: nforce2: fix reference count leak in nforce2 (Miaoqian Lin)
  - cpuidle: governors: teo: Drop misguided target residency check (Rafael J. Wysocki)
  - serial: sh-sci: Check that the DMA cookie is valid (Claudiu Beznea)
  - mei: gsc: add dependency on Xe driver (Junxiao Chang)
  - intel_th: Fix error handling in intel_th_output_open (Ma Ke)
  - char: applicom: fix NULL pointer dereference in ac_ioctl (Tianchu Chen)
  - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() (Haoxiang Li)
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Udipto Goswami)
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Miaoqian Lin)
  - usb: gadget: lpc32xx_udc: fix clock imbalance in error path (Johan Hovold)
  - usb: phy: isp1301: fix non-OF device reference imbalance (Johan Hovold)
  - usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal (Duoming Zhou)
  - USB: lpc32xx_udc: Fix error handling in probe (Ma Ke)
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Haoxiang Li)
  - usb: ohci-nxp: fix device leak on probe failure (Johan Hovold)
  - phy: broadcom: bcm63xx-usbh: fix section mismatches (Johan Hovold)
  - media: pvrusb2: Fix incorrect variable used in trace message (Colin Ian King)
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (Jeongjun Park) [Orabug: 38847936] {CVE-2025-68819}
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Chenchangcheng)
  - mptcp: avoid deadlock on fallback while reinjecting (Paolo Abeni) [Orabug: 38852415] {CVE-2025-71126}
  - mptcp: schedule rtx timer only after pushing data (Paolo Abeni)
  - selftests: mptcp: pm: ensure unknown flags are ignored (Matthieu Baerts)
  - media: v4l2-mem2mem: Fix outdated documentation (Laurent Pinchart)
  - jbd2: use a weaker annotation in journal handling (Byungchul Park)
  - jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key (Tetsuo Handa)
  - ext4: align max orphan file size with e2fsprogs limit (Baokun Li)
  - ext4: fix incorrect group number assertion in mb_check_buddy (Yongjian Sun)
  - ext4: clear i_state_flags when alloc inode (Haibo Chen)
  - ext4: xattr: fix null pointer deref in ext4_raw_inode() (Karina Yankevich) [Orabug: 38848274] {CVE-2025-68820}
  - ext4: fix string copying in parse_apply_sb_mount_options() (Fedor Pchelkin) [Orabug: 38852413] {CVE-2025-71123}
  - tpm: Cap the number of PCR banks (Jarkko Sakkinen) [Orabug: 38848016] {CVE-2025-71077}
  - ktest.pl: Fix uninitialized var in config-bisect.pl (Steven Rostedt)
  - fs/ntfs3: fix mount failure for sparse runs in run_unpack() (Konstantin Komarov)
  - kallsyms: Fix wrong "big" kernel symbol type read from procfs (Zheng Yejian)
  - floppy: fix for PAGE_SIZE != 4KB (René Rebe)
  - block: rate-limit capacity change info log (Li Chen)
  - wifi: mt76: Fix DTS power-limits on little endian systems (Sven Eckelmann)
  - s390/dasd: Fix gendisk parent after copy pair swap (Stefan Haberland)
  - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit (Eric Biggers)
  - perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() (Ma Ke)
  - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition (Sarthak Garg)
  - x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems (Avadhut Naik)
  - io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh) [Orabug: 38847904] {CVE-2025-68814}
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Jarkko Sakkinen) [Orabug: 38887596] {CVE-2025-71147}
  - cifs: Fix memory and information leak in smb3_reconfigure() (Zilin Guan) [Orabug: 38887608] {CVE-2025-71151}
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella)
  - block: rnbd-clt: Fix signedness bug in init_dev() (Dan Carpenter)
  - scsi: scsi_debug: Fix atomic write enable module param description (John Garry)
  - MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits (Gregory Clement)
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Chia-Lin Kao)
  - nvme-fabrics: add ENOKEY to no retry criteria for authentication failures (Justin Tee)
  - nvme-fc: don't hold rport lock when putting ctrl (Daniel Wagner)
  - i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware (Jinhui Guo)
  - clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src (Jens Reidel)
  - libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map (Ian Rogers)
  - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready (Wenhua Lin)
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Chenchangcheng)
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Hongyu Xie)
  - iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains (Pei Xiao)
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Mark Pearson) [Orabug: 38852284] {CVE-2025-71108}
  - usbip: Fix locking bug in RT-enabled kernels (Lizhi Xu)
  - exfat: zero out post-EOF page cache on file extension (Yuezhang Mo)
  - exfat: fix remount failure in different process environments (Yuezhang Mo)
  - reset: fix BIT macro reference (Yongchao Jia)
  - via_wdt: fix critical boot hang due to unnamed resource allocation (Li Qiang) [Orabug: 38852317] {CVE-2025-71114}
  - fuse: Invalidate the page cache after FOPEN_DIRECT_IO write (Bernd Schubert)
  - fuse: Always flush the page cache before FOPEN_DIRECT_IO write (Bernd Schubert)
  - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp (Tony Battersby)
  - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive (Tony Battersby)
  - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled (Tony Battersby)
  - powerpc/addnote: Fix overflow on 32-bit builds (Ben Collins)
  - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 (Josua Mayer)
  - scsi: smartpqi: Add support for Hurray Data new controller PCI device (David Strahan)
  - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx (Matthias Schiffer)
  - firmware: imx: scu-irq: Init workqueue before request mbox channel (Peng Fan)
  - scsi: ufs: host: mediatek: Fix shutdown/suspend race condition (Peter Wang)
  - ipmi: Fix __scan_channels() failing to rescan channels (Jinhui Guo)
  - ipmi: Fix the race between __scan_channels() and deliver_response() (Jinhui Guo)
  - nfsd: fix memory leak in nfsd_create_serv error paths (Shardul Bankar)
  - nfsd: rename nfsd_serv_ prefixed methods and variables with nfsd_net_ (Mike Snitzer)
  - nfsd: update percpu_ref to manage references on nfsd_net (Mike Snitzer)
  - ASoC: ak4458: remove the reset operation in probe and remove (Shengjiu Wang)
  - ALSA: usb-mixer: us16x08: validate meter packet indices (Shipei Qu) [Orabug: 38847774] {CVE-2025-68783}
  - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path (Xu Wang)
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (Xu Wang)
  - x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures (Yongxin Liu)
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Shaurya Rane) [Orabug: 38847723] {CVE-2025-68776}
  - dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml (Andrew Jeffery)
  - mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds (Sai Krishna Potthuri)
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas)
  - spi: fsl-cpm: Check length parity before switching to 16 bit mode (Christophe Leroy)
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Pengjie Zhang)
  - ACPI: PCC: Fix race condition by removing static qualifier (Pengjie Zhang)
  - soc/tegra: fuse: Do not register SoC device on ACPI boot (Kartik)
  - can: gs_usb: gs_can_open(): fix error handling (Marc Kleine-Budde)
  - xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails (Christoph Hellwig)
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
  - Input: alps - fix use-after-free bugs caused by dev3_register_work (Duoming Zhou) [Orabug: 38847948] {CVE-2025-68822}
  - Input: lkkbd - disable pending work before freeing device (Minseong Kim)
  - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation (Junjie Cao)
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Ping Cheng)
  - ksmbd: fix buffer validation by including null terminator size in EA length (Namjae Jeon)
  - ksmbd: Fix refcount leak when invalid session is found on session lookup (Namjae Jeon)
  - ksmbd: skip lock-range check on equal size to avoid size==0 underflow (Qianchang Zhao)
  - hwmon: (ltc4282): Fix reset_history file permissions (Nuno Sa)
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (Shuicheng Lin)
  - drm/xe: Limit num_syncs to prevent oversized allocations (Shuicheng Lin)
  - block: rnbd-clt: Fix leaked ID in init_dev() (Thomas Fourier)
  - spi: cadence-quadspi: Fix clock disable on probe failure path (Anurag Dutta)
  - arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder (Jianpeng Chang)
  - x86/xen: Fix sparse warning in enlighten_pv.c (Juergen Gross)
  - x86/xen: Move Xen upcall handler (Brian Gerst)
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Marijn Suijten)
  - MIPS: Fix a reference leak bug in ip22_check_gio() (Haoxiang Li)
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (Jan Maslak)
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (Junxiao Chang)
  - hwmon: (tmp401) fix overflow caused by default conversion rate value (Alexey Simakov)
  - hwmon: (ibmpex) fix use-after-free in high/low store (Junrui Luo)
  - hwmon: (dell-smm) Limit fan multiplier to avoid overflow (Denis Sergeev)
  - net: hns3: add VLAN id validation before using (Jian Shen)
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx (Jian Shen)
  - net: hns3: using the num_tqps in the vf driver to apply for resources (Jian Shen)
  - net: enetc: do not transmit redirected XDP frames when the link is down (Wei Fang)
  - net/handshake: duplicate handshake cancellations leak socket (Scott Mayhew) [Orabug: 38847719] {CVE-2025-68775}
  - net/mlx5: Serialize firmware reset with devlink (Shay Drory)
  - net/mlx5: fw_tracer, Handle escaped percent properly (Shay Drory)
  - net/mlx5: fw_tracer, Validate format string parameters (Shay Drory) [Orabug: 38847913] {CVE-2025-68816}
  - net/mlx5: Drain firmware reset in shutdown callback (Moshe Shemesh)
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Moshe Shemesh)
  - ethtool: Avoid overflowing userspace buffer on stats query (Gal Pressman) [Orabug: 38847825] {CVE-2025-68795}
  - iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED (Jason Gunthorpe)
  - iommufd/selftest: Make it clearer to gcc that the access is not out of bounds (Jason Gunthorpe)
  - iommufd/selftest: Update hw_info coverage for an input data_type (Nicolin Chen)
  - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (Yi Liu)
  - selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel (Florian Westphal)
  - netfilter: nf_tables: remove redundant chain validation on register store (Pablo Neira Ayuso)
  - netfilter: nf_nat: remove bogus direction check (Florian Westphal)
  - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() (Dan Carpenter)
  - net/sched: ets: Remove drr class from the active list if it changes to strict (Victor Nogueira) [Orabug: 38847909] {CVE-2025-68815}
  - caif: fix integer underflow in cffrml_receive() (Junrui Luo)
  - ipvs: fix ipv4 null-ptr-deref in route error path (Slavin Liu) [Orabug: 38847899] {CVE-2025-68813}
  - netfilter: nf_conncount: fix leaked ct in error paths (Fernando Fernandez Mancera) [Orabug: 38887785] {CVE-2025-71146}
  - broadcom: b44: prevent uninitialized value usage (Alexey Simakov)
  - net: openvswitch: fix middle attribute validation in push_nsh() action (Ilya Maximets) [Orabug: 38847783] {CVE-2025-68785}
  - bnxt_en: Fix XDP_TX path (Michael Chan) [Orabug: 38847683] {CVE-2025-68770}
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (Ido Schimmel)
  - mlxsw: spectrum_router: Fix neighbour use-after-free (Ido Schimmel)
  - mlxsw: spectrum_router: Fix possible neighbour reference count leak (Ido Schimmel)
  - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() (Dmitry Skorodumov)
  - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (Jamal Hadi Salim) [Orabug: 38847964] {CVE-2025-71066}
  - netrom: Fix memory leak in nr_sendmsg() (Wang Liang)
  - net: fec: ERR007885 Workaround for XDP TX path (Wei Fang)
  - gfs2: Fix use of bio_chain (Andreas Gruenbacher)
  - Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT (Max Chou)
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (Gongwei Li)
  - Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 (Chris Lu)
  - Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 (Chris Lu)
  - Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV (Chingbin Li)
  - ksmbd: vfs: fix race on m_flags in vfs_cache (Qianchang Zhao)
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Namjae Jeon)
  - smb/server: fix return value of smb2_ioctl() (Chenxiaosong)
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher)
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher)
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical (Qu Wenruo)
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Hans de Goede)
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Quan Zhou)
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Johannes Berg)
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Johannes Berg)
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Bitterblue Smith)
  - fs/ntfs3: check for shutdown in fsync (Konstantin Komarov)
  - hfsplus: fix volume corruption issue for generic/073 (Viacheslav Dubeyko)
  - hfsplus: Verify inode mode when loading from disk (Tetsuo Handa)
  - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create (Yang Chenzhi)
  - hfsplus: fix volume corruption issue for generic/070 (Viacheslav Dubeyko)
  - ntfs: set dummy blocksize to read boot_block when mounting (Pedro Demarchi Gomes)
  - kbuild: Use objtree for module signing key path (Mikhail Malyshev)
  - fs/ntfs3: Support timestamps prior to epoch (Konstantin Komarov)
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Song Liu)
  - cpuidle: menu: Use residency threshold in polling state override decisions (Aboorva Devarajan)
  - cpufreq: s5pv210: fix refcount leak (Shuhao Fu)
  - ACPI: fan: Workaround for 64-bit firmware bug (Armin Wolf)
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Hal Feng)
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Sakari Ailus)
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia Pukngae) [Orabug: 38852332] {CVE-2025-71118}
  - x86/ptrace: Always inline trivial accessors (Peter Zijlstra)
  - sched/deadline: only set free_cpus for online runqueues (Doug Berger) [Orabug: 38847752] {CVE-2025-68780}
  - perf/x86/amd: Check event before enable to avoid GPF (George Kennedy) [Orabug: 38847848] {CVE-2025-68798}
  - scripts/faddr2line: Fix "Argument list too long" error (Pankaj Raghav)
  - iomap: account for unaligned end offsets when truncating read range (Joanne Koong)
  - iomap: adjust read range correctly for non-block-aligned positions (Joanne Koong) [Orabug: 38847819] {CVE-2025-68794}
  - shmem: fix recovery on rename failures (Al Viro) [Orabug: 38847988] {CVE-2025-71072}
  - btrfs: fix memory leak of fs_devices in degraded seed device path (Deepanshu Kartikey)
  - bpf, arm64: Do not audit capability check in do_jit() (Ondrej Mosnacek)
  - btrfs: fix a potential path leak in print_data_reloc_error() (Qu Wenruo)
  - btrfs: do not skip logging new dentries when logging a new name (Filipe Manana)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-108.64.6.el9uek]
changelog:
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [Orabug: 38649136,38932973] {CVE-2025-40149}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-109.67.1.el9uek]
changelog:
  - LTS version: v6.12.67 (Jack Vogel)
  - mm/fake-numa: handle cases with no SRAT info (Bruno Faccini)
  - mm/page_alloc: prevent pcp corruption with SMP=n (Vlastimil Babka) [Orabug: 38914772] {CVE-2026-23025}
  - mm/page_alloc: batch page freeing in decay_pcp_high (Joshua Hahn)
  - mm/page_alloc/vmstat: simplify refresh_cpu_vm_stats change detection (Joshua Hahn)
  - dmaengine: fsl-edma: Fix clk leak on alloc_chan_resources failure (Zhen Ni)
  - phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() (Xu Wang) [Orabug: 38914781] {CVE-2026-23030}
  - phy: phy-rockchip-inno-usb2: Use dev_err_probe() in the probe path (Dragan Simic)
  - mm: numa,memblock: include <asm/numa.h> for 'numa_nodes_parsed' (Ben Dooks)
  - mm/fake-numa: allow later numa node hotplug (Bruno Faccini)
  - mm: kmsan: fix poisoning of high-order non-compound pages (Ryan Roberts)
  - selftests/bpf: Test invalid narrower ctx load (Paul Chaignon)
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [Orabug: 38335080] {CVE-2025-38591}
  - mm/damon/sysfs-scheme: cleanup access_pattern subdirs on scheme dir setup failure (Seongjae Park) [Orabug: 38970289] {CVE-2026-23142}
  - mm/damon/sysfs-scheme: cleanup quotas subdirs on scheme dir setup failure (Seongjae Park)
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster)
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (Robbie Ko) [Orabug: 38930778] {CVE-2025-71194}
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Nathan Chancellor)
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Zhang Lixu)
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Johan Hovold)
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Johan Hovold)
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Johan Hovold)
  - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure (Johan Hovold)
  - dmaengine: stm32: dmamux: fix device leak on route allocation (Johan Hovold)
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Biju Das)
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Miaoqian Lin)
  - dmaengine: lpc32xx-dmamux: fix device leak on route allocation (Johan Hovold)
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation (Johan Hovold)
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Johan Hovold)
  - dmaengine: dw: dmamux: fix OF node leak on route allocation failure (Johan Hovold)
  - dmaengine: bcm-sba-raid: fix device leak on probe (Johan Hovold) [Orabug: 38914727] {CVE-2025-71190}
  - dmaengine: at_hdmac: fix device leak on of_dma_xlate() (Johan Hovold)
  - dmaengine: apple-admac: Add "apple,t8103-admac" compatible (Janne Grunau)
  - LoongArch: dts: loongson-2k2000: Add default interrupt controller address cells (Binbin Zhou)
  - LoongArch: dts: loongson-2k1000: Fix i2c-gpio node names (Binbin Zhou)
  - LoongArch: dts: loongson-2k1000: Add default interrupt controller address cells (Binbin Zhou)
  - LoongArch: dts: loongson-2k0500: Add default interrupt controller address cells (Binbin Zhou)
  - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() (Haoxiang Li)
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel (Marek Vasut) [Orabug: 38930828] {CVE-2026-23049}
  - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare (Lyude Paul)
  - drm/amdkfd: fix a memory leak in device_queue_manager_init() (Haoxiang Li)
  - drm/amd: Clean up kfd node on surprise disconnect (Mario Limonciello)
  - drm/amd/display: Bump the HDMI clock to 340MHz (Mario Limonciello)
  - LoongArch: Fix PMU counter allocation for mixed-type event groups (Lisa Robinson)
  - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Seongjae Park) [Orabug: 38970294] {CVE-2026-23144}
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free (Aboorva Devarajan)
  - mm/zswap: fix error pointer free in zswap_cpu_comp_prepare() (Pavel Butsykin)
  - nvme: fix PCIe subsystem reset controller state transition (Nilay Shroff)
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Xiaochen Shen)
  - x86/resctrl: Add missing resctrl initialization for Hygon (Xiaochen Shen)
  - i2c: riic: Move suspend handling to NOIRQ phase (Tommaso Merciai)
  - tcpm: allow looking for role_sw device in the main node (Arnaud Ferraris)
  - EDAC/i3200: Fix a resource leak in i3200_probe1() (Haoxiang Li)
  - EDAC/x38: Fix a resource leak in x38_probe1() (Haoxiang Li)
  - hrtimer: Fix softirq base check in update_needs_ipi() (Thomas Weißschuh)
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref (Yangerkun) [Orabug: 38970600] {CVE-2026-23145}
  - ASoC: codecs: wsa881x: fix unnecessary initialisation (Johan Hovold)
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8 (Ilikara Zheng)
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Ethan Nelson-Moore)
  - USB: serial: option: add Telit LE910 MBIM composition (Ulrich Mohr)
  - USB: OHCI/UHCI: Add soft dependencies on ehci_platform (Huacai Chen)
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor (Johannes Brüderl)
  - usb: dwc3: Check for USB4 IP_NAME (Thinh Nguyen)
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Wayne Chang)
  - phy: rockchip: inno-usb2: fix disconnection in gadget mode (Louis Chauvet)
  - phy: freescale: imx8m-pcie: assert phy reset during power on (Rafael Beims)
  - phy: ti: gmii-sel: fix regmap leak on probe failure (Johan Hovold)
  - phy: rockchip: inno-usb2: fix communication disruption in gadget mode (Luca Ceresoli)
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)
  - lib/buildid: use __kernel_read() for sleepable context (Shakeel Butt) [Orabug: 38887735] {CVE-2026-23002}
  - xfs: Fix the return value of xfs_rtcopy_summary() (Nirjhar Roy)
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Tetsuo Handa) [Orabug: 38887709] {CVE-2026-22997}
  - can: ctucanfd: fix SSP_SRC in cases when bit-rate is higher than 1 MBit. (Ondrej Ille)
  - can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38914785] {CVE-2026-23031}
  - null_blk: fix kmemleak by releasing references to fault configfs items (Nilay Shroff) [Orabug: 38914794] {CVE-2026-23032}
  - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer (Jaroslav Kysela)
  - scsi: core: Fix error handler encryption support (Brian Kao)
  - io_uring: move local task_work in exit cancel loop (Ming Lei)
  - drm/amd/display: mark static functions noinline_for_stack (Tzung-Bi Shih)
  - ASoC: codecs: wsa883x: fix unnecessary initialisation (Johan Hovold)
  - bridge: mcast: Fix use-after-free during router port configuration (Ido Schimmel) [Orabug: 38175058] {CVE-2025-38248}
  - HID: usbhid: paper over wrong bNumDescriptor field (Benjamin Tissoires)
  - i2c: qcom-geni: make sure I2C hub controllers can't use SE DMA (Neil Armstrong)
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Xu Wang)
  - selftests/landlock: Properly close a file descriptor (Günther Noack)
  - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) (Krzysztof Kozlowski)
  - selftests/landlock: Remove invalid unix socket bind() (Matthieu Buffet)
  - selftests/landlock: Fix TCP bind(AF_UNSPEC) test case (Matthieu Buffet)
  - phy: ti: da8xx-usb: Handle devm_pm_runtime_enable() errors (Xu Wang)
  - phy: stm32-usphyc: Fix off by one in probe() (Dan Carpenter)
  - phy: qcom-qusb2: Fix NULL pointer dereference on early suspend (Loic Poulain)
  - phy: drop probe registration printks (Johan Hovold)
  - phy: phy-snps-eusb2: refactor constructs names (Ivaylo Ivanov)
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it (Stefano Radaelli)
  - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing (Suraj Gupta)
  - dmaengine: tegra-adma: Fix use-after-free (Sheetal)
  - dmaengine: xilinx: xdma: Fix regmap max_register (Anthony Brandon)
  - mm, kfence: describe @slab parameter in __kfence_obj_info() (Bagas Sanjaya)
  - textsearch: describe @list member in ts_ops search (Bagas Sanjaya)
  - mm: describe @flags parameter in memalloc_flags_save() (Bagas Sanjaya)
  - drm/amd/pm: fix smu overdrive data type wrong issue on smu 14.0.2 (Yang Wang)
  - ASoC: tlv320adcx140: fix word length (Emil Svendsen)
  - ASoC: tlv320adcx140: fix null pointer (Emil Svendsen)
  - ASoC: sdw_utils: cs42l43: Enable Headphone pin for LINEOUT jack type (Cole Leavitt)
  - net/sched: sch_qfq: do not free existing class in qfq_change_class() (Eric Dumazet) [Orabug: 38887717] {CVE-2026-22999}
  - selftests: drv-net: fix RPS mask handling for high CPU numbers (Gal Pressman)
  - ipv6: Fix use-after-free in inet6_addr_del(). (Kuniyuki Iwashima) [Orabug: 38887755] {CVE-2026-23010}
  - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Aditya Garg) [Orabug: 38930846] {CVE-2026-23054}
  - ALSA: hda/cirrus_scodec_test: Fix incorrect setup of gpiochip (Richard Fitzgerald)
  - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (Kery Qi)
  - btrfs: fix memory leaks in create_space_info() error paths (Jiasheng Jiang)
  - btrfs: introduce btrfs_space_info sub-group (Naohiro Aota)
  - btrfs: factor out check_removing_space_info() from btrfs_free_block_groups() (Naohiro Aota)
  - btrfs: factor out init_space_info() from create_space_info() (Naohiro Aota)
  - net/mlx5e: Restore destroying state bit after profile cleanup (Saeed Mahameed)
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Saeed Mahameed) [Orabug: 38914806] {CVE-2026-23035}
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Saeed Mahameed) [Orabug: 38887705] {CVE-2026-22996}
  - net/mlx5e: Fix crash on profile change rollback failure (Saeed Mahameed) [Orabug: 38887724] {CVE-2026-23000}
  - vsock/test: add a final full barrier after run all tests (Stefano Garzarella)
  - ipv4: ip_gre: make ipgre_header() robust (Eric Dumazet) [Orabug: 38887757] {CVE-2026-23011}
  - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887729] {CVE-2026-23001}
  - net: update netdev_lock_{type,name} (Eric Dumazet)
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Eric Dumazet) [Orabug: 38887737] {CVE-2026-23003}
  - net: bridge: annotate data-races around fdb->{updated,used} (Eric Dumazet)
  - btrfs: send: check for inline extents in range_is_hole_in_parent() (Qu Wenruo) [Orabug: 38970283] {CVE-2026-23141}
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (Shivam Kumar) [Orabug: 38887713] {CVE-2026-22998}
  - can: etas_es58x: allow partial RX URB allocation to succeed (Szymon Wilczek)
  - PM: EM: Fix incorrect description of the cost field in struct em_perf_state (Yaxiong Tian)
  - drm/vmwgfx: Merge vmw_bo_release and vmw_bo_free functions (Ian Forbes)
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Zilin Guan)
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [Orabug: 38914815] {CVE-2026-23038}
  - NFS: Fix a deadlock involving nfs_release_folio() (Trond Myklebust) [Orabug: 38930844] {CVE-2026-23053}
  - pNFS: Fix a deadlock when returning a delegation during open() (Trond Myklebust) [Orabug: 38930834] {CVE-2026-23050}
  - xfrm: set ipv4 no_pmtu_disc flag only on output sa when direction is set (Antony Antony)
  - xfrm: Fix inner mode lookup in tunnel mode GSO segmentation (Jianbo Liu)
  - ASoC: codecs: wsa884x: fix codec initialisation (Johan Hovold)
  - x86/fpu: Clear XSTATE_BV[i] in guest XSAVE state whenever XFD[i]=1 (Sean Christopherson) [Orabug: 38887746] {CVE-2026-23005}
  - Revert "gfs2: Fix use of bio_chain" (Andreas Gruenbacher)
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Dandan Zhang)
  - firmware: imx: scu-irq: Set mu_resource_id before get handle (Peng Fan)
  - LTS version: v6.12.66 (Jack Vogel)
  - bpf: test_run: Fix ctx leak in bpf_prog_test_run_xdp error path (Shardul Bankar)
  - ALSA: hda: intel-dsp-config: Prefer legacy driver as fallback (Takashi Iwai)
  - tpm2-sessions: Fix out of range indexing in name_size (Jarkko Sakkinen) [Orabug: 38847816] {CVE-2025-68792}
  - spi: cadence-quadspi: Prevent lost complete() call during indirect read (Mateusz Litwin)
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek)
  - ASoC: fsl_sai: Add missing registers to cache default (Alexander Stein)
  - ALSA: hda/realtek: enable woofer speakers on Medion NM14LNL (Kai Vehmanen)
  - ASoC: amd: yc: Add quirk for Honor MagicBook X16 2025 (Andrew Elantsev)
  - ALSA: usb-audio: Update for native DSD support quirks (Jussi Laako)
  - can: j1939: make j1939_session_activate() fail if device is no longer registered (Tetsuo Handa) [Orabug: 38914674] {CVE-2025-71182}
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Brian Kocoloski)
  - spi: mt65xx: Use IRQF_ONESHOT with threaded IRQ (Fei Shao)
  - drm/amd/display: Fix DP no audio issue (Charlene Liu)
  - ata: libata-core: Disable LPM on ST2000DM008-2FR102 (Niklas Cassel)
  - netfilter: nf_tables: avoid chain re-validation if possible (Florian Westphal) [Orabug: 38887632] {CVE-2025-71160}
  - powercap: fix sscanf() error return value handling (Sumeet Pawnikar)
  - powercap: fix race condition in register_control_type() (Sumeet Pawnikar)
  - net: sfp: extend Potron XGSPON quirk to cover additional EEPROM variant (Marcus Hughes)
  - bpf: Fix reference count leak in bpf_prog_test_run_xdp() (Tetsuo Handa) [Orabug: 38887701] {CVE-2026-22994}
  - bpf, test_run: Subtract size of xdp_frame from allowed metadata size (Toke Høiland-Jørgensen) [Orabug: 38970281] {CVE-2026-23140}
  - bpf: Support specifying linear xdp packet data size for BPF_PROG_TEST_RUN (Amery Hung)
  - bpf: Make variables in bpf_prog_test_run_xdp less confusing (Amery Hung)
  - bpf: Fix an issue in bpf_prog_test_run_xdp when page size greater than 4K (Yonghong Song)
  - btrfs: fix beyond-EOF write handling (Qu Wenruo)
  - btrfs: use variable for end offset in extent_writepage_io() (Filipe Manana)
  - btrfs: truncate ordered extent when skipping writeback past i_size (Filipe Manana)
  - btrfs: remove btrfs_fs_info::sectors_per_page (Qu Wenruo)
  - btrfs: add extra error messages for delalloc range related errors (Qu Wenruo)
  - btrfs: subpage: dump the involved bitmap when ASSERT() failed (Qu Wenruo)
  - btrfs: fix error handling of submit_uncompressed_range() (Qu Wenruo)
  - ALSA: ac97: fix a double free in snd_ac97_controller_register() (Haoxiang Li)
  - ALSA: ac97bus: Use guard() for mutex locks (Takashi Iwai)
  - erofs: fix file-backed mounts no longer working on EROFS partitions (Gao Xiang)
  - erofs: don't bother with s_stack_depth increasing for now (Gao Xiang)
  - arp: do not assume dev_hard_header() does not change skb->head (Eric Dumazet) [Orabug: 38887789] {CVE-2026-22988}
  - net: enetc: fix build warning when PAGE_SIZE is greater than 128K (Wei Fang)
  - net: usb: pegasus: fix memory leak in update_eth_regs_async() (Petko Manolov) [Orabug: 38914760] {CVE-2026-23021}
  - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (Xiang Mei) [Orabug: 38872324] {CVE-2026-22976}
  - HID: quirks: work around VID/PID conflict for appledisplay (René Rebe)
  - net: netdevsim: fix inconsistent carrier state after link/unlink (Yohei Kojima)
  - idpf: cap maximum Rx buffer size (Joshua Hay)
  - idpf: fix memory leak in idpf_vport_rel() (Emil Tantilov) [Orabug: 38914769] {CVE-2026-23023}
  - idpf: keep the netdev when a reset fails (Emil Tantilov)
  - net: fix memory leak in skb_segment_list for GRO packets (Mohammad Heib) [Orabug: 38887655] {CVE-2026-22979}
  - riscv: pgtable: Cleanup useless VA_USER_XXX definitions (Guo Ren)
  - btrfs: only enforce free space tree if v1 cache is required for bs < ps cases (Qu Wenruo)
  - vsock: Make accept()ed sockets use custom setsockopt() (Michal Luczaj)
  - bnxt_en: Fix potential data corruption with HW GRO/LRO (Srijit Bose)
  - net: wwan: iosm: Fix memory leak in ipc_mux_deinit() (Zilin Guan)
  - net/mlx5e: Don't print error message due to invalid module (Gal Pressman)
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Di Zhu)
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Weiming Shi) [Orabug: 38877945] {CVE-2026-22977}
  - inet: ping: Fix icmp out counting (Yuan Gao)
  - net: mscc: ocelot: Fix crash when adding interface under a lag (Jerry Wu)
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Alexandre Knecht)
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure (Alok Tiwari)
  - netfilter: nf_conncount: update last_gc only when GC has been performed (Fernando Fernandez Mancera) [Orabug: 38970277] {CVE-2026-23139}
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Zilin Guan)
  - gpio: pca953x: handle short interrupt pulses on PCAL devices (Ernest Van Hoecke)
  - gpio: pca953x: Add support for level-triggered interrupts (Potin Lai)
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Fernando Fernandez Mancera)
  - netfilter: nft_set_pipapo: fix range overlap detection (Florian Westphal)
  - arm64: dts: mba8mx: Fix Ethernet PHY IRQ support (Alexander Stein)
  - arm64: dts: imx8qm-ss-dma: correct the dma channels of lpuart (Sherry Sun)
  - arm64: dts: imx8mp: Fix LAN8740Ai PHY reference clock on DH electronics i.MX8M Plus DHCOM (Marek Vasut)
  - ARM: dts: imx6q-ba16: fix RTC interrupt level (Ian Ray)
  - arm64: dts: add off-on-delay-us for usdhc2 regulator (Haibo Chen)
  - crypto: qat - fix duplicate restarting msg during AER error (Harshita Bhilwaria)
  - arm64: dts: ti: k3-am62-lp-sk-nand: Rename pinctrls to fix schema warnings (Wadim Egorov)
  - drm/amd/display: Apply e4479aecf658 to dml (Nathan Chancellor)
  - drm/amd/display: Respect user's CONFIG_FRAME_WARN more for dml files (Nathan Chancellor)
  - btrfs: fix NULL dereference on root when tracing inode eviction (Miquel Sabaté Solà) [Orabug: 38914692] {CVE-2025-71184}
  - btrfs: tracepoints: use btrfs_root_id() to get the id of a root (Filipe Manana)
  - btrfs: qgroup: update all parent qgroups when doing quick inherit (Qu Wenruo)
  - btrfs: fix qgroup_snapshot_quick_inherit() squota bug (Boris Burkov)
  - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" (Xingui Yang)
  - scsi: ufs: core: Fix EH failure after W-LUN resume error (Brian Kao)
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Wen Xiong)
  - smb/client: fix NT_STATUS_NO_DATA_DETECTED value (Chenxiaosong)
  - smb/client: fix NT_STATUS_DEVICE_DOOR_OPEN value (Chenxiaosong)
  - smb/client: fix NT_STATUS_UNABLE_TO_FREE_VM value (Chenxiaosong)
  - drm/amd/display: shrink struct members (Rosen Penev)
  - NFS: Fix up the automount fs_context to use the correct cred (Trond Myklebust)
  - ASoC: rockchip: Fix Wvoid-pointer-to-enum-cast warning (again) (Krzysztof Kozlowski)
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew)
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Mikulas Patocka)
  - alpha: don't reference obsolete termio struct for TC* constants (Sam James)
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels (Sebastian Andrzej Siewior)
  - csky: fix csky_cmpxchg_fixup not working (Yang Li)
  - drm/xe: Ensure GT is in C0 during resumes (Xin Wang)
  - drm/xe: make xe_gt_idle_disable_c6() handle the forcewake internally (Xin Wang)
  - libceph: make calc_target() set t->paused, not just clear it (Ilya Dryomov) [Orabug: 38930820] {CVE-2026-23047}
  - libceph: reset sparse-read state in osd_fault() (Sam Edwards) [Orabug: 38970263] {CVE-2026-23136}
  - libceph: return the handler error from mon_handle_auth_done() (Ilya Dryomov) [Orabug: 38887696] {CVE-2026-22992}
  - libceph: make free_choose_arg_map() resilient to partial allocation (Tuo Li) [Orabug: 38887690] {CVE-2026-22991}
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Ilya Dryomov) [Orabug: 38887684] {CVE-2026-22990}
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (Ziming Zhang) [Orabug: 38887672] {CVE-2026-22984}
  - wifi: mac80211: restore non-chanctx injection behaviour (Johannes Berg)
  - wifi: avoid kernel-infoleak from struct iw_point (Eric Dumazet) [Orabug: 38887649] {CVE-2026-22978}
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping (Bartosz Golaszewski)
  - gpio: rockchip: mark the GPIO controller as sleeping (Bartosz Golaszewski)
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Alex Deucher)
  - drm/pl111: Fix error handling in pl111_amba_probe (Miaoqian Lin)
  - drm/amdgpu: Fix query for VPE block_type and ip_count (Alan Liu)
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag (Alexander Sverdlin)
  - counter: 104-quad-8: Fix incorrect return value in IRQ handler (Xu Wang)
  - lib/crypto: aes: Fix missing MMU protection for AES S-box (Eric Biggers)
  - mei: me: add nova lake point S DID (Alexander Usyskin)
  - btrfs: always detect conflicting inodes when logging inode refs (Filipe Manana) [Orabug: 38914680] {CVE-2025-71183}
  - arm64: Fix cleared E0POE bit after cpu_suspend()/resume() (Levi Yun)
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() (Thomas Fourier) [Orabug: 38914754] {CVE-2026-23020}
  - atm: Fix dma_free_coherent() size (Thomas Fourier)
  - NFSD: Remove NFSERR_EAGAIN (Chuck Lever)
  - NFSD: net ref data still needs to be freed even if net hasn't startup (Edward Adam Davis)
  - nfsd: check that server is running in unlock_filesystem (Olga Kornievskaia) [Orabug: 38887681] {CVE-2026-22989}
  - nfsd: use correct loop termination in nfsd4_revoke_states() (Neil Brown)
  - nfsd: provide locking for v4_end_grace (Neil Brown) [Orabug: 38887658] {CVE-2026-22980}
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew)
  - LTS version: v6.12.65 (Jack Vogel)
  - pwm: stm32: Always program polarity (Sean Nyekjaer)
  - virtio_console: fix order of fields cols and rows (Maximilian Immanuel Brandtner)
  - sched/fair: Small cleanup to update_newidle_cost() (Peter Zijlstra)
  - sched/fair: Small cleanup to sched_balance_newidle() (Peter Zijlstra)
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Thadeu Lima de Souza Cascardo) [Orabug: 37844499] {CVE-2025-22111}
  - cpufreq: intel_pstate: Check IDA only before MSR_IA32_PERF_CTL writes (Richa Bharti)
  - drm/amdgpu: Forward VMID reservation errors (Natalie Vock)
  - net: phy: mediatek: fix nvmem cell reference leak in mt798x_phy_calibration (Miaoqian Lin)
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jouni Malinen) [Orabug: 38852360] {CVE-2025-71127}
  - mptcp: ensure context reset on disconnect() (Paolo Abeni) [Orabug: 38852416] {CVE-2025-71144}
  - mm: consider non-anon swap cache folios in folio_expected_ref_count() (Bijan Tabatabai)
  - mm: simplify folio_expected_ref_count() (David Hildenbrand)
  - mm/page_alloc: change all pageblocks migrate type on coalescing (Alexander Gordeev) [Orabug: 38852382] {CVE-2025-71134}
  - mptcp: fallback earlier on simult connection (Paolo Abeni) [Orabug: 38848079] {CVE-2025-71088}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-109.67.3.el9uek]
changelog:
  - RAS/AMD/ATL: Require PRM support for future systems (Yazen Ghannam) [Orabug: 38869580]
  - ACPI: PRM: Add acpi_prm_handler_available() (Yazen Ghannam) [Orabug: 38869580]
  - Documentation: add documentation for MFD_MF_KEEP_UE_MAPPED (William Roche) [Orabug: 38768984]
  - selftests/mm: test userspace MFR for HugeTLB hugepage (William Roche) [Orabug: 38768984]
  - mm: memfd/hugetlb: introduce memfd-based userspace MFR policy (William Roche) [Orabug: 38768984]
  - mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn (Jane Chu) [Orabug: 38768984]
  - mm/memory-failure: fix missing ->mf_stats count in hugetlb poison (Jane Chu) [Orabug: 38768984]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Harshvardhan Jha) [Orabug: 38741180]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-109.67.4.el9uek]
changelog:
  - KVM: x86: conditionally clear masterclock request for uek=exadata (Dongli Zhang) [Orabug: 38905553]
  - Partial backport of "KVM: x86: Fix software TSC upscaling in kvm_update_guest_time()" (Dongli Zhang) [Orabug: 38905553]
  - ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38916907]
  - jbd2: store more accurate errno in superblock when possible (Wengang Wang) [Orabug: 38916907]
  - net/rds: fix rds_message memleak in rds_send_xmit (Sharath Srinivasan) [Orabug: 38923495]
  - Revert "IB/mlx5: Implement clear counters" (Sharath Srinivasan) [Orabug: 38923518]
  - Revert "IB/core: Implement clear counters" (Sharath Srinivasan) [Orabug: 38923518]
  - net/rds: fix rds_message memleak in rds_send_queue_rm (Sharath Srinivasan) [Orabug: 38928269]
  - net/rds: rds_send_xmit should INIT_LIST_HEAD(&to_be_dropped) on restart (Sharath Srinivasan) [Orabug: 38928271]
  - net/rds: wait_event_timeout until zero connections during rmmod (Sharath Srinivasan) [Orabug: 38928273]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-109.67.5.el9uek]
changelog:
  - uek-rpm: fixed specs to explicitly call python3 as set as a requirement (Mark Nicholson) [Orabug: 38933158]
  - Revert "net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn" (Sharath Srinivasan) [Orabug: 38945524]
  - Revert "net/rds: expand kref coverage to rds_notifier->n_conn" (Sharath Srinivasan) [Orabug: 38945524]


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230516-1
changelog:
  - Update Intel CPU microcode to microcode-20230516 release (#2213124):
    - Addition of 06-be-00/0x01 (ADL-N A0) microcode at revision 0x10;
    - Addition of 06-9a-04/0x40 (AZB A0) microcode at revision 0x4;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006e05 up
      to 0x2006f05;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xa6 up to 0xaa;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf4 up to 0xf6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf0 up
      to 0xf2;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf4 up
      to 0xf8;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000161
      up to 0x1000171;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003303
      up to 0x4003501;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003303 up to 0x5003501;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002503
      up to 0x7002601;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000389
      up to 0xd000390;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000211
      up to 0x1000230;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb8
      up to 0xba;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x32 up
      to 0x33;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x42 up
      to 0x44;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000170 up to
      0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000181
      up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000181 up to 0x2b000461;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000170 up to 0x2c0001d1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000181 up to 0x2b000461;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x429 up to 0x42a;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x429 up to 0x42a;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x429
      up to 0x42a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf4 up
      to 0xf6;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf4
      up to 0xf6;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf4 up to 0xf6;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x57 up
      to 0x58;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x112 up
      to 0x113;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x410e up to 0x4112;
    - Update of 06-ba-02/0xc0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x410e up to 0x4112;
    - Update of 06-ba-03/0xc0 (RPL-U 2+8 Q0) microcode from revision 0x410e
      up to 0x4112.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-1
changelog:
  - Update Intel CPU microcode to microcode-20230808 release, addresses
    CVE-2022-40982, CVE-2022-41804, CVE-2023-23908 (#2213124, #2223992, #2230677,
      - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006f05 up
      to 0x2007006;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xaa up to 0xac;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf6 up to 0xf8;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf2 up
      to 0xf4;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xf8 up
      to 0xfa;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000171
      up to 0x1000181;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003501
      up to 0x4003604;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003501 up to 0x5003604;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002601
      up to 0x7002703;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000390
      up to 0xd0003a5;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xba
      up to 0xbc;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2a up
      to 0x2c;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c0001d1 up to
      0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000461
      up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b000461 up to 0x2b0004b1;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c0001d1 up to 0x2c000271;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b000461 up to 0x2b0004b1;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2c
      up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42a up to 0x42c;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42a up to 0x42c;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42a
      up to 0x42c;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf6 up
      to 0xf8;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf6
      up to 0xf8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf6 up to 0xf8;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x58 up
      to 0x59;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x113 up
      to 0x119;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2c up to 0x2e;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2c up to 0x2e;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2c up to 0x2e;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2c up
      to 0x2e;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4112 up to 0x4119 (old pf 0xc0);
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4112
      up to 0x4119 (old pf 0xc0);
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x10 up
      to 0x11 (old pf 0x1).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20230808-2
changelog:
  - Add support for the new, more correct, variant of dracut's default
    $fw_dir path in dracut_99microcode_ctl-fw_dir_override_module_init.sh.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20231009-1
changelog:
  - Update Intel CPU microcode to microcode-20231009 release, addresses
    CVE-2023-23583:
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xac up to 0xb4;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003a5
      up to 0xd0003b9;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000230
      up to 0x1000268;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xbc
      up to 0xc2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x2c up
      to 0x34;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x46 up
      to 0x4e;
    - Update of 06-8f-04/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000271 up to
      0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004b1
      up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000271 up to 0x2c000290;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000271 up to 0x2c000290;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004b1 up to 0x2b0004d0;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x2e
      up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x2e up to 0x32;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x42c up to 0x430;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x42c up to 0x430;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x42c
      up to 0x430;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x4 up
      to 0x5;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x59 up
      to 0x5d;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x119 up
      to 0x11d;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4119 up to 0x411c;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4119
      up to 0x411c;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x11 up
      to 0x12;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x2e up to 0x32;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x2e up to 0x32;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x2e up to 0x32;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x2e up
      to 0x32.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240531-1
changelog:
  - Update Intel CPU microcode to microcode-20240531 release, addresses
    CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
    CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
    CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
    RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
    - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
      revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
      revision 0x4121;
    - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) at revision 0x4121;
    - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
      0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
      intel-ucode/06-cf-01) at revision 0x21000230;
    - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
      intel-ucode/06-cf-02) at revision 0x21000230;
    - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
      0x21000230;
    - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
    - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
      0x2b0004d0;
    - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
      revision 0x2c000290;
    - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2c000290;
    - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-04) at revision 0x2b0004d0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xf8 up to 0xfa;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
      to 0xf8;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
      to 0xfc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
      up to 0x1000191;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
      up to 0x4003605;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003604 up to 0x5003605;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
      up to 0x7002802;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000014 up to 0xe000015;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
      to 0x3e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
      up to 0xd0003d1;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
      up to 0x1000290;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
      to 0x42;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
      to 0x24;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
      up to 0xc4;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
      to 0x50;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
      0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
      up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
      intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
      intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
      revision 0x2c000290 up to 0x2c000390;
    - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
      intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
      0x2c000290 up to 0x2c000390;
    - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
      0x2b0004d0 up to 0x2b0005c0;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
      to 0x19;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
      up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x32 up to 0x35;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
      up to 0x433;
    - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
      to 0x7;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
      up to 0x24000026;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
      to 0xfa;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
      up to 0xfa;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xf8 up to 0xfa;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
      to 0x5e;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
      to 0x123;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
      up to 0x4121;
    - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
      to 0x17;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x32 up to 0x35;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x32 up to 0x35;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
      to 0x35.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20240910-1
changelog:
  - Update Intel CPU microcode to microcode-20240910 release, addresses
  - Addresses CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
    CVE-2024-25939 (RHEL-58057):
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xfa up to 0xfc;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
      to 0xf6;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
      to 0xf8;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
      to 0x100;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003605 up to 0x5003707;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
      up to 0x7002904;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
      up to 0xd0003e7;
    - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
      up to 0x10002b0;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
      up to 0xc6;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
      to 0x52;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
      0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
      up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x35 up to 0x36;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
      up to 0x434;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
      to 0xfc;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
      up to 0xfc;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
      up to 0xfe;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xfa up to 0xfc;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
      to 0x62;
    - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
      up to 0x1f;
    - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
      to 0x129;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
      0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
      up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
      revision 0x4121 up to 0x4122;
    - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
      intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
    - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x35 up to 0x36;
    - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
    - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x35 up to 0x36;
    - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
      to 0x36;
    - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
      to 0x1a (old pf 0x11).


author: EL Errata <el-errata_ww@oracle.com> - 4:20240910-1.0.1
changelog:
  - don't bother calling dracut if virtualized [Orabug: 35710094]
  - ensure UEK also rebuilds initramfs [Orabug: 34280058]
  - add support for UEK7 kernels
  - enable early update for 06-4f-01
  - remove no longer appropriate caveats for 06-2d-07 and 06-55-04
  - enable early and late load on RHCK


author: Eric Sandeen <sandeen@redhat.com> - 6.10.1-1
changelog:
  - Update to latest upstream version
  - Fix C++ compilation errors in xfs_fs.h
  - Related: rhbz#2309693, rhbz#2308609


author: Darrick J. Wong <darrick.wong@oracle.com> 6.12.0-1.0.1
changelog:
  - Add mkfs configuration files for OL.
  - Add mkfs.xmem script.
  - Enable background online fsck services by default.  Users must set autofsck=1 on their filesystems.
  - Rebase atop latest upstream.


