# changelog

author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.3.el9uek]
changelog:
  - net/rds: print PPID/COMM of process doing user reset on RDS connection (Juan Garcia)  [Orabug: 36248460]  
  - platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace events (Shravan Kumar Ramani)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx TmFIFO is full (Liming Sun)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (Jules Irenge)  [Orabug: 36299543]  
  - power: reset: pwr-mlxbf: support graceful reboot instead of emergency reset (Asmaa Mnebhi)  [Orabug: 36299543]  
  - platform/mellanox: tmfifo: fix kernel-doc warnings (Randy Dunlap)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-tmfifo: Convert to platform remove callback returning void (Uwe Kleine-König)  [Orabug: 36299543]  
  - platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (Shravan Kumar Ramani)  [Orabug: 36299543]  
  - pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency (David Thompson)  [Orabug: 36299543]  
  - pinctrl: mlxbf3: Remove gpio_disable_free() (Asmaa Mnebhi)  [Orabug: 36299543]  
  - gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]  
  - pinctrl: use capital "OR" for multiple licenses in SPDX (Krzysztof Kozlowski)  [Orabug: 36299543]  
  - gpio: mlxbf3: Support add_pin_ranges() (Asmaa Mnebhi)  [Orabug: 36299543]  
  - uek: kabi: Add two new exported kABI symbols for ACFS and EDV (Saeed Mirzamohammadi)  [Orabug: 36303821]  
  - uek-rpm: Update the aarch64 kABI files for new symbol (Yifei Liu)  [Orabug: 36323808]  
  - arm64: Minimize tlb flush due to vttbr writes on AmpereOne (Ganapatrao Kulkarni)  [Orabug: 36349790]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-205.149.4.el9uek]
changelog:
  - Bluetooth: hci_event: Fix handling of HCI_EV_IO_CAPA_REQUEST (Luiz Augusto von Dentz)   
  - netfilter: nf_tables: allow NFPROTO_INET in nft_(match/target)_validate() (Ignat Korchagin)   
  - ksmbd: free aux buffer if ksmbd_iov_pin_rsp_read fails (Fedor Pchelkin)   
  - afs: Fix endless loop in directory parsing (David Howells)   
  - PCI: dwc: Fix a 64bit bug in dw_pcie_ep_raise_msix_irq() (Dan Carpenter)   
  - Revert "drm/bridge: lt8912b: Register and attach our DSI device at probe" (Max Krummenacher)   
  - net: usb: dm9601: fix wrong return value in dm9601_mdio_read (Javier Carrasco)   
  - usb: dwc3: gadget: Don't disconnect if not started (Thinh Nguyen)   
  - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler (Hans de Goede)   
  - Fix null ptr in rds_tcp_recv_path (Allison Henderson)  [Orabug: 35587408]  
  - cifs: fix mid leak during reconnection after timeout threshold (Shyam Prasad N)  [Orabug: 36123597]  
  - vfio/mlx5: Activate the chunk mode functionality (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for READING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Add support for SAVING in chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Pre-allocate chunks for the STOP_COPY phase (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Rename some stuff to match chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Enable querying state size which is > 4GB (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Refactor the SAVE callback to activate a work only upon an error (Yishai Hadas)  [Orabug: 36298327]  
  - vfio/mlx5: Wake up the reader post of disabling the SAVING migration file (Yishai Hadas)  [Orabug: 36298327]  
  - net/mlx5: Introduce ifc bits for migration in a chunk mode (Yishai Hadas)  [Orabug: 36298327]  
  - af_unix: Drop oob_skb ref before purging queue in GC. (Kuniyuki Iwashima)  [Orabug: 36375407]  
  - hv_netvsc: Register VF in netvsc_probe if NET_DEVICE_REGISTER missed (Shradha Gupta)  [Orabug: 36379479]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-205.149.5.el9uek]
changelog:
  - uek-rpm: Bluefield 3: enable lockdown mode for secure boot (Dave Kleikamp)  [Orabug: 36318788]  
  - Documentation/x86: Update split lock documentation (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Add sysctl to control the misery mode (Guilherme G. Piccoli)  [Orabug: 36298291]  
  - x86/split-lock: Remove unused TIF_SLD bit (Tony Luck)  [Orabug: 36298291]  
  - x86/split_lock: Make life miserable for split lockers (Tony Luck)  [Orabug: 36298291]


author: Jack Vogel <jack.vogel@oracle.com> [5.15.0-205.149.5.1.el9uek]
changelog:
  - KVM: x86: Add BHI_NO (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Mitigate KVM by default (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Add BHI mitigation knob (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Enumerate Branch History Injection (BHI) bug (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Define SPEC_CTRL_BHI_DIS_S (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bhi: Add support for clearing branch history at syscall entry (Pawan Gupta)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/cpufeature: Add missing leaf enumeration (Daniel Sneddon)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Use a switch statement and macros in __feature_translate() (Jim Mattson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Advertise CPUID.(EAX=7,ECX=2):EDX[5:0] to userspace (Jim Mattson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - KVM: x86: Update KVM-only leaf handling to allow for 100% KVM-only leafs (Sean Christopherson)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/bugs: Use sysfs_emit() (Borislav Petkov)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/cpu: Support AMD Automatic IBRS (Kim Phillips)  [Orabug: 36384802]  {CVE-2024-2201} 
  - Documentation/hw-vuln: Update spectre doc (Lin Yujun)  [Orabug: 36384802]  {CVE-2024-2201} 
  - x86/speculation: Reorder SRSO and GDS functions (Alexandre Chartre)  [Orabug: 36384802]  {CVE-2024-2201}


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.2.el9uek]
changelog:
  - x86/efistub: Branch straight to kernel entry point from C code (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/efi: Make the deprecated EFI handover protocol optional (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: fix panic in kdump kernel (Oleksandr Tymoshenko)  [Orabug: 36943196] {CVE-2024-35800}
  - efi: verify that variable services are supported (Johan Hovold)  [Orabug: 36943196]  
  - efi: libstub: Give efi_main() asmlinkage qualification (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Simplify IDT/GDT preserve/restore in the EFI thunk (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed, efi: Merge multiple definitions of image_offset into one (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_pe_entry() out of head_64.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_entry out of head_64.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move efi32_pe_entry into .text section (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move bootargs parsing out of 32-bit startup code (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Move 32-bit entrypoint code into .text section (Ard Biesheuvel)  [Orabug: 36943196]  
  - x86/boot/compressed: Rename efi_thunk_64.S to efi-mixed.S (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: libstub: use EFI_LOADER_CODE region when moving the kernel in memory (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi/x86: libstub: Make DXE calls mixed mode safe (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi: libstub: ensure allocated memory to be executable (Baskov Evgeniy)  [Orabug: 36943196]  
  - efi: libstub: declare DXE services table (Baskov Evgeniy)  [Orabug: 36943196]  
  - x86/compressed: Export and rename add_identity_map() (Michael Roth)  [Orabug: 36943196]  
  - x86/compressed/64: Detect/setup SEV/SME features earlier during boot (Michael Roth)  [Orabug: 36943196]  
  - x86/boot: Use MSR read/write helpers instead of inline assembly (Michael Roth)  [Orabug: 36943196]  
  - x86/boot: Introduce helpers for MSR reads/writes (Michael Roth)  [Orabug: 36943196]  
  - x86/compressed/acpi: Move EFI detection to helper (Michael Roth)  [Orabug: 36943196]  
  - efi/libstub: add prototype of efi_tcg2_protocol::hash_log_extend_event() (Ard Biesheuvel)  [Orabug: 36943196]  
  - efi/libstub: x86/mixed: increase supported argument count (Ard Biesheuvel)  [Orabug: 36943196]  
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu)  [Orabug: 37033066]  
  - crypto/octeontx2: Use dynamic allocated memory region for lmtst (Bharat Bhushan)  [Orabug: 36725601]  
  - crypto/octeontx2: Initialize cptlfs device info once (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix rsfec stats reading (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-pf: Add NIXLF error/poison interrupt handlers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: dbg: Add debug prints for NIX AF interrupts (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: poll for tx link credits before link mode change (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Do not support irq config for both edge (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: Knobs for NPC default rule counters (Linu Cherian)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Add Channel info to RPM map (Linu Cherian)  [Orabug: 36725601]  
  - Octeontx2-af: Skip overlap check for SPI field (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Modify SMQ flush sequence to drop packets (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Add error check for xfer logic register base (Petr Malat)  [Orabug: 36725601]  
  - octeontx2-af: Fix issue with GRE parsing (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: add shutdown function (Dave Kleikamp)  [Orabug: 36725601]  
  - uek-rpm: Build T93 embedded kernel (Dave Kleikamp)  [Orabug: 36725601]  
  - driver: soc: marvell: add cpss drivers (Dave Kleikamp)  [Orabug: 36725601]  
  - PCI: boot time optimization (Harman Kalra)  [Orabug: 36725601]  
  - octeontx_edac: Fix mcc_edac failure at boot (Thomas Tai)  [Orabug: 36725601]  
  - soc: Only try to build Marvell SOC code on aarch64 (Dave Kleikamp)  [Orabug: 36725601]  
  - efi/Marvell: Work-around for bootefi memmap errors (Henry Willard)  [Orabug: 36725601]  
  - octeontx2-af: add max_vfs module param (Tom Saeger)  [Orabug: 36725601]  
  - arm64: Fix compiler warning when CONFIG_MRVL_OCTEONTX_EL0_INTR is undefined. (Tom Saeger)  [Orabug: 36725601]  
  - thermal: add CN98XX support for Marvell Octeon TX2 SoC temperature sensors (Dave Kleikamp)  [Orabug: 36725601]  
  - thermal: support for Marvell Octeon TX2 SoC temperature sensors (Eric Saint-Etienne)  [Orabug: 36725601]  
  - crypto: octeontx2: let the core report the driver name instead of the drivers (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-pf: extend ringparam setting/getting API with rx_buf_len (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-pf: Fix arguments to bpf_warn_invalid_xdp_action() (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-af: fix bitmap_weight formatting (Dave Kleikamp)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Support for eCPRI MsgType5 timestamping (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use correct netdev priv structure for debugging (Baha Mesleh)  [Orabug: 36725601]  
  - gpio: thunder: Fix invalid object pointer in kfree. (Szymon Balcerak)  [Orabug: 36725601]  
  - soc: marvell: bert: BERT support for CN10k (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: soc: marvell: octeontx_info: Fix parsing of two fdt properties (Felix Manlunas)  [Orabug: 36725601]  
  - octeontx2-af: Add validation before accessing fwdata (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add support to parse more VLAN headers (Kiran Kumar K)  [Orabug: 36725601]  
  - drivers: octeontx-edac: Add gic error decoder (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Remove unused variables (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: Add debugfs support to dump NIX TM registers (Anshumali Gaur)  [Orabug: 36725601]  
  - driver: edac: octeontx: offline/poison page on fatal/UE (Wladislav Wiebe)  [Orabug: 36725601]  
  - gpio: thunderx: Fixed 'pin-cfg' values collection. (Szymon Balcerak)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: disable CPRI RX on cleanup (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ignore mcs untagged error (Baha Mesleh)  [Orabug: 36725601]  
  - driver: i2c: mv64xxx: cn9130 bus lockup issue (Narendra Hadke)  [Orabug: 36725601]  
  - Calculate delay-element (Aaron Williams)  [Orabug: 36725601]  
  - Disable enhanced strobe if not selected (Aaron Williams)  [Orabug: 36725601]  
  - Fix clock timing for MMC DDR modes (Aaron Williams)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix modpost error (Satheesh Paul)  [Orabug: 36725601]  
  - octeontx2-af: Fix issue with IPV6 GRE and multi VLAN (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: Add KPU changes to parse fabric path header (Kiran Kumar K)  [Orabug: 36725601]  
  - xhci: Use more than one Event Ring segment (Jonathan Bell)  [Orabug: 36725601]  
  - xhci: Set DESI bits in ERDP register correctly (Lukas Wunner)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add ioctl to get link info (Satheesh Paul)  [Orabug: 36725601]  
  - mdio: mdio-thunder: Fix driver build when ACPI disabled. (Szymon Balcerak)  [Orabug: 36725601]  
  - mdio: mdio-thunder: Add ACPI support. (Szymon Balcerak)  [Orabug: 36725601]  
  - gpio: thunderx: Add ACPI support. (Szymon Balcerak)  [Orabug: 36725601]  
  - octeontx2-pf: Check for DMAC extraction support before setting DMAC based hardware filter for a VF (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Do not use HW TSO when gso_size < 16bytes (Geetha sowjanya)  [Orabug: 36725601]  
  - drivers: spi: xspi: Modify HW xfer workaround (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-af: Added debugfs support to dump NIX TM topology (Anshumali Gaur)  [Orabug: 36725601]  
  - octeontx2-af: reveal only TIM params that are available (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: disable rx on RFOEs on exit (Baha Mesleh)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add dependency in Kconfig for GHES BERT (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-cpt: Wake up waiting process as last step (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2: Honor irqaffinity passed via bootargs (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: fix mcam hit counter (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: Fix default entries mcam entry action (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: map management port always to first PF (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: configure 802.3 pause frames in SGMII/QSGMII mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - FWLOG: Correct read length with ppos (Mikko Suni)  [Orabug: 36725601]  
  - octeontx2-pf: Reorder tearing down of PTP RX info work queue, mailbox (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Fix Support of FDSA tag (George Cherian)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: release psm queues on exit (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ignore MCS bypass errors (Baha Mesleh)  [Orabug: 36725601]  
  - MMC: Fix for SD card support in cadence driver (Paul Way)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add cpri busrt packet limiter (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - genirq: Export irqaffinity_default (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add SW workaround for Zero padding (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Add new devlink param to configure maximum usable NIX LFs (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Honor irqaffinity passed via bootargs (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add TIM error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: clear state on TIM ring disable (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: disable preemption when enabling TIM (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-vf: Fix VF mbox up message error on PTP RX enable (Sai Krishna)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Change xfer logic base (Suneel Garapati)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add Kconfig option for otx2-ghes-init file. (Piyush Malgujar)  [Orabug: 36725601]  
  - driver: edac: octeontx: Improvements to GIC RAS handler (Chandrakala Chavva)  [Orabug: 36725601]  
  - edac: octeontx: Add support for GIC RAS reporting (Jayanthi Annadurai)  [Orabug: 36725601]  
  - octeontx2-af: Dump hw register state on error (Geetha sowjanya)  [Orabug: 36725601]  
  - Change struct octeontx2_pcie_console_nexus (Ray Asbury)  [Orabug: 36725601]  
  - octeontx2-af: account for cycle wraparound (Pavan Nikhilesh)  [Orabug: 36725601]  
  - drivers: spi: cadence-xspi: Export chip select gpio conditionally (Suneel Garapati)  [Orabug: 36725601]  
  - spi: cadence: Improve MRVL locking mechanism (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix PTP PHC sw timecounter reset ioctl (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: prevent TIM register read reorder (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-dpi: fix incorrect chunk size config (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-dpi: configure dma engine FIFO (Amit Prakash Shukla)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool: support multi advertise mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx-pf: Update SGMII mode mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool: Remove dependency of phyad (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: enable rxc with lookaside cpt lf (Vidya Sagar Velumuri)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to capture counters (Pavan Nikhilesh)  [Orabug: 36725601]  
  - crypto: octeontx2: increase timeout value of load_fvc CPT instruction poll (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: increase timeout value of load_fvc CPT instruction poll (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-dpi: extend sysfs to dump DPI PF registers (Satha Rao)  [Orabug: 36725601]  
  - octeontx2-af: reduce cpt flt interrupt vectors for cn10kb (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Fix updating PFC configuration during running traffic (Suman Ghosh)  [Orabug: 36725601]  
  - drivers: pci: probe: Read after write fixup for PBUS register (Suneel Garapati)  [Orabug: 36725601]  
  - genirq: Increase the number of interrupters (George Cherian)  [Orabug: 36725601]  
  - drivers: spi-cadence-xspi: Fix clock divisor change logic (Suneel Garapati)  [Orabug: 36725601]  
  - driver: mmc: sdhci-cadence: ACPI support added for eMMC driver for CN10K (Piyush Malgujar)  [Orabug: 36725601]  
  - driver: mmc: sdhci: Add ACPI check (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-af: Add debug logs. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Add more debug messages (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Fix dangling pointers in the netdev qset (Geetha sowjanya)  [Orabug: 36725601]  
  - drivers: cadence-xspi: Optimize workaround logic (Suneel Garapati)  [Orabug: 36725601]  
  - edac: octeontx: Add error syndrome (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: i2c-octeon-core: Add recovery for WDOG_TOUT error status (Suneel Garapati)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add CN10 check (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2: Improve mailbox tracepoints for debugging (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2: add timeout for load_fvc completion poll (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: avoid RXC register access in FLR on CN10KB (Nithin Dabilpuram)  [Orabug: 36725601]  
  - drivers: i2c-octeon-core: Add error state recovery (Bruno Matic)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add an ioctl to reset PTP PHC sw timecounter offset (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Remove MAC address validation check (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Use TL2 level for egress match all configuration (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add a new mbox to read/write MCAM hit status (Suman Ghosh)  [Orabug: 36725601]  
  - crypto: octeontx2: fix devlink params get callback (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix opcode incase of SGv2 (Srujana Challa)  [Orabug: 36725601]  
  - ptp_clockmatrix: print driver version during probe (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - driver: mfd/misc/ptp: update renasas smu drivers to v1.0 tag (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - driver: edac: octeontx: Init MC grain (Vasyl Gomonovych)  [Orabug: 36725601]  
  - rqchip/gic-v3: Use raw_spin_lock in irq context (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: don't drop packets with macsec errors (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix register offset definitions (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: spi: cadence: Reconfigure xSPI config to STIG Mode (Witold Sadowski)  [Orabug: 36725601]  
  - spi: Add xfer() function for cadence xSPI (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: spi: Add arbitration support for Cadence SPI (Suneel Garapati)  [Orabug: 36725601]  
  - watchdog: sbsa_gwdt: Apply the Errata workaround seen on CN10K Processors (George Cherian)  [Orabug: 36725601]  
  - driver: spi: cadence: Remove unused variables (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Flush WQ before destroy (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Check address for Null before free (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Detach LF resources on probe cleanup (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: add validation checks for function arguments (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2: Fix klockwork issues in BPHY and SSO (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2: Fix klockwork issues. (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Free NIX_AF_INT_VEC_GEN interrupt too (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: utilize hardware FLR support in SSO (Shijith Thotton)  [Orabug: 36725601]  
  - drivers: marvell: Fix klockwork issues (Suman Ghosh)  [Orabug: 36725601]  
  - arm64: smccc: Add trace events to SMC calls. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for AES_GMAC (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for DH (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ccm(aes) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: support md5 and hmac(md5) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: support sha1, sha256, sha384 and sha512 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ECDSA P192, P256 and P384 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecdsa - export ecdsa privkey ASN.1 parser (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecdsa - export ecdsa signature ASN.1 parser (Srujana Challa)  [Orabug: 36725601]  
  - driver: serdes_debugfs: add support for debugfs (anthony chan-MA Eng_IC)  [Orabug: 36725601]  
  - octeontx2-af: fix to get different rq mask (Rakesh Kudurumalla)  [Orabug: 36725601]  
  - crypto: make RFC6979 test vectors generic to all drivers (Srujana Challa)  [Orabug: 36725601]  
  - crypto: add ECDSA test vectors from RFC 6979 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: add ECDSA signature generation support (Srujana Challa)  [Orabug: 36725601]  
  - crypto: ecc - Export additional functions from crypto/ecc.c (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: fix accessing of CPT register on 105xx. (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Using compound/head page ref count (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fixed sparse errors (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Remove source port check while adding ntuple rule for GTP-U/C (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp timestamp conversion when using external clock (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: don't modify pps threshold when sw timecounter is not used (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - crypto: octeontx2: add devlink option to set max_rxc_icb_cnt (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Define new ethtool modes for CN10KB (Hariprasad Kelam)  [Orabug: 36725601]  
  - driver: spi: cadence: Add ACPI support (Piyush Malgujar)  [Orabug: 36725601]  
  - Octeontx2-pf: Fix error condition for GTP-U/C rule insertion (Suman Ghosh)  [Orabug: 36725601]  
  - drivers:spi:cadence-xspi: Switch to polling mode when in panic (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - drivers:spi:cadence-xspi: Add low-level changes to support kmsg panic/oops write (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - spi: spi-nor: Fix the spi_nor_panic_write (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - drivers: mtd: spi-nor: Support kmsg dumper based on pstore/blk (Gowthami Thiagarajan)  [Orabug: 36725601]  
  - octeontx2-sdp: add CN10kB for using correct mask (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - ptm-ep: Add PTM requestor driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Remove SA stats support (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: fix CPT ctx flush (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: fix issue with spitosa table teardown (Nithin Dabilpuram)  [Orabug: 36725601]  
  - scmi: mailbox: Increase message slots (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-af: Update minimum receive frame size (Sathesh Edara)  [Orabug: 36725601]  
  - watchdog: sbsa_gwdt: Enable the WDOG_STOP_ON_PANIC (George Cherian)  [Orabug: 36725601]  
  - drivers: watchdog: Add support for panic notifier callback (George Cherian)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Poll for timestamp to commit into PTP ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-pf: Use 1 TL4 queue per SDP output queue, enable SDP backpressure (Roy Franz)  [Orabug: 36725601]  
  - spi: cadence: Clear interrupt status before enabling interrupts (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-dpi: queue reset of DPI VF during initialization (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - spi: cadence: Add support for xfer operation. (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx-bphy-netdev: dev_ioctl: split out ndo_eth_ioctl (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix OTX2_RFOE_IOCTL_RX_IND_CFG in case of CNF10K (Janne Kukkonen)  [Orabug: 36725601]  
  - octeontx2-af: consider mode when using cpt base channel for bp (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: update SSO FLR routine (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add additional checks to validate user-def field value for GTP-u and GTP-C (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-dpi: add sysfs for communication from userspace (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - octeontx2-sdp: Fix programming EPF_RINFO (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: remove debugfs entries. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating host ptp offset multiple times (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - drivers: mmc: sdhci-cadence: Change command delay value (Chandrakala Chavva)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix rfoe ptp clock cleanup (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix issue of using incorrect netdev priv (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix link carrier state update for cnf10k (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Avoid kernel crash when psw jd_ptr is NULL (Mikko Suni)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Rectify resetting PEM (Ray Asbury)  [Orabug: 36725601]  
  - drivers: pci-octeon-pem: Rectify RC link recover work (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: octeon-pem: Fix hardware issue (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: octeon-pem: Check on MSI-X vector count (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: controller: Add Octeon PEM driver (Suneel Garapati)  [Orabug: 36725601]  
  - drivers: pci: probe: Add fixup for Marvell PCIeRC bridge (Suneel Garapati)  [Orabug: 36725601]  
  - PCI: marvell-cnxk-ep: rename driver macro name string (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - watchdog: sbsa_wdog: Make sure to program a larger timeout value (George Cherian)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add dependency OCTEONTX2_AF (Jia Ma)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: fix undefined SSO register access (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: fix inline inbound IPsec configuration (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-bphy: Generate PPS OUT on PHC PTP_CLK_REQ_PEROUT (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: update TIM adjust GTI errata silicons (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ioctl OTX2_CPRI_IOCTL_LINK_EVENT cpri context (Janne Kukkonen)  [Orabug: 36725601]  
  - driver: edac: octeontx: Add revision check for new pass of the chip (Chandrakala Chavva)  [Orabug: 36725601]  
  - drivers: spi: cadence: Fix clock operations (Witold Sadowski)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Remove ptp list processing (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use two send queues for cnf10k (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use separate xmit function for PTP (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Simplify job submission to hardware (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Simplify error checks and updating stats (Subbaraya Sundeep)  [Orabug: 36725601]  
  - drivers: soc: Removed Below Warning message for generic header file on CN8XX platform. (sdonelli)  [Orabug: 36725601]  
  - octeontx2-dpi: configure writing DMA result to an offset of the event (Sibaranjan Pattnayak)  [Orabug: 36725601]  
  - PCI: add misc character device for BAR4 mem access (Satananda Burla)  [Orabug: 36725601]  
  - cacheinfo: Expose the code to generate a cache-id from a device_node (James Morse)  [Orabug: 36725601]  
  - cacheinfo: Set cache 'id' based on DT data (Rob Herring)  [Orabug: 36725601]  
  - cacheinfo: Allow for >32-bit cache 'id' (Rob Herring)  [Orabug: 36725601]  
  - drivers: base: cacheinfo: Add helper to find the cache size from cpu+level (James Morse)  [Orabug: 36725601]  
  - drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Find PPTT cache level by ID (James Morse)  [Orabug: 36725601]  
  - ACPI / irq: Add acpi_register_partitioned_percpu_gsi() (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: select and translate the partition domain (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Build PPI partitions on ACPI systems (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Print DT partitions in the same way as APCI (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Add a helper to build a cpumask from a cpu_node (James Morse)  [Orabug: 36725601]  
  - ACPI / PPTT: Provide a helper to walk processor containers (James Morse)  [Orabug: 36725601]  
  - irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way (James Morse)  [Orabug: 36725601]  
  - ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec (James Morse)  [Orabug: 36725601]  
  - irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place (James Morse)  [Orabug: 36725601]  
  - irqchip/gic-v3: Move partition_create_desc() work to a helper (James Morse)  [Orabug: 36725601]  
  - Documentation/admin-guide/acpi: Move information out of shell script comments (James Morse)  [Orabug: 36725601]  
  - arm64: Add workaround for Cavium erratum 36890 (Andrew Pinski)  [Orabug: 36725601]  
  - octeontx2-pf: Fix coverity issues (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Add NPC support to filter GTP-U and GTP-C packets based on TEID (Suman Ghosh)  [Orabug: 36725601]  
  - PCI: controller: Add Marvell OcteonTx2 PCIe Endpoint driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-dpi: Add DPI DMA PF driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add CN10K SDP support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Fix SDP output backpressure (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: add multi-PF support in SDP (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: setup the SDP channel configuration (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add FLR handling support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add mailbox support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - soc: octeontx2-sdp: Add SDP PF driver support (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Enable FORCE_COND_CLK_EN only for applicable chips. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - drivers: soc: marvell: Add PCI console driver (Rick Farrington)  [Orabug: 36725601]  
  - firmware: octeontx2: Move AVS reset control to MUB bus (sdonelli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix coverity issues (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - KVM: arm64: Extend timer errata-38627 to kvm (Bharat Bhushan)  [Orabug: 36725601]  
  - clocksource: Add Marvell Errata-38627 workaround (Bharat Bhushan)  [Orabug: 36725601]  
  - EDAC: Octeon: Init SDEI (Vasyl Gomonovych)  [Orabug: 36725601]  
  - drives: soc: marvell: Using struct proc_ops instead of file_operations (Piyush Malgujar)  [Orabug: 36725601]  
  - drives: soc: marvell: Update octtx_info to display sdk-version (Chandrakala Chavva)  [Orabug: 36725601]  
  - drives: soc: marvell: Fix issues reported by static code analysis (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: update to support to print reset counters (Selvam Venkatachalam)  [Orabug: 36725601]  
  - drives: soc: marvell: Remove unnecessary warnings about reset counters (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: support to print reset counters (Selvam Venkatachalam)  [Orabug: 36725601]  
  - drives: soc: marvell: Fixes conversion for BOARD-MAC-ADDRESS-ID-NUM in octeontx_info (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Fixes unnecessary logging from octeontx info driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Fix OcteonTX info driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Adds MAC addressess overview to board info (Wojciech Bartczak)  [Orabug: 36725601]  
  - drives: soc: marvell: Display version information for flash components (Aaron Williams)  [Orabug: 36725601]  
  - drives: soc: marvell: publish no of macs in octeontx_info node (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Alter ways of mac address parsing (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Board info logic reorg (Sujeet Baranwal)  [Orabug: 36725601]  
  - drives: soc: marvell: Board information made available (Sujeet Baranwal)  [Orabug: 36725601]  
  - octeontx2-pf: disable preemption while using per_cpu pointer (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Dereference only a valid pointer (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Allow pkts of size morethan MTU to be transmitted (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Skip dma map and unmap when IOMMU is bypassed (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-pf: Add missing changes in otx2_ethtool.c (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-sdpvf: Fix PTP options for SDP interfaces (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-vf: Add partial ethtool support for SDP VFs (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-pf: Support to enable EDSA/Higig2 pkts parsing (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add ethtool -m option support. (Christina Jacob)  [Orabug: 36725601]  
  - octeontx2-pf: Avoid null pointer dereference (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-vf: Export symbol 'otx2_config_serdes_link_state' (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-pf: devlink param support to modify physical interface links. (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink param to vary rbuf size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink param to vary cqe size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Add devlink support to configure TL1 RR_PRIO (Hariprasad Kelam)  [Orabug: 36725601]  
  - soc: marvell: otx2: Fix initcall funciton should return an 'int' (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Fix old kzfree (Vasyl Gomonovych)  [Orabug: 36725601]  
  - octeontx2-af: support for custom L2 header (Satheesh Paul A)  [Orabug: 36725601]  
  - octeontx2-af: Add mbox to alloc/free BPIDs (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Dynamically allocate bpids for CPT and LBK (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add programming SDP BPID in cn10k (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: Fix BPID calculation for SDP (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - crypto: octeontx2: add ctx_val workaround (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix rsa verify (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: fix dma unmap issue with ahash (Srujana Challa)  [Orabug: 36725601]  
  - arm64: Enable Spectre BHB mitigation for Marvell OcteonTx2 cpus (Linu Cherian)  [Orabug: 36725601]  
  - mtd: spi-nor: winbond: Update w25q256fw flash memory to use 4B opcodes (Witold Sadowski)  [Orabug: 36725601]  
  - mtd: spi-nor: macronix: Add support for mx25um51245g (Witold Sadowski)  [Orabug: 36725601]  
  - mailbox: mvl-mhu: update copyright note (Wojciech Zmuda)  [Orabug: 36725601]  
  - scmi: mailbox: increase timeout for rx response (Jayanthi Annadurai)  [Orabug: 36725601]  
  - clk: control device frequency using sysfs (Wojciech Bartczak)  [Orabug: 36725601]  
  - scmi: perf: octtx2: round off OPP frequencies to neaest 100 (Sujeet Baranwal)  [Orabug: 36725601]  
  - scmi: mailbox: modifies rx buffer size and timeout for rx response (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Cleanup dead code (Wojciech Bartczak)  [Orabug: 36725601]  
  - mailbox: marvell: Initialize interrupts only if there's client for data (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Reject non-configured CPC instances (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Add support for LPI/SPI interrupt configuration in MHU (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: mailbox: Remove superfluous mutex in MHU implementation (Wojciech Bartczak)  [Orabug: 36725601]  
  - driver: MHU: Driver adjustment for 10x based octeontx platforms (Wojciech Bartczak)  [Orabug: 36725601]  
  - Marvell MHU: Fixes locking mechanism in MHU driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - mailbox: add OcteonTX2 MHU mailbox driver (Wojciech Bartczak)  [Orabug: 36725601]  
  - soc: marvell: otx2: Enable MSI-X interrupts (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add error injection interface (Vasyl Gomonovych)  [Orabug: 36725601]  
  - soc: marvell: otx2: Add BERT support for OTX2 (Vasyl Gomonovych)  [Orabug: 36725601]  
  - EDAC: Octeon: Add Marvell's OcteonTx2 SoC and CN10KA SoC EDAC driver (Vasyl Gomonovych)  [Orabug: 36725601]  
  - mmc: octeontx2: ACPI support added for eMMC driver for T9x. (Piyush Malgujar)  [Orabug: 36725601]  
  - mmc: octeontx2: Resolve issues reported by static analysis (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Removes static variables in tuning code (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Add MMC polling method to support kmsg panic/oops write (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: cleanup mmc_oops driver (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds CMD tuning for eMMC HS200 mode (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Cleans up mmc code and prepare it for HS200 tuning update (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds device tree entries to control eMMC input timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds a way to dynamically control eMMC bus input timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds new overrides for eMMC bus output timings (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: Adds mechanism to modify output timings for MMC bus (Wojciech Bartczak)  [Orabug: 36725601]  
  - mmc: octeontx2: enables mmc polling for pstore path (Bhaskara Budiredla)  [Orabug: 36725601]  
  - mmc: octeontx2: fix handling calibration glitch (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: Configure flags for T96 pass B0 (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: Use flags for hardware differences (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: Fix tuning for T96 C0 (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: Add tuning support for HS400 mode (Aaron Williams)  [Orabug: 36725601]  
  - mmc: octeontx2: speed limit for tx2-c0 (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: use calibrated timing taps (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: do not drop bus lock in tuning (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: slot switch by vqmmc/gpio (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: reorganize before vqmmc switching (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: cmd and data out values fixture (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: amend hs400 tuning (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: correct clock divisor (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: fix swiotlb buffer is full (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: avoid single-slot startup issues (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: execute_tuning for octeontx2 (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: track & apply CMD6 bus changes ASAP (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: cn96xx HS200-8wide-100MHz (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: CMD19/21 type correction (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: finish_dma_single() should teardown/unmap (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: use device tree entries (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: emmc tuning for delay (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: skip unavailable slots (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: calibrate tap delay (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: incorporate hw interface io ctl params (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: interrupt addition for ncb fault (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: emmc operation limited to 100 MHz (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: fix shutdown deadlock with active sd-card (Peter Swain)  [Orabug: 36725601]  
  - mmc: octeontx2: Configure sample command and data directly (Sujeet Baranwal)  [Orabug: 36725601]  
  - mmc: octeontx2: Use proper register to clear interrupts (Chandrakala Chavva)  [Orabug: 36725601]  
  - mmc: octeontx2: add check for 8/9xxx chips (Sujeet Baranwal)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: Update sfp_info_data (Piyush Malgujar)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: check supported platforms first (Damian Eppel)  [Orabug: 36725601]  
  - firmware: octeontx2: sfp-info: added support for t9x (Damian Eppel)  [Orabug: 36725601]  
  - firmware: octeontx2: sysfs driver for dumping sfp info (Damian Eppel)  [Orabug: 36725601]  
  - misc: bphy: disable ctr module on non-BPHY boards (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: prevent out-of-bound array iteration (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Restore static resource allocation (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Fix resource release sequence (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Add ioctl to get BPHY irqs bitmask (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Get max irq number from firmware (Jakub Palider)  [Orabug: 36725601]  
  - misc: bphy: Add ioctl to get max irq number (Jakub Palider)  [Orabug: 36725601]  
  - drivers: cleanup el3 handler only if parent process exits (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - misc: otx_bphy_ctr: Add OcteonTx2 BPHY control driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - spi: cadence: Add Marvell IP modification changes (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Add read access size switch (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Change dt-bindings documentation for Cadence XSPI controller (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Add polling mode support (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Change dt-bindings documentation for Cadence XSPI controller (Witold Sadowski)  [Orabug: 36725601]  
  - Firmware: mub: Add Marvell Utility Bus. (sdonelli)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: minor updates (Srikanth Pidugu)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: more debug capabilities (Srikanth Pidugu)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: unified SoC check (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: page access support (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics: driver update (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: PHY diagnostics debugfs driver (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: mvmdio_uio: paged access support (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: mvmdio_uio: lock on accessing mdio bus (Damian Eppel)  [Orabug: 36725601]  
  - soc: marvell: MDIO uio driver (Damian Eppel)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use ioremap() instead of ioremap_nocache (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: update ethtool drop stats when mbt erros are set (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: Added FEC stats in debugfs. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: update ethtool drop stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add new secondary BCN offset for slave (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: enable skb list processing for delay_request. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add new fields in ethtool stats (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Set external_clock_rate for all RFOE interfaces. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev:cnf10k: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Avoid ptp skb list processing in 1-step mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: update drop stats when psw errors are set (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: check psm queue space for ptp queue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Use atomic update feature to update PTP clock (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Enable force_cond_clk_en bit (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Recalculate UDP checksum. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating rx byte stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump RPM stats (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump timestamp ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: new entry to dump jdt ring (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: debugfs: Add new debugfs root entry (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix for PTP BCN delta (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Use PTP ring tail index to read timestamp (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: PTP 1-step improvements (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev:: Share RFOE PTP offset with host (Roy Franz)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: PTP BCN synchronization support for CNF10k platforms. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add cnf10k rfoe debugfs (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf105xxn: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: convert MIO_PTP_TIMESTAMP value to nsecs (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix updating JD pkt length and blocksize (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix improper names used for IRQs. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: IOCTL to read input clock parameters. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cnf10k link state set (Baha Mesleh)  [Orabug: 36725601]  
  - otx2-bphy-netdev: synchronize BCN to PTP slave clock. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: stop pkt transmission when psm queue is disabled (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: fix ptp timestamp in master mode (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix compilation warning (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use platform_get_irq_optional for PSM GPINT2 (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix incorrect PTP clock frequency. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: ptp: use 950MHz clock for ptp slave (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: ptp: Fix ptp clock counter read (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ethtool stats string order (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95n: add PTP slave support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix ptp hardware clock counter conversion (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - cnf10k-rfoe: skb shinfo falls on a different cacheline, avoid reading it (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Adjust structure elements to reduce cache misses (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Avoid costly iova_to_virt of packet dma address in xmit (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Cleanup packet stats maintenance (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Optimize packet length retrieval for non-ecpri packets (Sunil Goutham)  [Orabug: 36725601]  
  - cnf10k-rfoe: Remove duplicate error checking (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: use sw timecounter for ptp phc (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Add PTP 2S legacy mode support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - oceontx2-bphy-netdev: cnf10k: Fix 1S sync timestamp fields. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: re-enable cpri gpint when interface is stopped (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cpri interrupt handling (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10kb: 1-step PTP support for CNF10KB. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cpri: Add missing ethtool stats (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix CNF10K_CPRIX_ETH_UL_INT clearing (Janne Kukkonen)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Modify PTP timestamp format. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cnf10k ecpri rx packet issue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10kb: Add PTP slave support for CNF10KB. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: add cpri netdev support (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: add prefix for cnf10k registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: move duplicate code to common headers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - cnf10k-rfoe: Prepend 8-byte PTP header to packets in PTP queue. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf95: add jumbo frame support (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: 1-step PTP and slave support. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: rfoe netdev cleanup (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: convert psw ptp timestamp to cpu byte order (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix missing ioctls on CNF10K (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: move common ptp structures to rfoe_common.h (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy: Fix issues reported by static analysis. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - cnf10k: rfoe: add jumbo frame support to cnf10k (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: rfoe: fix ptp4l bad message issue (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy: Add PTP slave and external PTP input clock support in RFOE PHC driver. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: fix tx ptp ring entry format change (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix cpri rx packet handling (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: ptp: Fix ptp timestamp reading across lmacs (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cnf10k: Fix incorrect ptp tstamp entry size (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: cnf10kb: add support for psm gpint2 interrupt (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix possibility of processing the mbt multiple times (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix link carrier state update (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: limit cpri error logging rate (Baha Mesleh)  [Orabug: 36725601]  
  - otx2-bphy-netdev: cn10k: fix NULL pointer dereference (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: fix offset of cn10k registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: remove unwanted debug message (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: added cnf10k bphy netdev functionality (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: separate bphy common code into separate files (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: disable cpri code when cpri hw is not present (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: add debugfs support (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: don't process a packet when psw indicates error (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: cpri: fix compilation warnings (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add rfoe rx vlan forwarding configuration (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: avoid multiple kfree of common lmac objects (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix common lmac resource free (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix cleanup sequence in char device release (Baha Mesleh)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: remove unnecessary check when setting INTF_DOWN flag (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add timeout to ptp transmit timestamp polling (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix napi schedule issue when intf is down (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp tx processing race condition (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added RFOE LMAC stats to ethtool (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add PTP hardware clock support to rfoe interfaces (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix list_entry usage in the code (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added ioctl to set low level link state (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix ptp pending skb list processing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix kernel crash with ioctl trying to add timer (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Set minimum length of Tx packets to 64 bytes (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable accessing RFOE_RX_IND regs before odp netdev init (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable MSIXEN bit in IOCTL handler (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: Add support for registering both rfoe and cpri netdev intf (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - otx2-bphy-netdev: Add support for configurable PTP clock rate (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeonx2-bphy-netdev: Add support for switching mode from RFOE to CPRI (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Add support for CPRI Ethernet packet processing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: segregate chardev specific code (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Fix NULL pointer dereference (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Enable MSIXEN bit in MSIX CAP HDR (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added PTP BCN offset algorithm (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added ioctl to access RFOE_RX_IND registers (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: Added support for configurable packet types (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: netdev cleanup in char dev close (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: fix napi scheduling issue when interface is down (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-bphy-netdev: added full packet dump of mbt buffer (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - OcteonTX2 BPHY RFOE netdev driver initial version (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: extend context reading capability (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add mapping for mcs registers (Ankur Dwivedi)  [Orabug: 36725601]  
  - soc: marvell: hw-access: register access via debugfs (Sumit Gaur)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix pci resource leak (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: fix csr mapping range (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: Extend available ranges (Jakub Palider)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add support to read aura/pool context (Ashwin Sekhar T K)  [Orabug: 36725601]  
  - soc: marvell: hw_access: get cgx info (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: add hw context reading support (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: cleaning up existing hw access driver (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: hw_access: renaming to hw access driver (Harman Kalra)  [Orabug: 36725601]  
  - soc: marvell: Driver to access and modify device CSRs. (Rakesh Babu)  [Orabug: 36725601]  
  - drivers: soc: fwlog: use max_t instead of max (Pragnesh Patel)  [Orabug: 36725601]  
  - fwlog: fix invalid pointers and copy size in wraparound case (Aaro Koskinen)  [Orabug: 36725601]  
  - drivers: soc: fwlog: fix mapped size (Pragnesh Patel)  [Orabug: 36725601]  
  - drivers: soc: fwlog: Add firmware bootlog support (Pragnesh Patel)  [Orabug: 36725601]  
  - drivers: mmc: sdhci-cadence: Interrupt handling workaround (Jayanthi Annadurai)  [Orabug: 36725601]  
  - drivers: soc: Adds common Marvell OcteonTX header for SMC calls (sdonelli)  [Orabug: 36725601]  
  - octeontx2-af: Update HW workarounds for 96xx C0, 98xx and F95xx B0 chips (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add TIM adjust GTI errata workaround (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: devlink params to configure TIM (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add support for changing vlan tpid (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: rvu: enable mcs fips mailboxes (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: Check the msix offset return value (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: NDC sync op af mbox support (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: Move QMEM allocations from GFP_KERNEL to ATOMIC (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: sync kernel structures with firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Add missing stats (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: mcs: add mailboxes for fips (Ankur Dwivedi)  [Orabug: 36725601]  
  - octeontx2-af: convert dev_dbg to tracepoint in mbox (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Introducing REE block for 98xx (Smadar Fuks)  [Orabug: 36725601]  
  - octeontx2-af: Add support for SPI to SA index translation (Kiran Kumar K)  [Orabug: 36725601]  
  - drivers: sdhci: Add option to configure sdhci timeout (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Add debug option for SD6 controller (Jayanthi Annadurai)  [Orabug: 36725601]  
  - dt-bindings: mmc: sdhci-cadence: SD6 support (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: enable MMC_SDHCI_IO_ACCESSORS support (Jayanthi Annadurai)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: SD6 controller support (Dhananjay Kangude)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Restructure the code (Dhananjay Kangude)  [Orabug: 36725601]  
  - mmc: sdhci-cadence: Rename functions/structures to SD4 specific (Dhananjay Kangude)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Change GPIO level interrupt handler to handle_level_irq (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: extend PIN_SEL to cover cn96xx (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: Configure pin function at probe (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: gpio: thunderx: avoid potential deadlock (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: ACPI support for SPI driver (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Resolve issues detected in static code analysis (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Add fix for hw issue (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: use read after write for MPI_CFG (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: set tritx in config register (Piyush Malgujar)  [Orabug: 36725601]  
  - drivers: spi: octeontx2: Support for octeontx2 spi controller (Piyush Malgujar)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for creating netdev interfaces for SDP VFs (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: add support for CPT second pass (Rakesh Kudurumalla)  [Orabug: 36725601]  
  - octeontx2-af: support overriding aura to zero for second pass (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for ECDH (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: notify VF about ptp event (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: Sending tsc value to the userspace (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: extend npa context reading capability (Ashwin Sekhar T K)  [Orabug: 36725601]  
  - octeontx2-af: allow second pass pkts via default ucast entry (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: suppress kpu profile loading warning (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: use cpt channel mask in flow install path (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: fix arguments passed to XAQ aura deinit (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: Support for FDSA tag (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Code placement for cgx.c (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Gracefully skip the cgx_probe for unmapped devices. (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: link mode mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Limit number of CGX blocks (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: rvu_cgx code placement (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Support for PTP notification to PF (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add programmed macaddr to RVU pfvf (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Show count of dropped packets by DMAC filters (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Skip CGX probe if not connected to NIX (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: RPM extend csr address for T105N (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: new Interface modes support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Do not allow VFs to overwrite PKIND config (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Put CGX LMAC also in Higig2 mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add new CGX_CMDs to set and get PHY modulation type (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Handle physical link state change requests (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: update address of global CGX RX_STATS (Hariprasad Kelam)  [Orabug: 36725601]  
  - crypto: octeontx: enable driver (Harman Kalra)  [Orabug: 36725601]  
  - crypto: octeontx-83: enable crypto device in domain (Harman Kalra)  [Orabug: 36725601]  
  - arm64: Add support for ASID locking (Alex Belits)  [Orabug: 36725601]  
  - kernel/exit.c: Add task cleanup callbacks (Alex Belits)  [Orabug: 36725601]  
  - PCI: octeontx-83: add new quirks (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: add new mbox to support sync cycle on rx path (Satha Rao)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to enable or disable BP on CPT link (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: fix LBK backpressure config (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: set default min and max rx len for CPT link (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for CPT1 in VF driver (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for rsa sign and verify (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for gcm(aes) (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for akcipher rsa (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2: add support for hash algorithms (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: TIM: Set conditional clock always on (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Apply relevant HW issue workarounds for 96xx B0 silicon (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add NIX mbox message to get HW info (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: sync changes missed from tim (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: ignore sso lf count when checking pffunc validity (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM disable lf sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: use clock source to compute start cycle (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: reduce TIM TENNS clock source interval (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: fix incorrect TIM interval array size (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: update clock source offset (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: track timer ring intervals (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Setup edge used for GPIO timing (Michal Mazur)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM slot to lf lookup (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add TIM LF teardown (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: fix TIM block address usage (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: update TIM 10ns clk source min interval (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Verify NPA/SSO/NIX PF_FUNC mapping (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: add workaround for TIM reverse lookup (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add TIM unit support. (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: sync changes missed from sso (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: serialize bar2 alias access (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add read back of AF_BAR2_SEL register (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add support for SSO WQE stashing (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add SSO XAQ AURA access errata workaround (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: timeout while draining SSO queues (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: cycle through SSO queues to drain work (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: use SSO HWS AF invalidate instead of LF invalidate (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix atomic load on NPA LF registers (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: drain XAQ buffers before lf teardown (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix implitit variable array (Stanislaw Kardach)  [Orabug: 36725601]  
  - octeontx2-af: add intradevice FLR handling (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add additional description to irqs (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add ratelimit to limit the asynchronous err messages (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add debugfs support for sso (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: remove support to limit xaq depth (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: allow lower threshold in sso group qos mbox (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: update SSO HWS invalidate mbox definition (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure SSO group mask (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: enable SSO work interrupt periodic counter (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: invalidate GWC before accessing workslot (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: enable getwork prefetching (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: ratelimit digest prints (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure SSO LSW (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fixes for SSO FLR (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: enhance SSO FLR for CN10K (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: add SSO mbox message to release XAQ aura (Shijith Thotton)  [Orabug: 36725601]  
  - octeontx2-af: reset HWS group mask during FLR (Michal Mazur)  [Orabug: 36725601]  
  - octeontx2-af: Fix reading SSOW_LF_GWS_TAG after rvu_poll_reg() (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: Make SSO/SSOW LF teardown less CPU intensive (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - octeontx2-af: add sso error af interrupt handlers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: fix rvu_sso_ggrp_taq_flush (Angela Czubak)  [Orabug: 36725601]  
  - octeontx2-af: drain xaq before reconfiguring aura (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: restore sso hwgrp default thresholds (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: manually dain partially consumed TAQ buffers (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: update SSO HWGRP teardown sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: update SSO GWS teardown sequence (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to get SSO GWS/GGRP stats (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to configure thresholds per HWGRP (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: Add SSO unit support to the AF driver (Radha Mohan Chintakuntla)  [Orabug: 36725601]  
  - irqchip/gicv3-its: Workaround for Marvell errata 35443 for 9xx (Geetha sowjanya)  [Orabug: 36725601]  
  - irqchip/gic-v3: Extend workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 36725601]  
  - irqchip/gic-v3: Add workaround for interrupt loss on IPI (Linu Cherian)  [Orabug: 36725601]  
  - iommu/arm-smmu-v3: Force 32 byte command queue memory reads (Linu Cherian)  [Orabug: 36725601]  
  - octeontx2-pf: Add ucast filter count configurability via devlink. (Sai Krishna)  [Orabug: 36725601]  
  - devlink: add documentation for octeontx2 driver (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: ecc - Move ecc.h to include/crypto/internal (Daniele Alessandrelli)  [Orabug: 36725601]  
  - arm64: cpufeature: Add missing .field_width for GIC system registers (Mark Brown)  [Orabug: 36725601]  
  - octeontx2-af: Fix devlink params (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: fix the double free in rvu_npc_freemem() (Su Hui)  [Orabug: 36725601] {CVE-2024-36030}
  - octeontx2-af: Fix multicast/mirror group lock/unlock issue (Suman Ghosh)  [Orabug: 36725601]  
  - net: flower: fix stack-out-of-bounds in fl_set_key_cfm() (Eric Dumazet)  [Orabug: 36725601]  
  - Watchdog: marvell_gti_wdt: Remove redundant dev_err_probe() for platform_get_irq() (Jinjie Ruan)  [Orabug: 36725601]  
  - watchdog: marvell_gti_wdt: Fix error code in probe() (Dan Carpenter)  [Orabug: 36725601]  
  - crypto: octeontx2 - add missing check for dma_map_single (Chen Ni)  [Orabug: 36725601]  
  - i2c: xgene-slimpro: Fix wrong pointer passed to PTR_ERR() (Wei Yongjun)  [Orabug: 36725601]  
  - octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix transmit scheduler resource leak (Hariprasad Kelam)  [Orabug: 36725601] {CVE-2024-35975}
  - Octeontx2-pf: Free send queue buffers incase of leaf to inner (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: fix FLOW_DIS_IS_FRAGMENT implementation (Asbjørn Sloth Tønnesen)  [Orabug: 36725601]  
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Shijith Thotton)  [Orabug: 36725601]  
  - perf/smmuv3: Fix unused variable warning when CONFIG_OF=n (Will Deacon)  [Orabug: 36725601]  
  - net: octeontx2-pf: mcs: consider MACSEC setting (Randy Dunlap)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Fix NULL pointer dereferences (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Clear stats before freeing resource (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Do not reset PN while updating secy (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: update PN only when update_pn is true (Radu Pirea (NXP OSS))  [Orabug: 36725601]  
  - octeontx2-pf: Fix pfc_alloc_status array overflow (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix linking objects into multiple modules (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Do xdp_do_flush() after redirects. (Sebastian Andrzej Siewior)  [Orabug: 36725601]  
  - crypto: ecc - Export additional helper functions (Daniele Alessandrelli)  [Orabug: 36725601]  
  - arm64: cpufeature: Always specify and use a field width for capabilities (Mark Brown)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for mirror (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add TC flower offload support for TCP flags (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for ICMP type and code (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Tc flower offload support for MPLS (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Harden rule validation. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for SPI field (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flow_dissector: Add IPSEC dissector (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flow_dissector: add support for cfm packets (Zahari Doychev)  [Orabug: 36725601]  
  - flow_dissector: Add support for HSRv0 (Kurt Kanzenbach)  [Orabug: 36725601]  
  - flow_dissector: Add support for HSR (Kurt Kanzenbach)  [Orabug: 36725601]  
  - octeontx2-af: Initialize maps. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Fix a double free issue (Suman Ghosh)  [Orabug: 36725601]  
  - Octeontx2-af: Fix an issue in firmware shared data reserved space (Hariprasad Kelam)  [Orabug: 36725601]  
  - Octeontx2-af: Fetch MAC channel info from firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Send UP messages to VF only when VF is up. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2 (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - By default allocate one CPT LF per CPT VF (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: Fix pause frame configuration (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add new devlink param to configure maximum usable NIX block LFs (Suman Ghosh)  [Orabug: 36725601]  
  - drivers: watchdog: marvell_gti: fix zero pretimeout handling (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for offload tc with skbedit mark action (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Use default max_active works instead of one (Subbaraya Sundeep)  [Orabug: 36725601]  
  - net: octeontx2: Use alloc_ordered_workqueue() to create ordered workqueues (Tejun Heo)  [Orabug: 36725601]  
  - octeontx2-pf: Wait till detach_resources msg is complete (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add new mbox to support multicast/mirror offload (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Fix page pool frag allocation warning (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: update type of prof fields in nix_aw_enq_req (Simon Horman)  [Orabug: 36725601]  
  - octeontx2-pf: Fix page pool cache index corruption. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: fix page_pool creation fail for rings > 32k (Ratheesh Kannoth)  [Orabug: 36725601]  
  - tc: flower: Enable offload support IPSEC SPI field. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - tc: flower: support for SPI (Ratheesh Kannoth)  [Orabug: 36725601]  
  - net: flower: add support for matching cfm fields (Zahari Doychev)  [Orabug: 36725601]  
  - net/sched: flower: Helper function for vlan ethtype checks (Boris Sukholitko)  [Orabug: 36725601]  
  - net/sched: flower: Allow matching on layer 2 miss (Ido Schimmel)  [Orabug: 36725601]  
  - net/sched: flower: Add L2TPv3 filter (Wojciech Drewek)  [Orabug: 36725601]  
  - net/sched: flower: Add PPPoE filter (Wojciech Drewek)  [Orabug: 36725601]  
  - net/sched: flower: Add number of vlan tags filter (Boris Sukholitko)  [Orabug: 36725601]  
  - octeontx2-af: Move validation of ptp pointer before its usage (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: fix PFC configuration (Hariprasad Kelam)  [Orabug: 36725601]  
  - drivers: watchdog: marvell_gti: Program the max_hw_heartbeat_ms (George Cherian)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Generate hash key using ecb(aes) (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Promisc enable/disable through mbox (Ratheesh Kannoth)  [Orabug: 36725601]  
  - crypto: octeontx2 - support setting ctx ilen for inline CPT LF (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-pf: Fix graceful exit during PFC configuration failure (Suman Ghosh)  [Orabug: 36725601]  
  - cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: TC flower offload support for rxqueue mapping (Ratheesh Kannoth)  [Orabug: 36725601]  
  - act_skbedit: skbedit queue mapping for receive queue (Amritha Nambiar)  [Orabug: 36725601]  
  - net/sched: act_skbedit: Add extack messages for offload failure (Ido Schimmel)  [Orabug: 36725601]  
  - octeontx2-af: TC flower offload support for inner VLAN (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Code restructure to handle TC outer VLAN offload (Suman Ghosh)  [Orabug: 36725601]  
  - dt-bindings: watchdog: marvell GTI system watchdog driver (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for page pool (Ratheesh Kannoth)  [Orabug: 36725601]  
  - Watchdog: Add marvell GTI watchdog driver (Bharat Bhushan)  [Orabug: 36725601]  
  - octeontx2-af: Fix promiscuous mode (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Remove the PF_FUNC validation for NPC transmit rules (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2 - add devlink option to set t106 mode (Srujana Challa)  [Orabug: 36725601]  
  - ptp: idt82p33: remove PEROUT_ENABLE_OUTPUT_MASK (Min Li)  [Orabug: 36725601]  
  - ptp: idt82p33: Add PTP_CLK_REQ_EXTTS support (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: return -EBUSY if phase pull-in is in progress (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: fix is_single_shot (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add PTP_CLK_REQ_EXTTS support (Min Li)  [Orabug: 36725601]  
  - ptp: idt82p33: use rsmu driver to access i2c/spi bus (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: repair non-kernel-doc comment (Randy Dunlap)  [Orabug: 36725601]  
  - ptp: clockmatrix: use rsmu driver to access i2c/spi bus (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add support for pll_mode=0 and manual ref switch of WF and WP (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Add support for FW 5.2 (8A34005) (Min Li)  [Orabug: 36725601]  
  - ptp: ptp_clockmatrix: Remove idtcm_enable_tod_sync() (Min Li)  [Orabug: 36725601]  
  - octeontx2-af: Fix mcs sa cam entries size (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Remove xdp queues on program detach (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: ethtool expose qos stats (Hariprasad Kelam)  [Orabug: 36725601]  
  - macsec: Use helper macsec_netdev_priv for offload drivers (Subbaraya Sundeep)  [Orabug: 36725601]  
  - macsec: Don't rely solely on the dst MAC address to identify destination MACsec device (Emeel Hakim)  [Orabug: 36725601]  
  - vlan: Add MACsec offload operations for VLAN interface (Emeel Hakim)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Support VLAN in clear text (Subbaraya Sundeep)  [Orabug: 36725601]  
  - ethtool: add support to set/get completion queue event size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Adjust Tx credits when MCS external bypass is disabled (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - register error interrupts for inline cptlf (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Fix MCS block interrupt (Geetha sowjanya)  [Orabug: 36725601]  
  - irqchip/gic-v3: Detect LPI invalidation MMIO registers (Marc Zyngier)  [Orabug: 36725601]  
  - irqchip/gic-v3: Exposes bit values for GICR_CTLR.{IR, CES} (Marc Zyngier)  [Orabug: 36725601]  
  - octeontx2-af: Enable hardware timestamping for VFs (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fix hash extraction enable configuration (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Restore TC ingress police rules when interface is up (Subbaraya Sundeep)  [Orabug: 36725601]  
  - crypto: octeontx2 - add LF reset on queue disable (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Fix shared counters logic (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Match macsec ethertype along with DMAC (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeonxt2-af: mcs: Fix per port bypass config (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fix issues with NPC field hash extract (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Fix PFC TX scheduler free (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: print error message incase of invalid pf mapping (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Fix depth of cam and mem table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Fix start and end bit for scan config (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Update correct mask to filter IPv4 fragments (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: update CQ context fields (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Offload extended packet number(XPN) feature (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add devlink option to adjust mcam high prio zone entries (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Update/Fix NPC field hash extract feature (Ratheesh Kannoth)  [Orabug: 36725601]  
  - crypto: octeontx2 - remove errata workaround for CN10KB or CN10KA B0 chip. (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add ctx_val workaround (Srujana Challa)  [Orabug: 36725601]  
  - perf/uapi: Define PERF_MEM_SNOOPX_PEER in kernel header file (Ravi Bangoria)  [Orabug: 36725601]  
  - octeontx2-af: cn10kb: fix interrupt csr addresses (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: mcs: Config parser to skip 8B header (Geetha sowjanya)  [Orabug: 36725601]  
  - net: macsec: remove the prepare flag from the MACsec offloading context (Antoine Tenart)  [Orabug: 36725601]  
  - net: atlantic: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 36725601]  
  - net: phy: mscc: macsec: remove checks on the prepare phase (Antoine Tenart)  [Orabug: 36725601]  
  - net: macsec: remove the prepare phase when offloading (Antoine Tenart)  [Orabug: 36725601]  
  - net: atlantic: macsec: make the prepare phase a noop (Antoine Tenart)  [Orabug: 36725601]  
  - net: phy: mscc: macsec: make the prepare phase a noop (Antoine Tenart)  [Orabug: 36725601]  
  - octeontx2-af: CN10KB: Add USGMII LMAC mode (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Enable PTP PPS output support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Use PTP HW timestamp counter atomic update feature (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2: Remove unnecessary ternary operators (Ruan Jinjie)  [Orabug: 36725601]  
  - arm64: mm: Convert to GENERIC_IOREMAP (Kefeng Wang)  [Orabug: 36725601]  
  - mm: ioremap: Use more sensible name in ioremap_prot() (Kefeng Wang)  [Orabug: 36725601]  
  - mailbox: pcc: Use PCC mailbox channel pointer instead of standard (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Add pcc_mbox_chan structure to hold shared memory region info (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Consolidate subspace doorbell register parsing (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Consolidate subspace interrupt information parsing (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Refactor all PCC channel information into a structure (Sudeep Holla)  [Orabug: 36725601]  
  - mailbox: pcc: Fix kernel doc warnings (Sudeep Holla)  [Orabug: 36725601]  
  - of: Add of_get_cpu_hwid() to read hardware ID from CPU nodes (Rob Herring)  [Orabug: 36725601]  
  - genirq: GENERIC_IRQ_EFFECTIVE_AFF_MASK depends on SMP (Samuel Holland)  [Orabug: 36725601]  
  - ACPI: irq: Allow acpi_gsi_to_irq() to have an arch-specific fallback (Marc Zyngier)  [Orabug: 36725601]  
  - ACPI: irq: Fix some kernel-doc issues (Xiongfeng Wang)  [Orabug: 36725601]  
  - APCI: irq: Add support for multiple GSI domains (Marc Zyngier)  [Orabug: 36725601]  
  - octeontx2-af: Add validation for lmac type (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Fix devlink unregister (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Free pending and dropped SQEs (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2: Detect the mbox up or down message via register (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Install TC filter rules in hardware based on priority (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Increase the size of dmac filter flows (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Allow both ntuple and TC features on the interface (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Prepare for QOS offload (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: htb offload support for Round Robin scheduling (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: implement transmit schedular allocation algorithm (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for HTB offload (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Fix resource leakage in VF driver unbind (Hariprasad Kelam)  [Orabug: 36725601] {CVE-2023-52905}
  - octeontx2-pf: Refactor schedular queue alloc/free calls (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: qos send queues management (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Fix SQE threshold checking (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Rename tot_tx_queues to non_qos_queues (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add filter profiles in hardware to extract packet headers (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix a resource leak in the probe and remove functions (Christophe JAILLET)  [Orabug: 36725601]  
  - spi: cadence: Ensure data lines set to low during dummy-cycle period (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Fix busy cycles calculation (Witold Sadowski)  [Orabug: 36725601]  
  - spi: cadence: Remove redundant dev_err call (Shang XiaoJing)  [Orabug: 36725601]  
  - spi: cadence: fix platform_get_irq.cocci warning (Yihao Han)  [Orabug: 36725601]  
  - spi: cadence: Add of_node_put() before return (Wan Jiabing)  [Orabug: 36725601]  
  - spi: cadence: fix static checker warning (Parshuram Thombare)  [Orabug: 36725601]  
  - spi: cadence: Fix spelling mistake "nunber" -> "number" (Colin Ian King)  [Orabug: 36725601]  
  - spi: cadence: add support for Cadence XSPI controller (Parshuram Thombare)  [Orabug: 36725601]  
  - spi: cadence: add dt-bindings documentation for Cadence XSPI controller (Parshuram Thombare)  [Orabug: 36725601]  
  - Documentation: arm64: Document PMU counters access from userspace (Raphael Gault)  [Orabug: 36725601]  
  - octeontx2-af: Add missing mcs flr handler call (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: Fix mcs stats register address (Geetha sowjanya)  [Orabug: 36725601]  
  - i2c: octeon: Handle watchdog timeout (Suneel Garapati)  [Orabug: 36725601]  
  - i2c: octeon: Add platform prefix to macros (Piyush Malgujar)  [Orabug: 36725601]  
  - i2c: thunderx: Support for High speed mode (Suneel Garapati)  [Orabug: 36725601]  
  - i2c: thunderx: Clock divisor logic changes (Suneel Garapati)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Set NIX DWRR MTU for CN10KB silicon (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Increase outstanding LMTST transactions (Pavan Nikhilesh)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix copy and paste bug in mcs_bbe_intr_handler() (Dan Carpenter)  [Orabug: 36725601]  
  - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Add support to filter packet based on IP fragment (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-af: Don't treat lack of CGX interfaces as error (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-pf: Reset MAC stats during probe (Sai Krishna)  [Orabug: 36725601]  
  - octeontx2-af: Reset MAC features in FLR (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Add FEC stats for RPM/RPM_USX block (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: cn10kb: Add RPM_USX MAC support (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Support variable number of lmacs (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - net: thunderx: remove null check after call container_of() (Haowen Bai)  [Orabug: 36725601]  
  - octeontx2-af: Removed unnecessary debug messages. (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-af: Enable LBK links only when switch mode is on. (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Add NIX Errata workaround on CN10K silicon (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: add option to toggle DROP_RE enable in rx cfg (Nithin Dabilpuram)  [Orabug: 36725601]  
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add support for AF to CPT PF uplink mbox (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - add SGv2 support for CN10KB or CN10KA B0 (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - hardware configuration for inline IPsec (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Fix objects shared between several modules (Alexander Lobakin)  [Orabug: 36725601]  
  - crypto: octeontx2 - remove CPT block reset (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - increase CPT HW instruction queue length (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Remove the unneeded result variable (ye xingchen)  [Orabug: 36725601]  
  - crypto: octeontx2 - simplify the return expression of otx2_cpt_aead_cbc_aes_sha_setkey() (Minghao Chi)  [Orabug: 36725601]  
  - crypto: octeontx2 - use swap() to make code cleaner (chiminghao)  [Orabug: 36725601]  
  - crypto: drivers - move from strlcpy with unused retval to strscpy (Wolfram Sang)  [Orabug: 36725601]  
  - crypto: octeontx2 - fix potential null pointer access (Shijith Thotton)  [Orabug: 36725601]  
  - crypto: octeontx2 - add firmware version in devlink info (Shijith Thotton)  [Orabug: 36725601]  
  - crypto: octeontx2 - disable DMA black hole on an DMA fault (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - CN10K CPT to RNM workaround (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - Use swap() instead of swap_engines() (Jiapeng Chong)  [Orabug: 36725601]  
  - crypto: octeontx2 - Avoid stack variable overflow (Kees Cook)  [Orabug: 36725601]  
  - crypto: octeontx2 - out of bounds access in otx2_cpt_dl_custom_egrp_delete() (Dan Carpenter)  [Orabug: 36725601]  
  - crypto: octeontx2 - add apis for custom engine groups (Srujana Challa)  [Orabug: 36725601]  
  - crypto: octeontx2 - fix missing unlock (Yang Yingliang)  [Orabug: 36725601]  
  - crypto: octeontx2 - add synchronization between mailbox accesses (Harman Kalra)  [Orabug: 36725601]  
  - crypto: octeontx2 - parameters for custom engine groups (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: update CPT inbound inline IPsec config mailbox (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: restore rxc conf after teardown sequence (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: add mbox to return CPT_AF_FLT_INT info (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: optimize cpt pf identification (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: modify FLR sequence for CPT (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: add mbox for CPT LF reset (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: recover CPT engine when it gets fault (Srujana Challa)  [Orabug: 36725601]  
  - arm64: Declare non global symbols as static (Linu Cherian)  [Orabug: 36725601]  
  - arm64: Add cavium_erratum_23154_cpus missing sentinel (Marc Zyngier)  [Orabug: 36725601]  
  - irqchip/gic-v3: Workaround Marvell erratum 38545 when reading IAR (Linu Cherian)  [Orabug: 36725601]  
  - arm64: re-enable CAVIUM_ERRATUM_23154, disable CAVIUM_ERRATUM_27456 (Dave Kleikamp)  [Orabug: 36725601]  
  - dt-bindings: perf: marvell: cn10k ddr performance monitor (Bharat Bhushan)  [Orabug: 36725601]  
  - hwrng: cavium - fix NULL but dereferenced coccicheck error (Wan Jiabing)  [Orabug: 36725601]  
  - perf/smmuv3: Add devicetree support (Jean-Philippe Brucker)  [Orabug: 36725601]  
  - ethernet: marvell: octeontx2 Fix resource not freed after malloc (Manank Patel)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: fix possible memory leak in otx2_probe() (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Fix error return code in mcs_register_interrupts() (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: fix missing unlock in some error paths (Yang Yingliang)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: remove unneeded semicolon (Yang Li)  [Orabug: 36725601]  
  - octeontx2-pf: mcs: Introduce MACSEC hardware offloading (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Add debugfs support (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Handle MCS block interrupts (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Support for stats collection (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Install a default TCAM for normal traffic (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Manage the MCS block hardware resources (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: mcs: Add mailboxes for port related operations (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: Introduce driver for macsec block. (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-pf: Fix unused variable build error (Ren Zhijie)  [Orabug: 36725601]  
  - octeontx2-af: Initialize PTP_SEC_ROLLOVER register properly (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add PTP PPS Errata workaround on CN10K silicon (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for ptp 1-step mode on CN10K silicon (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: return correct ptp timestamp for CN10K silicon (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: Add egress PFC support (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Reduce minimum mtu size to 60 (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Fixes static warnings (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Limit link bringup time at firmware (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: returning uninitialized variable (Sebin Sebastian)  [Orabug: 36725601]  
  - octeontx2-af: Remove duplicate include (Jiapeng Chong)  [Orabug: 36725601]  
  - octeontx2-af: Skip CGX/RPM probe incase of zero lmac count (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Enable Exact match flag in kex profile (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for exact match table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Invoke exact match functions if supported (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Wrapper functions for MAC addr add/del/update/reset (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2: Modify mbox request and response structures (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Debugsfs support for exact match. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Drop rules for NPC MCAM (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: FLR handler for exact match table. (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: devlink configuration support (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Exact match scan from kex profile (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Exact match support (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Use hashed field in MCAM key (Ratheesh Kannoth)  [Orabug: 36725601]  
  - octeontx2-af: Don't reset previous pfc config (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: fix operand size in bitwise operation (Shijith Thotton)  [Orabug: 36725601]  
  - marvell/octeontx2/af: fix repeated words in comments (Jilin Yuan)  [Orabug: 36725601]  
  - octeontx2-vf: Add support for adaptive interrupt coalescing (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Add support for adaptive interrupt coalescing (Suman Ghosh)  [Orabug: 36725601]  
  - octeontx2-pf: Vary completion queue event size (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Change receive buffer size using ethtool (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: fix error return of allocations (Niels Dossche)  [Orabug: 36725601]  
  - octeontx2-pf: replace bitmap_weight with bitmap_empty where appropriate (Yury Norov)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: add workaround for ptp errata (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-pf: cn10k: add support for new ptp timestamp format (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: fix array bound error (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-pf: Add TC feature for VFs (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-pf: PFC config support with DCBx (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Flow control resource management (Hariprasad Kelam)  [Orabug: 36725601]  
  - octeontx2-af: Priority flow control configuration support (Sunil Kumar Kori)  [Orabug: 36725601]  
  - octeontx2-af: Fix interrupt name strings (Sunil Goutham)  [Orabug: 36725601]  
  - octeontx2-nicvf: Free VF PTP resources. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: don't corrupt user memory (Dan Carpenter)  [Orabug: 36725601]  
  - octeontx2-nicvf: fix ioctl callback (Arnd Bergmann)  [Orabug: 36725601]  
  - octeontx2-af: use swap() to make code cleaner (Yang Guang)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Add channel and channel mask. (Rakesh Babu)  [Orabug: 36725601]  
  - octeontx2-af: cn10k: debugfs for dumping LMTST map table (Harman Kalra)  [Orabug: 36725601]  
  - octeontx2-af: debugfs: Minor changes. (Rakesh Babu Saladi)  [Orabug: 36725601]  
  - octeontx2-af: Increase number of reserved entries in KPU (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-nic: fix mixed module build (Arnd Bergmann)  [Orabug: 36725601]  
  - octeontx2-af: Add support to flush full CPT CTX cache (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-af: Perform cpt lf teardown in non FLR path (Nithin Dabilpuram)  [Orabug: 36725601]  
  - octeontx2-af: Enable CPT HW interrupts (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: Simplify the receive buffer size calculation (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2-af: Remove redundant initialization of variable pin (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-pf: Add XDP support to netdev PF (Geetha sowjanya)  [Orabug: 36725601]  
  - octeontx2-nicvf: Add PTP hardware clock support to NIX VF (Naveen Mamindlapalli)  [Orabug: 36725601]  
  - octeontx2-af: Add external ptp input clock (Yi Guo)  [Orabug: 36725601]  
  - octeontx2-af: Use ptp input clock info from firmware data (Subbaraya Sundeep)  [Orabug: 36725601]  
  - octeontx2: Move devlink registration to be last devlink command (Leon Romanovsky)  [Orabug: 36725601]  
  - octeontx2-af: Limit KPU parsing for GTPU packets (Kiran Kumar K)  [Orabug: 36725601]  
  - octeontx2-af: Remove redundant initialization of variable blkaddr (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-af: Fix uninitialized variable val (Colin Ian King)  [Orabug: 36725601]  
  - octeontx2-af: Hardware configuration for inline IPsec (Srujana Challa)  [Orabug: 36725601]  
  - octeontx2-pf: CN10K: Hide RPM stats over ethtool (Hariprasad Kelam)  [Orabug: 36725601]  
  - uek-rpm: Add skx_edac_common.ko to core-x86_64.list (Sherry Yang)  [Orabug: 37033806]  
  - EDAC, i10nm: make skx_common.o a separate module (Arnd Bergmann)  [Orabug: 37033806]  
  - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (David Fernandez Gonzalez)  [Orabug: 37037203] {CVE-2024-46738}
  - uek-rpm: Enable CONFIG_BLK_DEV_DRBD (Vijayendra Suman)  [Orabug: 36930383]  
  - crypto: qat - specify firmware files for 402xx (Giovanni Cabiddu)  [Orabug: 37041628]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-301.163.3.el9uek]
changelog:
  - uek-rpm: T93: enable xxhash crypto module for fips (Dave Kleikamp)  [Orabug: 37075386]  
  - mm: ioremap: Add ioremap/iounmap_allowed() (Kefeng Wang)  [Orabug: 37061929]  
  - netfilter: nf_tables: use timestamp to check for set element timeout (Pablo Neira Ayuso)  [Orabug: 36630431]  {CVE-2024-27397} 
  - uek-rpm: Enable CONFIG_DEVICE_PRIVATE for the 64K page kernel (Dave Kleikamp)  [Orabug: 36670372]  
  - uek-rpm: Config changes to support Grace Hopper (Dave Kleikamp)  [Orabug: 36670372]  
  - arm64: Allow 512K irqs (Dave Kleikamp)  [Orabug: 36670372]  
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Matthew R. Ochs)  [Orabug: 36670372] {CVE-2024-36477}
  - firmware: smccc: Fix use of uninitialised results structure (Punit Agrawal)  [Orabug: 36670372]  
  - i2c: smbus: Check for parent device before dereference (Andy Shevchenko)  [Orabug: 36670372]  
  - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (Tom Rix)  [Orabug: 36670372]  
  - dt-bindings: gpio: Remove FSI domain ports on Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - i2c: tegra: Do not mark ACPI devices as irq safe (Breno Leitao)  [Orabug: 36670372] {CVE-2024-45029}
  - tpm_tis_spi: Add hardware wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Enable TPM wait polling (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: Add TPM HW flow flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: set half duplex flag (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix iterator outside loop (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix validate combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - ACPI/IORT: Update SMMUv3 DeviceID support (Robin Murphy)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix duplicate resource error (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Don't initialise DMA if not supported (Jon Hunter)  [Orabug: 36670372]  
  - spi: tegra210-quad: Fix combined sequence (Krishna Yarlagadda)  [Orabug: 36670372]  
  - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (Shanker Donthineni)  [Orabug: 36670372]  
  - irqchip/gicv3: Handle resource request failure consistently (Robin Murphy)  [Orabug: 36670372]  
  - irqchip/gic-v3: Claim iomem resources (Robin Murphy)  [Orabug: 36670372]  
  - i2c: tegra: Fix PEC support for SMBUS block read (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Set ACPI node as primary fwnode (Akhil R)  [Orabug: 36670372]  
  - arm64: tegra: Enable Tegra SPI & QSPI in deconfig (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: Multi-cs support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: tegra: Add SMBus block read function (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use device_reset method (Krishna Yarlagadda)  [Orabug: 36670372]  
  - i2c: smbus: Use device_*() functions instead of of_*() (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: add acpi support (Krishna Yarlagadda)  [Orabug: 36670372]  
  - docs: firmware-guide: ACPI: Add named interrupt doc (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_irq_get_byname (Akhil R)  [Orabug: 36670372]  
  - device property: Add fwnode_iomap() (Anand Ashok Dumbre)  [Orabug: 36670372]  
  - spi: tegra210-quad: combined sequence mode (Krishna Yarlagadda)  [Orabug: 36670372]  
  - spi: tegra210-quad: add new chips to compatible (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add IRQ per bank for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - spi: tegra210-quad: use devm call for cdata memory (Krishna Yarlagadda)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra241 (Akhil R)  [Orabug: 36670372]  
  - gpio: tegra186: Add support for Tegra234 (Prathamesh Shete)  [Orabug: 36670372]  
  - gpio: tegra186: Support multiple interrupts per bank (Thierry Reding)  [Orabug: 36670372]  
  - gpio: tegra186: Force one interrupt per bank (Thierry Reding)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra241 support (Akhil R)  [Orabug: 36670372]  
  - dt-bindings: gpio: Add Tegra234 support (Prathamesh Shete)  [Orabug: 36670372]  
  - dt-bindings: gpio: tegra186: Convert to json-schema (Thierry Reding)  [Orabug: 36670372]  
  - i2c: tegra: use i2c_timings for bus clock freq (Akhil R)  [Orabug: 36670372]  
  - i2c: tegra: Add the ACPI support (Akhil R)  [Orabug: 36670372]  
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)  [Orabug: 36955683]  
  - Revert "crypto: ecc - Move ecc.h to include/crypto/internal" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecc - Export additional functions from crypto/ecc.c" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA signature generation support" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: add ECDSA test vectors from RFC 6979" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: make RFC6979 test vectors generic to all drivers" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa signature ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: ecdsa - export ecdsa privkey ASN.1 parser" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for ECDSA P192, P256 and P384" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: add support for DH" (Dave Kleikamp)  [Orabug: 37062541]  
  - Revert "crypto: octeontx2: fix opcode incase of SGv2" (Dave Kleikamp)  [Orabug: 37062541]  
  - i40e: Change user notification of non-SFP module in i40e_get_module_info() (Andrii Staikov)  [Orabug: 37069948]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.4.el9uek]
changelog:
  - pds_core: Prevent race issues involving the adminq (Brett Creeley)  [Orabug: 36529980]  {CVE-2024-26623} 
  - netdevsim: avoid potential loop in nsim_dev_trap_report_work() (Eric Dumazet)  [Orabug: 36530387]  {CVE-2024-26681} 
  - devlink: fix possible use-after-free and memory leaks in devlink_init() (Vasiliy Kovalev)  [Orabug: 36530666]  {CVE-2024-26734} 
  - x86/fpu: Keep xfd_state in sync with MSR_IA32_XFD (Adamos Ttofari)  [Orabug: 36642225]  {CVE-2024-35801} 
  - net/mlx5e: Fix mlx5e_priv_init() cleanup flow (Carolina Jubran)  [Orabug: 36643379]  {CVE-2024-35959} 
  - uek-rpm: correctly set DEFAULTKERNEL after removal of uek kernels (Rhythm Mahajan)  [Orabug: 36709294]  
  - RDMA: Flip the meaning of "-1" and "0" in ibv_create_cq / ib_create_cq (Gerd Rausch)  [Orabug: 36822216]  
  - Revert "rds: ib: fix non-determinism when comp_vector is zero" (Gerd Rausch)  [Orabug: 36822216]  
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Aleksandr Mishin)  [Orabug: 36835804]  {CVE-2024-40940} 
  - xfrm: Remove documentation WARN_ON to limit return values for offloaded SA (Patrisious Haddad)  [Orabug: 37080855]  
  - perf/x86/amd: Fix crash due to race between amd_pmu_enable_all, perf NMI and throttling (Ravi Bangoria)  [Orabug: 37088496]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-301.163.5.el9uek]
changelog:
  - netfilter: iptables: Fix null-ptr-deref in iptable_nat_table_init(). (Kuniyuki Iwashima)  [Orabug: 36964003]  {CVE-2024-42270} 
  - netfilter: iptables: Fix potential null-ptr-deref in ip6table_nat_table_init(). (Kuniyuki Iwashima)  [Orabug: 36964001]  {CVE-2024-42269} 
  - Revert "arm64: Allow 512K irqs" (Harshit Mogalapalli)  [Orabug: 37117987]


author: Brian Maly <brian.maly@oracle.com> [5.15.0-302.163.1.el9uek]
changelog:
  - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req() (Haoran Zhang)  [Orabug: 37035557] {CVE-2024-49863}
  - kpcimgr: Add dynamic memory region allocation feature (Joe Dobosenski)  [Orabug: 36983477]


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.163.2.el9uek]
changelog:
  - uek: kabi: Introduce APIs to hide/fake inclusion of headers (Saeed Mirzamohammadi)  [Orabug: 37144803]  
  - uek-rpm: Enable config for Mediatek mt7915E wireless driver (Saeed Mirzamohammadi)  [Orabug: 37123534]  
  - uek-rpm: Update the x86 kABI files for new symbol (Yifei Liu)  [Orabug: 37108651]  
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Sean Christopherson)  [Orabug: 36809298]  {CVE-2024-39483} 
  - net: bridge: xmit: make sure we have at least eth header len bytes (Nikolay Aleksandrov)  [Orabug: 36753371]  {CVE-2024-38538} 
  - net: add pskb_may_pull_reason() helper (Eric Dumazet)  [Orabug: 36753371]  {CVE-2024-38538}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.163.3.el9uek]
changelog:
  - uek-rpm: T93: Enable CONFIG_EFI_GENERIC_STUB_INITRD_CMDLINE_LOADER (Thomas Tai)  [Orabug: 37174880]  
  - mm: avoid leaving partial pfn mappings around in error case (Linus Torvalds)  [Orabug: 37174198]  {CVE-2024-47674} 
  - rds/ib: Count memory consumed by rds_page_frag (Hans Westgaard Ry)  [Orabug: 37162157]  
  - uek-rpm: Set CONFIG_CRYPTO_FIPS_NAME properly in embedded kernels (Dave Kleikamp)  [Orabug: 37160327]  
  - fs/dcache: allow fractional values in fs.negative-dentry-limit (Gautham Ananthakrishna)  [Orabug: 37156522]  
  - Revert "Documentation/admin-guide/acpi: Move information out of shell script comments" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Move partition_create_desc() work to a helper" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic: Collect GIC_IRQ_TYPE definitions into one place" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic, gic-v3: Translate fwspec for DT and ACPI systems in the same way" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Provide a helper to walk processor containers" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to build a cpumask from a cpu_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Print DT partitions in the same way as APCI" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: Build PPI partitions on ACPI systems" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "irqchip/gic-v3: select and translate the partition domain" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / irq: Add acpi_register_partitioned_percpu_gsi()" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Find PPTT cache level by ID" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a processor container" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "ACPI / PPTT: Add a helper to fill a cpumask from a cache_id" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "drivers: base: cacheinfo: Add helper to find the cache size from cpu+level" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Allow for >32-bit cache 'id'" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Set cache 'id' based on DT data" (Dave Kleikamp)  [Orabug: 37144820]  
  - Revert "cacheinfo: Expose the code to generate a cache-id from a device_node" (Dave Kleikamp)  [Orabug: 37144820]  
  - KVM: x86: Propagate the AMD Automatic IBRS feature to the guest (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the SMM_CTL MSR not present feature (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the Null Selector Clears Base feature (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Move X86_FEATURE_LFENCE_RDTSC to its native leaf (Kim Phillips)  [Orabug: 37126702]  
  - x86/cpu, kvm: Add the NO_NESTED_DATA_BP feature (Kim Phillips)  [Orabug: 37126702]  
  - KVM: x86: Move open-coded CPUID leaf 0x80000021 EAX bit propagation code (Kim Phillips)  [Orabug: 37126702]  
  - KVM: x86: Advertise that the SMM_CTL MSR is not supported (Jim Mattson)  [Orabug: 37126702]  
  - KVM: x86: synthesize CPUID leaf 0x80000021h if useful (Paolo Bonzini)  [Orabug: 37126702]  
  - KVM: x86: skip host CPUID call for hypervisor leaves (Paolo Bonzini)  [Orabug: 37126702]  
  - KVM: x86: add support for CPUID leaf 0x80000021 (Paolo Bonzini)  [Orabug: 37126702]  
  - amd_hsmp: Update PwrEfficiencyModeSelection message (Suma Hegde)  [Orabug: 37123833]  
  - amd_hsmp: Add support for new error codes returned from firmware (Suma Hegde)  [Orabug: 37123833]  
  - amd_hsmp: Add new HSMP messages of protocol version 7 (Suma Hegde)  [Orabug: 37123833]  
  - IB/mlx5: Fix mlx5_ib_get_vector_irqn() after dynamic IRQ allocation change (Gerd Rausch)  [Orabug: 37069671]  
  - arm64: kdump: increase crashkernel reservation size for crashkernel=auto (Brian Maly)  [Orabug: 36949800]  
  - rds: Support rds-pings with payload (Håkon Bugge)  [Orabug: 36847470]  
  - mm/hugetlb: fix DEBUG_LOCKS_WARN_ON(1) when dissolve_free_hugetlb_folio() (Miaohe Lin)  [Orabug: 36683092]  {CVE-2024-36028} 
  - mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled (Miaohe Lin)  [Orabug: 36597930]  {CVE-2024-26987}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.4.el9uek]
changelog:
  - LTS version: v5.15.167 (Vijayendra Suman)   
  - udp: fix receiving fraglist GSO packets (Felix Fietkau)   
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt) [Orabug: 36993003] {CVE-2024-43892}
  - btrfs: fix race between direct IO write and fsync when using same fd (Filipe Manana) [Orabug: 37195092] {CVE-2024-46734}
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)   
  - x86/mm: Fix PTI for i386 some more (Thomas Gleixner)   
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Willem de Bruijn) [Orabug: 37195028] {CVE-2024-43897}
  - gso: fix dodgy bit handling for GSO_UDP_L4 (Yan Zhai)   
  - net: change maximum number of UDP segments to 128 (Yuri Benditovich)   
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Willem de Bruijn)   
  - gpio: rockchip: fix OF node leak in probe() (Krzysztof Kozlowski)   
  - drm/i915/fence: Mark debug_fence_free() with __maybe_unused (Andy Shevchenko)   
  - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (Andy Shevchenko)   
  - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (Matteo Martelli)   
  - nvmet-tcp: fix kernel crash if commands allocation fails (Maurizio Lombardi) [Orabug: 37074464] {CVE-2024-46737}
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Jonathan Cameron) [Orabug: 37116411] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (James Morse)   
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Jonathan Cameron)   
  - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (Jonathan Cameron)   
  - workqueue: Improve scalability of workqueue watchdog touch (Nicholas Piggin) [Orabug: 37116487] {CVE-2024-46839}
  - workqueue: wq_watchdog_touch is always called with valid CPU (Nicholas Piggin)   
  - nilfs2: protect references to superblock parameters exposed in sysfs (Ryusuke Konishi) [Orabug: 37074676] {CVE-2024-46780}
  - nilfs2: replace snprintf in show functions with sysfs_emit (Qing Wang)   
  - ksmbd: Unlock on in ksmbd_tcp_set_interfaces() (Dan Carpenter)   
  - ksmbd: unset the binding mark of a reused connection (Namjae Jeon) [Orabug: 37074716] {CVE-2024-46795}
  - perf/aux: Fix AUX buffer serialization (Peter Zijlstra) [Orabug: 37070802] {CVE-2024-46713}
  - uprobes: Use kzalloc to allocate xol area (Sven Schnelle)   
  - clocksource/drivers/timer-of: Remove percpu irq related code (Daniel Lezcano)   
  - clocksource/drivers/imx-tpm: Fix next event not taking effect sometime (Jacky Bai)   
  - clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX (Jacky Bai)   
  - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (Naman Jain)   
  - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (Saurabh Sengar) [Orabug: 37074472] {CVE-2024-46739}
  - nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc (Geert Uytterhoeven)   
  - binder: fix UAF caused by offsets overwrite (Carlos Llamas) [Orabug: 37074476] {CVE-2024-46740}
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Faisal Hassan)   
  - iio: adc: ad7124: fix chip ID mismatch (Dumitru Ceclan)   
  - iio: adc: ad7124: fix config comparison (Dumitru Ceclan)   
  - iio: fix scale application in iio_convert_raw_to_processed_unlocked (Matteo Martelli)   
  - iio: buffer-dmaengine: fix releasing dma channel on error (David Lechner)   
  - staging: iio: frequency: ad9834: Validate frequency parameter value (Aleksandr Mishin) [Orabug: 37159727] {CVE-2024-47663}
  - cifs: Check the lease context if we actually got a lease (Ronnie Sahlberg)   
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)   
  - ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)   
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang) [Orabug: 37116454] {CVE-2024-46832}
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet) [Orabug: 37159756] {CVE-2024-47668}
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler) [Orabug: 37074487] {CVE-2024-46743}
  - Squashfs: sanity check symbolic link size (Phillip Lougher) [Orabug: 37074494] {CVE-2024-46744}
  - usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)   
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov) [Orabug: 37074502] {CVE-2024-46745}
  - HID: amd_sfh: free driver_data after destroying hid device (Olivier Sobrie) [Orabug: 37074507] {CVE-2024-46746}
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez) [Orabug: 37074512] {CVE-2024-46747}
  - s390/vmlinux.lds.S: Move ro_after_init section behind rodata section (Heiko Carstens)   
  - btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry() (David Sterba)   
  - kselftests: dmabuf-heaps: Ensure the driver name is null-terminated (Zenghui Yu)   
  - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (Jarkko Nikula) [Orabug: 37159737] {CVE-2024-47665}
  - net: dpaa: avoid on-stack arrays of NR_CPUS elements (Vladimir Oltean)   
  - PCI: Add missing bridge lock to pci_bus_lock() (Dan Williams) [Orabug: 37074530] {CVE-2024-46750}
  - riscv: set trap vector earlier (yang.zhang)   
  - btrfs: replace BUG_ON() with error handling at update_ref_for_cow() (Filipe Manana) [Orabug: 37074542] {CVE-2024-46752}
  - btrfs: clean up our handling of refs == 0 in snapshot delete (Josef Bacik) [Orabug: 37116493] {CVE-2024-46840}
  - btrfs: replace BUG_ON with ASSERT in walk_down_proc() (Josef Bacik)   
  - fs/ntfs3: Check more cases when directory is corrupted (Konstantin Komarov)   
  - smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu() (Zqiang)   
  - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (Sascha Hauer) [Orabug: 37074560] {CVE-2024-46755}
  - dma-mapping: benchmark: Don't starve others when doing the test (Yicong Yang)   
  - ext4: fix possible tid_t sequence overflows (Luis Henriques (SUSE))   
  - drm/amdgpu: Set no_hw_access when VF request full GPU fails (Yifan Zha)   
  - libbpf: Add NULL checks to bpf_object__{prev_map,next_map} (Andreas Ziegler)   
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074565] {CVE-2024-46756}
  - hwmon: (nct6775-core) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074570] {CVE-2024-46757}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074578] {CVE-2024-46758}
  - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (Guenter Roeck) [Orabug: 37074583] {CVE-2024-46759}
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (Krishna Kumar) [Orabug: 37074594] {CVE-2024-46761}
  - devres: Initialize an uninitialized struct member (Zijun Hu)   
  - um: line: always fill *error_out in setup_one_line() (Johannes Berg) [Orabug: 37116517] {CVE-2024-46844}
  - cgroup: Protect css->cgroup write under css_set_lock (Waiman Long)   
  - iommu/vt-d: Handle volatile descriptor status read (Jacob Pan)   
  - dm init: Handle minors larger than 255 (Benjamin Marzinski)   
  - ASoC: topology: Properly initialize soc_enum values (Amadeusz Sławiński)   
  - net: dsa: vsc73xx: fix possible subblocks range of CAPT block (Pawel Dembicki)   
  - net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN (Jonas Gorski)   
  - fou: Fix null-ptr-deref in GRO. (Kuniyuki Iwashima) [Orabug: 37074606] {CVE-2024-46763}
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_complete handlers (Eric Dumazet)   
  - gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers (Eric Dumazet)   
  - bareudp: Fix device stats updates. (Guillaume Nault)   
  - usbnet: modern method to get random MAC (Oliver Neukum)   
  - net: usb: don't write directly to netdev->dev_addr (Jakub Kicinski)   
  - ice: check ICE_VSI_DOWN under rtnl_lock when preparing for reset (Larysa Zaremba)   
  - igc: Unlock on error in igc_io_resume() (Dan Carpenter)   
  - tcp_bpf: fix return value of tcp_bpf_sendmsg() (Cong Wang) [Orabug: 37074692] {CVE-2024-46783}
  - platform/x86: dell-smbios: Fix error path in dell_smbios_init() (Aleksandr Mishin)   
  - igb: Fix not clearing TimeSync interrupts for 82580 (Daiwei Li)   
  - can: m_can: Release irq on error in m_can_open (Simon Horman)   
  - can: bcm: Remove proc entry when dev is unregistered. (Kuniyuki Iwashima) [Orabug: 37074624] {CVE-2024-46771}
  - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (Marek Olšák)   
  - pcmcia: Use resource_size function on resource object (Jules Irenge)   
  - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (Chen Ni)   
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Kishon Vijay Abraham I) [Orabug: 37159749] {CVE-2024-47667}
  - media: vivid: don't set HDMI TX controls if there are no HDMI outputs (Hans Verkuil)   
  - drm/amd/display: Check HDCP returned status (Alex Hung)   
  - usb: uas: set host status byte on data completion error (Shantanu Goel)   
  - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (Arend van Spriel)   
  - leds: spi-byte: Call of_node_put() on error path (Andy Shevchenko)   
  - media: vivid: fix wrong sizeimage value for mplane (Hans Verkuil)   
  - udf: Avoid excessive partition lengths (Jan Kara) [Orabug: 37074664] {CVE-2024-46777}
  - netfilter: nf_conncount: fix wrong variable type (Yunjian Wang)   
  - iommu: sun50i: clear bypass register (Jernej Skrabec)   
  - af_unix: Remove put_pid()/put_cred() in copy_peercred(). (Kuniyuki Iwashima)   
  - irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1 (Pali Rohár)   
  - smack: unix sockets: fix accept()ed socket label (Konstantin Andreev)   
  - ALSA: hda: Add input value sanity checks to HDMI channel map controls (Takashi Iwai)   
  - mptcp: pm: send ACK on an active subflow (Matthieu Baerts (NGI0))   
  - mptcp: pr_debug: add missing 
   at the end (Matthieu Baerts (NGI0))   
  - mptcp: pm: skip connecting to already established sf (Matthieu Baerts (NGI0))   
  - mptcp: pm: do not remove already closed subflows (Matthieu Baerts (NGI0))   
  - mptcp: pm: ADD_ADDR 0 is not a new address (Matthieu Baerts (NGI0))   
  - mptcp: close subflow when receiving TCP+FIN (Matthieu Baerts (NGI0))   
  - mptcp: avoid duplicated SUB_CLOSED events (Matthieu Baerts (NGI0))   
  - mptcp: pm: avoid possible UaF when selecting endp (Matthieu Baerts (NGI0))   
  - mptcp: constify a bunch of of helpers (Paolo Abeni)   
  - mptcp: pm: fullmesh: select the right ID later (Matthieu Baerts (NGI0))   
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Matthieu Baerts (NGI0))   
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Matthieu Baerts (NGI0))   
  - mptcp: pm: re-using ID of unused flushed subflows (Matthieu Baerts (NGI0))   
  - nilfs2: fix state management in error path of log writing function (Ryusuke Konishi) [Orabug: 37159764] {CVE-2024-47669}
  - nilfs2: fix missing cleanup on rollforward recovery error (Ryusuke Konishi) [Orabug: 37074683] {CVE-2024-46781}
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (Toke Høiland-Jørgensen) [Orabug: 37116442] {CVE-2024-46828}
  - ila: call nf_unregister_net_hooks() sooner (Eric Dumazet) [Orabug: 37074688] {CVE-2024-46782}
  - tracing: Avoid possible softlockup in tracing_iter_reset() (Zheng Yejian)   
  - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (Simon Arlott) [Orabug: 37074711] {CVE-2024-46791}
  - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (Satya Priya Kakitapalli)   
  - clk: qcom: clk-alpha-pll: Fix the pll post div mask (Satya Priya Kakitapalli)   
  - fuse: use unsigned type for getxattr/listxattr size truncation (Jann Horn)   
  - fuse: update stats for pages in dropped aux writeback list (Joanne Koong)   
  - mmc: cqhci: Fix checking of CQHCI_HALT state (Seunghwan Baek)   
  - mmc: sdhci-of-aspeed: fix module autoloading (Liao Chen)   
  - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (Sam Protsenko)   
  - Bluetooth: MGMT: Ignore keys being loaded with invalid type (Luiz Augusto von Dentz)   
  - Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (Luiz Augusto von Dentz)   
  - nvme-pci: Add sleep quirk for Samsung 990 Evo (Georg Gottleuber)   
  - rtmutex: Drop rt_mutex::wait_lock before scheduling (Roland Xu) [Orabug: 37116445] {CVE-2024-46829}
  - irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init() (Ma Ke)   
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Zheng Qixing)   
  - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (Maximilien Perreault)   
  - ALSA: hda/realtek: add patch for internal mic in Lenovo V145 (Terry Cheong)   
  - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (Christoffer Sandberg)   
  - KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing (Ravi Bangoria)   
  - KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE (Maxim Levitsky)   
  - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (robelin) [Orabug: 37074721] {CVE-2024-46798}
  - sch/netem: fix use after free in netem_dequeue (Stephen Hemminger) [Orabug: 37074725] {CVE-2024-46800}
  - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)   
  - ext4: handle redirtying in ext4_bio_write_page() (Jan Kara)   
  - udf: Limit file size to 4TB (Jan Kara)   
  - ext4: reject casefold inode flag without casefold feature (Eric Biggers)   
  - rcu-tasks: Fix show_rcu_tasks_trace_gp_kthread buffer overflow (Nikita Kiryushin) [Orabug: 36753533] {CVE-2024-38577}
  - virtio_net: Fix napi_skb_cache_put warning (Breno Leitao) [Orabug: 36964473] {CVE-2024-43835}
  - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (Bob Zhou) [Orabug: 36993065] {CVE-2024-43905}
  - media: uvcvideo: Enforce alignment of frame and interval (Ricardo Ribalda)   
  - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (Alex Hung) [Orabug: 37073031] {CVE-2024-46714}
  - block: remove the blk_flush_integrity call in blk_integrity_unregister (Christoph Hellwig)   
  - wifi: cfg80211: make hash table duplicates more survivable (Johannes Berg)   
  - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (Marek Vasut) [Orabug: 37116336] {CVE-2024-46810}
  - drm/meson: plane: Add error handling (Haoran Liu)   
  - smack: tcp: ipv4, fix incorrect labeling (Casey Schaufler)   
  - usb: typec: ucsi: Fix null pointer dereference in trace (Abhishek Pandit-Subedi) [Orabug: 37073064] {CVE-2024-46719}
  - usbip: Don't submit special requests twice (Simon Holesch)   
  - rcu/nocb: Remove buggy bypass lock contention mitigation (Frederic Weisbecker)   
  - ionic: fix potential irq name truncation (Shannon Nelson)   
  - RDMA/efa: Properly handle unexpected AQ completions (Michael Margolin)   
  - hwspinlock: Introduce hwspin_lock_bust() (Richard Maina)   
  - PCI: al: Check IORESOURCE_BUS existence during probe (Aleksandr Mishin)   
  - cpufreq: scmi: Avoid overflow of target_freq in fast switch (Jagadeesh Kona)   
  - wifi: iwlwifi: remove fw_running op (Shahar S Matityahu)   
  - drm/amdgpu: update type of buf size to u32 for eeprom functions (Tao Zhou)   
  - drm/amd/pm: check negtive return for table entries (Jesse Zhang)   
  - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (Jesse Zhang) [Orabug: 37116393] {CVE-2024-46819}
  - drm/amd/pm: check specific index for aldebaran (Jesse Zhang)   
  - drm/amdgpu: fix the waring dereferencing hive (Jesse Zhang) [Orabug: 37116300] {CVE-2024-46805}
  - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (Ma Jun)   
  - apparmor: fix possible NULL pointer dereference (Leesoo Ahn) [Orabug: 37073077] {CVE-2024-46721}
  - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (Michael Chen)   
  - drm/amdgpu: fix mc_data out-of-bounds read warning (Tim Huang) [Orabug: 37073082] {CVE-2024-46722}
  - drm/amdgpu: fix ucode out-of-bounds read warning (Tim Huang) [Orabug: 37073087] {CVE-2024-46723}
  - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (Ma Jun) [Orabug: 37073093] {CVE-2024-46724}
  - drm/amdgpu: Fix out-of-bounds write warning (Ma Jun) [Orabug: 37073098] {CVE-2024-46725}
  - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (Ma Jun)   
  - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (Ma Jun)   
  - drm/amd/amdgpu: Check tbo resource pointer (Asad Kamal) [Orabug: 37116315] {CVE-2024-46807}
  - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (Hersen Wu)   
  - drm/amd/display: Check msg_id before processing transcation (Alex Hung) [Orabug: 37116360] {CVE-2024-46814}
  - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (Alex Hung) [Orabug: 37116365] {CVE-2024-46815}
  - drm/amd/display: Add array index check for hdcp ddc access (Hersen Wu) [Orabug: 37116295] {CVE-2024-46804}
  - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (Hersen Wu) [Orabug: 37116375] {CVE-2024-46817}
  - drm/amd/display: Check gpio_id before used as array index (Alex Hung) [Orabug: 37116384] {CVE-2024-46818}
  - drm/amdgpu: avoid reading vf2pf info size from FB (Zhigang Luo)   
  - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (Tim Huang)   
  - drm/amdgpu: fix uninitialized scalar variable warning (Tim Huang)   
  - drm/amd/pm: fix the Out-of-bounds read warning (Jesse Zhang) [Orabug: 37073129] {CVE-2024-46731}
  - drm/amd/pm: fix warning using uninitialized value of max_vid_step (Jesse Zhang)   
  - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (Tim Huang)   
  - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (Ma Jun)   
  - drm/amdgpu: fix overflowed array index read warning (Tim Huang)   
  - drm/amd/display: Assign linear_pitch_alignment even for VM (Alvin Lee) [Orabug: 37073135] {CVE-2024-46732}
  - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (Ma Jun)   
  - net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)   
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Rik van Riel)   
  - i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)   
  - ALSA: hda/conexant: Mute speakers at suspend / shutdown (Takashi Iwai)   
  - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (Takashi Iwai)   
  - drm: panel-orientation-quirks: Add quirk for OrangePi Neo (Philip Mueller)   
  - LTS version: v5.15.166 (Vijayendra Suman)   
  - apparmor: fix policy_unpack_test on big endian systems (Guenter Roeck)   
  - scsi: aacraid: Fix double-free on probe failure (Ben Hutchings) [Orabug: 37070699] {CVE-2024-46673}
  - igc: Fix qbv tx latency by setting gtxoffset (Faizal Rahim)   
  - igc: Fix reset adapter logics when tx mode change (Faizal Rahim)   
  - phy: zynqmp: Enable reference clock correctly (Sean Anderson)   
  - usb: cdnsp: fix for Link TRB with TC (Pawel Laszczak)   
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Pawel Laszczak)   
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Zijun Hu)   
  - usb: dwc3: st: add missing depopulate in probe error path (Krzysztof Kozlowski)   
  - usb: dwc3: st: fix probed platform device ref count on probe error path (Krzysztof Kozlowski) [Orabug: 37070704] {CVE-2024-46674}
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Selvarasu Ganesan) [Orabug: 37070709] {CVE-2024-46675}
  - usb: dwc3: omap: add missing depopulate in probe error path (Krzysztof Kozlowski)   
  - USB: serial: option: add MeiG Smart SRM825L (ZHANG Yuntian)   
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Ian Ray)   
  - soc: qcom: cmd-db: Map shared memory as WC, not WB (Volodymyr Babchuk)   
  - nfc: pn533: Add poll mod list filling check (Aleksandr Mishin) [Orabug: 37070716] {CVE-2024-46676}
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Eric Dumazet)   
  - gtp: fix a potential NULL pointer dereference (Cong Wang) [Orabug: 37070721] {CVE-2024-46677}
  - ethtool: check device is present when getting link settings (Jamie Bainbridge) [Orabug: 37070727] {CVE-2024-46679}
  - dmaengine: dw: Add memory bus width verification (Serge Semin)   
  - dmaengine: dw: Add peripheral bus width verification (Serge Semin)   
  - phy: xilinx: phy-zynqmp: Fix SGMII linkup failure on resume (Piyush Mehta)   
  - phy: xilinx: phy-zynqmp: dynamic clock support for power-save (Piyush Mehta)   
  - phy: xilinx: add runtime PM support (Piyush Mehta)   
  - PM: runtime: Add DEFINE_RUNTIME_DEV_PM_OPS() macro (Paul Cercueil)   
  - PM: core: Add EXPORT[_GPL]_SIMPLE_DEV_PM_OPS macros (Paul Cercueil)   
  - PM: core: Remove DEFINE_UNIVERSAL_DEV_PM_OPS() macro (Paul Cercueil)   
  - soundwire: stream: fix programming slave ports for non-continous port maps (Krzysztof Kozlowski)   
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Chen Ridong) [Orabug: 36964509] {CVE-2024-43853}
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel) [Orabug: 36897456] {CVE-2024-41098}
  - drm/amdkfd: don't allow mapping the MMIO HDP page with large pages (Alex Deucher) [Orabug: 36867630] {CVE-2024-41011}
  - Revert "MIPS: Loongson64: reset: Prioritise firmware service" (Greg Kroah-Hartman)   
  - mptcp: sched: check both backup in retrans (Matthieu Baerts (NGI0))   
  - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (Haiyang Zhang)   
  - wifi: mwifiex: duplicate static structs used in driver instances (Sascha Hauer)   
  - pinctrl: single: fix potential NULL dereference in pcs_get_function() (Ma Ke) [Orabug: 37070743] {CVE-2024-46685}
  - pinctrl: rockchip: correct RK3328 iomux width flag for GPIO2-B pins (Huang-Huang Bao)   
  - btrfs: run delayed iputs when flushing delalloc (Josef Bacik)   
  - drm/amdgpu: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (Jesse Zhang) [Orabug: 36898008] {CVE-2024-42228}
  - tools: move alignment-related macros to new <linux/align.h> (Alexander Lobakin)   
  - Input: MT - limit max slots (Tetsuo Handa) [Orabug: 37029136] {CVE-2024-45008}
  - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (Lee, Chun-Yi) [Orabug: 35358656] {CVE-2023-31083}
  - mm/numa: no task_numa_fault() call if PTE is changed (Zi Yan)   
  - mm/numa: no task_numa_fault() call if PMD is changed (Zi Yan)   
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)   
  - hwmon: (ltc2992) Fix memory leak in ltc2992_parse_dt() (Javier Carrasco)   
  - Revert "drm/amd/display: Validate hw_points_num before using it" (Alex Hung)   
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)   
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier) [Orabug: 37070792] {CVE-2024-46707}
  - cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)   
  - HID: microsoft: Add rumble support to latest xbox controllers (Siarhei Vishniakou)   
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)   
  - MIPS: Loongson64: Set timer mode in cpu-probe (Jiaxun Yang)   
  - scsi: core: Fix the return value of scsi_logical_block_count() (Chaotian Jing)   
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman) [Orabug: 36992975] {CVE-2024-43884}
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter) [Orabug: 37070690] {CVE-2024-45028}
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov) [Orabug: 37029059] {CVE-2024-44982}
  - drm/msm/dp: reset the link phy params before link training (Abhinav Kumar)   
  - drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)   
  - net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)   
  - net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)   
  - netfilter: flowtable: validate vlan header (Pablo Neira Ayuso) [Orabug: 37029063] {CVE-2024-44983}
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet) [Orabug: 37029066] {CVE-2024-44985}
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet) [Orabug: 37029068] {CVE-2024-44986}
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet) [Orabug: 37029075] {CVE-2024-44987}
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger) [Orabug: 37070659] {CVE-2024-45016}
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang) [Orabug: 37029081] {CVE-2024-44988}
  - net: dsa: mv88e6xxx: replace ATU violation prints with trace points (Vladimir Oltean)   
  - net: dsa: mv88e6xxx: read FID when handling ATU violations (Hans J. Schultz)   
  - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() (Dan Carpenter)   
  - ice: fix ICE_LAST_OFFSET formula (Maciej Fijalkowski)   
  - bonding: fix xfrm state handling when clearing active slave (Nikolay Aleksandrov)   
  - bonding: fix xfrm real_dev null pointer dereference (Nikolay Aleksandrov) [Orabug: 37029084] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Nikolay Aleksandrov) [Orabug: 37029087] {CVE-2024-44990}
  - bonding: fix bond_ipsec_offload_ok return type (Nikolay Aleksandrov)   
  - ip6_tunnel: Fix broken GRO (Thomas Bogendoerfer)   
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)   
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Sebastian Andrzej Siewior)   
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima) [Orabug: 37013760] {CVE-2024-44946}
  - tc-testing: don't access non-existent variable on exception (Simon Horman)   
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Luiz Augusto von Dentz)   
  - Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)   
  - platform/surface: aggregator: Fix warning when controller is destroyed in probe (Maximilian Luz)   
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Long Li)   
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)   
  - media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c) (Aurelien Jarno)   
  - nfsd: make svc_stat per-network namespace instead of global (Josef Bacik)   
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Josef Bacik)   
  - nfsd: make all of the nfsd stats per-network namespace (Josef Bacik)   
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Josef Bacik)   
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Josef Bacik)   
  - sunrpc: use the struct net as the svc proc private (Josef Bacik)   
  - sunrpc: remove ->pg_stats from svc_program (Josef Bacik)   
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Josef Bacik)   
  - nfsd: stop setting ->pg_stats for unused stats (Josef Bacik)   
  - sunrpc: don't change ->sv_stats if it doesn't exist (Josef Bacik)   
  - NFSD: Fix frame size warning in svc_export_parse() (Chuck Lever)   
  - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (Chuck Lever)   
  - NFSD: Refactor the duplicate reply cache shrinker (Chuck Lever)   
  - NFSD: Replace nfsd_prune_bucket() (Chuck Lever)   
  - NFSD: Rename nfsd_reply_cache_alloc() (Chuck Lever)   
  - NFSD: Refactor nfsd_reply_cache_free_locked() (Chuck Lever)   
  - nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net (Jeff Layton)   
  - nfsd: move reply cache initialization into nfsd startup (Jeff Layton)   
  - block: use "unsigned long" for blk_validate_block_size(). (Tetsuo Handa)   
  - gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet) [Orabug: 37029110] {CVE-2024-44999}
  - hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)   
  - nvmet-rdma: fix possible bad dereference when freeing rsps (Sagi Grimberg)   
  - ext4: set the type of max_zeroout to unsigned int to avoid overflow (Baokun Li)   
  - irqchip/gic-v3-its: Remove BUG_ON in its_vpe_irq_domain_alloc (Guanrui Huang)   
  - usb: dwc3: core: Skip setting event buffers for host only controllers (Krishna Kurapati)   
  - platform/x86: lg-laptop: fix %s null argument warning (Gergo Koteles)   
  - clocksource: Make watchdog and suspend-timing multiplication overflow safe (Adrian Hunter)   
  - s390/iucv: fix receive buffer virtual vs physical address confusion (Alexander Gordeev)   
  - openrisc: Call setup_memory() earlier in the init sequence (Oreoluwa Babatunde)   
  - NFS: avoid infinite loop in pnfs_update_layout. (NeilBrown)   
  - nvmet-tcp: do not continue for invalid icreq (Hannes Reinecke)   
  - net: hns3: add checking for vf id of mailbox (Jian Shen)   
  - Bluetooth: bnep: Fix out-of-bound access (Luiz Augusto von Dentz)   
  - usb: gadget: fsl: Increase size of name buffer for endpoints (Uwe Kleine-König)   
  - f2fs: fix to do sanity check in update_sit_entry (Zhiguo Niu)   
  - btrfs: delete pointless BUG_ON check on quota root in btrfs_qgroup_account_extent() (David Sterba)   
  - btrfs: change BUG_ON to assertion in tree_move_down() (David Sterba)   
  - btrfs: send: handle unexpected data in header buffer in begin_cmd() (David Sterba)   
  - btrfs: handle invalid root reference found in may_destroy_subvol() (David Sterba)   
  - btrfs: change BUG_ON to assertion when checking for delayed_node root (David Sterba)   
  - powerpc/boot: Only free if realloc() succeeds (Michael Ellerman)   
  - powerpc/boot: Handle allocation failure in simple_realloc() (Li zeming)   
  - parisc: Use irq_enter_rcu() to fix warning at kernel/context_tracking.c:367 (Helge Deller)   
  - memory: stm32-fmc2-ebi: check regmap_read return value (Christophe Kerello)   
  - x86: Increase brk randomness entropy for 64-bit systems (Kees Cook)   
  - md: clean up invalid BUG_ON in md_ioctl (Li Nan)   
  - netlink: hold nlk->cb_mutex longer in __netlink_dump_start() (Eric Dumazet)   
  - clocksource/drivers/arm_global_timer: Guard against division by zero (Martin Blumenstingl)   
  - virtiofs: forbid newlines in tags (Stefan Hajnoczi)   
  - drm/lima: set gp bus_stop bit before hard reset (Erico Nunes)   
  - net/sun3_82586: Avoid reading past buffer in debug output (Kees Cook)   
  - media: drivers/media/dvb-core: copy user arrays safely (Philipp Stanner)   
  - fs: binfmt_elf_efpic: don't use missing interpreter's properties (Max Filippov)   
  - media: pci: cx23885: check cx23885_vdev_init() return (Hans Verkuil)   
  - quota: Remove BUG_ON from dqget() (Jan Kara)   
  - fuse: fix UAF in rcu pathwalks (Al Viro)   
  - afs: fix __afs_break_callback() / afs_drop_open_mmap() race (Al Viro)   
  - ext4: do not trim the group with corrupted block bitmap (Baokun Li)   
  - nvmet-trace: avoid dereferencing pointer too early (Daniel Wagner)   
  - powerpc/xics: Check return value of kasprintf in icp_native_map_one_cpu (Kunwu Chan)   
  - memory: tegra: Skip SID programming if SID registers aren't set (Ashish Mhetre)   
  - arm64: Fix KASAN random tag seed initialization (Samuel Holland)   
  - hwmon: (ltc2992) Avoid division by zero (Antoniu Miclaus)   
  - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock (Chengfeng Ye)   
  - wifi: iwlwifi: fw: Fix debugfs command sending (Mukesh Sisodiya)   
  - wifi: iwlwifi: abort scan when rfkill on but device enabled (Miri Korenblit)   
  - gfs2: setattr_chown: Add missing initialization (Andreas Gruenbacher)   
  - scsi: spi: Fix sshdr use (Mike Christie)   
  - media: qcom: venus: fix incorrect return value (Hans Verkuil)   
  - binfmt_misc: cleanup on filesystem umount (Christian Brauner)   
  - staging: ks7010: disable bh on tx_dev_lock (Chengfeng Ye)   
  - drm/amd/display: Validate hw_points_num before using it (Alex Hung)   
  - staging: iio: resolver: ad2s1210: fix use before initialization (David Lechner)   
  - media: radio-isa: use dev_name to fill in bus_info (Hans Verkuil)   
  - i3c: mipi-i3c-hci: Do not unmap region not mapped for transfer (Jarkko Nikula)   
  - i3c: mipi-i3c-hci: Remove BUG() when Ring Abort request times out (Jarkko Nikula)   
  - s390/smp,mcck: fix early IPI handling (Heiko Carstens)   
  - RDMA/rtrs: Fix the problem of variable not initialized fully (Zhu Yanjun)   
  - i2c: riic: avoid potential division by zero (Wolfram Sang)   
  - wifi: cw1200: Avoid processing an invalid TIM IE (Jeff Johnson)   
  - wifi: mac80211: fix BA session teardown race (Johannes Berg)   
  - wifi: cfg80211: check wiphy mutex is held for wdev mutex (Johannes Berg)   
  - ssb: Fix division by zero issue in ssb_calc_clock_rate (Rand Deeb)   
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)   
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang) [Orabug: 37029097] {CVE-2024-44995}
  - net: hns3: fix wrong use of semaphore up (Jie Wang)   
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal)   
  - netfilter: flowtable: initialise extack before use (Donald Hunter) [Orabug: 37070666] {CVE-2024-45018}
  - netfilter: allow ipv6 fragments to arrive on different devices (Tom Hughes)   
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Eugene Syromiatnikov)   
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson)   
  - net: dsa: vsc73xx: check busy flag in MDIO operations (Pawel Dembicki)   
  - net: dsa: vsc73xx: use read_poll_timeout instead delay loop (Pawel Dembicki)   
  - net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)   
  - net: axienet: Fix register defines comment description (Radhey Shyam Pandey)   
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter) [Orabug: 37029103] {CVE-2024-44998}
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)   
  - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (Faizal Rahim)   
  - igc: remove I226 Qbv BaseTime restriction (Muhammad Husaini Zulkifli)   
  - igc: Correct the launchtime offset (Muhammad Husaini Zulkifli)   
  - s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)   
  - drm/amdgpu/jpeg2: properly set atomics vmid field (Alex Deucher)   
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro) [Orabug: 37070671] {CVE-2024-45021}
  - drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)   
  - btrfs: tree-checker: add dev extent item checks (Qu Wenruo)   
  - selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)   
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro) [Orabug: 37070679] {CVE-2024-45025}
  - bitmap: introduce generic optimized bitmap_size() (Alexander Lobakin)   
  - btrfs: rename bitmap_set_bits() -> btrfs_bitmap_set_bits() (Alexander Lobakin)   
  - s390/cio: rename bitmap_size() -> idset_bitmap_size() (Alexander Lobakin)   
  - fs/ntfs3: add prefix to bitmap_size() and use BITS_TO_U64() (Alexander Lobakin)   
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng) [Orabug: 37029118] {CVE-2024-45003}
  - dm persistent data: fix memory allocation failure (Mikulas Patocka)   
  - dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)   
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)   
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland) [Orabug: 37070686] {CVE-2024-45026}
  - thunderbolt: Mark XDomain as unplugged when router is removed (Mika Westerberg) [Orabug: 37070774] {CVE-2024-46702}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman) [Orabug: 37029124] {CVE-2024-45006}
  - ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan José Arboleda)   
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (Lianqin Hu)   
  - char: xillybus: Check USB endpoints when probing device (Eli Billauer) [Orabug: 37070649] {CVE-2024-45011}
  - char: xillybus: Refine workqueue handling (Eli Billauer)   
  - char: xillybus: Don't destroy workqueue from work item running on it (Eli Billauer) [Orabug: 37029128] {CVE-2024-45007}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn) [Orabug: 37017950] {CVE-2024-44947}
  - LTS version: v5.15.165 (Vijayendra Suman)   
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)   
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix phy-mode (Michael Walle)   
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet) [Orabug: 36897690] {CVE-2024-42114}
  - binfmt_flat: Fix corruption when not offsetting data start (Kees Cook) [Orabug: 37029015] {CVE-2024-44966}
  - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. (Chris Wulff)   
  - nvme/pci: Add APST quirk for Lenovo N60z laptop (WangYuli)   
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook) [Orabug: 36984016] {CVE-2024-43882}
  - arm64: cpufeature: Fix the visibility of compat hwcaps (Amit Daniel Kachhap)   
  - arm64: dts: qcom: msm8996: correct #clock-cells for QMP PHY nodes (Dmitry Baryshkov)   
  - powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt. (Mahesh Salgaonkar) [Orabug: 36897773] {CVE-2024-42126}
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti) [Orabug: 36953968] {CVE-2024-42259}
  - mptcp: fully established after ADD_ADDR echo on MPJ (Matthieu Baerts (NGI0))   
  - wifi: mac80211: check basic rates validity (Johannes Berg)   
  - PCI: dwc: Restore MSI Receiver mask during resume (Jisheng Zhang)   
  - net: stmmac: Enable mac_managed_pm phylink config (Shenwei Wang)   
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal) [Orabug: 36896845] {CVE-2024-41042}
  - netfilter: nf_tables: allow clone callbacks to sleep (Florian Westphal)   
  - netfilter: nf_tables: bail out if stateful expression provides no .clone (Pablo Neira Ayuso)   
  - netfilter: nf_tables: set element extended ACK reporting support (Pablo Neira Ayuso)   
  - tls: fix race between tx work scheduling and socket close (Jakub Kicinski) [Orabug: 36529710] {CVE-2024-26585}
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Lukas Wunner) [Orabug: 36964228] {CVE-2024-42302}
  - btrfs: fix double inode unlock for direct IO sync writes (Filipe Manana) [Orabug: 37195039] {CVE-2024-43885}
  - xfs: fix log recovery buffer allocation for the legacy h_size fixup (Christoph Hellwig) [Orabug: 36809257] {CVE-2024-39472}
  - btrfs: fix corruption after buffer fault in during direct IO append write (Filipe Manana)   
  - selftests: mptcp: join: check backup support in signal endp (Matthieu Baerts (NGI0))   
  - selftests: mptcp: join: validate backup in MPJ (Matthieu Baerts (NGI0))   
  - mptcp: pm: fix backup support in signal endpoints (Matthieu Baerts (NGI0))   
  - mptcp: export local_address (Geliang Tang)   
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Matthieu Baerts (NGI0))   
  - mptcp: fix bad RCVPRUNED mib accounting (Paolo Abeni)   
  - mptcp: mib: count MPJ with backup flag (Matthieu Baerts (NGI0))   
  - mptcp: fix NL PM announced address accounting (Paolo Abeni)   
  - mptcp: distinguish rcv vs sent backup flag in requests (Matthieu Baerts (NGI0))   
  - mptcp: sched: check both directions for backup (Matthieu Baerts (NGI0))   
  - drm/mgag200: Set DDC timeout in milliseconds (Thomas Zimmermann)   
  - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (Lucas Stach)   
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang) [Orabug: 37028981] {CVE-2024-44958}
  - sched/smt: Introduce sched_smt_present_inc/dec() helper (Yang Yingliang)   
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen) [Orabug: 37028935] {CVE-2024-44948}
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Waiman Long) [Orabug: 36992992] {CVE-2024-43889}
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu) [Orabug: 36992997] {CVE-2024-43890}
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)   
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)   
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)   
  - irqchip/xilinx: Fix shift out of bounds (Radhey Shyam Pandey)   
  - kcov: properly check for softirq context (Andrey Konovalov)   
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy) [Orabug: 36993008] {CVE-2024-43893}
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Thomas Gleixner)   
  - ntp: Safeguard against time_constant overflow (Justin Stitt)   
  - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' (Arseniy Krasnov)   
  - irqchip/meson-gpio: support more than 8 channels gpio irq (Qianggui Song)   
  - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() (Paul E. McKenney)   
  - clocksource: Scale the watchdog read retries automatically (Feng Tang)   
  - torture: Enable clocksource watchdog with "tsc=watchdog" (Paul E. McKenney)   
  - clocksource: Reduce the default clocksource_watchdog() retries to 2 (Waiman Long)   
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)   
  - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (Jason Wang)   
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner) [Orabug: 37195086] {CVE-2024-44968}
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)   
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - usb: gadget: u_serial: Set start_delayed during suspend (Prashanth K)   
  - usb: gadget: core: Check for unset descriptor (Chris Wulff) [Orabug: 37028987] {CVE-2024-44960}
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)   
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum) [Orabug: 36992970] {CVE-2024-43883}
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)   
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)   
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai) [Orabug: 37028956] {CVE-2024-44954}
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke) [Orabug: 36993013] {CVE-2024-43894}
  - ALSA: usb-audio: Re-add ScratchAmp quirk entries (Takashi Iwai)   
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)   
  - kprobes: Fix to check symbol prefixes correctly (Masami Hiramatsu (Google))   
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)   
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)   
  - spi: spidev: Add missing spi_device_id for bh2228fv (Geert Uytterhoeven)   
  - ASoC: codecs: wsa881x: Correct Soundwire ports mask (Krzysztof Kozlowski)   
  - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)   
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)   
  - arm64: cputype: Add Cortex-A725 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X1C definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X925 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-A720 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X3 definitions (Mark Rutland)   
  - arm64: cputype: Add Neoverse-V3 definitions (Mark Rutland)   
  - arm64: cputype: Add Cortex-X4 definitions (Mark Rutland)   
  - arm64: barrier: Restore spec_bar() macro (Mark Rutland)   
  - arm64: Add Neoverse-V2 part (Besar Wicaksono)   
  - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to user-space (James Morse)   
  - ext4: fix wrong unit use in ext4_mb_find_by_goal (Kemeng Shi)   
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime (Zheng Zucheng)   
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)   
  - profiling: remove profile=sleep support (Tetsuo Handa)   
  - SUNRPC: Fix a race to wake a sync task (Benjamin Coddington)   
  - s390/sclp: Prevent release of buffer in I/O (Peter Oberparleiter) [Orabug: 37029019] {CVE-2024-44969}
  - jbd2: avoid memleak in jbd2_journal_write_metadata_buffer (Kemeng Shi)   
  - ext4: fix uninitialized variable in ext4_inlinedir_to_tree (Xiaxi Shen)   
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Michal Pecio)   
  - media: uvcvideo: Ignore empty TS packets (Ricardo Ribalda)   
  - drm/amd/display: Add null checker before passing variables (Alex Hung) [Orabug: 36993047] {CVE-2024-43902}
  - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (Ma Jun) [Orabug: 36993077] {CVE-2024-43907}
  - drm/amdgpu: Fix the null pointer dereference to ras_manager (Ma Jun) [Orabug: 36993083] {CVE-2024-43908}
  - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (Ma Jun) [Orabug: 36993089] {CVE-2024-43909}
  - btrfs: fix bitmap leak when loading free space cache on duplicate entry (Filipe Manana)   
  - wifi: nl80211: don't give key data to userspace (Johannes Berg)   
  - udf: prevent integer overflow in udf_bitmap_free_blocks() (Roman Smirnov)   
  - PCI: Add Edimax Vendor ID to pci_ids.h (FUJITA Tomonori)   
  - selftests/bpf: Fix send_signal test with nested CONFIG_PARAVIRT (Yonghong Song)   
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Thomas Weißschuh)   
  - ACPI: battery: create alarm sysfs attribute atomically (Thomas Weißschuh)   
  - clocksource/drivers/sh_cmt: Address race condition for clock events (Niklas Söderlund)   
  - md/raid5: avoid BUG_ON() while continue reshape after reassembling (Yu Kuai) [Orabug: 36993126] {CVE-2024-43914}
  - md: do not delete safemode_timer in mddev_suspend (Li Nan)   
  - rcutorture: Fix rcu_torture_fwd_cb_cr() data race (Paul E. McKenney)   
  - net: fec: Stop PPS on driver remove (Csókás, Bence)   
  - l2tp: fix lockdep splat (James Chapman)   
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Joe Hattori) [Orabug: 37029031] {CVE-2024-44971}
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)   
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)   
  - net: bridge: mcast: wait for previous gc cycles when removing port (Nikolay Aleksandrov) [Orabug: 36993143] {CVE-2024-44934}
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas) [Orabug: 36983958] {CVE-2024-43861}
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima) [Orabug: 36993146] {CVE-2024-44935}
  - sctp: move hlist_node and hashent out of sctp_ep_common (Xin Long)   
  - x86/mm: Fix pti_clone_entry_text() for i386 (Peter Zijlstra)   
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra) [Orabug: 37029011] {CVE-2024-44965}
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)   
  - netfilter: ipset: Add list flush to cancel_gc (Alexander Maltsev)   
  - mptcp: fix duplicate data handling (Paolo Abeni)   
  - r8169: don't increment tx_dropped in case of NETDEV_TX_BUSY (Heiner Kallweit)   
  - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (Ma Ke)   
  - drm/vmwgfx: Fix a deadlock in dma buf fence polling (Zack Rusin) [Orabug: 36983964] {CVE-2024-43863}
  - Revert "ALSA: firewire-lib: operate for period elapse event in process context" (Edmund Raile)   
  - Revert "ALSA: firewire-lib: obsolete workqueue for period update" (Edmund Raile)   
  - ALSA: hda/realtek: Add quirk for Acer Aspire E5-574G (Mavroudis Chatzilazaridis)   
  - ALSA: usb-audio: Correct surround channels in UAC1 channel map (Takashi Iwai)   
  - protect the fetch of ->fd[fd] in do_dup2() from mispredictions (Al Viro) [Orabug: 36963807] {CVE-2024-42265}
  - HID: wacom: Modify pen IDs (Tatsunosuke Tobita)   
  - platform/chrome: cros_ec_proto: Lock device when updating MKBP version (Patryk Duda)   
  - power: supply: bq24190_charger: replace deprecated strncpy with strscpy (Justin Stitt)   
  - riscv/mm: Add handling for VM_FAULT_SIGSEGV in mm_fault_error() (Zhe Qiao) [Orabug: 36963814] {CVE-2024-42267}
  - ipv6: fix ndisc_is_useropt() handling for PIO (Maciej Żenczykowski)   
  - net/mlx5e: Add a check for the return value from mlx5_port_set_eth_ptys (Shahar Shitrit)   
  - net: mvpp2: Don't re-use loop iterator (Dan Carpenter)   
  - net/iucv: fix use after free in iucv_sock_close() (Alexandra Winter) [Orabug: 36964005] {CVE-2024-42271}
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Kuniyuki Iwashima)   
  - rtnetlink: enable alt_ifname for setlink/newlink (Florent Fourcot)   
  - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (songxiebing)   
  - drm/vmwgfx: Fix overlay when using Screen Targets (Ian Forbes)   
  - drm/nouveau: prime: fix refcount underflow (Danilo Krummrich) [Orabug: 36983978] {CVE-2024-43867}
  - MIPS: dts: loongson: Fix ls2k1000-rtc interrupt (Jiaxun Yang)   
  - MIPS: dts: loongson: Fix liointc IRQ polarity (Jiaxun Yang)   
  - MIPS: Loongson64: DTS: Fix PCIe port nodes for ls7a (Jiaxun Yang)   
  - MIPS: Loongson64: DTS: Add RTC support to Loongson-2K1000 (Binbin Zhou)   
  - remoteproc: imx_rproc: Fix refcount mistake in imx_rproc_addr_init (Aleksandr Mishin)   
  - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (Wayne Lin)   
  - irqchip/imx-irqsteer: Handle runtime power management correctly (Shenwei Wang) [Orabug: 36964084] {CVE-2024-42290}
  - irqchip/imx-irqsteer: Add runtime PM support (Lucas Stach)   
  - irqchip/imx-irqsteer: Constify irq_chip struct (Lucas Stach)   
  - irqdomain: Fixed unbalanced fwnode get and put (Herve Codina)   
  - leds: triggers: Flush pending brightness before activating trigger (Thomas Weißschuh)   
  - leds: trigger: Call synchronize_rcu() before calling trig->activate() (Hans de Goede)   
  - leds: trigger: Store brightness set by led_trigger_event() (Heiner Kallweit)   
  - leds: trigger: Remove unused function led_trigger_rename_static() (Heiner Kallweit)   
  - leds: trigger: use RCU to protect the led_cdevs list (Johannes Berg)   
  - drivers: soc: xilinx: check return status of get_api_version() (Jay Buddhabhatti)   
  - soc: xilinx: move PM_INIT_FINALIZE to zynqmp_pm_domains driver (Michael Tretter)   
  - ext4: check the extent status again before inserting delalloc block (Zhang Yi)   
  - ext4: factor out a common helper to query extent map (Zhang Yi)   
  - ext4: convert to exclusive lock while inserting delalloc extents (Zhang Yi)   
  - ext4: refactor ext4_da_map_blocks() (Zhang Yi)   
  - ext4: make ext4_es_insert_extent() return void (Baokun Li)   
  - sysctl: always initialize i_uid/i_gid (Thomas Weißschuh) [Orabug: 36964269] {CVE-2024-42312}
  - arm64: dts: qcom: ipq8074: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8998: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8998: switch USB QMP PHY to new style of bindings (Dmitry Baryshkov)   
  - arm64: dts: qcom: msm8998: drop USB PHY clock index (Johan Hovold)   
  - arm64: dts: qcom: msm8996: Move '#clock-cells' to QMP PHY child node (Shawn Guo)   
  - powerpc/configs: Update defconfig with now user-visible CONFIG_FSL_IFC (Esben Haabendal)   
  - fs: don't allow non-init s_user_ns for filesystems without FS_USERNS_MOUNT (Seth Forshee (DigitalOcean))   
  - nvme-pci: add missing condition check for existence of mapped data (Leon Romanovsky) [Orabug: 36964021] {CVE-2024-42276}
  - nvme: separate command prep and issue (Jens Axboe)   
  - nvme: split command copy into a helper (Jens Axboe)   
  - iommu: sprd: Avoid NULL deref in sprd_iommu_hw_en (Artem Chernyshev) [Orabug: 36964025] {CVE-2024-42277}
  - ceph: fix incorrect kmalloc size of pagevec mempool (ethanwu)   
  - ASoC: Intel: use soc_intel_is_byt_cr() only when IOSF_MBI is reachable (Pierre-Louis Bossart)   
  - spi: spidev: add correct compatible for Rohm BH2228FV (Conor Dooley)   
  - spi: spidev: order compatibles alphabetically (Krzysztof Kozlowski)   
  - spidev: Add Silicon Labs EM3581 device compatible (Vincent Tremblay)   
  - spi: spidev: Replace OF specific code by device property API (Andy Shevchenko)   
  - spi: spidev: Replace ACPI specific code by device_get_match_data() (Andy Shevchenko)   
  - spi: spidev: Make probe to fail early if a spidev compatible is used (Javier Martinez Canillas)   
  - lirc: rc_dev_get_from_fd(): fix file leak (Al Viro)   
  - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (Al Viro)   
  - apparmor: Fix null pointer deref when receiving skb during sock creation (Xiao Liang)   
  - mISDN: Fix a use after free in hfcmulti_tx() (Dan Carpenter) [Orabug: 36964031] {CVE-2024-42280}
  - bpf: Fix a segment issue when downgrading gso_size (Fred Li) [Orabug: 36964037] {CVE-2024-42281}
  - net: nexthop: Initialize all fields in dumped nexthops (Petr Machata) [Orabug: 36964043] {CVE-2024-42283}
  - net: stmmac: Correct byte order of perfect_match (Simon Horman)   
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Shigeru Yoshida) [Orabug: 36964046] {CVE-2024-42284}
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal)   
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Johannes Berg)   
  - ipv4: Fix incorrect source address in Record Route option (Ido Schimmel)   
  - MIPS: SMP-CPS: Fix address for GCR_ACCESS register for CM3 and later (Gregory CLEMENT)   
  - bpf, events: Use prog to emit ksymbol event for main program (Hou Tao)   
  - dma: fix call order in dmam_free_coherent (Lance Richardson) [Orabug: 36964522] {CVE-2024-43856}
  - libbpf: Fix no-args func prototype BTF dumping syntax (Andrii Nakryiko)   
  - um: time-travel: fix signal blocking race/hang (Johannes Berg)   
  - um: time-travel: fix time-travel-start option (Johannes Berg)   
  - phy: cadence-torrent: Check return value on register read (Ma Ke)   
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (Vignesh Raghavendra)   
  - jfs: Fix array-index-out-of-bounds in diFree (Jeongjun Park) [Orabug: 36964529] {CVE-2024-43858}
  - kdb: address -Wformat-security warnings (Arnd Bergmann)   
  - kernel: rerun task_work while freezing in get_signal() (Pavel Begunkov)   
  - io_uring/io-wq: limit retrying worker initialisation (Pavel Begunkov)   
  - nilfs2: handle inconsistent state in nilfs_btnode_create_block() (Ryusuke Konishi) [Orabug: 36964202] {CVE-2024-42295}
  - Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x13d3:0x3591 (WangYuli)   
  - Bluetooth: btusb: Add RTL8852BE device 0489:e125 to device tables (Hilda Wu)   
  - rbd: don't assume RBD_LOCK_STATE_LOCKED for exclusive mappings (Ilya Dryomov)   
  - rbd: rename RBD_LOCK_STATE_RELEASING and releasing_wait (Ilya Dryomov)   
  - drm/panfrost: Mark simple_ondemand governor as softdep (Dragan Simic)   
  - MIPS: Loongson64: Test register availability before use (Jiaxun Yang)   
  - MIPS: Loongson64: reset: Prioritise firmware service (Jiaxun Yang)   
  - MIPS: Loongson64: Remove memory node for builtin-dtb (Jiaxun Yang)   
  - MIPS: Loongson64: env: Hook up Loongsson-2K (Jiaxun Yang)   
  - MIPS: dts: loongson: Fix GMAC phy node (Jiaxun Yang)   
  - MIPS: ip30: ip30-console: Add missing include (Jiaxun Yang)   
  - remoteproc: imx_rproc: Skip over memory region when node value is NULL (Aleksandr Mishin) [Orabug: 36964536] {CVE-2024-43860}
  - remoteproc: stm32_rproc: Fix mailbox interrupts queuing (Gwenael Treuveur)   
  - rbd: don't assume rbd_is_lock_owner() for exclusive mappings (Ilya Dryomov)   
  - selftests/sigaltstack: Fix ppc64 GCC build (Michael Ellerman)   
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Bart Van Assche) [Orabug: 36964053] {CVE-2024-42285}
  - platform: mips: cpu_hwmon: Disable driver on unsupported hardware (Jiaxun Yang)   
  - watchdog/perf: properly initialize the turbo mode timestamp and rearm counter (Thomas Gleixner)   
  - rtc: isl1208: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - drm/i915/dp: Reset intel_dp->link_trained before retraining the link (Imre Deak)   
  - drm/amdgpu/sdma5.2: Update wptr registers as well as doorbell (Alex Deucher)   
  - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (Nitin Gote)   
  - perf/x86/intel/pt: Fix a topa_entry base address calculation (Adrian Hunter)   
  - perf/x86/intel/pt: Fix topa_entry base length (Marco Cavenati)   
  - perf/x86/intel/uncore: Fix the bits of the CHA extended umask for SPR (Kan Liang)   
  - perf: Fix event leak upon exit (Frederic Weisbecker) [Orabug: 36983986] {CVE-2024-43870}
  - rtc: cmos: Fix return value of nvmem callbacks (Joy Chakraborty)   
  - mm/numa_balancing: teach mpol_to_str about the balancing mode (Tvrtko Ursulin)   
  - devres: Fix memory leakage caused by driver API devm_free_percpu() (Zijun Hu) [Orabug: 36983990] {CVE-2024-43871}
  - devres: Fix devm_krealloc() wasting memory (Zijun Hu)   
  - gve: Fix an edge case for TSO skb validity check (Bailey Forrest)   
  - kobject_uevent: Fix OOB access within zap_modalias_env() (Zijun Hu) [Orabug: 37203371] {CVE-2024-42292}
  - kbuild: Fix '-S -c' in x86 stack protector scripts (Nathan Chancellor)   
  - decompress_bunzip2: fix rare decompression failure (Ross Lagerwall)   
  - ubi: eba: properly rollback inside self_check_eba (Fedor Pchelkin)   
  - clk: davinci: da8xx-cfgchip: Initialize clk_init_data before use (Bastien Curutchet)   
  - fs/ntfs3: Update log->page_{mask,bits} if log->page_size changed (Huacai Chen) [Orabug: 36964218] {CVE-2024-42299}
  - dev/parport: fix the array out-of-bounds risk (tuhaowen) [Orabug: 36964222] {CVE-2024-42301}
  - binder: fix hang of unregistered readers (Carlos Llamas)   
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Manivannan Sadhasivam)   
  - PCI: dw-rockchip: Fix initial PERST# GPIO value (Niklas Cassel)   
  - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (Wei Liu)   
  - hwrng: amd - Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - tools/memory-model: Fix bug in lock.cat (Alan Stern)   
  - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (wangdicheng)   
  - ALSA: usb-audio: Move HD Webcam quirk to the right place (Takashi Iwai)   
  - ALSA: usb-audio: Fix microphone sound on HD webcam. (wangdicheng)   
  - KVM: VMX: Split out the non-virtualization part of vmx_interrupt_blocked() (Sean Christopherson)   
  - media: uvcvideo: Fix integer overflow calculating timestamp (Ricardo Ribalda)   
  - jbd2: make jbd2_journal_get_max_txn_bufs() internal (Jan Kara)   
  - leds: ss4200: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - wifi: mwifiex: Fix interface type change (Rafael Beims)   
  - selftests/landlock: Add cred_transfer test (Mickaël Salaün)   
  - io_uring: tighten task exit cancellations (Pavel Begunkov)   
  - ext4: make sure the first directory block is not a hole (Baokun Li) [Orabug: 36964231] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (Baokun Li) [Orabug: 36964236] {CVE-2024-42305}
  - m68k: amiga: Turn off Warp1260 interrupts during boot (Paolo Pisati)   
  - udf: Avoid using corrupted block bitmap buffer (Jan Kara) [Orabug: 36964241] {CVE-2024-42306}
  - task_work: Introduce task_work_cancel() again (Frederic Weisbecker)   
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Frederic Weisbecker)   
  - apparmor: use kvfree_sensitive to free data->data (Fedor Pchelkin)   
  - sched/fair: Use all little CPUs for CPU-bound workloads (Pierre Gondois)   
  - drm/amd/display: Check for NULL pointer (Sung Joon Kim) [Orabug: 36964246] {CVE-2024-42308}
  - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (Ma Ke) [Orabug: 36964252] {CVE-2024-42309}
  - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (Ma Ke) [Orabug: 36964258] {CVE-2024-42310}
  - ext2: Verify bitmap and itable block numbers before using them (Jan Kara)   
  - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (Chao Yu) [Orabug: 36964264] {CVE-2024-42311}
  - ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error (Igor Pylypiv)   
  - media: venus: fix use after free in vdec_close (Dikshita Agarwal) [Orabug: 36964274] {CVE-2024-42313}
  - char: tpm: Fix possible memory leak in tpm_bios_measurements_open() (Joe Hattori)   
  - fuse: verify {g,u}id mount options correctly (Eric Sandeen)   
  - sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks (Tejun Heo)   
  - ipv6: take care of scope when choosing the src addr (Nicolas Dichtel)   
  - af_packet: Handle outgoing VLAN packets without hardware offloading (Chengen Du)   
  - net: netconsole: Disable target before netpoll cleanup (Breno Leitao)   
  - tick/broadcast: Make takeover of broadcast hrtimer reliable (Yu Liao)   
  - dt-bindings: thermal: correct thermal zone node name limit (Krzysztof Kozlowski)   
  - mm: mmap_lock: replace get_memcg_path_buf() with on-stack buffer (Tetsuo Handa)   
  - mm/hugetlb: fix possible recursive locking detected warning (Miaohe Lin)   
  - landlock: Don't lose track of restrictions on cred_transfer (Jann Horn) [Orabug: 36964283] {CVE-2024-42318}
  - fs/ntfs3: Missed error return (Konstantin Komarov)   
  - rtc: interface: Add RTC offset to alarm after fix-up (Csókás, Bence)   
  - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (Ryusuke Konishi)   
  - fs/proc/task_mmu: indicate PM_FILE for PMD-mapped file THP (David Hildenbrand)   
  - fs/ntfs3: Fix field-spanning write in INDEX_HDR (Konstantin Komarov)   
  - fs/ntfs3: Replace inode_trylock with inode_lock (Konstantin Komarov)   
  - pinctrl: freescale: mxs: Fix refcount of child (Peng Fan)   
  - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: ti: ti-iodelay: Drop if block with always false condition (Uwe Kleine-König)   
  - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (Yang Yingliang)   
  - pinctrl: rockchip: update rk3308 iomux routes (Dmitry Yashin)   
  - fs/ntfs3: Fix getting file type (Konstantin Komarov)   
  - fs/ntfs3: Missed NI_FLAG_UPDATE_PARENT setting (Konstantin Komarov)   
  - fs/ntfs3: Fix transform resident to nonresident for compressed files (Konstantin Komarov)   
  - fs/ntfs3: Merge synonym COMPRESSION_UNIT and NTFS_LZNT_CUNIT (Konstantin Komarov)   
  - fs/ntfs3: Use ALIGN kernel macro (Konstantin Komarov)   
  - net: dsa: b53: Limit chip-wide jumbo frame config to CPU ports (Martin Willi)   
  - net: dsa: mv88e6xxx: Limit chip-wide frame size config to CPU ports (Martin Willi)   
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal)   
  - netfilter: nft_set_pipapo: constify lookup fn args where possible (Florian Westphal)   
  - netfilter: ctnetlink: use helper function to calculate expect ID (Pablo Neira Ayuso) [Orabug: 37013754] {CVE-2024-44944}
  - bnxt_re: Fix imm_data endianness (Jack Wang)   
  - RDMA/hns: Fix insufficient extend DB for VFs. (Chengchang Tang)   
  - RDMA/hns: Fix undifined behavior caused by invalid max_sge (Chengchang Tang)   
  - RDMA/hns: Fix missing pagesize and alignment check in FRMR (Chengchang Tang)   
  - macintosh/therm_windtunnel: fix module unload. (Nick Bowler)   
  - powerpc/xmon: Fix disassembly CPU feature checks (Michael Ellerman)   
  - net: missing check virtio (Denis Arefev) [Orabug: 36964424] {CVE-2024-43817}
  - vhost/vsock: always initialize seqpacket_allow (Michael S. Tsirkin) [Orabug: 36983999] {CVE-2024-43873}
  - PCI: endpoint: Clean up error handling in vpci_scan_bus() (Dan Carpenter) [Orabug: 36984004] {CVE-2024-43875}
  - Input: elan_i2c - do not leave interrupt disabled on suspend failure (Dmitry Torokhov)   
  - RDMA/device: Return error earlier if port in not valid (Leon Romanovsky)   
  - mtd: make mtd_test.c a separate module (Arnd Bergmann)   
  - ASoC: max98088: Check for clk_prepare_enable() error (Chen Ni)   
  - RDMA/rxe: Don't set BTH_ACK_MASK for UC or UD QPs (Honggang LI)   
  - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (Leon Romanovsky)   
  - RDMA/mlx4: Fix truncated output warning in mad.c (Leon Romanovsky)   
  - Input: qt1050 - handle CHIP_ID reading error (Andrei Lalaev)   
  - RDMA/cache: Release GID table even if leak is detected (Leon Romanovsky)   
  - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (Chiara Meiohas)   
  - coresight: Fix ref leak when of_coresight_parse_endpoint() fails (James Clark)   
  - clk: qcom: gcc-sc7280: Update force mem core bit for UFS ICE clock (Taniya Das)   
  - clk: qcom: branch: Add helper functions for setting retain bits (Konrad Dybcio)   
  - PCI: Fix resource double counting on remove & rescan (Ilpo Järvinen)   
  - SUNRPC: Fixup gss_status tracepoint error output (Benjamin Coddington)   
  - sparc64: Fix incorrect function signature and add prototype for prom_cif_init (Andreas Larsson)   
  - ext4: avoid writing unitialized memory to disk in EA inodes (Jan Kara)   
  - ext4: don't track ranges in fast_commit if inode has inlined data (Luis Henriques (SUSE))   
  - ext4: return early for non-eligible fast_commit track events (Ritesh Harjani)   
  - NFSv4.1 another fix for EXCHGID4_FLAG_USE_PNFS_DS for DS server (Olga Kornievskaia)   
  - SUNRPC: avoid soft lockup when transmitting UDP to reachable server. (NeilBrown)   
  - xprtrdma: Fix rpcrdma_reqs_reset() (Chuck Lever)   
  - mfd: omap-usb-tll: Use struct_size to allocate tll (Javier Carrasco)   
  - mfd: rsmu: Split core code into separate module (Arnd Bergmann)   
  - perf intel-pt: Fix exclude_guest setting (Adrian Hunter)   
  - perf intel-pt: Fix aux_watermark calculation for 64-bit size (Adrian Hunter)   
  - media: venus: flush all buffers in output plane streamoff (Dikshita Agarwal)   
  - ext4: fix infinite loop when replaying fast_commit (Luis Henriques (SUSE))   
  - Revert "leds: led-core: Fix refcount leak in of_led_get()" (Luca Ceresoli)   
  - drm/qxl: Add check for drm_cvt_mode (Chen Ni) [Orabug: 36964455] {CVE-2024-43829}
  - drm/etnaviv: fix DMA direction handling for cached RW buffers (Lucas Stach)   
  - perf report: Fix condition in sort__sym_cmp() (Namhyung Kim)   
  - leds: trigger: Unregister sysfs attributes before calling deactivate() (Hans de Goede) [Orabug: 36964458] {CVE-2024-43830}
  - drm/mediatek: Add DRM_MODE_ROTATE_0 to rotation property (Hsiao Chien Sung)   
  - drm/mediatek: Add missing plane settings when async update (Hsiao Chien Sung)   
  - media: renesas: vsp1: Store RPF partition configuration per RPF instance (Laurent Pinchart)   
  - media: renesas: vsp1: Fix _irqsave and _irq mix (Laurent Pinchart)   
  - media: uvcvideo: Override default flags (Daniel Schaefer)   
  - saa7134: Unchecked i2c_transfer function result fixed (Aleksandr Burakov)   
  - media: i2c: Fix imx412 exposure control (Bryan O'Donoghue)   
  - media: imon: Fix race getting ictx->lock (Ricardo Ribalda)   
  - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (Zheng Yejian)   
  - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (Douglas Anderson)   
  - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (Douglas Anderson)   
  - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (Friedrich Vock)   
  - drm/amd/pm: Fix aldebaran pcie speed reporting (Lijo Lazar)   
  - xdp: fix invalid wait context of page_pool_destroy() (Taehee Yoo) [Orabug: 36964469] {CVE-2024-43834}
  - selftests: forwarding: devlink_lib: Wait for udev events after reloading (Amit Cohen)   
  - bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o (Alan Maguire)   
  - bna: adjust 'name' buf size of bna_tcb and bna_ccb structures (Alexey Kodanev) [Orabug: 36964479] {CVE-2024-43839}
  - bpf: annotate BTF show functions with __printf (Alan Maguire)   
  - selftests/bpf: Close fd in error path in drop_on_reuseport (Geliang Tang)   
  - locking/rwsem: Add __always_inline annotation to __down_write_common() and inlined callers (John Stultz)   
  - wifi: virt_wifi: don't use strlen() in const context (Johannes Berg)   
  - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (Gaosheng Cui)   
  - wifi: virt_wifi: avoid reporting connection success with wrong SSID (En-Wei Wu) [Orabug: 36964486] {CVE-2024-43841}
  - perf: Fix default aux_watermark calculation (Adrian Hunter)   
  - perf: Prevent passing zero nr_pages to rb_alloc_aux() (Adrian Hunter)   
  - perf: Fix perf_aux_size() for greater-than 32-bit size (Adrian Hunter)   
  - perf/x86/intel/pt: Fix pt_topa_entry_for_page() address calculation (Adrian Hunter)   
  - netfilter: nf_tables: rise cap on SELinux secmark context (Pablo Neira Ayuso)   
  - libbpf: Checking the btf_type kind when fixing variable offsets (Donglin Peng)   
  - net: fec: Fix FEC_ECR_EN1588 being cleared on link-down (Csókás, Bence)   
  - net: fec: Refactor: #define magic constants (Csókás Bence)   
  - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (Baochen Qiang) [Orabug: 36984009] {CVE-2024-43879}
  - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (Baochen Qiang)   
  - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (Baochen Qiang)   
  - mlxsw: spectrum_acl: Fix ACL scale regression and firmware errors (Ido Schimmel)   
  - mlxsw: spectrum_acl_erp: Fix object nesting warning (Ido Schimmel) [Orabug: 36984012] {CVE-2024-43880}
  - lib: objagg: Fix general protection fault (Ido Schimmel) [Orabug: 36964494] {CVE-2024-43846}
  - selftests/bpf: Check length of recv in test_sockmap (Geliang Tang)   
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Guangguan Wang)   
  - tcp: fix races in tcp_v[46]_err() (Eric Dumazet)   
  - tcp: fix race in tcp_write_err() (Eric Dumazet)   
  - tcp: add tcp_done_with_error() helper (Eric Dumazet)   
  - tcp: annotate lockless access to sk->sk_err (Eric Dumazet)   
  - tcp: annotate lockless accesses to sk->sk_err_soft (Eric Dumazet)   
  - net: esp: cleanup esp_output_tail_tcp() in case of unsupported ESPINTCP (Hagar Hemdan)   
  - selftests/bpf: Fix prog numbers in test_sockmap (Geliang Tang)   
  - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (Samasth Norway Ananda)   
  - firmware: turris-mox-rwtm: Initialize completion before mailbox (Marek Behún)   
  - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (Marek Behún)   
  - firmware: turris-mox-rwtm: Do not complete if there are no waiters (Marek Behún)   
  - vmlinux.lds.h: catch .bss..L* sections into BSS") (Christophe Leroy)   
  - ARM: spitz: fix GPIO assignment for backlight (Dmitry Torokhov)   
  - ARM: pxa: spitz: use gpio descriptors for audio (Arnd Bergmann)   
  - m68k: cmpxchg: Fix return value for default case in __arch_xchg() (Thorsten Blum)   
  - x86/xen: Convert comma to semicolon (Chen Ni)   
  - m68k: atari: Fix TT bootup freeze / unexpected (SCU) interrupt messages (Eero Tamminen)   
  - arm64: dts: amlogic: gx: correct hdmi clocks (Jerome Brunet)   
  - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add ports node for anx7625 (Chen-Yu Tsai)   
  - arm64: dts: mediatek: mt7622: fix "emmc" pinctrl mux (Rafał Miłecki)   
  - arm64: dts: mediatek: mt8183-kukui: Drop bogus output-enable property (Chen-Yu Tsai)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PCIe reset polarity (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix SPI0 chip selects (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix board reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: fix PHY reset (Michael Walle)   
  - ARM: dts: imx6qdl-kontron-samx6i: move phy reset into phy-node (Marco Felsch)   
  - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (Jonas Karlman)   
  - soc: qcom: pdr: fix parsing of domains lists (Dmitry Baryshkov)   
  - soc: qcom: pdr: protect locator_addr with the main mutex (Dmitry Baryshkov) [Orabug: 36964502] {CVE-2024-43849}
  - memory: fsl_ifc: Make FSL_IFC config visible and selectable (Esben Haabendal)   
  - arm64: dts: qcom: msm8996: specify UFS core_clk frequencies (Dmitry Baryshkov)   
  - soc: qcom: rpmh-rsc: Ensure irqs aren't disabled by rpmh_rsc_send_data() callers (Stephen Boyd)   
  - arm64: dts: qcom: sm8250: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings (Dmitry Baryshkov)   
  - arm64: dts: qcom: sdm845: add power-domain to UFS PHY (Dmitry Baryshkov)   
  - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (Guenter Roeck)   
  - hwmon: (max6697) Fix underflow when writing limit attributes (Guenter Roeck)   
  - drm/meson: fix canvas release in bind function (Yao Zi)   
  - pwm: stm32: Always do lazy disabling (Uwe Kleine-König)   
  - hwmon: (adt7475) Fix default duty on fan is disabled (Wayne Tung)   
  - x86/platform/iosf_mbi: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)   
  - x86/pci/xen: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/pci/intel_mid_pci: Fix PCIBIOS_* return code handling (Ilpo Järvinen)   
  - x86/of: Return consistent error type from x86_of_pci_irq_enable() (Ilpo Järvinen)   
  - hfsplus: fix to avoid false alarm of circular locking (Chao Yu)   
  - block: initialize integrity buffer to zero before writing it to media (Christoph Hellwig) [Orabug: 36964514] {CVE-2024-43854}
  - block: cleanup bio_integrity_prep (Jinyoung Choi)   
  - block: refactor to use helper (Nitesh Shetty)   
  - platform/chrome: cros_ec_debugfs: fix wrong EC message version (Tzung-Bi Shih)   
  - f2fs: fix to don't dirty inode for readonly filesystem (Chao Yu) [Orabug: 36964212] {CVE-2024-42297}
  - f2fs: fix return value of f2fs_convert_inline_inode() (Chao Yu) [Orabug: 36964207] {CVE-2024-42296}
  - LTS version: v5.15.164 (Vijayendra Suman)   
  - tap: add missing verification for short frame (Si-Wei Liu)   [Orabug: 36879156] {CVE-2024-41090} 
  - tun: add missing verification for short frame (Dongli Zhang)   [Orabug: 36879156] {CVE-2024-41091} 
  - wifi: rt2x00: use explicitly signed or unsigned types (Jason A. Donenfeld)   
  - filelock: Fix fcntl/close race recovery compat path (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - ALSA: pcm_dmaengine: Don't synchronize DMA channel when DMA is paused (Shengjiu Wang)   
  - arm64: dts: qcom: sdm630: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - arm64: dts: qcom: msm8996: Disable SS instance in Parkmode for USB (Krishna Kurapati)   
  - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (Seunghun Han)   
  - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (Edson Juliano Drosdeck)   
  - fs/ntfs3: Validate ff offset (lei lu) [Orabug: 36891672] {CVE-2024-41019}
  - jfs: don't walk off the end of ealist (lei lu) [Orabug: 36891666] {CVE-2024-41017}
  - ocfs2: add bounds checking to ocfs2_check_dir_entry() (lei lu) [Orabug: 36891654] {CVE-2024-41015}
  - Add gitignore file for samples/fanotify/ subdirectory (Linus Torvalds)   
  - docs: Fix formatting of literal sections in fanotify docs (Gabriel Krisman Bertazi)   
  - samples: Make fs-monitor depend on libc and headers (Gabriel Krisman Bertazi)   
  - samples: Add fs error monitoring example (Gabriel Krisman Bertazi)   
  - wifi: mac80211: disable softirqs for queued frame handling (Johannes Berg)   
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (SeongJae Park)   
  - minmax: relax check to allow comparison between unsigned arguments and signed constants (David Laight)   
  - minmax: allow comparisons of 'int' against 'unsigned char/short' (David Laight)   
  - minmax: allow min()/max()/clamp() if the arguments have the same signedness. (David Laight)   
  - minmax: fix header inclusions (Andy Shevchenko)   
  - minmax: clamp more efficiently by avoiding extra comparison (Jason A. Donenfeld)   
  - minmax: sanity check constant bounds when clamping (Jason A. Donenfeld)   
  - tracing: Define the is_signed_type() macro once (Bart Van Assche)   
  - spi: mux: set ctlr->bits_per_word_mask (David Lechner)   
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis) [Orabug: 36896968] {CVE-2024-41059}
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)   
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)   
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() (Puranjay Mohan)   
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)   
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer) [Orabug: 36896974] {CVE-2024-41060}
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa) [Orabug: 36896993] {CVE-2024-41063}
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)   
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar) [Orabug: 36897001] {CVE-2024-41064}
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K) [Orabug: 36897008] {CVE-2024-41065}
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)   
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)   
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)   
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (Aivaz Latypov)   
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana) [Orabug: 36897343] {CVE-2024-41078}
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (Armin Wolf)   
  - platform/x86: lg-laptop: Change ACPI device id (Armin Wolf)   
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (Armin Wolf)   
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button (Armin Wolf)   
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens) [Orabug: 36897031] {CVE-2024-41068}
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)   
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)   
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)   
  - ALSA: dmaengine: Synchronize dma channel after drop() (Jai Luthra)   
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)   
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table (Tobias Jakobi)   
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)   
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)   
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)   
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (Alexey Makhalov)   
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman) [Orabug: 36897047] {CVE-2024-41070}
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov) [Orabug: 36897311] {CVE-2024-41072}
  - nvme: avoid double free special payload (Chunguang Xu) [Orabug: 36897316] {CVE-2024-41073}
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)   
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)   
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)   
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)   
  - null_blk: fix validation of block size (Andreas Hindborg) [Orabug: 36897338] {CVE-2024-41077}
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (Wei Li)   
  - ila: block BH in ila_output() (Eric Dumazet) [Orabug: 36897359] {CVE-2024-41081}
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() (Eric Dumazet)   
  - Input: silead - Always support 10 fingers (Hans de Goede)   
  - selftests/openat2: Fix build warnings on ppc64 (Michael Ellerman)   
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)   
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (Ayala Beker)   
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (Yedidya Benshimol)   
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (Yedidya Benshimol)   
  - wifi: mac80211: handle tasklet frames before stopping (Johannes Berg)   
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)   
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (Dhananjay Ugwekar)   
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)   
  - ACPI: EC: Abort address space access upon error (Armin Wolf)   
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)   
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap)   
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap)   
  - scsi: core: alua: I/O errors for ALUA state transitions (Martin Wilck)   
  - scsi: core: Fix a use-after-free (Bart Van Assche)   
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann) [Orabug: 36850238] {CVE-2024-41009}
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)   
  - ARM: 9324/1: fix get_user() broken with veneer (Masahiro Yamada)   
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn) [Orabug: 36874755] {CVE-2024-41012} {CVE-2024-41020}
  - gcc-plugins: Rename last_stmt() for GCC 14+ (Kees Cook)


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.5.el9uek]
changelog:
  - mm/hugetlb: fix adjusting poison page flag in non-HVO scenario (Jane Chu)  [Orabug: 37182268]  
  - x86/bugs: Adjust SRSO mitigation to new features (Boris Ostrovsky)  [Orabug: 37145844]  
  - net/mlx5: disable the 'fast unload' feature on Exadata systems (Qing Huang)  [Orabug: 37093170]  
  - NFS: remove revoked delegation from server's delegation list (Dai Ngo)  [Orabug: 36990366]  
  - perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology() (Alexander Antonov)  [Orabug: 36882937]  {CVE-2023-52450}


author: Vijayendra Suman <vijayendra.suman@oracle.com> [5.15.0-302.167.6.el9uek]
changelog:
  - ice: Add a per-VF limit on number of FDIR filters (Ahmed Zaki)  [Orabug: 36964088]  {CVE-2024-42291} 
  - scsi: lpfc: Fix a possible null pointer dereference (Huai-Yuan Liu)  [Orabug: 36964437]  {CVE-2024-43821} 
  - power: reset: pwr-mlxbf: support graceful shutdown (Asmaa Mnebhi)  [Orabug: 37208029]  
  - gpio: mlxbf3: Support shutdown() function (Asmaa Mnebhi)  [Orabug: 37208029]  
  - sdhci-of-dwcmshc: disable PM runtime in dwcmshc_remove() (Liming Sun)  [Orabug: 37208029]  
  - ocfs2: reserve space for inline xattr before attaching reflink tree (Gautham Ananthakrishna)  [Orabug: 37199019]  
  - Revert "ocfs2: ocfs2 crash due to invalid h_next_leaf_blk value in extent block" (Gautham Ananthakrishna)  [Orabug: 37199019]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-103.40.4.el9uek]
changelog:
  - rds: Fix NULL ptr deref in xas_start (Håkon Bugge) [Orabug: 38169301]
  - KVM: x86: use array_index_nospec with indices that come from guest (Thijs Raymakers) [Orabug: 38325898,38440300] {CVE-2025-39823}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-104.43.1.el9uek]
changelog:
  - net/rds: Add support for RDS_CMSG_TOS (Gerd Rausch) [Orabug: 37899646]
  - net/rds: Add support RDS_FEATURE ELF notes (Gerd Rausch) [Orabug: 38063326]
  - nvme: revert the cross-controller atomic write size validation (Christoph Hellwig) [Orabug: 38318975]
  - nvme: fix atomic write size validation (Christoph Hellwig) [Orabug: 38318975]
  - nvme: refactor the atomic write unit detection (Christoph Hellwig) [Orabug: 38318975]
  - ACPI: APEI: EINJ: fix potential NULL dereference in __einj_error_inject() (Charles Han) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Check if user asked for EINJV2 injection (Tony Luck) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Fix trigger actions (Tony Luck) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Fix check and iounmap of uninitialized pointer p (Colin Ian King) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Fix less than zero comparison on a size_t variable (Colin Ian King) [Orabug: 38343326]
  - ACPI: APEI: EINJ: prevent memory corruption in error_type_set() (Dan Carpenter) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Clean up on error in einj_probe() (Dan Carpenter) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Update the documentation for EINJv2 support (Zaid Alali) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Enable EINJv2 error injections (Zaid Alali) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Create debugfs files to enter device id and syndrome (Tony Luck) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Discover EINJv2 parameters (Zaid Alali) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Add einjv2 extension struct (Zaid Alali) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Enable the discovery of EINJv2 capabilities (Zaid Alali) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Fix kernel test sparse warnings (Zaid Alali) [Orabug: 38343326]
  - ACPI: APEI: EINJ: Remove redundant calls to einj_get_available_error_type() (Zaid Alali) [Orabug: 38343326]
  - ACPICA: Logfile: Changes for version 20241212 (Saket Dumbre) [Orabug: 38343326]
  - ACPICA: Fix warnings from PR #295 merge (Saket Dumbre) [Orabug: 38343326]
  - ACPICA: Fix typo in comments for SRAT structures (Adam Lackorzynski) [Orabug: 38343326]
  - ACPICA: actbl1: Add EINJv2 get error type action (Zaid Alali) [Orabug: 38343326]
  - ACPICA: actbl1: Update values to hex to follow ACPI specs (Zaid Alali) [Orabug: 38343326]
  - ACPICA: New release 20240927 (Saket Dumbre) [Orabug: 38343326]
  - perf vendor events arm64: AmpereOne/AmpereOneX: Mark LD_RETIRED impacted by errata (Ilkka Koskinen) [Orabug: 38343326]
  - tracepoint: Print the function symbol when tracepoint_debug is set (Huang Shijie) [Orabug: 38343326]
  - firmware: smccc: Support optional Arm SMCCC SOC_ID name (Paul Benoit) [Orabug: 38343326]
  - LTS version: v6.12.43 (Jack Vogel)
  - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is disabled (Li Chen)
  - dm: split write BIOs on zone boundaries when zone append is not emulated (Shin'Ichiro Kawasaki)
  - rcu: Fix racy re-initialization of irq_work causing hangs (Frederic Weisbecker)
  - drm/amd/display: Allow DCN301 to clear update flags (Ivan Lipski)
  - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS (Arnd Bergmann)
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jens Axboe)
  - ata: libata-sata: Add link_power_management_supported sysfs attribute (Damien Le Moal)
  - rust: workaround `rustdoc` target modifiers bug (Miguel Ojeda)
  - rust: kbuild: clean output before running `rustdoc` (Miguel Ojeda)
  - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C (Siddharth Vadapalli)
  - arm64: dts: ti: k3-j722s-evm: Fix USB2.0_MUX_SEL to select Type-C (Hrushikesh Salunke)
  - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports (Lukas Wunner)
  - PCI: Allow PCI bridges to go to D3Hot on all non-x86 (Manivannan Sadhasivam)
  - PCI: Store all PCIe Supported Link Speeds (Ilpo Järvinen)
  - smb: client: fix netns refcount leak after net_passive changes (Wang Zhaolong)
  - net: better track kernel sockets lifetime (Eric Dumazet) [Orabug: 37766278] {CVE-2025-21884}
  - net: Add net_passive_inc() and net_passive_dec(). (Kuniyuki Iwashima)
  - mfd: cros_ec: Separate charge-control probing from USB-PD (Thomas Weißschuh)
  - HID: apple: avoid setting up battery timer for devices without battery (Aditya Garg)
  - tools/hv: fcopy: Fix irregularities with size of ring buffer (Naman Jain)
  - wifi: mac80211: check basic rates validity in sta_link_apply_parameters (Mikhail Lobanov)
  - HID: magicmouse: avoid setting up battery timer when not needed (Aditya Garg)
  - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages (Pedro Falcato)
  - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros (Willy Tarreau)
  - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Marek Szyprowski)
  - media: uvcvideo: Do not mark valid metadata as invalid (Ricardo Ribalda)
  - media: venus: Fix OOB read due to missing payload bound check (Vedang Nagar)
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Youngjun Lee) [Orabug: 38394814] {CVE-2025-38680}
  - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock (Breno Leitao)
  - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup() (Waiman Long)
  - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (Anshuman Khandual)
  - mm, slab: restore NUMA policy support for large kmalloc (Vlastimil Babka)
  - parisc: Makefile: fix a typo in palo.conf (Randy Dunlap)
  - hv_netvsc: Fix panic during namespace deletion with VF (Haiyang Zhang) [Orabug: 38394829] {CVE-2025-38683}
  - net/sched: ets: use old 'nbands' while purging unused classes (Davide Caratti) [Orabug: 38394835] {CVE-2025-38684}
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Sravan Kumar Gundu) [Orabug: 38394842] {CVE-2025-38685}
  - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry (Suren Baghdasaryan) [Orabug: 38394850] {CVE-2025-38686}
  - xfs: fix scrub trace with null pointer in quotacheck (Andrey Albershteyn)
  - btrfs: do not allow relocation of partially dropped subvolumes (Qu Wenruo) [Orabug: 38423270] {CVE-2025-39738}
  - btrfs: fix iteration bug in __qgroup_excl_accounting() (Boris Burkov)
  - btrfs: zoned: do not select metadata BG as finish target (Naohiro Aota)
  - btrfs: error on missing block group when unaccounting log tree extent buffers (Filipe Manana)
  - btrfs: fix log tree replay failure due to file with 0 links and extents (Filipe Manana)
  - btrfs: clear dirty status from extent buffer on error at insert_new_root() (Filipe Manana)
  - btrfs: don't skip remaining extrefs if dir not found during log replay (Filipe Manana)
  - btrfs: qgroup: fix qgroup create ioctl returning success after quotas disabled (Filipe Manana)
  - btrfs: populate otime when logging an inode item (Qu Wenruo)
  - btrfs: fix ssd_spread overallocation (Boris Burkov)
  - btrfs: don't ignore inode missing when replaying log tree (Filipe Manana)
  - btrfs: qgroup: set quota enabled bit if quota disable fails flushing reservations (Filipe Manana)
  - btrfs: zoned: do not remove unwritten non-data block group (Naohiro Aota)
  - btrfs: abort transaction during log replay if walk_log_tree() failed (Filipe Manana)
  - btrfs: zoned: use filesystem size not disk size for reclaim decision (Johannes Thumshirn)
  - cdc-acm: fix race between initial clearing halt and open (Oliver Neukum)
  - thunderbolt: Fix copy+paste error in match_service_id() (Eric Biggers)
  - comedi: fix race between polling and detaching (Ian Abbott)
  - usb: typec: ucsi: Update power_supply on power role change (Myrrh Periwinkle)
  - misc: rtsx: usb: Ensure mmc child device is active when card is present (Ricky Wu)
  - usb: core: config: Prevent OOB read in SS endpoint companion parsing (Xinyu Liu) [Orabug: 38423419] {CVE-2025-39760}
  - ext4: initialize superblock fields in the kballoc-test.c kunit tests (Zhang Yi)
  - ext4: fix largest free orders lists corruption on mb_optimize_scan switch (Baokun Li)
  - ext4: fix zombie groups in average fragment size lists (Baokun Li)
  - iommufd: Prevent ALIGN() overflow (Jason Gunthorpe) [Orabug: 38394859] {CVE-2025-38688}
  - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (Nicolin Chen)
  - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Alexey Klimov) [Orabug: 38423279] {CVE-2025-39739}
  - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (Lu Baolu)
  - cifs: reset iface weights when we cannot find a candidate (Shyam Prasad N)
  - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src (Christian Marangi)
  - dm: Always split write BIOs to zoned device limits (Damien Le Moal) [Orabug: 38429172] {CVE-2025-39792}
  - block: Introduce bio_needs_zone_write_plugging() (Damien Le Moal)
  - mm/damon/core: commit damos->target_nid (Bijan Tabatabai)
  - drm/amdgpu: fix incorrect vm flags to map bo (Jack Xiao)
  - drm/amdgpu: fix vram reservation issue (Yipeng Chai)
  - cifs: Fix collect_sample() to handle any iterator type (David Howells)
  - ASoC: fsl_sai: replace regmap_write with regmap_update_bits (Shengjiu Wang)
  - scsi: lpfc: Remove redundant assignment to avoid memory leak (Jiasheng Jiang)
  - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe (Meagan Lloyd)
  - pNFS: Fix uninited ptr deref in block/scsi layout (Sergey Bashirov) [Orabug: 38394864] {CVE-2025-38691}
  - pNFS: Handle RPC size limit for layoutcommits (Sergey Bashirov)
  - pNFS: Fix disk addr range check in block/scsi layout (Sergey Bashirov)
  - pNFS: Fix stripe mapping in block/scsi layout (Sergey Bashirov)
  - block: avoid possible overflow for chunk_sectors check in blk_stack_limits() (John Garry) [Orabug: 38429189] {CVE-2025-39795}
  - ASoC: Intel: avs: Fix uninitialized pointer error in probe() (Cezary Rojewski)
  - net: phy: smsc: add proper reset flags for LAN8710A (Csaba Buday)
  - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table (Thomas Croft)
  - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (Yu Kuai)
  - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in _smbd_get_connection (Stefan Metzmacher)
  - tools/power turbostat: Handle cap_get_proc() ENOSYS (Calvin Owens)
  - tools/power turbostat: Fix build with musl (Calvin Owens)
  - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions (Len Brown)
  - ipmi: Fix strcpy source and destination the same (Corey Minyard)
  - kconfig: lxdialog: fix 'space' to (de)select options (Yann E. MORIN)
  - kconfig: gconf: fix potential memory leak in renderer_edited() (Masahiro Yamada)
  - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed() (Masahiro Yamada)
  - ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Breno Leitao)
  - vfio/mlx5: fix possible overflow in tracking max message size (Artem Sadovnikov)
  - scsi: aacraid: Stop using PCI_IRQ_AFFINITY (John Garry)
  - scsi: target: core: Generate correct identifiers for PR OUT transport IDs (Maurizio Lombardi)
  - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ranjan Kumar)
  - kconfig: nconf: Ensure null termination where strncpy is used (Shankari Anand)
  - vfio/type1: conditional rescheduling while pinning (Keith Busch)
  - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c (Suchit Karunakaran)
  - printk: nbcon: Allow reacquire during panic (John Ogness)
  - f2fs: check the generic conditions first (Jaegeuk Kim)
  - exfat: add cluster chain loop check for dir (Yuezhang Mo) [Orabug: 38394871] {CVE-2025-38692}
  - i2c: Force DLL0945 touchpad i2c freq to 100khz (Fangzhong Zhou)
  - apparmor: fix x_table_lookup when stacking is not the first entry (John Johansen)
  - apparmor: use the condition in AA_BUG_FMT even with debug disabled (Mateusz Guzik)
  - dm-table: fix checking for rq stackable devices (Benjamin Marzinski)
  - dm-mpath: don't print the "loaded" message if registering fails (Mikulas Patocka)
  - i3c: master: Initialize ret in i3c_i2c_notifier_call() (Jorge Marques)
  - i3c: don't fail if GETHDRCAP is unsupported (Wolfram Sang)
  - apparmor: shift ouid when mediating hard links in userns (Gabriel Totev)
  - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341 (Meagan Lloyd)
  - i3c: add missing include to internal header (Wolfram Sang)
  - module: Prevent silent truncation of module name in delete_module(2) (Petr Pavlu)
  - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (Purva Yeshi)
  - soundwire: Move handle_nested_irq outside of sdw_dev_lock (Charles Keepax)
  - soundwire: amd: cancel pending slave status handling workqueue during remove sequence (Vijendar Mukunda)
  - soundwire: amd: serialize amd manager resume sequence during pm_prepare (Vijendar Mukunda)
  - clk: renesas: rzg2l: Postpone updating priv->clks[] (Claudiu Beznea)
  - crypto: ccp - Add missing bootloader info reg for pspv6 (Mario Limonciello)
  - crypto: octeontx2 - add timeout for load_fvc completion poll (Bharat Bhushan)
  - media: uvcvideo: Fix bandwidth issue for Alcor camera (Chenchangcheng)
  - media: uvcvideo: Add quirk for HP Webcam HD 2300 (Ricardo Ribalda)
  - media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar (Alex Guo) [Orabug: 38394878] {CVE-2025-38693}
  - media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb() (Alex Guo) [Orabug: 38394885] {CVE-2025-38694}
  - media: usb: hdpvr: disable zero-length read messages (Wolfram Sang)
  - media: tc358743: Increase FIFO trigger level to 374 (Dave Stevenson)
  - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt (Dave Stevenson)
  - media: tc358743: Check I2C succeeded during probe (Dave Stevenson)
  - pinctrl: stm32: Manage irq affinity settings (Cheick Traore)
  - scsi: mpi3mr: Correctly handle ATA device errors (Damien Le Moal)
  - scsi: mpt3sas: Correctly handle ATA device errors (Damien Le Moal)
  - power: supply: qcom_battmgr: Add lithium-polymer entry (Abel Vesa)
  - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure (Justin Tee) [Orabug: 38394892] {CVE-2025-38695}
  - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk (Justin Tee)
  - RDMA/core: reduce stack using in nldev_stat_get_doit() (Arnd Bergmann)
  - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (Yury Norov) [Orabug: 38423284] {CVE-2025-39742}
  - dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs (Amelie Delaunay)
  - leds: leds-lp50xx: Handle reg to get correct multi_index (Johan Adolfsson)
  - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Niklas Söderlund)
  - media: ipu-bridge: Add _HID for OV5670 (Daniel Scally)
  - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED (Michal Wilczynski)
  - MIPS: lantiq: falcon: sysctrl: fix request memory check logic (Shiji Yang)
  - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO (Thomas Weißschuh)
  - crypto: jitter - fix intermediary handling (Markus Theil)
  - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (Kalesh Ap)
  - media: hi556: Fix reset GPIO timings (Hans de Goede)
  - jfs: upper bound check of tree index in dbAllocAG (Arnaud Lecomte)
  - jfs: Regular file corruption check (Edward Adam Davis)
  - jfs: truncate good inode pages when hard link is 0 (Lizhi Xu)
  - scsi: bfa: Double-free fix (Jackysliu) [Orabug: 38394922] {CVE-2025-38699}
  - watchdog: iTCO_wdt: Report error if timeout configuration fails (Ziyan Fu)
  - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free} (Shiji Yang)
  - clk: qcom: ipq5018: keep XO clock always on (George Moussalem)
  - hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state (Florin Leotescu)
  - watchdog: dw_wdt: Fix default timeout (Sebastian Reichel)
  - fs/orangefs: use snprintf() instead of sprintf() (Amir Mohammad Jahangirzad)
  - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated (Showrya M N) [Orabug: 38394929] {CVE-2025-38700}
  - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal (Geraldo Nascimento)
  - mfd: axp20x: Set explicit ID for AXP313 regulator (Chen-Yu Tsai)
  - clk: tegra: periph: Fix error handling and resolve unsigned compare warning (Pei Xiao)
  - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr (Theodore Ts'O) [Orabug: 38394935] {CVE-2025-38701}
  - crypto: hisilicon/hpre - fix dma unmap sequence (Zhiqi Song)
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Yongzhen Zhang) [Orabug: 38394942] {CVE-2025-38702}
  - cifs: Fix calling CIFSFindFirst() for root path without msearch (Pali Rohár)
  - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition (Aaron Plattner)
  - drm/amd/display: Disable dsc_power_gate for dcn314 by default (Roman Li)
  - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported (Mario Limonciello)
  - drm/amd/display: Only finalize atomic_obj if it was initialized (Mario Limonciello)
  - vhost: fail early when __vhost_add_used() fails (Jason Wang)
  - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page (Will Deacon)
  - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325 (Álvaro Fernández Rojas)
  - rcu: Fix rcu_read_unlock() deadloop due to IRQ work (Joel Fernandes) [Orabug: 38423299] {CVE-2025-39744}
  - drm/ttm: Respect the shrinker core free target (Tvrtko Ursulin)
  - drm/amd/display: Avoid trying AUX transactions on disconnected ports (Wayne Lin)
  - drm/amd/display: Update DMCUB loading sequence for DCN3.5 (Nicholas Kazlauskas)
  - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size (Yonghong Song)
  - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB page size (Yonghong Song)
  - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP (Ihor Solodrai)
  - uapi: in6: restore visibility of most IPv6 socket options (Jakub Kicinski)
  - drm/ttm: Should to return the evict error (Emily Deng)
  - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range (Lad Prabhakar)
  - net: ncsi: Fix buffer overflow in fetching version id (Hari Kalavakunta)
  - drm/xe: Make dma-fences compliant with the safe access rules (Tvrtko Ursulin)
  - ionic: clean dbpage in de-init (Shannon Nelson)
  - wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc() (Thomas Fourier)
  - wifi: rtw89: scan abort when assign/unassign_vif (Chih-Kang Chang)
  - ptp: Use ratelimite for freerun error message (Breno Leitao)
  - bpftool: Fix JSON writer resource leak in version command (Yuan Chen)
  - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325 (Álvaro Fernández Rojas)
  - net: dsa: b53: prevent DIS_LEARNING access on BCM5325 (Álvaro Fernández Rojas)
  - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325 (Álvaro Fernández Rojas)
  - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325 (Álvaro Fernández Rojas)
  - net: dsa: b53: ensure BCM5325 PHYs are enabled (Álvaro Fernández Rojas)
  - gve: Return error for unknown admin queue command (Alok Tiwari)
  - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs (Gal Pressman)
  - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured (Gal Pressman)
  - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual (Mario Limonciello)
  - dpaa_eth: don't use fixed_phy_change_carrier (Heiner Kallweit)
  - wifi: iwlegacy: Check rate_idx range after addition (Stanislaw Gruszka)
  - arm64: stacktrace: Check kretprobe_find_ret_addr() return value (Mark Rutland)
  - netmem: fix skb_frag_address_safe with unreadable skbs (Mina Almasry)
  - powerpc: floppy: Add missing checks after DMA map (Thomas Fourier)
  - wifi: ath12k: Decrement TID on RX peer frag setup error handling (Karthikeyan Kathirvel)
  - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (Raj Kumar Bhagat)
  - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. (Thomas Fourier)
  - wifi: mac80211: update radar_required in channel context after channel switch (Ramya Gnanasekar)
  - drm/amd/display: Initialize mode_select to 0 (Alex Hung)
  - drm/amd/display: Fix 'failed to blank crtc!' (Wen Chen)
  - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (Anjaneyulu)
  - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (Rand Deeb)
  - lib: packing: Include necessary headers (Nathan Lynch)
  - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (Hari Chandrakanthan)
  - wifi: ath12k: Add memset and update default rate value in wmi tx completion (Sarika Sharma)
  - wifi: ath10k: shutdown driver when hardware is unreliable (Kang Yang) [Orabug: 38423316] {CVE-2025-39746}
  - drm/amd/display: Separate set_gsl from set_gsl_source_select (Ilya Bakoulin)
  - net: fec: allow disable coalescing (Jonas Rebmann)
  - net: ieee8021q: fix insufficient table-size assertion (Rubenkelevra)
  - ACPI: Suppress misleading SPCR console message when SPCR table is absent (Li Chen)
  - net: atlantic: add set_power to fw_ops for atl2 to fix wol (Eric Work)
  - xfrm: Duplicate SPI Handling (Aakash Kumar S) [Orabug: 38429199] {CVE-2025-39797}
  - net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths() (Jianrong Zhang)
  - net: thunderbolt: Enable end-to-end flow control also in transmit (Jianrong Zhang)
  - drm/xe/xe_query: Use separate iterator while filling GT list (Matt Roper)
  - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace (Mark Brown)
  - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (David Bauer)
  - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (Bitterblue Smith)
  - drm/imagination: Clear runtime PM errors while resetting the GPU (Alessio Belle)
  - perf/arm: Add missing .suppress_bind_attrs (Robin Murphy)
  - drm/msm: Add error handling for krealloc in metadata setup (Yuan Chen) [Orabug: 38423323] {CVE-2025-39747}
  - drm/msm: use trylock for debugfs (Rob Clark)
  - wifi: mac80211: fix rx link assignment for non-MLO stations (Hari Chandrakanthan)
  - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access (Zqiang) [Orabug: 38394958] {CVE-2025-38704}
  - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc(). (Kuniyuki Iwashima)
  - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer (Thomas Fourier)
  - s390/early: Copy last breaking event address to pt_regs (Heiko Carstens)
  - wifi: mac80211: avoid weird state in error path (Miri Korenblit)
  - wifi: mac80211: don't complete management TX on SAE commit (Johannes Berg)
  - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails (Chris Mason)
  - net: phy: bcm54811: PHY initialization (Kamil Horák)
  - s390/stp: Remove udelay from stp_sync_clock() (Sven Schnelle)
  - wifi: iwlwifi: mvm: fix scan request validation (Avraham Stern)
  - um: Re-evaluate thread flags repeatedly (Thomas Weißschuh)
  - wifi: iwlwifi: mvm: set gtk id also in older FWs (Miri Korenblit)
  - bpf: Forget ranges when refining tnum after JSET (Paul Chaignon) [Orabug: 38423330] {CVE-2025-39748}
  - sched/deadline: Fix accounting after global limits change (Juri Lelli)
  - perf/cxlpmu: Remove unintended newline from IRQ name format string (Alok Tiwari)
  - net: phy: micrel: Add ksz9131_resume() (Biju Das)
  - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id() (Alok Tiwari)
  - net: ipv4: fix incorrect MTU in broadcast routes (Oscar Maes)
  - wifi: mac80211: don't unreserve never reserved chanctx (Johannes Berg)
  - wifi: cfg80211: Fix interface type validation (Ilan Peer)
  - net: mctp: Prevent duplicate binds (Matt Johnston)
  - can: ti_hecc: fix -Woverflow compiler warning (Vincent Mailhol)
  - drm/amd/display: limit clear_update_flags to dcn32 and above (Charlene Liu)
  - rcu: Protect ->defer_qs_iw_pending from data race (Paul E. McKenney) [Orabug: 38423339] {CVE-2025-39749}
  - drm/amd/pm: fix null pointer access (Umio Yasuno) [Orabug: 38394967] {CVE-2025-38705}
  - arm64: Mark kernel as tainted on SAE and SError panic (Breno Leitao)
  - net: pcs: xpcs: mask readl() return value to 16 bits (Jack Ping Chng)
  - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Leon Romanovsky)
  - net: ag71xx: Add missing check after DMA map (Thomas Fourier)
  - et131x: Add missing check after DMA map (Thomas Fourier)
  - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (Bitterblue Smith)
  - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (Chin-Yen Lee)
  - idpf: preserve coalescing settings across resets (Ahmed Zaki)
  - libbpf: Verify that arena map exists when adding arena relocations (Eduard Zingerman)
  - be2net: Use correct byte order and format string for TCP seq and ack_seq (Alok Tiwari)
  - s390/time: Use monotonic clock in get_cycles() (Sven Schnelle)
  - wifi: cfg80211: reject HTC bit for management frames (Johannes Berg)
  - ktest.pl: Prevent recursion of default variable options (Steven Rostedt)
  - wifi: ath12k: Correct tid cleanup when tid setup fails (Sarika Sharma)
  - net: usb: cdc-ncm: check for filtering capability (Oliver Neukum)
  - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (Avraham Stern)
  - xen/netfront: Fix TX response spurious interrupts (Anthoine Bourgeois)
  - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie() (Zijun Hu)
  - Bluetooth: btusb: Add new VID/PID 0489/e14e for MT7925 (En-Wei Wu)
  - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64 (Steven Rostedt)
  - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG (Sebastian Andrzej Siewior)
  - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps (Florian Westphal)
  - ASoC: qcom: use drvdata instead of component to keep id (Srinivas Kandagatla)
  - ASoC: codecs: rt5640: Retry DEVICE_ID verification (Xinxin Wan)
  - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement (Jonathan Santos)
  - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros (Cristian Ciocaltea)
  - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop (Christophe Leroy)
  - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (Lucy Thrun) [Orabug: 38423356] {CVE-2025-39751}
  - platform/chrome: cros_ec_typec: Defer probe on missing EC parent (Tomasz Michalec)
  - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches (Kees Cook)
  - soc: qcom: mdt_loader: Actually use the e_phoff (Bjorn Andersson)
  - imx8m-blk-ctrl: set ISI panic write hurry level (Krzysztof Hałasa)
  - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop() (Gautham R. Shenoy)
  - usb: core: usb_submit_urb: downgrade type check (Oliver Neukum)
  - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present (Tomasz Michalec)
  - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime() (Peter Ujfalusi) [Orabug: 38394976] {CVE-2025-38706}
  - tty: serial: fix print format specifiers (Joseph Tilahun)
  - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless mode (Peter Ujfalusi)
  - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4 (Alok Tiwari)
  - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection (Mark Brown)
  - x86/bugs: Avoid warning when overriding return thunk (Pawan Gupta)
  - ALSA: hda: Disable jack polling at shutdown (Takashi Iwai)
  - ALSA: hda: Handle the jack polling always via a work (Takashi Iwai)
  - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready (Gwendal Grignou)
  - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode() (Ulf Hansson)
  - mei: bus: Check for still connected devices in mei_cl_bus_dev_release() (Hans de Goede)
  - char: misc: Fix improper and inaccurate error code returned by misc_init() (Zijun Hu)
  - reset: brcmstb: Enable reset drivers for ARCH_BCM2835 (Peter Robinson)
  - pps: clients: gpio: fix interrupt handling order in remove path (Eliav Farber)
  - selftests: vDSO: vdso_test_getrandom: Always print TAP header (Thomas Weißschuh)
  - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path (Breno Leitao)
  - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed (Sarthak Garg)
  - ACPI: processor: fix acpi_object initialization (Sebastian Ott)
  - PM: sleep: console: Fix the black screen issue (Tuhaowen)
  - thermal: sysfs: Return ENODATA instead of EAGAIN for reads (Hsin-Te Yuan)
  - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (Rafael J. Wysocki)
  - firmware: tegra: Fix IVC dependency problems (Thierry Reding)
  - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set early during resume (Peng Fan)
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Zhu Qiyu)
  - selftests: tracing: Use mutex_unlock for testing glob filter (Masami Hiramatsu)
  - tools/build: Fix s390(x) cross-compilation with clang (Thomas Weißschuh)
  - ARM: tegra: Use I/O memcpy to write to IRAM (Aaron Kling)
  - gpio: tps65912: check the return value of regmap_update_bits() (Bartosz Golaszewski)
  - iio: adc: ad_sigma_delta: don't overallocate scan buffer (David Lechner)
  - tools/nolibc: define time_t in terms of __kernel_old_time_t (Thomas Weißschuh)
  - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required (David Collins)
  - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed (Kuninori Morimoto)
  - EDAC/synopsys: Clear the ECC counters on init (Shubhrajyoti Datta)
  - PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store() (Lifeng Zheng)
  - ARM: rockchip: fix kernel hang during smp initialization (Alexander Kochetkov)
  - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode (Li Rongqing)
  - cpufreq: Exit governor when failed to start old governor (Lifeng Zheng)
  - gpio: wcd934x: check the return value of regmap_update_bits() (Bartosz Golaszewski)
  - pmdomain: ti: Select PM_GENERIC_DOMAINS (Guillaume La Roque)
  - usb: typec: tcpm/tcpci_maxim: fix irq wake usage (André Draszik)
  - remoteproc: imx_rproc: skip clock enable when M-core is managed by the SCU (Hiago De Franco)
  - ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered (Shuai Xue) [Orabug: 38423437] {CVE-2025-39763}
  - soc: qcom: rpmh-rsc: Add RSC version 4 support (Maulik Shah)
  - usb: xhci: Avoid showing errors during surprise removal (Mario Limonciello)
  - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command (Jay Chen)
  - usb: xhci: Avoid showing warnings for dying controller (Mario Limonciello)
  - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default (Benson Leung)
  - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t (Cynthia Huang)
  - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (Prashant Malani)
  - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list (Mario Limonciello)
  - usb: xhci: print xhci->xhc_state when queue_command failed (Su Hui)
  - tracefs: Add d_delete to remove negative dentries (Steven Rostedt)
  - securityfs: don't pin dentries twice, once is enough... (Al Viro)
  - fix locking in efi_secret_unlink() (Al Viro)
  - ext2: Handle fiemap on empty files to prevent EINVAL (Wei Gao)
  - pidfs: raise SB_I_NODEV and SB_I_NOEXEC (Christian Brauner)
  - fs/ntfs3: correctly create symlink for relative path (Rong Zhang)
  - fs/ntfs3: Add sanity check for file name (Lizhi Xu)
  - ata: libata-sata: Disallow changing LPM state if not supported (Damien Le Moal)
  - ata: ahci: Disable DIPM if host lacks support (Damien Le Moal)
  - ata: ahci: Disallow LPM policy control if not supported (Damien Le Moal)
  - better lockdep annotations for simple_recursive_removal() (Al Viro)
  - hfs: fix not erasing deleted b-tree node issue (Viacheslav Dubeyko)
  - drbd: add missing kref_get in handle_write_conflicts (Sarah Newman) [Orabug: 38394993] {CVE-2025-38708}
  - udf: Verify partition map count (Jan Kara)
  - loop: Avoid updating block size under exclusive owner (Jan Kara) [Orabug: 38394999] {CVE-2025-38709}
  - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops (Andrew Price) [Orabug: 38423379] {CVE-2025-39753}
  - gfs2: Validate i_depth for exhash directories (Andrew Price) [Orabug: 38395006] {CVE-2025-38710}
  - nvme-tcp: log TLS handshake failures at error level (Maurizio Lombardi)
  - nvme-pci: try function level reset on init failure (Keith Busch)
  - smb/server: avoid deadlock when linking with ReplaceIfExists (Neil Brown)
  - firmware: arm_ffa: Change initcall level of ffa_init() to rootfs_initcall (Levi Yun)
  - arm64: Handle KCOV __init vs inline mismatches (Kees Cook)
  - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file() (Tetsuo Handa)
  - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc() (Viacheslav Dubeyko)
  - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read() (Viacheslav Dubeyko)
  - hfs: fix slab-out-of-bounds in hfs_bnode_read() (Viacheslav Dubeyko)
  - hfs: fix general protection fault in hfs_find_init() (Viacheslav Dubeyko)
  - net: kcm: Fix race condition in kcm_unattach() (Sven Stegemann)
  - tls: handle data disappearing from under the TLS ULP (Jakub Kicinski) [Orabug: 38351758] {CVE-2025-38616}
  - ptp: prevent possible ABBA deadlock in ptp_clock_freerun() (Jeongjun Park)
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Rafael J. Wysocki)
  - intel_idle: Allow loading ACPI tables for any family (Len Brown)
  - sctp: linearize cloned gso packets in sctp_rcv (Xin Long) [Orabug: 38395056] {CVE-2025-38718}
  - net: ti: icss-iep: Fix incorrect type for return value in extts_enable() (Alok Tiwari)
  - net: ti: icssg-prueth: Fix emac link speed handling (Md Danish Anwar)
  - netfilter: ctnetlink: fix refcount leak on table dump (Florian Westphal) [Orabug: 38395065] {CVE-2025-38721}
  - udp: also consider secpath when evaluating ipsec use for checksumming (Sabrina Dubroca)
  - mm/smaps: fix race between smaps_hugetlb_range and migration (Tu Jinjiang) [Orabug: 38423389] {CVE-2025-39754}
  - habanalabs: fix UAF in export_dmabuf() (Al Viro)
  - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the guest (Maxim Levitsky)
  - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs (Maxim Levitsky)
  - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter (Maxim Levitsky)
  - KVM: VMX: Extract checking of guest's DEBUGCTL into helper (Sean Christopherson)
  - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported (Sean Christopherson)
  - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag (Sean Christopherson)
  - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic bitmap (Sean Christopherson)
  - smb: client: don't wait for info->send_pending == 0 on error (Stefan Metzmacher)
  - smb: client: let send_done() cleanup before calling smbd_disconnect_rdma_connection() (Stefan Metzmacher)
  - mm/memory-tier: fix abstract distance calculation overflow (Li Zhijian)
  - ACPI: processor: perflib: Move problematic pr->performance check (Rafael J. Wysocki)
  - ACPI: processor: perflib: Fix initial _PPC limit application (Jiayi Li)
  - Documentation: ACPI: Fix parent device references (Andy Shevchenko)
  - eventpoll: Fix semi-unbounded recursion (Jann Horn) [Orabug: 38335160] {CVE-2025-38614}
  - fs: Prevent file descriptor table allocations exceeding INT_MAX (Sasha Levin) [Orabug: 38423395] {CVE-2025-39756}
  - fscrypt: Don't use problematic non-inline crypto engines (Eric Biggers)
  - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock (André Draszik)
  - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD (André Draszik)
  - clk: samsung: exynos850: fix a comment (André Draszik)
  - sunvdc: Balance device refcount in vdc_port_mpgroup_check (Ma Ke)
  - LoongArch: Avoid in-place string operation on FDT content (Yao Zi)
  - LoongArch: Make relocate_new_kernel_size be a .quad value (Huacai Chen)
  - LoongArch: Don't use %pK through printk() in unwinder (Thomas Weißschuh)
  - LoongArch: BPF: Fix jump offset calculation in tailcall (Haoran Jiang)
  - PCI: Extend isolated function probing to LoongArch (Huacai Chen)
  - NFS: Fix the setting of capabilities when automounting a new filesystem (Trond Myklebust) [Orabug: 38429209] {CVE-2025-39798}
  - NFSD: detect mismatch of file handle and delegation stateid in OPEN op (Dai Ngo)
  - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (Jeff Layton) [Orabug: 38395079] {CVE-2025-38724}
  - net: usb: asix_devices: add phy_mask for ax88772 mdio bus (Xu Yang) [Orabug: 38395087] {CVE-2025-38725}
  - net: dpaa: fix device leak when querying time stamp info (Johan Hovold)
  - net: ti: icss-iep: fix device and OF node leaks at probe (Johan Hovold)
  - net: mtk_eth_soc: fix device leak at probe (Johan Hovold)
  - net: enetc: fix device and OF node leak at probe (Johan Hovold)
  - net: gianfar: fix device leak when querying time stamp info (Johan Hovold)
  - net: ftgmac100: fix potential NULL pointer access in ftgmac100_phy_disconnect (Heiner Kallweit)
  - net: phy: micrel: fix KSZ8081/KSZ8091 cable test (Florian Larysch)
  - netlink: avoid infinite retry looping in netlink_unicast() (Fedor Pchelkin) [Orabug: 38395123] {CVE-2025-38727}
  - Revert "leds: trigger: netdev: Configure LED blink interval for HW offload" (Daniel Golle)
  - leds: flash: leds-qcom-flash: Fix registry access after re-bind (Krzysztof Kozlowski)
  - gpio: mlxbf3: use platform_get_irq_optional() (David Thompson)
  - Revert "gpio: mlxbf3: only get IRQ for device instance 0" (David Thompson)
  - gpio: mlxbf2: use platform_get_irq_optional() (David Thompson)
  - gpio: virtio: Fix config space reading. (Harald Mommer)
  - smb: client: remove redundant lstrp update in negotiate protocol (Wang Zhaolong)
  - smb3: fix for slab out of bounds on mount to ksmbd (Steve French) [Orabug: 38395093] {CVE-2025-38728}
  - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks (Christopher Eby)
  - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X (Vasiliy Kovalev)
  - ALSA: usb-audio: Validate UAC3 cluster segment descriptors (Takashi Iwai) [Orabug: 38423405] {CVE-2025-39757}
  - ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Takashi Iwai) [Orabug: 38395099] {CVE-2025-38729}
  - io_uring: don't use int for ABI (Pavel Begunkov)
  - LTS version: v6.12.42 (Jack Vogel)
  - usb: gadget : fix use-after-free in composite_dev_cleanup() (Taoxue)
  - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (Yuhao Jiang)
  - HID: apple: validate feature-report field count to prevent NULL pointer dereference (Qasim Ijaz) [Orabug: 38334911] {CVE-2025-38557}
  - media: ti: j721e-csi2rx: fix list_del corruption (Julien Massot)
  - perf/arm-ni: Set initial IRQ affinity (Robin Murphy)
  - mm: swap: fix potential buffer overflow in setup_clusters() (Kemeng Shi) [Orabug: 38401739] {CVE-2025-39727}
  - mm: swap: correctly use maxpages in swapon syscall to avoid potential deadloop (Kemeng Shi)
  - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery (Andy Shevchenko)
  - MIPS: mm: tlb-r4k: Uniquify TLB entries on init (Jiaxun Yang)
  - s390/mm: Remove possible false-positive warning in pte_free_defer() (Gerald Schaefer)
  - x86/fpu: Delay instruction pointer fixup until after warning (Dave Hansen)
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access (Michael J. Ruhl) [Orabug: 38334915] {CVE-2025-38559}
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26) (Edip Hazuri)
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx (Edip Hazuri)
  - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx (Edip Hazuri)
  - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx() (Geoffrey D. Bennett)
  - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe() (Thorsten Blum)
  - x86/sev: Evict cache lines during SNP memory validation (Tom Lendacky) [Orabug: 38334918,38453836] {CVE-2025-38560}
  - net: usbnet: Fix the wrong netif_carrier_on() call (Ammar Faizi)
  - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event (John Ernberg)
  - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano (Zenm Chen)
  - PCI/ASPM: Fix L1SS saving (Ilpo Järvinen)
  - PCI/ASPM: Save parent L1SS config in pci_save_aspm_l1ss_state() (Jian-Hong Pan)
  - USB: serial: option: add Foxconn T99W709 (Slark Xiao)
  - smb: server: Fix extension string in ksmbd_extract_shortname() (Thorsten Blum)
  - ksmbd: limit repeated connections from clients with the same IP (Namjae Jeon)
  - ksmbd: fix corrupted mtime and ctime in smb2_open (Namjae Jeon)
  - ksmbd: fix Preauh_HashValue race condition (Namjae Jeon)
  - ksmbd: fix null pointer dereference error in generate_encryptionkey (Namjae Jeon)
  - drm/i915/ddi: only call shutdown hooks for valid encoders (Jani Nikula)
  - drm/i915/display: add intel_encoder_is_hdmi() (Jani Nikula)
  - drm/i915/ddi: gracefully handle errors from intel_ddi_init_hdmi_connector() (Jani Nikula)
  - drm/i915/hdmi: add error handling in g4x_hdmi_init() (Jani Nikula)
  - drm/i915/hdmi: propagate errors from intel_hdmi_init_connector() (Jani Nikula)
  - drm/i915/ddi: change intel_ddi_init_{dp, hdmi}_connector() return type (Jani Nikula)
  - selftests/bpf: Fix build error with llvm 19 (Alexei Starovoitov)
  - selftests/bpf: Add a test for arena range tree algorithm (Alexei Starovoitov)
  - ice/ptp: fix crosstimestamp reporting (Anton Nadezhdin)
  - Revert "bcache: remove heap-related macros and switch to generic min_heap" (Kuan-Wei Chiu)
  - accel/ivpu: Fix reset_engine debugfs file logic (Andrzej Kacprowski)
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Budimir Markovic) [Orabug: 38351769,38453833] {CVE-2025-38618}
  - net/packet: fix a race in packet_set_ring() and packet_notifier() (Quang Le) [Orabug: 38351762] {CVE-2025-38617}
  - selftests/perf_events: Add a mmap() correctness test (Lorenzo Stoakes)
  - perf/core: Prevent VMA split of buffer mappings (Thomas Gleixner) [Orabug: 38334946] {CVE-2025-38563}
  - perf/core: Exit early on perf_mmap() fail (Thomas Gleixner) [Orabug: 38334955] {CVE-2025-38565}
  - perf/core: Don't leak AUX buffer refcount on allocation failure (Thomas Gleixner)
  - sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [Orabug: 38334966,38453835] {CVE-2025-38566}
  - smb: client: return an error if rdma_connect does not return within 5 seconds (Stefan Metzmacher)
  - pptp: fix pptp_xmit() error path (Eric Dumazet)
  - nvmet: exit debugfs after discovery subsystem exits (Mohamed Khalfella)
  - smb: client: let recv_done() avoid touching data_transfer after cleanup/move (Stefan Metzmacher)
  - smb: client: let recv_done() cleanup before notifying the callers. (Stefan Metzmacher)
  - smb: client: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Stefan Metzmacher)
  - smb: client: remove separate empty_packet_queue (Stefan Metzmacher)
  - smb: server: let recv_done() avoid touching data_transfer after cleanup/move (Stefan Metzmacher)
  - smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection (Stefan Metzmacher)
  - smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already (Stefan Metzmacher)
  - smb: server: remove separate empty_recvmsg_queue (Stefan Metzmacher)
  - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out() (Takashi Iwai)
  - irqchip: Build IMX_MU_MSI only on ARM (Arnd Bergmann)
  - eth: fbnic: remove the debugging trick of super high page bias (Jakub Kicinski)
  - s390/mm: Allocate page table with PAGE_SIZE granularity (Sumanth Korikkar)
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (Maher Azz) [Orabug: 38334972] {CVE-2025-38568}
  - benet: fix BUG when creating VFs (Michal Schmidt) [Orabug: 38334974] {CVE-2025-38569}
  - x86/irq: Plug vector setup race (Thomas Gleixner)
  - sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [Orabug: 38334980,38453834] {CVE-2025-38571}
  - net/sched: taprio: enforce minimum value for picos_per_byte (Takamitsu Iwai)
  - net: drop UFO packets in udp_rcv_segment() (Wang Liang) [Orabug: 38351784] {CVE-2025-38622}
  - net: mdio: mdio-bcm-unimac: Correct rate fallback logic (Florian Fainelli)
  - ipv6: reject malicious packets in ipv6_gso_segment() (Eric Dumazet) [Orabug: 38334986] {CVE-2025-38572}
  - net/mlx5: Correctly set gso_segs when LRO is used (Christoph Paasch)
  - spi: cs42l43: Property entry should be a null-terminated array (Simon Trimmer)
  - ASoC: tas2781: Fix the wrong step for TLV on tas2781 (Baojun Xu)
  - block: ensure discard_granularity is zero when discard is not supported (Christoph Hellwig)
  - block: Fix default IO priority if there is no IO context (Guenter Roeck)
  - netlink: specs: ethtool: fix module EEPROM input/output arguments (Jakub Kicinski)
  - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs (Harald Freudenberger)
  - nvmet: initialize discovery subsys after debugfs is initialized (Mohamed Khalfella)
  - pptp: ensure minimal skb length in pptp_xmit() (Eric Dumazet) [Orabug: 38335002] {CVE-2025-38574}
  - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string() (Luca Weiss)
  - phy: mscc: Fix parsing of unicast frames (Horatiu Vultur)
  - netpoll: prevent hanging NAPI when netcons gets enabled (Jakub Kicinski)
  - md/md-cluster: handle REMOVE message earlier (Heming Zhao)
  - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Benjamin Coddington)
  - NFSv4.2: another fix for listxattr (Olga Kornievskaia)
  - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (Trond Myklebust) [Orabug: 38401743] {CVE-2025-39730}
  - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate() (Trond Myklebust)
  - sched: Add test_and_clear_wake_up_bit() and atomic_dec_and_wake_up() (Neil Brown)
  - pNFS/flexfiles: don't attempt pnfs on fatal DS errors (Tigran Mkrtchyan)
  - PCI: pnv_php: Fix surprise plug detection and recovery (Timothy Pearson)
  - powerpc/eeh: Make EEH driver device hotplug safe (Timothy Pearson)
  - powerpc/eeh: Export eeh_unfreeze_pe() (Timothy Pearson)
  - PCI: pnv_php: Work around switches with broken presence detection (Timothy Pearson)
  - PCI: pnv_php: Clean up allocated IRQs on unplug (Timothy Pearson)
  - kconfig: qconf: fix ConfigList::updateListAllforAll() (Masahiro Yamada)
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (Salomon Dushimirimana)
  - scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume (Seunghui Lee)
  - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free" (Li Lingfeng)
  - scsi: mpt3sas: Fix a fw_event memory leak (Tomas Henzl)
  - vfio/pci: Separate SR-IOV VF dev_set (Alex Williamson)
  - vfio/pds: Fix missing detach_ioas op (Brett Creeley) [Orabug: 38351809] {CVE-2025-38625}
  - vfio: Prevent open_count decrement to negative (Jacob Pan)
  - vfio: Fix unbalanced vfio_df_close call in no-iommu mode (Jacob Pan)
  - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe() (Christophe Jaillet)
  - exfat: fdatasync flag should be same like generic_write_sync() (Zhengxu Zhang)
  - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode (Chao Yu)
  - f2fs: fix to calculate dirty data during has_not_enough_free_secs() (Chao Yu)
  - f2fs: fix to update upper_p in __get_secs_required() correctly (Chao Yu)
  - f2fs: vm_unmap_ram() may be called from an invalid context (Jan Prusakowski)
  - f2fs: fix to avoid out-of-boundary access in devs.path (Chao Yu)
  - f2fs: fix to avoid panic in f2fs_evict_inode (Chao Yu)
  - f2fs: fix to avoid UAF in f2fs_sync_inode_meta() (Chao Yu)
  - f2fs: doc: fix wrong quota mount option description (Chao Yu)
  - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent (Chao Yu)
  - f2fs: fix to check upper boundary for gc_valid_thresh_ratio (Chao Yu)
  - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent (Yohan Joung)
  - f2fs: fix KMSAN uninit-value in extent_info usage (Abinash Singh)
  - f2fs: fix bio memleak when committing super block (Sheng Yong)
  - f2fs: turn off one_time when forcibly set to foreground GC (Daeho Jeong)
  - rtc: rv3028: fix incorrect maximum clock rate handling (Brian Masney)
  - rtc: pcf8563: fix incorrect maximum clock rate handling (Brian Masney)
  - rtc: pcf85063: fix incorrect maximum clock rate handling (Brian Masney)
  - rtc: nct3018y: fix incorrect maximum clock rate handling (Brian Masney)
  - rtc: hym8563: fix incorrect maximum clock rate handling (Brian Masney)
  - rtc: ds1307: fix incorrect maximum clock rate handling (Brian Masney)
  - ucount: fix atomic_long_inc_below() argument type (Uros Bizjak)
  - module: Restore the moduleparam prefix length check (Petr Pavlu)
  - apparmor: Fix unaligned memory accesses in KUnit test (Helge Deller)
  - apparmor: fix loop detection used in conflicting attachment resolution (Ryan Lee)
  - apparmor: ensure WB_HISTORY_SIZE value is a power of 2 (Ryan Lee)
  - bpf: Check netfilter ctx accesses are aligned (Paul Chaignon)
  - bpf: Check flow_dissector ctx accesses are aligned (Paul Chaignon)
  - vhost: Reintroduce kthread API and add mode selection (Cindy Lu)
  - vdpa: Fix IDR memory leak in VDUSE module exit (Anders Roxell)
  - vdpa/mlx5: Fix release of uninitialized resources on error path (Dragos Tatulea) [Orabug: 38351825] {CVE-2025-38628}
  - vdpa/mlx5: Fix needs_teardown flag calculation (Dragos Tatulea)
  - perf record: Cache build-ID of hit DSOs only (Namhyung Kim)
  - selftests: ALSA: fix memory leak in utimer test (Yuli Wang)
  - drm/xe/vf: Disable CSC support on VF (Lukasz Laguna)
  - mtd: rawnand: atmel: set pmecc data setup time (Balamanikandan Gunasundar)
  - mtd: rawnand: rockchip: Add missing check after DMA map (Thomas Fourier)
  - mtd: rawnand: atmel: Fix dma_mapping_error() address (Thomas Fourier)
  - jfs: fix metapage reference count leak in dbAllocCtl (Zheng Yu)
  - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref (Chenyuan Yang)
  - crypto: qat - fix seq_file position update in adf_ring_next() (Giovanni Cabiddu)
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Giovanni Cabiddu)
  - perf tools: Remove libtraceevent in .gitignore (Chen Pei)
  - sh: Do not use hyphen in exported variable name (Ben Hutchings)
  - ASoC: fsl_xcvr: get channel status data when PHY is not exists (Shengjiu Wang)
  - dmaengine: nbpfaxi: Add missing check after DMA map (Thomas Fourier)
  - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap (Thomas Fourier)
  - fs/orangefs: Allow 2 more characters in do_c_string() (Dan Carpenter)
  - remoteproc: xlnx: Disable unsupported features (Tanmay Shah)
  - clk: imx95-blk-ctl: Fix synchronous abort (Laurentiu Palcu)
  - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute (Manivannan Sadhasivam)
  - soundwire: stream: restore params when prepare ports fail (Bard Liao)
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Bairavi Alagappan)
  - crypto: img-hash - Fix dma_unmap_sg() nents value (Thomas Fourier)
  - crypto: keembay - Fix dma_unmap_sg() nents value (Thomas Fourier)
  - hwrng: mtk - handle devm_pm_runtime_enable errors (Ovidiu Panait)
  - clk: at91: sam9x7: update pll clk ranges (Varshini Rajendran)
  - ext4: Make sure BH_New bit is cleared in ->write_end handler (Jan Kara)
  - watchdog: ziirave_wdt: check record length in ziirave_firm_verify() (Dan Carpenter)
  - scsi: isci: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - scsi: mvsas: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - scsi: elx: efct: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - clk: sunxi-ng: v3s: Fix de clock definition (Paul Kocialkowski)
  - clk: thead: th1520-ap: Correctly refer the parent of osc_12m (Yao Zi)
  - RDMA/mana_ib: Fix DSCP value in modify QP (Shiraz Saleem)
  - perf tests bp_account: Fix leaked file descriptor (Leo Yan)
  - pinmux: fix race causing mux_owner NULL with active mux_usecount (Mukesh Ojha) [Orabug: 38351837] {CVE-2025-38632}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (Zijie Wang) [Orabug: 38351898] {CVE-2025-38653}
  - kernel: trace: preemptirq_delay_test: use offstack cpu mask (Arnd Bergmann)
  - RDMA/hns: Fix -Wframe-larger-than issue (Junxian Huang)
  - RDMA/hns: Drop GFP_NOWARN (Junxian Huang)
  - RDMA/hns: Fix accessing uninitialized resources (Junxian Huang)
  - RDMA/hns: Get message length of ack_req from FW (Junxian Huang)
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Mengbiao Xiong)
  - crypto: inside-secure - Fix `dma_unmap_sg()` nents value (Thomas Fourier)
  - crypto: ccp - Fix locking on alloc failure handling (Alexey Kardashevskiy)
  - RDMA/hns: Fix HW configurations not cleared in error flow (Wenglianfa)
  - RDMA/hns: Fix double destruction of rsv_qp (Wenglianfa)
  - perf sched: Fix memory leaks in 'perf sched latency' (Namhyung Kim)
  - perf sched: Use RC_CHK_EQUAL() to compare pointers (Namhyung Kim)
  - perf sched: Fix memory leaks for evsel->priv in timehist (Namhyung Kim)
  - perf sched: Fix memory leaks in 'perf sched map' (Namhyung Kim)
  - perf sched: Free thread->priv using priv_destructor (Namhyung Kim)
  - perf sched: Make sure it frees the usage string (Namhyung Kim)
  - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER (Takahiro Kuwano)
  - perf dso: Add missed dso__put to dso__load_kcore (Ian Rogers)
  - perf tools: Fix use-after-free in help_unknown_cmd() (Namhyung Kim)
  - Fix dma_unmap_sg() nents value (Thomas Fourier)
  - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq (Nuno Sa)
  - fanotify: sanitize handle_type values when reporting fid (Amir Goldstein)
  - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers (Luca Weiss)
  - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning (Krzysztof Kozlowski)
  - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state() (Yuan Chen)
  - pinctrl: sunxi: Fix memory leak on krealloc failure (Yuan Chen)
  - PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails (Jerome Brunet)
  - crypto: arm/aes-neonbs - work around gcc-15 warning (Arnd Bergmann)
  - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set (Charles Han)
  - power: supply: cpcap-charger: Fix null check for power_supply_get_by_name (Charles Han)
  - clk: xilinx: vcu: unregister pll_post only if registered correctly (Rohit Visavalia)
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (James Cowgill)
  - clk: davinci: Add NULL check in davinci_lpsc_clk_register() (Henry Martin)
  - mtd: fix possible integer overflow in erase_xfer() (Ivan Stepchenko)
  - crypto: qat - fix state restore for banks with exceptions (Svyatoslav Pankratov)
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Ahsan Atta)
  - crypto: marvell/cesa - Fix engine load inaccuracy (Herbert Xu)
  - crypto: qat - use unmanaged allocation for dc_data (Suman Kumar Chakraborty)
  - crypto: sun8i-ce - fix nents passed to dma_unmap_sg() (Ovidiu Panait)
  - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv clocks (Lad Prabhakar)
  - PCI: rockchip-host: Fix "Unexpected Completion" log message (Hans Zhang)
  - fortify: Fix incorrect reporting of read buffer size (Kees Cook)
  - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int() (Kees Cook)
  - bpf, arm64: Fix fp initialization for exception boundary (Puranjay Mohan) [Orabug: 38335064] {CVE-2025-38586}
  - bpf/preload: Don't select USERMODE_DRIVER (Thomas Weißschuh)
  - ipv6: annotate data-races around rt->fib6_nsiblings (Eric Dumazet)
  - ipv6: fix possible infinite loop in fib6_info_uses_dev() (Eric Dumazet) [Orabug: 38335068] {CVE-2025-38587}
  - ipv6: prevent infinite loop in rt6_nlmsg_size() (Eric Dumazet) [Orabug: 38335071] {CVE-2025-38588}
  - vrf: Drop existing dst reference in vrf_ip6_input_dst (Stanislav Fomichev)
  - selftests: rtnetlink.sh: remove esp4_offload after test (Xiumei Mu)
  - stmmac: xsk: fix negative overflow of budget in zerocopy mode (Jason Xing)
  - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863 (Tristram Ha)
  - net/mlx5e: Remove skb secpath if xfrm state is not found (Jianbo Liu) [Orabug: 38335076] {CVE-2025-38590}
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Alexei Lazar)
  - netfilter: xt_nfacct: don't assume acct name is null-terminated (Florian Westphal) [Orabug: 38351852] {CVE-2025-38639}
  - can: kvaser_usb: Assign netdev.dev_port based on device channel index (Jimmy Assarsson)
  - can: kvaser_pciefd: Store device channel index (Jimmy Assarsson)
  - can: peak_usb: fix USB FD devices potential malfunction (Stephane Grosjean)
  - selftests: drv-net: Fix remote command checking in require_cmd() (Gal Pressman)
  - tools/rv: Do not skip idle in trace (Gabriele Monaco)
  - bpf: Disable migration in nf_hook_run_bpf(). (Kuniyuki Iwashima) [Orabug: 38351858] {CVE-2025-38640}
  - Bluetooth: hci_event: Mask data status from LE ext adv reports (Chris Down)
  - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()' (Arseniy Krasnov) [Orabug: 38335086] {CVE-2025-38593}
  - memcg_slabinfo: Fix use of PG_slab (Matthew Wilcox)
  - kcsan: test: Initialize dummy variable (Marco Elver)
  - ring-buffer: Remove ring_buffer_read_prepare_sync() (Steven Rostedt)
  - wifi: nl80211: Set num_sub_specs before looping through sub_specs (Kees Cook)
  - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (Kees Cook)
  - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (Gokul Sivakumar)
  - wifi: ath12k: fix endianness handling while accessing wmi service bit (Tamizh Chelvam Raja)
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Remi Pommarel)
  - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (Remi Pommarel)
  - wifi: mac80211: Don't call fq_flow_idx() for management frames (Alexander Wetzel)
  - wifi: mac80211: Do not schedule stopped TXQs (Alexander Wetzel)
  - wifi: plfxlc: Fix error handling in usb driver probe (Murad Masimov)
  - wifi: mac80211: reject TDLS operations when station is not associated (Moon Hee Lee) [Orabug: 38351870] {CVE-2025-38644}
  - rcu: Fix delayed execution of hurry callbacks (Tze-Nan Wu)
  - iommu/amd: Fix geometry.aperture_end for V2 tables (Jason Gunthorpe)
  - drm/amdgpu/gfx10: fix kiq locking in KCQ reset (Alex Deucher)
  - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset (Alex Deucher)
  - drm/amdgpu/gfx9: fix kiq locking in KCQ reset (Alex Deucher)
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Baochen Qiang) [Orabug: 38401750] {CVE-2025-39732}
  - mwl8k: Add missing check after DMA map (Thomas Fourier)
  - wifi: rtw88: Fix macid assigned to TDLS station (Bitterblue Smith)
  - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (Martin Kaistra)
  - tcp: call tcp_measure_rcv_mss() for ooo packets (Eric Dumazet)
  - xen/gntdev: remove struct gntdev_copy_batch from stack (Juergen Gross)
  - xen: fix UAF in dmabuf_exp_from_pages() (Al Viro)
  - RDMA/mlx5: Fix UMR modifying of mkey page size (Edward Srouji)
  - net_sched: act_ctinfo: use atomic64_t for three counters (Eric Dumazet)
  - net/sched: Restrict conditions for adding duplicating netems to qdisc tree (William Liu) [Orabug: 38331464] {CVE-2025-38553}
  - iommu/amd: Enable PASID and ATS capabilities in the correct order (Easwar Hariharan)
  - um: rtc: Avoid shadowing err in uml_rtc_start() (Tiwei Bie)
  - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX (Johan Korsnes)
  - netfilter: nf_tables: adjust lockdep assertions handling (Fedor Pchelkin)
  - netfilter: nf_tables: Drop dead code from fill_*_info routines (Phil Sutter)
  - fbcon: Fix outdated registered_fb reference in comment (Shixiong Ou)
  - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value (Fedor Pchelkin)
  - refscale: Check that nreaders and loops multiplication doesn't overflow (Artem Sadovnikov)
  - m68k: Don't unregister boot console needlessly (Finn Thain)
  - drm/msm/dpu: Fill in min_prefill_lines for SC8180X (Konrad Dybcio)
  - bpf: Ensure RCU lock is held around bpf_prog_ksym_find (Kumar Kartikeya Dwivedi)
  - kselftest/arm64: Fix check for setting new VLs in sve-ptrace (Mark Brown)
  - net: dst: annotate data-races around dst->output (Eric Dumazet)
  - net: dst: annotate data-races around dst->input (Eric Dumazet)
  - net/mlx5: Check device memory pointer before usage (Stav Aviram) [Orabug: 38351876] {CVE-2025-38645}
  - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range (Xin Guo)
  - wifi: ath11k: clear initialized flag for deinit-ed srng lists (Sergey Senozhatsky) [Orabug: 38335104] {CVE-2025-38601}
  - iwlwifi: Add missing check for alloc_ordered_workqueue (Jiasheng Jiang) [Orabug: 38335108] {CVE-2025-38602}
  - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (Xiu Jianfeng)
  - wifi: rtl818x: Kill URBs before clearing tx status queue (Daniil Dulov) [Orabug: 38335117] {CVE-2025-38604}
  - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (Zong-Zhe Yang)
  - caif: reduce stack size, again (Arnd Bergmann)
  - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add (Haren Myneni)
  - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure (Yuan Chen)
  - drm/amdgpu: Remove nbiov7.9 replay count reporting (Lijo Lazar)
  - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel (Ian Forbes)
  - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain (Petr Machata)
  - selftests/bpf: Fix unintentional switch case fall through (Mykyta Yatsenko)
  - selftests/bpf: fix signedness bug in redir_partial() (Wangfushuai)
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Jiayuan Chen) [Orabug: 38335129] {CVE-2025-38608}
  - bpf, sockmap: Fix psock incorrectly pointing to sk (Jiayuan Chen)
  - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info (Boris Brezillon)
  - drm/panfrost: Fix panfrost device variable name in devfreq (Adrián Larumbe)
  - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed (Andy Yan)
  - selftests/tracing: Fix false failure of subsystem event test (Steven Rostedt)
  - staging: nvec: Fix incorrect null termination of battery manufacturer (Alok Tiwari)
  - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640 (Slark Xiao)
  - interconnect: qcom: sc8180x: specify num_nodes (Dmitry Baryshkov)
  - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg (Dmitry Baryshkov)
  - soc: qcom: pmic_glink: fix OF node leak (Johan Hovold)
  - samples: mei: Fix building on musl libc (Brahmajit Das)
  - staging: greybus: gbphy: fix up const issue with the match callback (Greg Kroah-Hartman)
  - cpufreq: Init policy->rwsem before it may be possibly used (Lifeng Zheng)
  - cpufreq: Initialize cpufreq-based frequency-invariance later (Lifeng Zheng)
  - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode (Rafael J. Wysocki)
  - PM / devfreq: Fix a index typo in trans_stat (Chanwoo Choi)
  - PM / devfreq: Check governor before using governor->name (Lifeng Zheng) [Orabug: 38335133] {CVE-2025-38609}
  - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (Adam Ford)
  - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (Adam Ford)
  - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface (Annette Kobou)
  - selftests: breakpoints: use suspend_stats to reliably check suspend success (Moon Hee Lee)
  - arm64: dts: st: fix timer used for ticks (Patrick Delaunay)
  - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS (Sumit Gupta)
  - arm: dts: ti: omap: Fixup pinheader typo (Albin Törnqvist)
  - usb: early: xhci-dbc: Fix early_ioremap leak (Lucas De Marchi)
  - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw() (Sivan Zohar-Kotzer)
  - Revert "vmci: Prevent the dispatching of uninitialized payloads" (Greg Kroah-Hartman)
  - selftests: vDSO: chacha: Correctly skip test if necessary (Thomas Weißschuh)
  - pps: fix poll support (Denis Osterland-Heim)
  - vmci: Prevent the dispatching of uninitialized payloads (Lizhi Xu)
  - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc() (Abdun Nihaal)
  - spi: stm32: Check for cfg availability in stm32_spi_probe (Clément Le Goffic)
  - mei: vsc: Unset the event callback on remove and probe errors (Hans de Goede)
  - mei: vsc: Event notifier fixes (Hans de Goede)
  - mei: vsc: Destroy mutex after freeing the IRQ (Hans de Goede)
  - usb: typec: ucsi: yoga-c630: fix error and remove paths (Dmitry Baryshkov)
  - firmware: arm_scmi: Fix up turbo frequencies selection (Sibi Sankar)
  - cpufreq: armada-8k: make both cpu masks static (Arnd Bergmann)
  - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size (Michael Walle)
  - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports (Wadim Egorov)
  - usb: misc: apple-mfi-fastcharge: Make power supply names unique (Charalampos Mitrodimas)
  - usb: host: xhci-plat: fix incorrect type for of_match variable in xhci_plat_probe() (Seungjin Bae)
  - ARM: dts: vfxxx: Correctly use two tuples for timer address (Krzysztof Kozlowski)
  - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely (André Apitzsch)
  - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc (Lijuan Gao)
  - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes (Will Deacon)
  - arm64: dts: qcom: sc7180: Expand IMEM region (Konrad Dybcio)
  - arm64: dts: qcom: sdm845: Expand IMEM region (Konrad Dybcio)
  - soc: qcom: QMI encoding/decoding for big endian (Alexander Wilhelm)
  - selftests: Fix errno checking in syscall_user_dispatch test (Dmitry Vyukov)
  - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV (Alexander Stein)
  - ASoC: mediatek: use reserved memory or enable buffer pre-allocation (Chen-Yu Tsai)
  - ASoC: ops: dynamically allocate struct snd_ctl_elem_value (Arnd Bergmann)
  - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask() (Kuninori Morimoto)
  - io_uring: fix breakage in EXPERT menu (Randy Dunlap)
  - gfs2: No more self recovery (Andreas Gruenbacher) [Orabug: 38351907] {CVE-2025-38659}
  - Revert "fs/ntfs3: Replace inode_trylock with inode_lock" (Konstantin Komarov)
  - hfsplus: remove mutex_lock check in hfsplus_free_extents (Yangtao Li)
  - hfs: make splice write available again (Yangtao Li)
  - hfsplus: make splice write available again (Yangtao Li)
  - ublk: use vmalloc for ublk_device's __queues (Caleb Sander)
  - fs/ntfs3: cancle set bad inode after removing name fails (Edward Adam Davis)
  - fs_context: fix parameter name in infofc() macro (Rubenkelevra)
  - parse_longname(): strrchr() expects NUL-terminated string (Al Viro) [Orabug: 38351912] {CVE-2025-38660}
  - audit,module: restore audit logging in load failure case (Richard Guy Briggs)
  - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (Alexandru Andries)
  - ASoC: Intel: fix SND_SOC_SOF dependencies (Arnd Bergmann)
  - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (Richard Fitzgerald)
  - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (Adam Queler)
  - ethernet: intel: fix building with large NR_CPUS (Arnd Bergmann)
  - LTS version: v6.12.41 (Jack Vogel)
  - mm: khugepaged: fix call hpage_collapse_scan_file() for anonymous vma (Liu Shixin)
  - KVM: x86: Free vCPUs before freeing VM state (Sean Christopherson)
  - Revert "drm/xe/forcewake: Add a helper xe_force_wake_ref_has_domain()" (Tomita Moeko)
  - Revert "drm/xe/devcoredump: Update handling of xe_force_wake_get return" (Tomita Moeko)
  - Revert "drm/xe/tests/mocs: Update xe_force_wake_get() return handling" (Tomita Moeko)
  - Revert "drm/xe/gt: Update handling of xe_force_wake_get return" (Tomita Moeko)
  - drm/i915/dp: Fix 2.7 Gbps DP_LINK_BW value on g4x (Ville Syrjälä)
  - ALSA: hda: Add missing NVIDIA HDA codec IDs (Daniel Dadap)
  - ALSA: hda/tegra: Add Tegra264 support (Mohan Kumar)
  - Drivers: hv: Make the sysfs node size for the ring buffer dynamic (Naman Jain)
  - ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS (Nathan Chancellor)
  - iio: hid-sensor-prox: Fix incorrect OFFSET calculation (Zhang Lixu)
  - iio: hid-sensor-prox: Restore lost scale assignments (Zhang Lixu)
  - wifi: mt76: mt7925: adjust rm BSS flow to prevent next connection failure (Ming Yen Hsieh)
  - Revert "wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO" (Sean Wang)
  - arm64: dts: qcom: x1-crd: Fix vreg_l2j_1p2 voltage (Stephan Gerhold)
  - x86/hyperv: Fix APIC ID and VP index confusion in hv_snp_boot_ap() (Roman Kisel)
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Manuel Andreas) [Orabug: 38217316] {CVE-2025-38351}
  - KVM: x86: model canonical checks more precisely (Maxim Levitsky)
  - KVM: x86: Add X86EMUL_F_MSR and X86EMUL_F_DT_LOAD to aid canonical checks (Maxim Levitsky)
  - KVM: x86: Route non-canonical checks in emulator through emulate_ops (Maxim Levitsky)
  - KVM: x86: drop x86.h include from cpuid.h (Maxim Levitsky)
  - ext4: fix out of bounds punch offset (Zhang Yi) [Orabug: 38369646] {CVE-2025-38221}
  - ext4: correct the error handle in ext4_fallocate() (Zhang Yi)
  - ext4: fix incorrect punch max_end (Zhang Yi)
  - ext4: move out common parts into ext4_fallocate() (Zhang Yi)
  - ext4: move out inode_lock into ext4_fallocate() (Zhang Yi)
  - ext4: factor out ext4_do_fallocate() (Zhang Yi)
  - ext4: refactor ext4_insert_range() (Zhang Yi)
  - ext4: refactor ext4_collapse_range() (Zhang Yi)
  - ext4: refactor ext4_zero_range() (Zhang Yi)
  - ext4: refactor ext4_punch_hole() (Zhang Yi)
  - ext4: don't explicit update times in ext4_fallocate() (Zhang Yi)
  - erofs: fix large fragment handling (Gao Xiang)
  - erofs: clean up header parsing for ztailpacking and fragments (Gao Xiang)
  - erofs: simplify tail inline pcluster handling (Gao Xiang)
  - erofs: use Z_EROFS_LCLUSTER_TYPE_MAX to simplify switches (Hongzhen Luo)
  - erofs: refine z_erofs_get_extent_compressedlen() (Gao Xiang)
  - erofs: simplify z_erofs_load_compact_lcluster() (Gao Xiang)
  - arm64: dts: qcom: x1e78100-t14s: mark l12b and l15b always-on (Johan Hovold)
  - mtd: rawnand: qcom: Fix last codeword read in qcom_param_page_type_exec() (Md Sadre Alam)
  - crypto: powerpc/poly1305 - add depends on BROKEN for now (Eric Biggers)
  - comedi: comedi_test: Fix possible deletion of uninitialized timers (Ian Abbott)
  - jfs: reject on-disk inodes of an unsupported type (Dmitry Antipov)
  - x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode() (Michael Zhivich)
  - spi: cadence-quadspi: fix cleanup of rx_chan on failure paths (Khairul Anuar Romli)
  - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach (Rd Babiera)
  - usb: typec: tcpm: allow switching to mode accessory to mux properly (Michael Grzeschik)
  - usb: typec: tcpm: allow to use sink in accessory mode (Michael Grzeschik)
  - selftests/bpf: Add tests with stack ptr register in conditional jmp (Yonghong Song)
  - rust: give Clippy the minimum supported Rust version (Miguel Ojeda)
  - mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n (Harry Yoo)
  - mm/vmscan: fix hwpoisoned large folio handling in shrink_folio_list (Tu Jinjiang) [Orabug: 38401778] {CVE-2025-39725}
  - selftests: mptcp: connect: also cover checksum (Matthieu Baerts)
  - selftests: mptcp: connect: also cover alt modes (Matthieu Baerts)
  - resource: fix false warning in __request_region() (Akinobu Mita)
  - nilfs2: reject invalid file types when reading inodes (Ryusuke Konishi)
  - kasan: use vmalloc_dump_obj() for vmalloc error reports (Marco Elver)
  - ice: Fix a null pointer dereference in ice_copy_and_init_pkg() (Haoxiang Li) [Orabug: 38351928] {CVE-2025-38664}
  - gve: Fix stuck TX queue for DQ queue format (Praveen Kaligineedi)
  - e1000e: ignore uninitialized checksum word on tgp (Jacek Kowalski)
  - e1000e: disregard NVM checksum on tgp when valid checksum bit is not set (Jacek Kowalski)
  - dpaa2-switch: Fix device reference count leak in MAC endpoint handling (Ma Ke)
  - dpaa2-eth: Fix device reference count leak in MAC endpoint handling (Ma Ke)
  - arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (Ada Couprie Diaz) [Orabug: 38351989] {CVE-2025-38670}
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa0xxx (Edip Hazuri)
  - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx (Dawid Rezler)
  - sprintf.h requires stdarg.h (Stephen Rothwell)
  - bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint() (Ma Ke)
  - i2c: virtio: Avoid hang by using interruptible completion wait (Viresh Kumar)
  - i2c: tegra: Fix reset error handling with ACPI (Akhil R)
  - i2c: qup: jump out of the loop in case of timeout (Yang Xiwen) [Orabug: 38351992] {CVE-2025-38671}
  - timekeeping: Zero initialize system_counterval when querying time from phc drivers (Markus Blöchl)
  - ARM: 9450/1: Fix allowing linker DCE with binutils < 2.36 (Nathan Chancellor)
  - mm/ksm: fix -Wsometimes-uninitialized from clang-21 in advisor_mode_show() (Nathan Chancellor)
  - drm/sched: Remove optimization that causes hang when killing dependent jobs (Lin Cao)
  - drm/amdgpu: Reset the clear flag in buddy during resume (Arunpravin Paneer Selvam)
  - platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots (Rongrong)
  - platform/x86: ideapad-laptop: Fix FnLock not remembered among boots (Rongrong)
  - net: hns3: default enable tx bounce buffer when smmu enabled (Jijie Shao)
  - net: hns3: fixed vf get max channels bug (Jian Shen)
  - net: hns3: disable interrupt when ptp init failed (Yonglong Liu)
  - net: hns3: fix concurrent setting vlan filter issue (Jian Shen)
  - s390/ism: fix concurrency management in ism_cmd() (Halil Pasic)
  - selftests: drv-net: wait for iperf client to stop sending (Nimrod Oren)
  - ALSA: hda/realtek: Fix mute LED mask on HP OMEN 16 laptop (Sharan Kumar M)
  - drm/bridge: ti-sn65dsi86: Remove extra semicolon in ti_sn_bridge_probe() (Douglas Anderson)
  - can: netlink: can_changelink(): fix NULL pointer deref of struct can_priv::do_set_mode (Marc Kleine-Budde) [Orabug: 38351934] {CVE-2025-38665}
  - net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class (Xiang Mei)
  - net: appletalk: Fix use-after-free in AARP proxy probe (Kito Xu)
  - i40e: When removing VF MAC filters, only check PF-set MAC (Jamie Bainbridge)
  - i40e: report VF tx_dropped with tx_errors instead of tx_discards (Dennis Chen)
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Shahar Shitrit)
  - net/mlx5: Fix memory leak in cmd_exec() (Chiara Meiohas)
  - net: ti: icssg-prueth: Fix buffer allocation for ICSSG (Himanshu Mittal)
  - ASoC: mediatek: mt8365-dai-i2s: pass correct size to mt8365_dai_set_priv (Guoqing Jiang)
  - xfrm: interface: fix use-after-free after changing collect_md xfrm interface (Eyal Birger) [Orabug: 38310014,38453837] {CVE-2025-38500}
  - xfrm: Set transport header to fix UDP GRO handling (Tobias Brunner)
  - xfrm: state: use a consistent pcpu_id in xfrm_state_find (Sabrina Dubroca)
  - xfrm: state: initialize state_ptrs earlier in xfrm_state_find (Sabrina Dubroca) [Orabug: 38352014] {CVE-2025-38675}
  - staging: vchiq_arm: Make vchiq_shutdown never fail (Stefan Wahren)
  - platform/x86: Fix initialization order for firmware_attributes_class (Torsten Hilbrich)
  - x86/hyperv: Fix usage of cpu_online_mask to get valid cpu (Nuno Das Neves)
  - tools/hv: fcopy: Fix incorrect file path conversion (Yasumasa Suenaga)
  - platform/mellanox: mlxbf-pmc: Use kstrtobool() to check 0/1 input (Shravan Kumar Ramani)
  - platform/mellanox: mlxbf-pmc: Validate event/enable input (Shravan Kumar Ramani)
  - platform/mellanox: mlxbf-pmc: Remove newline char from event name input (Shravan Kumar Ramani)
  - regmap: fix potential memory leak of regmap_bus (Abdun Nihaal)
  - iio: adc: ad7949: use spi_is_bpw_supported() (David Lechner)
  - interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node (Xilin Wu)
  - RDMA/core: Rate limit GID cache warning messages (Maor Gottlieb)
  - platform/x86: asus-nb-wmi: add DMI quirk for ASUS Zenbook Duo UX8406CA (Rahul Chandra)
  - regulator: core: fix NULL dereference on unbind due to stale coupling data (Alessandro Carminati) [Orabug: 38351976] {CVE-2025-38668}
  - virtio_ring: Fix error reporting in virtqueue_resize (Laurent Vivier)
  - virtio_net: Enforce minimum TX ring size for reliability (Laurent Vivier)
  - Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT (Fabrice Gasnier) [Orabug: 38180691] {CVE-2025-38335}
  - x86/traps: Initialize DR7 by writing its architectural reset value (Xin Li)


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-104.43.2.el9uek]
changelog:
  - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit (Alok Tiwari) [Orabug: 38324321]
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu) [Orabug: 38327135]
  - uek-rpm: Add broken-out hsmp platform drivers (Dave Kleikamp) [Orabug: 38332412]
  - crypto: ccp - Add support for PCI device 0x17D8 (John Allen) [Orabug: 38332412]
  - x86/CPU/AMD: Add X86_FEATURE_ZEN6 (Yazen Ghannam) [Orabug: 38332412]
  - x86/cpufeatures: Free up unused feature bits (Sohil Mehta) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Make amd_hsmp and hsmp_acpi as mutually exclusive drivers (Suma Hegde) [Orabug: 38332412]
  - x86/amd_node, platform/x86/amd/hsmp: Have HSMP use SMN through AMD_NODE (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_node: Use defines for SMN register offsets (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_node: Remove dependency on AMD_NB (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_node: Update __amd_smn_rw() error paths (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_nb: Move SMN access code to a new amd_node driver (Mario Limonciello) [Orabug: 38332412]
  - x86/amd_nb, hwmon: (k10temp): Simplify amd_pci_dev_to_node_id() (Mario Limonciello) [Orabug: 38332412]
  - x86/amd_nb: Simplify function 3 search (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_nb: Use topology info to get AMD node count (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_nb: Simplify root device search (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_nb: Simplify function 4 search (Yazen Ghannam) [Orabug: 38332412]
  - x86: Start moving AMD node functionality out of AMD_NB (Yazen Ghannam) [Orabug: 38332412]
  - x86/amd_nb: Clean up early_is_amd_nb() (Yazen Ghannam) [Orabug: 38332412]
  - platform/x86/amd/hsmp: mark hsmp_msg_desc_table[] as maybe_unused (Arnd Bergmann) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Make hsmp_pdev static instead of global (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Use dev_groups in the driver structure (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Use name space while exporting module symbols (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Create separate ACPI, plat and common drivers (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Change generic plat_dev name to hsmp_pdev (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Move ACPI code to acpi.c (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Move platform device specific code to plat.c (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Move structure and macros to header file (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Convert amd_hsmp_rdwr() to a function pointer (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Create wrapper function init_acpi() (Suma Hegde) [Orabug: 38332412]
  - platform/x86/amd/hsmp: Create hsmp/ directory (Suma Hegde) [Orabug: 38332412]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-104.43.3.el9uek]
changelog:
  - squashfs: fix memory leak in squashfs_fill_super (Phillip Lougher) [Orabug: 38343659]
  - drm/mediatek: Add error handling for old state CRTC in atomic_disable (Jason-JH Lin) [Orabug: 38343659]
  - net: ipv4: fix regression in local-broadcast routes (Oscar Maes) [Orabug: 38343659]
  - net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization (Yuichiro Tsuji) [Orabug: 38401777] {CVE-2025-38736}
  - ksmbd: extend the connection limiting mechanism to support IPv6 (Namjae Jeon) [Orabug: 38343659]
  - ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Dan Carpenter) [Orabug: 38343659]
  - Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()" (Helge Deller) [Orabug: 38343659]
  - Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync() (Sergey Shtylyov) [Orabug: 38343659]
  - Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established (Pauli Virtanen) [Orabug: 38343659]
  - Bluetooth: hci_sync: Prevent unintended PA sync when SID is 0xFF (Yang Li) [Orabug: 38343659]
  - Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown (Jiande Lu) [Orabug: 38343659]
  - Bluetooth: hci_sync: Fix scan state after PA Sync has been established (Luiz Augusto von Dentz) [Orabug: 38343659]
  - igc: fix disabling L1.2 PCI-E link substate on I226 on init (Valdikss) [Orabug: 38343659]
  - drm/amdgpu/discovery: fix fw based ip discovery (Alex Deucher) [Orabug: 38343659]
  - Revert "drm/amdgpu: fix incorrect vm flags to map bo" (Alex Deucher) [Orabug: 38343659]
  - Revert "can: ti_hecc: fix -Woverflow compiler warning" (Greg Kroah-Hartman) [Orabug: 38343659]
  - proc: fix missing pde_set_flags() for net proc files (Zijie Wang) [Orabug: 38343659]
  - perf symbol-minimal: Fix ehdr reading in filename__read_build_id (Ian Rogers) [Orabug: 38343659]
  - vhost: Fix ioctl # for VHOST_[GS]ET_FORK_FROM_OWNER (Namhyung Kim) [Orabug: 38343659]
  - x86/vmscape: Warn when STIBP is disabled with SMT (Pawan Gupta) [Orabug: 38424089]
  - x86/bugs: Move cpu_bugs_smt_update() down (Pawan Gupta) [Orabug: 38424089]
  - x86/vmscape: Enable the mitigation (Pawan Gupta) [Orabug: 38424089]
  - x86/vmscape: Add conditional IBPB mitigation (Pawan Gupta) [Orabug: 38424089]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Josh Poimboeuf) [Orabug: 38424089]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Josh Poimboeuf) [Orabug: 38424089]
  - x86/vmscape: Add old Intel CPUs to affected list (Pawan Gupta) [Orabug: 38424089]
  - x86/vmscape: Enumerate VMSCAPE bug (Pawan Gupta) [Orabug: 38424089]
  - Documentation/hw-vuln: Add VMSCAPE documentation (Pawan Gupta) [Orabug: 38424089]
  - uek-rpm: Move ifb module to modules-core (Harshit Mogalapalli) [Orabug: 38435397]


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-104.43.4.el9uek]
changelog:
  - tls: fix handling of zero-length records on the rx_list (Jakub Kicinski) [Orabug: 38401543,38453832] {CVE-2025-39682}


author: Sherry Yang <sherry.yang@oracle.com> [6.12.0-105.43.1.el9uek]
changelog:
  - uek: kabi: update x86_64 kABI files for new symbols (Yifei Liu) [Orabug: 38019851]
  - net/rds: Enforce sibling ToS lanes are not UP when auto reaping a conn (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: replace rds_conn_addr_list with reentrant code (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: Auto-reap dropped conn via sysctl net.rds.conn_reap_after_drop_secs (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: Enable tracing for rds_conn_reap() (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: Disallow user conn reap via sysctl net.rds.conn_user_reap_enable (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: Add sockopt member all_tos to reset/reap all conns for src-dst (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: Reap rds_rdma connections via sockopt RDS_CONN_REAP (Sharath Srinivasan) [Orabug: 38343379]
  - net/rds: tracepoints for rds_conn_kref_get and put (Sharath Srinivasan) [Orabug: 38343388]
  - net/rds: Add krefs to struct rds_connection (Sharath Srinivasan) [Orabug: 38343388]
  - net/mlx5: HWS, fix bad parameter in CQ creation (Yevgeny Kliteynik) [Orabug: 38431789]
  - net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5e: Add pass flow group for IPSec RX status table (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5e: Add num_reserved_entries param for ipsec_ft_create() (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5e: Skip IPSec RX policy check for crypto offload (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5e: Move IPSec policy check after decryption (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5e: Change the destination of IPSec RX SA miss rule (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5e: Add helper function to update IPSec default destination (Jianbo Liu) [Orabug: 38431789]
  - net/mlx5: fs, add counter object to flow destination (Moshe Shemesh) [Orabug: 38431789]
  - net/mlx5: DR, moved all the SWS code into a separate directory (Yevgeny Kliteynik) [Orabug: 38431789]
  - net/mlx5: hw counters: Remove mlx5_fc_create_ex (Cosmin Ratiu) [Orabug: 38431789]
  - net/mlx5: hw counters: Don't maintain a counter count (Cosmin Ratiu) [Orabug: 38431789]
  - net/mlx5: hw counters: Drop unneeded cacheline alignment (Cosmin Ratiu) [Orabug: 38431789]
  - net/mlx5: hw counters: Replace IDR+lists with xarray (Cosmin Ratiu) [Orabug: 38431789]
  - net/mlx5: hw counters: Use kvmalloc for bulk query buffer (Cosmin Ratiu) [Orabug: 38431789]
  - net/mlx5: hw counters: Make fc_stats & fc_pool private (Cosmin Ratiu) [Orabug: 38431789]
  - uek: kabi: cleanup x86_64 kabi list for duplicate entries. (Yifei Liu) [Orabug: 38448304]
  - KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active (Maciej S. Szmigiero) [Orabug: 38459433]


author: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com> [6.12.0-105.49.2.el9uek]
changelog:
  - io_uring: Hide kabi magic from user space (Sherry Yang) [Orabug: 38463157]
  - LTS version: v6.12.49 (Harshit Mogalapalli)
  - minmax.h: remove some #defines that are only expanded once (David Laight)
  - minmax.h: simplify the variants of clamp() (David Laight)
  - minmax.h: move all the clamp() definitions after the min/max() ones (David Laight)
  - minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp() (David Laight)
  - minmax.h: reduce the #define expansion of min(), max() and clamp() (David Laight)
  - minmax.h: update some comments (David Laight)
  - minmax.h: add whitespace around operators and after commas (David Laight)
  - rtc: pcf2127: fix SPI command byte for PCF2131 backport (Bruno Thomsen)
  - xhci: dbc: Fix full DbC transfer ring after several reconnects (Mathias Nyman)
  - xhci: dbc: decouple endpoint allocation from initialization (Mathias Nyman)
  - usb: xhci: remove option to change a default ring's TRB cycle bit (Niklas Neronin)
  - usb: xhci: introduce macro for ring segment list iteration (Niklas Neronin)
  - mptcp: pm: nl: announce deny-join-id0 flag (Matthieu Baerts)
  - mm/gup: check ref_count instead of lru before migration (Hugh Dickins)
  - mm: add folio_expected_ref_count() for reference count calculation (Shivank Garg)
  - vmxnet3: unregister xdp rxq info in the reset path (Sankararaman Jayaraman) [Orabug: 37844478] {CVE-2025-22106}
  - platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk (Antheas Kapenekakis)
  - platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13 (Antheas Kapenekakis)
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Yang Xiuwei)
  - smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path (Stefan Metzmacher) [Orabug: 38503782] {CVE-2025-39929}
  - crypto: af_alg - Set merge to zero early in af_alg_sendmsg (Herbert Xu) [Orabug: 38503788] {CVE-2025-39931}
  - smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work) (Stefan Metzmacher) [Orabug: 38503796] {CVE-2025-39932}
  - smb: client: fix filename matching of deferred files (Paulo Alcantara)
  - drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue() (Dan Carpenter)
  - drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path (Qi Xi)
  - drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ (Loic Poulain)
  - drm/xe/tile: Release kobject for the failure path (Shuicheng Lin)
  - ASoC: Intel: catpt: Expose correct bit depth to userspace (Amadeusz Sławiński)
  - ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message (Colin Ian King)
  - ASoC: wm8974: Correct PLL rate rounding (Charles Keepax)
  - ASoC: wm8940: Correct typo in control name (Charles Keepax)
  - ASoC: wm8940: Correct PLL rate rounding (Charles Keepax)
  - io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check (Jens Axboe)
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jens Axboe)
  - io_uring: include dying ring in task_work "should cancel" state (Jens Axboe)
  - io_uring: backport io_should_terminate_tw() (Jens Axboe)
  - io_uring/cmd: let cmds to know about dying task (Pavel Begunkov)
  - ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx (Praful Adiga)
  - selftests: mptcp: avoid spurious errors on TCP disconnect (Matthieu Baerts)
  - selftests: mptcp: connect: catch IO errors on listen side (Matthieu Baerts)
  - mptcp: propagate shutdown to subflows when possible (Matthieu Baerts)
  - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Hans de Goede)
  - drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put (Ivan Lipski)
  - mmc: mvsdio: Fix dma_unmap_sg() nents value (Thomas Fourier)
  - ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S (Mohammad Rafi Shaik)
  - ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed (Krzysztof Kozlowski)
  - ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface (Mohammad Rafi Shaik)
  - btrfs: tree-checker: fix the incorrect inode ref size check (Qu Wenruo)
  - iommu/amd/pgtbl: Fix possible race while increase page table level (Vasant Hegde)
  - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() (Eugene Koira)
  - LoongArch: Check the return value when creating kobj (Tao Cui)
  - LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled (Huacai Chen)
  - LoongArch: vDSO: Check kcalloc() result in init_vdso() (Guangshuo Li)
  - LoongArch: Fix unreliable stack for live patching (Tiezhu Yang)
  - objtool/LoongArch: Mark special atomic instruction as INSN_BUG type (Tiezhu Yang)
  - objtool/LoongArch: Mark types based on break immediate code (Tiezhu Yang)
  - LoongArch: Update help info of ARCH_STRICT_ALIGN (Tiezhu Yang)
  - mm: revert "mm: vmscan.c: fix OOM on swap stress test" (Hugh Dickins)
  - gup: optimize longterm pin_user_pages() for large folio (Li Zhe)
  - dm-stripe: fix a possible integer overflow (Mikulas Patocka) [Orabug: 38503824] {CVE-2025-39940}
  - dm-raid: don't set io_min and io_opt for raid1 (Mikulas Patocka)
  - power: supply: bq27xxx: restrict no-battery detection to bq27000 (H. Nikolaus Schaller)
  - power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery (H. Nikolaus Schaller)
  - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg (Herbert Xu)
  - nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/* (Nathan Chancellor)
  - ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size (Stefan Metzmacher)
  - ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer (Namjae Jeon)
  - perf/x86/intel: Fix crash in icl_update_topdown_event() (Kan Liang) [Orabug: 38180828] {CVE-2025-38322}
  - octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp() (Duoming Zhou)
  - cnic: Fix use-after-free bugs in cnic_delete_task (Duoming Zhou) [Orabug: 38503847] {CVE-2025-39945}
  - net: liquidio: fix overflow in octeon_init_instr_queue() (Alexey Nepomnyashih)
  - Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set" (Tariq Toukan)
  - tls: make sure to abort the stream if headers are bogus (Jakub Kicinski) [Orabug: 38503856] {CVE-2025-39946}
  - tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect(). (Kuniyuki Iwashima)
  - octeon_ep: fix VF MAC address lifecycle handling (Sathesh Edara)
  - bonding: don't set oif to bond dev when getting NS target destination (Hangbin Liu)
  - net/mlx5e: Harden uplink netdev access against device unbind (Jianbo Liu) [Orabug: 38503862] {CVE-2025-39947}
  - igc: don't fail igc_probe() on LED setup error (Kohei Enju)
  - i40e: remove redundant memory barrier when cleaning Tx descs (Maciej Fijalkowski)
  - ice: fix Rx page leak on multi-buffer frames (Jacob Keller) [Orabug: 38503866] {CVE-2025-39948}
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Jacob Keller)
  - net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure (Moon Yeounsu)
  - selftests: mptcp: sockopt: fix error messages (Geliang Tang)
  - mptcp: tfo: record 'deny join id0' info (Matthieu Baerts)
  - selftests: mptcp: userspace pm: validate deny-join-id0 flag (Matthieu Baerts)
  - mptcp: set remote_deny_join_id0 on SYN recv (Matthieu Baerts)
  - bonding: set random address only when slaves already exist (Hangbin Liu)
  - qed: Don't collect too many protection override GRC elements (Jamie Bainbridge) [Orabug: 38503868] {CVE-2025-39949}
  - net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR (Anderson Nascimento)
  - dpaa2-switch: fix buffer pool seeding for control traffic (Ioana Ciornei)
  - um: Fix FD copy size in os_rcv_fd_msg() (Tiwei Bie)
  - um: virtio_uml: Fix use-after-free after put_device in probe (Miaoqian Lin)
  - btrfs: fix invalid extref key setup when replaying dentry (Filipe Manana)
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Chen Ridong) [Orabug: 38503889] {CVE-2025-39953}
  - pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch (Geert Uytterhoeven)
  - wifi: mac80211: fix incorrect type for ret (Liao Yuanhong)
  - wifi: mac80211: increase scan_ies_len for S1G (Lachlan Hodges)
  - ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported (Takashi Sakamoto)
  - nvme: fix PI insert on write (Christoph Hellwig)
  - wifi: wilc1000: avoid buffer overflow in WID string configuration (Ajay Singh)
  - LTS version: v6.12.48 (Harshit Mogalapalli)
  - x86: disable image size check for test builds (Guenter Roeck)
  - netfilter: nft_set_pipapo: fix null deref for empty set (Florian Westphal) [Orabug: 38492667] {CVE-2025-39867}
  - drm/amdgpu: fix a memory leak in fence cleanup when unloading (Alex Deucher)
  - drm/i915/power: fix size for for_each_set_bit() in abox iteration (Jani Nikula)
  - net: mdiobus: release reset_gpio in mdiobus_unregister_device() (Csaba Buday)
  - x86/cpu/topology: Always try cpu_parse_topology_ext() on AMD/Hygon (K Prateek Nayak)
  - phy: ti-pipe3: fix device leak at unbind (Johan Hovold)
  - phy: ti: omap-usb2: fix device leak at unbind (Johan Hovold)
  - phy: tegra: xusb: fix device and OF node leak at probe (Johan Hovold)
  - dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate (Miaoqian Lin)
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Stephan Gerhold) [Orabug: 38494820] {CVE-2025-39923}
  - usb: gadget: midi2: Fix MIDI2 IN EP max packet size (Takashi Iwai)
  - usb: gadget: midi2: Fix missing UMP group attributes initialization (Takashi Iwai)
  - usb: typec: tcpm: properly deliver cable vdms to altmode drivers (Rd Babiera)
  - USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels (Alan Stern)
  - xhci: fix memory leak regression when freeing xhci vdev devices depth first (Mathias Nyman)
  - RISC-V: Remove unnecessary include from compat.h (Palmer Dabbelt)
  - regulator: sy7636a: fix lifecycle of power good gpio (Andreas Kemnade)
  - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Anders Roxell)
  - dmaengine: idxd: Fix double free in idxd_setup_wqs() (Dan Carpenter) [Orabug: 38461885] {CVE-2025-39870}
  - dmaengine: idxd: Fix refcount underflow on module unload (Yi Sun)
  - dmaengine: idxd: Remove improper idxd_free (Yi Sun) [Orabug: 38461887] {CVE-2025-39871}
  - phy: qualcomm: phy-qcom-eusb2-repeater: fix override properties (Pengyu Luo)
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Hangbin Liu)
  - hsr: use rtnl lock when iterating over ports (Hangbin Liu)
  - net: hsr: Add VLAN CTAG filter support (Murali Karicheri)
  - netfilter: nf_tables: restart set lookup on base_seq change (Florian Westphal)
  - netfilter: nf_tables: make nft_set_do_lookup available unconditionally (Florian Westphal)
  - netfilter: nf_tables: place base_seq in struct net (Florian Westphal)
  - netfilter: nf_tables: Reintroduce shortened deletion notifications (Phil Sutter)
  - netfilter: nft_set_rbtree: continue traversal if element is inactive (Florian Westphal)
  - netfilter: nft_set_pipapo: don't check genbit from packetpath lookups (Florian Westphal)
  - netfilter: nft_set_pipapo: don't return bogus extension pointer (Florian Westphal)
  - netfilter: nft_set_pipapo: merge pipapo_get/lookup (Florian Westphal)
  - netfilter: nft_set: remove one argument from lookup and update functions (Florian Westphal)
  - netfilter: nft_set_pipapo: remove unused arguments (Florian Westphal)
  - can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB (Anssi Hannula)
  - can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails (Tetsuo Handa)
  - can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed (Tetsuo Handa)
  - drm/amd/display: use udelay rather than fsleep (Alex Deucher)
  - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path (Michal Schmidt) [Orabug: 38494785] {CVE-2025-39911}
  - igb: fix link test skipping when interface is admin down (Kohei Enju)
  - docs: networking: can: change bcm_msg_head frames member to support flexible array (Alex Tran)
  - tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart)
  - net: bridge: Bounce invalid boolopts (Petr Machata)
  - genetlink: fix genl_bind() invoking bind() after -EPERM (Alok Tiwari) [Orabug: 38494831] {CVE-2025-39926}
  - net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable() (Stefan Wahren)
  - drm/panthor: validate group queue count (Chia-I Wu)
  - Disable SLUB_TINY for build testing (Linus Torvalds)
  - USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
  - USB: serial: option: add Telit Cinterion FN990A w/audio compositions (Fabio Porcedda)
  - dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks (Krzysztof Kozlowski)
  - serial: sc16is7xx: fix bug in flow control levels init (Hugo Villeneuve)
  - tty: hvc_console: Call hvc_kick in hvc_write unconditionally (Fabian Vogt)
  - Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups" (Paolo Abeni)
  - Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table (Christoffer Sandberg)
  - Input: iqs7222 - avoid enabling unused interrupts (Jeff Labundy)
  - hrtimers: Unconditionally update target CPU base after offline timer migration (Xiongfeng Wang)
  - btrfs: fix corruption reading compressed range when block size is smaller than page size (Qu Wenruo)
  - btrfs: use readahead_expand() on compressed extents (Boris Burkov)
  - mtd: spinand: winbond: Fix oob_layout for W25N01JW (Santhosh Kumar K)
  - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Jeongjun Park)
  - mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters() (Quanmin Yan)
  - mm/damon/sysfs: fix use-after-free in state_show() (Stanislav Fort) [Orabug: 38461827] {CVE-2025-39877}
  - ceph: fix race condition where r_parent becomes stale before sending message (Alex Markuze)
  - ceph: fix race condition validating r_parent before applying state (Alex Markuze) [Orabug: 38494833] {CVE-2025-39927}
  - libceph: fix invalid accesses to ceph_connection_v1_info (Ilya Dryomov) [Orabug: 38461835] {CVE-2025-39880}
  - kernfs: Fix UAF in polling when open file is released (Chen Ridong) [Orabug: 38461841] {CVE-2025-39881}
  - netlink: specs: mptcp: fix if-idx attribute type (Matthieu Baerts)
  - netlink: specs: mptcp: replace underscores with dashes in names (Jakub Kicinski)
  - netlink: specs: mptcp: clearly mention attributes (Matthieu Baerts)
  - netlink: specs: mptcp: add missing 'server-side' attr (Matthieu Baerts)
  - drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages (David Rosca)
  - drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time (David Rosca)
  - drm/xe: Attempt to bring bos back to VRAM after eviction (Thomas Hellström)
  - drm/mediatek: fix potential OF node use-after-free (Johan Hovold)
  - mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters() (Quanmin Yan)
  - mm/damon/core: set quota->charged_from to jiffies at first charge window (Sang-Heon Jeon)
  - mm/memory-failure: fix redundant updates for already poisoned pages (Kyle Meyer)
  - mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (Miaohe Lin) [Orabug: 38461846] {CVE-2025-39883}
  - mm/khugepaged: fix the address passed to notifier on testing young (Wei Yang)
  - fuse: prevent overflow in copy_file_range return value (Miklos Szeredi)
  - fuse: check if copy_file_range() returns larger than requested size (Miklos Szeredi)
  - fuse: do not allow mapping a non-regular backing file (Amir Goldstein)
  - mtd: rawnand: stm32_fmc2: fix ECC overwrite (Christophe Kerello)
  - mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer (Christophe Kerello)
  - mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing (Alexander Sverdlin)
  - net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups (Oleksij Rempel)
  - i2c: i801: Hide Intel Birch Stream SoC TCO WDT (Chiasheng Lee)
  - btrfs: fix subvolume deletion lockup caused by inodes xarray race (Omar Sandoval) [Orabug: 38461854] {CVE-2025-39884}
  - btrfs: fix squota compressed stats leak (Boris Burkov)
  - ocfs2: fix recursive semaphore deadlock in fiemap call (Mark Tinguely) [Orabug: 38461857] {CVE-2025-39885}
  - mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN (Krister Johansen)
  - compiler-clang.h: define __SANITIZE_*__ macros only when undefined (Nathan Chancellor)
  - EDAC/altera: Delete an inappropriate dma_free_coherent() call (Salah Triki)
  - proc: fix type confusion in pde_set_flags() (Zijie Wang)
  - tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork. (Kuniyuki Iwashima) [Orabug: 38494795] {CVE-2025-39913}
  - bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init() (Peilin Ye) [Orabug: 38461865] {CVE-2025-39886}
  - bpf: Allow fall back to interpreter for programs with stack size <= 512 (Kafai Wan)
  - bpf: Fix out-of-bounds dynptr write in bpf_crypto_crypt (Daniel Borkmann) [Orabug: 38494805] {CVE-2025-39917}
  - s390/cpum_cf: Deny all sampling events by counter PMU (Thomas Richter)
  - s390/pai: Deny all events not handled by this PMU (Thomas Richter)
  - tracing: Silence warning when chunk allocation fails in trace_pid_write (Pu Lehui) [Orabug: 38494800] {CVE-2025-39914}
  - NFSv4/flexfiles: Fix layout merge mirror check. (Jonathan Curley)
  - NFS: nfs_invalidate_folio() must observe the offset and size arguments (Trond Myklebust)
  - NFSv4.2: Serialise O_DIRECT i/o and copy range (Trond Myklebust)
  - NFSv4.2: Serialise O_DIRECT i/o and clone range (Trond Myklebust)
  - NFSv4.2: Serialise O_DIRECT i/o and fallocate() (Trond Myklebust)
  - NFS: Serialise O_DIRECT i/o and truncate() (Trond Myklebust)
  - fs/nfs/io: make nfs_start_io_*() killable (Max Kellermann)
  - ftrace/samples: Fix function size computation (Vladimir Riabchun)
  - nfs/localio: restore creds before releasing pageio data (Scott Mayhew)
  - nfs/localio: add direct IO enablement with sync and async IO support (Mike Snitzer)
  - nfs/localio: remove extra indirect nfs_to call to check {read,write}_iter (Mike Snitzer)
  - tracing: Fix tracing_marker may trigger page fault during preempt_disable (Luo Gengkun)
  - NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server (Trond Myklebust)
  - NFSv4: Clear NFS_CAP_OPEN_XOR and NFS_CAP_DELEGTIME if not supported (Trond Myklebust)
  - NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set (Trond Myklebust)
  - trace/fgraph: Fix error handling (Guenter Roeck)
  - NFSv4: Don't clear capabilities that won't be reset (Trond Myklebust)
  - SUNRPC: call xs_sock_process_cmsg for all cmsg (Justin Worrell)
  - flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read (Tigran Mkrtchyan)
  - drm/amdgpu: Add back JPEG to video caps for carrizo and newer (David Rosca)
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA (Takashi Iwai)
  - Revert "drm/amd/display: Optimize cursor position updates" (Aurabindo Pillai)
  - drm/amd/display: Fix error pointers in amdgpu_dm_crtc_mem_type_changed (Srinivasan Shanmugam)
  - drm/i915/pmu: Fix zero delta busyness issue (Umesh Nerlige Ramappa)
  - ext4: introduce linear search for dentries (Theodore Ts'O)
  - Revert "udmabuf: fix vmap_udmabuf error page set" (Huan Yang)
  - nvme-pci: skip nvme_write_sq_db on empty rqlist (Maurizio Lombardi)
  - dma-debug: fix physical address calculation for struct dma_debug_entry (Fedor Pchelkin)
  - dma-mapping: fix swapped dir/flags arguments to trace_dma_alloc_sgt_err (Sean Anderson)
  - mm: introduce and use {pgd,p4d}_populate_kernel() (Harry Yoo)
  - net/mlx5: HWS, change error flow on matcher disconnect (Yevgeny Kliteynik)
  - kunit: kasan_test: disable fortify string checker on kasan_strings() test (Levi Yun)
  - dma-debug: don't enforce dma mapping check on noncoherent allocations (Baochen Qiang)
  - dma-mapping: trace more error paths (Sean Anderson)
  - dma-mapping: use trace_dma_alloc for dma_alloc* instead of using trace_dma_map (Sean Anderson)
  - dma-mapping: trace dma_alloc/free direction (Sean Anderson)
  - dma-debug: store a phys_addr_t in struct dma_debug_entry (Christoph Hellwig)
  - fhandle: use more consistent rules for decoding file handle from userns (Amir Goldstein)
  - LTS version: v6.12.47 (Harshit Mogalapalli)
  - LTS version: v6.12.46 (Harshit Mogalapalli)
  - dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
  - md/raid1: fix data lost for writemostly rdev (Yu Kuai)
  - riscv, bpf: use lw when reading int cpu in bpf_get_smp_processor_id (Radim Krčmář)
  - riscv, bpf: use lw when reading int cpu in BPF_MOV64_PERCPU_REG (Radim Krčmář)
  - riscv: use lw when reading int cpu in asm_per_cpu (Radim Krčmář)
  - riscv: use lw when reading int cpu in new_vmalloc_check (Radim Krčmář)
  - riscv: Only allow LTO with CMODEL_MEDANY (Nathan Chancellor)
  - ACPI: RISC-V: Fix FFH_CPPC_CSR error handling (Anup Patel)
  - md: prevent incorrect update of resync/recovery offset (Li Nan)
  - tools: gpio: remove the include directory on make clean (Zhang Jiao)
  - drm/amd/amdgpu: Fix missing error return on kzalloc failure (Colin Ian King)
  - perf bpf-utils: Harden get_bpf_prog_info_linear (Ian Rogers)
  - perf bpf-utils: Constify bpil_array_desc (Ian Rogers)
  - perf bpf-event: Fix use-after-free in synthesis (Ian Rogers)
  - drm/bridge: ti-sn65dsi86: fix REFCLK setting (Michael Walle)
  - spi: spi-fsl-lpspi: Clear status register after disabling the module (Larisa Grigore)
  - spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort (Larisa Grigore)
  - spi: spi-fsl-lpspi: Set correct chip-select polarity bit (Larisa Grigore)
  - spi: spi-fsl-lpspi: Fix transmissions when using CONT (Larisa Grigore)
  - scsi: sr: Reinstate rotational media flag (Ming Lei)
  - block: add a queue_limits_commit_update_frozen helper (Christoph Hellwig)
  - hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM (Vadim Pasternak)
  - platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (David Arcari)
  - platform/x86: asus-wmi: Remove extra keys from ignore_key_wlan quirk (Antheas Kapenekakis)
  - pcmcia: Add error handling for add_interval() in do_validate_mem() (Xu Wang)
  - pcmcia: omap: Add missing check for platform_get_resource (Chen Ni)
  - Revert "drm/amdgpu: Avoid extra evict-restore process." (Alex Deucher)
  - ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY (Aaron Erhardt)
  - ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model (Takashi Iwai)
  - rust: support Rust >= 1.91.0 target spec (Miguel Ojeda)
  - dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status() (Qiu-Ji Chen)
  - thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold (Nícolas F R A Prado)
  - mm: fix accounting of memmap pages (Sumanth Korikkar)
  - kunit: kasan_test: disable fortify string checker on kasan_strings() test (Levi Yun)
  - nouveau: fix disabling the nonstall irq due to storm code (Dave Airlie)
  - mm/slub: avoid accessing metadata when pointer is invalid in object_err() (Li Qiong) [Orabug: 38494758] {CVE-2025-39902}
  - mm, slab: cleanup slab_bug() parameters (Vlastimil Babka)
  - mm: slub: call WARN() when detecting a slab corruption (Hyesoo Yu)
  - mm: slub: Print the broken data before restoring them (Hyesoo Yu)
  - md/md-bitmap: fix wrong bitmap_limit for clustermd when write sb (Su Yue) [Orabug: 37844677] {CVE-2025-22124}
  - net: fix NULL pointer dereference in l3mdev_l3_rcv (Wang Liang) [Orabug: 37844462] {CVE-2025-22103}
  - wifi: ath11k: update channel list in worker when wait flag is set (Wen Gong)
  - wifi: ath11k: update channel list in reg notifier instead reg worker (Wen Gong) [Orabug: 37844571] {CVE-2025-23133}
  - ext4: avoid journaling sb update on error if journal is destroying (Ojaswin Mujoo) [Orabug: 37844503] {CVE-2025-22113}
  - ext4: define ext4_journal_destroy wrapper (Ojaswin Mujoo)
  - md/raid1,raid10: strip REQ_NOWAIT from member bios (Zheng Qixing)
  - md/raid1,raid10: don't handle IO error for REQ_RAHEAD and REQ_NOWAIT (Yu Kuai)
  - md/raid1,raid10: don't ignore IO flags (Yu Kuai)
  - net: dsa: b53: do not enable EEE on bcm63xx (Jonas Gorski) [Orabug: 38180448] {CVE-2025-38272}
  - net: dsa: b53/bcm_sf2: implement .support_eee() method (Russell King)
  - net: dsa: provide implementation of .support_eee() (Russell King)
  - net: dsa: add hook to determine whether EEE is supported (Russell King)
  - fs/fhandle.c: fix a race in call of has_locked_children() (Al Viro) [Orabug: 38180547] {CVE-2025-38306}
  - microchip: lan865x: Fix LAN8651 autoloading (Stefan Wahren)
  - microchip: lan865x: Fix module autoloading (Stefan Wahren)
  - net: pcs: rzn1-miic: Correct MODCTRL register offset (Lad Prabhakar)
  - e1000e: fix heap overflow in e1000_set_eeprom (Vitaly Lifshits) [Orabug: 38494738] {CVE-2025-39898}
  - cifs: prevent NULL pointer dereference in UTF16 conversion (Makar Semyonov) [Orabug: 38456730] {CVE-2025-39838}
  - batman-adv: fix OOB read/write in network-coding decode (Stanislav Fort)
  - scsi: lpfc: Fix buffer free/clear order in deferred receive path (John Evans) [Orabug: 38456752] {CVE-2025-39841}
  - platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list (Christoffer Sandberg)
  - drm/amd/display: Clear the CUR_ENABLE register on DCN314 w/out DPP PG (Ivan Lipski)
  - drm/amdgpu: drop hw access in non-DC audio fini (Alex Deucher)
  - net: ethernet: oa_tc6: Handle failure of spi_setup (Stefan Wahren)
  - wifi: mt76: mt7925: fix the wrong bss cleanup for SAP (Ming Yen Hsieh)
  - wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() (Nathan Chancellor)
  - wifi: mt76: mt7925u: use connac3 tx aggr check in tx complete (Ming Yen Hsieh)
  - wifi: mwifiex: Initialize the chan_stats array to zero (Rong Qianfeng) [Orabug: 38494721] {CVE-2025-39891}
  - soc: qcom: mdt_loader: Deal with zero e_shentsize (Bjorn Andersson)
  - of_numa: fix uninitialized memory nodes causing kernel panic (Yin Tirui) [Orabug: 38494765] {CVE-2025-39903}
  - ocfs2: prevent release journal inode after journal shutdown (Edward Adam Davis) [Orabug: 38456756] {CVE-2025-39842}
  - kasan: fix GCC mem-intrinsic prefix with sw tags (Ada Couprie Diaz)
  - sched: Fix sched_numa_find_nth_cpu() if mask offline (Christian Loehle) [Orabug: 38494732] {CVE-2025-39895}
  - mm: slub: avoid wake up kswapd in set_track_prepare (Yangshiguang) [Orabug: 38456759] {CVE-2025-39843}
  - mm: fix possible deadlock in kmemleak (Gu Bowen)
  - mm: move page table sync declarations to linux/pgtable.h (Harry Yoo) [Orabug: 38456762] {CVE-2025-39844}
  - mm/userfaultfd: fix kmap_local LIFO ordering for CONFIG_HIGHPTE (Sasha Levin) [Orabug: 38494745] {CVE-2025-39899}
  - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Harry Yoo) [Orabug: 38456765] {CVE-2025-39845}
  - io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jens Axboe) [Orabug: 38254135] {CVE-2025-38453}
  - pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region() (Ma Ke)
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (Miaoqian Lin)
  - accel/ivpu: Prevent recovery work from being queued during device removal (Karol Wachowski)
  - ALSA: usb-audio: Add mute TLV for playback volumes on some devices (Cryolitia Pukngae)
  - phy: mscc: Stop taking ts_lock for tx_queue and use its own lock (Horatiu Vultur)
  - selftest: net: Fix weird setsockopt() in bind_bhash.c. (Kuniyuki Iwashima)
  - ppp: fix memory leak in pad_compress_skb (Qingfang Deng) [Orabug: 38456779] {CVE-2025-39847}
  - net: xilinx: axienet: Add error handling for RX metadata pointer retrieval (Abin Joseph)
  - net: atm: fix memory leak in atm_register_sysfs when device_register fail (Wang Liang)
  - ax25: properly unshare skbs in ax25_kiss_rcv() (Eric Dumazet)
  - mctp: return -ENOPROTOOPT for unknown getsockopt options (Alok Tiwari)
  - net/smc: Remove validation of reserved bits in CLC Decline message (Mahanta Jambigi)
  - ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init() (Dan Carpenter)
  - net: thunder_bgx: decrement cleanup index before use (Rosen Penev)
  - net: thunder_bgx: add a missing of_node_put (Rosen Penev)
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (Dan Carpenter) [Orabug: 38456796] {CVE-2025-39849}
  - wifi: libertas: cap SSID len in lbs_associate() (Dan Carpenter)
  - wifi: cw1200: cap SSID length in cw1200_do_join() (Dan Carpenter)
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (Ido Schimmel) [Orabug: 38456798] {CVE-2025-39850}
  - vxlan: Rename FDB Tx lookup function (Ido Schimmel)
  - vxlan: Add RCU read-side critical sections in the Tx path (Ido Schimmel)
  - vxlan: Avoid unnecessary updates to FDB 'used' time (Ido Schimmel)
  - vxlan: Refresh FDB 'updated' time upon 'NTF_USE' (Ido Schimmel)
  - net: vxlan: rename SKB_DROP_REASON_VXLAN_NO_REMOTE (Radu Rendec)
  - net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit() (Menglong Dong)
  - net: vxlan: use kfree_skb_reason() in vxlan_xmit() (Menglong Dong)
  - net: vxlan: make vxlan_set_mac() return drop reasons (Menglong Dong)
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (Ido Schimmel) [Orabug: 38456803] {CVE-2025-39851}
  - net: vxlan: make vxlan_snoop() return drop reasons (Menglong Dong)
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Menglong Dong)
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Menglong Dong)
  - net: skb: add pskb_network_may_pull_reason() helper (Menglong Dong)
  - net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets (Felix Fietkau)
  - net/tcp: Fix socket memory leak in TCP-AO failure handling for IPv6 (Christoph Paasch) [Orabug: 38456808] {CVE-2025-39852}
  - wifi: ath11k: fix group data packet drops during rekey (Rameshkumar Sundaram)
  - ixgbe: fix incorrect map used in eee linkmode (Alok Tiwari) [Orabug: 38494817] {CVE-2025-39922}
  - i40e: Fix potential invalid access when MAC list is empty (Zhen Ni) [Orabug: 38456812] {CVE-2025-39853}
  - i40e: remove read access to debugfs files (Jacob Keller) [Orabug: 38494752] {CVE-2025-39901}
  - idpf: set mac type when adding and removing MAC filters (Emil Tantilov)
  - ice: fix NULL access of tx->in_use in ice_ll_ts_intr (Jacob Keller) [Orabug: 38456820] {CVE-2025-39854}
  - net: mctp: mctp_fraq_queue should take ownership of passed skb (Jeremy Kerr)
  - net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync() (Liu Jian)
  - macsec: read MACSEC_SA_ATTR_PN with nla_get_uint (Sabrina Dubroca)
  - net: macb: Fix tx_ptr_lock locking (Sean Anderson)
  - icmp: fix icmp_ndo_send address translation for reply direction (Fabian Bläse)
  - bnxt_en: fix incorrect page count in RX aggr ring log (Alok Tiwari)
  - selftests: drv-net: csum: fix interface name for remote host (Jakub Kicinski)
  - mISDN: Fix memory leak in dsp_hwec_enable() (Miaoqian Lin)
  - xirc2ps_cs: fix register access when enabling FullDuplex (Alok Tiwari)
  - net_sched: gen_estimator: fix est_timer() vs CONFIG_PREEMPT_RT=y (Eric Dumazet) [Orabug: 38494749] {CVE-2025-39900}
  - netfilter: nft_flowtable.sh: re-run with random mtu sizes (Florian Westphal)
  - Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen() (Kuniyuki Iwashima) [Orabug: 38456832] {CVE-2025-39860}
  - Bluetooth: vhci: Prevent use-after-free by removing debugfs files early (Ivan Pravdin) [Orabug: 38456841] {CVE-2025-39861}
  - wifi: iwlwifi: uefi: check DSM item validity (Johannes Berg)
  - netfilter: conntrack: helper: Replace -EEXIST by -EBUSY (Phil Sutter)
  - netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm (Wang Liang) [Orabug: 38494729] {CVE-2025-39894}
  - wifi: mt76: fix linked list corruption (Felix Fietkau) [Orabug: 38494807] {CVE-2025-39918}
  - wifi: mt76: free pending offchannel tx frames on wcid cleanup (Felix Fietkau)
  - wifi: mt76: prevent non-offchannel mgmt tx during scan/roc (Felix Fietkau)
  - wifi: mt76: mt7925: fix locking in mt7925_change_vif_links() (Harshit Mogalapalli)
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Duoming Zhou) [Orabug: 38456848] {CVE-2025-39863}
  - wifi: cfg80211: fix use-after-free in cmp_bss() (Dmitry Antipov) [Orabug: 38456857] {CVE-2025-39864}
  - mmc: sdhci-of-arasan: Ensure CD logic stabilization before power-up (Sai Krishna Potthuri)
  - mmc: sdhci-of-arasan: Support for emmc hardware reset (Paul Alvin)
  - LoongArch: vDSO: Remove -nostdlib complier flag (Guan Wentao)
  - LoongArch: vDSO: Remove --hash-style=sysv (Xi Ruoyao)
  - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition (Fabio Porcedda)
  - net: usb: qmi_wwan: fix Telit Cinterion FE990A name (Fabio Porcedda)
  - net: usb: qmi_wwan: fix Telit Cinterion FN990A name (Fabio Porcedda)
  - HID: core: Harden s32ton() against conversion to 0 bits (Alan Stern) [Orabug: 38334902] {CVE-2025-38556}
  - HID: stop exporting hid_snto32() (Dmitry Torokhov)
  - HID: simplify snto32() (Dmitry Torokhov)
  - arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC (Marek Vasut)
  - arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM (Marek Vasut)
  - arm64: dts: imx8mp-tqma8mpql: fix LDO5 power off (Markus Niebel)
  - tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible" (Sungbae Yoo)
  - arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro (Peter Robinson)
  - tee: fix memory leak in tee_dyn_shm_alloc_helper (Pei Xiao)
  - tee: fix NULL pointer dereference in tee_shm_put (Pei Xiao) [Orabug: 38456864] {CVE-2025-39865}
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (Jiufei Xue) [Orabug: 38456869] {CVE-2025-39866}
  - btrfs: zoned: skip ZONE FINISH of conventional zones (Johannes Thumshirn)
  - Bluetooth: hci_sync: Avoid adding default advertising on startup (Yang Li)
  - cpupower: Fix a bug where the -t option of the set subcommand was not working. (Shinji Nomoto)
  - drm/amd/display: Don't warn when missing DCE encoder caps (Timur Kristóf)
  - cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN (Lubomir Rintel)
  - LoongArch: Save LBT before FPU in setup_sigcontext() (Huacai Chen)
  - btrfs: avoid load/store tearing races when checking if an inode was logged (Filipe Manana)
  - btrfs: fix race between setting last_dir_index_offset and inode logging (Filipe Manana)
  - btrfs: fix race between logging inode and checking if it was logged before (Filipe Manana)
  - bpf: Fix oob access in cgroup local storage (Daniel Borkmann) [Orabug: 38324116] {CVE-2025-38502}
  - bpf: Move cgroup iterator helpers to bpf.h (Daniel Borkmann)
  - bpf: Move bpf map owner out of common struct (Daniel Borkmann)
  - bpf: Add cookie object to bpf maps (Daniel Borkmann)
  - LTS version: v6.12.45 (Harshit Mogalapalli)
  - thermal/drivers/mediatek/lvts_thermal: Add mt7988 lvts commands (Mason-Cw Chang)
  - thermal/drivers/mediatek/lvts_thermal: Add lvts commands and their sizes to driver data (Mason-Cw Chang)
  - thermal/drivers/mediatek/lvts_thermal: Change lvts commands array to static const (Mason-Cw Chang)
  - Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS" (Imre Deak)
  - PCI: dwc: Ensure that dw_pcie_wait_for_link() waits 100 ms after link up (Niklas Cassel)
  - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to PCIE_RESET_CONFIG_WAIT_MS (Niklas Cassel)
  - net: rose: fix a typo in rose_clear_routes() (Eric Dumazet)
  - drm/amd/amdgpu: disable hwmon power1_cap* for gfx 11.0.3 on vf mode (Yang Wang)
  - drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv (Ma Ke)
  - drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (Timur Tabi)
  - drm/nouveau/disp: Always accept linear modifier (James Jones)
  - drm/xe/vm: Clear the scratch_pt pointer on error (Thomas Hellström)
  - xfs: do not propagate ENODATA disk errors into xattr code (Eric Sandeen) [Orabug: 38440384] {CVE-2025-39835}
  - smb3 client: fix return code mapping of remap_file_range (Steve French)
  - net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions (Fabio Porcedda)
  - fs/smb: Fix inconsistent refcnt update (Shuhao Fu) [Orabug: 38440283] {CVE-2025-39819}
  - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted (Shanker Donthineni)
  - blk-zoned: Fix a lockdep complaint about recursive locking (Bart Van Assche)
  - HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version() (Minjong Kim) [Orabug: 38440226] {CVE-2025-39808}
  - HID: wacom: Add a new Art Pen 2 (Ping Cheng)
  - HID: logitech: Add ids for G PRO 2 LIGHTSPEED (Matt Coffin)
  - HID: quirks: add support for Legion Go dual dinput modes (Antheas Kapenekakis)
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (Qasim Ijaz) [Orabug: 38440221] {CVE-2025-39806}
  - HID: asus: fix UAF via HID_CLAIMED_INPUT validation (Qasim Ijaz) [Orabug: 38440308] {CVE-2025-39824}
  - x86/cpu/topology: Use initial APIC ID from XTOPOLOGY leaf on AMD/HYGON (K Prateek Nayak)
  - x86/microcode/AMD: Handle the case of no BIOS microcode (Borislav Petkov)
  - RISC-V: KVM: fix stack overrun when loading vlenb (Radim Krčmář)
  - net: macb: Disable clocks once (Neil Mandir)
  - efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (Li Nan) [Orabug: 38440275] {CVE-2025-39817}
  - fbnic: Move phylink resume out of service_task and into open/close (Alexander Duyck)
  - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Eric Dumazet)
  - sctp: initialize more fields in sctp_v6_from_sk() (Eric Dumazet) [Orabug: 38440248] {CVE-2025-39812}
  - net: rose: include node references in rose_neigh refcount (Takamitsu Iwai)
  - net: rose: convert 'use' field to refcount_t (Takamitsu Iwai)
  - net: rose: split remove and free operations in rose_remove_neigh() (Takamitsu Iwai)
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Dipayaan Roy)
  - hv_netvsc: Link queues to NAPIs (Joe Damato)
  - net: stmmac: Set CIC bit only for TX queues with COE (Rohan G Thomas)
  - net: stmmac: xgmac: Correct supported speed modes (Rohan G Thomas)
  - net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts (Rohan G Thomas)
  - net/mlx5e: Set local Xoff after FW update (Alexei Lazar)
  - net/mlx5e: Update and set Xon/Xoff upon port speed set (Alexei Lazar)
  - net/mlx5e: Update and set Xon/Xoff upon MTU set (Alexei Lazar)
  - net/mlx5: Nack sync reset when SFs are present (Moshe Shemesh)
  - net/mlx5: Fix lockdep assertion on sync reset unload event (Moshe Shemesh) [Orabug: 38440365] {CVE-2025-39832}
  - net/mlx5: Reload auxiliary drivers on fw_activate (Moshe Shemesh)
  - bnxt_en: Fix stats context reservation logic (Michael Chan)
  - bnxt_en: Adjust TX rings if reservation is less than requested (Michael Chan)
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Sreekanth Reddy) [Orabug: 38440239] {CVE-2025-39810}
  - phy: mscc: Fix when PTP clock is register and unregister (Horatiu Vultur)
  - drm/xe: Don't trigger rebind on initial dma-buf validation (Matthew Brost)
  - drm/xe/xe_sync: avoid race during ufence signaling (Kempczynski Zbigniew)
  - efi: stmm: Fix incorrect buffer allocation method (Jan Kiszka)
  - net: dlink: fix multicast stats being counted incorrectly (Moon Yeounsu)
  - dt-bindings: display/msm: qcom,mdp5: drop lut clock (Dmitry Baryshkov)
  - ice: fix incorrect counter for buffer allocation failures (Michal Kubiak)
  - ice: use fixed adapter index for E825C embedded devices (Jacob Keller)
  - ice: don't leave device non-functional if Tx scheduler config fails (Jacob Keller)
  - drm/nouveau: remove unused memory target test (Timur Tabi)
  - drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr (Timur Tabi)
  - atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control(). (Kuniyuki Iwashima) [Orabug: 38440344] {CVE-2025-39828}
  - Bluetooth: hci_sync: fix set_local_name race condition (Pavel Shpakovskiy)
  - Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced (Luiz Augusto von Dentz)
  - Bluetooth: hci_event: Mark connection as closed during suspend disconnect (Ludovico de Nittis)
  - Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success (Ludovico de Nittis)
  - net: macb: fix unregister_netdev call order in macb_remove() (Luoguangfei) [Orabug: 38440218] {CVE-2025-39805}
  - HID: input: report battery status changes immediately (José Expósito)
  - HID: input: rename hidinput_set_battery_charge_status() (José Expósito)
  - powerpc/kvm: Fix ifdef to remove build warning (Madhavan Srinivasan)
  - drm/msm: update the high bitfield of certain DSI registers (Ayushi Makhija)
  - drm/msm/kms: move snapshot init earlier in KMS init (Dmitry Baryshkov)
  - of: reserved_mem: Restructure call site for dma_contiguous_early_fixup() (Oreoluwa Babatunde)
  - drm/msm: Defer fd_install in SUBMIT ioctl (Rob Clark)
  - vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put() (Nikolay Kuratov)
  - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list (Werner Sembach)
  - erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC (Junli Liu)
  - ASoC: codecs: tx-macro: correct tx_macro_component_drv name (Alexey Klimov)
  - smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [Orabug: 38440315] {CVE-2025-39825}
  - smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara)
  - scsi: core: sysfs: Correct sysfs attributes access rights (Damien Le Moal)
  - ftrace: Fix potential warning in trace_printk_seq during ftrace_dump (Tengda Wu) [Orabug: 38440257] {CVE-2025-39813}
  - of: dynamic: Fix use after free in of_changeset_add_prop_helper() (Dan Carpenter)
  - mips: lantiq: xway: sysctrl: rename the etop node (Aleksander Jan Bajkowski)
  - mips: dts: lantiq: danube: add missing burst length property (Aleksander Jan Bajkowski)
  - pinctrl: STMFX: add missing HAS_IOMEM dependency (Randy Dunlap)
  - of: dynamic: Fix memleak when of_pci_add_properties() failed (Lizhi Hou)
  - trace/fgraph: Fix the warning caused by missing unregister notifier (Ye Weihua) [Orabug: 38440352] {CVE-2025-39829}
  - rtla: Check pkg-config install (Tao Chen)
  - tools/latency-collector: Check pkg-config install (Tao Chen)
  - LTS version: v6.12.44 (Harshit Mogalapalli)
  - alloc_fdtable(): change calling conventions. (Al Viro)
  - netfilter: nf_reject: don't leak dst refcount for loopback packets (Florian Westphal) [Orabug: 38401479] {CVE-2025-38732}
  - s390/hypfs: Enable limited access during lockdown (Peter Oberparleiter)
  - s390/hypfs: Avoid unnecessary ioctl registration in debugfs (Peter Oberparleiter)
  - ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation (Takashi Iwai)
  - net/mlx5e: Preserve shared buffer capacity during headroom updates (Armen Ratner)
  - net/mlx5e: Query FW for buffer ownership (Alexei Lazar)
  - net/mlx5: Add IFC bits and enums for buf_ownership (Oren Sidi)
  - net/mlx5: Relocate function declarations from port.h to mlx5_core.h (Shahar Shitrit)
  - net/mlx5: Base ECVF devlink port attrs from 0 (Daniel Jurgens)
  - Octeontx2-af: Skip overlap check for SPI field (Hariprasad Kelam)
  - bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU (Hangbin Liu)
  - bonding: update LACP activity flag after setting lacp_active (Hangbin Liu)
  - ALSA: timer: fix ida_free call while not allocated (Dewei Meng) [Orabug: 38423453] {CVE-2025-39765}
  - net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate (William Liu)
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (William Liu) [Orabug: 38423455] {CVE-2025-39766}
  - net: dsa: microchip: Fix KSZ9477 HSR port setup issue (Tristram Ha)
  - ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc (Jason Xing)
  - s390/mm: Do not map lowcore with identity mapping (Heiko Carstens)
  - LoongArch: Optimize module load time by optimizing PLT/GOT counting (Kanglong Wang)
  - microchip: lan865x: fix missing Timer Increment config for Rev.B0/B1 (Parthiban Veerasooran)
  - microchip: lan865x: fix missing netif_start_queue() call on device open (Parthiban Veerasooran)
  - net/smc: fix UAF on smcsk after smc_listen_out() (D. Wythe)
  - gve: prevent ethtool ops after shutdown (Jordan Rhee) [Orabug: 38401491] {CVE-2025-38735}
  - phy: mscc: Fix timestamping for vsc8584 (Horatiu Vultur)
  - cifs: Fix oops due to uninitialised variable (David Howells) [Orabug: 38401496] {CVE-2025-38737}
  - net: ti: icssg-prueth: Fix HSR and switch offload Enablement during firwmare reload. (Md Danish Anwar)
  - ppp: fix race conditions in ppp_fill_forward_path (Qingfang Deng) [Orabug: 38401498] {CVE-2025-39673}
  - net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path (Qingfang Deng)
  - ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add (Heminhong)
  - net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM (Jakub Ramaseuski) [Orabug: 38423463] {CVE-2025-39770}
  - drm/amd/display: Don't print errors for nonexistent connectors (Timur Kristóf)
  - drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session() (Chenyuan Yang) [Orabug: 38401506] {CVE-2025-39675}
  - drm/hisilicon/hibmc: fix the hibmc loaded failed bug (Baihan Li) [Orabug: 38423472] {CVE-2025-39772}
  - drm/hisilicon/hibmc: fix the i2c device resource leak when vdac init failed (Baihan Li)
  - drm/hisilicon/hibmc: refactored struct hibmc_drm_private (Baihan Li)
  - rust: alloc: fix `rusttest` by providing `Cmalloc::aligned_layout` too (Miguel Ojeda)
  - mlxsw: spectrum: Forward packets with an IPv4 link-local source IP (Ido Schimmel)
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Kees Cook) [Orabug: 38360924] {CVE-2025-38676}
  - scsi: qla4xxx: Prevent a potential error pointer dereference (Dan Carpenter) [Orabug: 38401511] {CVE-2025-39676}
  - rtase: Fix Rx descriptor CRC error bit definition (Justin Lai)
  - net: bridge: fix soft lockup in br_multicast_query_expired() (Wang Liang) [Orabug: 38423477] {CVE-2025-39773}
  - net: xilinx: axienet: Fix RX skb ring management in DMAengine mode (Suraj Gupta)
  - RDMA/hns: Fix dip entries leak on devices newer than hip09 (Junxian Huang)
  - RDMA/bnxt_re: Fix to initialize the PBL array (Anantha Prabhu)
  - RDMA/bnxt_re: Fix a possible memory leak in the driver (Kalesh Ap)
  - RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (Kashyap Desai)
  - RDMA/bnxt_re: Fix to do SRQ armena by default (Kashyap Desai)
  - RDMA/hns: Fix querying wrong SCC context for DIP algorithm (Wenglianfa)
  - RDMA/erdma: Fix ignored return value of init_kernel_qp (Boshi Yu)
  - rust: alloc: replace aligned_size() with Kmalloc::aligned_layout() (Danilo Krummrich)
  - iosys-map: Fix undefined behavior in iosys_map_clear() (Gote, Nitin R)
  - drm/tests: Fix drm_test_fb_xrgb8888_to_xrgb2101010() on big-endian (José Expósito)
  - drm/tests: Do not use drm_fb_blit() in format-helper tests (Thomas Zimmermann)
  - drm/format-helper: Add generic conversion to 32-bit formats (Thomas Zimmermann)
  - drm/format-helper: Move helpers for pixel conversion to header file (Thomas Zimmermann)
  - drm/format-helper: Add conversion from XRGB8888 to BGR888 (Kerem Karabay)
  - drm/panic: Move drawing functions to drm_draw (Jocelyn Falempe)
  - drm/tests: Fix endian warning (José Expósito)
  - cgroup/cpuset: Fix a partition error with CPU hotplug (Waiman Long)
  - cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key (Waiman Long)
  - drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor(). (Fanhua Li) [Orabug: 38401536] {CVE-2025-39679}
  - spi: spi-fsl-lpspi: Clamp too high speed_hz (Stefan Wahren)
  - x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper (Tianxiang Peng) [Orabug: 38401540] {CVE-2025-39681}
  - iio: imu: inv_icm42600: change invalid data error to -EBUSY (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: Convert to uXX and sXX integer types (Andy Shevchenko)
  - iio: imu: inv_icm42600: use = { } instead of memset() (David Lechner)
  - iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64 (Jonathan Cameron)
  - powerpc/boot: Fix build with gcc 15 (Michal Suchanek)
  - ovl: use I_MUTEX_PARENT when locking parent in ovl_create_temp() (Neil Brown)
  - drm/i915/icl+/tc: Cache the max lane count value (Imre Deak)
  - compiler: remove __ADDRESSABLE_ASM{_STR,}() again (Jan Beulich)
  - drm/i915/icl+/tc: Convert AUX powered WARN to a debug message (Imre Deak)
  - tracing: Limit access to parser->buffer when trace_get_user failed (Pu Lehui) [Orabug: 38401545] {CVE-2025-39683}
  - tracing: Remove unneeded goto out logic (Steven Rostedt)
  - iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read() (David Lechner)
  - iio: light: as73211: Ensure buffer holes are zeroed (Jonathan Cameron)
  - iio: light: Use aligned_s64 instead of open coding alignment. (Jonathan Cameron)
  - usb: dwc3: pci: add support for the Intel Wildcat Lake (Krogerus Heikki)
  - usb: dwc3: Remove WARN_ON for device endpoint command timeouts (Selvarasu Ganesan)
  - usb: dwc3: Ignore late xferNotReady event to prevent halt timeout (Kuen-Han Tsai)
  - usb: xhci: Fix slot_id resource race conflict (Weitao Wang)
  - usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean (Amit Sunil Dhamne)
  - usb: typec: maxim_contaminant: disable low power mode when reading comparator values (Amit Sunil Dhamne)
  - USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles (Zenm Chen)
  - usb: storage: realtek_cr: Use correct byte order for bcs->Residue (Thorsten Blum)
  - USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera (Mael Guerin)
  - usb: renesas-xhci: Fix External ROM access timeouts (Marek Vasut)
  - usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test (Xu Yang)
  - comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl() (Ian Abbott)
  - comedi: pcl726: Prevent invalid irq number (Edward Adam Davis)
  - comedi: Make insn_rw_emulate_bits() do insn->n samples (Ian Abbott)
  - usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive (Miao Li)
  - cdx: Fix off-by-one error in cdx_rpmsg_probe() (Thorsten Blum)
  - kcov, usb: Don't disable interrupts in kcov_remote_start_usb_softirq() (Sebastian Andrzej Siewior)
  - most: core: Drop device reference after usage in get_channel() (Miaoqian Lin)
  - iio: proximity: isl29501: fix buffered read on big-endian systems (David Lechner)
  - iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe() (Salah Triki)
  - ftrace: Also allocate and copy hash for reading of filter files (Steven Rostedt) [Orabug: 38401577] {CVE-2025-39689}
  - fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable() (Xu Yilun)
  - mmc: sdhci_am654: Disable HS400 for AM62P SR1.0 and SR1.1 (Judith Mendez)
  - drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS (Imre Deak)
  - cpuidle: governors: menu: Avoid selecting states with too much latency (Rafael J. Wysocki)
  - cpuidle: menu: Remove iowait influence (Christian Loehle)
  - use uniform permission checks for all mount propagation changes (Al Viro)
  - fs/buffer: fix use-after-free when call bh_read() helper (Ye Bin) [Orabug: 38401585] {CVE-2025-39691}
  - smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy() (Stefan Metzmacher)
  - debugfs: fix mount options not being applied (Charalampos Mitrodimas)
  - arm64: dts: ti: k3-am62*: Move eMMC pinmux to top level board file (Judith Mendez)
  - arm64: dts: ti: k3-am6*: Remove disable-wp for eMMC (Judith Mendez)
  - arm64: dts: ti: k3-am62*: Add non-removable flag for eMMC (Judith Mendez)
  - arm64: dts: ti: k3-am6*: Add boot phase flag to support MMC boot (Judith Mendez)
  - btrfs: subpage: keep TOWRITE tag until folio is cleaned (Naohiro Aota) [Orabug: 38423491] {CVE-2025-39779}
  - ext4: preserve SB_I_VERSION on remount (Baokun Li)
  - scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems (Ranjan Kumar)
  - scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers (Ranjan Kumar)
  - iio: adc: ad7173: fix setting ODR in probe (David Lechner)
  - PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining (Geraldo Nascimento)
  - PCI: rockchip: Use standard PCIe definitions (Geraldo Nascimento)
  - PCI: imx6: Add IMX8MQ_EP third 64-bit BAR in epc_features (Richard Zhu)
  - PCI: imx6: Add i.MX8Q PCIe Endpoint (EP) support (Frank Li)
  - Mark xe driver as BROKEN if kernel page size is not 4kB (Simon Richter)
  - mptcp: disable add_addr retransmission when timeout is 0 (Geliang Tang)
  - mptcp: remove duplicate sk_reset_timer call (Geliang Tang)
  - soc: qcom: mdt_loader: Fix error return values in mdt_header_valid() (Dan Carpenter)
  - scsi: core: Fix command pass through retry regression (Mike Christie)
  - drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs (Timur Kristóf)
  - drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs (Timur Kristóf)
  - drm/amd/display: Fix DP audio DTO1 clock source on DCE 6. (Timur Kristóf)
  - drm/amd/display: Fix Xorg desktop unresponsive on Replay panel (Tom Chung)
  - drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3 (Timur Kristóf)
  - drm/amd/display: Don't overclock DCE 6 by 15% (Timur Kristóf)
  - drm/amd/display: Avoid a NULL pointer dereference (Mario Limonciello) [Orabug: 38401594] {CVE-2025-39693}
  - drm/amdgpu/swm14: Update power limit logic (Alex Deucher)
  - accel/habanalabs/gaudi2: Use kvfree() for memory allocated with kvcalloc() (Thorsten Blum)
  - kvm: retry nx_huge_page_recovery_thread creation (Keith Busch)
  - platform/x86/intel-uncore-freq: Check write blocked for ELC (Srinivas Pandruvada)
  - s390/sclp: Fix SCCB present check (Peter Oberparleiter)
  - RDMA/rxe: Flush delayed SKBs while releasing RXE resources (Zhu Yanjun) [Orabug: 38401605] {CVE-2025-39695}
  - ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6 (Evgeniy Harchenko)
  - mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn (Tu Jinjiang)
  - mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton Ronaldo Krzesinski)
  - NFS: Fix a race when updating an existing write (Trond Myklebust) [Orabug: 38401608] {CVE-2025-39697}
  - mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency (Victor Shih)
  - mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER (Victor Shih)
  - memstick: Fix deadlock by moving removing flag earlier (Jiayi Li)
  - mmc: sdhci-pci-gli: Add a new function to simplify the code (Victor Shih)
  - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (Nicolin Chen)
  - iov_iter: iterate_folioq: fix handling of offset >= folio size (Dominique Martinet)
  - io_uring/futex: ensure io_futex_wait() cleans up properly on failure (Jens Axboe) [Orabug: 38401614] {CVE-2025-39698}
  - sched_ext: initialize built-in idle state before ops.init() (Andrea Righi)
  - ata: libata-scsi: Return aborted command when missing sense and result TF (Damien Le Moal)
  - io_uring/net: commit partial buffers on retry (Jens Axboe) [Orabug: 38395103] {CVE-2025-38730}
  - netfs: Fix unbuffered write error handling (David Howells) [Orabug: 38401724] {CVE-2025-39723}
  - btrfs: send: make fs_path_len() inline and constify its argument (Filipe Manana)
  - btrfs: send: use fallocate for hole punching with send stream v2 (Filipe Manana)
  - btrfs: send: avoid path allocation for the current inode when issuing commands (Filipe Manana)
  - btrfs: send: keep the current inode's path cached (Filipe Manana)
  - btrfs: send: add and use helper to rename current inode when processing refs (Filipe Manana)
  - btrfs: send: only use boolean variables at process_recorded_refs() (Filipe Manana)
  - btrfs: send: factor out common logic when sending xattrs (Filipe Manana)
  - xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags (Christoph Hellwig)
  - btrfs: zoned: requeue to unused block group list if zone finish failed (Naohiro Aota)
  - btrfs: codify pattern for adding block_group to bg_list (Boris Burkov)
  - btrfs: explicitly ref count block_group on new_bgs list (Boris Burkov)
  - btrfs: abort transaction on unexpected eb generation at btrfs_copy_root() (Filipe Manana) [Orabug: 38434999] {CVE-2025-39800}
  - btrfs: always abort transaction on failure to add block group to free space tree (Filipe Manana)
  - btrfs: move transaction aborts to the error site in add_block_group_free_space() (David Sterba)
  - btrfs: qgroup: fix race between quota disable and quota rescan ioctl (Filipe Manana) [Orabug: 38423413] {CVE-2025-39759}
  - btrfs: qgroup: drop unused parameter fs_info from __del_qgroup_rb() (David Sterba)
  - usb: typec: fusb302: cache PD RX state (Sebastian Reichel)
  - USB: typec: Use str_enable_disable-like helpers (Krzysztof Kozlowski)
  - x86/sev: Ensure SVSM reserved fields in a page validation entry are initialized to zero (Tom Lendacky)
  - mm/damon/ops-common: ignore migration request to invalid nodes (Seongjae Park) [Orabug: 38401618] {CVE-2025-39700}
  - selftests: mptcp: pm: check flush doesn't reset limits (Matthieu Baerts)
  - mptcp: pm: kernel: flush: do not reset ADD_ADDR limit (Matthieu Baerts)
  - mptcp: drop skb if MPTCP skb extension allocation fails (Christoph Paasch)
  - ACPI: pfr_update: Fix the driver update version check (Chen Yu)
  - ipv6: sr: Fix MAC comparison to be constant-time (Eric Biggers)
  - sched/ext: Fix invalid task state transitions on class switch (Andrea Righi) [Orabug: 38423494] {CVE-2025-39780}
  - net, hsr: reject HSR frame if skb can't hold tag (Jakub Acs)
  - LoongArch: KVM: Make function kvm_own_lbt() robust (Bibo Mao)
  - drm/amd/display: Don't overwrite dce60_clk_mgr (Timur Kristóf)
  - drm/amd/display: fix a Null pointer dereference vulnerability (Siyang Liu) [Orabug: 38401635] {CVE-2025-39705}
  - drm/amd/display: Add primary plane to commits for correct VRR handling (Michel Dänzer)
  - drm/amdkfd: Destroy KFD debugfs after destroy KFD wq (Amber Lin) [Orabug: 38401643] {CVE-2025-39706}
  - drm/amdgpu: update mmhub 4.1.0 client id mappings (Alex Deucher)
  - drm/amdgpu: update mmhub 3.0.1 client id mappings (Alex Deucher)
  - drm/amdgpu: Update external revid for GC v9.5.0 (Lijo Lazar)
  - drm/amdgpu: Initialize data to NULL in imu_v12_0_program_rlc_ram() (Nathan Chancellor)
  - drm/amdgpu: check if hubbub is NULL in debugfs/amdgpu_dm_capabilities (Peter Shkenev) [Orabug: 38401649] {CVE-2025-39707}
  - drm/amdgpu: Avoid extra evict-restore process. (Gang Ba)
  - drm/amd: Restore cached power limit during resume (Mario Limonciello)
  - media: venus: venc: Clamp param smaller than 1fps and bigger than 240 (Ricardo Ribalda)
  - media: venus: vdec: Clamp param smaller than 1fps and bigger than 240. (Ricardo Ribalda)
  - media: venus: protect against spurious interrupts during probe (Jorge Ramirez-Ortiz)
  - media: venus: hfi: explicitly release IRQ during teardown (Jorge Ramirez-Ortiz)
  - media: venus: Fix MSM8998 frequency table (Konrad Dybcio)
  - media: venus: Add a check for packet size after reading from shared memory (Vedang Nagar)
  - media: qcom: camss: cleanup media device allocated resource on error path (Vladimir Zapolskiy)
  - media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls (Hans de Goede)
  - media: mt9m114: Fix deadlock in get_frame_interval/set_frame_interval (Mathis Foerst)
  - media: ov2659: Fix memory leaks in ov2659_probe() (Zhang Shurong)
  - media: pisp_be: Fix pm_runtime underrun in probe (Jacopo Mondi)
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Gui-Dong Han) [Orabug: 38401675] {CVE-2025-39713}
  - media: usbtv: Lock resolution while streaming (Ludwig Disterhof) [Orabug: 38401682] {CVE-2025-39714}
  - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Sakari Ailus)
  - media: verisilicon: Fix AV1 decoder clock frequency (Nicolas Dufresne)
  - media: vivid: fix wrong pixel_array control size (Hans Verkuil)
  - media: ipu6: isys: Use correct pads for xlate_streams() (Sakari Ailus)
  - media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init() (Haoxiang Li)
  - media: hi556: correct the test pattern configuration (Bingbu Cao)
  - media: gspca: Add bounds checking to firmware parser (Dan Carpenter)
  - parisc: Update comments in make_insert_tlb (John David Anglin)
  - parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault() (John David Anglin)
  - parisc: Revise gateway LWS calls to probe user read access (John David Anglin)
  - parisc: Revise __get_user() to probe user read access (John David Anglin)
  - parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c (John David Anglin)
  - parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers (Randy Dunlap)
  - parisc: Drop WARN_ON_ONCE() from flush_cache_vmap (John David Anglin)
  - parisc: Define and use set_pte_at() (John David Anglin)
  - parisc: Check region is readable by user in raw_copy_from_user() (John David Anglin)
  - soc/tegra: pmc: Ensure power-domains are in a known state (Jonathan Hunter)
  - kbuild: userprogs: use correct linker when mixing clang and GNU ld (Thomas Weißschuh)
  - jbd2: prevent softlockup in jbd2_log_do_checkpoint() (Baokun Li) [Orabug: 38423507] {CVE-2025-39782}
  - f2fs: fix to avoid out-of-boundary access in dnode page (Chao Yu)
  - ASoC: SOF: amd: acp-loader: Use GFP_KERNEL for DMA allocations in resume context (Muhammad Usama Anjum)
  - amdgpu/amdgpu_discovery: increase timeout limit for IFWI init (Xaver Hugl)
  - phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence (Kathiravan Thirumoorthy)
  - vhost/vsock: Avoid allocating arbitrarily-sized SKBs (Will Deacon)
  - vsock/virtio: Validate length in packet header before skb_put() (Will Deacon) [Orabug: 38401705] {CVE-2025-39718}
  - PCI: imx6: Delay link start until configfs 'start' written (Richard Zhu)
  - PCI: imx6: Remove apps_reset toggling from imx_pcie_{assert/deassert}_core_reset (Richard Zhu)
  - PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features (Richard Zhu)
  - PCI: endpoint: Fix configfs group removal on driver teardown (Damien Le Moal)
  - PCI: endpoint: Fix configfs group list head handling (Damien Le Moal)
  - PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge (Lukas Wunner)
  - readahead: fix return value of page_cache_next_miss() when no hole is found (Chi Zhiling)
  - mtd: rawnand: renesas: Add missing check after DMA map (Thomas Fourier)
  - mtd: rawnand: fsmc: Add missing check after DMA map (Thomas Fourier)
  - mtd: spinand: propagate spinand_wait() errors from spinand_write_page() (Gabor Juhos)
  - mtd: spi-nor: Fix spi_nor_try_unlock_all() (Michael Walle)
  - hwmon: (gsc-hwmon) fix fan pwm setpoint show functions (Tim Harvey)
  - pwm: mediatek: Fix duty and period setting (Uwe Kleine-König)
  - pwm: mediatek: Handle hardware enable and clock enable separately (Uwe Kleine-König)
  - pwm: imx-tpm: Reset counter if CMOD is 0 (Laurentiu Mihalcea)
  - wifi: ath11k: fix dest ring-buffer corruption when ring is full (Johan Hovold)
  - wifi: ath11k: fix source ring-buffer corruption (Johan Hovold)
  - wifi: ath11k: fix dest ring-buffer corruption (Johan Hovold)
  - wifi: ath12k: fix dest ring-buffer corruption when ring is full (Johan Hovold)
  - wifi: ath12k: fix source ring-buffer corruption (Johan Hovold)
  - wifi: ath12k: fix dest ring-buffer corruption (Johan Hovold)
  - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (Nathan Chancellor)
  - iio: adc: ad_sigma_delta: change to buffer predisable (David Lechner)
  - iio: imu: bno055: fix OOB access of hw_xlate array (David Lechner)
  - zynq_fpga: use sgtable-based scatterlist wrappers (Marek Szyprowski)
  - soc: qcom: mdt_loader: Ensure we don't read past the ELF header (Bjorn Andersson) [Orabug: 38423524]
  - ata: libata-scsi: Fix CDL control (Igor Pylypiv)
  - scsi: ufs: ufs-pci: Fix default runtime and system PM levels (Adrian Hunter)
  - scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers (Archana Patni)
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Damien Le Moal)
  - scsi: mpi3mr: Fix race between config read submit and interrupt completion (Ranjan Kumar)
  - scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE (André Draszik)
  - scsi: dt-bindings: mediatek,ufs: Add ufs-disable-mcq flag for UFS host (Macpaul Lin)
  - dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints (Krzysztof Kozlowski)
  - dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints (Krzysztof Kozlowski)
  - apparmor: Fix 8-byte alignment for initial dfa blob streams (Helge Deller)
  - arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses (Emanuele Ghidoli)
  - arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1 (Hong Guan)
  - arm64: dts: exynos: gs101: ufs: add dma-coherent property (Peter Griffin)
  - arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default (Alexander Sverdlin)
  - arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support (Judith Mendez)
  - btrfs: fix printing of mount info messages for NODATACOW/NODATASUM (Kyoji Ogasawara)
  - btrfs: restore mount option info messages during mount (Kyoji Ogasawara)
  - btrfs: fix incorrect log message for nobarrier mount option (Kyoji Ogasawara)
  - btrfs: zoned: fix write time activation failure for metadata block group (Naohiro Aota)
  - ext4: fix hole length calculation overflow in non-extent inodes (Zhang Yi)
  - ext4: use kmalloc_array() for array space allocation (Liao Yuanhong)
  - ext4: don't try to clear the orphan_present feature block device is r/o (Theodore Ts'O)
  - ext4: fix reserved gdt blocks handling in fsmap (Ojaswin Mujoo)
  - ext4: fix fsmap end of range reporting with bigalloc (Ojaswin Mujoo)
  - ext4: check fast symlink for ea_inode correctly (Andreas Dilger)
  - tracing: fprobe-event: Sanitize wildcard for fprobe event name (Masami Hiramatsu)
  - ksmbd: fix refcount leak causing resource not released (Ziyan Xu)
  - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (Bharat Bhushan)
  - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (Bharat Bhushan)
  - crypto: octeontx2 - Fix address alignment issue on ucode loading (Bharat Bhushan)
  - crypto: qat - flush misc workqueue during device shutdown (Giovanni Cabiddu) [Orabug: 38401716] {CVE-2025-39721}
  - crypto: caam - Prevent crash on suspend with iMX8QM / iMX8ULP (John Ernberg)
  - crypto: qat - lower priority for skcipher and aead algorithms (Giovanni Cabiddu)
  - lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap (Eric Biggers)
  - vt: defkeymap: Map keycodes above 127 to K_HOLE (Myrrh Periwinkle)
  - vt: keyboard: Don't process Unicode characters in K_OFF mode (Myrrh Periwinkle)
  - bus: mhi: host: Detect events pointing to unexpected TREs (Youssef Samir) [Orabug: 38423538] {CVE-2025-39790}
  - bus: mhi: host: Fix endianness of BHI vector table (Alexander Wilhelm)
  - usb: dwc3: imx8mp: fix device leak at unbind (Johan Hovold)
  - usb: dwc3: meson-g12a: fix device leaks at unbind (Johan Hovold)
  - usb: musb: omap2430: fix device leak at unbind (Johan Hovold)
  - usb: gadget: udc: renesas_usb3: fix device leak at unbind (Johan Hovold)
  - usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init() (Nathan Chancellor)
  - m68k: Fix lost column on framebuffer debug console (Finn Thain)
  - dm: Check for forbidden splitting of zone write operations (Damien Le Moal)
  - dm: dm-crypt: Do not partially accept write BIOs with zoned targets (Damien Le Moal) [Orabug: 38423543] {CVE-2025-39791}
  - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (Rafael J. Wysocki)
  - platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister() (Tzung-Bi Shih)
  - cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table() (Dan Carpenter)
  - ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig (Damien Le Moal)
  - serial: 8250: fix panic due to PSLVERR (Yunhui Cui) [Orabug: 38401726] {CVE-2025-39724}


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-105.49.4.el9uek]
changelog:
  - fs/dax: don't disassociate zero page entries (Alistair Popple)  [Orabug: 36859857]
  - device/dax: properly refcount device dax pages when mapping (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: properly refcount fs dax pages (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: Fix "don't skip locked entries when scanning entries" (Alistair Popple)  [Orabug: 36859857]
  - mm: decline to manipulate the refcount on a slab page (Matthew Wilcox (Oracle))  [Orabug: 36859857]
  - dcssblk: mark DAX broken, remove FS_DAX_LIMITED support (Dan Williams)  [Orabug: 36859857]
  - mm/gup: don't allow FOLL_LONGTERM pinning of FS DAX pages (Alistair Popple)  [Orabug: 36859857]
  - mm/huge_memory: add vmf_insert_folio_pmd() (Alistair Popple)  [Orabug: 36859857]
  - mm/huge_memory: add vmf_insert_folio_pud() (Alistair Popple)  [Orabug: 36859857]
  - mm/rmap: add support for PUD sized mappings to rmap (Alistair Popple)  [Orabug: 36859857]
  - mm/memory: add vmf_insert_page_mkwrite() (Alistair Popple)  [Orabug: 36859857]
  - mm/memory: enhance insert_page_into_pte_locked() to create writable mappings (Alistair Popple)  [Orabug: 36859857]
  - mm: allow compound zone device pages (Alistair Popple)  [Orabug: 36859857]
  - mm/mm_init: move p2pdma page refcount initialisation to p2pdma (Alistair Popple)  [Orabug: 36859857]
  - mm/gup: remove redundant check for PCI P2PDMA page (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: remove PAGE_MAPPING_DAX_SHARED mapping flag (Alistair Popple)  [Orabug: 36859857]
  - dax: use folios more widely within DAX (Matthew Wilcox (Oracle))  [Orabug: 36859857]
  - dax: remove access to page->index (Matthew Wilcox (Oracle))  [Orabug: 36859857]
  - fs/dax: ensure all pages are idle prior to filesystem unmount (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: always remove DAX page-cache entries when breaking layouts (Alistair Popple)  [Orabug: 36859857]
  - mm: optimize invalidation of shadow entries (Shakeel Butt)  [Orabug: 36859857]
  - mm: optimize truncation of shadow entries (Shakeel Butt)  [Orabug: 36859857]
  - fs/dax: create a common implementation to break DAX layouts (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: refactor wait for dax idle page (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: don't skip locked entries when scanning entries (Alistair Popple)  [Orabug: 36859857]
  - fs/dax: return unmapped busy pages from dax_layout_busy_page_range() (Alistair Popple)  [Orabug: 36859857]
  - uek: kabi: Update check-kabi to support namespace checks (Saeed Mirzamohammadi)  [Orabug: 38459242]


author: Jack Vogel <jack.vogel@oracle.com> [6.12.0-105.51.5.el9uek]
changelog:
  - RDMA/mlx5: Fix vport loopback forcing for MPV device (Patrisious Haddad)  [Orabug: 38226124]  
  - arm64: Utilize for_each_cpu_wrap for reference lookup (Beata Michalska)  [Orabug: 38454705]  
  - arm64: Update AMU-based freq scale factor on entering idle (Beata Michalska)  [Orabug: 38454705]  
  - arm64: Provide an AMU-based version of arch_freq_get_on_cpu (Beata Michalska)  [Orabug: 38454705]  
  - cpufreq: Introduce an optional cpuinfo_avg_freq sysfs entry (Beata Michalska)  [Orabug: 38454705]  
  - cpufreq: Allow arch_freq_get_on_cpu to return an error (Beata Michalska)  [Orabug: 38454705]  
  - arch_topology: init capacity_freq_ref to 0 (Ionela Voinescu)  [Orabug: 38454705]  
  - ACPI/HMAT: Move HMAT messages to pr_debug() (Dan Williams)  [Orabug: 38454705]  
  - perf: arm_cspmu: nvidia: monitor all ports by default (Besar Wicaksono)  [Orabug: 38454705]  
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Besar Wicaksono)  [Orabug: 38454705]  
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Besar Wicaksono)  [Orabug: 38454705]  
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Besar Wicaksono)  [Orabug: 38454705]  
  - cppc_cpufreq: Remove HiSilicon CPPC workaround (Jie Zhan)  [Orabug: 38454705]  
  - Revert "sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails" (Joseph Salisbury)  [Orabug: 38498945]  
  - uek-rpm/config-aarch64: Enable configs for Grace platform support (Vijay Kumar)  [Orabug: 38526374]  
  - LTS version: v6.12.51 (Jack Vogel)   
  - ASoC: qcom: audioreach: fix potential null pointer dereference (Srinivas Kandagatla)   
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Matvey Kovalev)   
  - mm: swap: check for stable address space before operating on the VMA (Charan Teja Kalla)   
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Thadeu Lima de Souza Cascardo)   
  - media: rc: fix races with imon_disconnect() (Larshin Sergey)   
  - media: tuner: xc5000: Fix use-after-free in xc5000_release (Duoming Zhou)   
  - media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove (Duoming Zhou)   
  - scsi: target: target_core_configfs: Add length check to avoid buffer overflow (Wang Haoran)   
  - gcc-plugins: Remove TODO_verify_il for GCC >= 16 (Kees Cook)   
  - crypto: sha256 - fix crash at kexec (Breno Leitao)   
  - LTS version v6.12.50 (Jack Vogel)   
  - drm/i915/backlight: Return immediately when scale() finds invalid parameters (Guenter Roeck)   
  - Revert "usb: xhci: remove option to change a default ring's TRB cycle bit" (Niklas Neronin)   
  - iommufd: Fix race during abort for file descriptors (Jason Gunthorpe)   
  - fbcon: Fix OOB access in font allocation (Thomas Zimmermann)   
  - fbcon: fix integer overflow in fbcon_do_set_font (Samasth Norway Ananda)   
  - mm/hugetlb: fix folio is still mapped when deleted (Jinjiang Tu)   
  - kmsan: fix out-of-bounds access to shadow memory (Eric Biggers)   
  - gpiolib: Extend software-node support to support secondary software-nodes (Hans de Goede)   
  - fs/proc/task_mmu: check p->vec_buf for NULL (Jakub Acs)   
  - afs: Fix potential null pointer dereference in afs_put_server (Zhen Ni)   
  - drm/ast: Use msleep instead of mdelay for edid read (Nirmoy Das)   
  - arm64: dts: marvell: cn9132-clearfog: fix multi-lane pci x2 and x4 ports (Josua Mayer)   
  - arm64: dts: marvell: cn9132-clearfog: disable eMMC high-speed modes (Josua Mayer)   
  - ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address (Nobuhiro Iwamatsu)   
  - tracing: dynevent: Add a missing lockdown check on dynevent (Masami Hiramatsu (Google))   
  - crypto: af_alg - Fix incorrect boolean values in af_alg_ctx (Eric Biggers)   
  - i40e: improve VF MAC filters accounting (Lukasz Czapnik)   
  - i40e: add mask to apply valid bits for itr_idx (Lukasz Czapnik)   
  - i40e: add max boundary check for VF filters (Lukasz Czapnik)   
  - i40e: fix validation of VF state in get resources (Lukasz Czapnik)   
  - i40e: fix input validation logic for action_meta (Lukasz Czapnik)   
  - i40e: fix idx validation in config queues msg (Lukasz Czapnik)   
  - i40e: fix idx validation in i40e_validate_queue_map (Lukasz Czapnik)   
  - i40e: add validation for ring_len param (Lukasz Czapnik)   
  - HID: asus: add support for missing PX series fn keys (Amit Chaudhari)   
  - smb: client: fix wrong index reference in smb2_compound_op() (Sang-Heon Jeon)   
  - platform/x86: lg-laptop: Fix WMAB call in fan_mode_store() (Daniel Lee)   
  - drm/panthor: Defer scheduler entitiy destruction to queue release (Adrián Larumbe)   
  - futex: Prevent use-after-free during requeue-PI (Sebastian Andrzej Siewior)   
  - drm/gma500: Fix null dereference in hdmi teardown (Zabelin Nikita)   
  - mm: folio_may_be_lru_cached() unless folio_test_large() (Hugh Dickins)   
  - mm: revert "mm/gup: clear the LRU flag of a page before adding to LRU batch" (Hugh Dickins)   
  - mm/gup: local lru_add_drain() to avoid lru_add_drain_all() (Hugh Dickins)   
  - octeontx2-pf: Fix potential use after free in otx2_tc_add_flow() (Dan Carpenter)   
  - net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port (Vladimir Oltean)   
  - net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup() (Vladimir Oltean)   
  - selftests: fib_nexthops: Fix creation of non-FDB nexthops (Ido Schimmel)   
  - nexthop: Forbid FDB status change while nexthop is in a group (Ido Schimmel)   
  - net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS (Jason Baron)   
  - bnxt_en: correct offset handling for IPv6 destination address (Alok Tiwari)   
  - vhost: Take a reference on the task in struct vhost_task. (Sebastian Andrzej Siewior)   
  - Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (Luiz Augusto von Dentz)   
  - Bluetooth: hci_sync: Fix hci_resume_advertising_sync (Luiz Augusto von Dentz)   
  - ethernet: rvu-af: Remove slash from the driver name (Petr Malat)   
  - net/smc: fix warning in smc_rx_splice() when calling get_page() (Sidraya Jayagond)   
  - net: tun: Update napi->skb after XDP process (Wang Liang)   
  - can: peak_usb: fix shift-out-of-bounds issue (Stéphane Grosjean)   
  - can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)   
  - can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)   
  - can: hi311x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)   
  - can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow (Vincent Mailhol)   
  - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca)   
  - bpf: Reject bpf_timer for PREEMPT_RT (Leon Hwang)   
  - can: rcar_can: rcar_can_resume(): fix s2ram with PSCI (Geert Uytterhoeven)   
  - wifi: virt_wifi: Fix page fault on connect (James Guan)   
  - btrfs: don't allow adding block device of less than 1 MB (Mark Harmstone)   
  - bpf: Check the helper function is valid in get_helper_proto (Jiri Olsa)   
  - smb: server: use disable_work_sync in transport_rdma.c (Stefan Metzmacher)   
  - smb: server: don't use delayed_work for post_recv_credits_work (Stefan Metzmacher)   
  - cpufreq: Initialize cpufreq-based invariance before subsys (Christian Loehle)   
  - ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients (Jihed Chaibi)   
  - arm64: dts: imx8mp: Correct thermal sensor index (Peng Fan)   
  - firmware: imx: Add stub functions for SCMI MISC API (Peng Fan)   
  - HID: amd_sfh: Add sync across amd sfh work functions (Basavaraj Natikar)   
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Or Har-Toov)   
  - net: sfp: add quirk for FLYPRO copper SFP+ module (Aleksander Jan Bajkowski)   
  - ALSA: usb-audio: Add mute TLV for playback volumes on more devices (qaqland)   
  - ALSA: usb-audio: move mixer_quirks' min_mute into common quirk (Cryolitia PukNgae)   
  - ALSA: usb-audio: Add DSD support for Comtrue USB Audio device (noble.yang)   
  - i2c: designware: Add quirk for Intel Xe (Heikki Krogerus)   
  - mmc: sdhci-cadence: add Mobileye eyeQ support (Benoît Monin)   
  - net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick (Chris Morgan)   
  - net: fec: rename struct fec_devinfo fec_imx6x_info -> fec_imx6sx_info (Marc Kleine-Budde)   
  - usb: core: Add 0x prefix to quirks debug output (Jiayi Li)   
  - ALSA: usb-audio: Fix build with CONFIG_INPUT=n (Takashi Iwai)   
  - ALSA: hda/realtek: Add support for ASUS NUC using CS35L41 HDA (Stefan Binding)   
  - ALSA: usb-audio: Convert comma to semicolon (Chen Ni)   
  - ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5 (Cristian Ciocaltea)   
  - ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks (Cristian Ciocaltea)   
  - ALSA: usb-audio: Simplify NULL comparison in mixer_quirks (Cristian Ciocaltea)   
  - ALSA: usb-audio: Avoid multiple assignments in mixer_quirks (Cristian Ciocaltea)   
  - ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks (Cristian Ciocaltea)   
  - ALSA: usb-audio: Fix block comments in mixer_quirks (Cristian Ciocaltea)   
  - ALSA: usb-audio: Fix code alignment in mixer_quirks (Cristian Ciocaltea)   
  - firewire: core: fix overlooked update of subsystem ABI version (Takashi Sakamoto)   
  - scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE (Alok Tiwari)


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Dodji Seketeli <dodji@redhat.com> - 1.8-1
changelog:
  - Update to upstream 1.8
  - Add 'make check-self-compare' to the regression tests run.
  - BuildRequires python3-koji


author: Dodji Seketeli <dodji@seketeli.org> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
    This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Dodji Seketeli <dodji@redhat.com> - 2.0-1
changelog:
  - Update to upstream 2.0 tarball
  - Change License to ASL 2.0 to comply with the upstream license change.


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Stephen Brennan <stephen.s.brennan@oracle.com> - 0.5.4-1.0.2
changelog:
  - Fix missing ./configure script in build
  - Remove unnecessary libzstd dependency for OL7 [Orabug: 36206258]
  - Include unreleased fix for segmentation fault in cache layer [Orabug: 36174225]


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


