# changelog

author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-315.196.5.el8uek]
changelog:
  - uek-rpm: add "bpf" to CONFIG_LSM (Alan Maguire) [Orabug: 35653191]
  - Revert "cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry" (Samasth Norway Ananda) [Orabug: 38613264]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-315.196.5.1.el8uek]
changelog:
  - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso)  [Orabug: 38744086]  {CVE-2025-38678} 
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Harshvardhan Jha)  [Orabug: 38744084]  
  - rtc: expose RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 38744082]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-315.196.5.1.el8uek]
changelog:
  - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso)  [Orabug: 38744086]  {CVE-2025-38678}
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Harshvardhan Jha)  [Orabug: 38744084]
  - rtc: expose RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 38744082]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-315.196.5.2.el8uek]
changelog:
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima)  [Orabug: 38786195]  {CVE-2025-40280} 
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang)  [Orabug: 38786194]  {CVE-2025-40271} 
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj)  [Orabug: 38786193]  {CVE-2025-40248}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-315.196.3.el8uek]
changelog:
  - KVM: VMX: Intercept reads to invalid and write-only x2APIC registers (Sean Christopherson) [Orabug: 38535186]
  - KVM: VMX: Always intercept accesses to unsupported "extended" x2APIC regs (Sean Christopherson) [Orabug: 38535186]
  - KVM: x86: Split out logic to generate "readable" APIC regs mask to helper (Sean Christopherson) [Orabug: 38535186]
  - KVM: x86: Mark x2APIC DFR reg as non-existent for x2APIC (Sean Christopherson) [Orabug: 38535186]
  - uek-rpm/ol9/config-mips64-emb: Enable NF_TABLES for MIPS64 (Vijay Kumar) [Orabug: 38578981]
  - LTS version: v5.15.196 (Vijayendra Suman)
  - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() (Marek Vasut) [Orabug: 38641258] {CVE-2024-43876}
  - net: rtnetlink: fix module reference count leak issue in rtnetlink_rcv_msg (Zhengchao Shao)
  - usb: gadget: f_acm: Refactor bind path to use __free() (Kuen-Han Tsai) [Orabug: 38601854] {CVE-2025-40094}
  - usb: gadget: f_ncm: Refactor bind path to use __free() (Kuen-Han Tsai) [Orabug: 38601837] {CVE-2025-40092}
  - usb: gadget: Introduce free_usb_request helper (Kuen-Han Tsai)
  - usb: gadget: Store endpoint pointer in usb_request (Kuen-Han Tsai)
  - arch_topology: Fix incorrect error check in topology_parse_cpu_capacity() (Kaushlendra Kumar)
  - xfs: always warn about deprecated mount options (Darrick J. Wong)
  - devcoredump: Fix circular locking dependency with devcd->mutex. (Maarten Lankhorst)
  - PCI: tegra194: Reset BARs when running in PCIe endpoint mode (Niklas Cassel)
  - PCI: rcar-host: Drop PMSR spinlock (Marek Vasut)
  - PCI: rcar: Finish transition to L1 state in rcar_pcie_config_access() (Marek Vasut)
  - PCI: tegra194: Handle errors in BPMP response (Vidya Sagar)
  - f2fs: fix wrong block mapping for multi-devices (Jaegeuk Kim)
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Chuck Lever) [Orabug: 38601818] {CVE-2025-40087}
  - vfs: Don't leak disconnected dentries on umount (Jan Kara) [Orabug: 38601923] {CVE-2025-40105}
  - drm/amdgpu: use atomic functions with memory barriers for vm fault info (Gui-Dong Han)
  - PCI: rcar-host: Convert struct rcar_msi mask_lock into raw spinlock (Marek Vasut)
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Muhammad Usama Anjum)
  - PCI: j721e: Fix programming sequence of "strap" settings (Siddharth Vadapalli)
  - PCI: j721e: Enable ACSPCIE Refclk if "ti,syscon-acspcie-proxy-ctrl" exists (Siddharth Vadapalli)
  - fuse: fix livelock in synchronous file put from fuseblk workers (Darrick J. Wong) [Orabug: 38730516] {CVE-2025-40220}
  - fuse: allocate ff->release_args only if release is needed (Amir Goldstein)
  - padata: Reset next CPU when reorder sequence wraps around (Xiao Liang)
  - iio: imu: inv_icm42600: Simplify pm_runtime setup (Sean Nyekjaer)
  - PM: runtime: Add new devm functions (Csókás Bence)
  - iio: imu: inv_icm42600: Avoid configuring if already pm_runtime suspended (Sean Nyekjaer)
  - iio: imu: inv_icm42600: use = { } instead of memset() (David Lechner)
  - NFSD: Fix last write offset handling in layoutcommit (Sergey Bashirov)
  - NFSD: Minor cleanup in layoutcommit processing (Sergey Bashirov)
  - NFSD: Rework encoding and decoding of nfsd4_deviceid (Sergey Bashirov)
  - xfs: fix log CRC mismatches between i386 and other architectures (Christoph Hellwig)
  - xfs: rename the old_crc variable in xlog_recover_process (Christoph Hellwig)
  - s390/cio: Update purge function to unregister the unused subchannels (Vineeth Vijayan)
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Rutland)
  - serial: 8250_exar: add support for Advantech 2 port card with Device ID 0x0018 (Florian Eckert)
  - most: usb: hdm_probe: Fix calling put_device() before device initialization (Victoria Votokina)
  - most: usb: Fix use-after-free in hdm_disconnect (Victoria Votokina)
  - mei: me: add wildcat lake P DID (Alexander Usyskin)
  - comedi: fix divide-by-zero in comedi_buf_munge() (Deepanshu Kartikey)
  - binder: remove "invalid inc weak" check (Alice Ryhl)
  - xhci: dbc: enable back DbC in resume if it was enabled before suspend (Mathias Nyman)
  - usb: raw-gadget: do not limit transfer length (Andrey Konovalov)
  - usb/core/quirks: Add Huawei ME906S to wakeup quirk (Tim Guttzeit)
  - USB: serial: option: add Telit FN920C04 ECM compositions (Li Qingwu)
  - USB: serial: option: add Quectel RG255C (Reinhard Speyerer)
  - USB: serial: option: add UNISOC UIS7720 (Renjun Wang)
  - net: ravb: Ensure memory write completes before ringing TX doorbell (Lad Prabhakar)
  - net: usb: rtl8150: Fix frame padding (Michał Pecio)
  - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [Orabug: 38730748] {CVE-2025-40231}
  - ocfs2: clear extent cache after moving/defragmenting extents (Deepanshu Kartikey) [Orabug: 38730546] {CVE-2025-40233}
  - MIPS: Malta: Fix keyboard resource preventing i8042 driver from registering (Maciej W. Rozycki)
  - Revert "cpuidle: menu: Avoid discarding useful information" (Rafael J. Wysocki)
  - net: bonding: fix possible peer notify event loss or dup issue (Tonghao Zhang)
  - sctp: avoid NULL dereference when chunk data buffer is missing (Alexey Simakov) [Orabug: 38730566] {CVE-2025-40240}
  - arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Huang, Ying)
  - dpaa2-eth: fix the pointer passed to PTR_ALIGN on Tx path (Ioana Ciornei)
  - net: enetc: correct the value of ENETC_RXB_TRUESIZE (Wei Fang)
  - rtnetlink: Allow deleting FDB entries in user namespace (Johannes Wiesboeck)
  - net: rtnetlink: add NLM_F_BULK support to rtnl_fdb_del (Nikolay Aleksandrov)
  - net: rtnetlink: add bulk delete support flag (Nikolay Aleksandrov)
  - net: netlink: add NLM_F_BULK delete request modifier (Nikolay Aleksandrov)
  - net: rtnetlink: use BIT for flag values (Nikolay Aleksandrov)
  - net: rtnetlink: add helper to extract msg type's kind (Nikolay Aleksandrov)
  - m68k: bitops: Fix find_*_bit() signatures (Geert Uytterhoeven)
  - hfsplus: return EIO when type of hidden directory mismatch in hfsplus_fill_super() (Yangtao Li)
  - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits() (Viacheslav Dubeyko)
  - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring)
  - hfsplus: fix KMSAN uninit-value issue in hfsplus_delete_cat() (Viacheslav Dubeyko)
  - hfs: validate record offset in hfsplus_bmap_alloc (Yang Chenzhi)
  - hfsplus: fix KMSAN uninit-value issue in __hfsplus_ext_cache_extent() (Viacheslav Dubeyko)
  - hfs: make proper initalization of struct hfs_find_data (Viacheslav Dubeyko)
  - hfs: clear offset and space out of valid records in b-tree node (Viacheslav Dubeyko)
  - nios2: ensure that memblock.current_limit is set when setting pfn limits (Simon Schuster)
  - exec: Fix incorrect type for ret (Xichao Zhao)
  - PCI/sysfs: Ensure devices are powered for config reads (part 2) (Brian Norris)
  - hfsplus: fix slab-out-of-bounds read in hfsplus_strcasecmp() (Viacheslav Dubeyko)
  - ALSA: usb-audio: Fix NULL pointer deference in try_to_register_card (Jiaming Zhang) [Orabug: 38597093] {CVE-2025-40085}
  - ALSA: firewire: amdtp-stream: fix enum kernel-doc warnings (Randy Dunlap)
  - sched/fair: Fix pelt lost idle time detection (Vincent Guittot)
  - sched/balancing: Rename newidle_balance() => sched_balance_newidle() (Ingo Molnar)
  - drm/amd/powerplay: Fix CIK shutdown temperature (Timur Kristóf)
  - net: usb: lan78xx: fix use of improperly initialized dev->chipid in lan78xx_reset (I Viswanath)
  - net: usb: lan78xx: Add error handling to lan78xx_init_mac_address (Oleksij Rempel)
  - net: usb: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski)
  - tls: don't rely on tx_work during send() (Sabrina Dubroca)
  - tls: always set record_type in tls_process_cmsg (Sabrina Dubroca)
  - tls: wait for async encrypt in case of error during latter iterations of sendmsg (Sabrina Dubroca)
  - net: tls: wait for async completion on last message (Sascha Hauer)
  - tg3: prevent use of uninitialized remote_adv and local_adv variables (Alexey Simakov)
  - tcp: fix tcp_tso_should_defer() vs large RTT (Eric Dumazet)
  - amd-xgbe: Avoid spurious link down messages during interface toggle (Raju Rangoju)
  - net/ip6_tunnel: Prevent perpetual tunnel growth (Dmitry Safonov) [Orabug: 38649259] {CVE-2025-40173}
  - r8169: fix packet truncation after S4 resume on RTL8168H/RTL8111H (Linmao Li)
  - doc: fix seg6_flowlabel path (Nicolas Dichtel)
  - net: dlink: handle dma_map_single() failure properly (Moon Yeounsu)
  - can: m_can: m_can_plat_remove(): add missing pm_runtime_disable() (Marc Kleine-Budde)
  - dax: skip read lock assertion for read-only filesystems (Yuezhang Mo)
  - HID: multitouch: fix sticky fingers (Benjamin Tissoires)
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Rafael J. Wysocki)
  - crypto: rockchip - Fix dma_unmap_sg() nents value (Thomas Fourier)
  - drm/exynos: exynos7_drm_decon: remove ctx->suspended (Kaustabh Chakraborty)
  - drm/exynos: exynos7_drm_decon: properly clear channels during bind (Kaustabh Chakraborty)
  - drm/exynos: exynos7_drm_decon: fix uninitialized crtc reference in functions (Kaustabh Chakraborty)
  - blk-crypto: fix missing blktrace bio split events (Yu Kuai)
  - media: lirc: Fix error handling in lirc_register() (Ma Ke)
  - media: rc: Directly use ida_free() (Keliu)
  - media: s5p-mfc: remove an unused/uninitialized variable (Arnd Bergmann)
  - btrfs: fix clearing of BTRFS_FS_RELOC_RUNNING if relocation already running (Filipe Manana)
  - ext4: detect invalid INLINE_DATA + EXTENTS flag combination (Deepanshu Kartikey) [Orabug: 38649222] {CVE-2025-40167}
  - jbd2: ensure that all ongoing I/O complete before freeing blocks (Zhang Yi)
  - r8152: add error handling in rtl8152_driver_init (Yi Cong)
  - LTS version: v5.15.195 (Vijayendra Suman)
  - selftests: mptcp: join: validate C-flag + def limit (Matthieu Baerts)
  - mptcp: pm: in-kernel: usable client side with C-flag (Matthieu Baerts)
  - media: pci: ivtv: Add check for DMA map result (Mikhail Kobuk) [Orabug: 38641260] {CVE-2024-43877}
  - xen/events: Update virq_to_irq on migration (Jason Andryuk)
  - media: pci: ivtv: Add missing check after DMA map (Thomas Fourier)
  - media: pci/ivtv: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
  - arm64: mte: Do not flag the zero page as PG_mte_tagged (Catalin Marinas)
  - media: cx18: Add missing check after DMA map (Thomas Fourier)
  - media: switch from 'pci_' to 'dma_' API (Christophe Jaillet)
  - writeback: Avoid excessively long inode switching times (Jan Kara)
  - writeback: Avoid softlockup when switching many inodes (Jan Kara)
  - cramfs: Verify inode mode when loading from disk (Tetsuo Handa)
  - fs: Add 'initramfs_options' to set initramfs mount options (Lichen Liu)
  - pid: Add a judgment for ns null in pid_nr_ns (Gaoxiang17) [Orabug: 38649275] {CVE-2025-40178}
  - minixfs: Verify inode mode when loading from disk (Tetsuo Handa)
  - minmax.h: remove some #defines that are only expanded once (David Laight)
  - minmax.h: simplify the variants of clamp() (David Laight)
  - minmax.h: move all the clamp() definitions after the min/max() ones (David Laight)
  - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() (David Laight)
  - minmax.h: reduce the #define expansion of min(), max() and clamp() (David Laight)
  - minmax.h: update some comments (David Laight)
  - minmax.h: add whitespace around operators and after commas (David Laight)
  - minmax: fix up min3() and max3() too (Linus Torvalds)
  - minmax: improve macro expansion and type checking (Linus Torvalds)
  - minmax: simplify min()/max()/clamp() implementation (Linus Torvalds)
  - minmax: don't use max() in situations that want a C constant expression (Linus Torvalds)
  - minmax: make generic MIN() and MAX() macros available everywhere (Linus Torvalds)
  - minmax: simplify and clarify min_t()/max_t() implementation (Linus Torvalds)
  - minmax: add a few more MIN_T/MAX_T users (Linus Torvalds)
  - minmax: avoid overly complicated constant expressions in VM code (Linus Torvalds)
  - minmax: fix indentation of __cmp_once() and __clamp_once() (David Laight)
  - minmax: deduplicate __unconst_integer_typeof() (Andy Shevchenko)
  - minmax: Introduce {min,max}_array() (Herve Codina)
  - arm64: dts: qcom: sdm845: Fix slimbam num-channels/ees (Stephan Gerhold)
  - btrfs: fix the incorrect max_bytes value for find_lock_delalloc_range() (Qu Wenruo)
  - fscontext: do not consume log entries when returning -EMSGSIZE (Aleksa Sarai)
  - dm: fix NULL pointer dereference in __dm_suspend() (Zheng Qixing) [Orabug: 38649056] {CVE-2025-40134}
  - tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (Yuan Chen) [Orabug: 38592032] {CVE-2025-40042}
  - ksmbd: fix error code overwriting in smb2_get_info_filesystem() (Matvey Kovalev)
  - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (Oleksij Rempel) [Orabug: 38649002] {CVE-2025-40120}
  - mfd: intel_soc_pmic_chtdc_ti: Set use_single_read regmap_config flag (Hans de Goede)
  - mfd: intel_soc_pmic_chtdc_ti: Drop unneeded assignment for cache_type (Andy Shevchenko)
  - mfd: intel_soc_pmic_chtdc_ti: Fix invalid regmap-config max_register value (Hans de Goede)
  - media: mc: Clear minor number before put device (Edward Adam Davis) [Orabug: 38649397] {CVE-2025-40197}
  - Squashfs: reject negative file sizes in squashfs_read_inode() (Phillip Lougher) [Orabug: 38649424] {CVE-2025-40200}
  - Squashfs: add additional inode sanity checking (Phillip Lougher)
  - ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data() (Ma Ke)
  - ASoC: codecs: wcd934x: Simplify with dev_err_probe (Krzysztof Kozlowski)
  - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Sean Christopherson) [Orabug: 38591958] {CVE-2025-40026}
  - lib/crypto/curve25519-hacl64: Disable KASAN with clang-17 and older (Nathan Chancellor)
  - ext4: free orphan info with kvfree (Jan Kara)
  - ext4: guard against EA inode refcount underflow in xattr update (Ahmet Eray Karadag) [Orabug: 38649329] {CVE-2025-40190}
  - ext4: correctly handle queries for metadata mappings (Ojaswin Mujoo)
  - ext4: increase i_disksize to offset + len in ext4_update_disksize_before_punch() (Yongjian Sun)
  - ext4: verify orphan file size is not too big (Jan Kara) [Orabug: 38649284] {CVE-2025-40179}
  - nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia)
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Thorsten Blum)
  - mm/page_alloc: only set ALLOC_HIGHATOMIC for __GPF_HIGH allocations (Thadeu Lima de Souza Cascardo)
  - x86/umip: Fix decoding of register forms of 0F 01 (SGDT and SIDT aliases) (Sean Christopherson)
  - x86/umip: Check that the instruction opcode is at least two bytes (Sean Christopherson)
  - spi: cadence-quadspi: Flush posted register writes before DAC access (Pratyush Yadav)
  - spi: cadence-quadspi: Flush posted register writes before INDAC access (Pratyush Yadav)
  - PCI: tegra194: Fix broken tegra_pcie_ep_raise_msi_irq() (Niklas Cassel)
  - PCI: keystone: Use devm_request_irq() to free "ks-pcie-error-irq" on exit (Siddharth Vadapalli)
  - PCI/AER: Support errors introduced by PCIe r6.0 (Lukas Wunner)
  - PCI/AER: Fix missing uevent on recovery when a reset is requested (Niklas Schnelle)
  - PCI/ERR: Fix uevent on failure to recover (Lukas Wunner)
  - PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV (Niklas Schnelle) [Orabug: 38730511] {CVE-2025-40219}
  - PCI/sysfs: Ensure devices are powered for config reads (Brian Norris)
  - rseq/selftests: Use weak symbol reference, not definition, to link with glibc (Sean Christopherson)
  - rtc: interface: Fix long-standing race when setting alarm (Esben Haabendal)
  - rtc: interface: Ensure alarm irq is enabled when UIE is enabled (Esben Haabendal)
  - memory: samsung: exynos-srom: Fix of_iomap leak in exynos_srom_probe (Zhen Ni)
  - mmc: core: SPI mode remove cmd7 (Rex Chen)
  - mtd: rawnand: fsmc: Default to autodetect buswidth (Linus Walleij)
  - sparc: fix error handling in scan_one_device() (Ma Ke)
  - sparc64: fix hugetlb for sun4u (Anthony Yznaga)
  - sctp: Fix MAC comparison to be constant-time (Eric Biggers) [Orabug: 38649450] {CVE-2025-40204}
  - scsi: hpsa: Fix potential memory leak in hpsa_big_passthru_ioctl() (Thorsten Blum)
  - pwm: berlin: Fix wrong register in suspend/resume (Jisheng Zhang)
  - powerpc/pseries/msi: Fix potential underflow and leak issue (Nam Cao)
  - powerpc/powernv/pci: Fix underflow and leak issue (Nam Cao)
  - nvme-pci: Add TUXEDO IBS Gen8 to Samsung sleep quirk (Georg Gottleuber)
  - parisc: don't reference obsolete termio struct for TC* constants (Sam James)
  - openat2: don't trigger automounts with RESOLVE_NO_XDEV (Askar Safin)
  - lib/genalloc: fix device leak in of_gen_pool_get() (Johan Hovold)
  - KEYS: trusted_tpm1: Compare HMAC values in constant time (Eric Biggers)
  - iommu/vt-d: PRS isn't usable if PDS isn't supported (Lu Baolu)
  - iio: imu: inv_icm42600: Drop redundant pm_runtime reinitialization in resume (Sean Nyekjaer)
  - init: handle bootloader identifier in kernel parameters (Huacai Chen)
  - iio: frequency: adf4350: Fix prescaler usage. (Michael Hennerich)
  - iio: dac: ad5421: use int type to store negative error codes (Rong Qianfeng)
  - iio: dac: ad5360: use int type to store negative error codes (Rong Qianfeng)
  - fs/ntfs3: Fix a resource leak bug in wnd_extend() (Haoxiang Li)
  - crypto: atmel - Fix dma_unmap_sg() direction (Thomas Fourier)
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (Rafael J. Wysocki) [Orabug: 38649365] {CVE-2025-40194}
  - copy_sighand: Handle architectures where sizeof(unsigned long) < sizeof(u64) (Simon Schuster)
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Adam Xue)
  - btrfs: avoid potential out-of-bounds in btrfs_encode_fh() (Anderson Nascimento) [Orabug: 38649461] {CVE-2025-40205}
  - drm/nouveau: fix bad ret code in nouveau_bo_move_prep (Shuhao Fu)
  - media: i2c: mt9v111: fix incorrect type for ret (Rong Qianfeng)
  - firmware: meson_sm: fix device leak at probe (Johan Hovold)
  - xen/manage: Fix suspend error path (Lukas Wunner)
  - xen/events: Cleanup find_virq() return codes (Jason Andryuk)
  - ARM: OMAP2+: pm33xx-core: ix device node reference leaks in amx3_idle_init (Miaoqian Lin)
  - arm64: dts: qcom: msm8916: Add missing MDSS reset (Stephan Gerhold)
  - ACPI: debug: fix signedness issues in read/write helpers (Amir Mohammad Jahangirzad)
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Daniel Tang)
  - bpf: Avoid RCU context warning when unpinning htab with internal structs (Kafai Wan)
  - gpio: wcd934x: mark the GPIO controller as sleeping (Bartosz Golaszewski)
  - gpio: wcd934x: Remove duplicate assignment of of_gpio_n_cells (Andy Shevchenko)
  - tpm_tis: Fix incorrect arguments in tpm_tis_probe_irq_single (Gunnar Kudrjavets)
  - crypto: essiv - Check ssize for decryption and in-place encryption (Herbert Xu) [Orabug: 38581454,38705933] {CVE-2025-40019}
  - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() (Eric Woudstra)
  - drm/amd/display: Properly disable scaling on DCE6 (Timur Kristóf)
  - drm/amd/display: Properly clear SCL_*_FILTER_CONTROL on DCE6 (Timur Kristóf)
  - drm/amd/display: Add missing DCE6 SCL_HORZ_FILTER_INIT* SRIs (Timur Kristóf)
  - drm/amdgpu: Add additional DCE6 SCL registers (Alex Deucher)
  - bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Daniel Borkmann) [Orabug: 38649299] {CVE-2025-40183}
  - mailbox: zynqmp-ipi: Remove dev.parent check in zynqmp_ipi_free_mboxes (Harini T)
  - mailbox: zynqmp-ipi: Remove redundant mbox_controller_unregister() call (Harini T)
  - tools build: Align warning options with perf (Leo Yan)
  - net: fsl_pq_mdio: Fix device node reference leak in fsl_pq_mdio_probe (Erick Karanja)
  - tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Kuniyuki Iwashima) [Orabug: 38649578] {CVE-2025-40186}
  - net/sctp: fix a null dereference in sctp_disposition sctp_sf_do_5_1D_ce() (Alexandr Sapozhnikov) [Orabug: 38649311] {CVE-2025-40187}
  - drm/vmwgfx: Fix Use-after-free in validation (Ian Forbes) [Orabug: 38643545] {CVE-2025-40111}
  - drm/vmwgfx: Copy DRM hash-table code into driver (Thomas Zimmermann)
  - s390/cio: unregister the subchannel while purging (Vineeth Vijayan)
  - net/mlx4: prevent potential use after free in mlx4_en_do_uc_filter() (Dan Carpenter)
  - scsi: mvsas: Fix use-after-free bugs in mvs_work_queue (Duoming Zhou) [Orabug: 38557653] {CVE-2025-40001}
  - scsi: mvsas: Use sas_task_find_rq() for tagging (John Garry)
  - scsi: mvsas: Delete mvs_tag_init() (John Garry)
  - scsi: libsas: Add sas_task_find_rq() (John Garry)
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Aaron Kling)
  - clk: nxp: Fix pll0 rate check condition in LPC18xx CGU driver (Alok Tiwari)
  - clk: nxp: lpc18xx-cgu: convert from round_rate() to determine_rate() (Brian Masney)
  - perf session: Fix handling when buffer exceeds 2 GiB (Leo Yan)
  - rtc: x1205: Fix Xicor X1205 vendor prefix (Rob Herring)
  - perf util: Fix compression checks returning -1 as bool (Yunseong Kim)
  - clk: at91: peripheral: fix return value (Brian Masney)
  - libperf event: Ensure tracing data is multiple of 8 sized (Ian Rogers)
  - perf evsel: Avoid container_of on a NULL leader (Ian Rogers)
  - iio: frequency: adf4350: Fix ADF4350_REG3_12BIT_CLKDIV_MODE (Michael Hennerich)
  - clocksource/drivers/clps711x: Fix resource leaks in error paths (Zhen Ni)
  - fs: always return zero on success from replace_fd() (Thomas Weißschuh)
  - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call (Miaoqian Lin)
  - bus: fsl-mc: Check return value of platform_get_resource() (Salah Triki)
  - pinctrl: check the return value of pinmux_ops::get_function_name() (Bartosz Golaszewski) [Orabug: 38591980] {CVE-2025-40030}
  - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (Zhen Ni) [Orabug: 38592000] {CVE-2025-40035}
  - Input: atmel_mxt_ts - allow reset GPIO to sleep (Marek Vasut)
  - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() (Guangshuo Li)
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Yang Shi) [Orabug: 38649149] {CVE-2025-40153}
  - ext4: fix checks for orphan inodes (Jan Kara)
  - mfd: vexpress-sysreg: Check the return value of devm_gpiochip_add_data() (Bartosz Golaszewski)
  - net: nfc: nci: Add parameter validation for packet data (Deepak Sharma)
  - fs: udf: fix OOB read in lengthAllocDescs handling (Larshin Sergey) [Orabug: 38592047] {CVE-2025-40044}
  - uio_hv_generic: Let userspace take care of interrupt mask (Naman Jain) [Orabug: 38592066] {CVE-2025-40048}
  - Squashfs: fix uninit-value in squashfs_get_parent (Phillip Lougher) [Orabug: 38592076] {CVE-2025-40049}
  - net: dlink: handle copy_thresh allocation failure (Moon Yeounsu) [Orabug: 38592097] {CVE-2025-40053}
  - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not configurable (Kohei Enju)
  - nfp: fix RSS hash key size when RSS is not supported (Kohei Enju)
  - drivers/base/node: fix double free in register_one_node() (Donet Tom)
  - ocfs2: fix double free in user_cluster_connect() (Dan Carpenter) [Orabug: 38592109] {CVE-2025-40055}
  - hwrng: ks-sa - fix division by zero in ks_sa_rng_init (Nishanth Menon)
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (Luiz Augusto von Dentz)
  - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast (I Viswanath) [Orabug: 38649095] {CVE-2025-40140}
  - RDMA/siw: Always report immediate post SQ errors (Bernard Metzler)
  - usb: vhci-hcd: Prevent suspending virtually attached devices (Cristian Ciocaltea)
  - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info() (Ranjan Kumar) [Orabug: 38648980] {CVE-2025-40115}
  - ipvs: Defer ip_vs_ftp unregister during netns cleanup (Slavin Liu) [Orabug: 38581444] {CVE-2025-40018}
  - NFSv4.1: fix backchannel max_resp_sz verification check (Anthony Iliopoulos)
  - coresight: trbe: Return NULL pointer for allocation failures (Leo Yan)
  - remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice (Stephan Gerhold)
  - sparc: fix accurate exception reporting in copy_{from,to}_user for M7 (Michael Karcher)
  - sparc: fix accurate exception reporting in copy_to_user for Niagara 4 (Michael Karcher)
  - sparc: fix accurate exception reporting in copy_{from_to}_user for Niagara (Michael Karcher)
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC III (Michael Karcher)
  - sparc: fix accurate exception reporting in copy_{from_to}_user for UltraSPARC (Michael Karcher)
  - wifi: ath10k: avoid unnecessary wait for service ready message (Baochen Qiang)
  - Documentation: trace: historgram-design: Separate sched_waking histogram section heading and the following diagram (Bagas Sanjaya)
  - IB/sa: Fix sa_local_svc_timeout_ms read race (Vlad Dumitrescu)
  - RDMA/core: Resolve MAC of next-hop device without ARP support (Parav Pandit)
  - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running" (Michał Pecio)
  - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES() (Rong Qianfeng)
  - scsi: qla2xxx: edif: Fix incorrect sign of error code (Rong Qianfeng)
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Colin Ian King)
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Abdun Nihaal)
  - RDMA/cm: Rate limit destroy CM ID timeout error message (Håkon Bugge)
  - drivers/base/node: handle error properly in register_one_node() (Donet Tom)
  - watchdog: mpc8xxx_wdt: Reload the watchdog timer when enabling the watchdog (Christophe Leroy)
  - netfilter: ipset: Remove unused htable_bits in macro ahash_region (Zhen Ni)
  - iio: consumers: Fix offset handling in iio_convert_raw_to_processed() (Hans de Goede)
  - fs: ntfs3: Fix integer overflow in run_unpack() (Vitaly Grigoryev)
  - ASoC: Intel: bytcr_rt5651: Fix invalid quirk input mapping (Takashi Iwai) [Orabug: 38649006] {CVE-2025-40121}
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (Takashi Iwai) [Orabug: 38649156] {CVE-2025-40154}
  - ASoC: Intel: bytcht_es8316: Fix invalid quirk input mapping (Takashi Iwai)
  - pps: fix warning in pps_register_cdev when register device fail (Wang Liang) [Orabug: 38592169] {CVE-2025-40070}
  - misc: genwqe: Fix incorrect cmd field being reported in error (Colin Ian King)
  - usb: gadget: configfs: Correctly set use_os_string at bind (William Wu)
  - usb: phy: twl6030: Fix incorrect type for ret (Xichao Zhao)
  - drm/amdkfd: Fix error code sign for EINVAL in svm_ioctl() (Rong Qianfeng)
  - tcp: fix __tcp_close() to only send RST when required (Eric Dumazet)
  - PCI: tegra: Fix devm_kcalloc() argument order for port->phys allocation (Alok Tiwari)
  - wifi: mwifiex: send world regulatory domain to driver (Stefan Kerkmann)
  - drm/amdgpu: Power up UVD 3 for FW validation (v2) (Timur Kristóf)
  - ALSA: lx_core: use int type to store negative error codes (Rong Qianfeng)
  - media: rj54n1cb0c: Fix memleak in rj54n1_probe() (Zhang Shurong)
  - scsi: myrs: Fix dma_alloc_coherent() error check (Thomas Fourier)
  - scsi: pm80xx: Fix array-index-out-of-of-bounds on rmmod (Niklas Cassel) [Orabug: 38649566] {CVE-2025-40118}
  - usb: host: max3421-hcd: Fix error pointer dereference in probe cleanup (Dan Carpenter)
  - drm/radeon/r600_cs: clean up of dead code in r600_cs (Brahmajit Das)
  - i2c: designware: Add disabling clocks when probe fails (Kunihiko Hayashi)
  - i2c: mediatek: fix potential incorrect use of I2C_MASTER_WRRD (Leilk Liu)
  - thermal/drivers/qcom/lmh: Add missing IRQ includes (Dmitry Baryshkov)
  - thermal/drivers/qcom: Make LMH select QCOM_SCM (Dmitry Baryshkov)
  - tools/nolibc: make time_t robust if __kernel_old_time_t is missing in host headers (Zhouyi Zhou)
  - smp: Fix up and expand the smp_call_function_many() kerneldoc (Rafael J. Wysocki)
  - bpf: Explicitly check accesses to bpf_sock_addr (Paul Chaignon) [Orabug: 38592204] {CVE-2025-40078}
  - selftests: watchdog: skip ping loop if WDIOF_KEEPALIVEPING not supported (Akhilesh Patil)
  - i3c: master: svc: Recycle unused IBI slot (Stanley Chu)
  - nvmet-fc: move lsop put work to nvmet_fc_ls_req_op (Daniel Wagner) [Orabug: 38649248] {CVE-2025-40171}
  - pwm: tiehrpwm: Fix corner case in clock divisor calculation (Uwe Kleine-König)
  - arm64: dts: mediatek: mt8516-pumpkin: Fix machine compatible (AngeloGioacchino Del Regno)
  - firmware: firmware: meson-sm: fix compile-test default (Johan Hovold)
  - pinctrl: renesas: Use int type to store negative error codes (Rong Qianfeng)
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path (Rafael J. Wysocki)
  - block: use int to store blk_stack_limits() return value (Rong Qianfeng)
  - regulator: scmi: Use int type to store negative error codes (Rong Qianfeng)
  - ARM: at91: pm: fix MCKx restore routine (Nicolas Ferre)
  - blk-mq: check kobject state_in_sysfs before deleting in blk_mq_unregister_hctx (Li Nan) [Orabug: 38649025] {CVE-2025-40125}
  - pinctrl: meson-gxl: add missing i2c_d pinmux (Da Xue)
  - soc: qcom: rpmh-rsc: Unconditionally clear _TRIGGER bit for TCS (Sneh Mankad)
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Huisong Li)
  - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() (Florian Fainelli)
  - libbpf: Fix reuse of DEVMAP (Yureka Lilian)
  - regmap: Remove superfluous check for !config in __regmap_init() (Geert Uytterhoeven)
  - x86/vdso: Fix output operand size of RDPID (Uros Bizjak)
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Leo Yan) [Orabug: 38592220] {CVE-2025-40081}
  - coresight: trbe: Prevent overflow in PERF_IDX2OFF() (Leo Yan)
  - selftests: arm64: Check fread return value in exec_target (Bala-Vignesh-Reddy)
  - filelock: add FL_RECLAIM to show_fl_flags() macro (Jeff Layton)
  - net/9p: fix double req put in p9_fd_cancelled (Nalivayko Sergey) [Orabug: 38591964] {CVE-2025-40027}
  - minmax: add in_range() macro (Matthew Wilcox)
  - crypto: rng - Ensure set_ent is always present (Herbert Xu) [Orabug: 38643530] {CVE-2025-40109}
  - platform/x86: int3472: Check for adev == NULL (Hans de Goede)
  - driver core/PM: Set power.no_callbacks along with power.no_pm (Rafael J. Wysocki)
  - staging: axis-fifo: flush RX FIFO on read errors (Ovidiu Panait)
  - staging: axis-fifo: fix maximum TX packet length check (Ovidiu Panait)
  - serial: stm32: allow selecting console when the driver is module (Raphaël Gallais-Pou)
  - hid: fix I2C read buffer overflow in raw_event() for mcp2221 (Arnaud Lecomte)
  - perf subcmd: avoid crash in exclude_cmds when excludes is empty (Hupu)
  - dm-integrity: limit MAX_TAG_SIZE to 255 (Mikulas Patocka)
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Bitterblue Smith)
  - USB: serial: option: add SIMCom 8230C compositions (Xiaowei Li)
  - media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe (Duoming Zhou)
  - media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou) [Orabug: 38548036] {CVE-2025-39994}
  - media: tunner: xc5000: Refactor firmware load (Ricardo Ribalda)
  - udp: Fix memory accounting leak. (Kuniyuki Iwashima) [Orabug: 37844324] {CVE-2025-22058}
  - KVM: arm64: Fix softirq masking in FPSIMD register saving sequence (Will Deacon) [Orabug: 38513233]
  - media: rc: fix races with imon_disconnect() (Larshin Sergey) [Orabug: 38548026] {CVE-2025-39993}
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou) [Orabug: 38548050] {CVE-2025-39996}
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran) [Orabug: 38548058] {CVE-2025-39998}
  - LTS version: v5.15.194 (Vijayendra Suman)
  - drm/i915/backlight: Return immediately when scale() finds invalid parameters (Guenter Roeck)
  - i40e: add validation for ring_len param (Lukasz Czapnik) [Orabug: 38547951,38603025,38607608] {CVE-2025-39973}
  - i40e: increase max descriptors for XL710 (Justin Bronder)
  - i40e: fix idx validation in config queues msg (Lukasz Czapnik) [Orabug: 38547937] {CVE-2025-39971}
  - i40e: fix validation of VF state in get resources (Lukasz Czapnik) [Orabug: 38547928] {CVE-2025-39969}
  - mm/hugetlb: fix folio is still mapped when deleted (Tu Jinjiang) [Orabug: 38560480] {CVE-2025-40006}
  - mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize() (David Hildenbrand)
  - fbcon: Fix OOB access in font allocation (Thomas Zimmermann)
  - fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda) [Orabug: 38547912] {CVE-2025-39967}
  - tracing: dynevent: Add a missing lockdown check on dynevent (Masami Hiramatsu) [Orabug: 38581470] {CVE-2025-40021}
  - i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)
  - i40e: add max boundary check for VF filters (Lukasz Czapnik) [Orabug: 38547922] {CVE-2025-39968}
  - i40e: fix input validation logic for action_meta (Lukasz Czapnik) [Orabug: 38547932] {CVE-2025-39970}
  - i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik) [Orabug: 38547945] {CVE-2025-39972}
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers) [Orabug: 38641289] {CVE-2025-40022}
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu) [Orabug: 38537468,38575792,38575804] {CVE-2025-39964}
  - drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita) [Orabug: 38560495] {CVE-2025-40011}
  - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port (Vladimir Oltean)
  - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() (Vladimir Oltean)
  - net: dsa: lantiq_gswip: do also enable or disable cpu port (Martin Schiller)
  - selftests: fib_nexthops: Fix creation of non-FDB nexthops (Ido Schimmel)
  - nexthop: Forbid FDB status change while nexthop is in a group (Ido Schimmel) [Orabug: 38547971] {CVE-2025-39980}
  - bnxt_en: correct offset handling for IPv6 destination address (Alok Tiwari)
  - ethernet: rvu-af: Remove slash from the driver name (Petr Malat)
  - can: peak_usb: fix shift-out-of-bounds issue (Stephane Grosjean) [Orabug: 38581461] {CVE-2025-40020}
  - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
  - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
  - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
  - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)
  - can: etas_es58x: sort the includes by alphabetic order (Vincent Mailhol)
  - can: etas_es58x: advertise timestamping capabilities and add ioctl support (Vincent Mailhol)
  - can: dev: add generic function can_eth_ioctl_hwts() (Vincent Mailhol)
  - can: dev: add generic function can_ethtool_op_get_ts_info_hwts() (Vincent Mailhol)
  - can: bittiming: replace CAN units with the generic ones from linux/units.h (Vincent Mailhol)
  - can: bittiming: allow TDC{V,O} to be zero and add can_tdc_const::tdc{v,o,f}_min (Vincent Mailhol)
  - bpf: Reject bpf_timer for PREEMPT_RT (Leon Hwang)
  - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)
  - arm64: dts: imx8mp: Correct thermal sensor index (Peng Fan)
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)
  - usb: core: Add 0x prefix to quirks debug output (Jiayi Li)
  - ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)
  - ALSA: usb-audio: Convert comma to semicolon (Chen Ni)
  - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)
  - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)
  - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)
  - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)
  - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks (Cristian Ciocaltea)
  - ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)
  - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Hans de Goede)
  - net: rfkill: gpio: add DT support (Philipp Zabel)
  - mptcp: propagate shutdown to subflows when possible (Matthieu Baerts)
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (Namjae Jeon)
  - mptcp: set remote_deny_join_id0 on SYN recv (Matthieu Baerts)
  - phy: ti: omap-usb2: fix device leak at unbind (Johan Hovold)
  - phy: Use device_get_match_data() (Rob Herring)
  - phy: broadcom: ns-usb3: fix Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)
  - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels (Alan Stern)
  - usb: gadget: dummy_hcd: remove usage of list iterator past the loop body (Jakob Koschel)
  - xhci: dbc: Fix full DbC transfer ring after several reconnects (Mathias Nyman)
  - xhci: dbc: decouple endpoint allocation from initialization (Mathias Nyman)
  - serial: sc16is7xx: fix bug in flow control levels init (Hugo Villeneuve)
  - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path (Qi Xi)
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ (Loic Poulain)
  - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message (Colin Ian King)
  - ASoC: wm8974: Correct PLL rate rounding (Charles Keepax)
  - ASoC: wm8940: Correct typo in control name (Charles Keepax)
  - mmc: mvsdio: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - btrfs: tree-checker: fix the incorrect inode ref size check (Qu Wenruo)
  - power: supply: bq27xxx: restrict no-battery detection to bq27000 (H. Nikolaus Schaller)
  - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery (H. Nikolaus Schaller)
  - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* (Nathan Chancellor)
  - cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [Orabug: 38503848] {CVE-2025-39945}
  - net: liquidio: fix overflow in octeon_init_instr_queue() (Alexey Nepomnyashih)
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima) [Orabug: 38526387] {CVE-2025-39955}
  - i40e: remove redundant memory barrier when cleaning Tx descs (Maciej Fijalkowski)
  - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure (Moon Yeounsu)
  - qed: Don't collect too many protection override GRC elements (Jamie Bainbridge) [Orabug: 38503869] {CVE-2025-39949}
  - dpaa2-switch: fix buffer pool seeding for control traffic (Ioana Ciornei)
  - um: virtio_uml: Fix use-after-free after put_device in probe (Miaoqian Lin)
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Chen Ridong) [Orabug: 38503891] {CVE-2025-39953}
  - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch (Geert Uytterhoeven)
  - wifi: mac80211: fix incorrect type for ret (Liao Yuanhong)
  - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported (Takashi Sakamoto)
  - net: hsr: hsr_slave: Fix the promiscuous mode in offload mode (Ravi Gunasekaran)
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [Orabug: 38461847] {CVE-2025-39883}
  - drm/i915/power: fix size for for_each_set_bit() in abox iteration (Jani Nikula)
  - phy: ti-pipe3: fix device leak at unbind (Johan Hovold)
  - phy: tegra: xusb: fix device and OF node leak at probe (Johan Hovold)
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Stephan Gerhold) [Orabug: 38494821] {CVE-2025-39923}
  - regulator: sy7636a: fix lifecycle of power good gpio (Andreas Kemnade)
  - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Anders Roxell)
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Hangbin Liu)
  - hsr: use rtnl lock when iterating over ports (Hangbin Liu)
  - net: hsr: Add VLAN CTAG filter support (Murali Karicheri)
  - net: hsr: Add support for MC filtering at the slave device (Murali Karicheri)
  - net: hsr: Disable promiscuous mode in offload mode (Ravi Gunasekaran)
  - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB (Anssi Hannula)
  - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails (Tetsuo Handa)
  - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed (Tetsuo Handa)
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [Orabug: 38494786] {CVE-2025-39911}
  - i40e: Use irq_update_affinity_hint() (Nitesh Narayan Lal)
  - igb: fix link test skipping when interface is admin down (Kohei Enju)
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart)
  - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (Stefan Wahren)
  - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Fabio Porcedda)
  - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks (Krzysztof Kozlowski)
  - tty: hvc_console: Call hvc_kick in hvc_write unconditionally (Fabian Vogt)
  - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
  - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer (Christophe Kerello)
  - mtd: rawnand: stm32_fmc2: Fix dma_map_sg error check (Jack Wang)
  - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing (Alexander Sverdlin)
  - mtd: nand: raw: atmel: Fix comment in timings preparation (Alexander Dahl)
  - mm/khugepaged: fix the address passed to notifier on testing young (Wei Yang)
  - libceph: fix invalid accesses to ceph_connection_v1_info (Ilya Dryomov) [Orabug: 38461836] {CVE-2025-39880}
  - fuse: prevent overflow in copy_file_range return value (Miklos Szeredi)
  - fuse: check if copy_file_range() returns larger than requested size (Miklos Szeredi)
  - mtd: rawnand: stm32_fmc2: fix ECC overwrite (Christophe Kerello)
  - ocfs2: fix recursive semaphore deadlock in fiemap call (Mark Tinguely) [Orabug: 38461858] {CVE-2025-39885}
  - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN (Krister Johansen)
  - compiler-clang.h: define __SANITIZE_*__ macros only when undefined (Nathan Chancellor)
  - EDAC/altera: Delete an inappropriate dma_free_coherent() call (Salah Triki)
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. (Kuniyuki Iwashima) [Orabug: 38494796] {CVE-2025-39913}
  - NFSv4/flexfiles: Fix layout merge mirror check. (Jonathan Curley)
  - tracing: Fix tracing_marker may trigger page fault during preempt_disable (Luo Gengkun)
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server (Trond Myklebust)
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set (Trond Myklebust)
  - mm/rmap: reject hugetlb folios in folio_make_device_exclusive() (David Hildenbrand)
  - net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod. (Kuniyuki Iwashima) [Orabug: 37901603] {CVE-2025-23143}
  - media: i2c: imx214: Fix link frequency validation (André Apitzsch)
  - media: mtk-vcodec: venc: avoid -Wenum-compare-conditional warning (Arnd Bergmann)
  - mm: introduce and use {pgd,p4d}_populate_kernel() (Harry Yoo)
  - kunit: kasan_test: disable fortify string checker on kasan_strings() test (Levi Yun)
  - xfs: short circuit xfs_growfs_data_private() if delta is zero (Eric Sandeen)
  - Revert "fbdev: Disable sysfb device registration when removing conflicting FBs" (Brett A C Sheffield)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.1.el8uek]
changelog:
  - uek-rpm: kabi: Remove the kabi protection for debug kernels (Yifei Liu) [Orabug: 38609547]
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Sreekanth Reddy) [Orabug: 38440240] {CVE-2025-39810}
  - selftests/proc: add PROCMAP_QUERY ioctl tests (Andrii Nakryiko) [Orabug: 38410775]
  - tools: sync uapi/linux/fs.h header into tools subdir (Andrii Nakryiko) [Orabug: 38410775]
  - docs/procfs: call out ioctl()-based PROCMAP_QUERY command existence (Andrii Nakryiko) [Orabug: 38410775]
  - fs/procfs: add build ID fetching to PROCMAP_QUERY API (Andrii Nakryiko) [Orabug: 38410775]
  - fs/procfs: implement efficient VMA querying API for /proc/<pid>/maps (Andrii Nakryiko) [Orabug: 38410775]
  - fs/procfs: extract logic for getting VMA name constituents (Andrii Nakryiko) [Orabug: 38410775]
  - fs: create helper file_user_path() for user displayed mapped file path (Amir Goldstein) [Orabug: 38410775]
  - mm: factor out VMA stack and heap checks (Kefeng Wang) [Orabug: 38410775]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.2.el8uek]
changelog:
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Pradyumn Rahar) [Orabug: 37961220,38730620] {CVE-2025-40250}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.3.el8uek]
changelog:
  - rds: Add smp_rmb before reading c_destroy_in_prog (Håkon Bugge) [Orabug: 38352484]
  - Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART" (Gulam Mohamed) [Orabug: 38652797]
  - Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()" (Gulam Mohamed) [Orabug: 38652797]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.4.el8uek]
changelog:
  - vhost_scsi: Sync up cmd completion locking with upstream (Mike Christie)  [Orabug: 38545946]
  - vhost_scsi: add support for worker ioctls (Mike Christie)  [Orabug: 38545946]
  - vhost: Limit access to vhost worker ioctls (Mike Christie)  [Orabug: 38545946]
  - vhost: allow userspace to create workers (Mike Christie)  [Orabug: 38545946]
  - vhost: replace single worker pointer with xarray (Mike Christie)  [Orabug: 38545946]
  - vhost: add helper to parse userspace vring state/file (Mike Christie)  [Orabug: 38545946]
  - vhost: remove vhost_work_queue (Mike Christie)  [Orabug: 38545946]
  - vhost_scsi: flush IO vqs then send TMF rsp (Mike Christie)  [Orabug: 38545946]
  - vhost_scsi: convert to vhost_vq_work_queue (Mike Christie)  [Orabug: 38545946]
  - vhost_scsi: make SCSI cmd completion per vq (Mike Christie)  [Orabug: 38545946]
  - vhost_sock: convert to vhost_vq_work_queue (Mike Christie)  [Orabug: 38545946]
  - vhost: convert poll work to be vq based (Mike Christie)  [Orabug: 38545946]
  - vhost: take worker or vq for flushing (Mike Christie)  [Orabug: 38545946]
  - vhost: take worker or vq instead of dev for queueing (Mike Christie)  [Orabug: 38545946]
  - vhost, vhost_net: add helper to check if vq has work (Mike Christie)  [Orabug: 38545946]
  - vhost: add vhost_worker pointer to vhost_virtqueue (Mike Christie)  [Orabug: 38545946]
  - vhost: dynamically allocate vhost_worker (Mike Christie)  [Orabug: 38545946]
  - vhost: create worker at end of vhost_dev_set_owner (Mike Christie)  [Orabug: 38545946]
  - vhost-scsi: Fix crash during LUN unmapping (Mike Christie)  [Orabug: 38545946]
  - vhost: move worker thread fields to new struct (Mike Christie)  [Orabug: 38545946]
  - vhost: Fix livepatch timeouts in vhost_worker() (Josh Poimboeuf)  [Orabug: 38545946]
  - vhost: rename vhost_work_dev_flush (Mike Christie)  [Orabug: 38545946]
  - vhost-test: drop flush after vhost_dev_cleanup (Mike Christie)  [Orabug: 38545946]
  - vhost/test: fix memory leak of vhost virtqueues (Xianting Tian)  [Orabug: 38545946]
  - vhost-scsi: drop flush after vhost_dev_cleanup (Mike Christie)  [Orabug: 38545946]
  - vhost_vsock: simplify vhost_vsock_flush() (Andrey Ryabinin)  [Orabug: 38545946]
  - vhost_test: remove vhost_test_flush_vq() (Andrey Ryabinin)  [Orabug: 38545946]
  - vhost_net: get rid of vhost_net_flush_vq() and extra flush calls (Andrey Ryabinin)  [Orabug: 38545946]
  - vhost: flush dev once during vhost_dev_stop (Mike Christie)  [Orabug: 38545946]
  - vhost: get rid of vhost_poll_flush() wrapper (Andrey Ryabinin)  [Orabug: 38545946]
  - net/mlx5e: Add a miss level for ipsec crypto offload (Lama Kayal)  [Orabug: 38600056]
  - net/mlx5e: Add new prio for promiscuous mode (Jianbo Liu)  [Orabug: 38600056]
  - mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation (Joe Jin)  [Orabug: 38728358]
  - uek-rpm: Replace check-kabi tool with kabi (Yifei Liu)  [Orabug: 38673381]
  - uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu)  [Orabug: 38673381]
  - rtc: expose RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni)  [Orabug: 38708842]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Harshvardhan Jha)  [Orabug: 38710346]
  - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso)  [Orabug: 38389767]  {CVE-2025-38678}
  - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)
  - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR (Matthieu Baerts (NGI0))
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk (Alan Stern)
  - most: usb: fix double free on late probe failure (Johan Hovold)
  - uio_hv_generic: Set event for all channels on the device (Long Li)
  - regmap: slimbus: fix bus_context pointer in regmap init calls (Alexey Klimov)
  - usb: typec: ucsi: psy: Set max current to zero when disconnected (Jameson Thies)
  - ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
  - MIPS: mm: Prevent a TLB shutdown on initial uniquification (Maciej W. Rozycki)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.4.1.el8uek]
changelog:
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima)  [Orabug: 38788585]  {CVE-2025-40280} 
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang)  [Orabug: 38788587]  {CVE-2025-40271} 
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj)  [Orabug: 38788594]  {CVE-2025-40248}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.4.1.el8uek]
changelog:
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima)  [Orabug: 38788585]  {CVE-2025-40280}
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang)  [Orabug: 38788587]  {CVE-2025-40271}
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj)  [Orabug: 38788594]  {CVE-2025-40248}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.4.2.el8uek]
changelog:
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca)   
  - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE (Gopi Krishna Menon)   
  - ext4: clear i_state_flags when alloc inode (Haibo Chen)   
  - ext4: align max orphan file size with e2fsprogs limit (Baokun Li)   
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Rafael J. Wysocki)   
  - net: enetc: fix build warning when PAGE_SIZE is greater than 128K (Wei Fang)   
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Xiang Mei)   
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (shechenglong)   
  - fuse: fix readahead reclaim deadlock (Joanne Koong)   
  - i40e: validate ring_len parameter against hardware-specific values (Gregory Herrero)   
  - fs/ntfs3: fix mount failure for sparse runs in run_unpack() (Konstantin Komarov)   
  - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca)  [Orabug: 38933003]  {CVE-2025-40215} 
  - mptcp: fix race condition in mptcp_schedule_work() (Eric Dumazet)  [Orabug: 38932997]  {CVE-2025-40258} 
  - mlx5: Fix default values in create CQ (Akiva Goldberger)  [Orabug: 38932992]  
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38932991]  {CVE-2025-38566} 
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38932988]  {CVE-2025-38571}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-316.196.4.el8uek]
changelog:
  - vhost_scsi: Sync up cmd completion locking with upstream (Mike Christie) [Orabug: 38545946]
  - vhost_scsi: add support for worker ioctls (Mike Christie) [Orabug: 38545946]
  - vhost: Limit access to vhost worker ioctls (Mike Christie) [Orabug: 38545946]
  - vhost: allow userspace to create workers (Mike Christie) [Orabug: 38545946]
  - vhost: replace single worker pointer with xarray (Mike Christie) [Orabug: 38545946]
  - vhost: add helper to parse userspace vring state/file (Mike Christie) [Orabug: 38545946]
  - vhost: remove vhost_work_queue (Mike Christie) [Orabug: 38545946]
  - vhost_scsi: flush IO vqs then send TMF rsp (Mike Christie) [Orabug: 38545946]
  - vhost_scsi: convert to vhost_vq_work_queue (Mike Christie) [Orabug: 38545946]
  - vhost_scsi: make SCSI cmd completion per vq (Mike Christie) [Orabug: 38545946]
  - vhost_sock: convert to vhost_vq_work_queue (Mike Christie) [Orabug: 38545946]
  - vhost: convert poll work to be vq based (Mike Christie) [Orabug: 38545946]
  - vhost: take worker or vq for flushing (Mike Christie) [Orabug: 38545946]
  - vhost: take worker or vq instead of dev for queueing (Mike Christie) [Orabug: 38545946]
  - vhost, vhost_net: add helper to check if vq has work (Mike Christie) [Orabug: 38545946]
  - vhost: add vhost_worker pointer to vhost_virtqueue (Mike Christie) [Orabug: 38545946]
  - vhost: dynamically allocate vhost_worker (Mike Christie) [Orabug: 38545946]
  - vhost: create worker at end of vhost_dev_set_owner (Mike Christie) [Orabug: 38545946]
  - vhost-scsi: Fix crash during LUN unmapping (Mike Christie) [Orabug: 38545946]
  - vhost: move worker thread fields to new struct (Mike Christie) [Orabug: 38545946]
  - vhost: Fix livepatch timeouts in vhost_worker() (Josh Poimboeuf) [Orabug: 38545946]
  - vhost: rename vhost_work_dev_flush (Mike Christie) [Orabug: 38545946]
  - vhost-test: drop flush after vhost_dev_cleanup (Mike Christie) [Orabug: 38545946]
  - vhost/test: fix memory leak of vhost virtqueues (Xianting Tian) [Orabug: 38545946]
  - vhost-scsi: drop flush after vhost_dev_cleanup (Mike Christie) [Orabug: 38545946]
  - vhost_vsock: simplify vhost_vsock_flush() (Andrey Ryabinin) [Orabug: 38545946]
  - vhost_test: remove vhost_test_flush_vq() (Andrey Ryabinin) [Orabug: 38545946]
  - vhost_net: get rid of vhost_net_flush_vq() and extra flush calls (Andrey Ryabinin) [Orabug: 38545946]
  - vhost: flush dev once during vhost_dev_stop (Mike Christie) [Orabug: 38545946]
  - vhost: get rid of vhost_poll_flush() wrapper (Andrey Ryabinin) [Orabug: 38545946]
  - net/mlx5e: Add a miss level for ipsec crypto offload (Lama Kayal) [Orabug: 38600056]
  - net/mlx5e: Add new prio for promiscuous mode (Jianbo Liu) [Orabug: 38600056]
  - mm/hugetlb: add option to allows disabling CVE-2025-38085 mitigation (Joe Jin) [Orabug: 38728358] {CVE-2025-38085}
  - uek-rpm: Replace check-kabi tool with kabi (Yifei Liu) [Orabug: 38673381]
  - uek-rpm: Introduce check function for uek-rpm/tools/kabi (Yifei Liu) [Orabug: 38673381]
  - rtc: expose RTC_FEATURE_UPDATE_INTERRUPT (Alexandre Belloni) [Orabug: 38708842]
  - Reapply "cpuidle: menu: Avoid discarding useful information" (Harshvardhan Jha) [Orabug: 38710346]
  - netfilter: nf_tables: reject duplicate device on updates (Pablo Neira Ayuso) [Orabug: 38389767,38744086] {CVE-2025-38678}
  - HID: quirks: work around VID/PID conflict for 0x4c4a/0x4155 (Zhang Heng)
  - mptcp: pm: in-kernel: C-flag: handle late ADD_ADDR (Matthieu Baerts)
  - USB: storage: Remove subclass and protocol overrides from Novatek quirk (Alan Stern)
  - most: usb: fix double free on late probe failure (Johan Hovold)
  - uio_hv_generic: Set event for all channels on the device (Long Li)
  - regmap: slimbus: fix bus_context pointer in regmap init calls (Alexey Klimov)
  - usb: typec: ucsi: psy: Set max current to zero when disconnected (Jameson Thies)
  - ata: libata-scsi: Fix system suspend for a security locked drive (Niklas Cassel)
  - MIPS: mm: Prevent a TLB shutdown on initial uniquification (Maciej W. Rozycki)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.1.el8uek]
changelog:
  - LTS version: v5.15.197 (Vijayendra Suman)
  - libbpf: Fix invalid return address register in s390 (Daniel T. Lee)
  - libbpf, riscv: Use a0 for RC register (Yixun Lan)
  - libbpf: Fix riscv register names (Ilya Leoshkevich)
  - selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3 (Andrii Nakryiko)
  - scsi: pm80xx: Set phy->enable_completion only when we (Igor Pylypiv) [Orabug: 37159744] {CVE-2024-47666}
  - Bluetooth: Add more enc key size check (Alex Lu)
  - usb: renesas_usbhs: Fix synchronous external abort on unbind (Claudiu Beznea) [Orabug: 38792571] {CVE-2025-68327}
  - usb: renesas_usbhs: Convert to platform remove callback returning void (Uwe Kleine-König)
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [Orabug: 38773704] {CVE-2025-68295}
  - mptcp: Fix proto fallback detection with BPF (Jiayuan Chen) [Orabug: 38773435] {CVE-2025-68227}
  - mptcp: avoid unneeded subflow-level drops (Paolo Abeni)
  - selftests: mptcp: join: rm: set backup flag (Matthieu Baerts)
  - staging: rtl8712: Remove driver using deprecated API wext (Philipp Hortmann)
  - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (Ziming Zhang) [Orabug: 38773649] {CVE-2025-68284}
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (Ilya Dryomov) [Orabug: 38773655] {CVE-2025-68285}
  - drm/amd/display: Check NULL before accessing (Alex Hung) [Orabug: 38773664] {CVE-2025-68286}
  - drm: sti: fix device leaks at component probe (Johan Hovold)
  - USB: serial: option: add support for Rolling RW101R-GL (Vanillan Wang)
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101 (Oleksandr Suvorov)
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host (Mathias Nyman)
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (Manish Nagar) [Orabug: 38773671] {CVE-2025-68287}
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Owen Gu) [Orabug: 38792593] {CVE-2025-68331}
  - usb: storage: sddr55: Reject out-of-bound new_pba (Tianchu Chen) [Orabug: 38762730] {CVE-2025-40345}
  - usb: storage: Fix memory leak in USB bulk transport (Desnes Nunes) [Orabug: 38773677] {CVE-2018-1000204,CVE-2025-68288}
  - usb: gadget: f_eem: Fix memory leak in eem_unwrap (Kuen-Han Tsai) [Orabug: 38773687] {CVE-2025-68289}
  - usb: cdns3: Fix double resource release in cdns3_pci_probe (Miaoqian Lin)
  - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking (Miaoqian Lin)
  - firmware: stratix10-svc: fix bug in saving controller data (Khairul Anuar Romli)
  - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves (Miaoqian Lin)
  - thunderbolt: Add support for Intel Wildcat Lake (Alan Borzeszkowski)
  - drivers/usb/dwc3: fix PCI parent check (Jamie Iles)
  - dm-verity: fix unreliable memory allocation (Mikulas Patocka)
  - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling (Marc Kleine-Budde)
  - can: sja1000: fix max irq loop handling (Thomas Mühlbacher)
  - atm/fore200e: Fix possible data race in fore200e_open() (Gui-Dong Han)
  - iio: accel: bmc150: Fix irq assumption regression (Linus Walleij) [Orabug: 38792587] {CVE-2025-68330}
  - iio:common:ssp_sensors: Fix an error handling path ssp_probe() (Christophe Jaillet)
  - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields (Francesco Lavra)
  - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" (Jiri Olsa)
  - spi: bcm63xx: fix premature CS deassertion on RX-only transactions (Hang Zhou)
  - mailbox: mailbox-test: Fix debugfs_create_dir error checking (Xu Wang)
  - net: atlantic: fix fragment overflow handling in RX path (Jiefeng Zhang) [Orabug: 38773729] {CVE-2025-68301}
  - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic (Vladimir Oltean)
  - net: dsa: sja1105: simplify static configuration reload (Russell King)
  - net: dsa: sja1105: Convert to mdiobus_c45_read (Andrew Lunn)
  - net: sxgbe: fix potential NULL dereference in sxgbe_rx() (Alexey Kodanev)
  - net/mlx5e: Fix validation logic in rate limiting (Danielle Costantino)
  - net: aquantia: Add missing descriptor cache invalidation on ATL2 (Kai-Heng Feng)
  - platform/x86: intel: punit_ipc: fix memory corruption (Dan Carpenter)
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (Luiz Augusto von Dentz)
  - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers (Seungjin Bae) [Orabug: 38773760] {CVE-2025-68308}
  - Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART" (Gulam Mohamed) [Orabug: 38652797]
  - Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()" (Gulam Mohamed) [Orabug: 38652797]
  - mptcp: do not fallback when OoO is present (Paolo Abeni)
  - mptcp: fix a race in mptcp_pm_del_add_timer() (Eric Dumazet) [Orabug: 38730656] {CVE-2025-40257}
  - mptcp: fix premature close in case of fallback (Paolo Abeni)
  - mptcp: fix ack generation for fallback msk (Paolo Abeni)
  - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups (Krzysztof Kozlowski)
  - Input: pegasus-notetaker - fix potential out-of-bounds access (Seungjin Bae)
  - Input: remove third argument of usb_maxpacket() (Vincent Mailhol)
  - usb: deprecate the third argument of usb_maxpacket() (Vincent Mailhol)
  - mptcp: Disallow MPTCP subflows from sockmap (Jiayuan Chen)
  - selftests: mptcp: connect: fix fallback note due to OoO (Matthieu Baerts)
  - pmdomain: samsung: plug potential memleak during probe (André Draszik)
  - pmdomain: arm: scmi: Fix genpd leak on provider registration failure (Sudeep Holla)
  - pmdomain: imx: Fix reference count leak in imx_gpc_remove (Miaoqian Lin)
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Breno Leitao) [Orabug: 38773509] {CVE-2025-68245}
  - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 (Shawn Lin)
  - net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
  - btrfs: fix crash on racing fsync and size-extending write into prealloc (Omar Sandoval) [Orabug: 36774582] {CVE-2024-37354}
  - btrfs: add helper to truncate inode items when logging inode (Filipe Manana)
  - Makefile.compiler: replace cc-ifversion with compiler-specific macros (Nick Desaulniers)
  - tracing/tools: Fix incorrcet short option in usage text for --threads (Zhang Chujun)
  - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error (Nishanth Menon)
  - ALSA: usb-audio: fix uac2 clock source at terminal parser (René Rebe)
  - mm/secretmem: fix use-after-free race in fault handler (Lance Yang) [Orabug: 38737039] {CVE-2025-40272}
  - mm/mm_init: fix hash table order logging in alloc_large_system_hash() (Isaac J. Manjarres)
  - kconfig/nconf: Initialize the default locale at startup (Jakub Horký)
  - kconfig/mconf: Initialize the default locale at startup (Jakub Horký)
  - net: tls: Cancel RX async resync request on rcd_delta overflow (Shahar Shitrit)
  - selftests: net: use BASH for bareudp testing (Po-Hsu Lin)
  - scsi: core: Fix a regression triggered by scsi_host_busy() (Bart Van Assche) [Orabug: 38773426]
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38730611,38786193,38788594] {CVE-2025-40248}
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Pavel Zhigulin) [Orabug: 38730629] {CVE-2025-40252}
  - kernel.h: Move ARRAY_SIZE() to a separate header (Alejandro Colomar)
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Xu Wang)
  - s390/ctcm: Fix double-kfree (Aleksei Nikiforov)
  - net: openvswitch: remove never-working support for setting nsh fields (Ilya Maximets) [Orabug: 38730648] {CVE-2025-40254}
  - net: dsa: hellcreek: fix missing error handling in LED registration (Pavel Zhigulin)
  - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() (Zilin Guan)
  - drm/tegra: dc: Fix reference leak in tegra_dc_couple() (Ma Ke)
  - mptcp: fix race condition in mptcp_schedule_work() (Eric Dumazet) [Orabug: 38730659] {CVE-2025-40258}
  - MIPS: Malta: Fix !EVA SOC-it PCI MMIO (Maciej W. Rozycki)
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Hamza Mahfooz) [Orabug: 38773440] {CVE-2025-68229}
  - scsi: sg: Do not sleep in atomic context (Bart Van Assche) [Orabug: 38730663] {CVE-2025-40259}
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [Orabug: 38730673] {CVE-2025-40261}
  - Input: imx_sc_key - fix memory corruption on unload (Dan Carpenter)
  - Input: cros_ec_keyb - fix an invalid memory access (Tzung-Bi Shih) [Orabug: 38730680] {CVE-2025-40263}
  - be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [Orabug: 38730689] {CVE-2025-40264}
  - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector (Yongpeng Yang)
  - mtd: rawnand: cadence: fix DMA device NULL pointer dereference (Niravkumar L Rabara)
  - net/sched: act_connmark: handle errno on tcf_idr_check_alloc (Pedro Tammela)
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (Abdun Nihaal) [Orabug: 38798907] {CVE-2025-68734}
  - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection (Niravkumar L Rabara)
  - EDAC/altera: Handle OCRAM ECC enable after warm reset (Niravkumar L Rabara)
  - spi: Try to get ACPI GPIO IRQ earlier (Hans de Goede)
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check (Takashi Iwai)
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [Orabug: 38737023] {CVE-2025-40269}
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38737033,38786194,38788587] {CVE-2025-40271}
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Chuang Wang) [Orabug: 38773495] {CVE-2025-68241}
  - strparser: Fix signed/unsigned mismatch bug (Nate Karstens)
  - gcov: add support for GCC 15 (Peter Oberparleiter)
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [Orabug: 38737042] {CVE-2025-40273}
  - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() (Masami Ichikawa)
  - mtd: onenand: Pass correct pointer to IRQ handler (Dan Carpenter)
  - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN (Eric Biggers)
  - mm/ksm: fix flag-dropping behavior in ksm_madvise (Jakub Acs) [Orabug: 38592026] {CVE-2025-40040}
  - bpf: Add bpf_prog_run_data_pointers() (Eric Dumazet) [Orabug: 38773327] {CVE-2025-68200}
  - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [Orabug: 38737051] {CVE-2025-40275}
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Trond Myklebust)
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [Orabug: 38737060] {CVE-2025-40277}
  - ASoC: cs4271: Fix regulator leak on probe failure (Xu Wang)
  - regulator: fixed: fix GPIO descriptor leak on register failure (Xu Wang)
  - acpi,srat: Fix incorrect device handle check for Generic Initiator (Shuai Xue)
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (Pauli Virtanen)
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer)
  - net_sched: limit try_bulk_dequeue_skb() batches (Eric Dumazet)
  - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Gal Pressman)
  - net/mlx5e: Fix maxrate wraparound in threshold between units (Gal Pressman)
  - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (Ranganath V N)
  - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (Ranganath V N) [Orabug: 38737072] {CVE-2025-40279}
  - net_sched: act_connmark: use RCU in tcf_connmark_dump() (Eric Dumazet)
  - net/sched: act_connmark: transition to percpu stats and rcu (Pedro Tammela)
  - net: sched: act_connmark: get rid of tcf_connmark_walker and tcf_connmark_search (Zhengchao Shao)
  - net: sched: act: move global static variable net_id to tc_action_ops (Zhengchao Shao)
  - wifi: mac80211: skip rate verification for not captured PSDUs (Benjamin Berg)
  - net: mdio: fix resource leak in mdiobus_register_device() (Csaba Buday)
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38737082,38786195,38788585] {CVE-2025-40280}
  - net/smc: fix mismatch between CLC header and proposal (D. Wythe)
  - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Eric Dumazet) [Orabug: 38737090] {CVE-2025-40281}
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (Pauli Virtanen)
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (Pauli Virtanen)
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Pauli Virtanen)
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [Orabug: 38737103] {CVE-2025-40283}
  - net: fec: correct rx_bytes statistic for the case SHIFT16 is set (Wei Fang)
  - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down (Sharique Mohammad)
  - NFS: check if suid/sgid was cleared after a write as needed (Scott Mayhew)
  - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug (Tristan Lobb)
  - NFS4: Fix state renewals missing after boot (Joshua Watt)
  - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors (Danil Skrebenkov)
  - compiler_types: Move unused static inline functions warning to W=2 (Peter Zijlstra)
  - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (Janusz Krzysztofik) [Orabug: 38773506] {CVE-2025-68244}
  - selftests: netdevsim: set test timeout to 10 minutes (Jakub Kicinski)
  - extcon: adc-jack: Cleanup wakeup source only if it was enabled (Krzysztof Kozlowski)
  - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC (Nathan Chancellor)
  - rtc: rx8025: fix incorrect register reference (Yuta Hayama)
  - tracing: Fix memory leaks in create_field_var() (Zilin Guan)
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init (Kalesh Ap)
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni) [Orabug: 38773282] {CVE-2025-68192}
  - sctp: Hold sock lock while iterating over address list (Stefan Wiehler)
  - sctp: Prevent TOCTOU out-of-bounds write (Stefan Wiehler) [Orabug: 38747446] {CVE-2025-40331}
  - sctp: Hold RCU read lock while iterating over address list (Stefan Wiehler)
  - net: dsa: b53: stop reading ARL entries if search is done (Jonas Gorski)
  - net: dsa: b53: fix enabling ip multicast (Jonas Gorski)
  - net: dsa: b53: fix resetting speed and pause on forced link (Jonas Gorski)
  - net: vlan: sync VLAN features with lower device (Hangbin Liu)
  - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh (Wang Liang)
  - netdevsim: add Makefile for selftests (David Wei)
  - selftests/net: use destination options instead of hop-by-hop (Anubhav Singh)
  - selftests/net: fix GRO coalesce test and add ext header coalesce tests (Richard Gobert)
  - selftests/net: fix out-of-order delivery of FIN in gro:tcp test (Anubhav Singh)
  - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx (Jonas Gorski)
  - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro (Josephine Pfeiffer)
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Baochen Qiang)
  - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again (Kailang Yang)
  - ceph: add checking of wait_for_completion_killable() return value (Viacheslav Dubeyko)
  - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity (Valerio Setti)
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [Orabug: 38737181] {CVE-2025-40304}
  - ACPI: property: Return present device nodes only on fwnode interface (Sakari Ailus)
  - 9p: sysfs_init: don't hardcode error to ENOMEM (Randall P. Embry)
  - cpufreq: tegra186: Initialize all cores to max frequencies (Aaron Kling)
  - 9p: fix /sys/fs/9p/caches overwriting itself (Randall P. Embry)
  - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled (Matthias Schiffer)
  - clk: at91: clk-master: Add check for divide by 3 (Ryan Wanner)
  - ARM: at91: pm: save and restore ACR during PLL disable/enable (Nicolas Ferre)
  - rtc: pcf2127: clear minute/second interrupt (Josua Mayer)
  - um: Fix help message for ssl-non-raw (Tiwei Bie)
  - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink (Yikang Yue)
  - btrfs: mark dirty extent range for out of bound prealloc extents (Austinchang)
  - RDMA/hns: Fix wrong WQE data when QP wraps around (Junxian Huang)
  - RDMA/irdma: Set irdma_cq cq_num field during CQ create (Jacob Moroni)
  - RDMA/irdma: Remove unused struct irdma_cq fields (Jacob Moroni)
  - RDMA/irdma: Fix SD index calculation (Jacob Moroni)
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Saket Dumbre)
  - orangefs: fix xattr related buffer overflow... (Mike Marshall)
  - page_pool: Clamp pool size to max 16K pages (Dragos Tatulea)
  - exfat: limit log print for IO error (Chi Zhiling)
  - ALSA: usb-audio: add mono main switch to Presonus S1824c (Roy Vegard Ovesen)
  - Bluetooth: bcsp: receive data only if registered (Ivan Pravdin) [Orabug: 38737212] {CVE-2025-40308}
  - Bluetooth: SCO: Fix UAF on sco_conn_free (Luiz Augusto von Dentz) [Orabug: 38737223] {CVE-2025-40309}
  - net: macb: avoid dealing with endianness in macb_set_hwaddr() (Théo Lebrun)
  - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock (Chuguangqing) [Orabug: 38773127] {CVE-2025-40361}
  - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() (Alok Tiwari)
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Al Viro) [Orabug: 38773244] {CVE-2025-68185}
  - NFSv4.1: fix mount hang after CREATE_SESSION failure (Anthony Iliopoulos)
  - NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia)
  - remoteproc: qcom: q6v5: Avoid handling handover twice (Stephan Gerhold)
  - sparc/module: Add R_SPARC_UA64 relocation handling (Koakuma)
  - PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Chen Wang)
  - r8169: set EEE speed down ratio to 1 (Chunhao Lin)
  - net: intel: fm10k: Fix parameter idx set but not used (Brahmajit Das)
  - wifi: ath10k: Fix connection after GTK rekeying (Loic Poulain)
  - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() (Seyediman Seyedarab)
  - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X (Robert Marko)
  - jfs: fix uninitialized waitqueue in transaction manager (Shaurya Rane)
  - jfs: Verify inode mode when loading from disk (Tetsuo Handa)
  - ipv6: np->rxpmtu race annotation (Eric Dumazet)
  - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Krishna Kurapati)
  - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Forest Crossman)
  - allow finish_no_open(file, ERR_PTR(-E...)) (Al Viro)
  - scsi: lpfc: Define size of debugfs entry for xri rebalancing (Justin Tee)
  - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup (Justin Tee)
  - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Justin Tee)
  - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency (Nai-Chen Cheng)
  - page_pool: always add GFP_NOWARN for ATOMIC allocations (Jakub Kicinski) [Orabug: 38773835] {CVE-2025-68321}
  - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl (Tvrtko Ursulin)
  - net/cls_cgroup: Fix task_get_classid() during qdisc run (Yafang Shao)
  - udp_tunnel: use netdev_warn() instead of netdev_WARN() (Alok Tiwari) [Orabug: 38773275] {CVE-2025-68191}
  - selftests: Replace sleep with slowwait (David Ahern)
  - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP (Daniel Palmer)
  - selftests: Disable dad for ipv6 in fcnal-test.sh (David Ahern)
  - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT (Li Rongqing)
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal)
  - selftests: traceroute: Use require_command() (Ido Schimmel)
  - media: redrat3: use int type to store negative error codes (Rong Qianfeng)
  - net: sh_eth: Disable WoL if system can not suspend (Niklas Söderlund)
  - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 (Michael Riesch)
  - phy: cadence: cdns-dphy: Enable lower resolutions in dphy (Harikrishna Shenoy)
  - ntfs3: pretend $Extend records as regular files (Tetsuo Handa)
  - net: phy: marvell: Fix 88e1510 downshift counter errata (Rohan G Thomas)
  - drm/msm: make sure to not queue up recovery more than once (Antonino Maniscalco)
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Chen Yufeng)
  - usb: gadget: f_hid: Fix zero length packet transfer (William Wu)
  - iommu/amd: Skip enabling command/event buffers for kdump (Ashish Kalra)
  - net: call cond_resched() less often in __release_sock() (Eric Dumazet)
  - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms (Juraj Šarinay)
  - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled (Yue Haibing)
  - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate (Krzysztof Kozlowski)
  - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL (Krzysztof Kozlowski)
  - dmaengine: dw-edma: Set status for callback_result (Devendra K Verma)
  - dmaengine: mv_xor: match alloc_wc and free_wc (Rosen Penev)
  - dmaengine: sh: setup_xref error handling (Thomas Andreatta)
  - ptp: Limit time setting of PTP clocks (Miroslav Lichvar)
  - scsi: pm8001: Use int instead of u32 to store error codes (Rong Qianfeng)
  - mips: lantiq: xway: sysctrl: rename stp clock (Aleksander Jan Bajkowski)
  - mips: lantiq: danube: add missing device_type in pci node (Aleksander Jan Bajkowski)
  - mips: lantiq: danube: add missing properties to cpu node (Aleksander Jan Bajkowski)
  - media: fix uninitialized symbol warnings (Chelsy Ratnawat)
  - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption (Amber Lin)
  - extcon: adc-jack: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - scsi: pm80xx: Fix race condition caused by static variables (Francisco Gutierrez)
  - scsi: mpi3mr: Fix controller init failure on fault during queue creation (Chandrakanth Patil)
  - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units (Takashi Iwai)
  - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Sungho Kim)
  - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. (Kuniyuki Iwashima)
  - net: When removing nexthops, don't call synchronize_net if it is not necessary (Christoph Paasch)
  - char: misc: Does not request module for miscdevice with dynamic minor (Zijun Hu)
  - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Raub Camaioni)
  - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register (Rodrigo Gobbi)
  - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts (Dmitry Baryshkov)
  - media: imon: make send_packet() more robust (Tetsuo Handa) [Orabug: 38773297] {CVE-2025-68194}
  - net: ipv6: fix field-spanning memcpy warning in AH output (Charalampos Mitrodimas) [Orabug: 38773140] {CVE-2025-40363}
  - bridge: Redirect to backup port when port is administratively down (Ido Schimmel)
  - powerpc/eeh: Use result of error_detected() in uevent (Niklas Schnelle)
  - thunderbolt: Use is_pciehp instead of is_hotplug_bridge (Lukas Wunner)
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Tiezhu Yang)
  - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall (Kirill A. Shutemov)
  - drm/tidss: Set crtc modesetting parameters with adjusted mode (Jayesh Choudhary)
  - drm/tidss: Use the crtc_* timings when programming the HW (Tomi Valkeinen)
  - media: pci: ivtv: Don't create fake v4l2_fh (Laurent Pinchart)
  - drm/amdkfd: return -ENOTTY for unsupported IOCTLs (Geoffrey Mcrae)
  - selftests/net: Ensure assert() triggers in psock_tpacket.c (Wake Liu)
  - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 (Wake Liu)
  - PCI: Disable MSI on RDC PCI to PCIe bridges (Marcos Del Sol Vives)
  - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() (Seyediman Seyedarab)
  - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff (Sathishkumar S)
  - drm/amd/pm: Use cached metrics data on arcturus (Lijo Lazar)
  - drm/amd/pm: Use cached metrics data on aldebaran (Lijo Lazar)
  - mfd: da9063: Split chip variant reading in two bus transactions (Jens Kehne)
  - mfd: madera: Work around false-positive -Wininitialized warning (Arnd Bergmann)
  - mfd: stmpe-i2c: Add missing MODULE_LICENSE (Alexander Stein)
  - mfd: stmpe: Remove IRQ domain upon removal (Alexander Stein)
  - tools/power x86_energy_perf_policy: Prefer driver HWP limits (Len Brown)
  - tools/power x86_energy_perf_policy: Enhance HWP enable (Len Brown)
  - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage (Kaushlendra Kumar)
  - tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Kaushlendra Kumar)
  - hwmon: (dell-smm) Add support for Dell OptiPlex 7040 (Armin Wolf)
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Jiri Olsa)
  - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Daniel Lezcano)
  - cpuidle: Fail cpuidle device registration if there is one already (Rafael J. Wysocki)
  - tools/cpupower: fix error return value in cpupower_write_sysfs() (Kaushlendra Kumar)
  - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 (Svyatoslav Ryhel)
  - nvme-fc: use lock accessing port_state and rport state (Daniel Wagner) [Orabug: 38747531] {CVE-2025-40342}
  - nvmet-fc: avoid scheduling association deletion twice (Daniel Wagner) [Orabug: 38747538] {CVE-2025-40343}
  - tee: allow a driver to allocate a tee_device without a pool (Amirreza Zarrabi)
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Hans de Goede)
  - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card (Sarthak Garg)
  - power: supply: sbs-charger: Support multiple devices (Fabien Proriol)
  - hwmon: (sbtsi_temp) AMD CPU extended temperature range support (Chuande Chen)
  - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] (Hans de Goede)
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Shang Song)
  - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment (Christian Bruel)
  - arc: Fix __fls() const-foldability via __builtin_clzl() (Kees Cook)
  - cpufreq/longhaul: handle NULL policy in longhaul_exit (Dennis Beier)
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ricardo B. Marlière)
  - ACPI: video: force native for Lenovo 82K8 (Mario Limonciello)
  - memstick: Add timeout to prevent indefinite waiting (Jiayi Li)
  - mmc: host: renesas_sdhi: Fix the actual clock (Biju Das)
  - pinctrl: single: fix bias pull up/down handling in pin_config_set (Chi Zhang)
  - bpf: Don't use %pK through printk (Thomas Weißschuh)
  - soc: ti: pruss: don't use %pK through printk (Thomas Weißschuh)
  - spi: loopback-test: Don't use %pK through printk (Thomas Weißschuh)
  - soc: qcom: smem: Fix endian-unaware access of num_entries (Jens Reidel)
  - soc: aspeed: socinfo: Add AST27xx silicon IDs (Ryan Chen)
  - block: make REQ_OP_ZONE_OPEN a write operation (Damien Le Moal)
  - drm/sysfb: Do not dereference NULL pointer in plane reset (Thomas Zimmermann) [Orabug: 38773123] {CVE-2025-40360}
  - drm/sched: Fix race in drm_sched_entity_select_rq() (Philipp Stanner)
  - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Owen Gu)
  - Revert "docs/process/howto: Replace C89 with C11" (Matthieu Baerts)
  - arch: back to -std=gnu89 in < v5.18 (Matthieu Baerts)
  - x86/boot: Compile boot code with -std=gnu11 too (Alexey Dobriyan)
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event (Mathias Nyman)
  - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Mathias Nyman)
  - xhci: dbc: Improve performance by removing delay in transfer event polling. (Mathias Nyman)
  - xhci: dbc: Allow users to modify DbC poll interval via sysfs (Uday M Bhat)
  - xhci: dbc: poll at different rate depending on data transfer activity (Mathias Nyman)
  - xhci: dbc: Provide sysfs option to configure dbc descriptors (Mathias Nyman)
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Babu Moger)
  - net: phy: dp83867: Disable EEE support as not implemented (Emanuele Ghidoli)
  - can: gs_usb: increase max interface to U8_MAX (Celeste Liu)
  - net: ravb: Enforce descriptor type ordering (Lad Prabhakar)
  - ravb: Exclude gPTP feature support for RZ/G2L (Biju Das)
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp (Xu Yang)
  - serial: 8250_dw: handle reset control deassert error (Artem Shimko)
  - serial: 8250_dw: Use devm_add_action_or_reset() (Andy Shevchenko)
  - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL (Damien Le Moal)
  - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland (John Smith)
  - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji (John Smith)
  - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() (Yang Wang)
  - net: hns3: return error code when function fails (Jijie Shao)
  - drm/etnaviv: fix flush sequence logic (Tomeu Vizoso)
  - usbnet: Prevents free active kevent (Lizhi Xu) [Orabug: 38773783] {CVE-2025-68312}
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Andrii Nakryiko)
  - libbpf: Normalize PT_REGS_xxx() macro definitions (Andrii Nakryiko)
  - riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h (Björn Töpel)
  - bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek)
  - bpf: Sync pending IRQ work before freeing ring buffer (Noorain Eqbal) [Orabug: 38737284] {CVE-2025-40319}
  - ALSA: usb-audio: fix control pipe direction (Roy Vegard Ovesen)
  - drm/msm/a6xx: Fix GMU firmware parser (Akhil P Oommen)
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Loic Poulain)
  - ASoC: qdsp6: q6asm: do not sleep while atomic (Srinivas Kandagatla)
  - mptcp: restore window probe (Paolo Abeni)
  - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Miaoqian Lin)
  - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Florian Fuchs)
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Gokul Sivakumar) [Orabug: 38737291] {CVE-2025-40321}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [Orabug: 38737300] {CVE-2025-40322}
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [Orabug: 38687004] {CVE-2025-40211}
  - fbdev: atyfb: Check if pll_ops->init_pll failed (Daniel Palmer)
  - net: usb: asix_devices: Check return value of usbnet_get_endpoints (Miaoqian Lin)
  - NFSD: Fix crash in nfsd4_read_release() (Chuck Lever) [Orabug: 38737315] {CVE-2025-40324}
  - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Filipe Manana)
  - btrfs: always drop log root tree reference in btrfs_replay_log() (Filipe Manana)
  - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() (Thorsten Blum)
  - x86/bugs: Fix reporting of LFENCE retpoline (David Kaplan)
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [Orabug: 38597084] {CVE-2025-40083}


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> [5.15.0-317.197.2.el8uek]
changelog:
  - x86/its: Build fails with CONFIG_MITIGATION_ITS=n (Alexandre Chartre) [Orabug: 38756952]
  - net/sched: adjust device watchdog timer to detect stopped queue at right time (Praveen Kumar Kannoju) [Orabug: 38341919]
  - KVM: arm64: Add minimal handling for the ARMv8.7 PMU (Marc Zyngier) [Orabug: 38784458]
  - scsi: megaraid_sas: Fix invalid node index (Chen Yu) [Orabug: 38175026] {CVE-2025-38239}
  - Revert "iommu/amd: Skip enabling command/event buffers for kdump" (Dongli Zhang) [Orabug: 38790823]
  - mm: list_lru: avoid using NULL list_lru_one. (Imran Khan) [Orabug: 38619860]
  - mm: list_lru: fix UAF for memory cgroup (Muchun Song) [Orabug: 38619860]
  - net/rds: improve conn destroy printk message (Sharath Srinivasan) [Orabug: 38728740]
  - net/rds: expand kref coverage to rds_notifier->n_conn (Sharath Srinivasan) [Orabug: 38728740]
  - net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn (Sharath Srinivasan) [Orabug: 38728740]
  - net/rds: rds_sendmsg must use rs_conn only when not being destroyed (Sharath Srinivasan) [Orabug: 38728743]
  - net/mlx5e: Set default burst period for TX and RX reporters (Shahar Shitrit) [Orabug: 38512377]
  - devlink: Make health reporter burst period configurable (Shahar Shitrit) [Orabug: 38512377]
  - devlink: Introduce burst period for health reporter (Shahar Shitrit) [Orabug: 38512377]
  - devlink: Move health reporter recovery abort logic to a separate function (Shahar Shitrit) [Orabug: 38512377]
  - devlink: Move graceful period parameter to reporter ops (Shahar Shitrit) [Orabug: 38512377]
  - devlink: introduce devlink_nl_put_u64() (Przemek Kitszel) [Orabug: 38512377]
  - net/mlx5: remove fw reporter dump option for non PF (Moshe Shemesh) [Orabug: 38512377]
  - net/mlx5: remove fw_fatal reporter dump option for non PF (Moshe Shemesh) [Orabug: 38512377]
  - devlink: Hold devlink lock on health reporter dump get (Moshe Shemesh) [Orabug: 38512377]
  - Revert "net/mlx5: set graceful_period to 0 to allow multiple transmission queue recovery" (Qing Huang) [Orabug: 38512377]
  - NVIDIA: SAUCE: iommu/arm-smmu-v3: Allow default substream bypass with a pasid support (Nicolin Chen) [Orabug: 38463999]
  - RDMA/mlx5: Fix a WARN during dereg_mr for DM type (Yishai Hadas) [Orabug: 37766291,38463999] {CVE-2025-21888}
  - uek-rpm: replace CONFIG_IOMMU_SVA_LIB with CONFIG_IOMMU_SVA (Junxiao Bi) [Orabug: 38463999]
  - iommu/sva: Rename CONFIG_IOMMU_SVA_LIB to CONFIG_IOMMU_SVA (Fenghua Yu) [Orabug: 38463999]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.3.el8uek]
changelog:
  - kpcimgr: Enable loading firmware via kernel infrastructure (Joseph Dobosenski) [Orabug: 38546110]
  - Move hnic crashkernel to cnic-image-builder (Henry Willard) [Orabug: 38546110]
  - Bump supported capmem range count from 64 to 256 (Jan Setje-Eilers) [Orabug: 38546110]
  - irqchip/pensando: Fix partial of_iomap() leak on error (#505) (Brad Larson) [Orabug: 38546110]
  - pensando: Allow sparse allowed ranges in cap_mem (Maciej S. Szmigiero) [Orabug: 38546110]
  - soc/pensando/cap-pcie: Handle zero-ed out MS_CFG_WDT_IDX/WDT_IDX (Joao Martins) [Orabug: 38546110]
  - pensando: Enable penfw driver for smartnic (Jan Setje-Eilers) [Orabug: 38546110]
  - irqchip/gic-v3-its: remove WARN_ON gic_reserve_range (Tom Saeger) [Orabug: 38546110]
  - hnic: Disable CONFIG_OVERLAY_FS_INDEX (Patrick Colp) [Orabug: 38546110]
  - pensando: missing diffs from AMD (Jan Setje-Eilers) [Orabug: 38546110]
  - hnic: config: Build FUSE into the kernel (not as a module) (Patrick Colp) [Orabug: 38546110]
  - hnic: config: Add DM_VERITY support (Patrick Colp) [Orabug: 38546110]
  - hnic config: Add LOCKDOWN_LSM support (Patrick Colp) [Orabug: 38546110]
  - Subject: uek-rpm: Build hostnic kernel for Pensando (Dave Kleikamp) [Orabug: 38546110]
  - pensando: kpcimgr: support pcie port bifurcation (Darshan Prajapati) [Orabug: 38546110]
  - Add changes for penfw and sbus.c for secureboot (Rahshekh) [Orabug: 38546110]
  - arm64: GIC ITS MSI encapsulator address configured from device tree (Brad Larson) [Orabug: 38546110]
  - perf/arm-cmn: Enable AMD Pensando Salina SoC CMN PMU driver (Brad Larson) [Orabug: 38546110]
  - reset: salinasr: Add AMD Pensando Salina SoC reset (Brad Larson) [Orabug: 38546110]
  - spi: dw-mmio: Add AMD Pensando Salina SoC support (Brad Larson) [Orabug: 38546110]
  - EDAC/elba: Support AMD Pensando Giglio SoC (Brad Larson) [Orabug: 38546110]
  - arm64: defconfig: Add AMD Pensando Salina SoC defconfig (Brad Larson) [Orabug: 38546110]
  - soc/pensando: Support AMD Pensando Salina SoC (Brad Larson) [Orabug: 38546110]
  - arm64: dts: Add AMD Pensando Salina SoC support (Brad Larson) [Orabug: 38546110]
  - mmc: sdhci-cadence: Support AMD Salina SoC (Brad Larson) [Orabug: 38546110]
  - PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (Breno Leitao) [Orabug: 38597010] {CVE-2025-40034}
  - mm/hugetlb: disable huge_pmd_unshare TLB sync by default on Exadata (Joe Jin) [Orabug: 38829889]
  - vhost: Account for worker thread under owner's nproc (Mike Christie) [Orabug: 38770748]
  - vhost: revert CAP_SYS restrictions on worker ioctls (Mike Christie) [Orabug: 38770748]
  - RDMA/cm: Base cm_id destruction timeout on CMA values (Håkon Bugge) [Orabug: 38753654]
  - mlx5: Fix default values in create CQ (Akiva Goldberger) [Orabug: 38420735,38773370] {CVE-2025-68209}
  - uek-rpm: Allow disabling kabichk at command line (Yifei Liu) [Orabug: 38744825]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.4.el8uek]
changelog:
  - gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [Orabug: 38755419]
  - platform/mellanox: mlxbf-pmc: Fix duplicate event ID for CACHE_DATA1 (Alok Tiwari) [Orabug: 38755419]
  - pinctrl: mlxbf3: Fix return value check for devm_platform_ioremap_resource (Chen Ni) [Orabug: 38755419]
  - net/mlx5e: Query FW for buffer ownership (Alexei Lazar) [Orabug: 38755419]
  - net/mlx5: Add IFC bits and enums for buf_ownership (Oren Sidi) [Orabug: 38755419]
  - net/mlx5: Update mlx5_ifc to support FEC for 200G per lane link modes (Jianbo Liu) [Orabug: 38755419]
  - net/mlx5e: Support FEC settings for 100G/lane modes (Cosmin Ratiu) [Orabug: 38755419]
  - net/mlx5e: Extract checking of FEC support for a link mode (Cosmin Ratiu) [Orabug: 38755419]
  - tcp: Set pingpong threshold via sysctl (Haiyang Zhang) [Orabug: 38853979]
  - arm64: hnic: config: Add NBD driver (Patrick Colp) [Orabug: 38858773]
  - arm64: pensando: Fix spec file for HNIC (Rob Gardner) [Orabug: 38858773]
  - Enable additional drivers needed to support MIPS64 SmartNic (Vijay Kumar) [Orabug: 38846771]
  - MIPS: Fix build error for mips ARCH_ATOMIC (Vijay Kumar) [Orabug: 38846771]
  - Added atomic addition,subtraction functions. (Anagha K J) [Orabug: 38846771]
  - Allocate the required IV size referenced by the cypher handle in init_state (Anagha K J) [Orabug: 38846771]
  - Setting up numa system and memory initializations (Anagha K J) [Orabug: 38846771]
  - Implemented clocksource provider driven by node-0 FPA_CLK_COUNT (Anagha K J) [Orabug: 38846771]
  - Processor cache information made available to userspace (Anagha K J) [Orabug: 38846771]
  - MIPS: mm: kmalloc tlb_vpn array to avoid stack overflow (Thomas Bogendoerfer) [Orabug: 38851582]
  - usb: raw-gadget: cap raw_io transfer length to KMALLOC_MAX_SIZE (Gopi Krishna Menon)
  - ext4: clear i_state_flags when alloc inode (Haibo Chen)
  - ext4: align max orphan file size with e2fsprogs limit (Baokun Li)
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Rafael J. Wysocki)
  - net: enetc: fix build warning when PAGE_SIZE is greater than 128K (Wei Fang)
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Xiang Mei) [Orabug: 38783137] {CVE-2025-68325}
  - block: fix comment for op_is_zone_mgmt() to include RESET_ALL (Shechenglong)
  - fuse: fix readahead reclaim deadlock (Joanne Koong) [Orabug: 38847946] {CVE-2025-68821}
  - i40e: validate ring_len parameter against hardware-specific values (Gregory Herrero)
  - fs/ntfs3: fix mount failure for sparse runs in run_unpack() (Konstantin Komarov)
  - ntfs3: init run lock for extend inode (Edward Adam Davis)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.5.el8uek]
changelog:
  - KVM: x86: conditionally clear masterclock request for uek=exadata (Dongli Zhang)  [Orabug: 38801641]
  - Partial backport of "KVM: x86: Fix software TSC upscaling in kvm_update_guest_time()" (Dongli Zhang)  [Orabug: 38801641]
  - uek-rpm: pensando: Move crashkernel to cnic-image-builder (Henry Willard)  [Orabug: 38851137]
  - ext4: drop dio overwrite only flag and associated warning (Brian Foster)  [Orabug: 38381010]
  - ext4: fix racy may inline data check in dio write (Brian Foster)  [Orabug: 38381010]
  - ext4: allow concurrent unaligned dio overwrites (Brian Foster)  [Orabug: 38381010]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi)  [Orabug: 38381010]
  - net: mana: Reduce waiting time if HWC not responding (Haiyang Zhang)  [Orabug: 38172423]
  - uek-rpm: hnic: add unique hnic signing certs (Tom Saeger)  [Orabug: 38894488]
  - drivers/soc/pensando/sbus: Secure mode support. (Hiren Mehta)  [Orabug: 38894106]
  - drivers/soc/pensando/pen_secure: Report register address on access errors (Maciej S. Szmigiero)  [Orabug: 38894106]
  - drivers/edac/elba_edac: Secure mode support (Hiren Mehta)  [Orabug: 38894106]
  - drivers/soc/pensando/bsm: Add secure-mode support. (Hiren Mehta)  [Orabug: 38894106]
  - drivers/soc/pensando/rstcause: Add secure mode support. (Hiren Mehta)  [Orabug: 38894106]
  - drivers/soc/pensando/penfw: New SMC support for secure-mode. (Hiren Mehta)  [Orabug: 38894106]
  - drivers/soc/pensando/sbus: Secure mode support (Hiren Mehta)  [Orabug: 38894106]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia)  [Orabug: 38334981]  {CVE-2025-38571}
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia)  [Orabug: 38334968]  {CVE-2025-38566}
  - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca)  [Orabug: 38730492]  {CVE-2025-40215}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.5.1.el8uek]
changelog:
  - Revert "net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn" (Vijayendra Suman)  [Orabug: 38961010]  
  - Revert "net/rds: expand kref coverage to rds_notifier->n_conn" (Sharath Srinivasan)  [Orabug: 38961010]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.5.1.el8uek]
changelog:
  - Revert "net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn" (Vijayendra Suman)  [Orabug: 38961010]
  - Revert "net/rds: expand kref coverage to rds_notifier->n_conn" (Sharath Srinivasan)  [Orabug: 38961010]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.5.2.el8uek]
changelog:
  - xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca)  [Orabug: 39016261]  
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca)  [Orabug: 39016261]  
  - Revert "xfrm: destroy xfrm_state synchronously on net exit path" (Sabrina Dubroca)  [Orabug: 39016261]  
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima)  [Orabug: 39016219]  {CVE-2025-40149} 
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala)  [Orabug: 39016219]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.1.el8uek]
changelog:
  - LTS version: v5.15.197 (Vijayendra Suman)
  - libbpf: Fix invalid return address register in s390 (Daniel T. Lee)
  - libbpf, riscv: Use a0 for RC register (Yixun Lan)
  - libbpf: Fix riscv register names (Ilya Leoshkevich)
  - selftests/bpf: Don't rely on preserving volatile in PT_REGS macros in loop3 (Andrii Nakryiko)
  - scsi: pm80xx: Set phy->enable_completion only when we (Igor Pylypiv) [Orabug: 37159744] {CVE-2024-47666}
  - Bluetooth: Add more enc key size check (Alex Lu)
  - usb: renesas_usbhs: Fix synchronous external abort on unbind (Claudiu Beznea) [Orabug: 38792571] {CVE-2025-68327}
  - usb: renesas_usbhs: Convert to platform remove callback returning void (Uwe Kleine-König)
  - smb: client: fix memory leak in cifs_construct_tcon() (Paulo Alcantara) [Orabug: 38773704] {CVE-2025-68295}
  - mptcp: Fix proto fallback detection with BPF (Jiayuan Chen) [Orabug: 38773435] {CVE-2025-68227}
  - mptcp: avoid unneeded subflow-level drops (Paolo Abeni)
  - selftests: mptcp: join: rm: set backup flag (Matthieu Baerts)
  - staging: rtl8712: Remove driver using deprecated API wext (Philipp Hortmann)
  - libceph: prevent potential out-of-bounds writes in handle_auth_session_key() (Ziming Zhang) [Orabug: 38773649] {CVE-2025-68284}
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (Ilya Dryomov) [Orabug: 38773655] {CVE-2025-68285}
  - drm/amd/display: Check NULL before accessing (Alex Hung) [Orabug: 38773664] {CVE-2025-68286}
  - drm: sti: fix device leaks at component probe (Johan Hovold)
  - USB: serial: option: add support for Rolling RW101R-GL (Vanillan Wang)
  - USB: serial: ftdi_sio: add support for u-blox EVK-M101 (Oleksandr Suvorov)
  - xhci: dbgtty: Fix data corruption when transmitting data form DbC to host (Mathias Nyman)
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (Manish Nagar) [Orabug: 38773671] {CVE-2025-68287}
  - usb: uas: fix urb unmapping issue when the uas device is remove during ongoing data transfer (Owen Gu) [Orabug: 38792593] {CVE-2025-68331}
  - usb: storage: sddr55: Reject out-of-bound new_pba (Tianchu Chen) [Orabug: 38762730] {CVE-2025-40345}
  - usb: storage: Fix memory leak in USB bulk transport (Desnes Nunes) [Orabug: 38773677] {CVE-2018-1000204,CVE-2025-68288}
  - usb: gadget: f_eem: Fix memory leak in eem_unwrap (Kuen-Han Tsai) [Orabug: 38773687] {CVE-2025-68289}
  - usb: cdns3: Fix double resource release in cdns3_pci_probe (Miaoqian Lin)
  - serial: amba-pl011: prefer dma_mapping_error() over explicit address checking (Miaoqian Lin)
  - firmware: stratix10-svc: fix bug in saving controller data (Khairul Anuar Romli)
  - slimbus: ngd: Fix reference count leak in qcom_slim_ngd_notify_slaves (Miaoqian Lin)
  - thunderbolt: Add support for Intel Wildcat Lake (Alan Borzeszkowski)
  - drivers/usb/dwc3: fix PCI parent check (Jamie Iles)
  - dm-verity: fix unreliable memory allocation (Mikulas Patocka)
  - can: sun4i_can: sun4i_can_interrupt(): fix max irq loop handling (Marc Kleine-Budde)
  - can: sja1000: fix max irq loop handling (Thomas Mühlbacher)
  - atm/fore200e: Fix possible data race in fore200e_open() (Gui-Dong Han)
  - iio: accel: bmc150: Fix irq assumption regression (Linus Walleij) [Orabug: 38792587] {CVE-2025-68330}
  - iio:common:ssp_sensors: Fix an error handling path ssp_probe() (Christophe Jaillet)
  - iio: imu: st_lsm6dsx: fix array size for st_lsm6dsx_settings fields (Francesco Lavra)
  - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" (Jiri Olsa) [Orabug: 38893604]
  - spi: bcm63xx: fix premature CS deassertion on RX-only transactions (Hang Zhou)
  - mailbox: mailbox-test: Fix debugfs_create_dir error checking (Xu Wang)
  - net: atlantic: fix fragment overflow handling in RX path (Jiefeng Zhang) [Orabug: 38773729] {CVE-2025-68301}
  - net: dsa: sja1105: fix SGMII linking at 10M or 100M but not passing traffic (Vladimir Oltean)
  - net: dsa: sja1105: simplify static configuration reload (Russell King)
  - net: dsa: sja1105: Convert to mdiobus_c45_read (Andrew Lunn)
  - net: sxgbe: fix potential NULL dereference in sxgbe_rx() (Alexey Kodanev)
  - net/mlx5e: Fix validation logic in rate limiting (Danielle Costantino)
  - net: aquantia: Add missing descriptor cache invalidation on ATL2 (Kai-Heng Feng)
  - platform/x86: intel: punit_ipc: fix memory corruption (Dan Carpenter)
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (Luiz Augusto von Dentz)
  - can: kvaser_usb: leaf: Fix potential infinite loop in command parsers (Seungjin Bae) [Orabug: 38773760] {CVE-2025-68308}
  - Revert "block: don't add or resize partition on the disk with GENHD_FL_NO_PART" (Gulam Mohamed) [Orabug: 38652797]
  - Revert "block: Move checking GENHD_FL_NO_PART to bdev_add_partition()" (Gulam Mohamed) [Orabug: 38652797]
  - mptcp: do not fallback when OoO is present (Paolo Abeni)
  - mptcp: fix a race in mptcp_pm_del_add_timer() (Eric Dumazet) [Orabug: 38730656] {CVE-2025-40257}
  - mptcp: fix premature close in case of fallback (Paolo Abeni)
  - mptcp: fix ack generation for fallback msk (Paolo Abeni)
  - dt-bindings: pinctrl: toshiba,visconti: Fix number of items in groups (Krzysztof Kozlowski)
  - Input: pegasus-notetaker - fix potential out-of-bounds access (Seungjin Bae)
  - Input: remove third argument of usb_maxpacket() (Vincent Mailhol)
  - usb: deprecate the third argument of usb_maxpacket() (Vincent Mailhol)
  - mptcp: Disallow MPTCP subflows from sockmap (Jiayuan Chen)
  - selftests: mptcp: connect: fix fallback note due to OoO (Matthieu Baerts)
  - pmdomain: samsung: plug potential memleak during probe (André Draszik)
  - pmdomain: arm: scmi: Fix genpd leak on provider registration failure (Sudeep Holla)
  - pmdomain: imx: Fix reference count leak in imx_gpc_remove (Miaoqian Lin)
  - net: netpoll: fix incorrect refcount handling causing incorrect cleanup (Breno Leitao) [Orabug: 38773509] {CVE-2025-68245}
  - mmc: sdhci-of-dwcmshc: Change DLL_STRBIN_TAPNUM_DEFAULT to 0x4 (Shawn Lin)
  - net: qede: Initialize qede_ll_ops with designated initializer (Nathan Chancellor)
  - btrfs: fix crash on racing fsync and size-extending write into prealloc (Omar Sandoval) [Orabug: 36774582] {CVE-2024-37354}
  - btrfs: add helper to truncate inode items when logging inode (Filipe Manana)
  - Makefile.compiler: replace cc-ifversion with compiler-specific macros (Nick Desaulniers)
  - tracing/tools: Fix incorrcet short option in usage text for --threads (Zhang Chujun)
  - net: ethernet: ti: netcp: Standardize knav_dma_open_channel to return NULL on error (Nishanth Menon)
  - ALSA: usb-audio: fix uac2 clock source at terminal parser (René Rebe)
  - mm/secretmem: fix use-after-free race in fault handler (Lance Yang) [Orabug: 38737039] {CVE-2025-40272}
  - mm/mm_init: fix hash table order logging in alloc_large_system_hash() (Isaac J. Manjarres)
  - kconfig/nconf: Initialize the default locale at startup (Jakub Horký)
  - kconfig/mconf: Initialize the default locale at startup (Jakub Horký)
  - net: tls: Cancel RX async resync request on rcd_delta overflow (Shahar Shitrit)
  - selftests: net: use BASH for bareudp testing (Po-Hsu Lin)
  - scsi: core: Fix a regression triggered by scsi_host_busy() (Bart Van Assche) [Orabug: 38773426]
  - vsock: Ignore signal/timeout on connect() if already established (Michal Luczaj) [Orabug: 38730611,38786193,38788594] {CVE-2025-40248}
  - net: qlogic/qede: fix potential out-of-bounds read in qede_tpa_cont() and qede_tpa_end() (Pavel Zhigulin) [Orabug: 38730629] {CVE-2025-40252}
  - kernel.h: Move ARRAY_SIZE() to a separate header (Alejandro Colomar)
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (Xu Wang)
  - s390/ctcm: Fix double-kfree (Aleksei Nikiforov)
  - net: openvswitch: remove never-working support for setting nsh fields (Ilya Maximets) [Orabug: 38730648] {CVE-2025-40254}
  - net: dsa: hellcreek: fix missing error handling in LED registration (Pavel Zhigulin)
  - mlxsw: spectrum: Fix memory leak in mlxsw_sp_flower_stats() (Zilin Guan)
  - drm/tegra: dc: Fix reference leak in tegra_dc_couple() (Ma Ke)
  - mptcp: fix race condition in mptcp_schedule_work() (Eric Dumazet) [Orabug: 38730659,38932997] {CVE-2025-40258}
  - MIPS: Malta: Fix !EVA SOC-it PCI MMIO (Maciej W. Rozycki)
  - scsi: target: tcm_loop: Fix segfault in tcm_loop_tpg_address_show() (Hamza Mahfooz) [Orabug: 38773440] {CVE-2025-68229}
  - scsi: sg: Do not sleep in atomic context (Bart Van Assche) [Orabug: 38730663] {CVE-2025-40259}
  - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [Orabug: 38730673] {CVE-2025-40261}
  - Input: imx_sc_key - fix memory corruption on unload (Dan Carpenter)
  - Input: cros_ec_keyb - fix an invalid memory access (Tzung-Bi Shih) [Orabug: 38730680] {CVE-2025-40263}
  - be2net: pass wrb_params in case of OS2BMC (Andrey Vatoropin) [Orabug: 38730689] {CVE-2025-40264}
  - exfat: check return value of sb_min_blocksize in exfat_read_boot_sector (Yongpeng Yang)
  - mtd: rawnand: cadence: fix DMA device NULL pointer dereference (Niravkumar L Rabara)
  - net/sched: act_connmark: handle errno on tcf_idr_check_alloc (Pedro Tammela)
  - isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() (Abdun Nihaal) [Orabug: 38798907] {CVE-2025-68734}
  - EDAC/altera: Use INTTEST register for Ethernet and USB SBE injection (Niravkumar L Rabara)
  - EDAC/altera: Handle OCRAM ECC enable after warm reset (Niravkumar L Rabara)
  - spi: Try to get ACPI GPIO IRQ earlier (Hans de Goede)
  - ALSA: usb-audio: Fix missing unlock at error path of maxpacksize check (Takashi Iwai)
  - ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (Takashi Iwai) [Orabug: 38737023] {CVE-2025-40269}
  - fs/proc: fix uaf in proc_readdir_de() (Wei Yang) [Orabug: 38737033,38786194,38788587] {CVE-2025-40271}
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Chuang Wang) [Orabug: 38773495] {CVE-2025-68241}
  - strparser: Fix signed/unsigned mismatch bug (Nate Karstens)
  - gcov: add support for GCC 15 (Peter Oberparleiter)
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [Orabug: 38737042] {CVE-2025-40273}
  - HID: hid-ntrig: Prevent memory leak in ntrig_report_version() (Masami Ichikawa)
  - mtd: onenand: Pass correct pointer to IRQ handler (Dan Carpenter)
  - lib/crypto: arm/curve25519: Disable on CPU_BIG_ENDIAN (Eric Biggers)
  - mm/ksm: fix flag-dropping behavior in ksm_madvise (Jakub Acs) [Orabug: 38592026] {CVE-2025-40040}
  - bpf: Add bpf_prog_run_data_pointers() (Eric Dumazet) [Orabug: 38773327] {CVE-2025-68200}
  - ALSA: usb-audio: Fix NULL pointer dereference in snd_usb_mixer_controls_badd (Haein Lee) [Orabug: 38737051] {CVE-2025-40275}
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Trond Myklebust)
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (Ian Forbes) [Orabug: 38737060] {CVE-2025-40277}
  - ASoC: cs4271: Fix regulator leak on probe failure (Xu Wang)
  - regulator: fixed: fix GPIO descriptor leak on register failure (Xu Wang)
  - acpi,srat: Fix incorrect device handle check for Generic Initiator (Shuai Xue)
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (Pauli Virtanen)
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer)
  - net_sched: limit try_bulk_dequeue_skb() batches (Eric Dumazet)
  - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Gal Pressman)
  - net/mlx5e: Fix maxrate wraparound in threshold between units (Gal Pressman)
  - net: sched: act_ife: initialize struct tc_ife to fix KMSAN kernel-infoleak (Ranganath V N)
  - net: sched: act_connmark: initialize struct tc_ife to fix kernel leak (Ranganath V N) [Orabug: 38737072] {CVE-2025-40279}
  - net_sched: act_connmark: use RCU in tcf_connmark_dump() (Eric Dumazet)
  - net/sched: act_connmark: transition to percpu stats and rcu (Pedro Tammela)
  - net: sched: act_connmark: get rid of tcf_connmark_walker and tcf_connmark_search (Zhengchao Shao)
  - net: sched: act: move global static variable net_id to tc_action_ops (Zhengchao Shao)
  - wifi: mac80211: skip rate verification for not captured PSDUs (Benjamin Berg)
  - net: mdio: fix resource leak in mdiobus_register_device() (Csaba Buday)
  - tipc: Fix use-after-free in tipc_mon_reinit_self(). (Kuniyuki Iwashima) [Orabug: 38737082,38786195,38788585] {CVE-2025-40280}
  - net/smc: fix mismatch between CLC header and proposal (D. Wythe)
  - sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto (Eric Dumazet) [Orabug: 38737090] {CVE-2025-40281}
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (Pauli Virtanen)
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (Pauli Virtanen)
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (Pauli Virtanen)
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (Raphael Pinsonneault-Thibeault) [Orabug: 38737103] {CVE-2025-40283}
  - net: fec: correct rx_bytes statistic for the case SHIFT16 is set (Wei Fang)
  - ASoC: max98090/91: fixed max98091 ALSA widget powering up/down (Sharique Mohammad)
  - NFS: check if suid/sgid was cleared after a write as needed (Scott Mayhew)
  - HID: quirks: avoid Cooler Master MM712 dongle wakeup bug (Tristan Lobb)
  - NFS4: Fix state renewals missing after boot (Joshua Watt)
  - RISC-V: clear hot-unplugged cores from all task mm_cpumasks to avoid rfence errors (Danil Skrebenkov)
  - compiler_types: Move unused static inline functions warning to W=2 (Peter Zijlstra)
  - drm/i915: Avoid lock inversion when pinning to GGTT on CHV/BXT+VTD (Janusz Krzysztofik) [Orabug: 38773506] {CVE-2025-68244}
  - selftests: netdevsim: set test timeout to 10 minutes (Jakub Kicinski)
  - extcon: adc-jack: Cleanup wakeup source only if it was enabled (Krzysztof Kozlowski)
  - lib/crypto: curve25519-hacl64: Fix older clang KASAN workaround for GCC (Nathan Chancellor)
  - rtc: rx8025: fix incorrect register reference (Yuta Hayama)
  - tracing: Fix memory leaks in create_field_var() (Zilin Guan)
  - bnxt_en: Fix a possible memory leak in bnxt_ptp_init (Kalesh Ap)
  - net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup (Qendrim Maxhuni) [Orabug: 38773282] {CVE-2025-68192}
  - sctp: Hold sock lock while iterating over address list (Stefan Wiehler)
  - sctp: Prevent TOCTOU out-of-bounds write (Stefan Wiehler) [Orabug: 38747446] {CVE-2025-40331}
  - sctp: Hold RCU read lock while iterating over address list (Stefan Wiehler)
  - net: dsa: b53: stop reading ARL entries if search is done (Jonas Gorski)
  - net: dsa: b53: fix enabling ip multicast (Jonas Gorski)
  - net: dsa: b53: fix resetting speed and pause on forced link (Jonas Gorski)
  - net: vlan: sync VLAN features with lower device (Hangbin Liu)
  - selftests: netdevsim: Fix ethtool-coalesce.sh fail by installing ethtool-common.sh (Wang Liang)
  - netdevsim: add Makefile for selftests (David Wei)
  - selftests/net: use destination options instead of hop-by-hop (Anubhav Singh)
  - selftests/net: fix GRO coalesce test and add ext header coalesce tests (Richard Gobert)
  - selftests/net: fix out-of-order delivery of FIN in gro:tcp test (Anubhav Singh)
  - net: dsa: tag_brcm: legacy: fix untagged rx on unbridged ports for bcm63xx (Jonas Gorski)
  - riscv: ptdump: use seq_puts() in pt_dump_seq_puts() macro (Josephine Pfeiffer)
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Baochen Qiang)
  - ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm boot again (Kailang Yang)
  - ceph: add checking of wait_for_completion_killable() return value (Viacheslav Dubeyko)
  - ASoC: meson: aiu-encoder-i2s: fix bit clock polarity (Valerio Setti)
  - fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (Albin Babu Varghese) [Orabug: 38737181] {CVE-2025-40304}
  - ACPI: property: Return present device nodes only on fwnode interface (Sakari Ailus)
  - 9p: sysfs_init: don't hardcode error to ENOMEM (Randall P. Embry)
  - cpufreq: tegra186: Initialize all cores to max frequencies (Aaron Kling)
  - 9p: fix /sys/fs/9p/caches overwriting itself (Randall P. Embry)
  - clk: ti: am33xx: keep WKUP_DEBUGSS_CLKCTRL enabled (Matthias Schiffer)
  - clk: at91: clk-master: Add check for divide by 3 (Ryan Wanner)
  - ARM: at91: pm: save and restore ACR during PLL disable/enable (Nicolas Ferre)
  - rtc: pcf2127: clear minute/second interrupt (Josua Mayer)
  - um: Fix help message for ssl-non-raw (Tiwei Bie)
  - fs/hpfs: Fix error code for new_inode() failure in mkdir/create/mknod/symlink (Yikang Yue)
  - btrfs: mark dirty extent range for out of bound prealloc extents (Austinchang)
  - RDMA/hns: Fix wrong WQE data when QP wraps around (Junxian Huang)
  - RDMA/irdma: Set irdma_cq cq_num field during CQ create (Jacob Moroni)
  - RDMA/irdma: Remove unused struct irdma_cq fields (Jacob Moroni)
  - RDMA/irdma: Fix SD index calculation (Jacob Moroni)
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Saket Dumbre)
  - orangefs: fix xattr related buffer overflow... (Mike Marshall)
  - page_pool: Clamp pool size to max 16K pages (Dragos Tatulea)
  - exfat: limit log print for IO error (Chi Zhiling)
  - ALSA: usb-audio: add mono main switch to Presonus S1824c (Roy Vegard Ovesen)
  - Bluetooth: bcsp: receive data only if registered (Ivan Pravdin) [Orabug: 38737212] {CVE-2025-40308}
  - Bluetooth: SCO: Fix UAF on sco_conn_free (Luiz Augusto von Dentz) [Orabug: 38737223] {CVE-2025-40309}
  - net: macb: avoid dealing with endianness in macb_set_hwaddr() (Théo Lebrun)
  - fs: ext4: change GFP_KERNEL to GFP_NOFS to avoid deadlock (Chuguangqing)
  - scsi: libfc: Fix potential buffer overflow in fc_ct_ms_fill() (Alok Tiwari)
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Al Viro) [Orabug: 38773244] {CVE-2025-68185}
  - NFSv4.1: fix mount hang after CREATE_SESSION failure (Anthony Iliopoulos)
  - NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia)
  - remoteproc: qcom: q6v5: Avoid handling handover twice (Stephan Gerhold)
  - sparc/module: Add R_SPARC_UA64 relocation handling (Koakuma)
  - PCI: cadence: Check for the existence of cdns_pcie::ops before using it (Chen Wang)
  - r8169: set EEE speed down ratio to 1 (Chunhao Lin)
  - net: intel: fm10k: Fix parameter idx set but not used (Brahmajit Das)
  - wifi: ath10k: Fix connection after GTK rekeying (Loic Poulain)
  - iommu/vt-d: Replace snprintf with scnprintf in dmar_latency_snapshot() (Seyediman Seyedarab)
  - net: ethernet: microchip: sparx5: make it selectable for ARCH_LAN969X (Robert Marko)
  - jfs: fix uninitialized waitqueue in transaction manager (Shaurya Rane)
  - jfs: Verify inode mode when loading from disk (Tetsuo Handa)
  - ipv6: np->rxpmtu race annotation (Eric Dumazet)
  - usb: xhci: plat: Facilitate using autosuspend for xhci plat devices (Krishna Kurapati)
  - usb: mon: Increase BUFF_MAX to 64 MiB to support multi-MB URBs (Forest Crossman)
  - allow finish_no_open(file, ERR_PTR(-E...)) (Al Viro)
  - scsi: lpfc: Define size of debugfs entry for xri rebalancing (Justin Tee)
  - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup (Justin Tee)
  - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Justin Tee)
  - selftests/Makefile: include $(INSTALL_DEP_TARGETS) in clean target to clean net/lib dependency (Nai-Chen Cheng)
  - page_pool: always add GFP_NOWARN for ATOMIC allocations (Jakub Kicinski) [Orabug: 38773835] {CVE-2025-68321}
  - drm/amdgpu: Use memdup_array_user in amdgpu_cs_wait_fences_ioctl (Tvrtko Ursulin)
  - net/cls_cgroup: Fix task_get_classid() during qdisc run (Yafang Shao)
  - udp_tunnel: use netdev_warn() instead of netdev_WARN() (Alok Tiwari) [Orabug: 38773275] {CVE-2025-68191}
  - selftests: Replace sleep with slowwait (David Ahern)
  - eth: 8139too: Make 8139TOO_PIO depend on !NO_IOPORT_MAP (Daniel Palmer)
  - selftests: Disable dad for ipv6 in fcnal-test.sh (David Ahern)
  - x86/kvm: Prefer native qspinlock for dedicated vCPUs irrespective of PV_UNHALT (Li Rongqing)
  - netfilter: nf_reject: don't reply to icmp error messages (Florian Westphal)
  - selftests: traceroute: Use require_command() (Ido Schimmel)
  - media: redrat3: use int type to store negative error codes (Rong Qianfeng)
  - net: sh_eth: Disable WoL if system can not suspend (Niklas Söderlund)
  - phy: rockchip: phy-rockchip-inno-csidphy: allow writes to grf register 0 (Michael Riesch)
  - phy: cadence: cdns-dphy: Enable lower resolutions in dphy (Harikrishna Shenoy)
  - ntfs3: pretend $Extend records as regular files (Tetsuo Handa)
  - net: phy: marvell: Fix 88e1510 downshift counter errata (Rohan G Thomas)
  - drm/msm: make sure to not queue up recovery more than once (Antonino Maniscalco)
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Chen Yufeng)
  - usb: gadget: f_hid: Fix zero length packet transfer (William Wu)
  - iommu/amd: Skip enabling command/event buffers for kdump (Ashish Kalra)
  - net: call cond_resched() less often in __release_sock() (Eric Dumazet)
  - net: nfc: nci: Increase NCI_DATA_TIMEOUT to 3000 ms (Juraj Šarinay)
  - ipv6: Add sanity checks on ipv6_devconf.rpl_seg_enabled (Yue Haibing)
  - drm/msm/dsi/phy_7nm: Fix missing initial VCO rate (Krzysztof Kozlowski)
  - drm/msm/dsi/phy: Toggle back buffer resync after preparing PLL (Krzysztof Kozlowski)
  - dmaengine: dw-edma: Set status for callback_result (Devendra K Verma)
  - dmaengine: mv_xor: match alloc_wc and free_wc (Rosen Penev)
  - dmaengine: sh: setup_xref error handling (Thomas Andreatta)
  - ptp: Limit time setting of PTP clocks (Miroslav Lichvar)
  - scsi: pm8001: Use int instead of u32 to store error codes (Rong Qianfeng)
  - mips: lantiq: xway: sysctrl: rename stp clock (Aleksander Jan Bajkowski)
  - mips: lantiq: danube: add missing device_type in pci node (Aleksander Jan Bajkowski)
  - mips: lantiq: danube: add missing properties to cpu node (Aleksander Jan Bajkowski)
  - media: fix uninitialized symbol warnings (Chelsy Ratnawat)
  - drm/amdkfd: Tie UNMAP_LATENCY to queue_preemption (Amber Lin)
  - extcon: adc-jack: Fix wakeup source leaks on device unbind (Krzysztof Kozlowski)
  - scsi: pm80xx: Fix race condition caused by static variables (Francisco Gutierrez)
  - scsi: mpi3mr: Fix controller init failure on fault during queue creation (Chandrakanth Patil)
  - ALSA: usb-audio: Add validation of UAC2/UAC3 effect units (Takashi Iwai)
  - PCI/P2PDMA: Fix incorrect pointer usage in devm_kfree() call (Sungho Kim)
  - net: Call trace_sock_exceed_buf_limit() for memcg failure with SK_MEM_RECV. (Kuniyuki Iwashima)
  - net: When removing nexthops, don't call synchronize_net if it is not necessary (Christoph Paasch)
  - char: misc: Does not request module for miscdevice with dynamic minor (Zijun Hu)
  - usb: gadget: f_ncm: Fix MAC assignment NCM ethernet (Raub Camaioni)
  - iio: adc: spear_adc: mask SPEAR_ADC_STATUS channel and avg sample before setting register (Rodrigo Gobbi)
  - drm/bridge: display-connector: don't set OP_DETECT for DisplayPorts (Dmitry Baryshkov)
  - media: imon: make send_packet() more robust (Tetsuo Handa) [Orabug: 38773297] {CVE-2025-68194}
  - net: ipv6: fix field-spanning memcpy warning in AH output (Charalampos Mitrodimas) [Orabug: 38773140] {CVE-2025-40363}
  - bridge: Redirect to backup port when port is administratively down (Ido Schimmel)
  - powerpc/eeh: Use result of error_detected() in uevent (Niklas Schnelle)
  - thunderbolt: Use is_pciehp instead of is_hotplug_bridge (Lukas Wunner)
  - net: stmmac: Check stmmac_hw_setup() in stmmac_resume() (Tiezhu Yang)
  - x86/vsyscall: Do not require X86_PF_INSTR to emulate vsyscall (Kirill A. Shutemov)
  - drm/tidss: Set crtc modesetting parameters with adjusted mode (Jayesh Choudhary)
  - drm/tidss: Use the crtc_* timings when programming the HW (Tomi Valkeinen)
  - media: pci: ivtv: Don't create fake v4l2_fh (Laurent Pinchart)
  - drm/amdkfd: return -ENOTTY for unsupported IOCTLs (Geoffrey Mcrae)
  - selftests/net: Ensure assert() triggers in psock_tpacket.c (Wake Liu)
  - selftests/net: Replace non-standard __WORDSIZE with sizeof(long) * 8 (Wake Liu)
  - PCI: Disable MSI on RDC PCI to PCIe bridges (Marcos Del Sol Vives)
  - drm/nouveau: replace snprintf() with scnprintf() in nvkm_snprintbf() (Seyediman Seyedarab)
  - drm/amdgpu/jpeg: Hold pg_lock before jpeg poweroff (Sathishkumar S)
  - drm/amd/pm: Use cached metrics data on arcturus (Lijo Lazar)
  - drm/amd/pm: Use cached metrics data on aldebaran (Lijo Lazar)
  - mfd: da9063: Split chip variant reading in two bus transactions (Jens Kehne)
  - mfd: madera: Work around false-positive -Wininitialized warning (Arnd Bergmann)
  - mfd: stmpe-i2c: Add missing MODULE_LICENSE (Alexander Stein)
  - mfd: stmpe: Remove IRQ domain upon removal (Alexander Stein)
  - tools/power x86_energy_perf_policy: Prefer driver HWP limits (Len Brown)
  - tools/power x86_energy_perf_policy: Enhance HWP enable (Len Brown)
  - tools/power x86_energy_perf_policy: Fix incorrect fopen mode usage (Kaushlendra Kumar)
  - tools/cpupower: Fix incorrect size in cpuidle_state_disable() (Kaushlendra Kumar)
  - hwmon: (dell-smm) Add support for Dell OptiPlex 7040 (Armin Wolf)
  - uprobe: Do not emulate/sstep original instruction when ip is changed (Jiri Olsa)
  - clocksource/drivers/vf-pit: Replace raw_readl/writel to readl/writel (Daniel Lezcano)
  - cpuidle: Fail cpuidle device registration if there is one already (Rafael J. Wysocki)
  - tools/cpupower: fix error return value in cpupower_write_sysfs() (Kaushlendra Kumar)
  - video: backlight: lp855x_bl: Set correct EPROM start for LP8556 (Svyatoslav Ryhel)
  - nvme-fc: use lock accessing port_state and rport state (Daniel Wagner) [Orabug: 38747531] {CVE-2025-40342}
  - nvmet-fc: avoid scheduling association deletion twice (Daniel Wagner) [Orabug: 38747538] {CVE-2025-40343}
  - tee: allow a driver to allocate a tee_device without a pool (Amirreza Zarrabi)
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Hans de Goede)
  - mmc: sdhci-msm: Enable tuning for SDR50 mode for SD card (Sarthak Garg)
  - power: supply: sbs-charger: Support multiple devices (Fabien Proriol)
  - hwmon: (sbtsi_temp) AMD CPU extended temperature range support (Chuande Chen)
  - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] (Hans de Goede)
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Shang Song)
  - irqchip/gic-v2m: Handle Multiple MSI base IRQ Alignment (Christian Bruel)
  - arc: Fix __fls() const-foldability via __builtin_clzl() (Kees Cook)
  - cpufreq/longhaul: handle NULL policy in longhaul_exit (Dennis Beier)
  - selftests/bpf: Fix bpf_prog_detach2 usage in test_lirc_mode2 (Ricardo B. Marlière)
  - ACPI: video: force native for Lenovo 82K8 (Mario Limonciello)
  - memstick: Add timeout to prevent indefinite waiting (Jiayi Li)
  - mmc: host: renesas_sdhi: Fix the actual clock (Biju Das)
  - pinctrl: single: fix bias pull up/down handling in pin_config_set (Chi Zhang)
  - bpf: Don't use %pK through printk (Thomas Weißschuh)
  - soc: ti: pruss: don't use %pK through printk (Thomas Weißschuh)
  - spi: loopback-test: Don't use %pK through printk (Thomas Weißschuh)
  - soc: qcom: smem: Fix endian-unaware access of num_entries (Jens Reidel)
  - soc: aspeed: socinfo: Add AST27xx silicon IDs (Ryan Chen)
  - block: make REQ_OP_ZONE_OPEN a write operation (Damien Le Moal)
  - drm/sysfb: Do not dereference NULL pointer in plane reset (Thomas Zimmermann) [Orabug: 38773123] {CVE-2025-40360}
  - drm/sched: Fix race in drm_sched_entity_select_rq() (Philipp Stanner)
  - usb: gadget: f_fs: Fix epfile null pointer access after ep enable. (Owen Gu)
  - Revert "docs/process/howto: Replace C89 with C11" (Matthieu Baerts)
  - arch: back to -std=gnu89 in < v5.18 (Matthieu Baerts)
  - x86/boot: Compile boot code with -std=gnu11 too (Alexey Dobriyan)
  - xhci: dbc: fix bogus 1024 byte prefix if ttyDBC read races with stall event (Mathias Nyman)
  - xhci: dbc: Avoid event polling busyloop if pending rx transfers are inactive. (Mathias Nyman)
  - xhci: dbc: Improve performance by removing delay in transfer event polling. (Mathias Nyman)
  - xhci: dbc: Allow users to modify DbC poll interval via sysfs (Uday M Bhat)
  - xhci: dbc: poll at different rate depending on data transfer activity (Mathias Nyman)
  - xhci: dbc: Provide sysfs option to configure dbc descriptors (Mathias Nyman)
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (Babu Moger)
  - net: phy: dp83867: Disable EEE support as not implemented (Emanuele Ghidoli)
  - can: gs_usb: increase max interface to U8_MAX (Celeste Liu)
  - net: ravb: Enforce descriptor type ordering (Lad Prabhakar)
  - ravb: Exclude gPTP feature support for RZ/G2L (Biju Das)
  - dt-bindings: usb: dwc3-imx8mp: dma-range is required only for imx8mp (Xu Yang)
  - serial: 8250_dw: handle reset control deassert error (Artem Shimko)
  - serial: 8250_dw: Use devm_add_action_or_reset() (Andy Shevchenko)
  - block: fix op_is_zone_mgmt() to handle REQ_OP_ZONE_RESET_ALL (Damien Le Moal)
  - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Iceland (John Smith)
  - drm/amd/pm/powerplay/smumgr: Fix PCIeBootLinkLevel value on Fiji (John Smith)
  - drm/amd/pm: fix smu table id bound check issue in smu_cmn_update_table() (Yang Wang)
  - net: hns3: return error code when function fails (Jijie Shao)
  - drm/etnaviv: fix flush sequence logic (Tomeu Vizoso)
  - usbnet: Prevents free active kevent (Lizhi Xu) [Orabug: 38773783] {CVE-2025-68312}
  - libbpf: Fix powerpc's stack register definition in bpf_tracing.h (Andrii Nakryiko)
  - libbpf: Normalize PT_REGS_xxx() macro definitions (Andrii Nakryiko)
  - riscv, libbpf: Add RISC-V (RV64) support to bpf_tracing.h (Björn Töpel)
  - bpf: Do not audit capability check in do_jit() (Ondrej Mosnacek)
  - bpf: Sync pending IRQ work before freeing ring buffer (Noorain Eqbal) [Orabug: 38737284] {CVE-2025-40319}
  - ALSA: usb-audio: fix control pipe direction (Roy Vegard Ovesen)
  - drm/msm/a6xx: Fix GMU firmware parser (Akhil P Oommen)
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Loic Poulain)
  - ASoC: qdsp6: q6asm: do not sleep while atomic (Srinivas Kandagatla)
  - mptcp: restore window probe (Paolo Abeni)
  - fbdev: valkyriefb: Fix reference count leak in valkyriefb_init (Miaoqian Lin)
  - fbdev: pvr2fb: Fix leftover reference to ONCHIP_NR_DMA_CHANNELS (Florian Fuchs)
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Gokul Sivakumar) [Orabug: 38737291] {CVE-2025-40321}
  - fbdev: bitblit: bound-check glyph index in bit_putcs* (Junjie Cao) [Orabug: 38737300] {CVE-2025-40322}
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Yuhao Jiang) [Orabug: 38687004] {CVE-2025-40211}
  - fbdev: atyfb: Check if pll_ops->init_pll failed (Daniel Palmer)
  - net: usb: asix_devices: Check return value of usbnet_get_endpoints (Miaoqian Lin)
  - NFSD: Fix crash in nfsd4_read_release() (Chuck Lever) [Orabug: 38737315] {CVE-2025-40324}
  - btrfs: use smp_mb__after_atomic() when forcing COW in create_pending_snapshot() (Filipe Manana)
  - btrfs: always drop log root tree reference in btrfs_replay_log() (Filipe Manana)
  - btrfs: scrub: replace max_t()/min_t() with clamp() in scrub_throttle_dev_io() (Thorsten Blum)
  - x86/bugs: Fix reporting of LFENCE retpoline (David Kaplan)
  - net/sched: sch_qfq: Fix null-deref in agg_dequeue (Xiang Mei) [Orabug: 38597084] {CVE-2025-40083}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-317.197.5.el8uek]
changelog:
  - KVM: x86: conditionally clear masterclock request for uek=exadata (Dongli Zhang) [Orabug: 38801641]
  - Partial backport of "KVM: x86: Fix software TSC upscaling in kvm_update_guest_time()" (Dongli Zhang) [Orabug: 38801641]
  - uek-rpm: pensando: Move crashkernel to cnic-image-builder (Henry Willard) [Orabug: 38851137]
  - ext4: drop dio overwrite only flag and associated warning (Brian Foster) [Orabug: 38381010]
  - ext4: fix racy may inline data check in dio write (Brian Foster) [Orabug: 38381010]
  - ext4: allow concurrent unaligned dio overwrites (Brian Foster) [Orabug: 38381010]
  - ext4: dio take shared inode lock when overwriting preallocated blocks (Zhang Yi) [Orabug: 38381010]
  - net: mana: Reduce waiting time if HWC not responding (Haiyang Zhang) [Orabug: 38172423]
  - uek-rpm: hnic: add unique hnic signing certs (Tom Saeger) [Orabug: 38894488]
  - drivers/soc/pensando/sbus: Secure mode support. (Hiren Mehta) [Orabug: 38894106]
  - drivers/soc/pensando/pen_secure: Report register address on access errors (Maciej S. Szmigiero) [Orabug: 38894106]
  - drivers/edac/elba_edac: Secure mode support (Hiren Mehta) [Orabug: 38894106]
  - drivers/soc/pensando/bsm: Add secure-mode support. (Hiren Mehta) [Orabug: 38894106]
  - drivers/soc/pensando/rstcause: Add secure mode support. (Hiren Mehta) [Orabug: 38894106]
  - drivers/soc/pensando/penfw: New SMC support for secure-mode. (Hiren Mehta) [Orabug: 38894106]
  - drivers/soc/pensando/sbus: Secure mode support (Hiren Mehta) [Orabug: 38894106]
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [Orabug: 38334981,38932988] {CVE-2025-38571}
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [Orabug: 38334968,38932991] {CVE-2025-38566}
  - xfrm: delete x->tunnel as we delete x (Sabrina Dubroca) [Orabug: 38730492,38933003] {CVE-2025-40215}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-318.199.1.el8uek]
changelog:
  - LTS version: v5.15.199 (Vijayendra Suman)
  - wifi: cfg80211: init wiphy_work before allocating rfkill fails (Edward Adam Davis) [Orabug: 39004275] {CVE-2025-22119}
  - wifi: cfg80211: fully move wiphy work to unbound workqueue (Johannes Berg)
  - wifi: cfg80211: cancel wiphy_work before freeing wiphy (Miri Korenblit) [Orabug: 39004414] {CVE-2025-21979}
  - wifi: cfg80211: fix wiphy delayed work queueing (Johannes Berg)
  - wifi: cfg80211: use system_unbound_wq for wiphy work (Johannes Berg)
  - team: Move team device type change at the end of team_port_add (Nikola Z. Ivanov)
  - pinctrl: meson: mark the GPIO controller as sleeping (Bartosz Golaszewski)
  - mptcp: avoid dup SUB_CLOSED events after disconnect (Matthieu Baerts)
  - writeback: fix 100% CPU usage when dirtytime_expire_interval is 0 (Laveesh Bansal)
  - drm/imx/tve: fix probe device leak (Johan Hovold)
  - pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver (Bartosz Golaszewski)
  - net/sched: act_ife: convert comma to semicolon (Chen Ni)
  - btrfs: prevent use-after-free on page private data in btrfs_subpage_clear_uptodate() (Jp Kobryn)
  - drm/amdkfd: fix a memory leak in device_queue_manager_init() (Haoxiang Li)
  - can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
  - genirq/irq_sim: Initialize work context pointers properly (Gyeyoung Baek)
  - HID: uclogic: Add NULL check in uclogic_input_configured() (Henry Martin) [Orabug: 39004242] {CVE-2025-38007}
  - HID: uclogic: Correct devm device reference for hidinput input_dev name (Rahul Rameshbabu)
  - wifi: mac80211: move TDLS work to wiphy work (Johannes Berg)
  - wifi: mac80211: use wiphy work for sdata->work (Johannes Berg)
  - wifi: cfg80211: add a work abstraction with special semantics (Johannes Berg)
  - Bluetooth: Fix hci_suspend_sync crash (Ying Hsu)
  - net: stmmac: make sure that ptp_rate is not 0 before configuring EST (Alexis Lothoré)
  - usbnet: Fix using smp_processor_id() in preemptible code warnings (Zqiang) [Orabug: 38649206] {CVE-2025-40164}
  - NFSD: fix race between nfsd registration and exports_proc (Maninder Singh) [Orabug: 38158712] {CVE-2025-38232}
  - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (Luis Henriques)
  - espintcp: fix skb leaks (Sabrina Dubroca) [Orabug: 38094997] {CVE-2025-38057}
  - fs/ntfs3: Initialize allocated memory before use (Bartlomiej Kubik)
  - ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency (Namjae Jeon)
  - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (Gaosheng Cui)
  - ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (Pedro Demarchi Gomes) [Orabug: 38773375] {CVE-2025-68211}
  - mm/pagewalk: add walk_page_range_vma() (David Hildenbrand)
  - ksmbd: smbd: fix dma_unmap_sg() nents (Thomas Fourier)
  - mei: trace: treat reg parameter as string (Alexander Usyskin)
  - ALSA: scarlett2: Fix buffer overflow in config retrieval (Samasth Norway Ananda)
  - nvme: fix PCIe subsystem reset controller state transition (Nilay Shroff)
  - nvme-pci: do not directly handle subsys reset fallout (Keith Busch)
  - nvme-fc: rename free_ctrl callback to match name pattern (Daniel Wagner)
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster)
  - dmaengine: stm32: dmamux: fix device leak on route allocation (Johan Hovold)
  - dmaengine: stm32: dmamux: fix OF node leak on route allocation failure (Johan Hovold)
  - w1: therm: Fix off-by-one buffer overflow in alarms_store (Thorsten Blum) [Orabug: 38930799] {CVE-2025-71197}
  - w1: w1_therm: use swap() to make code cleaner (Yang Guang)
  - arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s (Geraldo Nascimento)
  - scsi: xen: scsiback: Fix potential memory leak in scsiback_remove() (Abdun Nihaal) [Orabug: 38931015] {CVE-2026-23087}
  - iio: adc: exynos_adc: fix OF populate on driver rebind (Johan Hovold)
  - of: platform: Use default match table for /firmware (Rob Herring)
  - comedi: Fix getting range information for subdevices 16 to 255 (Ian Abbott)
  - tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). (Kuniyuki Iwashima) [Orabug: 38649138] {CVE-2025-40149}
  - net: Add locking to protect skb->dev access in ip_output (Sharath Chandra Vurukala)
  - mptcp: only reset subflow errors when propagated (Matthieu Baerts)
  - scsi: qla2xxx: edif: Fix dma_free_coherent() size (Thomas Fourier)
  - scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo() (Haoxiang Li)
  - ASoC: fsl: imx-card: Do not force slot width to sample width (Fabio Estevam)
  - dma/pool: distinguish between missing and exhausted atomic pools (Sai Sree Kartheek Adivi)
  - gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler (Denis Sergeev)
  - scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg() (Kery Qi)
  - net: bridge: fix static key check (Martin Kaiser)
  - nfc: nci: Fix race between rfkill and nci_unregister_device(). (Kuniyuki Iwashima)
  - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Gal Pressman)
  - net/mlx5e: Report rx_discards_phy via rx_dropped (Yafang Shao)
  - ice: stop counting UDP csum mismatch as rx_errors (Jesse Brandeburg)
  - nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame(). (Kuniyuki Iwashima)
  - rocker: fix memory leak in rocker_world_port_post_fini() (Kery Qi) [Orabug: 38970353] {CVE-2026-23164}
  - ipv6: use the right ifindex when replying to icmpv6 from localhost (Fernando Fernandez Mancera)
  - net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins() (Zilin Guan)
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Zilin Guan)
  - Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (Jia-Hong Su) [Orabug: 38970605] {CVE-2026-23146}
  - bpf: Reject narrower access to pointer ctx fields (Paul Chaignon) [Orabug: 38335081] {CVE-2025-38591}
  - bpf: Do not let BPF test infra emit invalid GSO types to stack (Daniel Borkmann) [Orabug: 38798882] {CVE-2025-68725}
  - migrate: correct lock ordering for hugetlb file folios (Matthew Wilcox) [Orabug: 38931067] {CVE-2026-23097}
  - can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38931121] {CVE-2026-23108}
  - can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde)
  - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38930883] {CVE-2026-23061}
  - can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak (Marc Kleine-Budde) [Orabug: 38930860] {CVE-2026-23058}
  - irqchip/gic-v3-its: Avoid truncating memory addresses (Arnd Bergmann) [Orabug: 38931002] {CVE-2026-23085}
  - perf/x86/intel: Do not enable BTS for guests (Fernand Sieber)
  - netrom: fix double-free in nr_route_frame() (Jeongjun Park)
  - uacce: ensure safe queue release with state management (Chenghai Huang)
  - uacce: implement mremap in uacce_vm_ops to return -EPERM (Yang Shen)
  - uacce: fix cdev handling in the cleanup path (Wenkai Lin)
  - intel_th: fix device leak on output open() (Johan Hovold) [Orabug: 38931041] {CVE-2026-23091}
  - slimbus: core: fix device reference leak on report present (Johan Hovold)
  - slimbus: core: fix runtime PM imbalance on report present (Johan Hovold)
  - octeontx2: Fix otx2_dma_map_page() error return code (Thomas Fourier)
  - arm64: Set __nocfi on swsusp_arch_resume() (Zhaoyang Huang)
  - wifi: rsi: Fix memory corruption due to not set vif driver data size (Marek Vasut) [Orabug: 38930941] {CVE-2026-23073}
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Dan Carpenter)
  - wifi: ath10k: fix dma_free_coherent() pointer (Thomas Fourier) [Orabug: 38970255] {CVE-2026-23133}
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Matthew Schwartz)
  - ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() (Berk Cem Goksel) [Orabug: 38931030] {CVE-2026-23089}
  - ALSA: ctxfi: Fix potential OOB access in audio mixer handling (Takashi Iwai) [Orabug: 38930967] {CVE-2026-23076}
  - iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl (Andreas Kübrich)
  - iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver (Pei Xiao)
  - iio: adc: ad9467: fix ad9434 vref mask (Tomas Melin)
  - of: fix reference count leak in of_alias_scan() (Weigang He)
  - leds: led-class: Only Add LED to leds_list when it is fully ready (Hans de Goede) [Orabug: 38931092] {CVE-2026-23101}
  - x86: make page fault handling disable interrupts properly (Cedric Xing)
  - net/sched: act_ife: avoid possible NULL deref (Eric Dumazet)
  - octeontx2-af: Fix error handling (Ratheesh Kannoth)
  - bonding: provide a net pointer to __skb_flow_dissect() (Eric Dumazet) [Orabug: 38970200] {CVE-2026-23119}
  - be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list (Andrey Vatoropin) [Orabug: 38930993] {CVE-2026-23084}
  - drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2) (Timur Kristóf)
  - drm/amd/pm: Don't clear SI SMC table when setting power limit (Timur Kristóf)
  - usbnet: limit max_mtu based on device's hard_mtu (Laurent Vivier)
  - ipv6: annotate data-race in ndisc_router_discovery() (Eric Dumazet) [Orabug: 38970223] {CVE-2026-23124}
  - mISDN: annotate data-race around dev->work (Eric Dumazet) [Orabug: 38970211] {CVE-2026-23121}
  - net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue (Jijie Shao)
  - net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M (Jijie Shao)
  - ALSA: usb: Increase volume range that triggers a warning (Arun Raghavan)
  - regmap: Fix race condition in hwspinlock irqsave routine (Cheng-Yu Lee) [Orabug: 38930931] {CVE-2026-23071}
  - iio: adc: ad7280a: handle spi_setup() errors in probe() (Pavel Zhigulin)
  - staging:iio:adc:ad7280a: Register define cleanup. (Jonathan Cameron)
  - x86/kfence: avoid writing L1TF-vulnerable PTEs (Andrew Cooper)
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Long Li)
  - Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA (Feng)
  - Input: i8042 - add quirks for MECHREVO Wujie 15X Pro (Gongqi)
  - Revert "nfc/nci: Add the inconsistency check between the input data length and count" (Thadeu Lima de Souza Cascardo)
  - w1: fix redundant counter decrement in w1_attach_slave_device() (Haoxiang Li)
  - comedi: dmm32at: serialize use of paged registers (Ian Abbott)
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Taeyang Lee) [Orabug: 38930875] {CVE-2026-23060}
  - net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag (Jamal Hadi Salim) [Orabug: 38931111] {CVE-2026-23105}
  - net/sched: Enforce that teql can only be used as root qdisc (Jamal Hadi Salim) [Orabug: 38930949] {CVE-2026-23074}
  - ipvlan: Make the addrs_lock be per port (Dmitry Skorodumov) [Orabug: 38931103] {CVE-2026-23103}
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Eric Dumazet) [Orabug: 38970203] {CVE-2026-23120}
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Kuniyuki Iwashima)
  - net: fou: use policy and operation tables generated from the spec (Jakub Kicinski)
  - net: fou: rename the source for linking (Jakub Kicinski)
  - netlink: add a proto specification for FOU (Jakub Kicinski)
  - gue: Fix skb memleak with inner IP protocol 0. (Kuniyuki Iwashima)
  - amd-xgbe: avoid misleading per-packet error log (Raju Rangoju)
  - sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT (Xin Long) [Orabug: 38970226] {CVE-2026-23125}
  - bonding: limit BOND_MODE_8023AD to Ethernet devices (Eric Dumazet) [Orabug: 38931080] {CVE-2026-23099}
  - net: usb: dm9601: remove broken SR9700 support (Ethan Nelson-Moore)
  - testptp: Add option to open PHC in readonly mode (Wojtek Wasko)
  - selftest/ptp: update ptp selftest to exercise the gettimex options (Mahesh Bandewar)
  - ptp: add testptp mask test (Xabier Marquiegui)
  - selftests/ptp: Add -X option for testing PTP_SYS_OFFSET_PRECISE (Alex Maftei)
  - selftests/ptp: Add -x option for testing PTP_SYS_OFFSET_EXTENDED (Alex Maftei)
  - testptp: Add support for testing ptp_clock_info .adjphase callback (Rahul Rameshbabu)
  - testptp: add option to shift clock by nanoseconds (Maciek Machnikowski)
  - ptp: Add PHC file mode checks. Allow RO adjtime() without FMODE_WRITE. (Wojtek Wasko)
  - posix-clock: Store file pointer in struct posix_clock_context (Wojtek Wasko)
  - Fix memory leak in posix_clock_open() (Linus Torvalds) [Orabug: 39004188] {CVE-2024-26655}
  - posix-clock: introduce posix_clock_context concept (Xabier Marquiegui)
  - btrfs: fix deadlock in wait_current_trans() due to ignored transaction type (Robbie Ko) [Orabug: 38930779] {CVE-2025-71194}
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Johan Hovold)
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Johan Hovold)
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Johan Hovold)
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Biju Das)
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Miaoqian Lin)
  - dmaengine: lpc18xx-dmamux: fix device leak on route allocation (Johan Hovold)
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Johan Hovold)
  - dmaengine: bcm-sba-raid: fix device leak on probe (Johan Hovold) [Orabug: 38914728] {CVE-2025-71190}
  - dmaengine: at_hdmac: fix device leak on of_dma_xlate() (Johan Hovold)
  - drm/vmwgfx: Fix an error return check in vmw_compat_shader_add() (Haoxiang Li)
  - drm/panel-simple: fix connector type for DataImage SCF0700C48GGU18 panel (Marek Vasut) [Orabug: 38930830] {CVE-2026-23049}
  - drm/nouveau/disp/nv50-: Set lock_core in curs507a_prepare (Lyude Paul)
  - mm/page_alloc: make percpu_pagelist_high_fraction reads lock-free (Aboorva Devarajan)
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Xiaochen Shen)
  - x86/resctrl: Add missing resctrl initialization for Hygon (Xiaochen Shen)
  - EDAC/i3200: Fix a resource leak in i3200_probe1() (Haoxiang Li)
  - EDAC/x38: Fix a resource leak in x38_probe1() (Haoxiang Li)
  - hrtimer: Fix softirq base check in update_needs_ipi() (Thomas Weißschuh)
  - ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref (Yangerkun) [Orabug: 38970601] {CVE-2026-23145}
  - nvme-pci: disable secondary temp for Wodposit WPBSNM8 (Ilikara Zheng)
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Ethan Nelson-Moore)
  - USB: serial: option: add Telit LE910 MBIM composition (Ulrich Mohr)
  - USB: OHCI/UHCI: Add soft dependencies on ehci_platform (Huacai Chen)
  - usb: dwc3: Check for USB4 IP_NAME (Thinh Nguyen)
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Wayne Chang)
  - phy: rockchip: inno-usb2: fix communication disruption in gadget mode (Luca Ceresoli)
  - phy: rockchip: inno-usb2: fix disconnection in gadget mode (Louis Chauvet)
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Dan Williams)
  - net: can: j1939: j1939_xtp_rx_rts_session_active(): deactivate session upon receiving the second rts (Tetsuo Handa) [Orabug: 38887710] {CVE-2026-22997}
  - ALSA: pcm: Improve the fix for race of buffer access at PCM OSS layer (Jaroslav Kysela)
  - HID: usbhid: paper over wrong bNumDescriptor field (Benjamin Tissoires)
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Xu Wang)
  - phy: broadcom: ns-usb3: Fix Wvoid-pointer-to-enum-cast warning (again) (Krzysztof Kozlowski)
  - phy: stm32-usphyc: Fix off by one in probe() (Dan Carpenter)
  - dmaengine: xilinx_dma: Fix uninitialized addr_width when "xlnx,addrwidth" property is missing (Suraj Gupta)
  - dmaengine: tegra-adma: Fix use-after-free (Sheetal)
  - mm, kfence: describe @slab parameter in __kfence_obj_info() (Bagas Sanjaya)
  - textsearch: describe @list member in ts_ops search (Bagas Sanjaya)
  - ASoC: tlv320adcx140: fix word length (Emil Svendsen)
  - net/sched: sch_qfq: do not free existing class in qfq_change_class() (Eric Dumazet) [Orabug: 38887718] {CVE-2026-22999}
  - selftests: drv-net: fix RPS mask handling for high CPU numbers (Gal Pressman)
  - net/mlx5e: Restore destroying state bit after profile cleanup (Saeed Mahameed)
  - vsock/test: add a final full barrier after run all tests (Stefano Garzarella)
  - ipv4: ip_gre: make ipgre_header() robust (Eric Dumazet) [Orabug: 38887758] {CVE-2026-23011}
  - macvlan: fix possible UAF in macvlan_forward_source() (Eric Dumazet) [Orabug: 38887730] {CVE-2026-23001}
  - net: update netdev_lock_{type,name} (Eric Dumazet)
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Eric Dumazet) [Orabug: 38887738] {CVE-2026-23003}
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (Shivam Kumar) [Orabug: 38887714] {CVE-2026-22998}
  - nvmet-tcp: remove boilerplate code (Maurizio Lombardi)
  - can: etas_es58x: allow partial RX URB allocation to succeed (Szymon Wilczek)
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Zilin Guan) [Orabug: 38914816] {CVE-2026-23038}
  - LTS version: v5.15.198 (Vijayendra Suman)
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED (Neil Brown)
  - NFS: unlink/rmdir shouldn't call d_delete() twice on ENOENT (Neil Brown)
  - efi/cper: Fix cper_bits_to_str buffer handling and return value (Dandan Zhang)
  - firmware: imx: scu-irq: Set mu_resource_id before get handle (Peng Fan)
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek)
  - ASoC: fsl_sai: Add missing registers to cache default (Alexander Stein)
  - can: j1939: make j1939_session_activate() fail if device is no longer registered (Tetsuo Handa) [Orabug: 38914675] {CVE-2025-71182}
  - powercap: fix sscanf() error return value handling (Sumeet Pawnikar)
  - powercap: fix race condition in register_control_type() (Sumeet Pawnikar)
  - blk-throttle: Set BIO_THROTTLED when bio has been throttled (Laibin Qiu)
  - pinctrl: qcom: lpass-lpi: mark the GPIO controller as sleeping (Bartosz Golaszewski)
  - pinctrl: qcom: lpass-lpi: Remove duplicate assignment of of_gpio_n_cells (Andy Shevchenko)
  - counter: interrupt-cnt: Drop IRQF_NO_THREAD flag (Alexander Sverdlin)
  - nfsd: provide locking for v4_end_grace (Neil Brown) [Orabug: 38887659] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Chuck Lever)
  - nfs_common: factor out nfs_errtbl and nfs_stat_to_errno (Mike Snitzer)
  - NFS: trace: show TIMEDOUT instead of 0x6e (Chen Hanxiao)
  - arp: do not assume dev_hard_header() does not change skb->head (Eric Dumazet) [Orabug: 39004363] {CVE-2026-22988}
  - net: usb: pegasus: fix memory leak in update_eth_regs_async() (Petko Manolov) [Orabug: 38914761] {CVE-2026-23021}
  - net/sched: sch_qfq: Fix NULL deref when deactivating inactive aggregate in qfq_reset (Xiang Mei) [Orabug: 38872325] {CVE-2026-22976}
  - HID: quirks: work around VID/PID conflict for appledisplay (René Rebe)
  - bnxt_en: Fix potential data corruption with HW GRO/LRO (Srijit Bose)
  - net/mlx5e: Don't print error message due to invalid module (Gal Pressman)
  - netdev: preserve NETIF_F_ALL_FOR_ALL across TSO updates (Di Zhu)
  - net: sock: fix hardened usercopy panic in sock_recv_errqueue (Weiming Shi) [Orabug: 38877947] {CVE-2026-22977}
  - inet: ping: Fix icmp out counting (Yuan Gao)
  - net: mscc: ocelot: Fix crash when adding interface under a lag (Jerry Wu)
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Alexandre Knecht)
  - net: marvell: prestera: fix NULL dereference on devlink_alloc() failure (Alok Tiwari)
  - netfilter: nf_conncount: update last_gc only when GC has been performed (Fernando Fernandez Mancera) [Orabug: 38970278] {CVE-2026-23139}
  - netfilter: nf_tables: fix memory leak in nf_tables_newrule() (Zilin Guan)
  - netfilter: nft_synproxy: avoid possible data-race on update operation (Fernando Fernandez Mancera)
  - ARM: dts: imx6q-ba16: fix RTC interrupt level (Ian Ray)
  - arm64: dts: add off-on-delay-us for usdhc2 regulator (Haibo Chen)
  - scsi: Revert "scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed" (Xingui Yang)
  - scsi: ipr: Enable/disable IRQD_NO_BALANCING during reset (Wen Xiong)
  - NFS: Fix up the automount fs_context to use the correct cred (Trond Myklebust)
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew)
  - alpha: don't reference obsolete termio struct for TC* constants (Sam James)
  - ARM: 9461/1: Disable HIGHPTE on PREEMPT_RT kernels (Sebastian Andrzej Siewior)
  - csky: fix csky_cmpxchg_fixup not working (Yang Li)
  - ext4: fix out-of-bound read in ext4_xattr_inode_dec_ref_all() (Ye Bin) [Orabug: 37844521] {CVE-2025-22121}
  - ext4: introduce ITAIL helper (Ye Bin)
  - libceph: make calc_target() set t->paused, not just clear it (Ilya Dryomov) [Orabug: 38930821] {CVE-2026-23047}
  - libceph: return the handler error from mon_handle_auth_done() (Ilya Dryomov) [Orabug: 38887697] {CVE-2026-22992}
  - libceph: make free_choose_arg_map() resilient to partial allocation (Tuo Li) [Orabug: 38887691] {CVE-2026-22991}
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (Ilya Dryomov) [Orabug: 38887685] {CVE-2026-22990}
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (Ziming Zhang) [Orabug: 38887673] {CVE-2026-22984}
  - wifi: avoid kernel-infoleak from struct iw_point (Eric Dumazet) [Orabug: 38887650] {CVE-2026-22978}
  - drm/pl111: Fix error handling in pl111_amba_probe (Miaoqian Lin)
  - lib/crypto: aes: Fix missing MMU protection for AES S-box (Eric Biggers)
  - mei: me: add nova lake point S DID (Alexander Usyskin)
  - net: 3com: 3c59x: fix possible null dereference in vortex_probe1() (Thomas Fourier) [Orabug: 38914755] {CVE-2026-23020}
  - atm: Fix dma_free_coherent() size (Thomas Fourier)
  - usb: gadget: lpc32xx_udc: fix clock imbalance in error path (Johan Hovold)
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (Su Hui) [Orabug: 39004163] {CVE-2024-40928}
  - firmware: arm_scmi: Fix unused notifier-block in unregister (Amitai Gottlieb)
  - ext4: fix error message when rejecting the default hash (Gabriel Krisman Bertazi)
  - ext4: factor out ext4_hash_info_init() (Jason Yan)
  - ext4: filesystems without casefold feature cannot be mounted with siphash (Lizhi Xu) [Orabug: 37206152] {CVE-2024-49968}
  - pwm: stm32: Always program polarity (Sean Nyekjaer)
  - x86: remove __range_not_ok() (Arnd Bergmann)
  - selftests: net: test_vxlan_under_vrf: fix HV connectivity test (Andrea Righi)
  - ipv4: Fix uninit-value access in __ip_make_skb() (Shigeru Yoshida) [Orabug: 36683410] {CVE-2024-36927}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Shigeru Yoshida) [Orabug: 36683284] {CVE-2024-36903}
  - KVM: arm64: sys_regs: disable -Wuninitialized-const-pointer warning (Justin Stitt)
  - HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern) [Orabug: 38334903] {CVE-2025-38556}
  - KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (Sean Christopherson) [Orabug: 37116451] {CVE-2024-46830}
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Dong Chenchen) [Orabug: 38152994] {CVE-2025-38129}
  - drm/i915/selftests: fix subtraction overflow bug (Andrzej Hajda)
  - mmc: core: use sysfs_emit() instead of sprintf() (Sergey Shtylyov)
  - net: Remove RTNL dance for SIOCBRADDIF and SIOCBRDELIF. (Thadeu Lima de Souza Cascardo) [Orabug: 37844500] {CVE-2025-22111}
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Thomas Zimmermann)
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jouni Malinen) [Orabug: 38852361] {CVE-2025-71127}
  - ASoC: stm32: sai: fix OF node leak on probe (Johan Hovold)
  - lockd: fix vfs_test_lock() calls (Neil Brown)
  - powerpc/pseries/cmm: adjust BALLOON_MIGRATE when migrating pages (David Hildenbrand)
  - mm/balloon_compaction: convert balloon_page_delete() to balloon_page_finalize() (David Hildenbrand)
  - mm/balloon_compaction: we cannot have isolated pages in the balloon list (David Hildenbrand)
  - mm/balloon_compaction: make balloon page compaction callbacks static (Miaohe Lin)
  - ASoC: stm32: sai: fix clk prepare imbalance on probe failure (Johan Hovold)
  - ASoC: stm32: sai: Use the devm_clk_get_optional() helper (Christophe Jaillet)
  - ASoC: stm: Use dev_err_probe() helper (Kuninori Morimoto)
  - r8169: fix RTL8117 Wake-on-Lan in DASH mode (René Rebe)
  - iommu/qcom: fix device leak on of_xlate() (Johan Hovold)
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Donet Tom)
  - PCI: brcmstb: Fix disabling L0s capability (Jim Quinlan)
  - powerpc/pseries/cmm: call balloon_devinfo_init() also without CONFIG_BALLOON_COMPACTION (David Hildenbrand)
  - media: renesas: rcar_drif: fix device node reference leak in rcar_drif_bond_enabled (Miaoqian Lin)
  - media: samsung: exynos4-is: fix potential ABBA deadlock on init (Marek Szyprowski)
  - NFSD: NFSv4 file creation neglects setting ACL (Chuck Lever) [Orabug: 38847872] {CVE-2025-68803}
  - media: verisilicon: Protect G2 HEVC decoder against invalid DPB index (Nicolas Dufresne)
  - media: vpif_capture: fix section mismatch (Johan Hovold)
  - media: mediatek: vcodec: Fix a reference leak in mtk_vcodec_fw_vpu_init() (Haoxiang Li)
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Joshua Rogers) [Orabug: 38852341] {CVE-2025-71120}
  - KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN (Jim Mattson)
  - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Shivani Agarwal) [Orabug: 38852312] {CVE-2025-71113}
  - svcrdma: bound check rq_pages index in inline path (Joshua Rogers) [Orabug: 38847976] {CVE-2025-71068}
  - ARM: dts: microchip: sama7g5: fix uart fifo size to 32 (Nicolas Ferre)
  - usb: ohci-nxp: fix device leak on probe failure (Johan Hovold)
  - usb: ohci-nxp: Use helper function devm_clk_get_enabled() (Zhang Zekun)
  - mptcp: pm: ignore unknown endpoint flags (Matthieu Baerts)
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Udipto Goswami)
  - f2fs: fix to avoid updating zero-sized extent in extent cache (Chao Yu)
  - f2fs: fix to propagate error from f2fs_enable_checkpoint() (Chao Yu)
  - f2fs: use global inline_xattr_slab instead of per-sb slab cache (Chao Yu)
  - f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() (Chao Yu)
  - xfs: fix a memory leak in xfs_buf_item_init() (Haoxiang Li)
  - KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit (Dongli Zhang)
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Chuck Lever)
  - ALSA: wavefront: Fix integer overflow in sample size validation (Junrui Luo)
  - ALSA: wavefront: Use standard print API (Takashi Iwai)
  - ALSA: wavefront: Clear substream pointers on close (Junrui Luo)
  - wifi: mt76: Fix DTS power-limits on little endian systems (Sven Eckelmann)
  - btrfs: don't rewrite ret from inode_permission (Josef Bacik)
  - tpm: Cap the number of PCR banks (Jarkko Sakkinen) [Orabug: 38848017] {CVE-2025-71077}
  - jbd2: fix the inconsistency between checksum and data in memory for journal sb (Ye Bin)
  - xhci: dbgtty: fix device unregister (Łukasz Bartosik)
  - xhci: dbgtty: use IDR to support several dbc instances. (Mathias Nyman)
  - usb: gadget: udc: fix use-after-free in usb_gadget_state_work (Jimmy Hu) [Orabug: 38773636] {CVE-2025-68282}
  - usb: xhci: Apply the link chain quirk on NEC isoc endpoints (Michał Pecio) [Orabug: 37844150] {CVE-2025-22022}
  - usb: xhci: move link chain bit quirk checks into one helper function. (Niklas Neronin)
  - drm/vmwgfx: Fix a null-ptr access in the cursor snooper (Zack Rusin) [Orabug: 38643537] {CVE-2025-40110}
  - virtio_console: fix order of fields cols and rows (Maximilian Immanuel Brandtner)
  - kbuild: Use CRC32 and a 1MiB dictionary for XZ compressed modules (Martin Nybo Andersen)
  - mm/damon/tests/core-kunit: handle memory alloc failure from damon_test_aggregate() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_regions_of() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle memory failure from damon_test_target() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_merge_two() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on dasmon_test_merge_regions_of() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle alloc failures on damon_test_split_at() (Seongjae Park)
  - mm/damon/tests/core-kunit: handle allocation failures in damon_test_regions() (Seongjae Park)
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_test_split_evenly_succ() (Seongjae Park)
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Zhu Yanjun) [Orabug: 38094814] {CVE-2025-38022}
  - mm/damon/tests/vaddr-kunit: handle alloc failures on damon_do_test_apply_three_regions() (Seongjae Park)
  - mm/damon/tests/vaddr-kunit: handle alloc failures in damon_test_split_evenly_fail() (Seongjae Park)
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Lyude Paul)
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Simon Richter) [Orabug: 38848052] {CVE-2025-71083}
  - drm/msm/a6xx: Fix out of bound IO access in a6xx_get_gmu_registers (Akhil P Oommen)
  - net: nfc: fix deadlock between nfc_unregister_device and rfkill_fop_write (Deepanshu Kartikey)
  - net: usb: sr9700: fix incorrect command used to write single register (Ethan Nelson-Moore)
  - nfsd: Drop the client reference in client_states_open() (Haoxiang Li)
  - fjes: Add missing iounmap in fjes_hw_init() (Haoxiang Li)
  - e1000: fix OOB in e1000_tbi_should_accept() (Guangshuo Li) [Orabug: 38848099] {CVE-2025-71093}
  - RDMA/cm: Fix leaking the multicast GID table reference (Jason Gunthorpe) [Orabug: 38848058] {CVE-2025-71084}
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Jason Gunthorpe) [Orabug: 38848117] {CVE-2025-71096}
  - idr: fix idr_alloc() returning an ID out of range (Matthew Wilcox)
  - media: i2c: adv7842: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: i2c: ADV7604: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: TDA1997x: Remove redundant cancel_delayed_work in probe (Duoming Zhou)
  - media: msp3400: Avoid possible out-of-bounds array accesses in msp3400c_thread() (Ivan Abramov)
  - media: cec: Fix debugfs leak on bus_register() failure (Xu Wang)
  - fbdev: tcx.c fix mem_map to correct smem_start offset (René Rebe)
  - fbdev: pxafb: Fix multiple clamped values in pxafb_adjust_timing (Thorsten Blum)
  - fbdev: gbefb: fix to use physical address instead of dma address (René Rebe)
  - dm-ebs: Mark full buffer dirty even on partial write (Uladzislau Rezki)
  - media: adv7842: Avoid possible out-of-bounds array accesses in adv7842_cp_log_status() (Ivan Abramov)
  - parisc: entry: set W bit for !compat tasks in syscall_restore_rfi() (Sven Schnelle)
  - parisc: entry.S: fix space adjustment on interruption for 64-bit userspace (Sven Schnelle)
  - media: rc: st_rc: Fix reset control resource leak (Xu Wang)
  - mfd: max77620: Fix potential IRQ chip conflict when probing two devices (Krzysztof Kozlowski)
  - mfd: altera-sysmgr: Fix device leak on sysmgr regmap lookup (Johan Hovold)
  - leds: leds-lp50xx: LP5009 supports 3 modules for a total of 9 LEDs (Christian Hitz)
  - leds: leds-lp50xx: Allow LED 0 to be added to module bank (Christian Hitz)
  - PCI/PM: Reinstate clearing state_saved in legacy and !PM codepaths (Lukas Wunner)
  - HID: logitech-dj: Remove duplicate error logging (Hans de Goede)
  - iommu/tegra: fix device leak on probe_device() (Johan Hovold)
  - iommu/sun50i: fix device leak on of_xlate() (Johan Hovold)
  - iommu/omap: fix device leaks on probe_device() (Johan Hovold)
  - iommu/mediatek: fix device leak on of_xlate() (Johan Hovold)
  - iommu/mediatek-v1: fix device leak on probe_device() (Johan Hovold)
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Johan Hovold)
  - iommu/exynos: fix device leak on of_xlate() (Johan Hovold)
  - iommu/apple-dart: fix device leak on of_xlate() (Johan Hovold)
  - ASoC: qcom: qdsp6: q6asm-dai: set 10 ms period and buffer alignment. (Srinivas Kandagatla)
  - ASoC: qcom: q6adm: the the copp device only during last instance (Srinivas Kandagatla)
  - ASoC: qcom: q6asm-dai: perform correct state check before closing (Srinivas Kandagatla)
  - ASoC: stm32: sai: fix device leak on probe (Johan Hovold)
  - selftests/ftrace: traceonoff_triggers: strip off names (Yipeng Zou)
  - RDMA/bnxt_re: fix dma_free_coherent() pointer (Thomas Fourier)
  - RDMA/rtrs: Fix clt_path::max_pages_per_mr calculation (Lihonggang)
  - RDMA/bnxt_re: Fix to use correct page size for PDE table (Kalesh Ap)
  - RDMA/bnxt_re: Fix IB_SEND_IP_CSUM handling in post_send (Alok Tiwari)
  - RDMA/bnxt_re: Fix incorrect BAR check in bnxt_qplib_map_creq_db() (Alok Tiwari)
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Jang Ingyu)
  - RDMA/efa: Remove possible negative shift (Michael Margolin)
  - RDMA/irdma: avoid invalid read in irdma_net_event (Michal Schmidt) [Orabug: 38852379] {CVE-2025-71133}
  - net: rose: fix invalid array index in rose_kill_by_device() (Pwnverse)
  - ipv4: Fix reference count leak when using error routes with nexthop objects (Ido Schimmel) [Orabug: 38848125] {CVE-2025-71097}
  - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (Will Rosenberg) [Orabug: 38848061] {CVE-2025-71085}
  - octeontx2-pf: fix "UBSAN: shift-out-of-bounds error" (Anshumali Gaur)
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Bagas Sanjaya)
  - net: usb: asix: validate PHY address before use (Deepanshu Kartikey) [Orabug: 38848107] {CVE-2025-71094}
  - net: dsa: b53: skip multicast entries for fdb_dump() (Jonas Gorski)
  - firewire: nosy: Fix dma_free_coherent() size (Thomas Fourier)
  - genalloc.h: fix htmldocs warning (Andrew Morton)
  - smc91x: fix broken irq-context in PREEMPT_RT (Levi Yun) [Orabug: 38852376] {CVE-2025-71132}
  - net: usb: rtl8150: fix memory leak on usb_submit_urb() failure (Deepakkumar Karn) [Orabug: 38887620] {CVE-2025-71154}
  - team: fix check for port enabled in team_queue_override_port_prio_changed() (Jiri Pirko) [Orabug: 38848088] {CVE-2025-71091}
  - platform/x86: ibm_rtl: fix EBDA signature search pointer arithmetic (Junrui Luo)
  - platform/x86: msi-laptop: add missing sysfs_remove_group() (Thomas Fourier)
  - ip6_gre: make ip6gre_header() robust (Eric Dumazet) [Orabug: 38848131] {CVE-2025-71098}
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Toke Høiland-Jørgensen)
  - net: mdio: aspeed: add dummy read to avoid read-after-write issue (Jacky Chou)
  - net: mdio: aspeed: move reg accessing part into separate functions (Potin Lai)
  - Bluetooth: btusb: revert use of devm_kzalloc in btusb (Raphael Pinsonneault-Thibeault) [Orabug: 38848044] {CVE-2025-71082}
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Herbert Xu) [Orabug: 38852370] {CVE-2025-71131}
  - iavf: fix off-by-one issues in iavf_config_rss_reg() (Kohei Enju) [Orabug: 38848073] {CVE-2025-71087}
  - i40e: Refactor argument of i40e_detect_recover_hung() (Ivan Vecera)
  - i40e: Refactor argument of several client notification functions (Ivan Vecera)
  - i40e: fix scheduling in set_rx_mode (Przemyslaw Korba)
  - hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU (Gui-Dong Han)
  - hwmon: (w83791d) Convert macros to functions to avoid TOCTOU (Gui-Dong Han) [Orabug: 38852300] {CVE-2025-71111}
  - hwmon: (max16065) Use local variable to avoid TOCTOU (Gui-Dong Han)
  - i2c: amd-mp2: fix reference leak in MP2 PCI device (Ma Ke)
  - rpmsg: glink: fix rpmsg device leak (Srinivas Kandagatla)
  - soc: amlogic: canvas: fix device leak on lookup (Johan Hovold)
  - soc: qcom: ocmem: fix device leak on lookup (Johan Hovold)
  - amba: tegra-ahb: Fix device leak on SMMU enable (Johan Hovold)
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Alex Deucher)
  - io_uring: fix filename leak in __io_openat_prep() (Prithvi Tambewagh)
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Joshua Rogers)
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Andy Shevchenko)
  - fsnotify: do not generate ACCESS/MODIFY events on child for special files (Amir Goldstein) [Orabug: 38847800] {CVE-2025-68788}
  - tracing: Do not register unsupported perf events (Steven Rostedt) [Orabug: 38852355] {CVE-2025-71125}
  - KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits (Sean Christopherson)
  - KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) (Sean Christopherson)
  - KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (Yosry Ahmed)
  - KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer (Fuqiang Wang) [Orabug: 38852273] {CVE-2025-71104}
  - KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() (Fuqiang Wang)
  - KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 (Sean Christopherson)
  - libceph: make decode_pool() more resilient against corrupted osdmaps (Ilya Dryomov) [Orabug: 38852325] {CVE-2025-71116}
  - parisc: Do not reprogram affinitiy on ASP chip (Helge Deller)
  - scs: fix a wrong parameter in __scs_magic (Zhichi Lin)
  - platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver (Tzung-Bi Shih)
  - ocfs2: fix kernel BUG in ocfs2_find_victim_chain (Prithvi Tambewagh) [Orabug: 38847688] {CVE-2025-68771}
  - media: vidtv: initialize local pointers upon transfer of memory ownership (Jeongjun Park)
  - tools/testing/nvdimm: Use per-DIMM device handle (Alison Schofield)
  - f2fs: fix return value of f2fs_recover_fsync_data() (Chao Yu)
  - f2fs: invalidate dentry cache on failed whiteout creation (Deepanshu Kartikey)
  - scsi: target: Reset t_task_cdb pointer in error case (Andrey Vatoropin) [Orabug: 38847770] {CVE-2025-68782}
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Dai Ngo)
  - scsi: aic94xx: fix use-after-free in device removal path (Junrui Luo) [Orabug: 38848009] {CVE-2025-71075}
  - scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" (Tony Battersby) [Orabug: 38847931] {CVE-2025-68818}
  - cpufreq: nforce2: fix reference count leak in nforce2 (Miaoqian Lin)
  - intel_th: Fix error handling in intel_th_output_open (Ma Ke)
  - char: applicom: fix NULL pointer dereference in ac_ioctl (Tianchu Chen)
  - usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() (Haoxiang Li)
  - usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe (Miaoqian Lin)
  - usb: phy: isp1301: fix non-OF device reference imbalance (Johan Hovold)
  - USB: lpc32xx_udc: Fix error handling in probe (Ma Ke)
  - phy: broadcom: bcm63xx-usbh: fix section mismatches (Johan Hovold)
  - media: pvrusb2: Fix incorrect variable used in trace message (Colin Ian King)
  - media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() (Jeongjun Park) [Orabug: 38847937] {CVE-2025-68819}
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Chenchangcheng)
  - media: v4l2-mem2mem: Fix outdated documentation (Laurent Pinchart)
  - jbd2: use a weaker annotation in journal handling (Byungchul Park)
  - ext4: fix incorrect group number assertion in mb_check_buddy (Yongjian Sun)
  - ext4: xattr: fix null pointer deref in ext4_raw_inode() (Karina Yankevich) [Orabug: 38848276] {CVE-2025-68820}
  - ktest.pl: Fix uninitialized var in config-bisect.pl (Steven Rostedt)
  - floppy: fix for PAGE_SIZE != 4KB (René Rebe)
  - block: rate-limit capacity change info log (Li Chen)
  - lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit (Eric Biggers)
  - mmc: sdhci-msm: Avoid early clock doubling during HS400 transition (Sarthak Garg)
  - KEYS: trusted: Fix a memory leak in tpm2_load_cmd (Jarkko Sakkinen) [Orabug: 38887597] {CVE-2025-71147}
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella)
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (Chia-Lin Kao)
  - nvme-fc: don't hold rport lock when putting ctrl (Daniel Wagner)
  - serial: sprd: Return -EPROBE_DEFER when uart clock is not ready (Wenhua Lin)
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Chenchangcheng)
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Hongyu Xie)
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Mark Pearson) [Orabug: 38852285] {CVE-2025-71108}
  - usbip: Fix locking bug in RT-enabled kernels (Lizhi Xu)
  - exfat: fix remount failure in different process environments (Yuezhang Mo)
  - via_wdt: fix critical boot hang due to unnamed resource allocation (Li Qiang) [Orabug: 38852318] {CVE-2025-71114}
  - scsi: qla2xxx: Use reinit_completion on mbx_intr_comp (Tony Battersby)
  - scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive (Tony Battersby)
  - scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled (Tony Battersby)
  - powerpc/addnote: Fix overflow on 32-bit builds (Ben Collins)
  - clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 (Josua Mayer)
  - ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx (Matthias Schiffer)
  - firmware: imx: scu-irq: Init workqueue before request mbox channel (Peng Fan)
  - ipmi: Fix __scan_channels() failing to rescan channels (Jinhui Guo)
  - ipmi: Fix the race between __scan_channels() and deliver_response() (Jinhui Guo)
  - ALSA: usb-mixer: us16x08: validate meter packet indices (Shipei Qu) [Orabug: 38847775] {CVE-2025-68783}
  - ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path (Xu Wang)
  - ALSA: vxpocket: Fix resource leak in vxpocket_probe error path (Xu Wang)
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Shaurya Rane) [Orabug: 38847724] {CVE-2025-68776}
  - mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig (Jared Kangas)
  - spi: fsl-cpm: Check length parity before switching to 16 bit mode (Christophe Leroy)
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Pengjie Zhang)
  - Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
  - Input: ti_am335x_tsc - fix off-by-one error in wire_order validation (Junjie Cao)
  - HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen (Ping Cheng)
  - net: hns3: add VLAN id validation before using (Jian Shen)
  - net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx (Jian Shen)
  - net: hns3: Align type of some variables with their print type (Hao Chen)
  - net: hns3: using the num_tqps in the vf driver to apply for resources (Jian Shen)
  - net/mlx5: fw_tracer, Handle escaped percent properly (Shay Drory)
  - net/mlx5: fw_tracer, Validate format string parameters (Shay Drory) [Orabug: 38847914] {CVE-2025-68816}
  - ethtool: Avoid overflowing userspace buffer on stats query (Gal Pressman) [Orabug: 38847826] {CVE-2025-68795}
  - net/ethtool/ioctl: split ethtool_get_phy_stats into multiple helpers (Daniil Tatianin)
  - net/ethtool/ioctl: remove if n_stats checks from ethtool_get_phy_stats (Daniil Tatianin)
  - ethtool: use phydev variable (Tom Rix)
  - nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() (Dan Carpenter)
  - net/sched: ets: Remove drr class from the active list if it changes to strict (Victor Nogueira) [Orabug: 38847910] {CVE-2025-68815}
  - caif: fix integer underflow in cffrml_receive() (Junrui Luo)
  - ipvs: fix ipv4 null-ptr-deref in route error path (Slavin Liu) [Orabug: 38847900] {CVE-2025-68813}
  - netfilter: nf_conncount: fix leaked ct in error paths (Fernando Fernandez Mancera) [Orabug: 38974757] {CVE-2025-71146}
  - broadcom: b44: prevent uninitialized value usage (Alexey Simakov)
  - net: openvswitch: fix middle attribute validation in push_nsh() action (Ilya Maximets) [Orabug: 38847784] {CVE-2025-68785}
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (Ido Schimmel)
  - mlxsw: spectrum_router: Fix neighbour use-after-free (Ido Schimmel)
  - ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() (Dmitry Skorodumov)
  - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (Jamal Hadi Salim) [Orabug: 38847965] {CVE-2025-71066}
  - netrom: Fix memory leak in nr_sendmsg() (Wang Liang)
  - Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE (Gongwei Li)
  - btrfs: scrub: always update btrfs_scrub_progress::last_physical (Qu Wenruo)
  - hfsplus: fix volume corruption issue for generic/073 (Viacheslav Dubeyko)
  - hfsplus: Verify inode mode when loading from disk (Tetsuo Handa)
  - hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create (Yang Chenzhi)
  - hfsplus: fix volume corruption issue for generic/070 (Viacheslav Dubeyko)
  - fs/ntfs3: Support timestamps prior to epoch (Konstantin Komarov)
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Song Liu)
  - cpufreq: s5pv210: fix refcount leak (Shuhao Fu)
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Sakari Ailus)
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Cryolitia Pukngae) [Orabug: 38852333] {CVE-2025-71118}
  - x86/ptrace: Always inline trivial accessors (Peter Zijlstra)
  - sched/deadline: only set free_cpus for online runqueues (Doug Berger) [Orabug: 38847753] {CVE-2025-68780}
  - btrfs: fix memory leak of fs_devices in degraded seed device path (Deepanshu Kartikey)
  - bpf, arm64: Do not audit capability check in do_jit() (Ondrej Mosnacek)
  - spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers (Vishwaroop A)
  - coresight: etm4x: Correct polling IDLE bit (Leo Yan)
  - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around (Nicklas Bo Jensen)
  - NFS: Fix missing unlock in nfs_unlink() (Sun Ke)
  - ASoC: fsl_xcvr: get channel status data when PHY is not exists (Shengjiu Wang)
  - ALSA: dice: fix buffer overflow in detect_stream_formats() (Junrui Luo) [Orabug: 38798767] {CVE-2025-68346}
  - usb: phy: Initialize struct usb_phy list_head (Diogo Ivo)
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Haotien Hsu)
  - ocfs2: fix memory leak in ocfs2_merge_rec_left() (Dmitry Antipov)
  - efi/cper: align ARM CPER type with UEFI 2.9A/2.10 specs (Mauro Carvalho Chehab)
  - efi/cper: Adjust infopfx size to accept an extra space (Mauro Carvalho Chehab)
  - efi/cper: Add a new helper function to print bitmasks (Mauro Carvalho Chehab)
  - dm log-writes: Add missing set_freezable() for freezable kthread (Xu Wang)
  - dm-raid: fix possible NULL dereference with undefined raid type (Alexey Simakov)
  - ARM: 9464/1: fix input-only operand modification in load_unaligned_zeropad() (Pangliyuan)
  - ALSA: uapi: Fix typo in asound.h comment (Andres J Rosa)
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Dave Kleikamp)
  - blk-mq: Abort suspend when wakeup events are pending (Cong Zhang)
  - ASoC: ak5558: Disable regulator when error happens (Shengjiu Wang)
  - ASoC: ak4458: Disable regulator when error happens (Shengjiu Wang)
  - ASoC: bcm: bcm63xx-pcm-whistler: Check return value of of_dma_configure() (Xu Wang)
  - platform/x86: asus-wmi: use brightness_set_blocking() for kbd led (Anton Khirnov)
  - fs/nls: Fix inconsistency between utf8_to_utf32() and utf32_to_utf8() (Armin Wolf)
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Trond Myklebust) [Orabug: 38818237] {CVE-2025-68764}
  - fs_context: drop the unused lsm_flags member (Ondrej Mosnacek)
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Trond Myklebust)
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Trond Myklebust)
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Trond Myklebust)
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Jonathan Curley) [Orabug: 38798775] {CVE-2025-68349}
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Trond Myklebust)
  - NFS: Fix the verifier for case sensitive filesystem in nfs_atomic_open() (Trond Myklebust)
  - NFSv4: Add some support for case insensitive filesystems (Trond Myklebust)
  - fs/nls: Fix utf16 to utf8 conversion (Armin Wolf)
  - NFS: Avoid changing nlink when file removes and attribute updates race (Trond Myklebust)
  - NFS: don't unhash dentry during unlink/rename (Neil Brown)
  - NFS: Label the dentry with a verifier in nfs_rmdir() and nfs_unlink() (Trond Myklebust)
  - fbdev: ssd1307fb: fix potential page leak in ssd1307fb_probe() (Abdun Nihaal)
  - pinctrl: single: Fix incorrect type for error return variable (Xu Wang)
  - pinctrl: single: Fix PIN_CONFIG_BIAS_DISABLE handling (Matthijs Kooijman)
  - perf tools: Fix split kallsyms DSO counting (Namhyung Kim)
  - remoteproc: qcom_q6v5_wcss: fix parsing of qcom,halt-regs (Alexandru Gagniuc)
  - mtd: lpddr_cmds: fix signed shifts in lpddr_cmds (Ivan Stepchenko)
  - net: stmmac: fix rx limit check in stmmac_rx_zc() (Alexey Kodanev)
  - netfilter: nft_connlimit: update the count if add was skipped (Fernando Fernandez Mancera)
  - netfilter: nf_conncount: rework API to use sk_buff directly (Fernando Fernandez Mancera)
  - netfilter: nf_conncount: reduce unnecessary GC (William Tu)
  - netfilter: flowtable: check for maximum number of encapsulations in bridge vlan (Pablo Neira Ayuso)
  - regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex (Sparkhuang) [Orabug: 38798787] {CVE-2025-68354}
  - ASoC: Intel: catpt: Fix error path in hw_params() (Cezary Rojewski)
  - virtio: fix virtqueue_set_affinity() docs (Michael S. Tsirkin)
  - virtio_vdpa: fix misleading return in void function (Alok Tiwari)
  - ext4: improve integrity checking in __mb_check_buddy by enhancing order-0 validation (Yongjian Sun)
  - ext4: remove unused return value of __mb_check_buddy (Kemeng Shi)
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (René Rebe)
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Dan Carpenter)
  - ASoC: fsl_xcvr: clear the channel status control memory (Shengjiu Wang)
  - ASoC: fsl_xcvr: Add support for i.MX93 platform (Chancel Liu)
  - ASoC: fsl_xcvr: Add Counter registers (Shengjiu Wang)
  - RDMA/irdma: Fix data race in irdma_free_pble (Krzysztof Czurylo)
  - RDMA/irdma: Fix data race in irdma_sc_ccq_arm (Krzysztof Czurylo)
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Stephan Gerhold)
  - backlight: lp855x: Fix lp855x.h kernel-doc warnings (Randy Dunlap)
  - backlight: led-bl: Add devlink to supplier LEDs (Luca Ceresoli)
  - backlight: led_bl: Take led_access lock when required (Mans Rullgard)
  - wifi: ieee80211: correct FILS status codes (Ria Thomas)
  - PCI: dwc: Fix wrong PORT_LOGIC_LTSSM_STATE_MASK definition (Shawn Lin)
  - staging: fbtft: core: fix potential memory leak in fbtft_probe_common() (Jianglei Nie)
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Zilin Guan)
  - crypto: ccree - Correctly handle return of sg_nents_for_len (Xu Wang)
  - selftests/bpf: Improve reliability of test_perf_branches_no_hw() (Matt Bobrowski)
  - selftests/bpf: skip test_perf_branches_hw() on unsupported platforms (Matt Bobrowski)
  - usb: dwc2: fix hang during suspend if set as peripheral (Jisheng Zhang)
  - usb: dwc2: fix hang during shutdown if set as peripheral (Jisheng Zhang)
  - usb: dwc2: disable platform lowlevel hw resources during shutdown (Jisheng Zhang)
  - usb: chaoskey: fix locking for O_NONBLOCK (Oliver Neukum)
  - ima: Handle error code returned by ima_filter_rule_match() (Zhao Yipeng) [Orabug: 38798922] {CVE-2025-68740}
  - wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() (Seungjin Bae) [Orabug: 38798815] {CVE-2025-68362}
  - mfd: mt6358-irq: Fix missing irq_domain_remove() in error path (Xu Wang)
  - mfd: mt6397-irq: Fix missing irq_domain_remove() in error path (Xu Wang)
  - pwm: bcm2835: Make sure the channel is enabled after pwm_request() (Uwe Kleine-König)
  - drm/mediatek: Fix CCORR mtk_ctm_s31_32_to_s1_n function issue (Jay Liu)
  - fs/ntfs3: Prevent memory leaks in add sub record (Edward Adam Davis)
  - fs/ntfs3: out1 also needs to put mi (Edward Adam Davis)
  - fs/ntfs3: Make ni_ins_new_attr return error (Konstantin Komarov)
  - fs/ntfs3: Add new argument is_mft to ntfs_mark_rec_free (Konstantin Komarov)
  - fs/ntfs3: Remove unused mi_mark_free (Konstantin Komarov)
  - powerpc/64s/ptdump: Fix kernel_hash_pagetable dump for ISA v3.00 HPTE format (Ritesh Harjani)
  - wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() (Abdun Nihaal) [Orabug: 38818222] {CVE-2025-68759}
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Sergey Bashirov)
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Xu Wang)
  - watchdog: wdat_wdt: Stop watchdog when uninstalling module (Liu Xinpeng)
  - selftests/bpf: Fix failure paths in send_signal test (Alexei Starovoitov)
  - ps3disk: use memcpy_{from,to}_bvec index (René Rebe)
  - PCI: keystone: Exit ks_pcie_probe() for invalid mode (Siddharth Vadapalli)
  - leds: netxbig: Fix GPIO descriptor leak in error paths (Xu Wang)
  - scsi: sim710: Fix resource leak by adding missing ioport_unmap() calls (Xu Wang)
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Xu Wang)
  - ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() (Dmitry Antipov) [Orabug: 38798824] {CVE-2025-68364}
  - lib/vsprintf: Check pointer before dereferencing in time_and_date() (Andy Shevchenko)
  - clk: renesas: r9a06g032: Fix memory leak in error path (Xu Wang)
  - coresight: etm4x: Add context synchronization before enabling trace (Leo Yan)
  - coresight: etm4x: Extract the trace unit controlling (Leo Yan)
  - coresight-etm4x: add isb() before reading the TRCSTATR (Yuanfang Zhang)
  - coresight: etm4x: Use Trace Filtering controls dynamically (Suzuki K Poulose)
  - coresight: etm4x: Save restore TRFCR_EL1 (Suzuki K Poulose)
  - nbd: defer config unlock in nbd_genl_connect (Zheng Qixing) [Orabug: 38798833] {CVE-2025-68366}
  - wifi: cw1200: Fix potential memory leak in cw1200_bh_rx_helper() (Abdun Nihaal)
  - macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse (Long Li) [Orabug: 38798838] {CVE-2025-68367}
  - powerpc/32: Fix unpaired stwcx. on interrupt exit (Christophe Leroy)
  - RDMA/rtrs: server: Fix error handling in get_or_create_srv (Ma Ke)
  - dt-bindings: PCI: amlogic: Fix the register name of the DBI region (Manivannan Sadhasivam)
  - dt-bindings: PCI: convert amlogic,meson-pcie.txt to dt-schema (Neil Armstrong)
  - scsi: stex: Fix reboot_notifier leak in probe error path (Xu Wang)
  - nbd: defer config put in recv_work (Zheng Qixing) [Orabug: 38798851] {CVE-2025-68372}
  - nbd: partition nbd_read_stat() into nbd_read_reply() and nbd_handle_reply() (Yu Kuai)
  - nbd: clean up return value checking of sock_xmit() (Yu Kuai)
  - regulator: core: disable supply if enabling main regulator fails (Gabor Juhos)
  - perf/x86/intel: Correct large PEBS flag check (Dapeng Mi)
  - ext4: correct the checking of quota files before moving extents (Zhang Yi)
  - ext4: minor defrag code improvements (Eric Whitney)
  - mfd: da9055: Fix missing regmap_del_irq_chip() in error path (Xu Wang)
  - spi: tegra210-quad: Fix timeout handling (Vishwaroop A) [Orabug: 38798944] {CVE-2025-68746}
  - spi: tegra210-quad: modify chip select (CS) deactivation (Vishwaroop A)
  - scsi: target: Do not write NUL characters into ASCII configfs output (Bart Van Assche)
  - power: supply: apm_power: only unset own apm_get_power_status (Ahelenia Ziemiańska)
  - power: supply: wm831x: Check wm831x_set_bits() return value (Ivan Abramov)
  - i3c: master: svc: Prevent incomplete IBI transaction (Stanley Chu)
  - i3c: fix refcount inconsistency in i3c_master_register (Frank Li)
  - pinctrl: stm32: fix hwspinlock resource leak in probe function (Xu Wang)
  - x86/dumpstack: Prevent KASAN false positive warnings in __show_regs() (Tengda Wu)
  - x86: kmsan: don't instrument stack walking functions (Alexander Potapenko)
  - kmsan: introduce __no_sanitize_memory and __no_kmsan_checks (Alexander Potapenko)
  - compiler-gcc.h: Define __SANITIZE_ADDRESS__ under hwaddress sanitizer (Kees Cook)
  - sctp: Defer SCTP_DBG_OBJCNT_DEC() to sctp_destroy_sock(). (Kuniyuki Iwashima)
  - phy: mscc: Fix PTP for VSC8574 and VSC8572 (Horatiu Vultur)
  - firmware: imx: scu-irq: fix OF node leak in (Peng Fan)
  - s390/ap: Don't leak debug feature files if AP instructions are not available (Heiko Carstens)
  - s390/smp: Fix fallback CPU detection (Heiko Carstens)
  - crypto: hisilicon/qm - restore original qos values (Nieweiqiang)
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (Thorsten Blum) [Orabug: 38798875] {CVE-2025-68724}
  - uio: uio_fsl_elbc_gpcm:: Add null pointer check to uio_fsl_elbc_gpcm_probe (Li Qiang)
  - arm64: dts: imx8mm-venice-gw72xx: remove unused sdhc1 pinctrl (Tim Harvey)
  - iio: imu: st_lsm6dsx: Fix measurement unit for odr struct member (Francesco Lavra)
  - iio: imu: st_lsm6dsx: discard samples during filters settling time (Lorenzo Bianconi)
  - iio: imu: st_lsm6dsx: introduce st_lsm6dsx_device_set_enable routine (Lorenzo Bianconi)
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Luoxuanqiang)
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Luoxuanqiang)
  - ntfs3: Fix uninit buffer allocated by __getname() (Sidharth Seela)
  - ntfs3: fix uninit memory after failed mi_read in mi_format_new (Raphael Pinsonneault-Thibeault)
  - irqchip/qcom-irq-combiner: Fix section mismatch (Johan Hovold)
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Seungjin Bae)
  - drm/vgem-fence: Fix potential deadlock on release (Janusz Krzysztofik) [Orabug: 38818212] {CVE-2025-68757}
  - drm/panel: visionox-rm69299: Don't clear all mode flags (Guido Günther)
  - gpu: host1x: Fix race in syncpt alloc/free (Mainak Sen) [Orabug: 38798899] {CVE-2025-68732}
  - smack: fix bug: unprivileged task can create labels (Konstantin Andreev)
  - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing (Navaneeth K) [Orabug: 38773544] {CVE-2025-68254}
  - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing (Navaneeth K) [Orabug: 38773554] {CVE-2025-68255}
  - comedi: check device's attached status in compat ioctls (Nikita Zhandarovich)
  - comedi: multiq3: sanitize config options in multiq3_attach() (Nikita Zhandarovich)
  - comedi: c6xdigio: Fix invalid PNP driver unregistration (Ian Abbott)
  - HID: elecom: Add support for ELECOM M-XT3URBK (018F) (Naoki Ueki)
  - platform/x86: huawei-wmi: add keys for HONOR models (Ston Jia)
  - platform/x86: acer-wmi: Ignore backlight event (Armin Wolf)
  - pinctrl: qcom: msm: Fix deadlock in pinmux configuration (Praveen Talari)
  - bfs: Reconstruct file type when loading from disk (Tetsuo Handa)
  - spi: imx: keep dma request disabled before dma transfer setup (Robin Gong)
  - spi: xilinx: increase number of retries before declaring stall (Alvaro Gamez Machado)
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Johan Hovold)
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Johan Hovold)
  - serial: add support of CPCI cards (Magne Bruno)
  - USB: serial: ftdi_sio: match on interface number for jtag (Johan Hovold)
  - USB: serial: option: move Telit 0x10c7 composition in the right place (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions (Fabio Porcedda)
  - USB: serial: option: add Foxconn T99W760 (Slark Xiao)
  - comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel() (Nikita Zhandarovich)
  - ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() (Alexey Nepomnyashih) [Orabug: 38773587] {CVE-2025-68261}
  - locking/spinlock/debug: Fix data-race in do_raw_write_lock (Alexander Sverdlin)
  - ext4: refresh inline data size before write operations (Deepanshu Kartikey) [Orabug: 38773603] {CVE-2025-68264}
  - jbd2: avoid bug_on in jbd2_journal_get_create_access() when file system corrupted (Ye Bin) [Orabug: 38792633] {CVE-2025-68337}
  - Documentation: process: Also mention Sasha Levin as stable tree maintainer (Bagas Sanjaya)
  - leds: spi-byte: Use devm_led_classdev_register_ext() (Stefan Kalscheuer)
  - leds: Replace all non-returning strlcpy with strscpy (Azeem Shaikh)
  - drm/i915/selftests: Fix inconsistent IS_ERR and PTR_ERR (Kai Song)
  - dpaa2-mac: bail if the dpmacs fwnode is not found (Robert-Ionut Alexa)
  - xfrm: flush all states in xfrm_state_fini (Sabrina Dubroca)
  - xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added (Sabrina Dubroca) [Orabug: 39004269] {CVE-2025-40256}
  - Revert "xfrm: destroy xfrm_state synchronously on net exit path" (Sabrina Dubroca)


author: Samasth Norway Ananda <samasth.norway.ananda@oracle.com> [5.15.0-318.199.2.el8uek]
changelog:
  - drivers/soc/pensando/penfw: Add support for pcie serdes fw download. (Hiren Mehta) [Orabug: 38953591]
  - arm64: pensando: Add support for kpcimgr dynamic event queue (Rob Gardner) [Orabug: 38928823]
  - procfs: move dropping pde and pid from ->evict_inode() to ->free_inode() (Al Viro) [Orabug: 38945002]
  - ext4/jbd2: skip sb flush when EIO happened (Wengang Wang) [Orabug: 38188749]
  - jbd2: store more accurate errno in superblock when possible (Wengang Wang) [Orabug: 38188749]
  - Revert "IB/mlx5: Implement clear counters" (Sharath Srinivasan) [Orabug: 38923519]
  - Revert "IB/core: Implement clear counters" (Sharath Srinivasan) [Orabug: 38923519]
  - Revert "IB/core: Fix off-by-one attr index in setup_hw_port_stats" (Sharath Srinivasan) [Orabug: 38923519]
  - drivers/soc/pensando/bsm: Fix various issues with secure-mode. (Hiren Mehta) [Orabug: 38944299]
  - net/rds: wait_event_timeout until zero connections during rmmod (Sharath Srinivasan) [Orabug: 38928274]
  - net/rds: rds_send_xmit should INIT_LIST_HEAD(&to_be_dropped) on restart (Sharath Srinivasan) [Orabug: 38928272]
  - net/rds: fix rds_message memleak in rds_send_queue_rm (Sharath Srinivasan) [Orabug: 38928270]
  - net/rds: fix rds_message memleak in rds_send_xmit (Sharath Srinivasan) [Orabug: 38923496]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-318.199.3.el8uek]
changelog:
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Kang Chen)
  - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Breno Leitao) [Orabug: 38970594] {CVE-2026-23202}
  - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Breno Leitao)
  - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Breno Leitao)
  - x86/kfence: fix booting on 32bit non-PAE systems (Andrew Cooper)
  - KVM: x86: Don't snapshot "max" TSC if host TSC is constant (Sean Christopherson) [Orabug: 38966500]
  - KVM: x86: Accept KVM_[GS]ET_TSC_KHZ as a VM ioctl. (David Woodhouse) [Orabug: 38966500]
  - sfc: fix NULL dereferences in ef100_process_design_param() (Edward Cree) [Orabug: 37855346] {CVE-2025-37860}
  - Revert "net/rds: fix crash by expanding kref coverage to rds_incoming.i_conn" (Sharath Srinivasan) [Orabug: 38937481]
  - Revert "net/rds: expand kref coverage to rds_notifier->n_conn" (Sharath Srinivasan) [Orabug: 38937481]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-318.199.3.1.el8uek]
changelog:
  - nvme-pci: fix stuck reset on concurrent DPC and HP (Keith Busch)  [Orabug: 39026355]
  - nvme: cancel pending I/O if nvme controller is in terminal state (Nilay Shroff)  [Orabug: 39026355]
  - nvme-pci: fix queue unquiesce check on slot_reset (Keith Busch)  [Orabug: 39026355]
  - nvme: ensure disabling pairs with unquiesce (Keith Busch)  [Orabug: 39026355]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-318.199.3.2.el8uek]
changelog:
  - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Eric Dumazet)  [Orabug: 39057366]  
  - macvlan: fix error recovery in macvlan_common_newlink() (Eric Dumazet)  [Orabug: 39057366]  {CVE-2026-23209} 
  - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (Andrew Fasano)  [Orabug: 39057346]  {CVE-2026-23111} 
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Menglong Dong)  [Orabug: 39055945]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.60.1.el8uek]
changelog:
  - net: mana: Add the Linux MANA PF driver (Dexuan Cui)  [Orabug: 34405108]  
  - rds: cong: Make rds_cong_wait an array to reduce lock contention (Håkon Bugge)  [Orabug: 34488341]  
  - rds: cong: Make rs_cong_notify and rs_cong_mask atomic64_t (Håkon Bugge)  [Orabug: 34488341]  
  - Revert "cgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()" (Imran Khan)  [Orabug: 34620700]  
  - Revert "cgroup: Fix threadgroup_rwsem <-> cpus_read_lock() deadlock" (Imran Khan)  [Orabug: 34620700]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.2.el8uek]
changelog:
  - LTS version: v5.15.70 (Jack Vogel)   
  - ALSA: hda/sigmatel: Fix unused variable warning for beep power change (Takashi Iwai)   
  - KVM: SEV: add cache flush to solve SEV cache incoherency issues (Mingwei Zhang)   
  - net: Find dst with sk's xfrm policy not ctl_sk (sewookseo)   
  - video: fbdev: pxa3xx-gcu: Fix integer overflow in pxa3xx_gcu_write (Hyunwoo Kim)   
  - mksysmap: Fix the mismatch of 'L0' symbols in System.map (Youling Tang)   
  - drm/panfrost: devfreq: set opp to the recommended one to configure regulator (Clément Péron)   
  - MIPS: OCTEON: irq: Fix octeon_irq_force_ciu_mapping() (Alexander Sverdlin)   
  - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (David Howells)   
  - net: usb: qmi_wwan: add Quectel RM520N (jerry.meng)   
  - ALSA: hda/tegra: Align BDL entry to 4KB boundary (Mohan Kumar)   
  - ALSA: hda/sigmatel: Keep power up while beep is enabled (Takashi Iwai)   
  - wifi: mac80211_hwsim: check length for virtio packets (Soenke Huster)   
  - rxrpc: Fix calc of resend age (David Howells)   
  - rxrpc: Fix local destruction being repeated (David Howells)   
  - scsi: lpfc: Return DID_TRANSPORT_DISRUPTED instead of DID_REQUEUE (Hannes Reinecke)   
  - regulator: pfuze100: Fix the global-out-of-bounds access in pfuze100_regulator_probe() (Xiaolei Wang)   
  - ASoC: nau8824: Fix semaphore unbalance at error paths (Takashi Iwai)   
  - arm64: dts: juno: Add missing MHU secure-irq (Jassi Brar)   
  - video: fbdev: i740fb: Error out if 'pixclock' equals zero (Zheyu Ma)   
  - binder: remove inaccurate mmap_assert_locked() (Carlos Llamas)   
  - drm/amdgpu: move nbio sdma_doorbell_range() into sdma code for vega (Alex Deucher)   
  - drm/amdgpu: move nbio ih_doorbell_range() into ih code for vega (Alex Deucher)   
  - drm/amdgpu: Don't enable LTR if not supported (Lijo Lazar)   
  - tools/include/uapi: Fix <asm/errno.h> for parisc and xtensa (Ben Hutchings)   
  - parisc: Allow CONFIG_64BIT with ARCH=parisc (Helge Deller)   
  - cifs: always initialize struct msghdr smb_msg completely (Stefan Metzmacher)   
  - cifs: don't send down the destination address to sendmsg for a SOCK_STREAM (Stefan Metzmacher)   
  - cifs: revalidate mapping when doing direct writes (Ronnie Sahlberg)   
  - of/device: Fix up of_dma_configure_id() stub (Thierry Reding)   
  - parisc: ccio-dma: Add missing iounmap in error path in ccio_probe() (Yang Yingliang)   
  - block: blk_queue_enter() / __bio_queue_enter() must return -EAGAIN for nowait (Stefan Roesch)   
  - drm/meson: Fix OSD1 RGB to YCbCr coefficient (Stuart Menefy)   
  - drm/meson: Correct OSD1 global alpha value (Stuart Menefy)   
  - gpio: mpc8xxx: Fix support for IRQ_TYPE_LEVEL_LOW flow_type in mpc85xx (Pali Rohár)   
  - NFSv4: Turn off open-by-filehandle and NFS re-export for NFSv4.0 (Trond Myklebust)   
  - pinctrl: sunxi: Fix name for A100 R_PIO (Michael Wu)   
  - pinctrl: rockchip: Enhance support for IRQ_TYPE_EDGE_BOTH (João H. Spies)   
  - pinctrl: qcom: sc8180x: Fix wrong pin numbers (Molly Sophia)   
  - pinctrl: qcom: sc8180x: Fix gpio_wakeirq_map (Molly Sophia)   
  - of: fdt: fix off-by-one error in unflatten_dt_nodes() (Sergey Shtylyov)   
  - tty: serial: atmel: Preserve previous USART mode if RS485 disabled (Sergiu Moga)   
  - serial: atmel: remove redundant assignment in rs485_config (Lino Sanfilippo)   
  - drm/tegra: vic: Fix build warning when CONFIG_PM=n (YueHaibing)   
  - LTS version: v5.15.69 (Jack Vogel)   
  - Input: goodix - add compatible string for GT1158 (Jarrah Gosbell)   
  - RDMA/irdma: Use s/g array in post send only when its valid (Sindhu-Devale)   
  - usb: gadget: f_uac2: fix superspeed transfer (Jing Leng)   
  - usb: gadget: f_uac2: clean up some inconsistent indenting (Colin Ian King)   
  - soc: fsl: select FSL_GUTS driver for DPIO (Mathew McBride)   
  - mm: Fix TLB flush for not-first PFNMAP mappings in unmap_region() (Jann Horn)   
  - usb: storage: Add ASUS <0x0b05:0x1932> to IGNORE_UAS (Hu Xiaoying)   
  - platform/x86: acer-wmi: Acer Aspire One AOD270/Packard Bell Dot keymap fixes (Hans de Goede)   
  - perf/arm_pmu_platform: fix tests for platform_get_irq() failure (Yu Zhe)   
  - net: dsa: hellcreek: Print warning only once (Kurt Kanzenbach)   
  - drm/amd/amdgpu: skip ucode loading if ucode_size == 0 (Chengming Gui)   
  - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (Maurizio Lombardi)   
  - Input: iforce - add support for Boeder Force Feedback Wheel (Greg Tulli)   
  - ieee802154: cc2520: add rc code in cc2520_tx() (Li Qiong)   
  - gpio: mockup: remove gpio debugfs when remove device (Wei Yongjun)   
  - tg3: Disable tg3 device on system reboot to avoid triggering AER (Kai-Heng Feng)   
  - hid: intel-ish-hid: ishtp: Fix ishtp client sending disordered message (Even Xu)   
  - HID: ishtp-hid-clientHID: ishtp-hid-client: Fix comment typo (Jason Wang)   
  - dt-bindings: iio: gyroscope: bosch,bmg160: correct number of pins (Krzysztof Kozlowski)   
  - drm/msm/rd: Fix FIFO-full deadlock (Rob Clark)   
  - platform/surface: aggregator_registry: Add support for Surface Laptop Go 2 (Maximilian Luz)   
  - Input: goodix - add support for GT1158 (Ondrej Jirman)   
  - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (Lu Baolu)   
  - tracefs: Only clobber mode/uid/gid on remount if asked (Brian Norris)   
  - tracing: hold caller_addr to hardirq_{enable,disable}_ip (Yipeng Zou)   
  - task_stack, x86/cea: Force-inline stack helpers (Borislav Petkov)   
  - x86/mm: Force-inline __phys_addr_nodebug() (Borislav Petkov)   
  - lockdep: Fix -Wunused-parameter for _THIS_IP_ (Nick Desaulniers)   
  - ARM: dts: at91: sama7g5ek: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: dts: at91: fix low limit for CPU regulator (Claudiu Beznea)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix spi-flash compatible (Marco Felsch)   
  - ARM: dts: imx: align SPI NOR node name with dtschema (Krzysztof Kozlowski)   
  - ACPI: resource: skip IRQ override on AMD Zen platforms (Chuanhong Guo)   
  - NFS: Fix WARN_ON due to unionization of nfs_inode.nrequests (Dave Wysochanski)   
  - LTS version: v5.15.68 (Jack Vogel)   
  - ARM: at91: ddr: remove CONFIG_SOC_SAMA7 dependency (Claudiu Beznea)   
  - perf machine: Use path__join() to compose a path instead of snprintf(dir, '/', filename) (Arnaldo Carvalho de Melo)   
  - drm/bridge: display-connector: implement bus fmts callbacks (Neil Armstrong)   
  - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (Ionela Voinescu)   
  - iommu/vt-d: Correctly calculate sagaw value of IOMMU (Lu Baolu)   
  - arm64/bti: Disable in kernel BTI when cross section thunks are broken (Mark Brown)   
  - Revert "arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags"" (Sasha Levin)   
  - hwmon: (mr75203) enable polling for all VM channels (Eliav Farber)   
  - hwmon: (mr75203) fix multi-channel voltage reading (Eliav Farber)   
  - hwmon: (mr75203) fix voltage equation for negative source input (Eliav Farber)   
  - hwmon: (mr75203) update pvt->v_num and vm_num to the actual number of used sensors (Eliav Farber)   
  - hwmon: (mr75203) fix VM sensor allocation when "intel,vm-map" not defined (Eliav Farber)   
  - s390/boot: fix absolute zero lowcore corruption on boot (Alexander Gordeev)   
  - iommu/amd: use full 64-bit value in build_completion_wait() (John Sperbeck)   
  - swiotlb: avoid potential left shift overflow (Chao Gao)   
  - i40e: Fix ADQ rate limiting for PF (Przemyslaw Patynowski)   
  - i40e: Refactor tc mqprio checks (Przemyslaw Patynowski)   
  - kbuild: disable header exports for UML in a straightforward way (Masahiro Yamada)   
  - MIPS: loongson32: ls1c: Fix hang during startup (Yang Ling)   
  - ASoC: mchp-spdiftx: Fix clang -Wbitfield-constant-conversion (Nathan Chancellor)   
  - ASoC: mchp-spdiftx: remove references to mchp_i2s_caps (Claudiu Beznea)   
  - hwmon: (tps23861) fix byte order in resistance register (Alexandru Gagniuc)   
  - perf script: Fix Cannot print 'iregs' field for hybrid systems (Zhengjun Xing)   
  - sch_sfb: Also store skb len before calling child enqueue (Toke Høiland-Jørgensen)   
  - RDMA/irdma: Report RNR NAK generation in device caps (Sindhu-Devale)   
  - RDMA/irdma: Return correct WC error for bind operation failure (Sindhu-Devale)   
  - RDMA/irdma: Report the correct max cqes from query device (Sindhu-Devale)   
  - nvmet: fix mar and mor off-by-one errors (Dennis Maisenbacher)   
  - tcp: fix early ETIMEDOUT after spurious non-SACK RTO (Neal Cardwell)   
  - nvme-tcp: fix regression that causes sporadic requests to time out (Sagi Grimberg)   
  - nvme-tcp: fix UAF when detecting digest errors (Sagi Grimberg)   
  - erofs: fix pcluster use-after-free on UP platforms (Gao Xiang)   
  - RDMA/mlx5: Set local port to one when accessing counters (Chris Mi)   
  - IB/core: Fix a nested dead lock as part of ODP flow (Yishai Hadas)   
  - ipv6: sr: fix out-of-bounds read when setting HMAC data. (David Lebrun)   
  - RDMA/siw: Pass a pointer to virt_to_page() (Linus Walleij)   
  - xen-netback: only remove 'hotplug-status' when the vif is actually destroyed (Paul Durrant)   
  - iavf: Detach device during reset task (Ivan Vecera)   
  - i40e: Fix kernel crash during module removal (Ivan Vecera)   
  - ice: use bitmap_free instead of devm_kfree (Michal Swiatkowski)   
  - tcp: TX zerocopy should not sense pfmemalloc status (Eric Dumazet)   
  - net: introduce __skb_fill_page_desc_noacc (Pavel Begunkov)   
  - tipc: fix shift wrapping bug in map_get() (Dan Carpenter)   
  - sch_sfb: Don't assume the skb is still around after enqueueing to child (Toke Høiland-Jørgensen)   
  - Revert "net: phy: meson-gxl: improve link-up behavior" (Heiner Kallweit)   
  - afs: Use the operation issue time instead of the reply time for callbacks (David Howells)   
  - rxrpc: Fix an insufficiently large sglist in rxkad_verify_packet_2() (David Howells)   
  - rxrpc: Fix ICMP/ICMP6 error handling (David Howells)   
  - ALSA: usb-audio: Register card again for iface over delayed_register option (Takashi Iwai)   
  - ALSA: usb-audio: Inform the delayed registration more properly (Takashi Iwai)   
  - RDMA/srp: Set scmnd->result only when scmnd is not NULL (yangx.jy@fujitsu.com)   
  - netfilter: nf_conntrack_irc: Fix forged IP logic (David Leadbeater)   
  - netfilter: nf_tables: clean up hook list when offload flags check fails (Pablo Neira Ayuso)   
  - netfilter: br_netfilter: Drop dst references before setting. (Harsh Modi)   
  - ARM: dts: at91: sama5d2_icp: don't keep vdd_other enabled all the time (Claudiu Beznea)   
  - ARM: dts: at91: sama5d27_wlsom1: don't keep ldo2 enabled all the time (Claudiu Beznea)   
  - ARM: dts: at91: sama5d2_icp: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: dts: at91: sama5d27_wlsom1: specify proper regulator output ranges (Claudiu Beznea)   
  - ARM: at91: pm: fix DDR recalibration when resuming from backup and self-refresh (Claudiu Beznea)   
  - ARM: at91: pm: fix self-refresh for sama7g5 (Claudiu Beznea)   
  - wifi: wilc1000: fix DMA on stack objects (Ajay.Kathat@microchip.com)   
  - RDMA/hns: Fix wrong fixed value of qp->rq.wqe_shift (Wenpeng Liang)   
  - RDMA/hns: Fix supported page size (Chengchang Tang)   
  - soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs (Liang He)   
  - RDMA/cma: Fix arguments order in net device validation (Michael Guralnik)   
  - tee: fix compiler warning in tee_shm_register() (Jens Wiklander)   
  - regulator: core: Clean up on enable failure (Andrew Halaney)   
  - soc: imx: gpcv2: Assert reset before ungating clock (Marek Vasut)   
  - ARM: dts: imx6qdl-kontron-samx6i: remove duplicated node (Marco Felsch)   
  - RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (Jack Wang)   
  - RDMA/rtrs-clt: Use the right sg_cnt after ib_dma_map_sg (Jack Wang)   
  - ASoC: qcom: sm8250: add missing module owner (Srinivas Kandagatla)   
  - cgroup: Elide write-locking threadgroup_rwsem when updating csses on an empty subtree (Tejun Heo)   
  - NFS: Fix another fsync() issue after a server reboot (Trond Myklebust)   
  - NFS: Save some space in the inode (Trond Myklebust)   
  - NFS: Further optimisations for 'ls -l' (Trond Myklebust)   
  - scsi: lpfc: Add missing destroy_workqueue() in error path (Yang Yingliang)   
  - scsi: mpt3sas: Fix use-after-free warning (Sreekanth Reddy)   
  - drm/i915: Implement WaEdpLinkRateDataReload (Ville Syrjälä)   
  - nvmet: fix a use-after-free (Bart Van Assche)   
  - drm/amd/display: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - sched/debug: fix dentry leak in update_sched_domain_debugfs (Greg Kroah-Hartman)   
  - debugfs: add debugfs_lookup_and_remove() (Greg Kroah-Hartman)   
  - kprobes: Prohibit probes in gate area (Christian A. Ehrhardt)   
  - vfio/type1: Unpin zero pages (Alex Williamson)   
  - btrfs: zoned: set pseudo max append zone limit in zone emulation mode (Shin'ichiro Kawasaki)   
  - tracing: Fix to check event_mutex is held while accessing trigger list (Masami Hiramatsu (Google))   
  - ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() (Dongxiang Ke)   
  - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (Takashi Iwai)   
  - ALSA: aloop: Fix random zeros in capture data when using jiffies timer (Pattara Teerapong)   
  - ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() (Tasos Sahanidis)   
  - ALSA: pcm: oss: Fix race at SNDCTL_DSP_SYNC (Takashi Iwai)   
  - drm/amdgpu: mmVM_L2_CNTL3 register not initialized correctly (Qu Huang)   
  - fbdev: chipsfb: Add missing pci_disable_device() in chipsfb_pci_init() (Yang Yingliang)   
  - fbdev: fbcon: Destroy mutex on freeing struct fb_info (Shigeru Yoshida)   
  - md: Flush workqueue md_rdev_misc_wq in md_alloc() (David Sloan)   
  - net/core/skbuff: Check the return value of skb_copy_bits() (lily)   
  - cpufreq: check only freq_table in __resolve_freq() (Lukasz Luba)   
  - netfilter: conntrack: work around exceeded receive window (Florian Westphal)   
  - arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level (Sudeep Holla)   
  - parisc: Add runtime check to prevent PA2.0 kernels on PA1.x machines (Helge Deller)   
  - parisc: ccio-dma: Handle kmalloc failure in ccio_init_resources() (Li Qiong)   
  - Revert "parisc: Show error if wrong 32/64-bit compiler is being used" (Helge Deller)   
  - scsi: ufs: core: Reduce the power mode change timeout (Bart Van Assche)   
  - drm/radeon: add a force flush to delay work when radeon (Zhenneng Li)   
  - drm/amdgpu: Check num_gfx_rings for gfx v9_0 rb setup. (Candice Li)   
  - drm/amdgpu: Move psp_xgmi_terminate call from amdgpu_xgmi_remove_device to psp_hw_fini (YiPeng Chai)   
  - drm/gem: Fix GEM handle release errors (Jeffy Chen)   
  - scsi: megaraid_sas: Fix double kfree() (Guixin Liu)   
  - scsi: qla2xxx: Disable ATIO interrupt coalesce for quad port ISP27XX (Tony Battersby)   
  - Revert "mm: kmemleak: take a full lowmem check in kmemleak_*_phys()" (Yee Lee)   
  - fs: only do a memory barrier for the first set_buffer_uptodate() (Linus Torvalds)   
  - wifi: iwlegacy: 4965: corrected fix for potential off-by-one overflow in il4965_rs_fill_link_cmd() (Stanislaw Gruszka)   
  - efi: capsule-loader: Fix use-after-free in efi_capsule_write (Hyunwoo Kim)   
  - efi: libstub: Disable struct randomization (Ard Biesheuvel)   
  - net: wwan: iosm: remove pointless null check (Jakub Kicinski)   
  - LTS version: v5.15.67 (Jack Vogel)   
  - kbuild: fix up permissions on scripts/pahole-flags.sh (Greg Kroah-Hartman)   
  - LTS version: v5.15.66 (Jack Vogel)   
  - USB: serial: ch341: fix disabled rx timer on older devices (Johan Hovold)   
  - USB: serial: ch341: fix lost character on LCR updates (Johan Hovold)   
  - usb: dwc3: disable USB core PHY management (Johan Hovold)   
  - usb: dwc3: qcom: fix use-after-free on runtime-PM wakeup (Johan Hovold)   
  - usb: dwc3: fix PHY disable sequence (Johan Hovold)   
  - kbuild: Add skip_encoding_btf_enum64 option to pahole (Martin Rodriguez Reboredo)   
  - kbuild: Unify options for BTF generation for vmlinux and modules (Jiri Olsa)   
  - tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf() (Mazin Al Haddad)   
  - drm/i915: Skip wm/ddb readout for disabled pipes (Ville Syrjälä)   
  - drm/i915/glk: ECS Liva Q2 needs GLK HDMI port timing quirk (Diego Santa Cruz)   
  - ALSA: seq: Fix data-race at module auto-loading (Takashi Iwai)   
  - ALSA: seq: oss: Fix data-race for max_midi_devs access (Takashi Iwai)   
  - ALSA: hda/realtek: Add speaker AMP init for Samsung laptops with ALC298 (Kacper Michajłow)   
  - net: mac802154: Fix a condition in the receive path (Miquel Raynal)   
  - net: Use u64_stats_fetch_begin_irq() for stats fetch. (Sebastian Andrzej Siewior)   
  - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)   
  - wifi: mac80211: Fix UAF in ieee80211_scan_rx() (Siddh Raman Pant)   
  - wifi: mac80211: Don't finalize CSA in IBSS mode if state is disconnected (Siddh Raman Pant)   
  - driver core: Don't probe devices after bus_type.match() probe deferral (Isaac J. Manjarres)   
  - usb: gadget: mass_storage: Fix cdrom data transfers on MAC-OS (Krishna Kurapati)   
  - usb: xhci-mtk: fix bandwidth release issue (Chunfeng Yun)   
  - usb: xhci-mtk: relax TT periodic bandwidth allocation (Chunfeng Yun)   
  - USB: core: Prevent nested device-reset calls (Alan Stern)   
  - s390: fix nospec table alignments (Josh Poimboeuf)   
  - s390/hugetlb: fix prepare_hugepage_range() check for 2 GB hugepages (Gerald Schaefer)   
  - usb-storage: Add ignore-residue quirk for NXP PN7462AU (Witold Lipieta)   
  - USB: cdc-acm: Add Icom PMR F3400 support (0c26:0020) (Thierry GUIBERT)   
  - usb: cdns3: fix incorrect handling TRB_SMM flag for ISOC transfer (Pawel Laszczak)   
  - usb: cdns3: fix issue with rearming ISO OUT endpoint (Pawel Laszczak)   
  - usb: dwc2: fix wrong order of phy_power_on and phy_init (Heiner Kallweit)   
  - usb: typec: tcpm: Return ENOTSUPP for power supply prop writes (Badhri Jagan Sridharan)   
  - usb: typec: intel_pmc_mux: Add new ACPI ID for Meteor Lake IOM device (Utkarsh Patel)   
  - usb: typec: altmodes/displayport: correct pin assignment for UFP receptacles (Pablo Sun)   
  - USB: serial: option: add support for Cinterion MV32-WA/WB RmNet mode (Slark Xiao)   
  - USB: serial: option: add Quectel EM060K modem (Yonglin Tan)   
  - USB: serial: option: add support for OPPO R11 diag port (Yan Xinyu)   
  - USB: serial: cp210x: add Decagon UCA device id (Johan Hovold)   
  - xhci: Add grace period after xHC start to prevent premature runtime suspend. (Mathias Nyman)   
  - media: mceusb: Use new usb_control_msg_*() routines (Alan Stern)   
  - usb: dwc3: pci: Add support for Intel Raptor Lake (Heikki Krogerus)   
  - thunderbolt: Use the actual buffer in tb_async_error() (Mika Westerberg)   
  - xen-blkfront: Cache feature_persistent value before advertisement (SeongJae Park)   
  - xen-blkfront: Advertise feature-persistent as user requested (SeongJae Park)   
  - xen-blkback: Advertise feature-persistent as user requested (SeongJae Park)   
  - mm: pagewalk: Fix race between unmap and page walker (Steven Price)   
  - xen/grants: prevent integer overflow in gnttab_dma_alloc_pages() (Dan Carpenter)   
  - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (Jim Mattson)   
  - gpio: pca953x: Add mutex_lock for regcache sync in PM (Haibo Chen)   
  - hwmon: (gpio-fan) Fix array out of bounds access (Armin Wolf)   
  - clk: bcm: rpi: Add missing newline (Stefan Wahren)   
  - clk: bcm: rpi: Prevent out-of-bounds access (Stefan Wahren)   
  - clk: bcm: rpi: Use correct order for the parameters of devm_kcalloc() (Christophe JAILLET)   
  - clk: bcm: rpi: Fix error handling of raspberrypi_fw_get_rate (Stefan Wahren)   
  - Input: rk805-pwrkey - fix module autoloading (Peter Robinson)   
  - clk: core: Fix runtime PM sequence in clk_core_unprepare() (Chen-Yu Tsai)   
  - Revert "clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops" (Stephen Boyd)   
  - clk: core: Honor CLK_OPS_PARENT_ENABLE for clk gate ops (Chen-Yu Tsai)   
  - drm/i915/reg: Fix spelling mistake "Unsupport" -> "Unsupported" (Colin Ian King)   
  - KVM: VMX: Heed the 'msr' argument in msr_write_intercepted() (Jim Mattson)   
  - cifs: fix small mempool leak in SMB2_negotiate() (Enzo Matsumiya)   
  - binder: fix alloc->vma_vm_mm null-ptr dereference (Carlos Llamas)   
  - binder: fix UAF of ref->proc caused by race condition (Carlos Llamas)   
  - mmc: core: Fix inconsistent sd3_bus_mode at UHS-I SD voltage switch failure (Adrian Hunter)   
  - mmc: core: Fix UHS-I SD 1.8V workaround branch (Adrian Hunter)   
  - USB: serial: ftdi_sio: add Omron CS1W-CIF31 device id (Niek Nooijens)   
  - misc: fastrpc: fix memory corruption on open (Johan Hovold)   
  - misc: fastrpc: fix memory corruption on probe (Johan Hovold)   
  - iio: adc: mcp3911: use correct formula for AD conversion (Marcus Folkesson)   
  - iio: ad7292: Prevent regulator double disable (Matti Vaittinen)   
  - Input: iforce - wake up after clearing IFORCE_XMIT_RUNNING flag (Tetsuo Handa)   
  - tty: serial: lpuart: disable flow control while waiting for the transmit engine to complete (Sherry Sun)   
  - musb: fix USB_MUSB_TUSB6010 dependency (Arnd Bergmann)   
  - vt: Clear selection before changing the font (Helge Deller)   
  - powerpc: align syscall table for ppc32 (Masahiro Yamada)   
  - staging: r8188eu: add firmware dependency (Grzegorz Szymaszek)   
  - staging: rtl8712: fix use after free bugs (Dan Carpenter)   
  - serial: fsl_lpuart: RS485 RTS polariy is inverse (Shenwei Wang)   
  - soundwire: qcom: fix device status array range (Srinivas Kandagatla)   
  - net/smc: Remove redundant refcount increase (Yacan Liu)   
  - Revert "sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb" (Jakub Kicinski)   
  - tcp: annotate data-race around challenge_timestamp (Eric Dumazet)   
  - sch_cake: Return __NET_XMIT_STOLEN when consuming enqueued skb (Toke Høiland-Jørgensen)   
  - kcm: fix strp_init() order and cleanup (Cong Wang)   
  - mlxbf_gige: compute MDIO period based on i1clk (David Thompson)   
  - ethernet: rocker: fix sleep in atomic context bug in neigh_timer_handler (Duoming Zhou)   
  - net/sched: fix netdevice reference leaks in attach_default_qdiscs() (Wang Hai)   
  - net: sched: tbf: don't call qdisc_put() while holding tree lock (Zhengchao Shao)   
  - net: dsa: xrs700x: Use irqsave variant for u64 stats update (Sebastian Andrzej Siewior)   
  - openvswitch: fix memory leak at failed datapath creation (Andrey Zhadchenko)   
  - net: smsc911x: Stop and start PHY during suspend and resume (Florian Fainelli)   
  - net: sparx5: fix handling uneven length packets in manual extraction (Casper Andersson)   
  - Revert "xhci: turn off port power in shutdown" (Mathias Nyman)   
  - wifi: cfg80211: debugfs: fix return type in ht40allow_map_read() (Dan Carpenter)   
  - ALSA: hda: intel-nhlt: Correct the handling of fmt_config flexible array (Peter Ujfalusi)   
  - ALSA: hda: intel-nhlt: remove use of __func__ in dev_dbg (Pierre-Louis Bossart)   
  - drm/i915/display: avoid warnings when registering dual panel backlight (Arun R Murthy)   
  - drm/i915/backlight: extract backlight code to a separate file (Jani Nikula)   
  - ieee802154/adf7242: defer destroy_workqueue call (Lin Ma)   
  - bpf, cgroup: Fix kernel BUG in purge_effective_progs (Pu Lehui)   
  - bpf: Restrict bpf_sys_bpf to CAP_PERFMON (YiFei Zhu)   
  - skmsg: Fix wrong last sg check in sk_msg_recvmsg() (Liu Jian)   
  - iio: adc: mcp3911: make use of the sign bit (Marcus Folkesson)   
  - platform/x86: pmc_atom: Fix SLP_TYPx bitfield mask (Andy Shevchenko)   
  - drm/msm/dsi: Fix number of regulators for SDM660 (Douglas Anderson)   
  - drm/msm/dsi: Fix number of regulators for msm8996_dsi_cfg (Douglas Anderson)   
  - drm/msm/dp: delete DP_RECOVERED_CLOCK_OUT_EN to fix tps4 (Kuogee Hsieh)   
  - drm/msm/dsi: fix the inconsistent indenting (sunliming)   
  - LTS version: v5.15.65 (Jack Vogel)   
  - net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang)   
  - net/af_packet: check len when min_header_len equals to 0 (Zhengchao Shao)   
  - android: binder: fix lockdep check on clearing vma (Liam Howlett)   
  - btrfs: fix space cache corruption and potential double allocations (Omar Sandoval)   
  - kprobes: don't call disarm_kprobe() for disabled kprobes (Kuniyuki Iwashima)   
  - btrfs: tree-checker: check for overlapping extent items (Josef Bacik)   
  - btrfs: fix lockdep splat with reloc root extent buffers (Josef Bacik)   
  - btrfs: move lockdep class helpers to locking.c (Josef Bacik)   
  - testing: selftests: nft_flowtable.sh: use random netns names (Florian Westphal)   
  - netfilter: conntrack: NF_CONNTRACK_PROCFS should no longer default to y (Geert Uytterhoeven)   
  - drm/amd/display: avoid doing vm_init multiple time (Charlene Liu)   
  - drm/amdgpu: Increase tlb flush timeout for sriov (Dusica Milinkovic)   
  - drm/amd/display: Fix pixel clock programming (Ilya Bakoulin)   
  - drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid (Evan Quan)   
  - ksmbd: don't remove dos attribute xattr on O_TRUNC open (Namjae Jeon)   
  - s390/hypfs: avoid error message under KVM (Juergen Gross)   
  - neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev)   
  - ksmbd: return STATUS_BAD_NETWORK_NAME error status if share is not configured (Namjae Jeon)   
  - drm/amd/display: clear optc underflow before turn off odm clock (Fudong Wang)   
  - drm/amd/display: For stereo keep "FLIP_ANY_FRAME" (Alvin Lee)   
  - drm/amd/display: Fix HDMI VSIF V3 incorrect issue (Leo Ma)   
  - drm/amd/display: Avoid MPC infinite loop (Josip Pavic)   
  - ASoC: sh: rz-ssi: Improve error handling in rz_ssi_probe() error path (Biju Das)   
  - fs/ntfs3: Fix work with fragmented xattr (Konstantin Komarov)   
  - btrfs: fix warning during log replay when bumping inode link count (Filipe Manana)   
  - btrfs: add and use helper for unlinking inode during log replay (Filipe Manana)   
  - btrfs: remove no longer needed logic for replaying directory deletes (Filipe Manana)   
  - btrfs: remove root argument from btrfs_unlink_inode() (Filipe Manana)   
  - mmc: sdhci-of-dwcmshc: Re-enable support for the BlueField-3 SoC (Liming Sun)   
  - mmc: sdhci-of-dwcmshc: rename rk3568 to rk35xx (Sebastian Reichel)   
  - mmc: sdhci-of-dwcmshc: add reset call back for rockchip Socs (Yifeng Zhao)   
  - mmc: mtk-sd: Clear interrupts when cqe off/disable (Wenbin Mei)   
  - drm/i915/gt: Skip TLB invalidations once wedged (Chris Wilson)   
  - HID: thrustmaster: Add sparco wheel and fix array length (Michael Hübner)   
  - HID: asus: ROG NKey: Ignore portion of 0x5a report (Josh Kilmer)   
  - HID: AMD_SFH: Add a DMI quirk entry for Chromebooks (Akihiko Odaki)   
  - HID: add Lenovo Yoga C630 battery quirk (Steev Klimaszewski)   
  - ALSA: usb-audio: Add quirk for LH Labs Geek Out HD Audio 1V5 (Takashi Iwai)   
  - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (Jann Horn)   
  - bpf: Don't redirect packets with invalid pkt_len (Zhengchao Shao)   
  - ftrace: Fix NULL pointer dereference in is_ftrace_trampoline when ftrace is dead (Yang Jihong)   
  - fbdev: fb_pm2fb: Avoid potential divide by zero error (Letu Ren)   
  - net: fix refcount bug in sk_psock_get (2) (Hawkins Jiawei)   
  - HID: hidraw: fix memory leak in hidraw_release() (Karthik Alapati)   
  - media: pvrusb2: fix memory leak in pvr_probe (Dongliang Mu)   
  - udmabuf: Set the DMA mask for the udmabuf device (v2) (Vivek Kasireddy)   
  - HID: steam: Prevent NULL pointer dereference in steam_{recv,send}_report (Lee Jones)   
  - Revert "PCI/portdrv: Don't disable AER reporting in get_port_device_capability()" (Greg Kroah-Hartman)   
  - Bluetooth: L2CAP: Fix build errors in some archs (Luiz Augusto von Dentz)   
  - kbuild: Fix include path in scripts/Makefile.modpost (Jing Leng)   
  - io_uring: fix UAF due to missing POLLFREE handling (Pavel Begunkov)   
  - io_uring: fix wrong arm_poll error handling (Pavel Begunkov)   
  - io_uring: fail links when poll fails (Pavel Begunkov)   
  - io_uring: bump poll refs to full 31-bits (Jens Axboe)   
  - io_uring: remove poll entry from list when canceling all (Jens Axboe)   
  - io_uring: Remove unused function req_ref_put (Jiapeng Chong)   
  - io_uring: poll rework (Pavel Begunkov)   
  - io_uring: inline io_poll_complete (Pavel Begunkov)   
  - io_uring: kill poll linking optimisation (Pavel Begunkov)   
  - io_uring: move common poll bits (Pavel Begunkov)   
  - io_uring: refactor poll update (Pavel Begunkov)   
  - io_uring: clean cqe filling functions (Pavel Begunkov)   
  - io_uring: correct fill events helpers types (Pavel Begunkov)   
  - arm64: errata: Add Cortex-A510 to the repeat tlbi list (James Morse)   
  - mm/hugetlb: avoid corrupting page->mapping in hugetlb_mcopy_atomic_pte (Miaohe Lin)   
  - Drivers: hv: balloon: Support status report for larger page sizes (Boqun Feng)   
  - crypto: lib - remove unneeded selection of XOR_BLOCKS (Eric Biggers)   
  - firmware: tegra: bpmp: Do only aligned access to IPC memory area (Timo Alho)   
  - drm/vc4: hdmi: Depends on CONFIG_PM (Maxime Ripard)   
  - drm/vc4: hdmi: Rework power up (Maxime Ripard)   
  - ACPI: thermal: drop an always true check (Adam Borowski)   
  - drm/bridge: Add stubs for devm_drm_of_get_bridge when OF is disabled (Maxime Ripard)   
  - mm: Force TLB flush for PFNMAP mappings before unlink_file_vma() (Jann Horn)   
  - LTS version: v5.15.64 (Jack Vogel)   
  - bpf: Don't use tnum_range on array range checking for poke descriptors (Daniel Borkmann)   
  - scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq (Saurabh Sengar)   
  - scsi: ufs: core: Enable link lost interrupt (Kiwoong Kim)   
  - perf stat: Clear evsel->reset_group for each stat run (Ian Rogers)   
  - perf/x86/intel/ds: Fix precise store latency handling (Stephane Eranian)   
  - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (Stephane Eranian)   
  - perf python: Fix build when PYTHON_CONFIG is user supplied (James Clark)   
  - blk-mq: fix io hung due to missing commit_rqs (Yu Kuai)   
  - Documentation/ABI: Mention retbleed vulnerability info file for sysfs (Salvatore Bonaccorso)   
  - x86/nospec: Fix i386 RSB stuffing (Peter Zijlstra)   
  - binder_alloc: add missing mmap_lock calls when using the VMA (Liam Howlett)   
  - arm64: Fix match_list for erratum 1286807 on Arm Cortex-A76 (Zenghui Yu)   
  - mptcp: Fix crash due to tcp_tsorted_anchor was initialized before release skb (Yonglong Li)   
  - md: call __md_stop_writes in md_stop (Guoqing Jiang)   
  - Revert "md-raid: destroy the bitmap after destroying the thread" (Guoqing Jiang)   
  - mm/hugetlb: fix hugetlb not supporting softdirty tracking (David Hildenbrand)   
  - Revert "usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling" (Greg Kroah-Hartman)   
  - Revert "usbnet: smsc95xx: Fix deadlock on runtime resume" (Greg Kroah-Hartman)   
  - io_uring: fix issue with io_write() not always undoing sb_start_write() (Jens Axboe)   
  - riscv: traps: add missing prototype (Conor Dooley)   
  - xen/privcmd: fix error exit of privcmd_ioctl_dm_op() (Juergen Gross)   
  - smb3: missing inode locks in punch hole (David Howells)   
  - nouveau: explicitly wait on the fence in nouveau_bo_move_m2mf (Karol Herbst)   
  - ACPI: processor: Remove freq Qos request for all CPUs (Riwen Lu)   
  - Revert "memcg: cleanup racy sum avoidance code" (Shakeel Butt)   
  - fbdev: fbcon: Properly revert changes when vc_resize() failed (Shigeru Yoshida)   
  - s390: fix double free of GS and RI CBs on fork() failure (Brian Foster)   
  - bootmem: remove the vmemmap pages from kmemleak in put_page_bootmem (Liu Shixin)   
  - s390/mm: do not trigger write fault when vma does not allow VM_WRITE (Gerald Schaefer)   
  - mm/damon/dbgfs: avoid duplicate context directory creation (Badari Pulavarty)   
  - asm-generic: sections: refactor memory_intersects (Quanyang Wang)   
  - writeback: avoid use-after-free after removing device (Khazhismel Kumykov)   
  - loop: Check for overflow while configuring loop (Siddh Raman Pant)   
  - x86/nospec: Unwreck the RSB stuffing (Peter Zijlstra)   
  - x86/bugs: Add "unknown" reporting for MMIO Stale Data (Pawan Gupta)   
  - x86/unwind/orc: Unwind ftrace trampolines with correct ORC entry (Chen Zhongjin)   
  - perf/x86/lbr: Enable the branch type for the Arch LBR by default (Kan Liang)   
  - btrfs: fix possible memory leak in btrfs_get_dev_args_from_path() (Zixuan Fu)   
  - btrfs: check if root is readonly while setting security xattr (Goldwyn Rodrigues)   
  - btrfs: add info when mount fails due to stale replace target (Anand Jain)   
  - btrfs: replace: drop assert for suspended replace (Anand Jain)   
  - btrfs: fix silent failure when deleting root reference (Filipe Manana)   
  - net: stmmac: work around sporadic tx issue on link-up (Heiner Kallweit)   
  - ionic: VF initial random MAC address if no assigned mac (R Mohamed Shah)   
  - ionic: fix up issues with handling EAGAIN on FW cmds (Shannon Nelson)   
  - ionic: clear broken state on generation change (Shannon Nelson)   
  - ionic: widen queue_lock use around lif init and deinit (Shannon Nelson)   
  - rxrpc: Fix locking in rxrpc's sendmsg (David Howells)   
  - i40e: Fix incorrect address type for IPv6 flow rules (Sylwester Dziedziuch)   
  - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (Jacob Keller)   
  - net: Fix a data-race around sysctl_somaxconn. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_devconf_inherit_init_net. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_fb_tunnels_only_for_init_net. (Kuniyuki Iwashima)   
  - net: Fix a data-race around netdev_budget_usecs. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_max_skb_frags. (Kuniyuki Iwashima)   
  - mptcp: stop relying on tcp_tx_skb_cache (Paolo Abeni)   
  - tcp: expose the tcp_mark_push() and tcp_skb_entail() helpers (Paolo Abeni)   
  - net: Fix a data-race around netdev_budget. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_net_busy_read. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_net_busy_poll. (Kuniyuki Iwashima)   
  - net: Fix a data-race around sysctl_tstamp_allow_data. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_optmem_max. (Kuniyuki Iwashima)   
  - ratelimit: Fix data-races in ___ratelimit(). (Kuniyuki Iwashima)   
  - net: Fix data-races around netdev_tstamp_prequeue. (Kuniyuki Iwashima)   
  - net: Fix data-races around netdev_max_backlog. (Kuniyuki Iwashima)   
  - net: Fix data-races around weight_p and dev_weight_[rt]x_bias. (Kuniyuki Iwashima)   
  - net: Fix data-races around sysctl_[rw]mem_(max|default). (Kuniyuki Iwashima)   
  - netfilter: flowtable: fix stuck flows on cleanup due to pending work (Pablo Neira Ayuso)   
  - netfilter: flowtable: add function to invoke garbage collection immediately (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow binding to already bound chain (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow jump to implicit chain from set element (Pablo Neira Ayuso)   
  - netfilter: nf_tables: upfront validation of data via nft_data_init() (Pablo Neira Ayuso)   
  - netfilter: bitwise: improve error goto labels (Jeremy Sowden)   
  - netfilter: nft_cmp: optimize comparison for 16-bytes (Pablo Neira Ayuso)   
  - netfilter: nf_tables: consolidate rule verdict trace call (Pablo Neira Ayuso)   
  - netfilter: nft_tunnel: restrict it to netdev family (Pablo Neira Ayuso)   
  - netfilter: nft_osf: restrict osf to ipv4, ipv6 and inet families (Pablo Neira Ayuso)   
  - netfilter: nf_tables: do not leave chain stats enabled on error (Pablo Neira Ayuso)   
  - netfilter: nft_payload: do not truncate csum_offset and csum_type (Pablo Neira Ayuso)   
  - netfilter: nft_payload: report ERANGE for too long offset and length (Pablo Neira Ayuso)   
  - netfilter: nf_tables: make table handle allocation per-netns friendly (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow updates of implicit chain (Pablo Neira Ayuso)   
  - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (Vikas Gupta)   
  - net: ipvtap - add __init/__exit annotations to module init/exit funcs (Maciej Żenczykowski)   
  - bonding: 802.3ad: fix no transmission of LACPDUs (Jonathan Toppins)   
  - net: moxa: get rid of asymmetry in DMA mapping/unmapping (Sergei Antonov)   
  - net: phy: Don't WARN for PHY_READY state in mdio_bus_phy_resume() (Xiaolei Wang)   
  - net: ipa: don't assume SMEM is page-aligned (Alex Elder)   
  - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (Maor Dickman)   
  - net/mlx5e: Fix wrong application of the LRO state (Aya Levin)   
  - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (Moshe Shemesh)   
  - net/mlx5e: Properly disable vlan strip on non-UL reps (Vlad Buslov)   
  - ice: xsk: prohibit usage of non-balanced queue id (Maciej Fijalkowski)   
  - ice: xsk: Force rings to be sized to power of 2 (Maciej Fijalkowski)   
  - nfc: pn533: Fix use-after-free bugs caused by pn532_cmd_timeout (Duoming Zhou)   
  - r8152: fix the RX FIFO settings when suspending (Hayes Wang)   
  - r8152: fix the units of some registers for RTL8156A (Hayes Wang)   
  - rose: check NULL rose_loopback_neigh->loopback (Bernard Pidoux)   
  - ntfs: fix acl handling (Christian Brauner)   
  - mm/smaps: don't access young/dirty bit if pte unpresent (Peter Xu)   
  - SUNRPC: RPC level errors should set task->tk_rpc_status (Trond Myklebust)   
  - NFSv4.2 fix problems with __nfs42_ssc_open (Olga Kornievskaia)   
  - NFS: Don't allocate nfs_fattr on the stack in __nfs42_ssc_open() (Trond Myklebust)   
  - Revert "net: macsec: update SCI upon MAC address change." (Sabrina Dubroca)   
  - net: use eth_hw_addr_set() instead of ether_addr_copy() (Jakub Kicinski)   
  - fs: require CAP_SYS_ADMIN in target namespace for idmapped mounts (Seth Forshee)   
  - xfrm: policy: fix metadata dst->dev xmit null pointer dereference (Nikolay Aleksandrov)   
  - xfrm: clone missing x->lastused in xfrm_do_migrate (Antony Antony)   
  - xfrm: fix refcount leak in __xfrm_policy_check() (Xin Xiong)   
  - riscv: lib: uaccess: fix CSR_STATUS SR_SUM bit (Chen Lifu)   
  - riscv: lib: uaccess: fold fixups into body (Jisheng Zhang)   
  - btrfs: remove unnecessary parameter delalloc_start for writepage_delalloc() (Qu Wenruo)   
  - btrfs: pass the dentry to btrfs_log_new_name() instead of the inode (Filipe Manana)   
  - btrfs: put initial index value of a directory in a constant (Filipe Manana)   
  - scsi: qla2xxx: edif: Fix dropped IKE message (Quinn Tran)   
  - scsi: qla2xxx: Fix response queue handler reading stale packets (Arun Easi)   
  - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld)   
  - Input: i8042 - add additional TUXEDO devices to i8042 quirk tables (Werner Sembach)   
  - Input: i8042 - add TUXEDO devices to i8042 quirk tables (Werner Sembach)   
  - Input: i8042 - merge quirk tables (Werner Sembach)   
  - Input: i8042 - move __initconst to fix code styling warning (Werner Sembach)   
  - btrfs: convert count_max_extents() to use fs_info->max_extent_size (Naohiro Aota)   
  - btrfs: replace BTRFS_MAX_EXTENT_SIZE with fs_info->max_extent_size (Naohiro Aota)   
  - btrfs: zoned: revive max_zone_append_bytes (Naohiro Aota)   
  - block: add bdev_max_segments() helper (Naohiro Aota)   
  - block: add a bdev_max_zone_append_sectors helper (Christoph Hellwig)   
  - x86/entry: Move CLD to the start of the idtentry macro (Lai Jiangshan)   
  - kernel/sys_ni: add compat entry for fadvise64_64 (Randy Dunlap)   
  - parisc: Fix exception handler for fldw and fstw instructions (Helge Deller)   
  - parisc: Make CONFIG_64BIT available for ARCH=parisc64 only (Helge Deller)   
  - cgroup: Fix race condition at rebind_subsystems() (Jing-Ting Wu)   
  - audit: fix potential double free on error path from fsnotify_add_inode_mark (Gaosheng Cui)   
  - eth: sun: cassini: remove dead code (Martin Liška)   
  - wifi: rtlwifi: remove always-true condition pointed out by GCC 12 (Jakub Kicinski)   
  - LTS version: v5.15.63 (Jack Vogel)   
  - xfs: revert "xfs: actually bump warning counts when we send warnings" (Eric Sandeen)   
  - xfs: fix soft lockup via spinning in filestream ag selection loop (Brian Foster)   
  - xfs: fix overfilling of reserve pool (Darrick J. Wong)   
  - xfs: always succeed at setting the reserve pool size (Darrick J. Wong)   
  - xfs: remove infinite loop when reserving free block pool (Darrick J. Wong)   
  - xfs: reserve quota for target dir expansion when renaming files (Darrick J. Wong)   
  - xfs: reserve quota for dir expansion when linking/unlinking files (Darrick J. Wong)   
  - scsi: ufs: ufs-mediatek: Fix build error and type mismatch (Ren Zhijie)   
  - can: j1939: j1939_sk_queue_activate_next_locked(): replace WARN_ON_ONCE with netdev_warn_once() (Fedor Pchelkin)   
  - MIPS: tlbex: Explicitly compare _PAGE_NO_EXEC against 0 (Nathan Chancellor)   
  - video: fbdev: i740fb: Check the argument of i740_calc_vclk() (Zheyu Ma)   
  - venus: pm_helpers: Fix warning in OPP during probe (Stanimir Varbanov)   
  - powerpc/64: Init jump labels before parse_early_param() (Zhouyi Zhou)   
  - smb3: check xattr value length earlier (Steve French)   
  - f2fs: fix to do sanity check on segment type in build_sit_entries() (Chao Yu)   
  - f2fs: fix to avoid use f2fs_bug_on() in f2fs_new_node_page() (Chao Yu)   
  - ALSA: control: Use deferred fasync helper (Takashi Iwai)   
  - ALSA: timer: Use deferred fasync helper (Takashi Iwai)   
  - ALSA: core: Add async signal helpers (Takashi Iwai)   
  - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (Alexey Kardashevskiy)   
  - ovl: warn if trusted xattr creation fails (Miklos Szeredi)   
  - powerpc/32: Don't always pass -mcpu=powerpc to the compiler (Christophe Leroy)   
  - powerpc/32: Set an IBAT covering up to _einittext during init (Christophe Leroy)   
  - watchdog: export lockup_detector_reconfigure (Laurent Dufour)   
  - RISC-V: Add fast call path of crash_kexec() (Xianting Tian)   
  - riscv: mmap with PROT_WRITE but no PROT_READ is invalid (Celeste Liu)   
  - riscv: dts: canaan: Add k210 topology information (Conor Dooley)   
  - riscv: dts: sifive: Add fu740 topology information (Conor Dooley)   
  - ASoC: rsnd: care default case on rsnd_ssiu_busif_err_irq_ctrl() (Kuninori Morimoto)   
  - modules: Ensure natural alignment for .altinstructions and __bug_table sections (Helge Deller)   
  - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (Yunfei Wang)   
  - mips: cavium-octeon: Fix missing of_node_put() in octeon2_usb_clocks_start (Liang He)   
  - vfio: Clear the caps->buf to NULL after free (Schspa Shi)   
  - KVM: PPC: Book3S HV: Fix "rm_exit" entry in debugfs timings (Fabiano Rosas)   
  - tty: serial: Fix refcount leak bug in ucc_uart.c (Liang He)   
  - lib/list_debug.c: Detect uninitialized lists (Guenter Roeck)   
  - ext4: avoid resizing to a partial cluster size (Kiselev, Oleg)   
  - ext4: avoid remove directory when directory is corrupted (Ye Bin)   
  - drivers:md:fix a potential use-after-free bug (Wentao_Liang)   
  - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (Sagi Grimberg)   
  - md: Notify sysfs sync_completed in md_reap_sync_thread() (Logan Gunthorpe)   
  - phy: samsung: phy-exynos-pcie: sanitize init/power_on callbacks (Marek Szyprowski)   
  - openrisc: io: Define iounmap argument as volatile (Stafford Horne)   
  - dmaengine: sprd: Cleanup in .remove() after pm_runtime_get_sync() failed (Uwe Kleine-König)   
  - selftests/kprobe: Do not test for GRP/ without event failures (Steven Rostedt (Google))   
  - csky/kprobe: reclaim insn_slot on kprobe unregistration (Liao Chang)   
  - RDMA/rxe: Limit the number of calls to each tasklet (Bob Pearson)   
  - dmaengine: dw-axi-dmac: ignore interrupt if no descriptor (Ben Dooks)   
  - dmaengine: dw-axi-dmac: do not print NULL LLI during error (Ben Dooks)   
  - um: add "noreboot" command line option for PANIC_TIMEOUT=-1 setups (Jason A. Donenfeld)   
  - PCI/ACPI: Guard ARM64-specific mcfg_quirks (Huacai Chen)   
  - cxl: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - pinctrl: intel: Check against matching data instead of ACPI companion (Andy Shevchenko)   
  - mmc: tmio: avoid glitches when resetting (Wolfram Sang)   
  - habanalabs/gaudi: mask constant value before cast (Oded Gabbay)   
  - habanalabs/gaudi: fix shift out of bounds (Ofir Bitton)   
  - coresight: etm4x: avoid build failure with unrolled loops (Nick Desaulniers)   
  - gadgetfs: ep_io - wait until IRQ finishes (Jozef Martiniak)   
  - scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (James Smart)   
  - scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (James Smart)   
  - clk: qcom: clk-alpha-pll: fix clk_trion_pll_configure description (Vladimir Zapolskiy)   
  - zram: do not lookup algorithm in backends table (Sergey Senozhatsky)   
  - uacce: Handle parent device removal or parent driver module rmmod (Jean-Philippe Brucker)   
  - clk: qcom: ipq8074: dont disable gcc_sleep_clk_src (Robert Marko)   
  - vboxguest: Do not use devm for irq (Pascal Terjan)   
  - usb: dwc2: gadget: remove D+ pull-up while no vbus with usb-role-switch (Amelie Delaunay)   
  - usb: renesas: Fix refcount leak bug (Liang He)   
  - usb: host: ohci-ppc-of: Fix refcount leak bug (Liang He)   
  - scsi: ufs: ufs-mediatek: Fix the timing of configuring device regulators (Po-Wen Kao)   
  - clk: ti: Stop using legacy clkctrl names for omap4 and 5 (Tony Lindgren)   
  - drm/meson: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)   
  - irqchip/tegra: Fix overflow implicit truncation warnings (Sai Prakash Ranjan)   
  - PCI: aardvark: Fix reporting Slot capabilities on emulated bridge (Pali Rohár)   
  - usb: gadget: uvc: call uvc uvcg_warn on completed status instead of uvcg_info (Michael Grzeschik)   
  - usb: gadget: uvc: calculate the number of request depending on framesize (Michael Grzeschik)   
  - usb: cdns3: fix random warning message when driver load (Frank Li)   
  - usb: cdns3 fix use-after-free at workaround 2 (Frank Li)   
  - platform/chrome: cros_ec_proto: don't show MKBP version if unsupported (Tzung-Bi Shih)   
  - PCI: Add ACS quirk for Broadcom BCM5750x NICs (Pavan Chebbi)   
  - HID: multitouch: new device class fix Lenovo X12 trackpad sticky (Tao Jin)   
  - KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (Oliver Upton)   
  - KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (Oliver Upton)   
  - net: qrtr: start MHI channel after endpoit creation (Maxim Kochetkov)   
  - drm/sun4i: dsi: Prevent underflow when computing packet sizes (Samuel Holland)   
  - drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() (Liang He)   
  - ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() (Takashi Iwai)   
  - ASoC: SOF: Intel: hda: Define rom_status_reg in sof_intel_dsp_desc (Ranjani Sridharan)   
  - drm/imx/dcss: get rid of HPD warning message (Laurentiu Palcu)   
  - tracing/eprobes: Fix reading of string fields (Steven Rostedt (Google))   
  - gcc-plugins: Undefine LATENT_ENTROPY_PLUGIN when plugin disabled for a file (Andrew Donnellan)   
  - kbuild: fix the modules order between drivers and libs (Masahiro Yamada)   
  - igb: Add lock to avoid data race (Lin Ma)   
  - stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() (Christophe JAILLET)   
  - fec: Fix timer capture timing in `fec_ptp_enable_pps()` (Csókás Bence)   
  - i40e: Fix to stop tx_timeout recovery if GLOBR fails (Alan Brady)   
  - regulator: pca9450: Remove restrictions for regulator-name (Frieder Schrempf)   
  - i2c: imx: Make sure to unregister adapter on remove() (Uwe Kleine-König)   
  - ice: Ignore EEXIST when setting promisc mode (Grzegorz Siwik)   
  - net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() (Rustam Subkhankulov)   
  - net: dsa: don't warn in dsa_port_set_state_now() when driver doesn't support it (Vladimir Oltean)   
  - net: genl: fix error path memory leak in policy dumping (Jakub Kicinski)   
  - net: dsa: felix: fix ethtool 256-511 and 512-1023 TX packet counters (Vladimir Oltean)   
  - net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (Arun Ramadoss)   
  - net: fix potential refcount leak in ndisc_router_discovery() (Xin Xiong)   
  - net: moxa: pass pdev instead of ndev to DMA functions (Sergei Antonov)   
  - mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice (Amit Cohen)   
  - net: dsa: mv88e6060: prevent crash on an unused port (Sergei Antonov)   
  - net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() (Xin Xiong)   
  - spi: meson-spicc: add local pow2 clock ops to preserve rate between messages (Neil Armstrong)   
  - powerpc/pci: Fix get_phb_number() locking (Michael Ellerman)   
  - netfilter: nf_tables: check NFT_SET_CONCAT flag if field_count is specified (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow NFT_SET_ELEM_CATCHALL and NFT_SET_ELEM_INTERVAL_END (Pablo Neira Ayuso)   
  - netfilter: nf_tables: NFTA_SET_ELEM_KEY_END requires concat and interval flags (Pablo Neira Ayuso)   
  - netfilter: nf_tables: validate NFTA_SET_ELEM_OBJREF based on NFT_SET_OBJECT flag (Pablo Neira Ayuso)   
  - netfilter: nf_tables: really skip inactive sets when allocating name (Pablo Neira Ayuso)   
  - netfilter: nf_tables: possible module reference underflow in error path (Pablo Neira Ayuso)   
  - netfilter: nf_tables: disallow NFTA_SET_ELEM_KEY_END with NFT_SET_ELEM_INTERVAL_END flag (Pablo Neira Ayuso)   
  - fs/ntfs3: uninitialized variable in ntfs_set_acl_ex() (Dan Carpenter)   
  - netfilter: nf_tables: use READ_ONCE and WRITE_ONCE for shared generation id access (Pablo Neira Ayuso)   
  - ASoC: codec: tlv320aic32x4: fix mono playback via I2S (Philipp Zabel)   
  - ASoC: tas2770: Fix handling of mute/unmute (Martin Povišer)   
  - ASoC: tas2770: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2770: Allow mono streams (Martin Povišer)   
  - ASoC: tas2770: Set correct FSYNC polarity (Martin Povišer)   
  - ASoC: SOF: debug: Fix potential buffer overflow by snprintf() (Takashi Iwai)   
  - iavf: Fix reset error handling (Przemyslaw Patynowski)   
  - iavf: Fix adminq error handling (Przemyslaw Patynowski)   
  - nios2: add force_successful_syscall_return() (Al Viro)   
  - nios2: restarts apply only to the first sigframe we build... (Al Viro)   
  - nios2: fix syscall restart checks (Al Viro)   
  - nios2: traced syscall does need to check the syscall number (Al Viro)   
  - nios2: don't leave NULLs in sys_call_table[] (Al Viro)   
  - nios2: page fault et.al. are *not* restartable syscalls... (Al Viro)   
  - fs/ntfs3: Fix missing i_op in ntfs_read_mft (Konstantin Komarov)   
  - fs/ntfs3: Do not change mode if ntfs_set_ea failed (Konstantin Komarov)   
  - fs/ntfs3: Fix double free on remount (Konstantin Komarov)   
  - fs/ntfs3: Don't clear upper bits accidentally in log_replay() (Dan Carpenter)   
  - fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr (Pavel Skripkin)   
  - fs/ntfs3: Fix using uninitialized value n when calling indx_read (Yan Lei)   
  - dpaa2-eth: trace the allocated address instead of page struct (Chen Lin)   
  - perf tests: Fix Track with sched_switch test for hybrid case (Adrian Hunter)   
  - perf parse-events: Fix segfault when event parser gets an error (Adrian Hunter)   
  - perf probe: Fix an error handling path in 'parse_perf_probe_command()' (Christophe JAILLET)   
  - geneve: fix TOS inheriting for ipv4 (Matthias May)   
  - atm: idt77252: fix use-after-free bugs caused by tst_timer (Duoming Zhou)   
  - xen/xenbus: fix return type in xenbus_file_read() (Dan Carpenter)   
  - nfp: ethtool: fix the display error of `ethtool -m DEVNAME` (Yu Xiao)   
  - NTB: ntb_tool: uninitialized heap data in tool_fn_write() (Dan Carpenter)   
  - tools build: Switch to new openssl API for test-libcrypto (Roberto Sassu)   
  - kbuild: dummy-tools: avoid tmpdir leak in dummy gcc (Ondrej Mosnacek)   
  - ceph: don't leak snap_rwsem in handle_cap_grant (Jeff Layton)   
  - tools/vm/slabinfo: use alphabetic order when two values are equal (Yuanzheng Song)   
  - ceph: use correct index when encoding client supported features (Luís Henriques)   
  - spi: dt-bindings: zynqmp-qspi: add missing 'required' (Krzysztof Kozlowski)   
  - spi: dt-bindings: cadence: add missing 'required' (Krzysztof Kozlowski)   
  - dt-bindings: clock: qcom,gcc-msm8996: add more GCC clock sources (Dmitry Baryshkov)   
  - dt-bindings: arm: qcom: fix MSM8994 boards compatibles (Krzysztof Kozlowski)   
  - dt-bindings: arm: qcom: fix MSM8916 MTP compatibles (Krzysztof Kozlowski)   
  - dt-bindings: arm: qcom: fix Longcheer L8150 compatibles (Krzysztof Kozlowski)   
  - dt-bindings: gpio: zynq: Add missing compatible strings (Michal Simek)   
  - vsock: Set socket state back to SS_UNCONNECTED in vsock_connect_timeout() (Peilin Ye)   
  - vsock: Fix memory leak in vsock_connect() (Peilin Ye)   
  - plip: avoid rcu debug splat (Florian Westphal)   
  - ipv6: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - mlx5: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - geneve: do not use RT_TOS for IPv6 flowlabel (Matthias May)   
  - ACPI: property: Return type of acpi_add_nondev_subnodes() should be bool (Sakari Ailus)   
  - octeontx2-af: Fix key checking for source mac (Subbaraya Sundeep)   
  - octeontx2-af: Fix mcam entry resource leak (Subbaraya Sundeep)   
  - octeontx2-af: suppress external profile loading warning (Harman Kalra)   
  - octeontx2-af: Apply tx nibble fixup always (Stanislaw Kardach)   
  - octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (Naveen Mamindlapalli)   
  - Input: exc3000 - fix return value check of wait_for_completion_timeout (Miaoqian Lin)   
  - pinctrl: qcom: sm8250: Fix PDC map (Jianhua Lu)   
  - pinctrl: sunxi: Add I/O bias setting for H6 R-PIO (Samuel Holland)   
  - pinctrl: amd: Don't save/restore interrupt status and wake status bits (Basavaraj Natikar)   
  - pinctrl: qcom: msm8916: Allow CAMSS GP clocks to be muxed (Nikita Travkin)   
  - pinctrl: nomadik: Fix refcount leak in nmk_pinctrl_dt_subnode_to_map (Miaoqian Lin)   
  - dt-bindings: arm: qcom: fix Alcatel OneTouch Idol 3 compatibles (Krzysztof Kozlowski)   
  - selftests: forwarding: Fix failing tests with old libnet (Ido Schimmel)   
  - net: bgmac: Fix a BUG triggered by wrong bytes_compl (Sandor Bodo-Merle)   
  - net: bcmgenet: Indicate MAC is in charge of PHY PM (Florian Fainelli)   
  - net: phy: Warn about incorrect mdio_bus_phy_resume() state (Florian Fainelli)   
  - devlink: Fix use-after-free after a failed reload (Ido Schimmel)   
  - virtio_net: fix memory leak inside XPD_TX with mergeable (Xuan Zhuo)   
  - SUNRPC: Reinitialise the backchannel request buffers before reuse (Trond Myklebust)   
  - SUNRPC: Fix xdr_encode_bool() (Chuck Lever)   
  - sunrpc: fix expiry of auth creds (Dan Aloni)   
  - m68k: coldfire/device.c: protect FLEXCAN blocks (Randy Dunlap)   
  - net: atlantic: fix aq_vec index out of range error (Chia-Lin Kao (AceLan))   
  - can: j1939: j1939_session_destroy(): fix memory leak of skbs (Fedor Pchelkin)   
  - can: mcp251x: Fix race condition on receive interrupt (Sebastian Würl)   
  - bpf: Check the validity of max_rdwr_access for sock local storage map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for sock{map,hash} iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for sock local storage map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for hash map iterator (Hou Tao)   
  - bpf: Acquire map uref in .init_seq_private for array map iterator (Hou Tao)   
  - bpf: Don't reinit map value in prealloc_lru_pop (Kumar Kartikeya Dwivedi)   
  - BPF: Fix potential bad pointer dereference in bpf_sys_bpf() (Jinghao Jia)   
  - NFSv4/pnfs: Fix a use-after-free bug in open (Trond Myklebust)   
  - NFSv4.1: RECLAIM_COMPLETE must handle EACCES (Zhang Xianwei)   
  - NFSv4: Fix races in the legacy idmapper upcall (Trond Myklebust)   
  - NFSv4.1: Handle NFS4ERR_DELAY replies to OP_SEQUENCE correctly (Trond Myklebust)   
  - NFSv4.1: Don't decrease the value of seq_nr_highest_sent (Trond Myklebust)   
  - Documentation: ACPI: EINJ: Fix obsolete example (Qifu Zhang)   
  - apparmor: Fix memleak in aa_simple_write_to_buffer() (Xiu Jianfeng)   
  - apparmor: fix reference count leak in aa_pivotroot() (Xin Xiong)   
  - apparmor: fix overlapping attachment computation (John Johansen)   
  - apparmor: fix setting unconfined mode on a loaded profile (John Johansen)   
  - apparmor: fix aa_label_asxprint return check (Tom Rix)   
  - apparmor: Fix failed mount permission check error message (John Johansen)   
  - apparmor: fix absroot causing audited secids to begin with = (John Johansen)   
  - apparmor: fix quiet_denied for file rules (John Johansen)   
  - can: ems_usb: fix clang's -Wunaligned-access warning (Marc Kleine-Budde)   
  - dt-bindings: usb: mtk-xhci: Allow wakeup interrupt-names to be optional (Nícolas F. R. A. Prado)   
  - ALSA: usb-audio: More comprehensive mixer map for ASUS ROG Zenith II (Takashi Iwai)   
  - tracing: Have filter accept "common_cpu" to be consistent (Steven Rostedt (Google))   
  - tracing/probes: Have kprobes and uprobes use $COMM too (Steven Rostedt (Google))   
  - tracing/eprobes: Have event probes be consistent with kprobes and uprobes (Steven Rostedt (Google))   
  - tracing/eprobes: Do not hardcode $comm as a string (Steven Rostedt (Google))   
  - tracing/eprobes: Do not allow eprobes to use $stack, or % for regs (Steven Rostedt (Google))   
  - tracing/perf: Fix double put of trace event when init fails (Steven Rostedt (Google))   
  - x86/kprobes: Fix JNG/JNLE emulation (Nadav Amit)   
  - cifs: Fix memory leak on the deferred close (Zhang Xiaoxu)   
  - btrfs: fix lost error handling when looking up extended ref on log replay (Filipe Manana)   
  - btrfs: reset RO counter on block group if we fail to relocate (Josef Bacik)   
  - btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (Zixuan Fu)   
  - mmc: meson-gx: Fix an error handling path in meson_mmc_probe() (Christophe JAILLET)   
  - mmc: pxamci: Fix an error handling path in pxamci_probe() (Christophe JAILLET)   
  - mmc: pxamci: Fix another error handling path in pxamci_probe() (Christophe JAILLET)   
  - ata: libata-eh: Add missing command name (Damien Le Moal)   
  - drm/amd/display: Check correct bounds for stream encoder instances for DCN303 (Aurabindo Pillai)   
  - drm/ttm: Fix dummy res NULL ptr deref bug (Arunpravin Paneer Selvam)   
  - drm/nouveau: recognise GA103 (Karol Herbst)   
  - x86/mm: Use proper mask when setting PUD mapping (Aaron Lu)   
  - KVM: Unconditionally get a ref to /dev/kvm module when creating a VM (Sean Christopherson)   
  - ALSA: hda/realtek: Add quirk for Clevo NS50PU, NS70PU (Christoffer Sandberg)   
  - ALSA: info: Fix llseek return value when using callback (Amadeusz Sławiński)   
  - LTS version: v5.15.62 (Jack Vogel)   
  - btrfs: raid56: don't trust any cached sector in __raid56_parity_recover() (Qu Wenruo)   
  - btrfs: only write the sectors in the vertical stripe which has data stripes (Qu Wenruo)   
  - x86/ftrace: Use alternative RET encoding (Peter Zijlstra)   
  - x86/ibt,ftrace: Make function-graph play nice (Peter Zijlstra)   
  - Revert "x86/ftrace: Use alternative RET encoding" (Thadeu Lima de Souza Cascardo)   
  - ksmbd: fix heap-based overflow in set_ntacl_dacl() (Namjae Jeon)   
  - ksmbd: prevent out of bound read for SMB2_WRITE (Hyunchul Lee)   
  - net_sched: cls_route: disallow handle of 0 (Jamal Hadi Salim)   
  - tee: add overflow check in register_shm_helper() (Jens Wiklander)   
  - io_uring: use original request task for inflight tracking (Jens Axboe)   
  - LTS version: v5.15.61 (Jack Vogel)   
  - scsi: lpfc: Resolve some cleanup issues following SLI path refactoring (James Smart)   
  - scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() (James Smart)   
  - scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup() (James Smart)   
  - drm/bridge: Move devm_drm_of_get_bridge to bridge/panel.c (Maxime Ripard)   
  - Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm regression (Luiz Augusto von Dentz)   
  - Revert "net: usb: ax88179_178a needs FLAG_SEND_ZLP" (Jose Alonso)   
  - io_uring: mem-account pbuf buckets (Pavel Begunkov)   
  - drm/meson: Fix refcount leak in meson_encoder_hdmi_init (Miaoqian Lin)   
  - drm/msm: Fix dirtyfb refcounting (Rob Clark)   
  - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (Kees Cook)   
  - drm/vc4: change vc4_dma_range_matches from a global to static (Tom Rix)   
  - net: phy: smsc: Disable Energy Detect Power-Down in interrupt mode (Lukas Wunner)   
  - drm/bridge: tc358767: Fix (e)DP bridge endpoint parsing in dedicated function (Marek Vasut)   
  - Revert "s390/smp: enforce lowcore protection on CPU restart" (Alexander Gordeev)   
  - Revert "mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv" (Greg Kroah-Hartman)   
  - crypto: lib/blake2s - reduce stack frame usage in self test (Jason A. Donenfeld)   
  - tcp: fix over estimation in sk_forced_mem_schedule() (Eric Dumazet)   
  - mac80211: fix a memory leak where sta_info is not freed (Ahmed Zaki)   
  - tracing: Use a struct alignof to determine trace event field alignment (Steven Rostedt (Google))   
  - powerpc: Fix eh field when calling lwarx on PPC32 (Christophe Leroy)   
  - xen-blkfront: Apply 'feature_persistent' parameter when connect (SeongJae Park)   
  - xen-blkback: Apply 'feature_persistent' parameter when connect (Maximilian Heyne)   
  - xen-blkback: fix persistent grants negotiation (SeongJae Park)   
  - tpm: eventlog: Fix section mismatch for DEBUG_SECTION_MISMATCH (Huacai Chen)   
  - KEYS: asymmetric: enforce SM2 signature use pkey algo (Tianjia Zhang)   
  - ext4: fix race when reusing xattr blocks (Jan Kara)   
  - ext4: unindent codeblock in ext4_xattr_block_set() (Jan Kara)   
  - ext4: use kmemdup() to replace kmalloc + memcpy (Shuqi Zhang)   
  - ext4: remove EA inode entry from mbcache on inode eviction (Jan Kara)   
  - ext4: make sure ext4_append() always allocates new block (Lukas Czerner)   
  - ext4: check if directory block is within i_size (Lukas Czerner)   {CVE-2022-1184} 
  - ext4: fix warning in ext4_iomap_begin as race between bmap and write (Ye Bin)   
  - ext4: correct the misjudgment in ext4_iget_extra_inode (Baokun Li)   
  - ext4: correct max_inline_xattr_value_size computing (Baokun Li)   
  - ext4: fix use-after-free in ext4_xattr_set_entry (Baokun Li)   
  - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (Baokun Li)   
  - ext4: fix extent status tree race in writeback error recovery path (Eric Whitney)   
  - ext4: update s_overhead_clusters in the superblock during an on-line resize (Theodore Ts'o)   
  - tracing: Avoid -Warray-bounds warning for __rel_loc macro (Masami Hiramatsu)   
  - tracing: Add '__rel_loc' using trace event macros (Masami Hiramatsu)   
  - dm raid: fix address sanitizer warning in raid_resume (Mikulas Patocka)   
  - dm raid: fix address sanitizer warning in raid_status (Mikulas Patocka)   
  - KVM: nVMX: Attempt to load PERF_GLOBAL_CTRL on nVMX xfer iff it exists (Sean Christopherson)   
  - KVM: VMX: Add helper to check if the guest PMU has PERF_GLOBAL_CTRL (Sean Christopherson)   
  - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU doesn't support global_ctrl (Like Xu)   
  - KVM: VMX: Mark all PERF_GLOBAL_(OVF)_CTRL bits reserved if there's no vPMU (Sean Christopherson)   
  - KVM: x86/pmu: Introduce the ctrl_mask value for fixed counter (Like Xu)   
  - powerpc/powernv/kvm: Use darn for H_RANDOM on Power9 (Jason A. Donenfeld)   
  - ACPI: CPPC: Do not prevent CPPC from working in the future (Rafael J. Wysocki)   
  - btrfs: properly flag filesystem with BTRFS_FEATURE_INCOMPAT_BIG_METADATA (Nikolay Borisov)   
  - btrfs: reset block group chunk force if we have to wait (Josef Bacik)   
  - btrfs: ensure pages are unlocked on cow_file_range() failure (Naohiro Aota)   
  - block: don't allow the same type rq_qos add more than once (Jinke Han)   
  - block: remove the struct blk_queue_ctx forward declaration (Christoph Hellwig)   
  - locking/csd_lock: Change csdlock_debug from early_param to __setup (Chen Zhongjin)   
  - timekeeping: contribute wall clock to rng on time change (Jason A. Donenfeld)   
  - ARM: remove some dead code (Ard Biesheuvel)   
  - net/9p: Initialize the iounit field during fid creation (Tyler Hicks)   
  - dm thin: fix use-after-free crash in dm_sm_register_threshold_callback (Luo Meng)   
  - kexec, KEYS, s390: Make use of built-in and secondary keyring for signature verification (Michal Suchanek)   
  - dm writecache: set a default MAX_WRITEBACK_JOBS (Mikulas Patocka)   
  - tty: 8250: Add support for Brainboxes PX cards. (Cameron Williams)   
  - serial: 8250: Add proper clock handling for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Fold EndRun device support into OxSemi Tornado code (Maciej W. Rozycki)   
  - serial: 8250_pci: Replace dev_*() by pci_*() macros (Andy Shevchenko)   
  - serial: 8250_pci: Refactor the loop in pci_ite887x_init() (Andy Shevchenko)   
  - PCI: qcom: Power on PHY before IPQ8074 DBI register accesses (Robert Marko)   
  - PCI/AER: Iterate over error counters instead of error strings (Mohamed Khalfella)   
  - iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (Alexander Lobakin)   
  - KVM: x86: Signal #GP, not -EPERM, on bad WRMSR(MCi_CTL/STATUS) (Sean Christopherson)   
  - KVM: set_msr_mce: Permit guests to ignore single-bit ECC errors (Lev Kujawski)   
  - intel_th: pci: Add Raptor Lake-S CPU support (Alexander Shishkin)   
  - intel_th: pci: Add Raptor Lake-S PCH support (Alexander Shishkin)   
  - intel_th: pci: Add Meteor Lake-P support (Alexander Shishkin)   
  - scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (James Smart)   
  - scsi: lpfc: SLI path split: Refactor SCSI paths (James Smart)   
  - scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4 (James Smart)   
  - scsi: lpfc: SLI path split: Refactor lpfc_iocbq (James Smart)   
  - scsi: lpfc: Fix EEH support for NVMe I/O (James Smart)   
  - firmware: arm_scpi: Ensure scpi_info is not assigned if the probe fails (Sudeep Holla)   
  - usbnet: smsc95xx: Fix deadlock on runtime resume (Lukas Wunner)   
  - usbnet: smsc95xx: Forward PHY interrupts to PHY driver to avoid polling (Lukas Wunner)   
  - usbnet: smsc95xx: Avoid link settings race on interrupt reception (Lukas Wunner)   
  - usbnet: smsc95xx: Don't clear read-only PHY interrupt (Lukas Wunner)   
  - drm/vc4: drv: Adopt the dma configuration from the HVS or V3D component (Dave Stevenson)   
  - drm/dp/mst: Read the extended DPCD capabilities during system resume (Imre Deak)   
  - crypto: blake2s - remove shash module (Jason A. Donenfeld)   
  - drm/mediatek: Keep dsi as LP00 before dcs cmds transfer (Jitao Shi)   
  - drm/mediatek: Allow commands to be sent during video mode (Julien STEPHAN)   
  - spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (David Collins)   
  - __follow_mount_rcu(): verify that mount_lock remains unchanged (Al Viro)   
  - Input: gscps2 - check return value of ioremap() in gscps2_probe() (Xie Shaowen)   
  - SMB3: fix lease break timeout when multiple deferred close handles for the same file. (Bharath SM)   
  - x86/olpc: fix 'logical not is only applied to the left hand side' (Alexander Lobakin)   
  - x86/kprobes: Update kcb status flag after singlestepping (Masami Hiramatsu (Google))   
  - ftrace/x86: Add back ftrace_expected assignment (Steven Rostedt (Google))   
  - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (Kim Phillips)   
  - scsi: qla2xxx: Fix losing FCP-2 targets during port perturbation tests (Arun Easi)   
  - scsi: qla2xxx: Fix losing target when it reappears during delete (Arun Easi)   
  - scsi: qla2xxx: Fix losing FCP-2 targets on long port disable with I/Os (Arun Easi)   
  - scsi: qla2xxx: Wind down adapter after PCIe error (Quinn Tran)   
  - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Quinn Tran)   
  - scsi: qla2xxx: Fix excessive I/O error messages by default (Arun Easi)   
  - scsi: qla2xxx: Fix crash due to stale SRB access around I/O timeouts (Arun Easi)   
  - scsi: qla2xxx: Turn off multi-queue for 8G adapters (Quinn Tran)   
  - scsi: qla2xxx: Fix discovery issues in FC-AL topology (Arun Easi)   
  - scsi: qla2xxx: Fix imbalance vha->vref_count (Quinn Tran)   
  - scsi: zfcp: Fix missing auto port scan and thus missing target ports (Steffen Maier)   
  - scsi: ufs: core: Correct ufshcd_shutdown() flow (Peter Wang)   
  - video: fbdev: s3fb: Check the size of screen before memset_io() (Zheyu Ma)   
  - video: fbdev: arkfb: Check the size of screen before memset_io() (Zheyu Ma)   
  - video: fbdev: vt8623fb: Check the size of screen before memset_io() (Zheyu Ma)   
  - f2fs: do not allow to decompress files have FI_COMPRESS_RELEASED (Jaewook Kim)   
  - f2fs: allow compression for mmap files in compress_mode=user (Sungjong Seo)   
  - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (Andrea Righi)   
  - sched/core: Do not requeue task on CPU excluded from cpus_mask (Mel Gorman)   
  - sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle (Tianchen Ding)   
  - sched: Fix the check of nr_running at queue wakelist (Tianchen Ding)   
  - tools/thermal: Fix possible path truncations (Florian Fainelli)   
  - video: fbdev: arkfb: Fix a divide-by-zero bug in ark_set_pixclock() (Zheyu Ma)   
  - x86/numa: Use cpumask_available instead of hardcoded NULL check (Siddh Raman Pant)   
  - sched, cpuset: Fix dl_cpu_busy() panic due to empty cs->cpus_allowed (Waiman Long)   
  - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (Dietmar Eggemann)   
  - scripts/faddr2line: Fix vmlinux detection on arm64 (Josh Poimboeuf)   
  - genelf: Use HAVE_LIBCRYPTO_SUPPORT, not the never defined HAVE_LIBCRYPTO (Arnaldo Carvalho de Melo)   
  - powerpc/pci: Fix PHB numbering when using opal-phbid (Michael Ellerman)   
  - x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero (Chenyi Qiang)   
  - kprobes: Forbid probing on trampoline and BPF code areas (Chen Zhongjin)   
  - perf symbol: Fail to read phdr workaround (Ian Rogers)   
  - powerpc/cell/axon_msi: Fix refcount leak in setup_msi_msg_address (Miaoqian Lin)   
  - powerpc/xive: Fix refcount leak in xive_get_max_prio (Miaoqian Lin)   
  - powerpc/spufs: Fix refcount leak in spufs_init_isolated_loader (Miaoqian Lin)   
  - f2fs: fix to remove F2FS_COMPR_FL and tag F2FS_NOCOMP_FL at the same time (Chao Liu)   
  - s390/smp: enforce lowcore protection on CPU restart (Alexander Gordeev)   
  - s390/maccess: rework absolute lowcore accessors (Alexander Gordeev)   
  - s390/smp: cleanup control register update routines (Alexander Gordeev)   
  - s390/smp: cleanup target CPU callback starting (Alexander Gordeev)   
  - s390/dump: fix os_info virtual vs physical address confusion (Alexander Gordeev)   
  - tty: serial: fsl_lpuart: correct the count of break characters (Sherry Sun)   
  - powerpc/pci: Prefer PCI domain assignment via DT 'linux,pci-domain' and alias (Pali Rohár)   
  - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (Alexey Kardashevskiy)   
  - powerpc/32: Do not allow selection of e5500 or e6500 CPUs on PPC32 (Christophe Leroy)   
  - powerpc/32: Call mmu_mark_initmem_nx() regardless of data block mapping. (Christophe Leroy)   
  - ASoC: mchp-spdifrx: disable end of block interrupt on failures (Claudiu Beznea)   
  - video: fbdev: sis: fix typos in SiS_GetModeID() (Rustam Subkhankulov)   
  - video: fbdev: amba-clcd: Fix refcount leak bugs (Liang He)   
  - watchdog: armada_37xx_wdt: check the return value of devm_ioremap() in armada_37xx_wdt_probe() (William Dean)   
  - watchdog: sp5100_tco: Fix a memory leak of EFCH MMIO resource (Jean Delvare)   
  - ASoC: audio-graph-card: Add of_node_put() in fail path (Liang He)   
  - fuse: Remove the control interface for virtio-fs (Xie Yongji)   
  - ASoC: qcom: q6dsp: Fix an off-by-one in q6adm_alloc_copp() (Christophe JAILLET)   
  - ASoC: imx-card: use snd_pcm_format_t type for asrc_format (Shengjiu Wang)   
  - ASoC: fsl_easrc: use snd_pcm_format_t type for sample_format (Shengjiu Wang)   
  - ASoC: fsl-asoc-card: force cast the asrc_format type (Shengjiu Wang)   
  - ASoC: fsl_asrc: force cast the asrc_format type (Shengjiu Wang)   
  - s390/zcore: fix race when reading from hardware system area (Alexander Gordeev)   
  - s390/crash: fix incorrect number of bytes to copy to user space (Alexander Gordeev)   
  - s390/maccess: fix semantics of memcpy_real() and its callers (Alexander Gordeev)   
  - s390/dump: fix old lowcore virtual vs physical address confusion (Alexander Gordeev)   
  - perf tools: Fix dso_id inode generation comparison (Adrian Hunter)   
  - iommu/arm-smmu: qcom_iommu: Add of_node_put() when breaking out of loop (Liang He)   
  - mfd: max77620: Fix refcount leak in max77620_initialise_fps (Miaoqian Lin)   
  - mfd: t7l66xb: Drop platform disable callback (Uwe Kleine-König)   
  - remoteproc: sysmon: Wait for SSCTL service to come up (Sibi Sankar)   
  - remoteproc: qcom: pas: Check if coredump is enabled (Siddharth Gupta)   
  - proc: fix a dentry lock race between release_task and lookup (Zhihao Cheng)   
  - lib/smp_processor_id: fix imbalanced instrumentation_end() call (Tetsuo Handa)   
  - kfifo: fix kfifo_to_user() return type (Dan Carpenter)   
  - rpmsg: qcom_smd: Fix refcount leak in qcom_smd_parse_edge (Miaoqian Lin)   
  - MIPS: Fixed __debug_virt_addr_valid() (Florian Fainelli)   
  - net: 9p: fix refcount leak in p9_read_work() error handling (Hangyu Hua)   
  - 9p: Add client parameter to p9_req_put() (Kent Overstreet)   
  - 9p: Drop kref usage (Kent Overstreet)   
  - 9p: fix a bunch of checkpatch warnings (Dominique Martinet)   
  - iommu/exynos: Handle failed IOMMU device registration properly (Sam Protsenko)   
  - serial: 8250_bcm7271: Save/restore RTS in suspend/resume (Doug Berger)   
  - ASoC: mt6359: Fix refcount leak bug (Liang He)   
  - swiotlb: fail map correctly with failed io_tlb_default_mem (Robin Murphy)   
  - MIPS: vdso: Utilize __pa() for gic_pfn (Florian Fainelli)   
  - tty: n_gsm: fix missing corner cases in gsmld_poll() (Daniel Starke)   
  - tty: n_gsm: fix DM command (Daniel Starke)   
  - tty: n_gsm: fix wrong T1 retry count handling (Daniel Starke)   
  - serial: 8250_fsl: Don't report FE, PE and OE twice (Uwe Kleine-König)   
  - vfio/ccw: Do not change FSM state in subchannel event (Eric Farman)   
  - remoteproc: qcom: wcnss: Fix handling of IRQs (Sireesh Kodali)   
  - ASoC: imx-card: Fix DSD/PDM mclk frequency (Shengjiu Wang)   
  - ASoC: qcom: Fix missing of_node_put() in asoc_qcom_lpass_cpu_platform_probe() (Liang He)   
  - tty: n_gsm: fix resource allocation order in gsm_activate_mux() (Daniel Starke)   
  - tty: n_gsm: fix race condition in gsmld_write() (Daniel Starke)   
  - tty: n_gsm: fix packet re-transmission without open control channel (Daniel Starke)   
  - tty: n_gsm: fix non flow control frames during mux flow off (Daniel Starke)   
  - tty: n_gsm: fix missing timer to handle stalled links (Daniel Starke)   
  - tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output() (Daniel Starke)   
  - tty: n_gsm: fix tty registration before control channel open (Daniel Starke)   
  - tty: n_gsm: fix user open not possible at responder until initiator open (Daniel Starke)   
  - tty: n_gsm: Delete gsmtty open SABM frame when config requester (Zhenguo Zhao)   
  - ASoC: samsung: change gpiod_speaker_power and rx1950_audio from global to static variables (Tom Rix)   
  - powerpc/perf: Optimize clearing the pending PMI and remove WARN_ON for PMI check in power_pmu_disable (Athira Rajeev)   
  - ASoC: samsung: h1940_uda1380: include proepr GPIO consumer header (Krzysztof Kozlowski)   
  - remoteproc: imx_rproc: Fix refcount leak in imx_rproc_addr_init (Miaoqian Lin)   
  - profiling: fix shift too large makes kernel panic (Chen Zhongjin)   
  - selftests/livepatch: better synchronize test_klp_callbacks_busy (Joe Lawrence)   
  - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init (Miaoqian Lin)   
  - rpmsg: mtk_rpmsg: Fix circular locking dependency (AngeloGioacchino Del Regno)   
  - rpmsg: char: Add mutex protection for rpmsg_eptdev_open() (Shengjiu Wang)   
  - ASoC: codecs: wcd9335: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)   
  - ASoC: codecs: msm8916-wcd-digital: move gains from SX_TLV to S8_TLV (Srinivas Kandagatla)   
  - serial: 8250_dw: Store LSR into lsr_saved_flags in dw8250_tx_wait_empty() (Ilpo Järvinen)   
  - serial: 8250: dma: Allow driver operations before starting DMA transfers (Miquel Raynal)   
  - serial: 8250: Export ICR access helpers for internal use (Maciej W. Rozycki)   
  - ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe (Miaoqian Lin)   
  - ASoC: codecs: da7210: add check for i2c_add_driver (Jiasheng Jiang)   
  - ASoC: mt6797-mt6351: Fix refcount leak in mt6797_mt6351_dev_probe (Miaoqian Lin)   
  - ASoC: mediatek: mt8173: Fix refcount leak in mt8173_rt5650_rt5676_dev_probe (Miaoqian Lin)   
  - ASoC: imx-audmux: Silence a clang warning (Fabio Estevam)   
  - ASoC: samsung: Fix error handling in aries_audio_probe (Miaoqian Lin)   
  - ASoC: cros_ec_codec: Fix refcount leak in cros_ec_codec_platform_probe (Miaoqian Lin)   
  - opp: Fix error check in dev_pm_opp_attach_genpd() (Tang Bin)   
  - usb: cdns3: Don't use priv_dev uninitialized in cdns3_gadget_ep_enable() (Nathan Chancellor)   
  - jbd2: fix assertion 'jh->b_frozen_data == NULL' failure when journal aborted (Zhihao Cheng)   
  - ext4: recover csum seed of tmp_inode after migrating to extents (Li Lingfeng)   
  - jbd2: fix outstanding credits assert in jbd2_journal_commit_transaction() (Zhang Yi)   
  - block: ensure iov_iter advances for added pages (Keith Busch)   
  - block/bio: remove duplicate append pages code (Keith Busch)   
  - nvme: catch -ENODEV from nvme_revalidate_zones again (Christoph Hellwig)   
  - nvme: don't return an error from nvme_configure_metadata (Christoph Hellwig)   
  - nvme: disable namespace access for unsupported metadata (Keith Busch)   
  - nvme: define compat_ioctl again to unbreak 32-bit userspace. (Nick Bowler)   
  - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (Bean Huo)   
  - null_blk: fix ida error handling in null_add_dev() (Dan Carpenter)   
  - block/rnbd-srv: Set keep_id to true after mutex_trylock (Md Haris Iqbal)   
  - RDMA/rxe: Fix error unwind in rxe_create_qp() (Zhu Yanjun)   
  - RDMA/rxe: Remove the is_user members of struct rxe_sq/rxe_rq/rxe_srq (Xiao Yang)   
  - RDMA/rxe: Add memory barriers to kernel queues (Bob Pearson)   
  - RDMA/mlx5: Add missing check for return value in get namespace flow (Maor Gottlieb)   
  - of/fdt: declared return type does not match actual return type (Xu Qiang)   
  - selftests: kvm: set rax before vmcall (Andrei Vagin)   
  - mm/mmap.c: fix missing call to vm_unacct_memory in mmap_region (Miaohe Lin)   
  - android: binder: stop saving a pointer to the VMA (Liam R. Howlett)   
  - RDMA/srpt: Fix a use-after-free (Bart Van Assche)   
  - RDMA/srpt: Introduce a reference count in struct srpt_device (Bart Van Assche)   
  - RDMA/srpt: Duplicate port name members (Bart Van Assche)   
  - platform/olpc: Fix uninitialized data in debugfs write (Dan Carpenter)   
  - KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP (Sean Christopherson)   
  - mtd: spi-nor: fix spi_nor_spimem_setup_op() call in spi_nor_erase_{sector,chip}() (Patrice Chotard)   
  - usb: cdns3: change place of 'priv_ep' assignment in cdns3_gadget_ep_dequeue(), cdns3_gadget_ep_enable() (Andrey Strachuk)   
  - USB: serial: fix tty-port initialized comments (Johan Hovold)   
  - HID: amd_sfh: Handle condition of "no sensors" (Basavaraj Natikar)   
  - PCI: tegra194: Fix link up retry sequence (Vidya Sagar)   
  - PCI: tegra194: Fix Root Port interrupt handling (Vidya Sagar)   
  - RDMA/rxe: For invalidate compare according to set keys in mr (Md Haris Iqbal)   
  - HID: alps: Declare U1_UNICORN_LEGACY support (Artem Borisov)   
  - mmc: cavium-thunderx: Add of_node_put() when breaking out of loop (Liang He)   
  - mmc: cavium-octeon: Add of_node_put() when breaking out of loop (Liang He)   
  - RDMA/rxe: Fix mw bind to allow any consumer key portion (Bob Pearson)   
  - scripts/gdb: fix 'lx-dmesg' on 32 bits arch (Antonio Borneo)   
  - scripts/gdb: lx-dmesg: read records individually (John Ogness)   
  - dmaengine: imx-dma: Cast of_device_get_match_data() with (uintptr_t) (Fabio Estevam)   
  - HID: amd_sfh: Add NULL check for hid device (Basavaraj Natikar)   
  - HID: mcp2221: prevent a buffer overflow in mcp_smbus_write() (Harshit Mogalapalli)   
  - gpio: gpiolib-of: Fix refcount bugs in of_mm_gpiochip_add_data() (Liang He)   
  - RDMA/hfi1: fix potential memory leak in setup_base_ctxt() (Jianglei Nie)   
  - clk: qcom: gcc-msm8939: Fix weird field spacing in ftbl_gcc_camss_cci_clk (Bryan O'Donoghue)   
  - iio: cros: Register FIFO callback after sensor is registered (Gwendal Grignou)   
  - RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (Cheng Xu)   
  - RDMA/hns: Fix incorrect clearing of interrupt status register (Haoyue Xu)   
  - RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (Jianglei Nie)   
  - RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (Md Haris Iqbal)   
  - RDMA/rtrs-clt: Rename rtrs_clt_sess to rtrs_clt_path (Vaishali Thakkar)   
  - RDMA/rtrs-srv: Rename rtrs_srv_sess to rtrs_srv_path (Vaishali Thakkar)   
  - RDMA/rtrs: Rename rtrs_sess to rtrs_path (Vaishali Thakkar)   
  - RDMA/rtrs: Do not allow sessname to contain special symbols / and . (Md Haris Iqbal)   
  - RDMA/rtrs: Introduce destroy_cq helper (Md Haris Iqbal)   
  - RDMA/rtrs: Replace duplicate check with is_pollqueue helper (Jack Wang)   
  - RDMA/rtrs: Fix warning when use poll mode on client side. (Jack Wang)   
  - RDMA/rtrs-srv: Fix modinfo output for stringify (Jack Wang)   
  - RDMA/irdma: Fix setting of QP context err_rq_idx_valid field (Mustafa Ismail)   
  - RDMA/irdma: Fix VLAN connection with wildcard address (Mustafa Ismail)   
  - RDMA/irdma: Fix a window for use-after-free (Mustafa Ismail)   
  - um: random: Don't initialise hwrng struct with zero (Christopher Obbard)   
  - interconnect: imx: fix max_node_id (Peng Fan)   
  - phy: stm32: fix error return in stm32_usbphyc_phy_init (Fabrice Gasnier)   
  - eeprom: idt_89hpesx: uninitialized data in idt_dbgfs_csr_write() (Dan Carpenter)   
  - usb: dwc3: qcom: fix missing optional irq warnings (Johan Hovold)   
  - usb: dwc3: core: Do not perform GCTL_CORE_SOFTRESET during bootup (Rohith Kollalsi)   
  - usb: dwc3: core: Deprecate GCTL.CORESOFTRESET (Thinh Nguyen)   
  - usb: aspeed-vhub: Fix refcount leak bug in ast_vhub_init_desc() (Liang He)   
  - usb: gadget: udc: amd5536 depends on HAS_DMA (Randy Dunlap)   
  - xtensa: iss: fix handling error cases in iss_net_configure() (Yang Yingliang)   
  - xtensa: iss/network: provide release() callback (Max Filippov)   
  - scsi: smartpqi: Fix DMA direction for RAID requests (Mahesh Rajashekhara)   
  - PCI: qcom: Set up rev 2.1.0 PARF_PHY before enabling clocks (Christian Marangi)   
  - PCI/portdrv: Don't disable AER reporting in get_port_device_capability() (Stefan Roese)   
  - KVM: s390: pv: leak the topmost page table when destroy fails (Claudio Imbrenda)   
  - mmc: block: Add single read for 4k sector cards (Christian Loehle)   
  - of: device: Fix missing of_node_put() in of_dma_set_restricted_buffer (Liang He)   
  - mmc: sdhci-of-at91: fix set_uhs_signaling rewriting of MC1R (Eugen Hristev)   
  - memstick/ms_block: Fix a memory leak (Christophe JAILLET)   
  - memstick/ms_block: Fix some incorrect memory allocation (Christophe JAILLET)   
  - mmc: renesas_sdhi: Get the reset handle early in the probe (Lad Prabhakar)   
  - mmc: mxcmmc: Silence a clang warning (Fabio Estevam)   
  - mmc: sdhci-of-esdhc: Fix refcount leak in esdhc_signal_voltage_switch (Miaoqian Lin)   
  - staging: rtl8192u: Fix sleep in atomic context bug in dm_fsync_timer_callback (Duoming Zhou)   
  - binder: fix redefinition of seq_file attributes (Carlos Llamas)   
  - intel_th: msu: Fix vmalloced buffers (Alexander Shishkin)   
  - intel_th: msu-sink: Potential dereference of null pointer (Jiasheng Jiang)   
  - intel_th: Fix a resource leak in an error handling path (Christophe JAILLET)   
  - scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (Dan Carpenter)   
  - PCI: endpoint: Don't stop controller when unbinding endpoint function (Shunsuke Mie)   
  - dmaengine: sf-pdma: Add multithread support for a DMA channel (Viacheslav Mitrofanov)   
  - KVM: arm64: Don't return from void function (Quentin Perret)   
  - soundwire: revisit driver bind/unbind and callbacks (Pierre-Louis Bossart)   
  - soundwire: bus_type: fix remove and shutdown support (Pierre-Louis Bossart)   
  - PCI: dwc: Always enable CDM check if "snps,enable-cdm-check" exists (Serge Semin)   
  - PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (Serge Semin)   
  - PCI: dwc: Set INCREASE_REGION_SIZE flag based on limit address (Serge Semin)   
  - PCI: dwc: Disable outbound windows only for controllers using iATU (Serge Semin)   
  - PCI: dwc: Add unroll iATU space support to dw_pcie_disable_atu() (Serge Semin)   
  - PCI: dwc: Stop link on host_init errors and de-initialization (Serge Semin)   
  - mm/mempolicy: fix get_nodes out of bound access (Tianyu Li)   
  - clk: qcom: clk-rcg2: Make sure to not write d=0 to the NMD register (Nikita Travkin)   
  - clk: qcom: clk-rcg2: Fail Duty-Cycle configuration if MND divider is not enabled. (Nikita Travkin)   
  - clk: qcom: camcc-sm8250: Fix topology around titan_top power domain (Vladimir Zapolskiy)   
  - clk: qcom: camcc-sdm845: Fix topology around titan_top power domain (Vladimir Zapolskiy)   
  - clk: qcom: ipq8074: set BRANCH_HALT_DELAY flag for UBI clocks (Robert Marko)   
  - clk: qcom: ipq8074: fix NSS port frequency tables (Robert Marko)   
  - clk: qcom: ipq8074: SW workaround for UBI32 PLL lock (Robert Marko)   
  - clk: qcom: ipq8074: fix NSS core PLL-s (Robert Marko)   
  - RDMA/rxe: Fix deadlock in rxe_do_local_ops() (Bob Pearson)   
  - usb: host: xhci: use snprintf() in xhci_decode_trb() (Sergey Shtylyov)   
  - clk: qcom: gcc-msm8939: Point MM peripherals to system_mm_noc clock (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Add missing system_mm_noc_bfdcd_clk_src (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Fix bimc_ddr_clk_src rcgr base address (Bryan O'Donoghue)   
  - clk: qcom: gcc-msm8939: Add missing SYSTEM_MM_NOC_BFDCD_CLK_SRC (Bryan O'Donoghue)   
  - clk: qcom: clk-krait: unlock spin after mux completion (Ansuel Smith)   
  - driver core: fix potential deadlock in __driver_attach (Zhang Wensheng)   
  - misc: rtsx: Fix an error handling path in rtsx_pci_probe() (Christophe JAILLET)   
  - clk: qcom: camcc-sm8250: Fix halt on boot by reducing driver's init level (Vladimir Zapolskiy)   
  - mtd: dataflash: Add SPI ID table (Mark Brown)   
  - dmaengine: dw-edma: Fix eDMA Rd/Wr-channels and DMA-direction semantics (Serge Semin)   
  - scsi: iscsi: Fix session removal on shutdown (Mike Christie)   
  - scsi: iscsi: Add helper to remove a session from the kernel (Mike Christie)   
  - scsi: iscsi: Allow iscsi_if_stop_conn() to be called from kernel (Mike Christie)   
  - mwifiex: fix sleep in atomic context bugs caused by dev_coredumpv (Duoming Zhou)   
  - mwifiex: Ignore BTCOEX events from the 88W8897 firmware (Jonas Dreßler)   
  - KVM: Don't set Accessed/Dirty bits for ZERO_PAGE (Sean Christopherson)   
  - lib/test_hmm: avoid accessing uninitialized pages (Miaohe Lin)   
  - clk: mediatek: reset: Fix written reset bit offset (Rex-BC Chen)   
  - iio: accel: bma400: Reordering of header files (Jagath Jog J)   
  - platform/chrome: cros_ec: Always expose last resume result (Stephen Boyd)   
  - iio: accel: bma400: Fix the scale min and max macro values (Jagath Jog J)   
  - scsi: qla2xxx: edif: Fix no logout on delete for N2N (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix session thrash (Quinn Tran)   
  - scsi: qla2xxx: edif: Tear down session if keys have been removed (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix no login after app start (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce disruption due to multiple app start (Quinn Tran)   
  - scsi: qla2xxx: edif: Send LOGO for unexpected IKE message (Quinn Tran)   
  - netfilter: xtables: Bring SPDX identifier back (Thomas Gleixner)   
  - usb: xhci: tegra: Fix error check (Tang Bin)   
  - usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init() (Tang Bin)   
  - usb: ohci-nxp: Fix refcount leak in ohci_hcd_nxp_probe (Miaoqian Lin)   
  - usb: host: Fix refcount leak in ehci_hcd_ppc_of_probe (Miaoqian Lin)   
  - fpga: altera-pr-ip: fix unsigned comparison with less than zero (Marco Pagani)   
  - PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (Miaoqian Lin)   
  - mtd: st_spi_fsm: Add a clk_disable_unprepare() in .probe()'s error path (Uwe Kleine-König)   
  - mtd: parsers: ofpart: Fix refcount leak in bcm4908_partitions_fw_offset (Miaoqian Lin)   
  - mtd: partitions: Fix refcount leak in parse_redboot_of (Miaoqian Lin)   
  - mtd: sm_ftl: Fix deadlock caused by cancel_work_sync in sm_release (Duoming Zhou)   
  - HID: cp2112: prevent a buffer overflow in cp2112_xfer() (Harshit Mogalapalli)   
  - PCI: tegra194: Fix PM error handling in tegra_pcie_config_ep() (Miaoqian Lin)   
  - PCI: microchip: Fix refcount leak in mc_pcie_init_irq_domains() (Miaoqian Lin)   
  - phy: samsung: exynosautov9-ufs: correct TSRV register configurations (Chanho Park)   
  - scsi: qla2xxx: edif: Fix n2n login retry for secure device (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix n2n discovery issue with secure target (Quinn Tran)   
  - scsi: qla2xxx: edif: Add retry for ELS passthrough (Quinn Tran)   
  - scsi: qla2xxx: edif: Synchronize NPIV deletion with authentication application (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix inconsistent check of db_flags (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce connection thrash (Quinn Tran)   
  - scsi: qla2xxx: edif: Fix potential stuck session in sa update (Quinn Tran)   
  - scsi: qla2xxx: edif: Reduce Initiator-Initiator thrashing (Quinn Tran)   
  - of: check previous kernel's ima-kexec-buffer against memory bounds (Vaibhav Jain)   
  - mtd: rawnand: meson: Fix a potential double free issue (Christophe JAILLET)   
  - mtd: maps: Fix refcount leak in ap_flash_init (Miaoqian Lin)   
  - mtd: maps: Fix refcount leak in of_flash_probe_versatile (Miaoqian Lin)   
  - clk: renesas: r9a06g032: Fix UART clkgrp bitsel (Ralph Siemsen)   
  - HID: amd_sfh: Don't show client init failed as error when discovery fails (Mario Limonciello)   
  - wireguard: allowedips: don't corrupt stack when detecting overflow (Jason A. Donenfeld)   
  - wireguard: ratelimiter: use hrtimer in selftest (Jason A. Donenfeld)   
  - net: usb: make USB_RTL8153_ECM non user configurable (Maciej Żenczykowski)   
  - dccp: put dccp_qpolicy_full() and dccp_qpolicy_push() in the same lock (Hangyu Hua)   
  - net: ionic: fix error check for vlan flags in ionic_set_nic_features() (Jian Shen)   
  - net: rose: fix netdev reference changes (Eric Dumazet)   
  - netdevsim: Avoid allocation warnings triggered from user space (Jakub Kicinski)   
  - iavf: Fix 'tc qdisc show' listing too many queues (Przemyslaw Patynowski)   
  - iavf: Fix max_rate limiting (Przemyslaw Patynowski)   
  - wifi: rtw88: check the return value of alloc_workqueue() (William Dean)   
  - netdevsim: fib: Fix reference count leak on route deletion failure (Ido Schimmel)   
  - net: allow unbound socket for packets in VRF when tcp_l3mdev_accept set (Mike Manning)   
  - ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH() (Eric Dumazet)   
  - inet: add READ_ONCE(sk->sk_bound_dev_if) in INET_MATCH() (Eric Dumazet)   
  - crypto: hisilicon/sec - fix auth key size error (Kai Ye)   
  - crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (Pali Rohár)   
  - crypto: hisilicon/hpre - don't use GFP_KERNEL to alloc mem during softirq (Zhengchao Shao)   
  - net/mlx5: Adjust log_max_qp to be 18 at most (Maher Sanalla)   
  - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (Maxim Mikityanskiy)   
  - net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (Gal Pressman)   
  - media: cedrus: hevc: Add check for invalid timestamp (Jernej Skrabec)   
  - wifi: libertas: Fix possible refcount leak in if_usb_probe() (Hangyu Hua)   
  - wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (Jose Ignacio Tornos Martinez)   
  - wifi: wil6210: debugfs: fix uninitialized variable use in `wil_write_file_wmi()` (Ammar Faizi)   
  - i2c: mux-gpmux: Add of_node_put() when breaking out of loop (Liang He)   
  - i2c: cadence: Support PEC for SMBus block read (Lars-Peter Clausen)   
  - Bluetooth: hci_intel: Add check for platform_driver_register (Jiasheng Jiang)   
  - can: pch_can: pch_can_error(): initialize errc before using it (Vincent Mailhol)   
  - can: error: specify the values of data[5..7] of CAN error frames (Vincent Mailhol)   
  - can: usb_8dev: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: kvaser_usb_leaf: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: kvaser_usb_hydra: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: sun4i_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: hi311x: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: sja1000: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: rcar_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - can: pch_can: do not report txerr and rxerr during bus-off (Vincent Mailhol)   
  - libbpf: fix an snprintf() overflow check (Dan Carpenter)   
  - selftests/bpf: fix a test for snprintf() overflow (Dan Carpenter)   
  - wifi: p54: add missing parentheses in p54_flush() (Rustam Subkhankulov)   
  - wifi: p54: Fix an error handling path in p54spi_probe() (Christophe JAILLET)   
  - wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi() (Dan Carpenter)   
  - media: staging: media: hantro: Fix typos (Sebastian Fricke)   
  - media: hevc: Embedded indexes in RPS (Benjamin Gaignard)   
  - media: hantro: Simplify postprocessor (Ezequiel Garcia)   
  - media: hantro: postproc: Fix motion vector space size (Ezequiel Garcia)   
  - media: cedrus: h265: Fix flag name (Jernej Skrabec)   
  - fs: check FMODE_LSEEK to control internal pipe splicing (Jason A. Donenfeld)   
  - bpf: Fix subprog names in stack traces. (Alexei Starovoitov)   
  - selftests: timers: clocksource-switch: fix passing errors from child (Wolfram Sang)   
  - selftests: timers: valid-adjtimex: build fix for newer toolchains (Wolfram Sang)   
  - libbpf: Fix the name of a reused map (Anquan Wu)   
  - tcp: make retransmitted SKB fit into the send window (Yonglong Li)   
  - drm/exynos/exynos7_drm_decon: free resources when clk_set_parent() failed. (Jian Zhang)   
  - skmsg: Fix invalid last sg check in sk_msg_recvmsg() (Liu Jian)   
  - mediatek: mt76: eeprom: fix missing of_node_put() in mt76_find_power_limits_node() (Liang He)   
  - mediatek: mt76: mac80211: Fix missing of_node_put() in mt76_led_init() (Liang He)   
  - mt76: mt7921: enlarge maximum VHT MPDU length to 11454 (Deren Wu)   
  - mt76: mt7921: fix aggregation subframes setting to HE max (Deren Wu)   
  - ieee80211: add EHT 1K aggregation definitions (Mordechay Goodstein)   
  - mt76: mt7615: do not update pm stats in case of error (Lorenzo Bianconi)   
  - mt76: mt76x02u: fix possible memory leak in __mt76x02u_mcu_send_msg (Lorenzo Bianconi)   
  - drm/msm/dpu: Fix for non-visible planes (Rob Clark)   
  - drm/msm: Avoid dirtyfb stalls on video mode displays (v2) (Rob Clark)   
  - media: platform: mtk-mdp: Fix mdp_ipi_comm structure alignment (AngeloGioacchino Del Regno)   
  - crypto: hisilicon - Kunpeng916 crypto driver don't sleep when in softirq (Zhengchao Shao)   
  - crypto: hisilicon/sec - don't sleep when in softirq (Zhengchao Shao)   
  - drm/msm/mdp5: Fix global state lock backoff (Rob Clark)   
  - net: hinic: avoid kernel hung in hinic_get_stats64() (Qiao Ma)   
  - net: hinic: fix bug that ethtool get wrong stats (Qiao Ma)   
  - hinic: Use the bitmap API when applicable (Christophe JAILLET)   
  - drm: bridge: sii8620: fix possible off-by-one (Hangyu Hua)   
  - drm/mediatek: dpi: Only enable dpi after the bridge is enabled (Guillaume Ranquet)   
  - drm/mediatek: dpi: Remove output format of YUV (Bo-Chen Chen)   
  - drm/rockchip: Fix an error handling path rockchip_dp_probe() (Christophe JAILLET)   
  - drm/rockchip: vop: Don't crash for invalid duplicate_state() (Brian Norris)   
  - selftests/xsk: Destroy BPF resources only when ctx refcount drops to 0 (Maciej Fijalkowski)   
  - crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (Qian Cai)   
  - drm/vc4: hdmi: Correct HDMI timing registers for interlaced modes (Dave Stevenson)   
  - drm/vc4: hdmi: Fix timings for interlaced modes (Mateusz Kwiatkowski)   
  - drm/vc4: hdmi: Reset HDMI MISC_CONTROL register (Dave Stevenson)   
  - drm/vc4: hdmi: Avoid full hdmi audio fifo writes (Dom Cobley)   
  - drm/vc4: hdmi: Fix HPD GPIO detection (Maxime Ripard)   
  - drm/vc4: dsi: Add correct stop condition to vc4_dsi_encoder_disable iteration (Dave Stevenson)   
  - drm/vc4: dsi: Fix dsi0 interrupt support (Dave Stevenson)   
  - drm/vc4: dsi: Register dsi0 as the correct vc4 encoder type (Dave Stevenson)   
  - drm/vc4: dsi: Correct pixel order for DSI0 (Dave Stevenson)   
  - drm/vc4: dsi: Correct DSI divider calculations (Dave Stevenson)   
  - drm/vc4: dsi: Release workaround buffer and DMA (Dave Stevenson)   
  - drm/vc4: Use of_device_get_match_data() (Minghao Chi (CGEL ZTE))   
  - drm/vc4: dsi: Switch to devm_drm_of_get_bridge (Maxime Ripard)   
  - drm/bridge: Add a function to abstract away panels (Maxime Ripard)   
  - drm/vc4: plane: Fix margin calculations for the right/bottom edges (Dave Stevenson)   
  - drm/vc4: plane: Remove subpixel positioning check (Dom Cobley)   
  - media: tw686x: Fix memory leak in tw686x_video_init (Miaoqian Lin)   
  - media: driver/nxp/imx-jpeg: fix a unexpected return value problem (Jian Zhang)   
  - media: v4l2-mem2mem: prevent pollerr when last_buffer_dequeued is set (Ming Qian)   
  - media: hdpvr: fix error value returns in hdpvr_read (Niels Dossche)   
  - drm/mcde: Fix refcount leak in mcde_dsi_bind (Miaoqian Lin)   
  - media: imx-jpeg: Disable slot interrupt when frame done (Ming Qian)   
  - drm: bridge: adv7511: Add check for mipi_dsi_driver_register (Jiasheng Jiang)   
  - crypto: ccp - During shutdown, check SEV data pointer before using (Tom Lendacky)   
  - test_bpf: fix incorrect netdev features (Jian Shen)   
  - rcutorture: Fix ksoftirqd boosting timing and iteration (Frederic Weisbecker)   
  - rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed (Paul E. McKenney)   
  - rcutorture: Warn on individual rcu_torture_init() error conditions (Paul E. McKenney)   
  - drm/radeon: fix incorrrect SPDX-License-Identifiers (Alex Deucher)   
  - wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd() (Alexey Kodanev)   
  - ath9k: fix use-after-free in ath9k_hif_usb_rx_cb (Pavel Skripkin)   
  - media: imx-jpeg: Implement drain using v4l2-mem2mem helpers (Ming Qian)   
  - media: imx-jpeg: Align upwards buffer size (Ming Qian)   
  - media: imx-jpeg: Support dynamic resolution change (Ming Qian)   
  - media: imx-jpeg: Handle source change in a function (Ming Qian)   
  - media: imx-jpeg: Identify and handle precision correctly (Ming Qian)   
  - media: imx-jpeg: Refactor function mxc_jpeg_parse (Ming Qian)   
  - media: imx-jpeg: Set V4L2_BUF_FLAG_LAST at eos (Ming Qian)   
  - media: imx-jpeg: use NV12M to represent non contiguous NV12 (Ming Qian)   
  - media: imx-jpeg: Add pm-runtime support for imx-jpeg (Mirela Rabulea)   
  - media: imx-jpeg: Leave a blank space before the configuration data (Ming Qian)   
  - media: imx-jpeg: Correct some definition according specification (Ming Qian)   
  - media: tw686x: Register the irq at the end of probe (Zheyu Ma)   
  - media: atmel: atmel-sama7g5-isc: fix warning in configs without OF (Eugen Hristev)   
  - crypto: sun8i-ss - fix infinite loop in sun8i_ss_setup_ivs() (Alexey Khoroshilov)   
  - i2c: Fix a potential use after free (Xu Wang)   
  - can: netlink: allow configuring of fixed data bit rates without need for do_set_data_bittiming callback (Marc Kleine-Budde)   
  - can: netlink: allow configuring of fixed bit rates without need for do_set_bittiming callback (Marc Kleine-Budde)   
  - net: fix sk_wmem_schedule() and sk_rmem_schedule() errors (Eric Dumazet)   
  - crypto: sun8i-ss - fix error codes in allocate_flows() (Dan Carpenter)   
  - crypto: sun8i-ss - do not allocate memory when handling hash requests (Corentin Labbe)   
  - drm: adv7511: override i2c address of cec before accessing it (Antonio Borneo)   
  - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (Miaoqian Lin)   
  - drm/shmem-helper: Pass GEM shmem object in public interfaces (Thomas Zimmermann)   
  - drm/shmem-helper: Export dedicated wrappers for GEM object functions (Thomas Zimmermann)   
  - drm/shmem-helper: Unexport drm_gem_shmem_create_with_handle() (Thomas Zimmermann)   
  - virtio-gpu: fix a missing check to avoid NULL dereference (Xiaomeng Tong)   
  - i2c: mxs: Silence a clang warning (Fabio Estevam)   
  - i2c: npcm: Correct slave role behavior (Tali Perry)   
  - i2c: npcm: Remove own slave addresses 2:10 (Tali Perry)   
  - drm/bridge: lt9611uxc: Cancel only driver's work (Bjorn Andersson)   
  - drm/meson: encoder_hdmi: Fix refcount leak in meson_encoder_hdmi_init (Miaoqian Lin)   
  - drm/meson: encoder_hdmi: switch to bridge DRM_BRIDGE_ATTACH_NO_CONNECTOR (Neil Armstrong)   
  - drm/mediatek: Add pull-down MIPI operation in mtk_dsi_poweroff function (Xinlei Lee)   
  - drm/mediatek: Separate poweron/poweroff from enable/disable and define new funcs (Jitao Shi)   
  - drm/mediatek: Modify dsi funcs to atomic operations (Xinlei Lee)   
  - drm/radeon: fix potential buffer overflow in ni_set_mc_special_registers() (Alexey Kodanev)   
  - ath11k: Fix incorrect debug_mask mappings (Manikanta Pubbisetty)   
  - drm/mipi-dbi: align max_chunk to 2 in spi_transfer (Yunhao Tian)   
  - ath11k: fix netdev open race (Johan Hovold)   
  - wifi: rtlwifi: fix error codes in rtl_debugfs_set_write_h2c() (Dan Carpenter)   
  - drm/panel: Fix build error when CONFIG_DRM_PANEL_SAMSUNG_ATNA33XC20=y && CONFIG_DRM_DISPLAY_HELPER=m (Gao Chao)   
  - drm/st7735r: Fix module autoloading for Okaya RH128128T (Javier Martinez Canillas)   
  - ath10k: do not enforce interrupt trigger type (Krzysztof Kozlowski)   
  - drm/bridge: tc358767: Move (e)DP bridge endpoint parsing into dedicated function (Marek Vasut)   
  - drm/dp: Export symbol / kerneldoc fixes for DP AUX bus (Douglas Anderson)   
  - pwm: lpc18xx: Fix period handling (Uwe Kleine-König)   
  - pwm: lpc18xx-sct: Simplify driver by not using pwm_[gs]et_chip_data() (Uwe Kleine-König)   
  - pwm: lpc18xx-sct: Reduce number of devm memory allocations (Uwe Kleine-König)   
  - pwm: sifive: Shut down hardware only after pwmchip_remove() completed (Uwe Kleine-König)   
  - pwm: sifive: Ensure the clk is enabled exactly once per running PWM (Uwe Kleine-König)   
  - pwm: sifive: Simplify offset calculation for PWMCMP registers (Uwe Kleine-König)   
  - dm: return early from dm_pr_call() if DM device is suspended (Mike Snitzer)   
  - thermal/tools/tmon: Include pthread and time headers in tmon.h (Markus Mayer)   
  - selftests/seccomp: Fix compile warning when CC=clang (YiFei Zhu)   
  - nohz/full, sched/rt: Fix missed tick-reenabling bug in dequeue_task_rt() (Nicolas Saenz Julienne)   
  - drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX (Anshuman Khandual)   
  - irqdomain: Report irq number for NOMAP domains (Xu Qiang)   
  - arm64: dts: qcom: qcs404: Fix incorrect USB2 PHYs assignment (Sumit Garg)   
  - soc: qcom: Make QCOM_RPMPD depend on PM (Konrad Dybcio)   
  - regulator: of: Fix refcount leak bug in of_get_regulation_constraints() (Liang He)   
  - dm writecache: count number of blocks discarded, not number of discard bios (Mikulas Patocka)   
  - dm writecache: count number of blocks written, not number of write bios (Mikulas Patocka)   
  - dm writecache: count number of blocks read, not number of read bios (Mikulas Patocka)   
  - dm writecache: return void from functions (Mikulas Patocka)   
  - PM: domains: Ensure genpd_debugfs_dir exists before remove (Hsin-Yi Wang)   
  - blktrace: Trace remapped requests correctly (Bart Van Assche)   
  - hwmon: (drivetemp) Add module alias (Linus Walleij)   
  - spi: tegra20-slink: fix UAF in tegra_slink_remove() (Yang Yingliang)   
  - spi: Fix simplification of devm_spi_register_controller (Yang Yingliang)   
  - blk-mq: don't create hctx debugfs dir until q->debugfs_dir is created (Ming Lei)   
  - erofs: avoid consecutive detection for Highmem memory (Gao Xiang)   
  - arm64: tegra: Fix SDMMC1 CD on P2888 (Tamás Szűcs)   
  - arm64: tegra: Mark BPMP channels as no-memory-wc (Mikko Perttunen)   
  - arm64: tegra: Update Tegra234 BPMP channel addresses (Mikko Perttunen)   
  - arm64: tegra: Fixup SYSRAM references (Thierry Reding)   
  - arm64: dts: mt7622: fix BPI-R64 WPS button (Nick Hainke)   
  - arm64: dts: qcom: sm8250: add missing PCIe PHY clock-cells (Johan Hovold)   
  - arm64: dts: qcom: sm6125: Append -state suffix to pinctrl nodes (Marijn Suijten)   
  - arm64: dts: qcom: sm6125: Move sdc2 pinctrl from seine-pdx201 to sm6125 (Marijn Suijten)   
  - ACPI: VIOT: Fix ACS setup (Eric Auger)   
  - drivers/iio: Remove all strcpy() uses (Len Baker)   
  - ACPI: APEI: explicit init of HEST and GHES in apci_init() (Shuai Xue)   
  - arm64: dts: qcom: msm8916: Fix typo in pronto remoteproc node (Sireesh Kodali)   
  - stack: Declare {randomize_,}kstack_offset to fix Sparse warnings (GONG, Ruiqi)   
  - bus: hisi_lpc: fix missing platform_device_put() in hisi_lpc_acpi_probe() (Yang Yingliang)   
  - ARM: dts: qcom: pm8841: add required thermal-sensor-cells (Krzysztof Kozlowski)   
  - soc: qcom: aoss: Fix refcount leak in qmp_cooling_devices_register (Miaoqian Lin)   
  - soc: qcom: ocmem: Fix refcount leak in of_get_ocmem (Miaoqian Lin)   
  - ARM: dts: qcom-msm8974: fix irq type on blsp2_uart1 (Luca Weiss)   
  - ACPI: APEI: Fix _EINJ vs EFI_MEMORY_SP (Dan Williams)   
  - regulator: qcom_smd: Fix pm8916_pldo range (Stephan Gerhold)   
  - cpufreq: zynq: Fix refcount leak in zynq_get_revision (Miaoqian Lin)   
  - arm64: dts: qcom: sdm636-sony-xperia-ganges-mermaid: correct sdc2 pinconf (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: fix gpu's interconnect path (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: fix the qusb2phy ref clock (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm630: disable GPU by default (Dmitry Baryshkov)   
  - ARM: OMAP2+: Fix refcount leak in omap3xxx_prm_late_init (Miaoqian Lin)   
  - ARM: OMAP2+: Fix refcount leak in omapdss_init_of (Miaoqian Lin)   
  - ARM: dts: qcom: mdm9615: add missing PMIC GPIO reg (Krzysztof Kozlowski)   
  - block: fix infinite loop for invalid zone append (Keith Busch)   
  - soc: fsl: guts: machine variable might be unset (Michael Walle)   
  - arm64: dts: qcom: sc7180: Remove ipa_fw_mem node on trogdor (Stephen Boyd)   
  - locking/lockdep: Fix lockdep_init_map_*() confusion (Peter Zijlstra)   
  - arm64: cpufeature: Allow different PMU versions in ID_DFR0_EL1 (Alexandru Elisei)   
  - arm64: select TRACE_IRQFLAGS_NMI_SUPPORT (Mark Rutland)   
  - arm64: dts: mt8192: Fix idle-states entry-method (Nícolas F. R. A. Prado)   
  - arm64: dts: mt8192: Fix idle-states nodes naming scheme (Nícolas F. R. A. Prado)   
  - ARM: dts: ast2600-evb-a1: fix board compatible (Krzysztof Kozlowski)   
  - ARM: dts: ast2600-evb: fix board compatible (Krzysztof Kozlowski)   
  - ARM: dts: ast2500-evb: fix board compatible (Krzysztof Kozlowski)   
  - x86/pmem: Fix platform-device leak in error path (Johan Hovold)   
  - arm64: dts: renesas: Fix thermal-sensors on single-zone sensors (Geert Uytterhoeven)   
  - soc: amlogic: Fix refcount leak in meson-secure-pwrc.c (Liang He)   
  - dt-bindings: iio: accel: Add DT binding doc for ADXL355 (Puranjay Mohan)   
  - scsi: hisi_sas: Use managed PCI functions (Xiang Chen)   
  - soc: renesas: r8a779a0-sysc: Fix A2DP1 and A2CV[2357] PDR values (Geert Uytterhoeven)   
  - ARM: dts: imx7d-colibri-emmc: add cpu1 supply (Marcel Ziswiler)   
  - ACPI: processor/idle: Annotate more functions to live in cpuidle section (Guilherme G. Piccoli)   
  - ARM: bcm: Fix refcount leak in bcm_kona_smc_init (Miaoqian Lin)   
  - spi: spi-altera-dfl: Fix an error handling path (Christophe JAILLET)   
  - arm64: dts: renesas: beacon: Fix regulator node names (Geert Uytterhoeven)   
  - meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init (Miaoqian Lin)   
  - ARM: findbit: fix overflowing offset (Russell King (Oracle))   
  - spi: spi-rspi: Fix PIO fallback on RZ platforms (Biju Das)   
  - powerpc/64s: Disable stack variable initialisation for prom_init (Michael Ellerman)   
  - drm/amdgpu: Remove one duplicated ef removal (xinhui pan)   
  - kasan: test: Silence GCC 12 warnings (Kees Cook)   
  - selinux: Add boundary check in put_entry() (Xiu Jianfeng)   
  - selinux: fix memleak in security_read_state_kernel() (Xiu Jianfeng)   
  - PM: hibernate: defer device probing when resuming from hibernation (Tetsuo Handa)   
  - hwmon: (sht15) Fix wrong assumptions in device remove callback (Uwe Kleine-König)   
  - hwmon: (dell-smm) Add Dell XPS 13 7390 to fan control whitelist (Armin Wolf)   
  - firmware: tegra: Fix error check return value of debugfs_create_file() (Lv Ruyi)   
  - ARM: shmobile: rcar-gen2: Increase refcount for new reference (Liang He)   
  - arm64: dts: allwinner: a64: orangepi-win: Fix LED node name (Samuel Holland)   
  - arm64: dts: qcom: ipq8074: fix NAND node name (Robert Marko)   
  - ARM: dts: qcom: sdx55: Fix the IRQ trigger type for UART (Manivannan Sadhasivam)   
  - ACPI: LPSS: Fix missing check in register_device_clock() (huhai)   
  - ACPI: PM: save NVS memory for Lenovo G40-45 (Manyi Li)   
  - ACPI: EC: Drop the EC_FLAGS_IGNORE_DSDT_GPE quirk (Hans de Goede)   
  - ACPI: EC: Remove duplicate ThinkPad X1 Carbon 6th entry from DMI quirks (Hans de Goede)   
  - ARM: OMAP2+: pdata-quirks: Fix refcount leak bug (Liang He)   
  - ARM: OMAP2+: display: Fix refcount leak bug (Liang He)   
  - spi: synquacer: Add missing clk_disable_unprepare() (Guo Mengqi)   
  - ARM: dts: ux500: Fix Gavini accelerometer mounting matrix (Linus Walleij)   
  - ARM: dts: ux500: Fix Codina accelerometer mounting matrix (Linus Walleij)   
  - ARM: dts: BCM5301X: Add DT for Meraki MR26 (Christian Lamparter)   
  - ARM: dts: imx6ul: fix qspi node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix lcdif node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix csi node compatible (Alexander Stein)   
  - ARM: dts: imx6ul: fix keypad compatible (Alexander Stein)   
  - ARM: dts: imx6ul: change operating-points to uint32-matrix (Alexander Stein)   
  - ARM: dts: imx6ul: add missing properties for sram (Alexander Stein)   
  - wait: Fix __wait_event_hrtimeout for RT/DL tasks (Juri Lelli)   
  - irqchip/mips-gic: Check the return value of ioremap() in gic_of_init() (William Dean)   
  - sched/core: Always flush pending blk_plug (John Keeping)   
  - genirq: GENERIC_IRQ_IPI depends on SMP (Samuel Holland)   
  - irqchip/mips-gic: Only register IPI domain when SMP is enabled (Samuel Holland)   
  - genirq: Don't return error on missing optional irq_request_resources() (Antonio Borneo)   
  - sched/fair: Introduce SIS_UTIL to search idle CPU based on sum of util_avg (Chen Yu)   
  - ext2: Add more validity checks for inode counts (Jan Kara)   
  - arm64: kasan: Revert "arm64: mte: reset the page tag in page->flags" (Catalin Marinas)   
  - arm64: fix oops in concurrently setting insn_emulation sysctls (haibinzhang (张海斌))   
  - arm64: Do not forget syscall when starting a new thread. (Francis Laniel)   
  - arch: make TRACE_IRQFLAGS_NMI_SUPPORT generic (Mark Rutland)   
  - x86: Handle idle=nomwait cmdline properly for x86_idle (Wyes Karny)   
  - epoll: autoremove wakers even more aggressively (Benjamin Segall)   
  - netfilter: nf_tables: fix null deref due to zeroed list head (Florian Westphal)   
  - usb: dwc3: gadget: fix high speed multiplier setting (Michael Grzeschik)   
  - usb: dwc3: gadget: refactor dwc3_repare_one_trb (Michael Grzeschik)   
  - arm64: dts: uniphier: Fix USB interrupts for PXs3 SoC (Kunihiko Hayashi)   
  - ARM: dts: uniphier: Fix USB interrupts for PXs2 SoC (Kunihiko Hayashi)   
  - USB: HCD: Fix URB giveback issue in tasklet function (Weitao Wang)   
  - usb: typec: ucsi: Acknowledge the GET_ERROR_STATUS command completion (Linyu Yuan)   
  - coresight: Clear the connection field properly (Suzuki K Poulose)   
  - MIPS: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - powerpc/powernv: Avoid crashing if rng is NULL (Michael Ellerman)   
  - powerpc/ptdump: Fix display of RW pages on FSL_BOOK3E (Christophe Leroy)   
  - powerpc/fsl-pci: Fix Class Code of PCIe Root Port (Pali Rohár)   
  - PCI: Add defines for normal and subtractive PCI bridges (Pali Rohár)   
  - ia64, processor: fix -Wincompatible-pointer-types in ia64_get_irr() (Alexander Lobakin)   
  - media: [PATCH] pci: atomisp_cmd: fix three missing checks on list iterator (Xiaomeng Tong)   
  - mbcache: add functions to delete entry if unused (Jan Kara)   
  - mbcache: don't reclaim used entries (Jan Kara)   
  - md-raid10: fix KASAN warning (Mikulas Patocka)   
  - md-raid: destroy the bitmap after destroying the thread (Mikulas Patocka)   
  - serial: mvebu-uart: uart2 error bits clearing (Narendra Hadke)   
  - fuse: ioctl: translate ENOSYS (Miklos Szeredi)   
  - fuse: limit nsec (Miklos Szeredi)   
  - ksmbd: fix use-after-free bug in smb2_tree_disconect (Namjae Jeon)   
  - ksmbd: prevent out of bound read for SMB2_TREE_CONNNECT (Hyunchul Lee)   
  - ksmbd: fix memory leak in smb2_handle_negotiate (Namjae Jeon)   
  - soundwire: qcom: Check device status before reading devid (Srinivas Kandagatla)   
  - scsi: qla2xxx: Zero undefined mailbox IN registers (Bikash Hazarika)   
  - scsi: qla2xxx: Fix incorrect display of max frame size (Bikash Hazarika)   
  - scsi: sg: Allow waiting for commands to complete on removed device (Tony Battersby)   
  - iio: light: isl29028: Fix the warning in isl29028_remove() (Zheyu Ma)   
  - iio: fix iio_format_avail_range() printing for none IIO_VAL_INT (Fawzi Khaber)   
  - um: seed rng using host OS rng (Jason A. Donenfeld)   
  - um: Remove straying parenthesis (Benjamin Beichler)   
  - mtd: rawnand: arasan: Update NAND bus clock instead of system clock (Amit Kumar Mahapatra)   
  - mtd: rawnand: arasan: Fix clock rate in NV-DDR (Olga Kitaina)   
  - btrfs: reject log replay if there is unsupported RO compat flag (Qu Wenruo)   
  - bpf: Fix KASAN use-after-free Read in compute_effective_progs (Tadeusz Struk)   
  - drm/amdgpu: fix check in fbdev init (Alex Deucher)   
  - drm/amdgpu: Check BO's requested pinning domains against its preferred_domains (Leo Li)   
  - drm/nouveau/kms: Fix failure path for creating DP connectors (Lyude Paul)   
  - drm/nouveau/acpi: Don't print error when we get -EINPROGRESS from pm_runtime (Lyude Paul)   
  - drm/nouveau: Don't pm_runtime_put_sync(), only pm_runtime_put_autosuspend() (Lyude Paul)   
  - drm/nouveau: fix another off-by-one in nvbios_addr (Timur Tabi)   
  - drm/hyperv-drm: Include framebuffer and EDID headers (Thomas Zimmermann)   
  - drm/vc4: hdmi: Disable audio if dmas property is present but empty (Phil Elwell)   
  - drm/shmem-helper: Add missing vunmap on error (Dmitry Osipenko)   
  - drm/gem: Properly annotate WW context on drm_gem_lock_reservations() error (Dmitry Osipenko)   
  - rtc: rx8025: fix 12/24 hour mode detection on RX-8035 (Mathew McBride)   
  - RISC-V: Add modules to virtual kernel memory layout dump (Xianting Tian)   
  - RISC-V: Fixup schedule out issue in machine_crash_shutdown() (Xianting Tian)   
  - RISC-V: Fixup get incorrect user mode PC for kernel mode regs (Xianting Tian)   
  - RISC-V: kexec: Fixup use of smp_processor_id() in preemptible context (Xianting Tian)   
  - dt-bindings: riscv: fix SiFive l2-cache's cache-sets (Conor Dooley)   
  - riscv:uprobe fix SR_SPIE set/clear handling (Yipeng Zou)   
  - parisc: io_pgetevents_time64() needs compat syscall in 32-bit compat mode (Helge Deller)   
  - parisc: Check the return value of ioremap() in lba_driver_probe() (William Dean)   
  - parisc: Drop pa_swapper_pg_lock spinlock (Helge Deller)   
  - parisc: Fix device names in /proc/iomem (Helge Deller)   
  - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Jiachen Zhang)   
  - crypto: ccp - Use kzalloc for sev ioctl interfaces to prevent kernel memory leak (John Allen)   
  - fix short copy handling in copy_mc_pipe_to_iter() (Al Viro)   
  - usbnet: Fix linkwatch use-after-free on disconnect (Lukas Wunner)   
  - fbcon: Fix accelerated fbdev scrolling while logo is still shown (Helge Deller)   
  - fbcon: Fix boundary checks for fbcon=vc:n1-n2 parameters (Helge Deller)   
  - thermal: sysfs: Fix cooling_device_stats_setup() error code path (Rafael J. Wysocki)   
  - fs: Add missing umask strip in vfs_tmpfile (Yang Xu)   
  - vfs: Check the truncate maximum size in inode_newsize_ok() (David Howells)   
  - tty: vt: initialize unicode screen buffer (Tetsuo Handa)   
  - ALSA: hda/realtek: Add a quirk for HP OMEN 15 (8786) mute LED (Bedant Patnaik)   
  - ALSA: hda/realtek: Add quirk for another Asus K42JZ model (Meng Tang)   
  - ALSA: hda/cirrus - support for iMac 12,1 model (Allen Ballway)   
  - ALSA: hda/conexant: Add quirk for LENOVO 20149 Notebook model (Meng Tang)   
  - riscv: set default pm_power_off to NULL (Dimitri John Ledkov)   
  - KVM: x86: revalidate steal time cache if MSR value changes (Paolo Bonzini)   
  - KVM: x86: do not report preemption if the steal time cache is stale (Paolo Bonzini)   
  - KVM: x86: Tag kvm_mmu_x86_module_init() with __init (Sean Christopherson)   
  - KVM: nVMX: Always enable TSC scaling for L2 when it was enabled for L1 (Vitaly Kuznetsov)   
  - KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (Sean Christopherson)   
  - KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (Sean Christopherson)   
  - KVM: nVMX: Inject #UD if VMXON is attempted with incompatible CR0/CR4 (Sean Christopherson)   
  - KVM: nVMX: Account for KVM reserved CR4 bits in consistency checks (Sean Christopherson)   
  - KVM: nVMX: Let userspace set nVMX MSR to any _host_ supported value (Sean Christopherson)   
  - KVM: x86: Split kvm_is_valid_cr4() and export only the non-vendor bits (Sean Christopherson)   
  - KVM: s390: pv: don't present the ecall interrupt twice (Nico Boehr)   
  - KVM: nVMX: Snapshot pre-VM-Enter DEBUGCTL for !nested_run_pending case (Sean Christopherson)   
  - KVM: nVMX: Snapshot pre-VM-Enter BNDCFGS for !nested_run_pending case (Sean Christopherson)   
  - HID: wacom: Don't register pad_input for touch switch (Ping Cheng)   
  - HID: wacom: Only report rotation for art pen (Ping Cheng)   
  - HID: hid-input: add Surface Go battery quirk (Maximilian Luz)   
  - lockd: detect and reject lock arguments that overflow (Jeff Layton)   
  - add barriers to buffer_uptodate and set_buffer_uptodate (Mikulas Patocka)   
  - wifi: mac80211_hwsim: use 32-bit skb cookie (Johannes Berg)   
  - wifi: mac80211_hwsim: add back erroneously removed cast (Johannes Berg)   
  - wifi: mac80211_hwsim: fix race condition in pending packet (Jeongik Cha)   
  - ALSA: hda/realtek: Add quirk for HP Spectre x360 15-eb0xxx (Ivan Hasenkampf)   
  - ALSA: hda/realtek: Add quirk for Clevo NV45PZ (Tim Crawford)   
  - ALSA: bcd2000: Fix a UAF bug on the error path of probing (Zheyu Ma)   
  - ALSA: usb-audio: Add quirk for Behringer UMC202HD (Takashi Iwai)   
  - nfsd: eliminate the NFSD_FILE_BREAK_* flags (Jeff Layton)   
  - NFSD: Clean up the show_nf_flags() macro (Chuck Lever)   
  - pNFS/flexfiles: Report RDMA connection errors to the server (Trond Myklebust)   
  - scsi: Revert "scsi: qla2xxx: Fix disk failure to rediscover" (Nilesh Javali)   
  - Revert "pNFS: nfs3_set_ds_client should set NFS_CS_NOPING" (Trond Myklebust)   
  - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)   
  - Makefile: link with -z noexecstack --no-warn-rwx-segments (Nick Desaulniers)   
  - ACPI: processor idle: Practically limit "Dummy wait" workaround to old Intel systems (Dave Hansen)  [Orabug: 34671450]  
  - uek-rpm: config-x86_64*: enable more LPSS bus options for hardware support (Todd Vierling)  [Orabug: 34576146]  
  - uek-rpm: Disable floppy related configs (Saeed Mirzamohammadi)  [Orabug: 34644238]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.3.el8uek]
changelog:
  - Revert "Makefile: link with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)   
  - Revert "x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments" (Jack Vogel)


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.4.el8uek]
changelog:
  - xen/ovmapi: Build OVM guest messaging driver (Jonah Palmer)  [Orabug: 34512197]  
  - net/rds: Send congestion map updates only via path zero (Anand Khoje)  [Orabug: 34578048]  
  - Revert "RDS/IB: Fix RDS IB SRQ implementation and tune it" (Hans Westgaard Ry)  [Orabug: 34662659]  
  - RDMA/cma: Use output interface for net_dev check (Håkon Bugge)  [Orabug: 34694979]  
  - crypto: qat - add support for 401xx devices (Giovanni Cabiddu)  [Orabug: 34686738]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.el8uek]
changelog:
  - uek: kabi: update kABI files for new symbols (Saeed Mirzamohammadi)  [Orabug: 34595591]  
  - Revert "scsi: lpfc: SLI path split: Refactor lpfc_iocbq" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: SLI path split: Refactor fast and slow paths to native SLI4" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: SLI path split: Refactor SCSI paths" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix locking for lpfc_sli_iocbq_lookup()" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4()" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Resolve some cleanup issues following SLI path refactoring" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input" (John Donnelly)  [Orabug: 34678989]  
  - Revert "scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE" (John Donnelly)  [Orabug: 34678989]  
  - RDS/IB Fix allocation warning (Hans Westgaard Ry)  [Orabug: 34684321]  
  - fs: remove no_llseek (Jason A. Donenfeld)  [Orabug: 34705082]  
  - vfio: do not set FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]  
  - dma-buf: remove useless FMODE_LSEEK flag (Jason A. Donenfeld)  [Orabug: 34705082]  
  - fs: do not compare against ->llseek (Jason A. Donenfeld)  [Orabug: 34705082]  
  - fs: clear or set FMODE_LSEEK based on llseek function (Jason A. Donenfeld)  [Orabug: 34705082]  
  - hwmon: (opbmc) AST2600 SP reset driver adjustment (Jan Zdarek)  [Orabug: 34710681]  
  - hwmon: (opbmc) Driver message prefixes (Jan Zdarek)  [Orabug: 34710681]  
  - NFSD: fix use-after-free on source server when doing inter-server copy (Dai Ngo)  [Orabug: 34716070]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-4.70.5.2.el8uek]
changelog:
  - Revert "sched: Remove the limitation of WF_ON_CPU on wakelist if wakee cpu is idle" (Samasth Norway Ananda)  [Orabug: 34783367]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.70.1.el8uek]
changelog:
  - net/rds: drop rs_transport module reference count on error (Gerd Rausch)  [Orabug: 34500806]  
  - net/rds: rds_tcp_accept_one ought to not discard messages (Gerd Rausch)  [Orabug: 34488375]  
  - iommu/vt-d: set default value of INTEL_IOMMU_FLOPPY_WA to n (Harshit Mogalapalli)  [Orabug: 34724809]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-5.76.2.el8uek]
changelog:
  - LTS version: v5.15.76 (Jack Vogel)   
  - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (Seth Jenkins)   
  - mmc: core: Add SD card quirk for broken discard (Avri Altman)   
  - Makefile.debug: re-enable debug info for .S files (Nick Desaulniers)   
  - x86/Kconfig: Drop check for -mabi=ms for CONFIG_EFI_STUB (Nathan Chancellor)   
  - ACPI: video: Force backlight native for more TongFang devices (Werner Sembach)   
  - perf: Skip and warn on unknown format 'configN' attrs (Rob Herring)   
  - mmc: sdhci-tegra: Use actual clock rate for SW tuning correction (Prathamesh Shete)   
  - tracing: Do not free snapshot if tracer is on cmdline (Steven Rostedt (Google))   
  - tracing: Simplify conditional compilation code in tracing_set_tracer() (sunliming)   
  - ksmbd: fix incorrect handling of iterate_dir (Namjae Jeon)   
  - ksmbd: handle smb2 query dir request for OutputBufferLength that is too small (Namjae Jeon)   
  - arm64: mte: move register initialization to C (Peter Collingbourne)   
  - fs: dlm: fix invalid derefence of sb_lvbptr (Alexander Aring)   
  - iommu/vt-d: Clean up si_domain in the init_dmars() error path (Jerry Snitselaar)   
  - iommu/vt-d: Allow NVS regions in arch_rmrr_sanity_check() (Charlotte Tan)   
  - net: phy: dp83822: disable MDI crossover status change interrupt (Felix Riemann)   
  - net: sched: fix race condition in qdisc_graft() (Eric Dumazet)   
  - net: hns: fix possible memory leak in hnae_ae_register() (Yang Yingliang)   
  - wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (Yang Yingliang)   
  - sfc: include vport_id in filter spec hash and equal() (Pieter Jansen van Vuuren)   
  - net: sched: sfb: fix null pointer access issue when sfb_init() fails (Zhengchao Shao)   
  - net: sched: delete duplicate cleanup of backlog and qlen (Zhengchao Shao)   
  - net: sched: cake: fix null pointer access issue when cake_init() fails (Zhengchao Shao)   
  - nvmet: fix workqueue MEM_RECLAIM flushing dependency (Sagi Grimberg)   
  - nvme-hwmon: kmalloc the NVME SMART log buffer (Serge Semin)   
  - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (Christoph Hellwig)   
  - netfilter: nf_tables: relax NFTA_SET_ELEM_KEY_END set flags requirements (Pablo Neira Ayuso)   
  - ionic: catch NULL pointer issue on reconfig (Brett Creeley)   
  - net: hsr: avoid possible NULL deref in skb_clone() (Eric Dumazet)   
  - dm: remove unnecessary assignment statement in alloc_dev() (Genjian Zhang)   
  - cifs: Fix xid leak in cifs_ses_add_channel() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_flock() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_copy_file_range() (Zhang Xiaoxu)   
  - cifs: Fix xid leak in cifs_create() (Zhang Xiaoxu)   
  - udp: Update reuse->has_conns under reuseport_lock. (Kuniyuki Iwashima)   
  - scsi: lpfc: Fix memory leak in lpfc_create_port() (Rafael Mendonca)   
  - net: phylink: add mac_managed_pm in phylink_config structure (Shenwei Wang)   
  - net: phy: dp83867: Extend RX strap quirk for SGMII mode (Harini Katakam)   
  - net/atm: fix proc_mpc_write incorrect return value (Xiaobo Liu)   
  - sfc: Change VF mac via PF as first preference if available. (Jonathan Cooper)   
  - HID: magicmouse: Do not set BTN_MOUSE on double report (José Expósito)   
  - i40e: Fix DMA mappings leak (Jan Sokolowski)   
  - tipc: fix an information leak in tipc_topsrv_kern_subscr (Alexander Potapenko)   
  - tipc: Fix recognition of trial period (Mark Tomlinson)   
  - ACPI: extlog: Handle multiple records (Tony Luck)   
  - drm/vc4: Add module dependency on hdmi-codec (Maxime Ripard)   
  - btrfs: fix processing of delayed tree block refs during backref walking (Filipe Manana)   
  - btrfs: fix processing of delayed data refs during backref walking (Filipe Manana)   
  - x86/topology: Fix duplicated core ID within a package (Zhang Rui)   
  - x86/topology: Fix multiple packages shown on a single-package system (Zhang Rui)   
  - media: venus: dec: Handle the case where find_format fails (Bryan O'Donoghue)   
  - media: mceusb: set timeout to at least timeout provided (Sean Young)   
  - media: ipu3-imgu: Fix NULL pointer dereference in active selection access (Sakari Ailus)   
  - KVM: arm64: vgic: Fix exit condition in scan_its_table() (Eric Ren)   
  - kvm: Add support for arch compat vm ioctls (Alexander Graf)   
  - mm,hugetlb: take hugetlb_lock before decrementing h->resv_huge_pages (Rik van Riel)   
  - drm/amdgpu: fix sdma doorbell init ordering on APUs (Alex Deucher)   
  - cpufreq: qcom: fix memory leak in error path (Fabien Parent)   
  - x86/resctrl: Fix min_cbm_bits for AMD (Babu Moger)   
  - ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS (Kai-Heng Feng)   
  - ata: ahci-imx: Fix MODULE_ALIAS (Alexander Stein)   
  - hwmon/coretemp: Handle large core ID value (Zhang Rui)   
  - x86/microcode/AMD: Apply the patch early on every logical thread (Borislav Petkov)   
  - i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (Bryan O'Donoghue)   
  - cpufreq: qcom: fix writes in read-only memory region (Fabien Parent)   
  - selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (GONG, Ruiqi)   
  - ocfs2: fix BUG when iput after ocfs2_mknod fails (Joseph Qi)   
  - ocfs2: clear dinode links count in case of error (Joseph Qi)   
  - btrfs: enhance unsupported compat RO flags handling (Qu Wenruo)   
  - perf/x86/intel/pt: Relax address filter validation (Adrian Hunter)   
  - arm64: errata: Remove AES hwcap for COMPAT tasks (James Morse)   
  - usb: gadget: uvc: improve sg exit condition (Michael Grzeschik)   
  - usb: gadget: uvc: giveback vb2 buffer on req complete (Michael Grzeschik)   
  - usb: gadget: uvc: rework uvcg_queue_next_buffer to uvcg_complete_buffer (Michael Grzeschik)   
  - usb: gadget: uvc: use on returned header len in video_encode_isoc_sg (Michael Grzeschik)   
  - usb: gadget: uvc: consistently use define for headerlen (Michael Grzeschik)   
  - arm64/mm: Consolidate TCR_EL1 fields (Anshuman Khandual)   
  - r8152: add PID for the Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - LTS version: v5.15.75 (Jack Vogel)   
  - io-wq: Fix memory leak in worker creation (Rafael Mendonca)   
  - gcov: support GCC 12.1 and newer compilers (Martin Liska)   
  - thermal: intel_powerclamp: Use first online CPU as control_cpu (Rafael J. Wysocki)   
  - ext4: continue to expand file system when the target size doesn't reach (Jerry Lee 李修賢)   
  - lib/Kconfig.debug: Add check for non-constant .{s,u}leb128 support to DWARF5 (Nathan Chancellor)   
  - Kconfig.debug: add toolchain checks for DEBUG_INFO_DWARF_TOOLCHAIN_DEFAULT (Masahiro Yamada)   
  - Kconfig.debug: simplify the dependency of DEBUG_INFO_DWARF4/5 (Masahiro Yamada)   
  - drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (Nathan Chancellor)   
  - net/ieee802154: don't warn zero-sized raw_sendmsg() (Tetsuo Handa)   
  - Revert "net/ieee802154: reject zero-sized raw_sendmsg()" (Alexander Aring)   
  - net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (Randy Dunlap)   
  - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (Yu Kuai)   
  - ALSA: usb-audio: Fix last interface check for registration (Takashi Iwai)   
  - net: ieee802154: return -EINVAL for unknown addr type (Alexander Aring)   
  - mm: hugetlb: fix UAF in hugetlb_handle_userfault (Liu Shixin)   
  - io_uring/rw: fix unexpected link breakage (Pavel Begunkov)   
  - io_uring/rw: fix error'ed retry return values (Pavel Begunkov)   
  - io_uring/rw: fix short rw error handling (Pavel Begunkov)   
  - io_uring: correct pinned_vm accounting (Pavel Begunkov)   
  - io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov)   
  - perf intel-pt: Fix segfault in intel_pt_print_info() with uClibc (Adrian Hunter)   
  - clk: bcm2835: Round UART input clock up (Ivan T. Ivanov)   
  - clk: bcm2835: Make peripheral PLLC critical (Maxime Ripard)   
  - usb: idmouse: fix an uninit-value in idmouse_open (Dongliang Mu)   
  - nvmet-tcp: add bounds check on Transfer Tag (Varun Prakash)   
  - nvme: copy firmware_rev on each init (Keith Busch)   
  - ext2: Use kvmalloc() for group descriptor array (Jan Kara)   
  - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (Arun Easi)   
  - staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (Xiaoke Wang)   
  - staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (Xiaoke Wang)   
  - Revert "usb: storage: Add quirk for Samsung Fit flash" (sunghwan jung)   
  - usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (Piyush Mehta)   
  - arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (Alexander Stein)   
  - usb: musb: Fix musb_gadget.c rxstate overflow bug (Robin Guo)   
  - usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (Jianglei Nie)   
  - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (Logan Gunthorpe)   
  - eventfd: guard wake_up in eventfd fs calls as well (Dylan Yudaken)   
  - HID: roccat: Fix use-after-free in roccat_read() (Hyunwoo Kim)   
  - soundwire: intel: fix error handling on dai registration issues (Pierre-Louis Bossart)   
  - soundwire: cadence: Don't overwrite msg->buf during write commands (Richard Fitzgerald)   
  - bcache: fix set_at_max_writeback_rate() for multiple attached devices (Coly Li)   
  - ata: libahci_platform: Sanity check the DT child nodes number (Serge Semin)   
  - blk-throttle: prevent overflow while calculating wait time (Yu Kuai)   
  - staging: vt6655: fix potential memory leak (Nam Cao)   
  - power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (Wei Yongjun)   
  - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (Yicong Yang)   
  - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (Shigeru Yoshida)   
  - scsi: 3w-9xxx: Avoid disabling device if failing to enable it (Letu Ren)   
  - dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (Vaishnav Achath)   
  - usb: host: xhci-plat: suspend/resume clks for brcm (Justin Chen)   
  - usb: host: xhci-plat: suspend and resume clocks (Justin Chen)   
  - clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (Quanyang Wang)   
  - media: platform: fix some double free in meson-ge2d and mtk-jpeg and s5p-mfc (Hangyu Hua)   
  - media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (Zheyu Ma)   
  - clk: zynqmp: Fix stack-out-of-bounds in strncpy` (Ian Nam)   
  - ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (Alex Sverdlin)   
  - btrfs: don't print information about space cache or tree every remount (Maciej S. Szmigiero)   
  - btrfs: scrub: try to fix super block errors (Qu Wenruo)   
  - btrfs: dump extra info if one free space cache has more bitmaps than it should (Qu Wenruo)   
  - arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply (Sebastian Krzyszkowiak)   
  - kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (Mark Brown)   
  - ARM: dts: imx6sx: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sll: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6sl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6qp: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6dl: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx6q: add missing properties for sram (Alexander Stein)   
  - ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (Haibo Chen)   
  - drm/amd/display: Remove interface for periodic interrupt 1 (Aric Cyr)   
  - drm/dp: Don't rewrite link config when setting phy test pattern (Khaled Almahallawy)   
  - mmc: sdhci-msm: add compatible string check for sdm670 (Richard Acayan)   
  - drm/meson: explicitly remove aggregate driver at module unload time (Adrián Larumbe)   
  - drm/meson: reorder driver deinit sequence to fix use-after-free bug (Adrián Larumbe)   
  - drm/amdgpu: fix initial connector audio value (hongao)   
  - ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (Jairaj Arava)   
  - platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (Hans de Goede)   
  - platform/chrome: cros_ec: Notify the PM of wake events during resume (Jameson Thies)   
  - drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (Maya Matuszczyk)   
  - drm/vc4: vec: Fix timings for VEC modes (Mateusz Kwiatkowski)   
  - ALSA: usb-audio: Register card at the last interface (Takashi Iwai)   
  - drm: bridge: dw_hdmi: only trigger hotplug event on link change (Lucas Stach)   
  - udmabuf: Set ubuf->sg = NULL if the creation of sg table fails (Vivek Kasireddy)   
  - drm/amd/display: fix overflow on MIN_I64 definition (David Gow)   
  - gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (Zeng Jingxiang)   
  - drm/komeda: Fix handling of atomic commits in the atomic_commit_tail hook (Liviu Dudau)   
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)   
  - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)   
  - drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (Jianglei Nie)   
  - r8152: Rate limit overflow messages (Andrew Gaul)   
  - Bluetooth: L2CAP: Fix user-after-free (Luiz Augusto von Dentz)   
  - net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory (Liu Jian)   
  - hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (Jason A. Donenfeld)   
  - wifi: rt2x00: correctly set BBP register 86 for MT7620 (Daniel Golle)   
  - wifi: rt2x00: set SoC wmac clock register (Daniel Golle)   
  - wifi: rt2x00: set VGC gain for both chains of MT7620 (Daniel Golle)   
  - wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (Daniel Golle)   
  - wifi: rt2x00: don't run Rt5592 IQ calibration on MT7620 (Daniel Golle)   
  - can: bcm: check the result of can_send() in bcm_can_tx() (Ziyang Xuan)   
  - Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (Luiz Augusto von Dentz)   
  - Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (Tetsuo Handa)   
  - wifi: mt76: mt7921: reset msta->airtime_ac while clearing up hw value (Sean Wang)   
  - regulator: core: Prevent integer underflow (Patrick Rudolph)   
  - Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (Kiran K)   
  - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (Alexander Coffin)   
  - iavf: Fix race between iavf_close and iavf_reset_task (Michal Jaron)   
  - xfrm: Update ipcomp_scratches with NULL when freed (Khalid Masum)   
  - thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (Mika Westerberg)   
  - wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (Tetsuo Handa)   
  - x86/mce: Retrieve poison range from hardware (Jane Chu)   
  - tcp: annotate data-race around tcp_md5sig_pool_populated (Eric Dumazet)   
  - openvswitch: Fix overreporting of drops in dropwatch (Mike Pattrick)   
  - openvswitch: Fix double reporting of drops in dropwatch (Mike Pattrick)   
  - net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (Ravi Gunasekaran)   
  - ice: set tx_tstamps when creating new Tx rings via ethtool (Jacob Keller)   
  - bpftool: Clear errno after libcap's checks (Quentin Monnet)   
  - wifi: brcmfmac: fix invalid address access when enabling SCAN log level (Wright Feng)   
  - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (Anna Schumaker)   
  - x86/entry: Work around Clang __bdos() bug (Kees Cook)   
  - ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (Mario Limonciello)   
  - ARM: decompressor: Include .data.rel.ro.local (Kees Cook)   
  - thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (Srinivas Pandruvada)   
  - powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue (Chao Qin)   
  - MIPS: BCM47XX: Cast memcmp() of function to (void *) (Kees Cook)   
  - cpufreq: intel_pstate: Add Tigerlake support in no-HWP mode (Doug Smythies)   
  - ACPI: tables: FPDT: Don't call acpi_os_map_memory() on invalid phys address (Hans de Goede)   
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Arvid Norlander)   
  - rcu-tasks: Convert RCU_LOCKDEP_WARN() to WARN_ONCE() (Zqiang)   
  - rcu: Back off upon fill_page_cache_func() allocation failure (Michal Hocko)   
  - rcu: Avoid triggering strict-GP irq-work when RCU is idle (Zqiang)   
  - fs: dlm: fix race in lowcomms (Alexander Aring)   
  - selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle (Stefan Berger)   
  - f2fs: fix to account FS_CP_DATA_IO correctly (Chao Yu)   
  - f2fs: fix race condition on setting FI_NO_EXTENT flag (Zhang Qilong)   
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue)   
  - thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (Vincent Knecht)   
  - crypto: cavium - prevent integer overflow loading firmware (Dan Carpenter)   
  - crypto: marvell/octeontx - prevent integer overflows (Dan Carpenter)   
  - kbuild: rpm-pkg: fix breakage when V=1 is used (Janis Schoetterl-Glausch)   
  - kbuild: remove the target in signal traps when interrupted (Masahiro Yamada)   
  - tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (Nico Pache)   
  - tracing: kprobe: Make gen test module work in arm and riscv (Yipeng Zou)   
  - tracing: kprobe: Fix kprobe event gen test module on exit (Yipeng Zou)   
  - iommu/iova: Fix module config properly (Robin Murphy)   
  - cifs: return correct error in ->calc_signature() (Enzo Matsumiya)   
  - crypto: qat - fix DMA transfer direction (Damian Muszynski)   
  - crypto: inside-secure - Change swab to swab32 (Peter Harliman Liem)   
  - crypto: ccp - Release dma channels before dmaengine unrgister (Koba Ko)   
  - crypto: akcipher - default implementation for setting a private key (Ignat Korchagin)   
  - iommu/omap: Fix buffer overflow in debugfs (Dan Carpenter)   
  - cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (Waiman Long)   
  - crypto: hisilicon/qm - fix missing put dfx access (Weili Qian)   
  - crypto: qat - fix default value of WDT timer (Lucas Segarra Fernandez)   
  - hwrng: imx-rngc - Moving IRQ handler registering after imx_rngc_irq_mask_clear() (Kshitiz Varshney)   
  - cgroup: Honor caller's cgroup NS when resolving path (Michal Koutný)   
  - hwrng: arm-smccc-trng - fix NO_ENTROPY handling (James Cowgill)   
  - crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (Ye Weihua)   
  - crypto: sahara - don't sleep when in softirq (Zhengchao Shao)   
  - powerpc/pseries/vas: Pass hw_cpu_id to node associativity HCALL (Haren Myneni)   
  - powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (Li Huafei)   
  - powerpc: Fix SPE Power ISA properties for e500v1 platforms (Pali Rohár)   
  - powerpc/64s: Fix GENERIC_CPU build flags for PPC970 / G5 (Nicholas Piggin)   
  - x86/hyperv: Fix 'struct hv_enlightened_vmcs' definition (Vitaly Kuznetsov)   
  - powerpc: Fix fallocate and fadvise64_64 compat parameter combination (Rohan McLure)   
  - powerpc/powernv: add missing of_node_put() in opal_export_attrs() (Zheng Yongjun)   
  - powerpc/pci_dn: Add missing of_node_put() (Liang He)   
  - powerpc/sysdev/fsl_msi: Add missing of_node_put() (Liang He)   
  - powerpc/math_emu/efp: Include module.h (Nathan Chancellor)   
  - powerpc/configs: Properly enable PAPR_SCM in pseries_defconfig (Michael Ellerman)   
  - mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (Jack Wang)   
  - mailbox: mpfs: account for mbox offsets while sending (Conor Dooley)   
  - mailbox: mpfs: fix handling of the reg property (Conor Dooley)   
  - clk: ast2600: BCLK comes from EPLL (Joel Stanley)   
  - clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (Miaoqian Lin)   
  - clk: imx: scu: fix memleak on platform_device_add() fails (Lin Yujun)   
  - clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (Stefan Wahren)   
  - clk: baikal-t1: Add SATA internal ref clock buffer (Serge Semin)   
  - clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (Serge Semin)   
  - clk: baikal-t1: Fix invalid xGMAC PTP clock divider (Serge Semin)   
  - clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (Serge Semin)   
  - spmi: pmic-arb: correct duplicate APID to PPID mapping logic (David Collins)   
  - usb: mtu3: fix failed runtime suspend in host only mode (Chunfeng Yun)   
  - dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (Dave Jiang)   
  - clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (Chen-Yu Tsai)   
  - mfd: sm501: Add check for platform_driver_register() (Jiasheng Jiang)   
  - mfd: fsl-imx25: Fix check for platform_get_irq() errors (Dan Carpenter)   
  - mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (Christophe JAILLET)   
  - mfd: lp8788: Fix an error handling path in lp8788_probe() (Christophe JAILLET)   
  - mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (Christophe JAILLET)   
  - mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (Christophe JAILLET)   
  - fsi: core: Check error number after calling ida_simple_get (Jiasheng Jiang)   
  - RDMA/rxe: Fix resize_finish() in rxe_queue.c (Bob Pearson)   
  - clk: qcom: gcc-sm6115: Override default Alpha PLL regs (Adam Skladowski)   
  - clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (Robert Marko)   
  - scsi: iscsi: iscsi_tcp: Fix null-ptr-deref while calling getpeername() (Mike Christie)   
  - scsi: iscsi: Run recv path from workqueue (Mike Christie)   
  - scsi: iscsi: Add recv workqueue helpers (Mike Christie)   
  - scsi: iscsi: Rename iscsi_conn_queue_work() (Mike Christie)   
  - scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (Duoming Zhou)   
  - serial: 8250: Fix restoring termios speed after suspend (Pali Rohár)   
  - firmware: google: Test spinlock on panic path to avoid lockups (Guilherme G. Piccoli)   
  - slimbus: qcom-ngd-ctrl: allow compile testing without QCOM_RPROC_COMMON (Krzysztof Kozlowski)   
  - staging: vt6655: fix some erroneous memory clean-up loops (Nam Cao)   
  - phy: qualcomm: call clk_disable_unprepare in the error handling (Dongliang Mu)   
  - tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (Sherry Sun)   
  - serial: 8250: Toggle IER bits on only after irq has been set up (Ilpo Järvinen)   
  - drivers: serial: jsm: fix some leaks in probe (Dan Carpenter)   
  - usb: gadget: function: fix dangling pnp_string in f_printer.c (Albert Briscoe)   
  - xhci: Don't show warning for reinit on known broken suspend (Mario Limonciello)   
  - IB: Set IOVA/LENGTH on IB_MR in core/uverbs layers (Daisuke Matsuda)   
  - RDMA/cm: Use SLID in the work completion as the DLID in responder side (Mark Zhang)   
  - md/raid5: Remove unnecessary bio_put() in raid5_read_one_chunk() (David Sloan)   
  - md/raid5: Ensure stripe_fill happens on non-read IO with journal (Logan Gunthorpe)   
  - md: Replace snprintf with scnprintf (Saurabh Sengar)   
  - mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (Dan Carpenter)   
  - ata: fix ata_id_has_dipm() (Niklas Cassel)   
  - ata: fix ata_id_has_ncq_autosense() (Niklas Cassel)   
  - ata: fix ata_id_has_devslp() (Niklas Cassel)   
  - ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (Niklas Cassel)   
  - RDMA/siw: Fix QP destroy to wait for all references dropped. (Bernard Metzler)   
  - RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (Bernard Metzler)   
  - RDMA/srp: Fix srp_abort() (Bart Van Assche)   
  - RDMA/irdma: Align AE id codes to correct flush code and event (Sindhu-Devale)   
  - mtd: rawnand: fsl_elbc: Fix none ECC mode (Pali Rohár)   
  - mtd: rawnand: intel: Remove undocumented compatible string (Martin Blumenstingl)   
  - mtd: rawnand: intel: Read the chip-select line from the correct OF node (Martin Blumenstingl)   
  - phy: phy-mtk-tphy: fix the phy type setting issue (Chunfeng Yun)   
  - phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (Liang He)   
  - mtd: devices: docg3: check the return value of devm_ioremap() in the probe (William Dean)   
  - clk: qcom: sm6115: Select QCOM_GDSC (Dang Huynh)   
  - dyndbg: drop EXPORTed dynamic_debug_exec_queries (Jim Cromie)   
  - dyndbg: let query-modname override actual module name (Jim Cromie)   
  - dyndbg: fix module.dyndbg handling (Jim Cromie)   
  - dyndbg: fix static_branch manipulation (Jim Cromie)   
  - dmaengine: hisilicon: Add multi-thread support for a DMA channel (Jie Hai)   
  - dmaengine: hisilicon: Fix CQ head update (Jie Hai)   
  - dmaengine: hisilicon: Disable channels when unregister hisi_dma (Jie Hai)   
  - fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (Dan Carpenter)   
  - misc: ocxl: fix possible refcount leak in afu_ioctl() (Hangyu Hua)   
  - RDMA/rxe: Fix the error caused by qp->sk (Zhu Yanjun)   
  - RDMA/rxe: Fix "kernel NULL pointer dereference" error (Zhu Yanjun)   
  - media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (Miaoqian Lin)   
  - media: uvcvideo: Use entity get_cur in uvc_ctrl_set (Yunke Cao)   
  - media: uvcvideo: Fix memory leak in uvc_gpio_parse (José Expósito)   
  - media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (Xu Qiang)   
  - tty: xilinx_uartps: Fix the ignore_status (Shubhrajyoti Datta)   
  - media: exynos4-is: fimc-is: Add of_node_put() when breaking out of loop (Liang He)   
  - HSI: omap_ssi_port: Fix dma_map_sg error check (Jack Wang)   
  - HSI: omap_ssi: Fix refcount leak in ssi_probe (Miaoqian Lin)   
  - clk: tegra20: Fix refcount leak in tegra20_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra114_clock_init (Miaoqian Lin)   
  - clk: tegra: Fix refcount leak in tegra210_clock_init (Miaoqian Lin)   
  - clk: sprd: Hold reference returned by of_get_parent() (Liang He)   
  - clk: berlin: Add of_node_put() for of_get_parent() (Liang He)   
  - clk: qoriq: Hold reference returned by of_get_parent() (Liang He)   
  - clk: oxnas: Hold reference returned by of_get_parent() (Liang He)   
  - clk: meson: Hold reference returned by of_get_parent() (Liang He)   
  - usb: common: debug: Check non-standard control requests (Thinh Nguyen)   
  - RDMA/mlx5: Don't compare mkey tags in DEVX indirect mkey (Aharon Landau)   
  - iio: magnetometer: yas530: Change data type of hard_offsets to signed (Jakob Hauser)   
  - iio: ABI: Fix wrong format of differential capacitance channel ABI. (Jonathan Cameron)   
  - iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (Nuno Sá)   
  - iio: inkern: only release the device node when done with it (Nuno Sá)   
  - iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: check return status for pressure and touch (Claudiu Beznea)   
  - iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (Claudiu Beznea)   
  - ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (Dmitry Torokhov)   
  - arm64: ftrace: fix module PLTs with mcount (Mark Rutland)   
  - ext4: don't run ext4lazyinit for read-only filesystems (Josh Triplett)   
  - ARM: Drop CMDLINE_* dependency on ATAGS (Geert Uytterhoeven)   
  - ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (Dmitry Torokhov)   
  - arm64: dts: ti: k3-j7200: fix main pinmux range (Matt Ranostay)   
  - soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (Dmitry Osipenko)   
  - ia64: export memory_add_physaddr_to_nid to fix cxl build error (Randy Dunlap)   
  - ARM: dts: kirkwood: lsxl: remove first ethernet port (Michael Walle)   
  - ARM: dts: kirkwood: lsxl: fix serial line (Michael Walle)   
  - ARM: dts: turris-omnia: Fix mpp26 pin name and comment (Marek Behún)   
  - ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (Lucas Stach)   
  - soc: qcom: smem_state: Add refcounting for the 'state->of_node' (Liang He)   
  - soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (Liang He)   
  - locks: fix TOCTOU race when granting write lease (Amir Goldstein)   
  - memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (Liang He)   
  - memory: of: Fix refcount leak bug in of_get_ddr_timings() (Liang He)   
  - memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (Liang He)   
  - ALSA: hda/hdmi: Don't skip notification handling during PM operation (Takashi Iwai)   
  - ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (Zhang Qilong)   
  - ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (Zhang Qilong)   
  - ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (Zhang Qilong)   
  - ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (Zhang Qilong)   
  - mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (Christophe JAILLET)   
  - ALSA: dmaengine: increment buffer pointer atomically (Andreas Pape)   
  - ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (Christophe JAILLET)   
  - ASoC: codecs: tx-macro: fix kcontrol put (Srinivas Kandagatla)   
  - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (Rafael Mendonca)   
  - drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (Kuogee Hsieh)   
  - drm/msm/dpu: index dpu_kms->hw_vbif using vbif_idx (Dmitry Baryshkov)   
  - ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (Liang He)   
  - mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (Christophe JAILLET)   
  - drm/amdgpu: Fix memory leak in hpd_rx_irq_create_workqueue() (Rafael Mendonca)   
  - drm/omap: dss: Fix refcount leak bugs (Liang He)   
  - drm/bochs: fix blanking (Gerd Hoffmann)   
  - ALSA: hda: beep: Simplify keep-power-at-enable behavior (Takashi Iwai)   
  - ASoC: rsnd: Add check for rsnd_mod_power_on (Jiasheng Jiang)   
  - drm/bridge: megachips: Fix a null pointer dereference bug (Zheyu Ma)   
  - drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() (Yang Yingliang)   
  - platform/chrome: cros_ec_typec: Correct alt mode index (Prashant Malani)   
  - platform/x86: msi-laptop: Fix resource cleanup (Hans de Goede)   
  - platform/x86: msi-laptop: Fix old-ec check for backlight registering (Hans de Goede)   
  - ASoC: tas2764: Fix mute/unmute (Martin Povišer)   
  - ASoC: tas2764: Drop conflicting set_bias_level power setting (Martin Povišer)   
  - ASoC: tas2764: Allow mono streams (Martin Povišer)   
  - platform/chrome: fix memory corruption in ioctl (Dan Carpenter)   
  - platform/chrome: fix double-free in chromeos_laptop_prepare() (Rustam Subkhankulov)   
  - ASoC: mt6359: fix tests for platform_get_irq() failure (Dan Carpenter)   
  - drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() (Liang He)   
  - drm/dp_mst: fix drm_dp_dpcd_read return value checks (Simon Ser)   
  - drm/bridge: parade-ps8640: Fix regulator supply order (Chen-Yu Tsai)   
  - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (Dmitry Osipenko)   
  - drm/mipi-dsi: Detach devices when removing the host (Maxime Ripard)   
  - drm/bridge: Avoid uninitialized variable warning (Dan Carpenter)   
  - drm: bridge: adv7511: unregister cec i2c device after cec adapter (Alvin Šipraga)   
  - drm: bridge: adv7511: fix CEC power down control register offset (Alvin Šipraga)   
  - net: mvpp2: fix mvpp2 debugfs leak (Russell King (Oracle))   
  - once: add DO_ONCE_SLOW() for sleepable contexts (Eric Dumazet)   
  - net/ieee802154: reject zero-sized raw_sendmsg() (Tetsuo Handa)   
  - net: wwan: iosm: Call mutex_init before locking it (Maxim Mikityanskiy)   
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie)   
  - hwmon: (pmbus/mp2888) Fix sensors readouts for MPS Multi-phase mp2888 controller (Oleksandr Shamray)   
  - spi: Ensure that sg_table won't be used after being freed (Marek Szyprowski)   
  - tcp: fix tcp_cwnd_validate() to not forget is_cwnd_limited (Neal Cardwell)   
  - sctp: handle the error returned from sctp_auth_asoc_init_active_key (Xin Long)   
  - mISDN: fix use-after-free bugs in l1oip timer handlers (Duoming Zhou)   
  - eth: alx: take rtnl_lock on resume (Jakub Kicinski)   
  - vhost/vsock: Use kvmalloc/kvfree for larger packets. (Junichi Uekawa)   
  - wifi: rtl8xxxu: Fix AIFS written to REG_EDCA_*_PARAM (Bitterblue Smith)   
  - spi: s3c64xx: Fix large transfers with DMA (Vincent Whitchurch)   
  - netfilter: nft_fib: Fix for rpath check with VRF devices (Phil Sutter)   
  - xfrm: Reinject transport-mode packets through workqueue (Liu Jian)   
  - Bluetooth: hci_core: Fix not handling link timeouts propertly (Luiz Augusto von Dentz)   
  - i2c: mlxbf: support lock mechanism (Asmaa Mnebhi)   
  - skmsg: Schedule psock work if the cached skb exists on the psock (Liu Jian)   
  - spi/omap100k:Fix PM disable depth imbalance in omap1_spi100k_probe (Zhang Qilong)   
  - spi: dw: Fix PM disable depth imbalance in dw_spi_bt1_probe (Zhang Qilong)   
  - x86/cpu: Include the header of init_ia32_feat_ctl()'s prototype (Luciano Leão)   
  - x86/microcode/AMD: Track patch allocation size explicitly (Kees Cook)   
  - wifi: ath11k: fix number of VHT beamformee spatial streams (Jesus Fernandez Manzano)   
  - netfilter: conntrack: revisit the gc initial rescheduling bias (Antoine Tenart)   
  - netfilter: conntrack: fix the gc rescheduling delay (Antoine Tenart)   
  - Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure (Tetsuo Handa)   
  - bpf: Ensure correct locking around vulnerable function find_vpid() (Lee Jones)   
  - net: fs_enet: Fix wrong check in do_pd_setup (Zheng Yongjun)   
  - Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (Luiz Augusto von Dentz)   
  - wifi: mt76: mt7915: do not check state before configuring implicit beamform (Howard Hsu)   
  - wifi: mt76: mt7615: add mt7615_mutex_acquire/release in mt7615_sta_set_decap_offload (Lorenzo Bianconi)   
  - wifi: mt76: sdio: fix transmitting packet hangs (YN Chen)   
  - wifi: rtl8xxxu: Remove copy-paste leftover in gen2_update_rate_mask (Bitterblue Smith)   
  - wifi: rtl8xxxu: gen2: Fix mistake in path B IQ calibration (Bitterblue Smith)   
  - bpf: btf: fix truncated last_member_type_id in btf_struct_resolve (Lorenz Bauer)   
  - spi: meson-spicc: do not rely on busy flag in pow2 clk ops (Neil Armstrong)   
  - wifi: rtl8xxxu: Fix skb misuse in TX queue selection (Bitterblue Smith)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_pm_resume_runtime() (Xu Qiang)   
  - spi: qup: add missing clk_disable_unprepare on error in spi_qup_resume() (Xu Qiang)   
  - selftests/xsk: Avoid use-after-free on ctx (Ian Rogers)   
  - wifi: rtw88: add missing destroy_workqueue() on error path in rtw_core_init() (Yang Yingliang)   
  - wifi: rtl8xxxu: tighten bounds checking in rtl8xxxu_read_efuse() (Dan Carpenter)   
  - Bluetooth: btusb: mediatek: fix WMT failure during runtime suspend (Sean Wang)   
  - bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy (Hou Tao)   
  - bpf: Propagate error from htab_lock_bucket() to userspace (Hou Tao)   
  - bpf: Disable preemption when increasing per-cpu map_locked (Hou Tao)   
  - xsk: Fix backpressure mechanism on Tx (Maciej Fijalkowski)   
  - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (Kohei Tarumizu)   
  - spi: mt7621: Fix an error message in mt7621_spi_probe() (Christophe JAILLET)   
  - bpftool: Fix a wrong type cast in btf_dumper_int (Lam Thai)   
  - wifi: mac80211: allow bw change during channel switch in mesh (Hari Chandrakanthan)   
  - bpf: Fix reference state management for synchronous callbacks (Kumar Kartikeya Dwivedi)   
  - leds: lm3601x: Don't use mutex after it was destroyed (Uwe Kleine-König)   
  - wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() (Wen Gong)   
  - wifi: rtlwifi: 8192de: correct checking of IQK reload (Ping-Ke Shih)   
  - NFSD: Fix handling of oversized NFSv4 COMPOUND requests (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READDIR (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_encode's buflen calculation (Chuck Lever)   
  - SUNRPC: Fix svcxdr_init_decode's end-of-buffer calculation (Chuck Lever)   
  - nfsd: Fix a memory leak in an error handling path (Christophe JAILLET)   
  - objtool: Preserve special st_shndx indexes in elf_update_symbol (Sami Tolvanen)   
  - ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (Wang Kefeng)   
  - ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() (Wang Kefeng)   
  - MIPS: SGI-IP27: Fix platform-device leak in bridge_platform_create() (Lin Yujun)   
  - MIPS: SGI-IP27: Free some unused memory (Christophe JAILLET)   
  - sh: machvec: Use char[] for section boundaries (Kees Cook)   
  - thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() (Xuewen Yan)   
  - ntfs3: rework xattr handlers and switch to POSIX ACL VFS helpers (Christian Brauner)   
  - userfaultfd: open userfaultfds with O_RDONLY (Ondrej Mosnacek)   
  - ima: fix blocking of security.ima xattrs of unsupported algorithms (Mimi Zohar)   
  - selinux: use "grep -E" instead of "egrep" (Greg Kroah-Hartman)   
  - smb3: must initialize two ACL struct fields to zero (Steve French)   
  - drm/amd/display: Fix vblank refcount in vrr transition (Yunxiang Li)   
  - drm/i915: Fix watermark calculations for gen12+ CCS+CC modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ MC CCS modifier (Ville Syrjälä)   
  - drm/i915: Fix watermark calculations for gen12+ RC CCS modifier (Ville Syrjälä)   
  - drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (Jianglei Nie)   
  - drm/nouveau/kms/nv140-: Disable interlacing (Lyude Paul)   
  - staging: greybus: audio_helper: remove unused and wrong debugfs usage (Greg Kroah-Hartman)   
  - KVM: VMX: Drop bits 31:16 when shoving exception error code into VMCS (Sean Christopherson)   
  - KVM: nVMX: Don't propagate vmcs12's PERF_GLOBAL_CTRL settings to vmcs02 (Sean Christopherson)   
  - KVM: nVMX: Unconditionally purge queued/injected events on nested "exit" (Sean Christopherson)   
  - KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (Michal Luczaj)   
  - blk-wbt: call rq_qos_add() after wb_normal is initialized (Yu Kuai)   
  - media: cedrus: Fix endless loop in cedrus_h265_skip_bits() (Dmitry Osipenko)   
  - media: cedrus: Set the platform driver data earlier (Dmitry Osipenko)   
  - efi: libstub: drop pointless get_memory_map() call (Ard Biesheuvel)   
  - thunderbolt: Explicitly enable lane adapter hotplug events at startup (Mario Limonciello)   
  - tracing: Fix reading strings from synthetic events (Steven Rostedt (Google))   
  - tracing: Add "(fault)" name injection to kernel probes (Steven Rostedt (Google))   
  - tracing: Move duplicate code of trace_kprobe/eprobe.c into header (Steven Rostedt (Google))   
  - tracing: Add ioctl() to force ring buffer waiters to wake up (Steven Rostedt (Google))   
  - tracing: Wake up waiters when tracing is disabled (Steven Rostedt (Google))   
  - tracing: Wake up ring buffer waiters on closing of the file (Steven Rostedt (Google))   
  - tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (Waiman Long)   
  - ring-buffer: Fix race between reset page and reading page (Steven Rostedt (Google))   
  - ring-buffer: Add ring_buffer_wake_waiters() (Steven Rostedt (Google))   
  - ring-buffer: Check pending waiters when doing wake ups as well (Steven Rostedt (Google))   
  - ring-buffer: Have the shortest_full queue be the shortest not longest (Steven Rostedt (Google))   
  - ring-buffer: Allow splice to read previous partially read pages (Steven Rostedt (Google))   
  - ftrace: Properly unset FTRACE_HASH_FL_MOD (Zheng Yejian)   
  - livepatch: fix race between fork and KLP transition (Rik van Riel)   
  - ext4: update 'state->fc_regions_size' after successful memory allocation (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_regions() (Ye Bin)   
  - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (Ye Bin)   
  - ext4: fix miss release buffer head in ext4_fc_write_inode (Ye Bin)   
  - ext4: fix dir corruption when ext4_dx_add_entry() fails (Zhihao Cheng)   
  - ext4: place buffer head allocation before handle start (Jinke Han)   
  - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (Zhang Yi)   
  - ext4: don't increase iversion counter for ea_inodes (Lukas Czerner)   
  - ext4: fix check for block being out of directory size (Jan Kara)   {CVE-2022-1184} 
  - ext4: make ext4_lazyinit_thread freezable (Lalith Rajendran)   
  - ext4: fix null-ptr-deref in ext4_write_info (Baokun Li)   
  - ext4: avoid crash when inline data creation follows DIO write (Jan Kara)   
  - jbd2: add miss release buffer head in fc_do_one_pass() (Ye Bin)   
  - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (Ye Bin)   
  - jbd2: fix potential buffer head reference count leak (Ye Bin)   
  - jbd2: wake up journal waiters in FIFO order, not LIFO (Andrew Perepechko)   
  - hardening: Remove Clang's enable flag for -ftrivial-auto-var-init=zero (Kees Cook)   
  - hardening: Avoid harmless Clang option under CONFIG_INIT_STACK_ALL_ZERO (Kees Cook)   
  - f2fs: fix to do sanity check on summary info (Chao Yu)   
  - f2fs: fix to do sanity check on destination blkaddr during recovery (Chao Yu)   
  - f2fs: increase the limit for reserve_root (Jaegeuk Kim)   
  - f2fs: flush pending checkpoints when freezing super (Jaegeuk Kim)   
  - f2fs: complete checkpoints during remount (Jaegeuk Kim)   
  - btrfs: set generation before calling btrfs_clean_tree_block in btrfs_init_new_buffer (Tetsuo Handa)   
  - btrfs: fix race between quota enable and quota rescan ioctl (Filipe Manana)   
  - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (Lukas Czerner)   
  - ksmbd: Fix user namespace mapping (Mickaël Salaün)   
  - ksmbd: Fix wrong return value and message length check in smb2_ioctl() (Zhang Xiaoxu)   
  - ksmbd: fix endless loop when encryption for response fails (Namjae Jeon)   
  - fbdev: smscufx: Fix use-after-free in ufx_ops_open() (Hyunwoo Kim)   
  - pinctrl: rockchip: add pinmux_ops.gpio_set_direction callback (Quentin Schulz)   
  - gpio: rockchip: request GPIO mux to pinctrl when setting direction (Quentin Schulz)   
  - scsi: qedf: Populate sysfs attributes for vport (Saurav Kashyap)   
  - slimbus: qcom-ngd: cleanup in probe error path (Krzysztof Kozlowski)   
  - slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure (Krzysztof Kozlowski)   
  - powerpc/boot: Explicitly disable usage of SPE instructions (Pali Rohár)   
  - powercap: intel_rapl: Use standard Energy Unit for SPR Dram RAPL domain (Zhang Rui)   
  - NFSD: Protect against send buffer overflow in NFSv3 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv2 READ (Chuck Lever)   
  - NFSD: Protect against send buffer overflow in NFSv3 READDIR (Chuck Lever)   
  - serial: 8250: Request full 16550A feature probing for OxSemi PCIe devices (Maciej W. Rozycki)   
  - serial: 8250: Let drivers request full 16550A feature probing (Maciej W. Rozycki)   
  - PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (Maciej W. Rozycki)   
  - xen/gntdev: Accommodate VMA splitting (M. Vefa Bicakci)   
  - xen/gntdev: Prevent leaking grants (M. Vefa Bicakci)   
  - mm/mmap: undo ->mmap() when arch_validate_flags() fails (Carlos Llamas)   
  - mm/damon: validate if the pmd entry is present before accessing (Baolin Wang)   
  - arm64: errata: Add Cortex-A55 to the repeat tlbi list (James Morse)   
  - drm/udl: Restore display mode on resume (Takashi Iwai)   
  - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (Dmitry Osipenko)   
  - drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error (Dmitry Osipenko)   
  - drm/virtio: Check whether transferred 2D BO is shmem (Dmitry Osipenko)   
  - dmaengine: mxs: use platform_driver_register (Dario Binacchi)   
  - Revert "drm/amdgpu: use dirty framebuffer helper" (Hamza Mahfooz)   
  - nvme-pci: set min_align_mask before calculating max_hw_sectors (Rishabh Bhatnagar)   
  - nvme-multipath: fix possible hang in live ns resize with ANA access (Sagi Grimberg)   
  - nvmem: core: Fix memleak in nvmem_register() (Gaosheng Cui)   
  - UM: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK (Huacai Chen)   
  - riscv: Pass -mno-relax only on lld < 15.0.0 (Fangrui Song)   
  - riscv: always honor the CONFIG_CMDLINE_FORCE when parsing dtb (Wenting Zhang)   
  - riscv: Make VM_WRITE imply VM_READ (Andrew Bresticker)   
  - riscv: Allow PROT_WRITE-only mmap() (Andrew Bresticker)   
  - parisc: fbdev/stifb: Align graphics memory size to 4MB (Helge Deller)   
  - RISC-V: Make port I/O string accessors actually work (Maciej W. Rozycki)   
  - riscv: topology: fix default topology reporting (Conor Dooley)   
  - arm64: topology: move store_cpu_topology() to shared code (Conor Dooley)   
  - regulator: qcom_rpm: Fix circular deferral regression (Linus Walleij)   
  - net: thunderbolt: Enable DMA paths only after rings are enabled (Mika Westerberg)   
  - hwmon: (gsc-hwmon) Call of_node_get() before of_find_xxx API (Liang He)   
  - ASoC: wcd934x: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - ASoC: wcd9335: fix order of Slimbus unprepare/disable (Krzysztof Kozlowski)   
  - platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (Patryk Duda)   
  - quota: Check next/prev free block number after reading from quota file (Zhihao Cheng)   
  - HID: multitouch: Add memory barriers (Andri Yngvason)   
  - fs: dlm: handle -EBUSY first in lock arg validation (Alexander Aring)   
  - fs: dlm: fix race between test_bit() and queue_work() (Alexander Aring)   
  - i2c: designware: Fix handling of real but unexpected device interrupts (Jarkko Nikula)   
  - mmc: sdhci-sprd: Fix minimum clock limit (Wenchao Chen)   
  - can: kvaser_usb_leaf: Fix CAN state after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix TX queue out of sync after restart (Anssi Hannula)   
  - can: kvaser_usb_leaf: Fix overread with an invalid command (Anssi Hannula)   
  - can: kvaser_usb: Fix use of uninitialized completion (Anssi Hannula)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - xhci: dbc: Fix memory leak in xhci_alloc_dbc() (Rafael Mendonca)   
  - iio: pressure: dps310: Reset chip after timeout (Eddie James)   
  - iio: pressure: dps310: Refactor startup procedure (Eddie James)   
  - iio: adc: ad7923: fix channel readings for some variants (Nuno Sá)   
  - iio: ltc2497: Fix reading conversion results (Uwe Kleine-König)   
  - iio: dac: ad5593r: Fix i2c read protocol requirements (Michael Hennerich)   
  - cifs: Fix the error length of VALIDATE_NEGOTIATE_INFO message (Zhang Xiaoxu)   
  - cifs: destage dirty pages before re-reading them for cache=none (Ronnie Sahlberg)   
  - hv_netvsc: Fix race between VF offering and VF association message from host (Gaurav Kohli)   
  - io_uring/net: don't update msg_name if not provided (Pavel Begunkov)   
  - mtd: rawnand: atmel: Unmap streaming DMA mappings (Tudor Ambarus)   
  - ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (Saranya Gopal)   
  - ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Correct pin configs for ASUS G533Z (Luke D. Jones)   
  - ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (Callum Osmotherly)   
  - ALSA: usb-audio: Fix NULL dererence at error path (Takashi Iwai)   
  - ALSA: usb-audio: Fix potential memory leaks (Takashi Iwai)   
  - ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (Takashi Iwai)   
  - ALSA: oss: Fix potential deadlock at unregistration (Takashi Iwai)   
  - Revert "fs: check FMODE_LSEEK to control internal pipe splicing" (Sasha Levin)   
  - LTS version: v5.15.74 (Jack Vogel)   
  - wifi: mac80211: fix MBSSID parsing use-after-free (Johannes Berg)   
  - mac80211: fix memory leaks with element parsing (Johannes Berg)   
  - mac80211: always allocate struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mlme: find auth challenge directly (Johannes Berg)   
  - mac80211: move CRC into struct ieee802_11_elems (Johannes Berg)   
  - mac80211: mesh: clean up rx_bcn_presp API (Johannes Berg)   
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (Shunsuke Mie)   
  - misc: pci_endpoint_test: Aggregate params checking for xfer (Shunsuke Mie)   
  - Input: xpad - fix wireless 360 controller breaking after suspend (Cameron Gutman)   
  - Input: xpad - add supported devices as contributed on github (Pavel Rojtberg)   
  - wifi: cfg80211: update hidden BSSes to avoid WARN_ON (Johannes Berg)   
  - wifi: mac80211: fix crash in beacon protection for P2P-device (Johannes Berg)   
  - wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (Johannes Berg)   
  - wifi: cfg80211: avoid nontransmitted BSS list corruption (Johannes Berg)   
  - wifi: cfg80211: fix BSS refcounting bugs (Johannes Berg)   
  - wifi: cfg80211: ensure length byte is present before access (Johannes Berg)   
  - wifi: cfg80211/mac80211: reject bad MBSSID elements (Johannes Berg)   
  - wifi: cfg80211: fix u8 overflow in cfg80211_update_notlisted_nontrans() (Johannes Berg)   
  - Revert "crypto: qat - reduce size of mapped region" (Giovanni Cabiddu)   
  - Revert "powerpc/rtas: Implement reentrant rtas call" (Nathan Lynch)   
  - USB: serial: qcserial: add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - scsi: stex: Properly zero out the passthrough command structure (Linus Torvalds)   
  - efi: Correct Macmini DMI match in uefi cert quirk (Orlando Chamberlain)   
  - ALSA: hda: Fix position reporting on Poulsbo (Takashi Iwai)   
  - random: clamp credited irq bits to maximum mixed (Jason A. Donenfeld)   
  - random: restore O_NONBLOCK support (Jason A. Donenfeld)   
  - ceph: don't truncate file in atomic_open (Hu Weiwen)   
  - nilfs2: replace WARN_ONs by nilfs_error for checkpoint acquisition failure (Ryusuke Konishi)   
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi)   
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ryusuke Konishi)   
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi)   
  - LTS version: v5.15.73 (Jack Vogel)   
  - Revert "clk: ti: Stop using legacy clkctrl names for omap4 and 5" (Sasha Levin)   
  - rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (Krzysztof Kozlowski)   
  - USB: serial: ftdi_sio: fix 300 bps rate for SIO (Johan Hovold)   
  - usb: mon: make mmapped memory read only (Tadeusz Struk)   
  - net/mlx5: Disable irq when locking lag_lock (Vlad Buslov)   
  - wifi: cfg80211: fix MCS divisor value (Tamizh Chelvam Raja)   
  - mm/huge_memory: use pfn_to_online_page() in split_huge_pages_all() (Naoya Horiguchi)   
  - mm/huge_memory: minor cleanup for split_huge_pages_all (Miaohe Lin)   
  - perf parse-events: Identify broken modifiers (Ian Rogers)   
  - mmc: core: Terminate infinite loop in SD-UHS voltage switch (Brian Norris)   
  - mmc: core: Replace with already defined values for readability (ChanWoo Lee)   
  - drm/amd/display: skip audio setup when audio stream is enabled (zhikzhai)   
  - drm/amd/display: update gamut remap if plane has changed (Hugo Hu)   
  - drm/amd/display: Assume an LTTPR is always present on fixed_vs links (Michael Strauss)   
  - drm/amd/display: Fix double cursor on non-video RGB MPO (Leo Li)   
  - net: atlantic: fix potential memory leak in aq_ndev_close() (Jianglei Nie)   
  - arch: um: Mark the stack non-executable to fix a binutils warning (David Gow)   
  - um: Cleanup compiler warning in arch/x86/um/tls_32.c (Lukas Straub)   
  - um: Cleanup syscall_handler_t cast in syscalls_32.h (Lukas Straub)   
  - ALSA: hda/hdmi: Fix the converter reuse for the silent stream (Jaroslav Kysela)   
  - net: marvell: prestera: add support for for Aldrin2 (Oleksandr Mazur)   
  - net/ieee802154: fix uninit value bug in dgram_sendmsg (Haimin Zhang)   
  - scsi: qedf: Fix a UAF bug in __qedf_probe() (Letu Ren)   
  - ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (Sergei Antonov)   
  - dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (Swati Agarwal)   
  - dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (Swati Agarwal)   
  - dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (Swati Agarwal)   
  - firmware: arm_scmi: Add SCMI PM driver remove routine (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the sensor domains (Cristian Marussi)   
  - firmware: arm_scmi: Improve checks in the info_get operations (Cristian Marussi)   
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu)   
  - powerpc/64s/radix: don't need to broadcast IPI for radix pmd collapse flush (Yang Shi)   
  - mm: gup: fix the fast GUP race against THP collapse (Yang Shi)   
  - xsk: Inherit need_wakeup flag for shared sockets (Jalal Mostafa)   
  - docs: update mediator information in CoC docs (Shuah Khan)   
  - Makefile.extrawarn: Move -Wcast-function-type-strict to W=1 (Sami Tolvanen)   
  - LTS version: v5.15.72 (Jack Vogel)   
  - drm/i915/gem: Really move i915_gem_context.link under ref protection (Chris Wilson)   
  - x86/alternative: Fix race in try_get_desc() (Nadav Amit)   
  - KVM: x86: Hide IA32_PLATFORM_DCA_CAP[31:0] from the guest (Jim Mattson)   
  - clk: iproc: Do not rely on node name for correct PLL setup (Florian Fainelli)   
  - clk: imx: imx6sx: remove the SET_RATE_PARENT flag for QSPI clocks (Han Xu)   
  - fs: split off setxattr_copy and do_setxattr function from setxattr (Stefan Roesch)   
  - vdpa/ifcvf: fix the calculation of queuepair (Angus Chen)   
  - selftests: Fix the if conditions of in test_extra_filter() (Wang Yufen)   
  - net: phy: Don't WARN for PHY_UP state in mdio_bus_phy_resume() (Lukas Wunner)   
  - net: stmmac: power up/down serdes in stmmac_open/release (Junxiao Chang)   
  - wifi: mac80211: fix regression with non-QoS drivers (Hans de Goede)   
  - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (Michael Kelley)   
  - net/mlxbf_gige: Fix an IS_ERR() vs NULL bug in mlxbf_gige_mdio_probe (Peng Wu)   
  - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (Rafael Mendonca)   
  - net: sched: act_ct: fix possible refcount leak in tcf_ct_init() (Hangyu Hua)   
  - usbnet: Fix memory leak in usbnet_disconnect() (Peilin Ye)   
  - gpio: mvebu: Fix check for pwm support on non-A8K platforms (Pali Rohár)   
  - Input: melfas_mip4 - fix return value check in mip4_probe() (Yang Yingliang)   
  - Revert "drm: bridge: analogix/dp: add panel prepare/unprepare in suspend/resume time" (Brian Norris)   
  - drm/bridge: lt8912b: fix corrupted image output (Francesco Dolcini)   
  - drm/bridge: lt8912b: set hdmi or dvi mode (Philippe Schenker)   
  - drm/bridge: lt8912b: add vsync hsync (Philippe Schenker)   
  - ASoC: tas2770: Reinit regcache on reset (Martin Povišer)   
  - arm64: dts: qcom: sm8350: fix UFS PHY serdes size (Johan Hovold)   
  - ASoC: imx-card: Fix refcount issue with of_node_put (Shengjiu Wang)   
  - soc: sunxi: sram: Fix debugfs info for A64 SRAM C (Samuel Holland)   
  - soc: sunxi: sram: Fix probe function ordering issues (Samuel Holland)   
  - soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (Cai Huoqing)   
  - soc: sunxi: sram: Prevent the driver from being unbound (Samuel Holland)   
  - soc: sunxi: sram: Actually claim SRAM regions (Samuel Holland)   
  - ARM: dts: am5748: keep usb4_tm disabled (Romain Naour)   
  - reset: imx7: Fix the iMX8MP PCIe PHY PERST support (Richard Zhu)   
  - ARM: dts: am33xx: Fix MMCHS0 dma properties (YuTong Chang)   
  - swiotlb: max mapping size takes min align mask into account (Tianyu Lan)   
  - media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (Hans Verkuil)   
  - media: rkvdec: Disable H.264 error detection (Nicolas Dufresne)   
  - media: dvb_vb2: fix possible out of bound access (Hangyu Hua)   
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)   
  - mm: fix madivse_pageout mishandling on non-LRU page (Minchan Kim)   
  - mm/migrate_device.c: flush TLB while holding PTL (Alistair Popple)   
  - mm: fix dereferencing possible ERR_PTR (Binyi Han)   
  - mm: prevent page_frag_alloc() from corrupting the memory (Maurizio Lombardi)   
  - mm/page_alloc: fix race condition between build_all_zonelists and page allocation (Mel Gorman)   
  - mmc: hsq: Fix data stomping during mmc recovery (Wenchao Chen)   
  - mmc: moxart: fix 4-bit bus width and remove 8-bit bus width (Sergei Antonov)   
  - libata: add ATA_HORKAGE_NOLPM for Pioneer BDR-207M and BDR-205 (Niklas Cassel)   
  - vduse: prevent uninitialized memory accesses (Maxime Coquelin)   
  - drm/amdgpu: Add amdgpu suspend-resume code path under SRIOV (Bokun Zhang)   
  - drm/i915/gt: Restrict forced preemption to the active context (Chris Wilson)   
  - Revert "firmware: arm_scmi: Add clock management to the SCMI power domain" (Ulf Hansson)   
  - net: mt7531: only do PLL once after the reset (Alexander Couzens)   
  - mm/damon/dbgfs: fix memory leak when using debugfs_lookup() (Greg Kroah-Hartman)   
  - ntfs: fix BUG_ON in ntfs_lookup_inode_by_name() (ChenXiaoSong)   
  - ARM: dts: integrator: Tag PCI host with device_type (Linus Walleij)   
  - x86/sgx: Do not fail on incomplete sanitization on premature stop of ksgxd (Jarkko Sakkinen)   
  - clk: ingenic-tcu: Properly enable registers before accessing timers (Aidan MacDonald)   
  - can: c_can: don't cache TX messages for C_CAN cores (Marc Kleine-Budde)   
  - Input: snvs_pwrkey - fix SNVS_HPVIDR1 register address (Sebastian Krzyszkowiak)   
  - net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (Frank Wunderlich)   
  - thunderbolt: Explicitly reset plug events delay back to USB4 spec value (Mario Limonciello)   
  - usb: typec: ucsi: Remove incorrect warning (Heikki Krogerus)   
  - uas: ignore UAS for Thinkplus chips (Hongling Zeng)   
  - usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (Hongling Zeng)   
  - uas: add no-uas quirk for Hiksemi usb_disk (Hongling Zeng)   
  - cgroup: cgroup_get_from_id() must check the looked-up kn is a directory (Ming Lei)   
  - cgroup: reduce dependency on cgroup_mutex (Shakeel Butt)   
  - ALSA: hda/realtek: fix speakers and micmute on HP 855 G8 (Alexander Sergeyev)   
  - ALSA: hda: Fix Nvidia dp infoframe (Mohan Kumar)   
  - ALSA: hda: Fix hang at HD-audio codec unbinding due to refcount saturation (Takashi Iwai)   
  - ALSA: hda: Do disconnect jacks at codec unbind (Takashi Iwai)   
  - LTS version: v5.15.71 (Jack Vogel)   
  - ext4: use locality group preallocation for small closed files (Jan Kara)   
  - ext4: avoid unnecessary spreading of allocations among groups (Jan Kara)   
  - ext4: make mballoc try target group first even with mb_optimize_scan (Jan Kara)   
  - ext4: limit the number of retries after discarding preallocations blocks (Theodore Ts'o)   
  - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (Luís Henriques)   
  - ext4: make directory inode spreading reflect flexbg size (Jan Kara)   
  - devdax: Fix soft-reservation memory description (Dan Williams)   
  - NFSv4: Fixes for nfs4_inode_return_delegation() (Trond Myklebust)   
  - drm/amdgpu: don't register a dirty callback for non-atomic (Alex Deucher)   
  - i2c: mlxbf: Fix frequency calculation (Asmaa Mnebhi)   
  - i2c: mlxbf: prevent stack overflow in mlxbf_i2c_smbus_start_transaction() (Asmaa Mnebhi)   
  - i2c: mlxbf: incorrect base address passed during io write (Asmaa Mnebhi)   
  - i2c: imx: If pm_runtime_get_sync() returned 1 device access is possible (Uwe Kleine-König)   
  - workqueue: don't skip lockdep work dependency in cancel_work_sync() (Tetsuo Handa)   
  - fsdax: Fix infinite loop in dax_iomap_rw() (Li Jinlin)   
  - drm/rockchip: Fix return type of cdn_dp_connector_mode_valid (Nathan Huckleberry)   
  - drm/amd/display: Mark dml30's UseMinimumDCFCLK() as noinline for stack usage (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateFlipSchedule() (Nathan Chancellor)   
  - drm/amd/display: Reduce number of arguments of dml31's CalculateWatermarksAndDRAMSpeedChangeSupport() (Nathan Chancellor)   
  - drm/amd/display: Limit user regamma to a valid value (Yao Wang1)   
  - drm/amdgpu: use dirty framebuffer helper (Hamza Mahfooz)   
  - drm/amd/pm: disable BACO entry/exit completely on several sienna cichlid cards (Guchun Chen)   
  - drm/gma500: Fix BUG: sleeping function called from invalid context errors (Hans de Goede)   
  - Drivers: hv: Never allocate anything besides framebuffer from framebuffer memory region (Vitaly Kuznetsov)   
  - drm/amd/amdgpu: fixing read wrong pf2vf data in SRIOV (Jingwen Chen)   
  - s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (Stefan Haberland)   
  - serial: tegra-tcu: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: tegra: Use uart_xmit_advance(), fixes icount.tx accounting (Ilpo Järvinen)   
  - serial: Create uart_xmit_advance() (Ilpo Järvinen)   
  - serial: fsl_lpuart: Reset prior to registration (Lukas Wunner)   
  - KVM: x86/mmu: Fold rmap_recycle into rmap_add (David Matlack)   
  - selftests: forwarding: add shebang for sch_red.sh (Hangbin Liu)   
  - bnxt: prevent skb UAF after handing over to PTP worker (Jakub Kicinski)   
  - net: sched: fix possible refcount leak in tc_new_tfilter() (Hangyu Hua)   
  - net: sunhme: Fix packet reception for len < RX_COPY_THRESHOLD (Sean Anderson)   
  - bonding: fix NULL deref in bond_rr_gen_slave_id (Jonathan Toppins)   
  - net/smc: Stop the CLC flow if no link to map buffers on (Wen Gu)   
  - drm/mediatek: dsi: Move mtk_dsi_stop() call back to mtk_dsi_poweroff() (Nícolas F. R. A. Prado)   
  - perf tools: Honor namespace when synthesizing build-ids (Namhyung Kim)   
  - perf kcore_copy: Do not check /proc/modules is unchanged (Adrian Hunter)   
  - perf jit: Include program header in ELF files (Lieven Hey)   
  - perf stat: Fix BPF program section name (Namhyung Kim)   
  - can: gs_usb: gs_can_open(): fix race dev->can.state condition (Marc Kleine-Budde)   
  - net: sh_eth: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - net: ravb: Fix PHY state warning splat during system resume (Geert Uytterhoeven)   
  - netfilter: ebtables: fix memory leak when blob is malformed (Florian Westphal)   
  - netfilter: nf_tables: fix percpu memory leak at nf_tables_addchain() (Tetsuo Handa)   
  - netfilter: nf_tables: fix nft_counters_enabled underflow at nf_tables_addchain() (Tetsuo Handa)   
  - net/sched: taprio: make qdisc_leaf() see the per-netdev-queue pfifo child qdiscs (Vladimir Oltean)   
  - net/sched: taprio: avoid disabling offload when it was never enabled (Vladimir Oltean)   
  - net: enetc: deny offload of tc-based TSN features on VF interfaces (Vladimir Oltean)   
  - net: enetc: move enetc_set_psfp() out of the common enetc_set_features() (Vladimir Oltean)   
  - wireguard: netlink: avoid variable-sized memcpy on sockaddr (Jason A. Donenfeld)   
  - wireguard: ratelimiter: disable timings test by default (Jason A. Donenfeld)   
  - net: ipa: properly limit modem routing table use (Alex Elder)   
  - of: mdio: Add of_node_put() when breaking out of for_each_xx (Liang He)   
  - drm/hisilicon: Add depends on MMU (Randy Dunlap)   
  - drm/hisilicon/hibmc: Allow to be built if COMPILE_TEST is enabled (Javier Martinez Canillas)   
  - sfc: fix null pointer dereference in efx_hard_start_xmit (Íñigo Huguet)   
  - sfc: fix TX channel offset when using legacy interrupts (Íñigo Huguet)   
  - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (Michal Jaron)   
  - i40e: Fix VF set max MTU size (Michal Jaron)   
  - iavf: Fix set max MTU size with port VLAN and jumbo frames (Michal Jaron)   
  - mlxbf_gige: clear MDIO gateway lock after read (David Thompson)   
  - iavf: Fix bad page state (Norbert Zulinski)   
  - um: fix default console kernel parameter (Christian Lamparter)   
  - MIPS: Loongson32: Fix PHY-mode being left unspecified (Serge Semin)   
  - MIPS: lantiq: export clk_get_io() for lantiq_wdt.ko (Randy Dunlap)   
  - drm/panel: simple: Fix innolux_g121i1_l01 bus_format (Heiko Schocher)   
  - net: team: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Unsync device addresses on ndo_stop (Benjamin Poirier)   
  - net: bonding: Share lacpdu_mcast_addr definition (Benjamin Poirier)   
  - scsi: mpt3sas: Fix return value check of dma_get_required_mask() (Sreekanth Reddy)   
  - scsi: qla2xxx: Fix memory leak in __qlt_24xx_handle_abts() (Rafael Mendonca)   
  - net: phy: aquantia: wait for the suspend/resume operations to finish (Ioana Ciornei)   
  - net: core: fix flow symmetric hash (Ludovic Cintrat)   
  - ipvlan: Fix out-of-bound bugs caused by unset skb->mac_header (Lu Wei)   
  - iavf: Fix cached head and tail value for iavf_get_tx_pending (Brett Creeley)   
  - ice: Don't double unplug aux on peer initiated reset (Dave Ertman)   
  - netfilter: nfnetlink_osf: fix possible bogus match in nf_osf_find() (Pablo Neira Ayuso)   
  - netfilter: nf_conntrack_irc: Tighten matching on DCC message (David Leadbeater)   
  - netfilter: nf_conntrack_sip: fix ct_sip_walk_headers (Igor Ryzhov)   
  - arm64: dts: rockchip: Remove 'enable-active-low' from rk3399-puma (Fabio Estevam)   
  - dmaengine: ti: k3-udma-private: Fix refcount leak bug in of_xudma_dev_get() (Liang He)   
  - arm64: dts: rockchip: Set RK3399-Gru PCLK_EDP to 24 MHz (zain wang)   
  - drm/mediatek: dsi: Add atomic {destroy,duplicate}_state, reset callbacks (AngeloGioacchino Del Regno)   
  - arm64: dts: rockchip: Fix typo in lisense text for PX30.Core (Jagan Teki)   
  - arm64: dts: rockchip: Pull up wlan wake# on Gru-Bob (Brian Norris)   
  - firmware: arm_scmi: Fix the asynchronous reset requests (Cristian Marussi)   
  - firmware: arm_scmi: Harden accesses to the reset domains (Cristian Marussi)   
  - xfs: validate inode fork size against fork format (Dave Chinner)   
  - xfs: fix xfs_ifree() error handling to not leak perag ref (Brian Foster)   
  - xfs: reorder iunlink remove operation in xfs_ifree (Dave Chinner)   
  - vmlinux.lds.h: CFI: Reduce alignment of jump-table to function alignment (Will Deacon)   
  - arm64: topology: fix possible overflow in amu_fie_setup() (Sergey Shtylyov)   
  - KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (Sean Christopherson)   
  - mm: slub: fix flush_cpu_slab()/__free_slab() invocations in task context. (Maurizio Lombardi)   
  - mm/slub: fix to return errno if kmalloc() fails (Chao Yu)   
  - net: mana: Add rmb after checking owner bits (Haiyang Zhang)   
  - can: flexcan: flexcan_mailbox_read() fix return value for drop = true (Marc Kleine-Budde)   
  - kasan: call kasan_malloc() from __kmalloc_*track_caller() (Peter Collingbourne)   
  - riscv: fix a nasty sigreturn bug... (Al Viro)   
  - gpiolib: cdev: Set lineevent_state::irq after IRQ register successfully (Meng Li)   
  - gpio: mockup: Fix potential resource leakage when register a chip (Andy Shevchenko)   
  - gpio: mockup: fix NULL pointer dereference when removing debugfs (Bartosz Golaszewski)   
  - wifi: mt76: fix reading current per-tid starting sequence number for aggregation (Felix Fietkau)   
  - efi: libstub: check Shim mode using MokSBStateRT (Ard Biesheuvel)   
  - efi: x86: Wipe setup_data on pure EFI boot (Ard Biesheuvel)   
  - thunderbolt: Add support for Intel Maple Ridge single port controller (Gil Fine)   
  - usb: dwc3: core: leave default DMA if the controller does not support 64-bit DMA (William Wu)   
  - media: flexcop-usb: fix endpoint type check (Johan Hovold)   
  - btrfs: fix hang during unmount when stopping a space reclaim worker (Filipe Manana)   
  - btrfs: fix hang during unmount when stopping block group reclaim worker (Filipe Manana)   
  - iommu/vt-d: Check correct capability for sagaw determination (Yi Liu)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5530 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for ASUS GA503R laptop (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G533Z HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Add pincfg for ASUS G513 HP jack (Luke D. Jones)   
  - ALSA: hda/realtek: Re-arrange quirk table entries (Takashi Iwai)   
  - ALSA: hda/realtek: Enable 4-speaker output Dell Precision 5570 laptop (Callum Osmotherly)   
  - ALSA: hda/realtek: Add quirk for Huawei WRT-WX9 (huangwenhui)   
  - ALSA: hda: add Intel 5 Series / 3400 PCI DID (Kai Vehmanen)   
  - ALSA: hda/tegra: set depop delay for tegra (Mohan Kumar)   
  - ALSA: core: Fix double-free at snd_card_new() (Takashi Iwai)   
  - Revert "ALSA: usb-audio: Split endpoint setups for hw_params and prepare" (Takashi Iwai)   
  - USB: serial: option: add Quectel RM520N (jerry meng)   
  - USB: serial: option: add Quectel BG95 0x0203 composition (Carl Yin(殷张成))   
  - USB: core: Fix RST error in hub.c (Alan Stern)   
  - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (Phil Auld)   
  - Revert "usb: gadget: udc-xilinx: replace memcpy with memcpy_toio" (Greg Kroah-Hartman)   
  - Revert "usb: add quirks for Lenovo OneLink+ Dock" (Greg Kroah-Hartman)   
  - usb: gadget: udc-xilinx: replace memcpy with memcpy_toio (Piyush Mehta)   
  - usb: add quirks for Lenovo OneLink+ Dock (Jean-Francois Le Fillatre)   
  - usb: dwc3: gadget: Avoid duplicate requests to enable Run/Stop (Wesley Cheng)   
  - usb: dwc3: gadget: Don't modify GEVNTCOUNT in pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Refactor pullup() (Thinh Nguyen)   
  - usb: dwc3: gadget: Prevent repeat pullup() (Thinh Nguyen)   
  - usb: dwc3: Issue core soft reset before enabling run/stop (Wesley Cheng)   
  - usb: dwc3: gadget: Avoid starting DWC3 gadget during UDC unbind (Wesley Cheng)   
  - staging: r8188eu: Add Rosewill USB-N150 Nano to device tables (Larry Finger)   
  - staging: r8188eu: Remove support for devices with 8188FU chipset (0bda:f179) (Candy Febriyanto)   
  - drm/amdgpu: make sure to init common IP before gmc (Alex Deucher)   
  - drm/amdgpu: Separate vf2pf work item init from virt data exchange (Victor Skvortsov)   
  - bnxt_en: reclaim max resources if sriov enable fails (Kashyap Desai)  [Orabug: 34083583]  
  - eth: bnxt: make ulp_id unsigned to make GCC 12 happy (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: Enable packet timestamping for all RX packets (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Configure ptp filters during bnxt open (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.95 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Initiallize bp->ptp_lock first before using it (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Properly report no pause support on some cards (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: add more error checks to HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: refactor error handling of HWRM_NVM_INSTALL_UPDATE (Kalesh AP)  [Orabug: 34083583]  
  - bnxt_en: Handle async event when the PHC is updated in RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Implement .adjtime() for PTP RTC mode (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Add driver support to use Real Time Counter for PTP (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: PTP: Refactor PTP initialization functions (Pavan Chebbi)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.73 (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Use page frag RX buffers for better software GRO performance (Jakub Kicinski)  [Orabug: 34083583]  
  - bnxt_en: convert to xdp_do_flush (Edwin Peer)  [Orabug: 34083583]  
  - bnxt_en: enable interrupt sampling on 5750X for DIM (Andy Gospodarek)  [Orabug: 34083583]  
  - bnxt_en: Log error report for dropped doorbell (Michael Chan)  [Orabug: 34083583]  
  - bnxt_en: Add event handler for PAUSE Storm event (Somnath Kotur)  [Orabug: 34083583]  
  - bnxt_en: Update firmware interface to 1.10.2.63 (Michael Chan)  [Orabug: 34083583]  
  - bnxt: use netif_is_rxfh_configured instead of open code (Juhee Kang)  [Orabug: 34083583]  
  - uek-rpm: add aarch64 to list of vdso arches (Tom Saeger)  [Orabug: 34716172]  
  - uapi: Fix [rs]cq_vector data types in rds[6]_info_rdma_connection (Mark Haywood)  [Orabug: 34734247]  
  - uapi: Fix congested flag type in rds[6]_info_socket (Mark Haywood)  [Orabug: 34734247]  
  - uek-rpm: ol9: disable CONFIG_MISDN and dependent drivers on OL9/UEK7 (Harshit Mogalapalli)  [Orabug: 34734324]


