linux-hwe-6.11 (6.11.0-29.29~24.04.1trisquel36) ecne; urgency=medium

  * Removed non-free bits

 -- Trisquel GNU/Linux developers <trisquel-devel@listas.trisquel.info>  Tue, 01 Jul 2025 06:49:51 +0000

linux-hwe-6.11 (6.11.0-29.29~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-29.29~24.04.1 -proposed tracker (LP: #2114303)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  [ Ubuntu: 6.11.0-29.29 ]

  * oracular/linux: 6.11.0-29.29 -proposed tracker (LP: #2114305)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update annotations scripts
  * CVE-2025-37890
    - net_sched: hfsc: Fix a UAF vulnerability in class with netem as child
      qdisc
    - sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
    - net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
  * raid1: Fix NULL pointer dereference in process_checks() (LP: #2112519)
    - md/raid1: Add check for missing source disk in process_checks()
  * CVE-2025-37798
    - sch_htb: make htb_qlen_notify() idempotent
    - sch_htb: make htb_deactivate() idempotent
    - sch_drr: make drr_qlen_notify() idempotent
    - sch_hfsc: make hfsc_qlen_notify() idempotent
    - sch_qfq: make qfq_qlen_notify() idempotent
    - sch_ets: make est_qlen_notify() idempotent
    - codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
  * CVE-2025-37997
    - netfilter: ipset: fix region locking in hash types

 -- Stefan Bader <stefan.bader@canonical.com>  Thu, 26 Jun 2025 14:36:57 +0200

linux-hwe-6.11 (6.11.0-28.28~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-28.28~24.04.1 -proposed tracker (LP: #2110679)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  [ Ubuntu: 6.11.0-28.28 ]

  * oracular/linux: 6.11.0-28.28 -proposed tracker (LP: #2110681)
  * Oracular update: upstream stable patchset 2025-05-07 (LP: #2110173)
    - drm/dp_mst: Factor out function to queue a topology probe work
    - drm/dp_mst: Add a helper to queue a topology probe
    - drm/amd/display: Don't write DP_MSTM_CTRL after LT
    - watch_queue: fix pipe accounting mismatch
    - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
    - cpufreq: scpi: compare kHz instead of Hz
    - smack: dont compile ipv6 code unless ipv6 is configured
    - smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label
    - sched: Cancel the slice protection of the idle entity
    - cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
    - EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
    - x86/fpu: Fix guest FPU state buffer allocation size
    - x86/fpu: Avoid copying dynamic FP state from init_task in
      arch_dup_task_struct()
    - x86/platform: Only allow CONFIG_EISA for 32-bit
    - [Config] updateconfigs for EISA
    - x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
    - lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
    - PM: sleep: Adjust check before setting power.must_resume
    - cpufreq: tegra194: Allow building for Tegra234
    - RISC-V: KVM: Disable the kernel perf counter during configure
    - kunit/stackinit: Use fill byte different from Clang i386 pattern
    - watchdog/hardlockup/perf: Fix perf_event memory leak
    - selinux: Chain up tool resolving errors in install_policy.sh
    - EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
    - EDAC/ie31200: Fix the DIMM size mask for several SoCs
    - EDAC/ie31200: Fix the error path order of ie31200_init()
    - x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
    - thermal: int340x: Add NULL check for adev
    - PM: sleep: Fix handling devices with direct_complete set on errors
    - lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
    - perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
    - x86/traps: Make exc_double_fault() consistently noreturn
    - x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
    - x86/entry: Add __init to ia32_emulation_override_cmdline()
    - regulator: pca9450: Fix enable register for LDO5
    - auxdisplay: MAX6959 should select BITREVERSE
    - media: verisilicon: HEVC: Initialize start_bit field
    - media: platform: allgro-dvt: unregister v4l2_device on the error path
    - auxdisplay: panel: Fix an API misuse in panel.c
    - platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static
    - platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static
    - platform/x86: dell-ddv: Fix temperature calculation
    - ASoC: cs35l41: check the return value from spi_setup()
    - ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry
    - HID: remove superfluous (and wrong) Makefile entry for
      CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
    - dt-bindings: vendor-prefixes: add GOcontroll
    - ALSA: hda/realtek: Always honor no_shutup_pins
    - ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio
      compatible
    - ALSA: timer: Don't take register_mutex with copy_from/to_user()
    - drm/bridge: ti-sn65dsi86: Fix multiple instances
    - drm/ssd130x: Set SPI .id_table to prevent an SPI core warning
    - drm/ssd130x: fix ssd132x encoding
    - drm/ssd130x: ensure ssd132x pitch is correct
    - drm/dp_mst: Fix drm RAD print
    - drm/bridge: it6505: fix HDCP V match check is not performed correctly
    - drm: xlnx: zynqmp: Fix max dma segment size
    - drm/vkms: Fix use after free and double free on init error
    - gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines
    - drm/amdgpu: refine smu send msg debug log format
    - drm/amdgpu/umsch: fix ucode check
    - PCI: Use downstream bridges for distributing resources
    - PCI: Remove add_align overwrite unrelated to size0
    - drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
    - drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
    - PCI/ASPM: Fix link state exit during switch upstream function removal
    - drm/panel: ilitek-ili9882t: fix GPIO name in error message
    - PCI/ACS: Fix 'pci=config_acs=' parameter
    - drm/amd/display: fix an indent issue in DML21
    - drm/msm/dpu: don't use active in atomic_check()
    - drm/msm/dsi/phy: Program clock inverters in correct register
    - drm/msm/dsi: Use existing per-interface slice count in DSC timing
    - drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
    - drm/amdkfd: Fix Circular Locking Dependency in
      'svm_range_cpu_invalidate_pagetables'
    - PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data
      payload
    - PCI: brcmstb: Set generation limit before PCIe link up
    - PCI: brcmstb: Use internal register to change link capability
    - PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
    - PCI: brcmstb: Fix potential premature regulator disabling
    - PCI/portdrv: Only disable pciehp interrupts early when needed
    - drm/panthor: Update CS_STATUS_ defines to correct values
    - drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
    - drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump
    - crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD
    - powerpc/kexec: fix physical address calculation in clear_utlb_entry()
    - PCI: Remove stray put_device() in pci_register_host_bridge()
    - PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
    - drm/mediatek: Fix config_updating flag never false when no mbox channel
    - drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
    - drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
    - drm/amd/display: avoid NPD when ASIC does not support DMUB
    - PCI: dwc: ep: Return -ENOMEM for allocation failures
    - PCI: histb: Fix an error handling path in histb_pcie_probe()
    - PCI: Fix BAR resizing when VF BARs are assigned
    - PCI: pciehp: Don't enable HPIE when resuming in poll mode
    - fbdev: au1100fb: Move a variable assignment behind a null pointer check
    - dummycon: fix default rows/cols
    - mdacon: rework dependency list
    - fbdev: sm501fb: Add some geometry checks.
    - crypto: iaa - Test the correct request flag
    - crypto: qat - set parity error mask for qat_420xx
    - crypto: tegra - Use separate buffer for setkey
    - crypto: tegra - check return value for hash do_one_req
    - crypto: bpf - Add MODULE_DESCRIPTION for skcipher
    - crypto: tegra - Use HMAC fallback when keyslots are full
    - clk: amlogic: gxbb: drop incorrect flag on 32k clock
    - crypto: hisilicon/sec2 - fix for aead authsize alignment
    - crypto: hisilicon/sec2 - fix for sec spec check
    - remoteproc: core: Clear table_sz when rproc_shutdown
    - of: property: Increase NR_FWNODE_REFERENCE_ARGS
    - pinctrl: renesas: rzg2l: Suppress binding attributes
    - remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
    - libbpf: Fix hypothetical STT_SECTION extern NULL deref case
    - selftests/bpf: Fix string read in strncmp benchmark
    - x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
    - clk: renesas: r8a08g045: Check the source of the CPU PLL settings
    - remoteproc: qcom: pas: add minidump_id to SC7280 WPSS
    - clk: samsung: Fix UBSAN panic in samsung_clk_init()
    - pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw()
    - crypto: tegra - Fix CMAC intermediate result handling
    - clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
    - s390: Remove ioremap_wt() and pgprot_writethrough()
    - RDMA/mana_ib: Ensure variable err is initialized
    - crypto: tegra - Set IV to NULL explicitly for AES ECB
    - remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
    - clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK
    - bpf: Use preempt_count() directly in bpf_send_signal_common()
    - lib: 842: Improve error handling in sw842_compress()
    - pinctrl: renesas: rza2: Fix missing of_node_put() call
    - pinctrl: renesas: rzg2l: Fix missing of_node_put() call
    - RDMA/mlx5: Fix MR cache initialization error flow
    - clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
    - RDMA/core: Don't expose hw_counters outside of init net namespace
    - RDMA/mlx5: Fix calculation of total invalidated pages
    - RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
    - remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
    - power: supply: bq27xxx_battery: do not update cached flags prematurely
    - IB/mad: Check available slots before posting receive WRs
    - pinctrl: tegra: Set SFIO mode to Mux Register
    - clk: amlogic: g12b: fix cluster A parent data
    - clk: amlogic: gxbb: drop non existing 32k clock parent
    - selftests/bpf: Select NUMA_NO_NODE to create map
    - pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment
    - crypto: qat - remove access to parity register for QAT GEN4
    - clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
    - clk: amlogic: g12a: fix mmc A peripheral clock
    - x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
    - power: supply: max77693: Fix wrong conversion of charge input threshold
      value
    - crypto: nx - Fix uninitialised hv_nxc on error
    - clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable()
    - bpf: Fix array bounds error with may_goto
    - RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
    - pinctrl: renesas: rzv2m: Fix missing of_node_put() call
    - mfd: sm501: Switch to BIT() to mitigate integer overflows
    - leds: Fix LED_OFF brightness race
    - x86/dumpstack: Fix inaccurate unwinding from exception stacks due to
      misplaced assignment
    - crypto: hisilicon/sec2 - fix for aead auth key length
    - pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
    - clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
    - perf stat: Fix find_stat for mixed legacy/non-legacy events
    - perf: Always feature test reallocarray
    - w1: fix NULL pointer dereference in probe
    - isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
    - soundwire: slave: fix an OF node reference leak in soundwire slave device
    - perf report: Switch data file correctly in TUI
    - coresight: catu: Fix number of pages while using 64k pages
    - vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
    - coresight-etm4x: add isb() before reading the TRCSTATR
    - perf pmu: Don't double count common sysfs and json events
    - ucsi_ccg: Don't show failed to get FW build information error
    - iio: accel: mma8452: Ensure error return on failure to matching oversampling
      ratio
    - iio: accel: msa311: Fix failure to release runtime pm if direct mode claim
      fails.
    - perf arm-spe: Fix load-store operation checking
    - perf bench: Fix perf bench syscall loop count
    - usb: xhci: correct debug message page size calculation
    - fs/ntfs3: Fix a couple integer overflows on 32bit systems
    - fs/ntfs3: Prevent integer overflow in hdr_first_de()
    - dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
    - dmaengine: fsl-edma: free irq correctly in remove path
    - iio: adc: ad4130: Fix comparison of channel setups
    - iio: adc: ad7124: Fix comparison of channel configs
    - iio: adc: ad7173: Fix comparison of channel configs
    - iio: light: Add check for array bounds in veml6075_read_int_time_ms
    - perf debug: Avoid stack overflow in recursive error message
    - perf evlist: Add success path to evlist__create_syswide_maps
    - perf units: Fix insufficient array space
    - kernel/events/uprobes: handle device-exclusive entries correctly in
      __replace_page()
    - kexec: initialize ELF lowest address to ULONG_MAX
    - ocfs2: validate l_tree_depth to avoid out-of-bounds access
    - arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
    - NFSv4: Don't trigger uneccessary scans for return-on-close delegations
    - NFSv4: Avoid unnecessary scans of filesystems for returning delegations
    - NFSv4: Avoid unnecessary scans of filesystems for expired delegations
    - NFSv4: Avoid unnecessary scans of filesystems for delayed delegations
    - NFS: fix open_owner_id_maxsz and related fields.
    - fuse: fix dax truncate/punch_hole fault path
    - selftests/mm/cow: fix the incorrect error handling
    - um: Pass the correct Rust target and options with gcc
    - um: remove copy_from_kernel_nofault_allowed
    - um: hostfs: avoid issues on inode number reuse by host
    - i3c: master: svc: Fix missing the IBI rules
    - perf python: Fixup description of sample.id event member
    - perf python: Decrement the refcount of just created event on failure
    - perf python: Don't keep a raw_data pointer to consumed ring buffer space
    - perf python: Check if there is space to copy all the event
    - perf dso: fix dso__is_kallsyms() check
    - staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
    - staging: vchiq_arm: Register debugfs after cdev
    - staging: vchiq_arm: Fix possible NPR of keep-alive thread
    - tty: n_tty: use uint for space returned by tty_write_room()
    - perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation
    - fs/procfs: fix the comment above proc_pid_wchan()
    - perf tools: annotate asm_pure_loop.S
    - thermal: core: Remove duplicate struct declaration
    - objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
    - objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
    - NFS: Shut down the nfs_client only after all the superblocks
    - exfat: fix the infinite loop in exfat_find_last_cluster()
    - rtnetlink: Allocate vfinfo size for VF GUIDs when supported
    - rndis_host: Flag RNDIS modems as WWAN devices
    - ksmbd: use aead_request_free to match aead_request_alloc
    - ksmbd: fix multichannel connection failure
    - ksmbd: fix r_count dec/increment mismatch
    - net/mlx5e: SHAMPO, Make reserved size independent of page size
    - ring-buffer: Fix bytes_dropped calculation issue
    - objtool: Fix segfault in ignore_unreachable_insn()
    - LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
    - LoongArch: Fix device node refcount leak in fdt_cpu_clk_init()
    - LoongArch: Rework the arch_kgdb_breakpoint() implementation
    - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are
      invalid
    - net: phy: broadcom: Correct BCM5221 PHY model detection
    - octeontx2-af: Fix mbox INTR handler when num VFs > 64
    - octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
    - objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
    - sched/smt: Always inline sched_smt_active()
    - context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
    - rcu-tasks: Always inline rcu_irq_work_resched()
    - objtool/loongarch: Add unwind hints in prepare_frametrace()
    - nfs: Add missing release on error in nfs_lock_and_join_requests()
    - wifi: mac80211: Cleanup sta TXQs on flush
    - wifi: mac80211: remove debugfs dir for virtual monitor
    - wifi: iwlwifi: fw: allocate chained SG tables for dump
    - wifi: iwlwifi: mvm: use the right version of the rate API
    - nvme-tcp: fix possible UAF in nvme_tcp_poll
    - nvme-pci: clean up CMBMSC when registering CMB fails
    - nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
    - wifi: brcmfmac: keep power during suspend if board requires it
    - affs: generate OFS sequence numbers starting at 1
    - affs: don't write overlarge OFS data block size fields
    - ALSA: hda/realtek: Fix Asus Z13 2025 audio
    - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
    - perf/core: Fix perf_pmu_register() vs. perf_init_event()
    - smb: common: change the data type of num_aces to le16
    - cifs: fix incorrect validation for num_aces field of smb_acl
    - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
    - platform/x86/intel/vsec: Add Diamond Rapids support
    - HID: i2c-hid: improve i2c_hid_get_report error message
    - platform/x86/amd/pmf: Propagate PMF-TA return codes
    - platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA
    - exfat: add a check for invalid data size
    - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41
      HDA
    - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41
      HDA
    - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using
      CS35L41 HDA
    - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using
      CS35L41 HDA
    - sched/deadline: Use online cpus for validating runtime
    - x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
    - ASoC: rt1320: set wake_capable = 0 explicitly
    - wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
    - wifi: mac80211: fix SA Query processing in MLO
    - locking/semaphore: Use wake_q to wake up processes outside lock critical
      section
    - x86/hyperv: Fix output argument to hypercall that changes page visibility
    - x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
    - nvme-pci: fix stuck reset on concurrent DPC and HP
    - drm/amd: Keep display off while going into S4
    - selftests: netfilter: skip br_netfilter queue tests if kernel is tainted
    - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
    - can: statistics: use atomic access in hot path
    - memory: omap-gpmc: drop no compatible check
    - hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
    - spufs: fix a leak on spufs_new_file() failure
    - spufs: fix gang directory lifetimes
    - spufs: fix a leak in spufs_create_context()
    - fs/9p: fix NULL pointer dereference on mkdir
    - riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and
      make_call_ra
    - ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
    - ntb: intel: Fix using link status DB's
    - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
    - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
    - RISC-V: errata: Use medany for relocatable builds
    - x86/uaccess: Improve performance by aligning writes to 8 bytes in
      copy_user_generic(), on non-FSRM/ERMS CPUs
    - ublk: make sure ubq->canceling is set when queue is frozen
    - s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation
    - ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
    - riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
    - riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator
    - riscv/purgatory: 4B align purgatory_start
    - ASoC: imx-card: Add NULL check in imx_card_probe()
    - spi: bcm2835: Do not call gpiod_put() on invalid descriptor
    - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
    - spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent
    - e1000e: change k1 configuration on MTP and later platforms
    - idpf: fix adapter NULL pointer dereference on reboot
    - netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets
      only
    - netfilter: nf_tables: don't unregister hook when table is dormant
    - netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
    - net_sched: skbprio: Remove overly strict queue assertions
    - sctp: add mutual exclusion in proc_sctp_do_udp_port()
    - net: mvpp2: Prevent parser TCAM memory corruption
    - udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
    - udp: Fix memory accounting leak.
    - vsock: avoid timeout during connect() if the socket is closing
    - tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
    - net: decrease cached dst counters in dst_release
    - netfilter: nft_tunnel: fix geneve_opt type confusion addition
    - ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
    - net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
    - net: fix geneve_opt length integer overflow
    - ipv6: Start path selection from the first nexthop
    - ipv6: Do not consider link down nexthops in path selection
    - arcnet: Add NULL check in com20020pci_probe()
    - net: ibmveth: make veth_pool_store stop hanging
    - kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally
    - drm/amdgpu/gfx11: fix num_mec
    - drm/amdgpu/gfx12: fix num_mec
    - perf/core: Fix child_total_time_enabled accounting bug at task exit
    - tools/power turbostat: report CoreThr per measurement interval
    - tracing: Switch trace_events_hist.c code over to use guard()
    - tracing/hist: Add poll(POLLIN) support on hist file
    - tracing/hist: Support POLLPRI event for poll on histogram
    - tracing: Correct the refcount if the hist/hist_debug file fails to open
    - cgroup/rstat: Tracking cgroup-level niced CPU time
    - cgroup/rstat: Fix forceidle time in cpu.stat
    - tty: serial: fsl_lpuart: Use u32 and u8 for register variables
    - tty: serial: fsl_lpuart: use port struct directly to simply code
    - tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning
    - tty: serial: lpuart: only disable CTS instead of overwriting the whole
      UARTMODIR register
    - wifi: mac80211: Fix sparse warning for monitor_sdata
    - usbnet:fix NPE during rx_complete
    - rust: Fix enabling Rust and building with GCC for LoongArch
    - LoongArch: Increase ARCH_DMA_MINALIGN up to 16
    - LoongArch: Increase MAX_IO_PICS up to 8
    - LoongArch: BPF: Fix off-by-one error in build_prologue()
    - LoongArch: BPF: Don't override subprog's return value
    - LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
    - x86/hyperv: Fix check of return value from snp_set_vmsa()
    - KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected
    - x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
    - x86/mce: use is_copy_from_user() to determine copy-from-user context
    - x86/tdx: Fix arch_safe_halt() execution for TDX VMs
    - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
    - platform/x86: ISST: Correct command storage data length
    - ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
    - perf/x86/intel: Apply static call for drain_pebs
    - perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
    - uprobes/x86: Harden uretprobe syscall trampoline check
    - idpf: Don't hard code napi_struct size
    - x86/Kconfig: Add cmpxchg8b support back to Geode CPUs
    - x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
    - x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
    - wifi: mt76: mt7925: remove unused acpi function for clc
    - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
    - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
    - ARM: 9444/1: add KEEP() keyword to ARM_VECTORS
    - media: omap3isp: Handle ARM dma_iommu_mapping
    - Remove unnecessary firmware version check for gc v9_4_2
    - mmc: omap: Fix memory leak in mmc_omap_new_slot
    - mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
    - mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
    - KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error
    - ksmbd: add bounds check for durable handle context
    - ksmbd: add bounds check for create lease context
    - ksmbd: fix use-after-free in ksmbd_sessions_deregister()
    - ksmbd: fix session use-after-free in multichannel connection
    - ksmbd: fix overflow in dacloffset bounds check
    - ksmbd: validate zero num_subauth before sub_auth is accessed
    - ksmbd: fix null pointer dereference in alloc_preauth_hash()
    - exfat: fix potential wrong error return from get_block
    - tracing: Fix use-after-free in print_graph_function_flags during tracer
      switching
    - tracing: Ensure module defining synth event cannot be unloaded while tracing
    - tracing: Fix synth event printk format for str fields
    - tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
    - mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs
    - arm64: Don't call NULL in do_compat_alignment_fixup()
    - wifi: mt76: mt7921: fix kernel panic due to null pointer dereference
    - ext4: don't over-report free space or inodes in statvfs
    - ext4: fix OOB read when checking dotdot dir
    - jfs: fix slab-out-of-bounds read in ea_get()
    - jfs: add index corruption check to DT_GETPAGE()
    - mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
    - exec: fix the racy usage of fs_struct->in_exec
    - media: vimc: skip .s_stream() for stopped entities
    - media: streamzap: fix race between device disconnection and urb callback
    - nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
    - nfsd: put dl_stid if fail to queue dl_recall
    - nfsd: fix management of listener transports
    - NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
    - ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE
    - [Config] updateconfigs for LD_CAN_USE_KEEP_IN_OVERLAY
    - tracing: Do not use PERF enums when perf is not defined
    - platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc()
    - Upstream stable to v6.6.86, v6.12.23
  * CVE-2025-2312 cifs.upcall could access incorrect kerberos credentials cache
    (LP: #2099914) // CVE-2025-2312
    - CIFS: New mount option for cifs.upcall namespace resolution
  * Oracular update: upstream stable patchset 2025-04-29 (LP: #2109634)
    - wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
    - netfilter: nft_counter: Use u64_stats_t for statistic.
    - ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
    - HID: hid-plantronics: Add mic mute mapping and generalize quirks
    - atm: Fix NULL pointer dereference
    - nfsd: fix legacy client tracking initialization
    - netfilter: socket: Lookup orig tuple for IPv6 SNAT
    - ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
    - counter: stm32-lptimer-cnt: fix error handling when enabling
    - counter: microchip-tcb-capture: Fix undefined counter channel state on probe
    - tty: serial: 8250: Add some more device IDs
    - tty: serial: 8250: Add Brainboxes XC devices
    - tty: serial: fsl_lpuart: disable transmitter before changing RS485 related
      registers
    - net: usb: qmi_wwan: add Telit Cinterion FN990B composition
    - net: usb: qmi_wwan: add Telit Cinterion FE990B composition
    - net: usb: usbnet: restore usb%d name exception for local mac addresses
    - usb: xhci: Don't skip on Stopped - Length Invalid
    - usb: xhci: Apply the link chain quirk on NEC isoc endpoints
    - memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
    - perf tools: Fix up some comments and code to properly use the event_source
      bus
    - serial: stm32: do not deassert RS485 RTS GPIO prematurely
    - serial: 8250_dma: terminate correct DMA in tx_dma_flush()
    - bcachefs: bch2_ioctl_subvolume_destroy() fixes
    - Upstream stable to v6.6.85, v6.12.22
  *  Oracular update: upstream stable patchset 2025-04-28 (LP: #2109530)
    - Revert "mm/page_alloc: fix memory accept before watermarks gets initialized"
    - mm/page_alloc: fix memory accept before watermarks gets initialized
    - Revert "hrtimer: Use and report correct timerslack values for realtime
      tasks"
    - hrtimer: Use and report correct timerslack values for realtime tasks
  *  [SRU] Fix jack detection of rt712 on intel soundwire (LP: #2104876)
    - soundwire: mipi_disco: add MIPI-specific property_read_bool() helpers
  * [SRU] Fix screen flickering in inverted display mode (LP: #2103617)
    - drm/xe/display: Re-use display vmas when possible
    - drm/xe/display: Fix fbdev GGTT mapping handling.
  * Oracular update: upstream stable patchset 2025-04-24 (LP: #2109301)
    - clockevents/drivers/i8253: Fix stop sequence for timer 0
    - zram: fix NULL pointer in comp_algorithm_show()
    - hrtimer: Use and report correct timerslack values for realtime tasks
    - rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and
      `Option<KBox<T>>`
    - lib/buildid: Handle memfd_secret() files in build_id_parse()
    - mm: split critical region in remap_file_pages() and invoke LSMs in between
    - firmware: qcom: scm: Fix error code in probe()
    - firmware: imx-scu: fix OF node leak in .probe()
    - arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
    - arm64: dts: rockchip: remove supports-cqe from rk3588 jaguar
    - arm64: dts: rockchip: remove supports-cqe from rk3588 tiger
    - xfrm: fix tunnel mode TX datapath in packet offload mode
    - xfrm_output: Force software GSO only in tunnel mode
    - soc: imx8m: Remove global soc_uid
    - soc: imx8m: Use devm_* to simplify probe failure handling
    - soc: imx8m: Unregister cpufreq and soc dev in cleanup path
    - ARM: dts: bcm2711: Fix xHCI power-domain
    - ARM: dts: bcm2711: PL011 UARTs are actually r1p5
    - arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
    - RDMA/rxe: Fix the failure of ibv_query_device() and ibv_query_device_ex()
      tests
    - RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
    - RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
    - ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
    - ARM: dts: bcm2711: Don't mark timer regs unconfigured
    - ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC5300
    - ARM: dts: BCM5301X: Fix switch port labels of ASUS RT-AC3200
    - dma-mapping: fix missing clear bdr in check_ram_in_range_map()
    - RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
    - RDMA/hns: Fix soft lockup during bt pages loop
    - RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
    - RDMA/hns: Fix invalid sq params not being blocked
    - RDMA/hns: Fix a missing rollback in error path of
      hns_roce_create_qp_common()
    - RDMA/hns: Fix missing xa_destroy()
    - RDMA/hns: Fix wrong value of max_sge_rd
    - Bluetooth: Fix error code in chan_alloc_skb_cb()
    - Bluetooth: hci_event: Fix connection regression between LE and non-LE
      adapters
    - accel/qaic: Fix possible data corruption in BOs > 2G
    - ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
    - net: ipv6: fix TCP GSO segmentation with NAT
    - ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
    - ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
    - devlink: fix xa_alloc_cyclic() error handling
    - dpll: fix xa_alloc_cyclic() error handling
    - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU
    - net: atm: fix use after free in lec_send()
    - net: ti: icssg-prueth: Add lock to stats
    - net: lwtunnel: fix recursion loops
    - net: ipv6: ioam6: fix lwtunnel_output() loop
    - libfs: Fix duplicate directory entry in offset_dir_lookup
    - net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
    - i2c: omap: fix IRQ storms
    - net: mana: Support holes in device list reply msg
    - can: rcar_canfd: Fix page entries in the AFL list
    - can: ucan: fix out of bound read in strscpy() source
    - can: flexcan: only change CAN state when link up in system PM
    - can: flexcan: disable transceiver during system PM
    - drm/xe: Fix exporting xe buffers multiple times
    - drm/v3d: Don't run jobs that have errors flagged in its fence
    - io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally
    - riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
    - netfs: Call `invalidate_cache` only if implemented
    - regulator: dummy: force synchronous probing
    - regulator: check that dummy regulator has been probed before using it
    - accel/qaic: Fix integer overflow in qaic_validate_req()
    - arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound
      card
    - arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound
      card
    - arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
    - arm64: dts: rockchip: fix pinmux of UART5 for PX30 Ringneck on Haikou
    - mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
    - mmc: atmel-mci: Add missing clk_disable_unprepare()
    - selftests/mm: run_vmtests.sh: fix half_ufd_size_MB calculation
    - mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
    - mm/migrate: fix shmem xarray update during migration
    - mm/page_alloc: fix memory accept before watermarks gets initialized
    - proc: fix UAF in proc_get_inode()
    - memcg: drain obj stock on cpu hotplug teardown
    - ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
    - ARM: shmobile: smp: Enforce shmobile_smp_* alignment
    - firmware: qcom: uefisecapp: fix efivars registration race
    - efi/libstub: Avoid physical address 0x0 when doing random allocation
    - keys: Fix UAF in key_put()
    - xsk: fix an integer overflow in xp_create_and_assign_umem()
    - batman-adv: Ignore own maximum aggregation size during RX
    - soc: qcom: pdr: Fix the potential deadlock
    - pmdomain: amlogic: fix T7 ISP secpower
    - drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
    - drm/sched: Fix fence reference count leak
    - drm/amdgpu/gfx12: correct cleanup of 'me' field with gfx_v12_0_me_fini()
    - drm/amd/display: Fix message for support_edp0_on_dp1
    - drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
    - drm/amd/pm: add unique_id for gfx12
    - drm/amdgpu: Restore uncached behaviour on GFX12
    - drm/amdgpu/pm: wire up hwmon fan speed for smu 14.0.2
    - drm/amdgpu: Remove JPEG from vega and carrizo video caps
    - drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
    - drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
    - ksmbd: fix incorrect validation for num_aces field of smb_acl
    - io_uring/net: fix sendzc double notif flush
    - KVM: arm64: Fix __pkvm_init_vcpu cptr_el2 error path
    - KVM: arm64: Calculate cptr_el2 traps on activating traps
    - KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
    - KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
    - KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
    - KVM: arm64: Refactor exit handlers
    - KVM: arm64: Mark some header functions as inline
    - Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
    - libsubcmd: Silence compiler warning
    - arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
    - mm/huge_memory: drop beyond-EOF folios with the right number of refs
    - mptcp: Fix data stream corruption in the address announcement
    - Upstream stable to v6.6.84, v6.12.21
  * [SRU] enable cs42l43 and cs35l56 audio on Intel LNL (LP: #2106394)
    - ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops
    - ASoC: Intel: soc-acpi: adl: Add match entries for new cs42l43 laptops
    - ASoC: Intel: soc-acpi: lnl: Add match entries for new cs42l43 laptops
    - ASoC: Intel: soc-acpi: arl: Fix some missing empty terminators
  * Oracular update: upstream stable patchset 2025-04-17 (LP: #2107522)
    - ibmvnic: Perform tx CSO during send scrq direct
    - ibmvnic: Inspect header requirements before using scrq direct
    - net: enetc: Remove setting of RX software timestamp
    - net: enetc: Replace ifdef with IS_ENABLED
    - net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
    - mm: fix kernel BUG when userfaultfd_move encounters swapcache
    - userfaultfd: fix PTE unmapping stack-allocated PTE copies
    - fbdev: hyperv_fb: iounmap() the correct memory when removing a device
    - pinctrl: bcm281xx: Fix incorrect regmap max_registers value
    - pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw
    - netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
    - ice: do not configure destination override for switchdev
    - ice: fix memory leak in aRFS after reset
    - netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap
      around
    - netfilter: nf_tables: make destruction work queue pernet
    - sched: address a potential NULL pointer dereference in the GRED scheduler.
    - wifi: iwlwifi: mvm: fix PNVM timeout for non-MSI-X platforms
    - wifi: mac80211: don't queue sdata::work for a non-running sdata
    - wifi: cfg80211: cancel wiphy_work before freeing wiphy
    - Bluetooth: hci_event: Fix enabling passive scanning
    - Revert "Bluetooth: hci_core: Fix sleeping function called from invalid
      context"
    - net/mlx5: Fill out devlink dev info only for PFs
    - net: dsa: mv88e6xxx: Verify after ATU Load ops
    - net: mctp i3c: Copy headers if cloned
    - net: mctp i2c: Copy headers if cloned
    - netpoll: hold rcu read lock in __netpoll_send_skb()
    - drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
    - fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs
    - fbdev: hyperv_fb: Simplify hvfb_putmem
    - Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
    - net/mlx5: handle errors in mlx5_chains_create_table()
    - eth: bnxt: fix truesize for mb-xdp-pass case
    - eth: bnxt: return fail if interface is down in bnxt_queue_mem_alloc()
    - eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
    - eth: bnxt: fix kernel panic in the bnxt_get_queue_stats{rx | tx}
    - eth: bnxt: use page pool for head frags
    - bnxt_en: refactor tpa_info alloc/free into helpers
    - bnxt_en: handle tpa_info in queue API implementation
    - eth: bnxt: fix memory leak in queue reset
    - net: switchdev: Convert blocking notification chain to a raw one
    - net: mctp: unshare packets when reassembling
    - bonding: fix incorrect MAC address setting to receive NS messages
    - netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in
      insert_tree()
    - ipvs: prevent integer overflow in do_ip_vs_get_ctl()
    - netfilter: nft_exthdr: fix offset with ipv4_find_option()
    - net: openvswitch: remove misbehaving actions length check
    - net/mlx5: Fix incorrect IRQ pool usage when releasing IRQs
    - net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
    - net/mlx5: Bridge, fix the crash caused by LAG state check
    - net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
    - nvme-fc: go straight to connecting state when initializing
    - nvme-fc: do not ignore connectivity loss during connecting
    - hrtimers: Mark is_migration_base() with __always_inline
    - powercap: call put_device() on an error path in
      powercap_register_control_type()
    - btrfs: avoid starting new transaction when cleaning qgroup during subvolume
      drop
    - futex: Pass in task to futex_queue()
    - sched/debug: Provide slice length for fair tasks
    - platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
    - scsi: core: Use GFP_NOIO to avoid circular locking dependency
    - scsi: ufs: core: Fix error return with query response
    - scsi: qla1280: Fix kernel oops when debug level > 2
    - ACPI: resource: IRQ override for Eluktronics MECH-17
    - smb: client: fix noisy when tree connecting to DFS interlink targets
    - alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
    - vboxsf: fix building with GCC 15
    - selftests: always check mask returned by statmount(2)
    - HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
    - HID: intel-ish-hid: Send clock sync message immediately after reset
    - HID: ignore non-functional sensor in HP 5MP Camera
    - HID: hid-steam: Fix issues with disabling both gamepad mode and lizard mode
    - usb: phy: generic: Use proper helper for property detection
    - HID: intel-ish-hid: ipc: Add Panther Lake PCI device IDs
    - HID: topre: Fix n-key rollover on Realforce R3S TKL boards
    - selftests/cgroup: use bash in test_cpuset_v1_hp.sh
    - HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
    - HID: apple: fix up the F6 key on the Omoton KB066 keyboard
    - objtool: Ignore dangling jump table entries
    - sched: Clarify wake_up_q()'s write to task->wake_q.next
    - platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
    - platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
    - s390/cio: Fix CHPID "configure" attribute caching
    - thermal/cpufreq_cooling: Remove structure member documentation
    - LoongArch: KVM: Set host with kernel mode when switch to VM mode
    - arm64: amu: Delay allocating cpumask for AMU FIE support
    - Xen/swiotlb: mark xen_swiotlb_fixup() __init
    - Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
    - drm/tests: hdmi: Remove redundant assignments
    - drm/tests: hdmi: Reorder DRM entities variables assignment
    - drm/tests: hdmi: Fix recursive locking
    - selftests/bpf: Fix invalid flag of recv()
    - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID
    - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14
    - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull
    - ASoC: simple-card-utils.c: add missing dlc->of_node
    - ALSA: hda/realtek: Limit mic boost on Positivo ARN50
    - ASoC: rsnd: indicate unsupported clock rate
    - ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
    - ASoC: rsnd: adjust convert rate limitation
    - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
    - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
    - PCI: pci_ids: add INTEL_HDA_PTL_H
    - ALSA: hda: intel-dsp-config: Add PTL-H support
    - ALSA: hda: hda-intel: add Panther Lake-H support
    - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk
    - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
    - net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
    - io-wq: backoff when retrying worker creation
    - nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
    - nvmet-rdma: recheck queue state is LIVE in state lock in recv done
    - apple-nvme: Release power domains when probe fails
    - cifs: Treat unhandled directory name surrogate reparse points as mount
      directory nodes
    - sctp: Fix undefined behavior in left shift operation
    - nvme: only allow entering LIVE from CONNECTING state
    - phy: ti: gmii-sel: Simplify with dev_err_probe()
    - phy: ti: gmii-sel: Do not use syscon helper to build regmap
    - ASoC: tas2770: Fix volume scale
    - ASoC: tas2764: Fix power control mask
    - ASoC: tas2764: Set the SDOUT polarity correctly
    - fuse: don't truncate cached, mutated symlink
    - ASoC: dapm-graph: set fill colour of turned on nodes
    - drm/vkms: Round fixp2int conversion in lerp_u16
    - perf/x86/intel: Use better start period for frequency mode
    - x86/of: Don't use DTB for SMP setup if ACPI is enabled
    - x86/irq: Define trace events conditionally
    - perf/x86/rapl: Add support for Intel Arrow Lake U
    - mptcp: safety check before fallback
    - drm/nouveau: Do not override forced connector status
    - net: Handle napi_schedule() calls from non-interrupt
    - block: fix 'kmem_cache of name 'bio-108' already exists'
    - vhost: return task creation error instead of NULL
    - cifs: Validate content of WSL reparse point buffers
    - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from
      parse_reparse_point()
    - Input: goodix-berlin - fix vddio regulator references
    - Input: ads7846 - fix gpiod allocation
    - Input: iqs7222 - preserve system status register
    - Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE
      controllers
    - Input: xpad - add multiple supported devices
    - Input: xpad - add support for ZOTAC Gaming Zone
    - Input: xpad - add support for TECNO Pocket Go
    - Input: xpad - rename QH controller to Legion Go S
    - Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
    - Input: i8042 - add required quirks for missing old boardnames
    - Input: i8042 - swap old quirk combination with new quirk for several devices
    - Input: i8042 - swap old quirk combination with new quirk for more devices
    - USB: serial: ftdi_sio: add support for Altera USB Blaster 3
    - USB: serial: option: add Telit Cinterion FE990B compositions
    - USB: serial: option: fix Telit Cinterion FE990A name
    - USB: serial: option: match on interface class for Telit FN990B
    - rust: lockdep: Remove support for dynamically allocated LockClassKeys
    - rust: Disallow BTF generation with Rust + LTO
    - x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
    - spi: microchip-core: prevent RX overflows when transmit size > FIFO size
    - drm/i915/cdclk: Do cdclk post plane programming later
    - drm/atomic: Filter out redundant DPMS calls
    - drm/dp_mst: Fix locking when skipping CSN before topology probing
    - drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags
    - drm/amd/amdkfd: Evict all queues even HWS remove queue failed
    - drm/amdgpu/display: Allow DCC for video formats on GFX12
    - drm/amd/display: Disable unneeded hpd interrupts during dm_init
    - drm/amd/display: fix default brightness
    - drm/amd/display: fix missing .is_two_pixels_per_container
    - drm/amd/display: Restore correct backlight brightness after a GPU reset
    - drm/amd/display: Assign normalized_pix_clk when color depth = 14
    - drm/amd/display: Fix slab-use-after-free on hdcp_work
    - ksmbd: fix use-after-free in ksmbd_free_work_struct
    - ksmbd: prevent connection release during oplock break notification
    - clk: samsung: update PLL locktime for PLL142XX used on FSD platform
    - clk: samsung: gs101: fix synchronous external abort in samsung_clk_save()
    - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in
      create_sdw_dailinks()
    - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
    - dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
    - arm64: mm: Populate vmemmap at the page level if not section aligned
    - Fix mmu notifiers for range-based invalidates
    - qlcnic: fix memory leak issues in qlcnic_sriov_common.c
    - smb: client: fix regression with guest option
    - net: phy: nxp-c45-tja11xx: add TJA112X PHY configuration errata
    - net: phy: nxp-c45-tja11xx: add TJA112XB SGMII PCS restart errata
    - ASoC: ops: Consistently treat platform_max as control value
    - rust: error: add missing newline to pr_warn! calls
    - drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
    - ASoC: cs42l43: Fix maximum ADC Volume
    - rust: init: add missing newline to pr_info! calls
    - ASoC: rt722-sdca: add missing readable registers
    - drm/xe: cancel pending job timer before freeing scheduler
    - drm/xe: Release guc ids before cancelling work
    - drm/xe/userptr: Fix an incorrect assert
    - drm/xe/pm: Temporarily disable D3Cold on BMG
    - nvme: move error logging from nvme_end_req() to __nvme_end_req()
    - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
    - drm/i915: Increase I915_PARAM_MMAP_GTT_VERSION version to indicate support
      for partial mmaps
    - scripts: generate_rust_analyzer: add missing macros deps
    - scripts: generate_rust_analyzer: add missing include_dirs
    - scripts: generate_rust_analyzer: add uapi crate
    - block: change blk_mq_add_to_batch() third argument type to bool
    - cifs: Fix integer overflow while processing acregmax mount option
    - cifs: Fix integer overflow while processing acdirmax mount option
    - cifs: Fix integer overflow while processing actimeo mount option
    - cifs: Fix integer overflow while processing closetimeo mount option
    - x86/vmware: Parse MP tables for SEV-SNP enabled guests under VMware
      hypervisors
    - i2c: ali1535: Fix an error handling path in ali1535_probe()
    - i2c: ali15x3: Fix an error handling path in ali15x3_probe()
    - i2c: sis630: Fix an error handling path in sis630_probe()
    - mm/hugetlb: wait for hugetlb folios to be freed
    - smb3: add support for IAKerb
    - smb: client: Fix match_session bug preventing session reuse
    - Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
    - nvme-fc: rely on state transitions to handle connectivity loss
    - HID: apple: disable Fn key handling on the Omoton KB066
    - Upstream stable to v6.6.83, v6.12.20
  * Oracular update: upstream stable patchset 2025-04-15 (LP: #2107437)
    - x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
    - rust: block: fix formatting in GenDisk doc
    - gpio: vf610: use generic device_get_match_data()
    - gpio: vf610: add locking to gpio direction functions
    - cifs: Remove symlink member from cifs_open_info_data union
    - btrfs: fix data overwriting bug during buffered write when block size < page
      size
    - x86/microcode/AMD: Add some forgotten models to the SHA check
    - loongarch: Use ASM_REACHABLE
    - rust: workqueue: remove unneeded ``#[allow(clippy::new_ret_no_self)]`
    - rust: sort global Rust flags
    - rust: types: avoid repetition in `{As,From}Bytes` impls
    - rust: enable `clippy::unnecessary_safety_comment` lint
    - rust: enable `clippy::unnecessary_safety_doc` lint
    - rust: enable `clippy::ignored_unit_patterns` lint
    - rust: enable `rustdoc::unescaped_backticks` lint
    - rust: init: remove unneeded `#[allow(clippy::disallowed_names)]`
    - rust: introduce `.clippy.toml`
    - rust: replace `clippy::dbg_macro` with `disallowed_macros`
    - rust: provide proper code documentation titles
    - rust: enable Clippy's `check-private-items`
    - Documentation: rust: add coding guidelines on lints
    - Documentation: rust: discuss `#[expect(...)]` in the guidelines
    - rust: error: allow `useless_conversion` for 32-bit builds
    - rust: error: optimize error type to use nonzero
    - rust: kbuild: expand rusttest target for macros
    - rust: fix size_t in bindgen prototypes of C builtins
    - rust: map `__kernel_size_t` and friends also to usize/isize
    - tracing: tprobe-events: Fix a memory leak when tprobe with $retval
    - tracing: tprobe-events: Reject invalid tracepoint name
    - stmmac: loongson: Pass correct arg to PCI function
    - LoongArch: Convert unreachable() to BUG()
    - LoongArch: Use polling play_dead() when resuming from hibernation
    - LoongArch: Set max_pfn with the PFN of the last page
    - LoongArch: KVM: Add interrupt checking for AVEC
    - LoongArch: KVM: Reload guest CSR registers after sleep
    - LoongArch: KVM: Fix GPA size issue about VM
    - HID: appleir: Fix potential NULL dereference at raw event handle
    - ksmbd: fix type confusion via race condition when using ipc_msg_send_request
    - ksmbd: fix out-of-bounds in parse_sec_desc()
    - ksmbd: fix use-after-free in smb2_lock
    - ksmbd: fix bug on trap in smb2_lock
    - gpio: rcar: Use raw_spinlock to protect register access
    - gpio: aggregator: protect driver attr handlers against module unload
    - ALSA: seq: Avoid module auto-load handling at event delivery
    - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
    - ALSA: hda/realtek: update ALC222 depop optimize
    - btrfs: fix a leaked chunk map issue in read_one_chunk()
    - hwmon: (peci/dimmtemp) Do not provide fake thresholds data
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in
      resource_build_scaling_params
    - drm/amd/pm: always allow ih interrupt from fw
    - drm/imagination: avoid deadlock on fence release
    - drm/imagination: Hold drm_gem_gpuva lock for unmap
    - drm/imagination: only init job done fences once
    - drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
    - Revert "mm/page_alloc.c: don't show protection in zone's ->lowmem_reserve[]
      for empty zone"
    - Revert "selftests/mm: remove local __NR_* definitions"
    - platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
    - x86/boot: Sanitize boot params before parsing command line
    - x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
    - x86/cpu: Validate CPUID leaf 0x2 EDX output
    - x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
    - drm/xe: Add staging tree for VM binds
    - drm/xe/hmm: Style- and include fixes
    - drm/xe/hmm: Don't dereference struct page pointers without notifier lock
    - drm/xe/vm: Fix a misplaced #endif
    - drm/xe/vm: Validate userptr during gpu vma prefetching
    - drm/xe: Fix GT "for each engine" workarounds
    - drm/xe: Fix fault mode invalidation with unbind
    - drm/xe/userptr: properly setup pfn_flags_mask
    - drm/xe/userptr: Unmap userptrs in the mmu notifier
    - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
    - Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
    - wifi: cfg80211: regulatory: improve invalid hints checking
    - wifi: nl80211: reject cooked mode if it is set along with other flags
    - selftests/damon/damos_quota_goal: handle minimum quota that cannot be
      further reduced
    - selftests/damon/damos_quota: make real expectation of quota exceeds
    - selftests/damon/damon_nr_regions: set ops update for merge results check to
      100ms
    - selftests/damon/damon_nr_regions: sort collected regiosn before checking
      with min/max boundaries
    - rapidio: add check for rio_add_net() in rio_scan_alloc_net()
    - rapidio: fix an API misues when rio_add_net() fails
    - dma: kmsan: export kmsan_handle_dma() for modules
    - s390/traps: Fix test_monitor_call() inline assembly
    - NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
    - userfaultfd: do not block on locking a large folio with raised refcount
    - block: fix conversion of GPT partition name to 7-bit
    - mm/page_alloc: fix uninitialized variable
    - mm: don't skip arch_sync_kernel_mappings() in error paths
    - mm: fix finish_fault() handling for large folios
    - wifi: iwlwifi: mvm: clean up ROC on failure
    - wifi: iwlwifi: mvm: don't try to talk to a dead firmware
    - wifi: iwlwifi: limit printed string from FW file
    - wifi: iwlwifi: Free pages allocated when failing to build A-MSDU
    - wifi: iwlwifi: Fix A-MSDU TSO preparation
    - HID: google: fix unused variable warning under !CONFIG_ACPI
    - HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove()
    - HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
    - wifi: mac80211: Support parsing EPCS ML element
    - wifi: mac80211: fix MLE non-inheritance parsing
    - wifi: mac80211: fix vendor-specific inheritance
    - drm/fbdev-helper: Move color-mode lookup into 4CC format helper
    - drm/fbdev: Add memory-agnostic fbdev client
    - drm: Add client-agnostic setup helper
    - drm/fbdev-ttm: Support struct drm_driver.fbdev_probe
    - drm/nouveau: select FW caching
    - bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
    - nvme-tcp: add basic support for the C2HTermReq PDU
    - nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
    - nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
    - net: gso: fix ownership in __udp_gso_segment
    - caif_virtio: fix wrong pointer check in cfv_probe()
    - perf/core: Fix pmus_lock vs. pmus_srcu ordering
    - hwmon: (pmbus) Initialise page count in pmbus_identify()
    - hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
    - hwmon: (ad7314) Validate leading zero bits and return error
    - tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
    - drm/imagination: Fix timestamps in firmware traces
    - ALSA: usx2y: validate nrpacks module parameter on probe
    - llc: do not use skb_get() before dev_queue_xmit()
    - hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
    - drm/sched: Fix preprocessor guard
    - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
    - net: hns3: make sure ptp clock is unregister and freed if
      hclge_ptp_get_cycle returns an error
    - drm/i915/color: Extract intel_color_modeset()
    - drm/i915: Plumb 'dsb' all way to the plane hooks
    - drm/xe: Remove double pageflip
    - HID: hid-steam: Fix use-after-free when detaching device
    - net: ipa: Fix v4.7 resource group names
    - net: ipa: Fix QSB data for v4.7
    - net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
    - ppp: Fix KMSAN uninit-value warning with bpf
    - vlan: enforce underlying device type
    - x86/sgx: Fix size overflows in sgx_encl_create()
    - exfat: fix just enough dentries but allocate a new cluster to dir
    - exfat: fix soft lockup in exfat_clear_bitmap
    - exfat: short-circuit zero-byte writes in exfat_file_write_iter
    - net-timestamp: support TCP GSO case for a few missing flags
    - ublk: set_params: properly check if parameters can be applied
    - sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
    - nvme-tcp: fix signedness bug in nvme_tcp_init_connection()
    - net: dsa: mt7530: Fix traffic flooding for MMIO devices
    - mctp i3c: handle NULL header address
    - net: ipv6: fix dst ref loop in ila lwtunnel
    - net: ipv6: fix missing dst ref drop in ila lwtunnel
    - gpio: rcar: Fix missing of_node_put() call
    - Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
    - usb: renesas_usbhs: Call clk_put()
    - usb: renesas_usbhs: Use devm_usb_get_phy()
    - usb: hub: lack of clearing xHC resources
    - usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
    - usb: typec: ucsi: Fix NULL pointer access
    - usb: renesas_usbhs: Flush the notify_hotplug_work
    - usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
    - usb: atm: cxacru: fix a flaw in existing endpoint checks
    - usb: dwc3: Set SUSPENDENABLE soon after phy init
    - usb: dwc3: gadget: Prevent irq storm when TH re-executes
    - usb: typec: ucsi: increase timeout for PPM reset operations
    - usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
    - usb: gadget: Set self-powered based on MaxPower and bmAttributes
    - usb: gadget: Fix setting self-powered state on suspend
    - usb: gadget: Check bmAttributes only if configuration is valid
    - kbuild: userprogs: use correct lld when linking through clang
    - acpi: typec: ucsi: Introduce a ->poll_cci method
    - xhci: pci: Fix indentation in the PCI device ID definitions
    - usb: xhci: Enable the TRB overfetch quirk on VIA VL805
    - KVM: SVM: Set RFLAGS.IF=1 in C code, to get VMRUN out of the STI shadow
    - KVM: SVM: Save host DR masks on CPUs with DebugSwap
    - KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
    - KVM: SVM: Suppress DEBUGCTL.BTF on AMD
    - KVM: x86: Snapshot the host's DEBUGCTL in common x86
    - KVM: SVM: Manually context switch DEBUGCTL if LBR virtualization is disabled
    - KVM: x86: Snapshot the host's DEBUGCTL after disabling IRQs
    - KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
    - cdx: Fix possible UAF error in driver_override_show()
    - mei: me: add panther lake P DID
    - mei: vsc: Use "wakeuphostint" when getting the host wakeup GPIO
    - intel_th: pci: Add Arrow Lake support
    - intel_th: pci: Add Panther Lake-H support
    - intel_th: pci: Add Panther Lake-P/U support
    - char: misc: deallocate static minor in error path
    - drivers: core: fix device leak in __fw_devlink_relax_cycles()
    - slimbus: messaging: Free transaction ID in delayed interrupt scenario
    - bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
    - eeprom: digsy_mtc: Make GPIO lookup table match the device
    - drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
    - iio: filter: admv8818: Force initialization of SDO
    - iio: light: apds9306: fix max_scale_nano values
    - iio: dac: ad3552r: clear reset status flag
    - iio: adc: ad7192: fix channel select
    - iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
    - mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
    - arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
    - kbuild: hdrcheck: fix cross build with clang
    - nvme-tcp: Fix a C2HTermReq error message
    - docs: rust: remove spurious item in `expect` list
    - KVM: e500: always restore irqs
    - x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
    - wifi: iwlwifi: pcie: Fix TSO preparation
    - Upstream stable to v6.6.82, v6.12.19
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts

 -- Stefan Bader <stefan.bader@canonical.com>  Fri, 23 May 2025 10:55:23 +0200

linux-hwe-6.11 (6.11.0-26.26~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-26.26~24.04.1 -proposed tracker (LP: #2107164)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.hwe-6.11/dkms-versions -- update from kernel-versions
      (main/2025.04.14)

  [ Ubuntu: 6.11.0-26.26 ]

  * oracular/linux: 6.11.0-26.26 -proposed tracker (LP: #2107166)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.04.14)
  * drm/xe: prevent potential UAF in pf_provision_vf_ggtt()  (LP: #2106652)
    - drm/xe: prevent potential UAF in pf_provision_vf_ggtt()
  * Oracular update: upstream stable patchset 2025-04-09 (LP: #2106703)
    - IB/mlx5: Set and get correct qp_num for a DCT QP
    - RDMA/mana_ib: Allocate PAGE aligned doorbell index
    - scsi: ufs: core: Fix ufshcd_is_ufs_dev_busy() and ufshcd_eh_timed_out()
    - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
    - SUNRPC: convert RPC_TASK_* constants to enum
    - SUNRPC: Prevent looping due to rpc_signal_task() races
    - SUNRPC: Handle -ETIMEDOUT return from tlshd
    - RDMA/mlx5: Fix AH static rate parsing
    - scsi: core: Clear driver private data when retrying request
    - RDMA/mlx5: Fix bind QP error cleanup flow
    - sunrpc: suppress warnings for unused procfs functions
    - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
    - Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
    - rxrpc: rxperf: Fix missing decoding of terminal magic cookie
    - afs: Fix the server_list to unuse a displaced server rather than putting it
    - net: loopback: Avoid sending IP packets without an Ethernet header
    - net: set the minimum for net_hotdata.netdev_budget_usecs
    - ipv4: icmp: Pass full DS field to ip_route_input()
    - ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
    - ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
    - ipv4: Convert icmp_route_lookup() to dscp_t.
    - ipv4: Convert ip_route_input() to dscp_t.
    - ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos
      conversion.
    - ipvlan: ensure network headers are in skb linear part
    - net: cadence: macb: Synchronize stats calculations
    - ASoC: es8328: fix route from DAC to output
    - ipvs: Always clear ipvs_property flag in skb_scrub_packet()
    - firmware: cs_dsp: Remove async regmap writes
    - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15
    - ice: add E830 HW VF mailbox message limit support
    - ice: Fix deinitializing VF in error path
    - tcp: Defer ts_recent changes until req is owned
    - net: Clear old fragment checksum value in napi_reuse_skb
    - net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
    - net/mlx5: IRQ, Fix null string in debug print
    - net: ipv6: fix dst ref loop on input in seg6 lwt
    - net: ipv6: fix dst ref loop on input in rpl lwt
    - net: ti: icss-iep: Reject perout generation request
    - perf/core: Order the PMU list to fix warning about unordered pmu_ctx_list
    - uprobes: Reject the shared zeropage in uprobe_write_opcode()
    - io_uring/net: save msg_control for compat
    - x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
    - phy: rockchip: naneng-combphy: compatible reset with old DT
    - riscv: KVM: Fix hart suspend status check
    - riscv: KVM: Fix SBI IPI error generation
    - riscv: KVM: Fix SBI TIME error generation
    - tracing: Fix bad hist from corrupting named_triggers list
    - ftrace: Avoid potential division by zero in function_stat_show()
    - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
    - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD
    - perf/core: Add RCU read lock protection to perf_iterate_ctx()
    - perf/x86: Fix low freqency setting issue
    - perf/core: Fix low freq setting via IOC_PERIOD
    - drm/amd/display: Disable PSR-SU on eDP panels
    - drm/amd/display: Fix HPD after gpu reset
    - i2c: npcm: disable interrupt enable bit before devm_request_irq
    - i2c: ls2x: Fix frequency division register access
    - usbnet: gl620a: fix endpoint checking in genelink_bind()
    - net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
    - net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
    - net: enetc: update UDP checksum when updating originTimestamp field
    - net: enetc: correct the xdp_tx statistics
    - net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
    - phy: tegra: xusb: reset VBUS & ID OVERRIDE
    - phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
    - mptcp: always handle address removal under msk socket lock
    - mptcp: reset when MPTCP opts are dropped after join
    - vmlinux.lds: Ensure that const vars with relocations are mapped R/O
    - rcuref: Plug slowpath race in rcuref_put()
    - sched/core: Prevent rescheduling when interrupts are disabled
    - scsi: ufs: core: bsg: Fix crash when arpmb command fails
    - rseq/selftests: Fix riscv rseq_offset_deref_addv inline asm
    - riscv/futex: sign extend compare value in atomic cmpxchg
    - riscv: signal: fix signal frame size
    - Revert "rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads"
    - Revert "rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads"
    - amdgpu/pm/legacy: fix suspend/resume issues
    - x86/microcode/AMD: Use the family,model,stepping encoded in the patch ID
    - x86/microcode/AMD: Pay attention to the stepping dynamically
    - x86/microcode/AMD: Split load_microcode_amd()
    - x86/microcode/intel: Remove unnecessary cache writeback and invalidation
    - x86/microcode/AMD: Flush patch buffer mapping after application
    - x86/microcode/AMD: Return bool from find_blobs_in_containers()
    - x86/microcode/AMD: Make __verify_patch_size() return bool
    - x86/microcode/AMD: Have __apply_microcode_amd() return bool
    - x86/microcode/AMD: Merge early_apply_microcode() into its single callsite
    - x86/microcode/AMD: Get rid of the _load_microcode_amd() forward declaration
    - x86/microcode/AMD: Add get_patch_level()
    - x86/microcode/AMD: Load only SHA256-checksummed patches
    - x86/microcode/AMD: Fix a -Wsometimes-uninitialized clang false positive
    - RDMA/mlx5: Fix the recovery flow of the UMR QP
    - RDMA/mlx5: Fix a race for DMABUF MR which can lead to CQE with error
    - RDMA/mlx5: Fix a WARN during dereg_mr for DM type
    - RDMA/hns: Fix mbox timing out by adding retry mechanism
    - RDMA/bnxt_re: Fail probe early when not enough MSI-x vectors are reserved
    - RDMA/bnxt_re: Refactor NQ allocation
    - landlock: Fix non-TCP sockets restriction
    - NFS: O_DIRECT writes must check and adjust the file length
    - NFS: Adjust delegated timestamps for O_DIRECT reads and writes
    - NFSv4: Fix a deadlock when recovering state on a sillyrenamed file
    - scsi: ufs: core: Set default runtime/system PM levels before
      ufshcd_hba_init()
    - RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers
    - afs: Give an afs_server object a ref on the afs_cell object it points to
    - ASoC: fsl: Rename stream name of SAI DAI driver
    - drm/xe/oa: Signal output fences
    - drm/xe/oa: Move functions up so they can be reused for config ioctl
    - drm/xe/oa: Add syncs support to OA config ioctl
    - drm/xe/oa: Allow only certain property changes from config
    - drm/xe/oa: Allow oa_exponent value of 0
    - ASoC: cs35l56: Prevent races when soft-resetting using SPI control
    - net: ethernet: ti: am65-cpsw: select PAGE_POOL
    - ice: Avoid setting default Rx VSI twice in switchdev setup
    - selftests: drv-net: Check if combined-count exists
    - idpf: fix checksums set in idpf_rx_rsc()
    - thermal: gov_power_allocator: Fix incorrect calculation in divvy_up_power()
    - unreachable: Unify
    - objtool: Remove annotate_{,un}reachable()
    - objtool: Fix C jump table annotations for Clang
    - phy: rockchip: fix Kconfig dependency more
    - riscv: KVM: Fix hart suspend_type use
    - KVM: arm64: Ensure a VMID is allocated before programming VTTBR_EL2
    - drm/xe/regs: remove a duplicate definition for RING_CTL_SIZE(size)
    - drm/xe/userptr: restore invalidation list on error
    - drm/amdkfd: Preserve cp_hqd_pq_control on update_mqd
    - drm/amdgpu: disable BAR resize on Dell G5 SE
    - drm/amdgpu: init return value in amdgpu_ttm_clear_buffer
    - drm/amd/display: add a quirk to enable eDP0 on DP1
    - arm64/mm: Fix Boot panic on Ampere Altra
    - block: Remove zone write plugs when handling native zone append writes
    - net: phy: qcom: qca807x fix condition for DAC_DSP_BIAS_CURRENT
    - phy: exynos5-usbdrd: gs101: ensure power is gated to SS phy in phy_exit()
    - iommu/vt-d: Fix suspicious RCU usage
    - intel_idle: Handle older CPUs, which stop the TSC in deeper C states,
      correctly
    - selftests/landlock: Test that MPTCP actions are not restricted
    - selftests/landlock: Test TCP accesses with protocol=IPPROTO_TCP
    - dm-integrity: Avoid divide by zero in table status in Inline mode
    - dm vdo: add missing spin_lock_init
    - ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
    - riscv: cacheinfo: Use of_property_present() for non-boolean properties
    - riscv: signal: fix signal_minsigstksz
    - riscv: cpufeature: use bitmap_equal() instead of memcmp()
    - efi: Don't map the entire mokvar table to determine its size
    - x86/microcode/AMD: Remove ugly linebreak in __verify_patch_section()
      signature
    - x86/microcode/AMD: Remove unused save_microcode_in_initrd_amd() declarations
    - Upstream stable to v6.6.81, v6.12.18
  * Oracular update: upstream stable patchset 2025-04-08 (LP: #2106494)
    - arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings
    - xfs: assert a valid limit in xfs_rtfind_forw
    - xfs: validate inumber in xfs_iget
    - xfs: fix a sloppy memory handling bug in xfs_iroot_realloc
    - xfs: fix a typo
    - xfs: skip background cowblock trims on inodes open for write
    - xfs: don't free cowblocks from under dirty pagecache on unshare
    - xfs: merge xfs_attr_leaf_try_add into xfs_attr_leaf_addname
    - xfs: return bool from xfs_attr3_leaf_add
    - xfs: distinguish extra split from real ENOSPC from xfs_attr3_leaf_split
    - xfs: distinguish extra split from real ENOSPC from xfs_attr_node_try_addname
    - xfs: fold xfs_bmap_alloc_userdata into xfs_bmapi_allocate
    - xfs: don't ifdef around the exact minlen allocations
    - xfs: call xfs_bmap_exact_minlen_extent_alloc from xfs_bmap_btalloc
    - xfs: support lowmode allocations in xfs_bmap_exact_minlen_extent_alloc
    - xfs: Use try_cmpxchg() in xlog_cil_insert_pcp_aggregate()
    - xfs: Remove empty declartion in header file
    - xfs: pass the exact range to initialize to xfs_initialize_perag
    - xfs: update the file system geometry after recoverying superblock buffers
    - xfs: error out when a superblock buffer update reduces the agcount
    - xfs: don't use __GFP_RETRY_MAYFAIL in xfs_initialize_perag
    - xfs: update the pag for the last AG at recovery time
    - xfs: Reduce unnecessary searches when searching for the best extents
    - xfs: streamline xfs_filestream_pick_ag
    - xfs: Check for delayed allocations before setting extsize
    - md/md-bitmap: replace md_bitmap_status() with a new helper
      md_bitmap_get_stats()
    - md/md-cluster: fix spares warnings for __le64
    - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
    - md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
    - Input: serio - define serio_pause_rx guard to pause and resume serio ports
    - Input: synaptics - fix crash when enabling pass-through port
    - ASoC: renesas: rz-ssi: Add a check for negative sample_space
    - USB: gadget: f_midi: f_midi_complete to call queue_work
    - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
    - powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
    - powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
    - ALSA: hda/realtek: Fixup ALC225 depop procedure
    - powerpc/code-patching: Fix KASAN hit by not flagging text patching area as
      VM_ALLOC
    - geneve: Fix use-after-free in geneve_find_dev().
    - net/sched: cls_api: fix error handling causing NULL dereference
    - ALSA: seq: Drop UMP events when no UMP-conversion is set
    - s390/ism: add release function for struct device
    - ibmvnic: Introduce send sub-crq direct
    - ibmvnic: Add stat for tx direct vs tx batched
    - ibmvnic: Don't reference skb after sending to VIOS
    - sockmap, vsock: For connectible sockets allow only connected
    - vsock/bpf: Warn on socket without transport
    - tcp: adjust rcvq_space after updating scaling ratio
    - gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
    - geneve: Suppress list corruption splat in geneve_destroy_tunnels().
    - flow_dissector: Fix handling of mixed port and port-range keys
    - flow_dissector: Fix port range key handling in BPF conversion
    - net: Add non-RCU dev_getbyhwaddr() helper
    - arp: switch to dev_getbyhwaddr() in arp_req_set_public()
    - net: axienet: Set mac_managed_pm
    - tcp: drop secpath at the same time as we currently drop dst
    - bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
    - bpf: unify VM_WRITE vs VM_MAYWRITE use in BPF map mmaping logic
    - bpf: avoid holding freeze_mutex during mmap operation
    - strparser: Add read_sock callback
    - bpf: Fix wrong copied_seq calculation
    - bpf: Disable non stream socket for strparser
    - bpf: Fix deadlock when freeing cgroup storage
    - power: supply: da9150-fg: fix potential overflow
    - nouveau/svm: fix missing folio unlock + put after
      make_device_exclusive_range()
    - drm/msm: Avoid rounding up to one jiffy
    - nvme/ioctl: add missing space in err message
    - bpf: skip non exist keys in generic_map_lookup_batch
    - drm/nouveau/pmu: Fix gp10b firmware guard
    - arm64: dts: mediatek: mt8183: Disable DSI display output by default
    - drm/msm/dpu: Disable dither in phys encoder cleanup
    - drm/i915: Make sure all planes in use by the joiner have their crtc included
    - drm/i915/dp: Fix error handling during 128b/132b link training
    - io_uring: prevent opcode speculation
    - tee: optee: Fix supplicant wait loop
    - drop_monitor: fix incorrect initialization order
    - soc: loongson: loongson2_guts: Add check for devm_kstrdup()
    - lib/iov_iter: fix import_iovec_ubuf iovec management
    - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
    - ASoC: SOF: stream-ipc: Check for cstream nullity in sof_ipc_msg_data()
    - ASoC: fsl_micfil: Enable default case in micfil_set_quality()
    - ALSA: hda: Add error check for snd_ctl_rename_id() in
      snd_hda_create_dig_out_ctls()
    - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
    - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close
    - acct: perform last write from workqueue
    - acct: block access to kernel internal filesystems
    - mm,madvise,hugetlb: check for 0-length range after end address adjustment
    - mtd: rawnand: cadence: fix error code in cadence_nand_init()
    - mtd: rawnand: cadence: use dma_map_resource for sdma address
    - mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
    - smb: client: Add check for next_buffer in receive_encrypted_standard()
    - EDAC/qcom: Correct interrupt enable register configuration
    - ftrace: Correct preemption accounting for function tracing.
    - ftrace: Do not add duplicate entries in subops manager ops
    - arm64: dts: rockchip: change eth phy mode to rgmii-id for orangepi r1 plus
      lts
    - nilfs2: handle errors that nilfs_prepare_chunk() may return
    - drm/xe/oa: Separate batch submission from waiting for completion
    - drm/xe/oa/uapi: Define and parse OA sync properties
    - drm/xe/oa: Add input fence dependencies
    - xe/oa: Fix query mode of operation for OAR/OAC
    - KVM: x86: Get vcpu->arch.apic_base directly and drop kvm_get_apic_base()
    - KVM: x86: Inline kvm_get_apic_mode() in lapic.h
    - KVM: nVMX: Defer SVI update to vmcs01 on EOI when L2 is active w/o VID
    - drm/amd/display: Refactoring if and endif statements to enable DC_LOGGER
    - drm/amd/display: update dcn351 used clock offset
    - drm/amd/display: Correct register address in dcn35
    - Revert "UBUNTU: SAUCE: Bluetooth: qca: Support downloading board ID specific
      NVM for WCN6855"
    - Bluetooth: qca: Update firmware-name to support board specific nvm
    - Bluetooth: qca: Fix poor RF performance for WCN6855
    - ASoC: renesas: rz-ssi: Terminate all the DMA transactions
    - PCI: Make pcim_request_all_regions() a public function
    - PCI: Export pci_intx_unmanaged() and pcim_intx()
    - PCI: Remove devres from pci_intx()
    - PCI: Restore original INTX_DISABLE bit by pcim_intx()
    - accel/ivpu: Limit FW version string length
    - accel/ivpu: Add coredump support
    - accel/ivpu: Add FW state dump on TDR
    - accel/ivpu: Fix error handling in recovery/reset
    - drm/amdkfd: Move gfx12 trap handler to separate file
    - drm/amdkfd: Ensure consistent barrier state saved in gfx12 trap handler
    - tracing: Switch trace.c code over to use guard()
    - tracing: Have the error of __tracing_resize_ring_buffer() passed to user
    - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers
    - powerpc/code-patching: Disable KASAN report during patching via temporary mm
    - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device
    - vsock/virtio: fix variables initialization during resuming
    - net: pse-pd: Avoid setting max_uA in regulator constraints
    - net: pse-pd: Use power limit at driver side instead of current limit
    - net: pse-pd: pd692x0: Fix power limit retrieval
    - net: allow small head cache usage with large MAX_SKB_FRAGS values
    - selftests/bpf: Add tests for raw_tp null handling
    - net: Add rx_skb of kfree_skb to raw_tp_null_args[].
    - bpf: Fix softlockup in arena_map_free on 64k page kernel
    - arm64: dts: rockchip: adjust SMMU interrupt type on rk3588
    - md/raid*: Fix the set_queue_limits implementations
    - platform: cznic: CZNIC_PLATFORMS should depend on ARCH_MVEBU
    - [Config] updateconfigs for CZNIC_PLATFORMS
    - drm/msm/dpu: skip watchdog timer programming through TOP on >= SM8450
    - drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields
    - drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG0 updated from driver side
    - drm/msm/dsi/phy: Protect PHY_CMN_CLK_CFG1 against clock driver
    - drm/msm/dsi/phy: Do not overwite PHY_CMN_CLK_CFG1 when choosing bitclk
      source
    - nvme: tcp: Fix compilation warning with W=1
    - nvme-tcp: fix connect failure on receiving partial ICResp PDU
    - drm: panel: jd9365da-h3: fix reset signal polarity
    - drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
    - drm/i915/gt: Use spin_lock_irqsave() in interruptible context
    - io_uring/rw: forbid multishot async reads
    - gpiolib: protect gpio_chip with SRCU in array_info paths in multi get/set
    - arm64: dts: rockchip: Fix broken tsadc pinctrl names for rk3588
    - arm64: dts: rockchip: Move uart5 pin configuration to px30 ringneck SoM
    - arm64: dts: rockchip: Disable DMA for uart5 on px30-ringneck
    - s390/boot: Fix ESSA detection
    - xfs: fix online repair probing when CONFIG_XFS_ONLINE_REPAIR=n
    - smb: client: fix chmod(2) regression with ATTR_READONLY
    - gve: set xdp redirect target only when it is available
    - perf/x86/intel: Fix event constraints for LNC
    - irqchip/gic-v3: Fix rk3399 workaround when secure interrupts are enabled
    - ftrace: Fix accounting of adding subops to a manager ops
    - tracing: Fix using ret variable in tracing_set_tracer()
    - net: pse-pd: Fix deadlock in current limit functions
    - selftests/mm: build with -O2
    - drm/amdgpu: bump version for RV/PCO compute fix
    - Upstream stable to v6.6.80, v6.12.17
  * WARNING: CPU: 18 PID: 3683 at arch/powerpc/kvm/../../../virt/kvm/vfio.c Call
    Traces seen when pci device is detached from the kvm guest (LP: #2104893)
    - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests
  * [SRU] Enable speaker/mic mute LEDs on Lenovo ideapad and thinkbook
    (LP: #2106449)
    - ALSA: hda: Support for Ideapad hotkey mute LEDs
    - platform/x86:lenovo-wmi-hotkey-utilities.c: Support for mic and audio mute
      LEDs
    - [Config] Enable Lenovo wmi hotkey driver
  * Backport "PCI: Wait for device readiness with Configuration RRS" to N/O
    (LP: #2106251)
    - PCI: Wait for device readiness with Configuration RRS
  * BMG: support additional PCI ID (LP: #2105768)
    - SAUCE: drm/xe/bmg: Add one additional PCI ID
  * mptcp BUG 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
    (LP: #2101120)
    - mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
  * CVE-2025-21971
    - net_sched: Prevent creation of classes with TC_H_ROOT
  * uprobe-related panics during profiling (LP: #2104210)
    - uprobes: Fix race in uprobe_free_utask
  * ubuntu_bpf failed to build on Noble / Oracular (LP: #2069407)
    - selftests/bpf: Fix compilation failure when CONFIG_NET_FOU!=y
  * drm/xe: improve behavior under memory pressure (LP: #2102659)
    - drm/xe: Avoid evicting object of the same vm in none fault mode
    - drm/xe: Reject BO eviction if BO is bound to current VM
  * BMG: fix EFAULT handling (LP: #2102657)
    - drm/xe/userptr: fix EFAULT handling
  * HDMI cause display malfunctioning on BMG hardware (LP: #2102378)
    - drm/xe: Remove runtime argument from display s/r functions
    - drm/xe/display: Separate the d3cold and non-d3cold runtime PM handling
    - drm/xe/display: Add missing HPD interrupt enabling during non-d3cold RPM
      resume
    - drm/xe: Fix missing conversion to xe_display_pm_runtime_resume
  * [SRU] Fix Lenovo M70/90 gen6 micmute key and led (LP: #2101811)
    - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
    - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
  * Oracular update: upstream stable patchset 2025-03-27 (LP: #2104873)
    - nfsd: clear acl_access/acl_default after releasing them
    - NFSD: fix hang in nfsd4_shutdown_callback
    - pinctrl: cy8c95x0: Respect IRQ trigger settings from firmware
    - HID: multitouch: Add NULL check in mt_input_configured
    - HID: hid-thrustmaster: fix stack-out-of-bounds read in
      usb_check_int_endpoints()
    - spi: sn-f-ospi: Fix division by zero
    - ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt
    - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu()
    - vrf: use RCU protection in l3mdev_l3_out()
    - vxlan: check vxlan_vnigroup_init() return value
    - LoongArch: Fix idle VS timer enqueue
    - LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
    - arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
    - cgroup: Remove steal time from usage_usec
    - drm/i915/selftests: avoid using uninitialized context
    - gpio: bcm-kona: Fix GPIO lock/unlock for banks above bank 0
    - gpio: bcm-kona: Make sure GPIO bits are unlocked when requesting IRQ
    - gpio: bcm-kona: Add missing newline to dev_err format string
    - drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()
    - xen/swiotlb: relax alignment requirements
    - x86/xen: allow larger contiguous memory regions in PV guests
    - block: cleanup and fix batch completion adding conditions
    - gpiolib: Fix crash on error in gpiochip_get_ngpios()
    - tools: fix annoying "mkdir -p ..." logs when building tools in parallel
    - RDMA/efa: Reset device on probe failure
    - fbdev: omap: use threaded IRQ for LCD DMA
    - soc/tegra: fuse: Update Tegra234 nvmem keepout list
    - media: cxd2841er: fix 64-bit division on gcc-9
    - media: i2c: ds90ub913: Add error handling to ub913_hw_init()
    - media: i2c: ds90ub953: Add error handling for i2c reads/writes
    - media: uvcvideo: Implement dual stream quirk to fix loss of usb packets
    - media: uvcvideo: Add new quirk definition for the Sonix Technology Co. 292a
      camera
    - media: uvcvideo: Add Kurokesu C1 PRO camera
    - media: vidtv: Fix a null-ptr-deref in vidtv_mux_stop_thread
    - PCI/DPC: Quirk PIO log size for Intel Raptor Lake-P
    - PCI: switchtec: Add Microchip PCI100X device IDs
    - scsi: ufs: bsg: Set bsg_queue to NULL after removal
    - rtla/timerlat_hist: Abort event processing on second signal
    - rtla/timerlat_top: Abort event processing on second signal
    - vfio/pci: Enable iowrite64 and ioread64 for vfio pci
    - NFS: Fix potential buffer overflowin nfs_sysfs_link_rpc_client()
    - Grab mm lock before grabbing pt lock
    - selftests: gpio: gpio-sim: Fix missing chip disablements
    - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V
    - x86/mm/tlb: Only trim the mm_cpumask once a second
    - orangefs: fix a oob in orangefs_debug_write
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V
    - batman-adv: fix panic during interface removal
    - batman-adv: Ignore neighbor throughput metrics in error case
    - batman-adv: Drop unmanaged ELP metric worker
    - drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()
    - KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel
    - KVM: nSVM: Enter guest mode before initializing nested NPT MMU
    - perf/x86/intel: Ensure LBRs are disabled when a CPU is starting
    - usb: gadget: f_midi: Fixing wMaxPacketSize exceeded issue during MIDI bind
      retries
    - usb: dwc3: Fix timeout issue during controller enter/exit from halt state
    - usb: roles: set switch registered flag early on
    - usb: gadget: udc: renesas_usb3: Fix compiler warning
    - usb: dwc2: gadget: remove of_node reference upon udc_stop
    - USB: pci-quirks: Fix HCCPARAMS register error for LS7A EHCI
    - usb: core: fix pipe creation for get_bMaxPacketSize0
    - USB: quirks: add USB_QUIRK_NO_LPM quirk for Teclast dist
    - USB: Add USB_QUIRK_NO_LPM quirk for sony xperia xz1 smartphone
    - usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
    - USB: hub: Ignore non-compliant devices with too many configs or interfaces
    - USB: cdc-acm: Fill in Renesas R-Car D3 USB Download mode quirk
    - usb: cdc-acm: Check control transfer buffer size before access
    - usb: cdc-acm: Fix handling of oversized fragments
    - USB: serial: option: add MeiG Smart SLM828
    - USB: serial: option: add Telit Cinterion FN990B compositions
    - USB: serial: option: fix Telit Cinterion FN990A name
    - USB: serial: option: drop MeiG Smart defines
    - can: ctucanfd: handle skb allocation failure
    - can: c_can: fix unbalanced runtime PM disable in error path
    - can: j1939: j1939_sk_send_loop(): fix unable to send messages with data
      length zero
    - can: etas_es58x: fix potential NULL pointer dereference on udev->serial
    - alpha: make stack 16-byte aligned (most cases)
    - wifi: ath12k: fix handling of 6 GHz rules
    - kbuild: userprogs: fix bitsize and target detection on clang
    - efi: Avoid cold plugged memory for placing the kernel
    - cgroup: fix race between fork and cgroup.kill
    - serial: port: Assign ->iotype correctly when ->iobase is set
    - serial: port: Always update ->iotype in __uart_read_properties()
    - serial: 8250: Fix fifo underflow on flush
    - alpha: align stack for page fault and user unaligned trap handlers
    - gpiolib: acpi: Add a quirk for Acer Nitro ANV14
    - gpio: stmpe: Check return value of stmpe_reg_read in
      stmpe_gpio_irq_sync_unlock
    - partitions: mac: fix handling of bogus partition table
    - regulator: qcom_smd: Add l2, l5 sub-node to mp5496 regulator
    - regmap-irq: Add missing kfree()
    - arm64: Handle .ARM.attributes section in linker scripts
    - mmc: mtk-sd: Fix register settings for hs400(es) mode
    - igc: Set buffer type for empty frames in igc_init_empty_frame
    - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw()
    - btrfs: fix hole expansion when writing at an offset beyond EOF
    - clocksource: Use pr_info() for "Checking clocksource synchronization"
      message
    - clocksource: Use migrate_disable() to avoid calling get_random_u32() in
      atomic context
    - ipv4: add RCU protection to ip4_dst_hoplimit()
    - net: add dev_net_rcu() helper
    - ipv4: use RCU protection in ipv4_default_advmss()
    - ipv4: use RCU protection in rt_is_expired()
    - ipv4: use RCU protection in inet_select_addr()
    - net: ipv4: Cache pmtu for all packet paths if multipath enabled
    - ipv4: use RCU protection in __ip_rt_update_pmtu()
    - ipv4: icmp: convert to dev_net_rcu()
    - flow_dissector: use RCU protection to fetch dev_net()
    - ipv6: use RCU protection in ip6_default_advmss()
    - ipv6: icmp: convert to dev_net_rcu()
    - HID: hid-steam: Make sure rumble work is canceled on removal
    - HID: hid-steam: Move hidraw input (un)registering to work
    - ndisc: use RCU protection in ndisc_alloc_skb()
    - neighbour: delete redundant judgment statements
    - neighbour: use RCU protection in __neigh_notify()
    - arp: use RCU protection in arp_xmit()
    - openvswitch: use RCU protection in ovs_vport_cmd_fill_info()
    - ndisc: extend RCU protection in ndisc_send_skb()
    - ipv6: mcast: extend RCU protection in igmp6_send()
    - ipv6: mcast: add RCU protection to mld_newpack()
    - drm/tidss: Fix issue in irq handling causing irq-flood issue
    - drm/tidss: Clear the interrupt status for interrupts being disabled
    - drm/rcar-du: dsi: Fix PHY lock bit check
    - drm/v3d: Stop active perfmon if it is being destroyed
    - netdevsim: print human readable IP address
    - md/md-bitmap: factor behind write counters out from
      bitmap_{start/end}write()
    - md/md-bitmap: remove the last parameter for bimtap_ops->endwrite()
    - md/md-bitmap: move bitmap_{start, end}write to md upper layer
    - HID: hid-steam: Don't use cancel_delayed_work_sync in IRQ context
    - io_uring/kbuf: reallocate buf lists on upgrade
    - x86/i8253: Disable PIT timer 0 when not in use
    - nfsd: validate the nfsd_serv pointer before calling svc_wake_up
    - x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
    - pinctrl: cy8c95x0: Avoid accessing reserved registers
    - pinctrl: cy8c95x0: Enable regmap locking for debug
    - pinctrl: cy8c95x0: Rename PWMSEL to SELPWM
    - HID: winwing: Add NULL check in winwing_init_led()
    - scripts/Makefile.extrawarn: Do not show clang's non-kprintf warnings at W=1
    - pinctrl: pinconf-generic: Print unsigned value if a format is registered
    - net: fib_rules: annotate data-races around rule->[io]ifindex
    - Documentation/networking: fix basic node example document ISO 15765-2
    - idpf: fix handling rsc packet with a single segment
    - idpf: record rx queue in skb for RSC packets
    - idpf: call set_real_num_queues in idpf_open
    - igc: Fix HW RX timestamp when passed by ZC XDP
    - LoongArch: KVM: Fix typo issue about GCFG feature detection
    - net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases
    - net: ethernet: ti: am65_cpsw: fix tx_cleanup for XDP case
    - Bluetooth: btintel_pcie: Fix a potential race condition
    - team: better TEAM_OPTION_TYPE_STRING validation
    - workqueue: Put the pwq after detaching the rescuer from the pool
    - drm/tests: hdmi: Fix WW_MUTEX_SLOWPATH failures
    - gpu: host1x: Fix a use of uninitialized mutex
    - perf/x86/intel: Clean up PEBS-via-PT on hybrid
    - drm/xe/client: bo->client does not need bos_lock
    - io_uring/waitid: don't abuse io_tw_state
    - io_uring/uring_cmd: remove dead req_has_async_data() check
    - drm: Fix DSC BPP increment decoding
    - iommu/amd: Expicitly enable CNTRL.EPHEn bit in resume path
    - firmware: qcom: scm: smc: Handle missing SCM device
    - i3c: mipi-i3c-hci: Add Intel specific quirk to ring resuming
    - i3c: mipi-i3c-hci: Add support for MIPI I3C HCI on PCI bus
    - [Config] updateconfigs for MIPI_I3C_HCI_PCI
    - media: bcm2835-unicam: Disable trigger mode operation
    - serial: 8250_pci: Resolve WCH vendor ID ambiguity
    - serial: 8250_pci: Share WCH IDs with parport_serial driver
    - 8250: microchip: pci1xxxx: Add workaround for RTS bit toggle
    - vfio/nvgrace-gpu: Read dvsec register to determine need for uncached resmem
    - vfio/nvgrace-gpu: Expose the blackwell device PF BAR1 to the VM
    - fs/ntfs3: Unify inode corruption marking with _ntfs_bad_inode()
    - kbuild: suppress stdout from merge_config for silent builds
    - kbuild: Use -fzero-init-padding-bits=all
    - KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
    - perf/x86/intel: Fix ARCH_PERFMON_NUM_COUNTER_LEAF
    - ring-buffer: Unlock resize on mmap error
    - usb: gadget: core: flush gadget workqueue after device removal
    - PCI: Avoid FLR for Mediatek MT7922 WiFi
    - arm64: rust: clean Rust 1.85.0 warning using softfloat target
    - alpha: replace hardcoded stack offsets with autogenerated ones
    - s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn()
    - s390/pci: Fix handling of isolated VFs
    - iommu: Fix potential memory leak in iopf_queue_remove_device()
    - include: net: add static inline dst_dev_overhead() to dst.h
    - net: ipv6: ioam6_iptunnel: mitigate 2-realloc issue
    - net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
    - net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
    - net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels
    - scsi: ufs: core: Introduce ufshcd_has_pending_tasks()
    - scsi: ufs: core: Prepare to introduce a new clock_gating lock
    - scsi: ufs: core: Introduce a new clock_gating lock
    - scsi: ufs: Fix toggling of clk_gating.state when clock gating is not allowed
    - rust: kbuild: add -fzero-init-padding-bits to bindgen_skip_cflags
    - cpufreq/amd-pstate: Call cppc_set_epp_perf in the reenable function
    - cpufreq/amd-pstate: Align offline flow of shared memory and MSR based
      systems
    - cpufreq/amd-pstate: Refactor amd_pstate_epp_reenable() and
      amd_pstate_epp_offline()
    - cpufreq/amd-pstate: Remove the cppc_state check in offline/online functions
    - cpufreq/amd-pstate: Merge amd_pstate_epp_cpu_offline() and
      amd_pstate_epp_offline()
    - ipv4: use RCU protection in ip_dst_mtu_maybe_forward()
    - drm/tidss: Fix race condition while handling interrupt registers
    - drm/msm/gem: prevent integer overflow in msm_ioctl_gem_submit()
    - drm/msm/dpu: fix x1e80100 intf_6 underrun/vsync interrupt
    - drm/msm/dpu1: don't choke on disabling the writeback connector
    - drm/xe/tracing: Fix a potential TP_printk UAF
    - drm: renesas: rz-du: Increase supported resolutions
    - Revert "UBUNTU: SAUCE: selftest: netfilter: fix null IP field in
      kci_test_ipsec_offload"
    - selftests: rtnetlink: update netdevsim ipsec output format
    - wifi: rtw89: pci: disable PCIE wake bit when PCIE deinit
    - net: ipv6: fix dst refleaks in rpl, seg6 and ioam6 lwtunnels
    - scsi: ufs: core: Ensure clk_gating.lock is used only after initialization
    - Upstream stable to v6.6.79, v6.12.16
  * Oracular update: upstream stable patchset 2025-03-25 (LP: #2104188)
    - xfs: don't lose solo dquot update transactions
    - Upstream stable to v6.6.78, v6.12.15
  * Oracular update: upstream stable patchset 2025-03-24 (LP: #2104091)
    - irqchip/lan966x-oic: Make CONFIG_LAN966X_OIC depend on
      CONFIG_MCHP_LAN966X_PCI
    - [Config] updateconfigs for LAN966X_OIC
    - btrfs: fix assertion failure when splitting ordered extent after transaction
      abort
    - btrfs: do not output error message if a qgroup has been already cleaned up
    - btrfs: fix use-after-free when attempting to join an aborted transaction
    - arm64/mm: Ensure adequate HUGE_MAX_HSTATE
    - exec: fix up /proc/pid/comm in the execveat(AT_EMPTY_PATH) case
    - s390/stackleak: Use exrl instead of ex in __stackleak_poison()
    - btrfs: fix data race when accessing the inode's disk_i_size at
      btrfs_drop_extents()
    - btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper error handling
    - sched: Don't try to catch up excess steal time.
    - x86: Convert unreachable() to BUG()
    - locking/ww_mutex/test: Use swap() macro
    - lockdep: Fix upper limit for LOCKDEP_*_BITS configs
    - x86/amd_nb: Restrict init function to AMD-based systems
    - drm/virtio: New fence for every plane update
    - drm: Add panel backlight quirks
    - drm: panel-backlight-quirks: Add Framework 13 matte panel
    - drm: panel-backlight-quirks: Add Framework 13 glossy and 2.8k panels
    - nvkm/gsp: correctly advance the read pointer of GSP message queue
    - nvkm: correctly calculate the available space of the GSP cmdq buffer
    - drm/tests: hdmi: handle empty modes in find_preferred_mode()
    - drm/tests: hdmi: return meaningful value from set_connector_edid()
    - drm/amd/display: Populate chroma prefetch parameters, DET buffer fix
    - drm/amd/display: Overwriting dualDPP UBF values before usage
    - printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
    - drm/connector: add mutex to protect ELD from concurrent access
    - drm/bridge: anx7625: use eld_mutex to protect access to connector->eld
    - drm/bridge: ite-it66121: use eld_mutex to protect access to connector->eld
    - drm/amd/display: use eld_mutex to protect access to connector->eld
    - drm/exynos: hdmi: use eld_mutex to protect access to connector->eld
    - drm/radeon: use eld_mutex to protect access to connector->eld
    - drm/sti: hdmi: use eld_mutex to protect access to connector->eld
    - drm/vc4: hdmi: use eld_mutex to protect access to connector->eld
    - drm/amd/display: Fix Mode Cutoff in DSC Passthrough to DP2.1 Monitor
    - drm/amdgpu: Don't enable sdma 4.4.5 CTXEMPTY interrupt
    - drm/amdkfd: Queue interrupt work to different CPU
    - drm/bridge: it6505: Change definition MAX_HDCP_DOWN_STREAM_COUNT
    - drm/bridge: it6505: fix HDCP Bstatus check
    - drm/bridge: it6505: fix HDCP encryption when R0 ready
    - drm/bridge: it6505: fix HDCP CTS compare V matching
    - drm/bridge: it6505: fix HDCP CTS KSV list wait timer
    - safesetid: check size of policy writes
    - drm/amd/display: Increase sanitizer frame larger than limit when compile
      testing with clang
    - drm/amd/display: Limit Scaling Ratio on DCN3.01
    - ring-buffer: Make reading page consistent with the code logic
    - wifi: rtw89: add crystal_cap check to avoid setting as overflow value
    - tun: fix group permission check
    - mmc: core: Respect quirk_max_rate for non-UHS SDIO card
    - mmc: sdhci-esdhc-imx: enable 'SDHCI_QUIRK_NO_LED' quirk for S32G
    - wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy()
    - tomoyo: don't emit warning in tomoyo_write_control()
    - mfd: lpc_ich: Add another Gemini Lake ISA bridge PCI device-id
    - wifi: rtw88: add __packed attribute to efuse layout struct
    - clk: qcom: Make GCC_8150 depend on QCOM_GDSC
    - HID: multitouch: Add quirk for Hantick 5288 touchpad
    - HID: Wacom: Add PCI Wacom device support
    - net/mlx5: use do_aux_work for PHC overflow checks
    - wifi: brcmfmac: Check the return value of of_property_read_string_index()
    - wifi: iwlwifi: pcie: Add support for new device ids
    - wifi: iwlwifi: avoid memory leak
    - i2c: Force ELAN06FA touchpad I2C bus freq to 100KHz
    - APEI: GHES: Have GHES honor the panic= setting
    - Bluetooth: btusb: Add new VID/PID 13d3/3610 for MT7922
    - Bluetooth: btusb: Add new VID/PID 13d3/3628 for MT7925
    - Bluetooth: MGMT: Fix slab-use-after-free Read in
      mgmt_remove_adv_monitor_sync
    - net: wwan: iosm: Fix hibernation by re-binding the driver around it
    - HID: hid-asus: Disable OOBE mode on the ProArt P16
    - mmc: sdhci-msm: Correctly set the load for the regulator
    - octeon_ep: update tx/rx stats locally for persistence
    - octeon_ep_vf: update tx/rx stats locally for persistence
    - tipc: re-order conditions in tipc_crypto_key_rcv()
    - selftests/net/ipsec: Fix Null pointer dereference in rtattr_pack()
    - ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params
    - x86/kexec: Allocate PGD for x86_64 transition page tables separately
    - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7
    - iommu/arm-smmu-qcom: add sdm670 adreno iommu compatible
    - iommu/arm-smmu-v3: Clean up more on probe failure
    - platform/x86: int3472: Check for adev == NULL
    - platform/x86: acer-wmi: Add support for Acer PH14-51
    - ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback
    - platform/x86: acer-wmi: Add support for Acer Predator PH16-72
    - ASoC: amd: Add ACPI dependency to fix build error
    - Input: allocate keycode for phone linking
    - platform/x86: acer-wmi: add support for Acer Nitro AN515-58
    - platform/x86: acer-wmi: Ignore AC events
    - xfs: report realtime block quota limits on realtime directories
    - xfs: don't over-report free space or inodes in statvfs
    - tty: xilinx_uartps: split sysrq handling
    - tty: Permit some TIOCL_SETSEL modes without CAP_SYS_ADMIN
    - platform/x86: serdev_helpers: Check for serial_ctrl_uid == NULL
    - nvme: handle connectivity loss in nvme_set_queue_count
    - firmware: iscsi_ibft: fix ISCSI_IBFT Kconfig entry
    - gpu: drm_dp_cec: fix broken CEC adapter properties check
    - ice: put Rx buffers after being done with current frame
    - ice: gather page_count()'s of each frag right before XDP prog call
    - ice: stop storing XDP verdict within ice_rx_buf
    - nvme-fc: use ctrl state getter
    - net: bcmgenet: Correct overlaying of PHY and MAC Wake-on-LAN
    - ice: Add check for devm_kzalloc()
    - vmxnet3: Fix tx queue race condition with XDP
    - tg3: Disable tg3 PCIe AER on system reboot
    - udp: gso: do not drop small packets when PMTU reduces
    - drm/i915/dp: fix the Adaptive sync Operation mode for SDP
    - rxrpc: Fix the rxrpc_connection attend queue handling
    - gpio: pca953x: Improve interrupt support
    - net: atlantic: fix warning during hot unplug
    - net: rose: lock the socket in rose_bind()
    - gpio: sim: lock hog configfs items if present
    - x86/xen: fix xen_hypercall_hvm() to not clobber %rbx
    - x86/xen: add FRAME_END to xen_hypercall_hvm()
    - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read()
    - tun: revert fix group permission check
    - net: sched: Fix truncation of offloaded action statistics
    - rxrpc: Fix call state set to not include the SERVER_SECURING state
    - cpufreq: fix using cpufreq-dt as module
    - cpufreq: s3c64xx: Fix compilation warning
    - leds: lp8860: Write full EEPROM, not only half of it
    - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx
    - drm/modeset: Handle tiled displays in pan_display_atomic.
    - drm/client: Handle tiled displays better
    - smb: client: fix order of arguments of tracepoints
    - smb: client: change lease epoch type from unsigned int to __u16
    - md: reintroduce md-linear
    - [Config] updateconfigs for reintroducing MD_LINEAR
    - s390/futex: Fix FUTEX_OP_ANDN implementation
    - arm64: Filter out SVE hwcaps when FEAT_SVE isn't implemented
    - m68k: vga: Fix I/O defines
    - fs/proc: do_task_stat: Fix ESP not readable during coredump
    - binfmt_flat: Fix integer overflow bug on 32 bit systems
    - accel/ivpu: Fix Qemu crash when running in passthrough
    - arm64/kvm: Configure HYP TCR.PS/DS based on host stage1
    - arm64/mm: Override PARange for !LPA2 and use it consistently
    - arm64/sme: Move storage of reg_smidr to __cpuinfo_store_cpu()
    - arm64/mm: Reduce PA space to 48 bits when LPA2 is not enabled
    - KVM: arm64: timer: Always evaluate the need for a soft timer
    - drm/rockchip: cdn-dp: Use drm_connector_helper_hpd_irq_event()
    - arm64: dts: rockchip: increase gmac rx_delay on rk3399-puma
    - remoteproc: omap: Handle ARM dma_iommu_mapping
    - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu()
    - kvm: defer huge page recovery vhost task to later
    - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages
    - ksmbd: fix integer overflows on 32 bit systems
    - drm/amd/display: Optimize cursor position updates
    - drm/amd/pm: Mark MM activity as unsupported
    - drm/amd/amdgpu: change the config of cgcg on gfx12
    - drm/amdkfd: only flush the validate MES contex
    - drm/i915/guc: Debug print LRC state entries only if the context is pinned
    - drm/i915: Fix page cleanup on DMA remap failure
    - drm/komeda: Add check for komeda_get_layer_fourcc_list()
    - drm/xe/devcoredump: Move exec queue snapshot to Contexts section
    - drm/i915/dp: Iterate DSC BPP from high to low on all platforms
    - drm/i915: Drop 64bpp YUV formats from ICL+ SDR planes
    - drm/amdgpu: add a BO metadata flag to disable write compression for Vulkan
    - drm/amd/display: Fix seamless boot sequence
    - Bluetooth: L2CAP: accept zero as a special value for MTU auto-selection
    - KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y
    - clk: sunxi-ng: a100: enable MMC clock reparenting
    - clk: mmp2: call pm_genpd_init() only after genpd.name is set
    - media: i2c: ds90ub960: Fix UB9702 refclk register access
    - clk: clk-loongson2: Fix the number count of clk provider
    - clk: qcom: clk-alpha-pll: fix alpha mode configuration
    - clk: qcom: gcc-sm8550: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sm8650: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sm6350: Add missing parent_map for two clocks
    - clk: qcom: dispcc-sm6350: Add missing parent_map for a clock
    - clk: qcom: gcc-mdm9607: Fix cmd_rcgr offset for blsp1_uart6 rcg
    - clk: qcom: clk-rpmh: prevent integer overflow in recalc_rate
    - clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
    - clk: mediatek: mt2701-aud: fix conversion to mtk_clk_simple_probe
    - clk: mediatek: mt2701-bdp: add missing dummy clk
    - clk: mediatek: mt2701-img: add missing dummy clk
    - clk: mediatek: mt2701-mm: add missing dummy clk
    - blk-cgroup: Fix class @block_class's subsystem refcount leakage
    - efi: libstub: Use '-std=gnu11' to fix build with GCC 15
    - perf bench: Fix undefined behavior in cmpworker()
    - scsi: ufs: core: Fix the HIGH/LOW_TEMP Bit Definitions
    - of: Correct child specifier used as input of the 2nd nexus node
    - of: Fix of_find_node_opts_by_path() handling of alias+path+options
    - Input: bbnsm_pwrkey - add remove hook
    - HID: hid-sensor-hub: don't use stale platform-data on remove
    - ring-buffer: Do not allow events in NMI with generic atomic64 cmpxchg()
    - atomic64: Use arch_spin_locks instead of raw_spin_locks
    - wifi: rtlwifi: rtl8821ae: Fix media status report
    - wifi: brcmfmac: fix NULL pointer dereference in brcmf_txfinalize()
    - wifi: mt76: mt7921u: Add VID/PID for TP-Link TXE50UH
    - wifi: rtw88: sdio: Fix disconnection after beacon loss
    - wifi: mt76: mt7915: add module param to select 5 GHz or 6 GHz on MT7916
    - wifi: rtw88: 8703b: Fix RX/TX issues
    - usb: gadget: f_tcm: Translate error to sense
    - usb: gadget: f_tcm: Decrement command ref count on cleanup
    - usb: gadget: f_tcm: ep_autoconfig with fullspeed endpoint
    - usb: gadget: f_tcm: Don't prepare BOT write request twice
    - usbnet: ipheth: fix possible overflow in DPE length check
    - usbnet: ipheth: use static NDP16 location in URB
    - usbnet: ipheth: check that DPE points past NCM header
    - usbnet: ipheth: refactor NCM datagram loop
    - usbnet: ipheth: break up NCM header size computation
    - usbnet: ipheth: fix DPE OoB read
    - usbnet: ipheth: document scope of NCM implementation
    - arm64: dts: qcom: x1e80100-asus-vivobook-s15: Fix USB QMP PHY supplies
    - arm64: dts: qcom: x1e80100-qcp: Fix USB QMP PHY supplies
    - arm64: dts: qcom: x1e80100-crd: Fix USB QMP PHY supplies
    - arm64: dts: qcom: x1e80100-lenovo-yoga-slim7x: Fix USB QMP PHY supplies
    - arm64: dts: qcom: x1e80100: Fix usb_2 controller interrupts
    - ASoC: acp: Support microphone from Lenovo Go S
    - soc: qcom: socinfo: Avoid out of bounds read of serial number
    - serial: sh-sci: Drop __initdata macro for port_cfg
    - serial: sh-sci: Do not probe the serial port if its slot in sci_ports[] is
      in use
    - MIPS: Loongson64: remove ROM Size unit in boardinfo
    - LoongArch: Extend the maximum number of watchpoints
    - powerpc/pseries/eeh: Fix get PE state translation
    - dm-crypt: don't update io->sector after kcryptd_crypt_write_io_submit()
    - dm-crypt: track tag_offset in convert_context
    - mips/math-emu: fix emulation of the prefx instruction
    - MIPS: pci-legacy: Override pci_address_to_pio
    - Revert "MIPS: csrc-r4k: Select HAVE_UNSTABLE_SCHED_CLOCK if SMP && 64BIT"
    - block: don't revert iter for -EIOCBQUEUED
    - firmware: qcom: scm: Fix missing read barrier in qcom_scm_is_available()
    - firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool()
    - ALSA: hda/realtek: Enable headset mic on Positivo C6400
    - ALSA: hda: Fix headset detection failure due to unstable sort
    - arm64: tegra: Fix Tegra234 PCIe interrupt-map
    - s390/pci: Fix SR-IOV for PFs initially in standby
    - PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1
    - PCI: endpoint: Finish virtual EP removal in pci_epf_remove_vepf()
    - PCI: dwc: ep: Write BAR_MASK before iATU registers in pci_epc_set_bar()
    - PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
    - nvme-pci: Add TUXEDO InfinityFlex to Samsung sleep quirk
    - nvme-pci: Add TUXEDO IBP Gen9 to Samsung sleep quirk
    - KVM: x86/mmu: Ensure NX huge page recovery thread is alive before waking
    - scsi: st: Don't set pos_unknown just after device recognition
    - scsi: qla2xxx: Move FCE Trace buffer allocation to user control
    - scsi: ufs: qcom: Fix crypto key eviction
    - scsi: ufs: core: Fix use-after free in init error and remove paths
    - scsi: storvsc: Set correct data length for sending SCSI command without
      payload
    - scsi: core: Do not retry I/Os during depopulation
    - kbuild: Move -Wenum-enum-conversion to W=2
    - rust: init: use explicit ABI to clean warning in future compilers
    - x86/boot: Use '-std=gnu11' to fix build with GCC 15
    - ubi: Add a check for ubi_num
    - ARM: dts: dra7: Add bus_dma_limit for l4 cfg bus
    - ARM: dts: ti/omap: gta04: fix pm issues caused by spi module
    - arm64: dts: qcom: x1e80100: Fix ADSP memory base and length
    - arm64: dts: qcom: x1e80100: Fix CDSP memory length
    - arm64: dts: qcom: sm6115: Fix MPSS memory length
    - arm64: dts: qcom: sm6115: Fix CDSP memory length
    - arm64: dts: qcom: sm6115: Fix ADSP memory base and length
    - arm64: dts: qcom: sm6350: Fix ADSP memory length
    - arm64: dts: qcom: sm6350: Fix MPSS memory length
    - arm64: dts: qcom: sm6350: Fix uart1 interconnect path
    - arm64: dts: qcom: sm6375: Fix ADSP memory length
    - arm64: dts: qcom: sm6375: Fix CDSP memory base and length
    - arm64: dts: qcom: sm6375: Fix MPSS memory base and length
    - arm64: dts: qcom: sm8350: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8350: Fix CDSP memory base and length
    - arm64: dts: qcom: sm8350: Fix MPSS memory length
    - arm64: dts: qcom: sm8450: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8450: Fix CDSP memory length
    - arm64: dts: qcom: sm8450: Fix MPSS memory length
    - arm64: dts: qcom: sm8550: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8550: Fix CDSP memory length
    - arm64: dts: qcom: sm8550: Fix MPSS memory length
    - arm64: dts: qcom: sm8650: Fix ADSP memory base and length
    - arm64: dts: qcom: sm8650: Fix CDSP memory length
    - arm64: dts: qcom: sm8650: Fix MPSS memory length
    - arm64: dts: qcom: sm8550: correct MDSS interconnects
    - arm64: dts: qcom: sm8650: correct MDSS interconnects
    - crypto: qce - fix priority to be less than ARMv8 CE
    - arm64: tegra: Fix typo in Tegra234 dce-fabric compatible
    - arm64: tegra: Disable Tegra234 sce-fabric node
    - parisc: Temporarily disable jump label support
    - pwm: microchip-core: fix incorrect comparison with max period
    - xfs: don't call remap_verify_area with sb write protection held
    - xfs: Propagate errors from xfs_reflink_cancel_cow_range in
      xfs_dax_write_iomap_end
    - xfs: Add error handling for xfs_reflink_cancel_cow_range
    - accel/ivpu: Clear runtime_error after pm_runtime_resume_and_get() fails
    - ACPI: PRM: Remove unnecessary strict handler address checks
    - tpm: Change to kvalloc() in eventlog/acpi.c
    - rv: Reset per-task monitors also for idle tasks
    - hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
    - iommufd: Fix struct iommu_hwpt_pgfault init and padding
    - kfence: skip __GFP_THISNODE allocations on NUMA systems
    - media: ccs: Clean up parsed CCS static data on parse failure
    - mm/hugetlb: fix avoid_reserve to allow taking folio from subpool
    - iio: light: as73211: fix channel handling in only-color triggered buffer
    - iommufd/fault: Destroy response and mutex in iommufd_fault_destroy()
    - iommufd/fault: Use a separate spinlock to protect fault->deliver list
    - soc: samsung: exynos-pmu: Fix uninitialized ret in tensor_set_bits_atomic()
    - soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
    - soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
    - soc: qcom: smem_state: fix missing of_node_put in error path
    - media: mmp: Bring back registration of the device
    - media: mc: fix endpoint iteration
    - media: nuvoton: Fix an error check in npcm_video_ece_init()
    - media: imx296: Add standby delay during probe
    - media: intel/ipu6: remove cpu latency qos request on error
    - media: ov5640: fix get_light_freq on auto
    - media: stm32: dcmipp: correct dma_set_mask_and_coherent mask value
    - media: ccs: Fix CCS static data parsing for large block sizes
    - media: ccs: Fix cleanup order in ccs_probe()
    - media: i2c: ds90ub9x3: Fix extra fwnode_handle_put()
    - media: i2c: ds90ub960: Fix use of non-existing registers on UB9702
    - media: i2c: ds90ub960: Fix UB9702 VC map
    - media: i2c: ds90ub960: Fix logging SP & EQ status only for UB9702
    - media: uvcvideo: Fix crash during unbind if gpio unit is in use
    - media: uvcvideo: Fix event flags in uvc_ctrl_send_events
    - media: uvcvideo: Support partial control reads
    - media: uvcvideo: Only save async fh if success
    - media: uvcvideo: Remove redundant NULL assignment
    - media: uvcvideo: Remove dangling pointers
    - mm: kmemleak: fix upper boundary check for physical address objects
    - mm: gup: fix infinite loop within __get_longterm_locked
    - mm/hugetlb: fix hugepage allocation for interleaved memory nodes
    - mm/compaction: fix UBSAN shift-out-of-bounds warning
    - ata: libata-sff: Ensure that we cannot write outside the allocated buffer
    - irqchip/irq-mvebu-icu: Fix access to msi_data from irq_domain::host_data
    - crypto: qce - fix goto jump in error path
    - crypto: qce - unregister previously registered algos in error path
    - ceph: fix memory leak in ceph_mds_auth_match()
    - nvmem: qcom-spmi-sdam: Set size in struct nvmem_config
    - nvmem: core: improve range check for nvmem_cell_write()
    - nvmem: imx-ocotp-ele: simplify read beyond device check
    - nvmem: imx-ocotp-ele: fix MAC address byte order
    - nvmem: imx-ocotp-ele: fix reading from non zero offset
    - nvmem: imx-ocotp-ele: set word length to 1
    - io_uring: fix multishots with selected buffers
    - io_uring/net: don't retry connect operation on EPOLLERR
    - selftests: mptcp: connect: -f: no reconnect
    - pnfs/flexfiles: retry getting layout segment for reads
    - ocfs2: fix incorrect CPU endianness conversion causing mount failure
    - ocfs2: handle a symlink read error correctly
    - nilfs2: fix possible int overflows in nilfs_fiemap()
    - nfs: Make NFS_FSCACHE select NETFS_SUPPORT instead of depending on it
    - mailbox: tegra-hsp: Clear mailbox before using message
    - mailbox: zynqmp: Remove invalid __percpu annotation in zynqmp_ipi_probe()
    - NFC: nci: Add bounds checking in nci_hci_create_pipe()
    - fgraph: Fix set_graph_notrace with setting TRACE_GRAPH_NOTRACE_BIT
    - irqchip/apple-aic: Only handle PMC interrupt as FIQ when configured so
    - mtd: onenand: Fix uninitialized retlen in do_otp_read()
    - misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors
    - misc: fastrpc: Deregister device nodes properly in error scenarios
    - misc: fastrpc: Fix registered buffer page address
    - misc: fastrpc: Fix copy buffer page size
    - net/ncsi: wait for the last response to Deselect Package before configuring
      channel
    - net: phy: c45-tjaxx: add delay between MDIO write and read in soft_reset
    - maple_tree: simplify split calculation
    - scripts/gdb: fix aarch64 userspace detection in get_current_task
    - tracing/osnoise: Fix resetting of tracepoints
    - rtla/osnoise: Distinguish missing workload option
    - rtla/timerlat_hist: Set OSNOISE_WORKLOAD for kernel threads
    - rtla/timerlat_top: Set OSNOISE_WORKLOAD for kernel threads
    - rtla: Add trace_instance_stop
    - rtla/timerlat_hist: Stop timerlat tracer on signal
    - rtla/timerlat_top: Stop timerlat tracer on signal
    - pinctrl: samsung: fix fwnode refcount cleanup if platform_get_irq_optional()
      fails
    - pinctrl: renesas: rzg2l: Fix PFC_MASK for RZ/V2H and RZ/G3E
    - ptp: Ensure info->enable callback is always set
    - RDMA/mlx5: Fix a race for an ODP MR which leads to CQE with error
    - rtc: zynqmp: Fix optional clock name property
    - s390/fpu: Add fpc exception handler / remove fixup section again
    - MIPS: ftrace: Declare ftrace_get_parent_ra_addr() as static
    - xfs: avoid nested calls to __xfs_trans_commit
    - xfs: don't lose solo superblock counter update transactions
    - xfs: separate dquot buffer reads from xfs_dqflush
    - xfs: clean up log item accesses in xfs_qm_dqflush{,_done}
    - xfs: attach dquot buffer to dquot log item buffer
    - xfs: convert quotacheck to attach dquot buffers
    - xfs: release the dquot buf outside of qli_lock
    - xfs: lock dquot buffer before detaching dquot from b_li_list
    - spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
    - spi: atmel-qspi: Memory barriers after memory-mapped I/O
    - mptcp: prevent excessive coalescing on receive
    - x86/mm: Convert unreachable() to BUG()
    - md/md-linear: Fix a NULL vs IS_ERR() bug in linear_add()
    - md: Fix linear_set_limits()
    - Revert "drm/amd/display: Fix green screen issue after suspend"
    - fs: prepend statmount.mnt_opts string with security_sb_mnt_opts()
    - fs: fix adding security options to statmount.mnt_opt
    - statmount: let unset strings be empty
    - arm64: dts: rockchip: add reset-names for combphy on rk3568
    - ocfs2: check dir i_size in ocfs2_find_entry
    - Upstream stable to v6.6.77, v6.12.14
  * Oracular update: upstream stable patchset 2025-03-21 (LP: #2103829)
    - powerpc/book3s64/hugetlb: Fix disabling hugetlb when fadump is active
    - dlm: fix srcu_read_lock() return type to int
    - afs: Fix EEXIST error returned from afs_rmdir() to be ENOTEMPTY
    - afs: Fix directory format encoding struct
    - afs: Fix cleanup of immediately failed async calls
    - fs: fix proc_handler for sysctl_nr_open
    - block: retry call probe after request_module in blk_request_module
    - nbd: don't allow reconnect after disconnect
    - pstore/blk: trivial typo fixes
    - nvme: Add error check for xa_store in nvme_get_effects_log
    - selftests/powerpc: Fix argument order to timer_sub()
    - nvme: Add error path for xa_store in nvme_init_effects
    - partitions: ldm: remove the initial kernel-doc notation
    - select: Fix unbalanced user_access_end()
    - nvme: fix bogus kzalloc() return check in nvme_init_effects_log()
    - afs: Fix the fallback handling for the YFS.RemoveFile2 RPC call
    - perf/core: Save raw sample data conditionally based on sample type
    - sched/fair: Fix value reported by hot tasks pulled in /proc/schedstat
    - x86/cpu: Enable SD_ASYM_PACKING for PKG domain on AMD
    - x86/topology: Use x86_sched_itmt_flags for PKG domain unconditionally
    - drm/msm/dp: set safe_to_exit_level before printing it
    - drm/etnaviv: Fix page property being used for non writecombine buffers
    - HID: core: Fix assumption that Resolution Multipliers must be in Logical
      Collections
    - drm/amd/pm: Fix an error handling path in
      vega10_enable_se_edc_force_stall_config()
    - drm/amdgpu: Fix potential NULL pointer dereference in
      atomctrl_get_smc_sclk_range_table
    - drm/rockchip: vop2: Fix cluster windows alpha ctrl regsiters offset
    - drm/rockchip: vop2: Fix the mixer alpha setup for layer 0
    - drm/rockchip: vop2: Fix the windows switch between different layers
    - drm/rockchip: vop2: Check linear format for Cluster windows on rk3566/8
    - drm/rockchip: vop2: include rockchip_drm_drv.h
    - drm/amdgpu/vcn: reset fw_shared under SRIOV
    - OPP: add index check to assert to avoid buffer overflow in _read_freq()
    - OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8150
    - drm/msm/dpu: link DSPP_2/_3 blocks on SC8180X
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8250
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8350
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8550
    - drm/msm: Check return value of of_dma_configure()
    - drm/bridge: it6505: Change definition of AUX_FIFO_MAX_SIZE
    - drm/amdgpu: tear down ttm range manager for doorbell in amdgpu_ttm_fini()
    - genirq: Make handle_enforce_irqctx() unconditionally available
    - ipmi: ipmb: Add check devm_kasprintf() returned value
    - wifi: ath11k: Fix unexpected return buffer manager error for WCN6750/WCN6855
    - wifi: rtlwifi: do not complete firmware loading needlessly
    - wifi: rtlwifi: rtl8192se: rise completion of firmware loading as last step
    - wifi: rtlwifi: wait for firmware loading before releasing memory
    - wifi: rtlwifi: fix init_sw_vars leak when probe fails
    - wifi: rtlwifi: usb: fix workqueue leak when probe fails
    - wifi: wcn36xx: fix channel survey memory allocation size
    - net_sched: sch_sfq: handle bigger packets
    - net_sched: sch_sfq: don't allow 1 packet limit
    - spi: zynq-qspi: Add check for clk_enable()
    - rxrpc: Fix handling of received connection abort
    - dt-bindings: mmc: controller: clarify the address-cells description
    - clk: fix an OF node reference leak in of_clk_get_parent_name()
    - dt-bindings: leds: class-multicolor: Fix path to color definitions
    - wifi: rtlwifi: remove unused check_buddy_priv
    - wifi: rtlwifi: destroy workqueue at rtl_deinit_core
    - wifi: rtlwifi: fix memory leaks and invalid access at probe error path
    - wifi: rtlwifi: pci: wait for firmware loading before releasing memory
    - HID: multitouch: fix support for Goodix PID 0x01e9
    - regulator: dt-bindings: mt6315: Drop regulator-compatible property
    - wifi: brcmfmac: add missing header include for brcmf_dbg
    - ACPI: fan: cleanup resources in the error path of .probe()
    - cpupower: fix TSC MHz calculation
    - dt-bindings: mfd: bd71815: Fix rsense and typos
    - leds: netxbig: Fix an OF node reference leak in netxbig_leds_get_of_pdata()
    - inetpeer: remove create argument of inet_getpeer_v[46]()
    - inetpeer: remove create argument of inet_getpeer()
    - inetpeer: update inetpeer timestamp in inet_getpeer()
    - inetpeer: do not get a refcount in inet_getpeer()
    - pwm: stm32-lp: Add check for clk_enable()
    - cpufreq: schedutil: Fix superfluous updates caused by need_freq_update
    - gpio: pca953x: log an error when failing to get the reset GPIO
    - cpufreq: qcom: Fix qcom_cpufreq_hw_recalc_rate() to query LUT if LMh IRQ is
      not available
    - cpufreq: qcom: Implement clk_ops::determine_rate() for qcom_cpufreq* clocks
    - clk: imx8mp: Fix clkout1/2 support
    - dt-bindings: clock: sunxi: Export PLL_VIDEO_2X and PLL_MIPI
    - clk: sunxi-ng: a64: drop redundant CLK_PLL_VIDEO0_2X and CLK_PLL_MIPI
    - clk: sunxi-ng: a64: stop force-selecting PLL-MIPI as TCON0 parent
    - regulator: of: Implement the unwind path of of_regulator_match()
    - ax25: rcu protect dev->ax25_ptr
    - OPP: OF: Fix an OF node leak in _opp_add_static_v2()
    - ipmi: ssif_bmc: Fix new request loss when bmc ready for a response
    - wifi: ath12k: fix tx power, max reg power update to firmware
    - clk: qcom: gcc-sdm845: Do not use shared clk_ops for QUPs
    - HID: hid-thrustmaster: Fix warning in thrustmaster_probe by adding endpoint
      check
    - HID: fix generic desktop D-Pad controls
    - leds: cht-wcove: Use devm_led_classdev_register() to avoid memory leak
    - mfd: syscon: Use scoped variables with memory allocators to simplify error
      paths
    - mfd: syscon: Fix race in device_node_get_regmap()
    - samples/landlock: Fix possible NULL dereference in parse_path()
    - wifi: wlcore: fix unbalanced pm_runtime calls
    - wifi: mt76: mt7915: Fix mesh scan on MT7916 DBDC
    - wifi: mac80211: prohibit deactivating all links
    - wifi: mac80211: fix tid removal during mesh forwarding
    - wifi: mac80211: Fix common size calculation for ML element
    - wifi: mac80211: don't flush non-uploaded STAs
    - clk: ralink: mtmips: remove duplicated 'xtal' clock for Ralink SoC RT3883
    - net/smc: fix data error when recvmsg with MSG_PEEK flag
    - landlock: Handle weird files
    - wifi: mt76: mt76u_vendor_request: Do not print error messages when -EPROTO
    - wifi: mt76: mt7921: fix using incorrect group cipher after disconnection.
    - wifi: mt76: mt7915: fix overflows seen when writing limit attributes
    - wifi: mt76: mt7996: fix rx filter setting for bfee functionality
    - wifi: mt76: mt7915: firmware restart on devices with a second pcie link
    - wifi: mt76: connac: move mt7615_mcu_del_wtbl_all to connac
    - wifi: mt76: mt7915: improve hardware restart reliability
    - wifi: mt76: mt7915: fix omac index assignment after hardware reset
    - wifi: mt76: mt7915: fix register mapping
    - wifi: mt76: mt7996: fix register mapping
    - wifi: mt76: mt7996: add max mpdu len capability
    - wifi: mt76: mt7996: fix the capability of reception of EHT MU PPDU
    - wifi: mt76: mt7996: fix HE Phy capability
    - wifi: mt76: mt7996: fix incorrect indexing of MIB FW event
    - wifi: mt76: mt7996: fix ldpc setting
    - cpufreq: ACPI: Fix max-frequency computation
    - selftests: timers: clocksource-switch: Adapt progress to kselftest framework
    - selftests: harness: fix printing of mismatch values in __EXPECT()
    - wifi: cfg80211: adjust allocation of colocated AP data
    - inet: ipmr: fix data-races
    - clk: analogbits: Fix incorrect calculation of vco rate delta
    - pwm: stm32: Add check for clk_enable()
    - selftests/landlock: Fix error message
    - net: let net.core.dev_weight always be non-zero
    - net/mlxfw: Drop hard coded max FW flash image size
    - octeon_ep: remove firmware stats fetch in ndo_get_stats64
    - netfilter: nf_tables: fix set size with rbtree backend
    - netfilter: nft_flow_offload: update tcp state flags under lock
    - net: ethernet: ti: am65-cpsw: fix freeing IRQ in
      am65_cpsw_nuss_remove_tx_chns()
    - tcp_cubic: fix incorrect HyStart round start detection
    - net/rose: prevent integer overflows in rose_setsockopt()
    - libbpf: don't adjust USDT semaphore address if .stapsdt.base addr is missing
    - tools/testing/selftests/bpf/test_tc_tunnel.sh: Fix wait for server bind
    - libbpf: Fix segfault due to libelf functions not setting errno
    - ASoC: sun4i-spdif: Add clock multiplier settings
    - selftests/bpf: Fix fill_link_info selftest on powerpc
    - crypto: caam - use JobR's space to access page 0 regs
    - perf header: Fix one memory leakage in process_bpf_btf()
    - perf header: Fix one memory leakage in process_bpf_prog_info()
    - perf bpf: Fix two memory leakages when calling
      perf_env__insert_bpf_prog_info()
    - ASoC: renesas: rz-ssi: Use only the proper amount of dividers
    - perf expr: Initialize is_test value in expr__ctx_new()
    - ktest.pl: Remove unused declarations in run_bisect_test function
    - bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT
    - crypto: hisilicon/sec2 - fix for aead icv error
    - crypto: hisilicon/sec2 - fix for aead invalid authsize
    - crypto: ixp4xx - fix OF node reference leaks in init_ixp_crypto()
    - ALSA: seq: Make dependency on UMP clearer
    - padata: fix sysfs store callback check
    - perf top: Don't complain about lack of vmlinux when not resolving some
      kernel samples
    - perf machine: Don't ignore _etext when not a text symbol
    - perf namespaces: Introduce nsinfo__set_in_pidns()
    - perf namespaces: Fixup the nsinfo__in_pidns() return type, its bool
    - ASoC: Intel: avs: Do not readq() u32 registers
    - ASoC: Intel: avs: Fix theoretical infinite loop
    - perf report: Fix misleading help message about --demangle
    - pinctrl: stm32: Add check for clk_enable()
    - pinctrl: amd: Take suspend type into consideration which pins are non-wake
    - bpf: Send signals asynchronously if !preemptible
    - bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write
    - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31
      laptop
    - perf lock: Fix parse_lock_type which only retrieve one lock flag
    - padata: fix UAF in padata_reorder
    - padata: add pd get/put refcnt helper
    - padata: avoid UAF for reorder_work
    - smb: client: fix oops due to unset link speed
    - cifs: Use cifs_autodisable_serverino() for disabling CIFS_MOUNT_SERVER_INUM
      in readdir.c
    - soc: atmel: fix device_node release in atmel_soc_device_init()
    - ARM: at91: pm: change BU Power Switch to automatic mode
    - arm64: dts: mediatek: mt8186: Move wakeup to MTU3 to get working suspend
    - arm64: dts: mt8183: set DMIC one-wire mode on Damu
    - arm64: dts: mediatek: mt8516: fix GICv2 range
    - arm64: dts: mediatek: mt8516: fix wdt irq type
    - arm64: dts: mediatek: mt8516: add i2c clock-div property
    - arm64: dts: mediatek: mt8516: reserve 192 KiB for TF-A
    - ARM: dts: stm32: Fix IPCC EXTI declaration on stm32mp151
    - RDMA/mlx4: Avoid false error about access to uninitialized gids array
    - rdma/cxgb4: Prevent potential integer overflow on 32bit
    - arm64: dts: mediatek: mt8173-evb: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8173-elm: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8192-asurada: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8195-cherry: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8195-demo: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8173-elm: Fix MT6397 PMIC sub-node names
    - arm64: dts: mediatek: mt8173-evb: Fix MT6397 PMIC sub-node names
    - ARM: dts: aspeed: yosemite4: correct the compatible string of adm1272
    - ARM: dts: aspeed: yosemite4: Add required properties for IOE on fan boards
    - ARM: dts: aspeed: yosemite4: correct the compatible string for max31790
    - arm: dts: socfpga: use reset-name "stmmaceth-ocp" instead of "ahb"
    - RDMA/rxe: Fix mismatched max_msg_sz
    - arm64: dts: mediatek: mt8183: kenzo: Support second source touchscreen
    - arm64: dts: mediatek: mt8183: willow: Support second source touchscreen
    - RDMA/srp: Fix error handling in srp_add_port
    - arm64: dts: mediatek: mt8195: Remove suspend-breaking reset from pcie1
    - ARM: dts: stm32: Deduplicate serial aliases and chosen node for STM32MP15xx
      DHCOM SoM
    - ARM: dts: stm32: Swap USART3 and UART8 alias on STM32MP15xx DHCOM SoM
    - memory: tegra20-emc: fix an OF node reference bug in
      tegra_emc_find_node_by_ram_code()
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Drop pp3300_panel voltage
      settings
    - arm64: dts: qcom: msm8996-xiaomi-gemini: Fix LP5562 LED1 reg property
    - arm64: dts: qcom: sa8775p: Update sleep_clk frequency
    - arm64: dts: qcom: msm8996: Fix up USB3 interrupts
    - arm64: dts: qcom: msm8994: Describe USB interrupts
    - arm64: dts: qcom: sm7225-fairphone-fp4: Drop extra qcom,msm-id value
    - arm64: dts: qcom: msm8916: correct sleep clock frequency
    - arm64: dts: qcom: msm8939: correct sleep clock frequency
    - arm64: dts: qcom: msm8994: correct sleep clock frequency
    - arm64: dts: qcom: qcs404: correct sleep clock frequency
    - arm64: dts: qcom: q[dr]u1000: correct sleep clock frequency
    - arm64: dts: qcom: qrb4210-rb2: correct sleep clock frequency
    - arm64: dts: qcom: sc7280: correct sleep clock frequency
    - arm64: dts: qcom: sdx75: correct sleep clock frequency
    - arm64: dts: qcom: sm4450: correct sleep clock frequency
    - arm64: dts: qcom: sm6125: correct sleep clock frequency
    - arm64: dts: qcom: sm6375: correct sleep clock frequency
    - arm64: dts: qcom: sm8250: correct sleep clock frequency
    - arm64: dts: qcom: sm8350: correct sleep clock frequency
    - arm64: dts: qcom: sm8450: correct sleep clock frequency
    - ARM: dts: microchip: sama5d27_wlsom1_ek: Add no-1-8-v property to sdmmc0
      node
    - arm64: dts: ti: k3-am62: Remove duplicate GICR reg
    - arm64: dts: ti: k3-am62a: Remove duplicate GICR reg
    - arm64: dts: allwinner: a64: explicitly assign clock parent for TCON0
    - RDMA/bnxt_re: Fix to drop reference to the mmap entry in case of error
    - ARM: omap1: Fix up the Retu IRQ on Nokia 770
    - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: Convert mezzanine
      riser to dtso
    - arm64: dts: qcom: sdm845-db845c-navigation-mezzanine: remove disabled ov7251
      camera
    - arm64: dts: qcom: sc7180-trogdor-quackingstick: add missing avee-supply
    - arm64: dts: qcom: sc7180-trogdor-pompom: rename 5v-choke thermal zone
    - arm64: dts: qcom: sc7180: change labels to lower-case
    - arm64: dts: qcom: sc7180: fix psci power domain node names
    - arm64: dts: qcom: sm8150-microsoft-surface-duo: fix typos in da7280
      properties
    - arm64: dts: qcom: sc8280xp: Fix up remoteproc register space sizes
    - dts: arm64: mediatek: mt8195: Remove MT8183 compatible for OVL
    - arm64: dts: mediatek: add per-SoC compatibles for keypad nodes
    - arm64: dts: qcom: sdm845: Fix interrupt types of camss interrupts
    - arm64: dts: qcom: sm8250: Fix interrupt types of camss interrupts
    - ARM: dts: mediatek: mt7623: fix IR nodename
    - fbdev: omapfb: Fix an OF node leak in dss_of_port_get_parent_device()
    - arm64: tegra: Fix DMA ID for SPI2
    - i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition
    - RDMA/mlx5: Fix indirect mkey ODP page count
    - of: reserved-memory: Do not make kmemleak ignore freed address
    - efi: sysfb_efi: fix W=1 warnings when EFI is not set
    - RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"
    - media: rc: iguanair: handle timeouts
    - media: lmedm04: Handle errors for lme2510_int_read
    - PCI: endpoint: Destroy the EPC device in devm_pci_epc_destroy()
    - media: marvell: Add check for clk_enable()
    - media: i2c: imx290: Register 0x3011 varies between imx327 and imx290
    - media: i2c: imx412: Add missing newline to prints
    - media: i2c: ov9282: Correct the exposure offset
    - media: mipi-csis: Add check for clk_enable()
    - media: camif-core: Add check for clk_enable()
    - media: uvcvideo: Propagate buf->error to userspace
    - mtd: rawnand: brcmnand: fix status read of brcmnand_waitfunc
    - mtd: hyperbus: hbmc-am654: fix an OF node reference leak
    - media: nxp: imx8-isi: fix v4l2-compliance test errors
    - watchdog: rti_wdt: Fix an OF node leak in rti_wdt_probe()
    - staging: media: imx: fix OF node leak in imx_media_add_of_subdevs()
    - media: dvb-usb-v2: af9035: fix ISO C90 compilation error on
      af9035_i2c_master_xfer
    - PCI: rcar-ep: Fix incorrect variable used when calling
      devm_request_mem_region()
    - PCI: imx6: Skip controller_id generation logic for i.MX7D
    - PCI: endpoint: pci-epf-test: Set dma_chan_rx pointer to NULL on error
    - PCI: endpoint: pci-epf-test: Fix check for DMA MEMCPY test
    - scsi: mpt3sas: Set ioc->manu_pg11.EEDPTagMode directly to 1
    - scsi: ufs: bsg: Delete bsg_dev when setting up bsg fails
    - ocfs2: mark dquot as inactive if failed to start trans while releasing dquot
    - nilfs2: protect access to buffers with no active references
    - module: Extend the preempt disabled section in
      dereference_symbol_descriptor().
    - driver core: class: Fix wild pointer dereferences in API
      class_dev_iter_next()
    - serial: 8250: Adjust the timeout for FIFO mode
    - NFSv4.2: fix COPY_NOTIFY xdr buf size calculation
    - NFSv4.2: mark OFFLOAD_CANCEL MOVEABLE
    - LoongArch: Fix warnings during S3 suspend
    - tools/bootconfig: Fix the wrong format specifier
    - xfrm: replay: Fix the update of replay_esn->oseq_hi for GSO
    - dmaengine: ti: edma: fix OF node reference leaks in edma_driver
    - xfrm: delete intermediate secpath entry in packet offload mode
    - rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read
    - rtc: loongson: clear TOY_MATCH0_REG in loongson_rtc_isr()
    - ubifs: skip dumping tnc tree when zroot is null
    - regulator: core: Add missing newline character
    - net: hns3: fix oops when unload drivers paralleling
    - gpio: mxc: remove dead code after switch to DT-only
    - net: fec: implement TSO descriptor cleanup
    - ipmr: do not call mr_mfc_uses_dev() for unres entries
    - PM: hibernate: Add error handling for syscore_suspend()
    - iavf: allow changing VLAN state without calling PF
    - net: rose: fix timer races against user threads
    - net: netdevsim: try to close UDP port harness races
    - vxlan: Fix uninit-value in vxlan_vnifilter_dump()
    - net: davicom: fix UAF in dm9000_drv_remove
    - ptp: Properly handle compat ioctls
    - net: stmmac: Limit the number of MTL queues to hardware capability
    - net: stmmac: Limit FIFO size by hardware capability
    - perf trace: Fix runtime error of index out of bounds
    - vsock: Allow retrying on connect() failure
    - bgmac: reduce max frame size to support just MTU 1500
    - tcp: correct handling of extreme memory squeeze
    - net: xdp: Disallow attaching device-bound programs in generic mode
    - net: sh_eth: Fix missing rtnl lock in suspend/resume path
    - net: hsr: fix fill_frame_info() regression vs VLAN packets
    - genksyms: fix memory leak when the same symbol is added from source
    - genksyms: fix memory leak when the same symbol is read from *.symref file
    - RISC-V: Mark riscv_v_init() as __init
    - ASoC: rockchip: i2s_tdm: Re-add the set_sysclk callback
    - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock()
    - cifs: Validate EAs for WSL reparse points
    - cifs: Fix getting and setting SACLs over SMB1
    - kconfig: fix file name in warnings when loading KCONFIG_DEFCONFIG_LIST
    - kconfig: fix memory leak in sym_warn_unmet_dep()
    - hexagon: fix using plain integer as NULL pointer warning in cmpxchg
    - hexagon: Fix unbalanced spinlock in die()
    - f2fs: Introduce linear search for dentries
    - Revert "SUNRPC: Reduce thread wake-up rate when receiving large RPC
      messages"
    - kbuild: switch from lz4c to lz4 for compression
    - netfilter: nf_tables: reject mismatching sum of field_len with set key
      length
    - selftests/rseq: Fix handling of glibc without rseq support
    - ktest.pl: Check kernelrelease return in get_version
    - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro
    - net: usb: rtl8150: enable basic endpoint checking
    - usb: xhci: Fix NULL pointer dereference on certain command aborts
    - drivers/card_reader/rtsx_usb: Restore interrupt based detection
    - usb: gadget: f_tcm: Fix Get/SetInterface return value
    - usb: dwc3-am62: Fix an OF node leak in phy_syscon_pll_refclk()
    - usb: dwc3: core: Defer the probe until USB power supply ready
    - usb: typec: tcpm: set SRC_SEND_CAPABILITIES timeout to PD_T_SENDER_RESPONSE
    - usb: typec: tcpci: Prevent Sink disconnection before vPpsShutdown in SPR PPS
    - mptcp: consolidate suboption status
    - mptcp: handle fastopen disconnect correctly
    - remoteproc: core: Fix ida_free call while not allocated
    - media: uvcvideo: Fix double free in error path
    - pps: Fix a use-after-free
    - usb: gadget: f_tcm: Don't free command immediately
    - staging: media: max96712: fix kernel oops when removing module
    - media: imx-jpeg: Fix potential error pointer dereference in detach_pm()
    - btrfs: output the reason for open_ctree() failure
    - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS
    - LoongArch: Change 8 to 14 for LOONGARCH_MAX_{BRP,WRP}
    - dlm: fix removal of rsb struct that is master and dir record
    - block: copy back bounce buffer to user-space correctly in case of split
    - ps3disk: Do not use dev->bounce_size before it is set
    - block: check BLK_FEAT_POLL under q_usage_count
    - block: don't update BLK_FEAT_POLL in __blk_mq_update_nr_hw_queues
    - nvme-tcp: Fix I/O queue cpu spreading for multiple controllers
    - powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
    - sched: Fix race between yield_to() and try_to_wake_up()
    - drm/v3d: Fix performance counter source settings on V3D 7.x
    - drm/rockchip: vop2: fix rk3588 dp+dsi maxclk verification
    - drm/panthor: Preserve the result returned by panthor_fw_resume()
    - drm/connector: Allow clearing HDMI infoframes
    - drm/rockchip: vop2: Set AXI id for rk3588
    - drm/rockchip: vop2: Setup delay cycle for Esmart2/3
    - drm/rockchip: vop2: Add check for 32 bpp format for rk3588
    - drm/msm/dpu: provide DSPP and correct LM config for SDM670
    - drm/msm/dpu: link DSPP_2/_3 blocks on SM8650
    - drm/msm/dpu: link DSPP_2/_3 blocks on X1E80100
    - drm/msm: don't clean up priv->kms prematurely
    - drm/msm/mdp4: correct LCDC regulator name
    - wifi: rtlwifi: rtl8821ae: phy: restore removed code to fix infinite loop
    - clk: renesas: cpg-mssr: Fix 'soc' node handling in cpg_mssr_reserved_init()
    - wifi: cfg80211: tests: Fix potential NULL dereference in
      test_cfg80211_parse_colocated_ap()
    - selftests/bpf: Actuate tx_metadata_len in xdp_hw_metadata
    - selftests: ktap_helpers: Fix uninitialized variable
    - ptr_ring: do not block hard interrupts in ptr_ring_resize_multiple()
    - udp: Deal with race between UDP socket address change and rehash
    - dt-bindings: clock: imx93: Drop IMX93_CLK_END macro definition
    - dt-bindings: clock: Add i.MX91 clock support
    - dt-bindings: clock: imx93: Add SPDIF IPG clk
    - clk: imx93: Move IMX93_CLK_END macro to clk driver
    - clk: imx: add i.MX91 clk
    - clk: imx93: Add IMX93_CLK_SPDIF_IPG clock
    - arm64: dts: imx93: Use IMX93_CLK_SPDIF_IPG as SPDIF IPG clock
    - clk: imx: Apply some clks only for i.MX93
    - clk: qcom: camcc-x1e80100: Set titan_top_gdsc as the parent GDSC of
      subordinate GDSCs
    - team: prevent adding a device which is already a team device lower
    - wifi: mt76: mt7996: fix invalid interface combinations
    - wifi: rtw89: mcc: consider time limits not divisible by 1024
    - hwmon: Fix help text for aspeed-g6-pwm-tach
    - wifi: mt76: mt7925: fix off by one in mt7925_load_clc()
    - wifi: iwlwifi: fw: read STEP table from correct UEFI var
    - wifi: iwlwifi: mvm: don't count mgmt frames as MPDU
    - wifi: cfg80211: Move cfg80211_scan_req_add_chan() n_channels increment
      earlier
    - clk: thead: Fix clk gate registration to pass flags
    - clk: thead: Add CLK_IGNORE_UNUSED to fix TH1520 boot
    - clk: thead: Fix cpu2vp_clk for TH1520 AP_SUBSYS clocks
    - wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links
    - wifi: mt76: mt7925: fix wrong band_idx setting when enable sniffer mode
    - wifi: mt76: mt7925: fix get wrong chip cap from incorrect pointer
    - wifi: mt76: mt7925: fix the invalid ip address for arp offload
    - wifi: mt76: mt7996: fix overflows seen when writing limit attributes
    - wifi: mt76: connac: Extend mt76_connac_mcu_uni_add_dev for MLO
    - wifi: mt76: mt7925: Fix incorrect MLD address in bss_mld_tlv for MLO support
    - wifi: mt76: mt7925: Fix incorrect WCID assignment for MLO
    - wifi: mt76: mt7925: Fix incorrect WCID phy_idx assignment
    - wifi: mt76: mt7925: convert comma to semicolon
    - wifi: mt76: mt7925: fix wrong parameter for related cmd of chan info
    - wifi: mt76: mt7925: Fix CNM Timeout with Single Active Link in MLO
    - wifi: mt76: mt7925: Enhance mt7925_mac_link_bss_add to support MLO
    - wifi: mt76: Enhance mt7925_mac_link_sta_add to support MLO
    - wifi: mt76: mt7925: Update mt7925_mcu_sta_update for BC in ASSOC state
    - wifi: mt76: mt7925: Update mt792x_rx_get_wcid for per-link STA
    - wifi: mt76: mt7925: Update mt7925_unassign_vif_chanctx for per-link BSS
    - wifi: mt76: mt7925: Update secondary link PS flow
    - wifi: mt76: mt7925: Init secondary link PM state
    - wifi: mt76: mt7925: Update mt7925_mcu_uni_[tx,rx]_ba for MLO
    - wifi: mt76: mt7925: Cleanup MLO settings post-disconnection
    - wifi: mt76: mt7925: Properly handle responses for commands with events
    - wifi: mt76: mt7996: fix definition of tx descriptor
    - Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()
    - Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()
    - dev: Acquire netdev_rename_lock before restoring dev->name in
      dev_change_name().
    - selftests/landlock: Fix build with non-default pthread linking
    - octeon_ep_vf: remove firmware stats fetch in ndo_get_stats64
    - net: sched: refine software bypass handling in tc_run
    - platform/mellanox: mlxbf-pmc: incorrect type in assignment
    - platform/x86: x86-android-tablets: make platform data be static
    - pinctrl: samsung: Fix irq handling if an error occurs in
      exynos_irq_demux_eint16_31()
    - ASoC: cs40l50: Use *-y for Makefile
    - ASoC: wcd937x: Use *-y for Makefile
    - iommu/arm-smmuv3: Update comments about ATS and bypass
    - crypto: tegra - do not transfer req when tegra init fails
    - crypto: api - Fix boot-up self-test race
    - pinctrl: nomadik: Add check for clk_enable()
    - rhashtable: Fix potential deadlock by moving schedule_work outside lock
    - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async'
    - bpf: Use refcount_t instead of atomic_t for mmap_count
    - bpf: Reject struct_ops registration that uses module ptr and the module
      btf_id is missing
    - perf maps: Fix display of kernel symbols
    - ASoC: Intel: avs: Fix the minimum firmware version numbers
    - ASoC: Intel: avs: Fix init-config parsing
    - perf MANIFEST: Add arch/*/include/uapi/asm/bpf_perf_event.h to the perf
      tarball
    - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers
    - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83LC
    - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 83JX, 83MC and 83NM
    - selftests/bpf: Fix btf leak on new btf alloc failure in btf_distill test
    - libbpf: Fix return zero when elf_begin failed
    - libbpf: Fix incorrect traversal end type ID when marking BTF_IS_EMBEDDED
    - iommu/amd: Remove unused amd_iommu_domain_update()
    - tools: Sync if_xdp.h uapi tooling header
    - rhashtable: Fix rhashtable_try_insert test
    - bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT
    - ARM: dts: imx7-tqma7: add missing vs-supply for LM75A (rev. 01xxx)
    - ARM: dts: stm32: Increase CPU core voltage on STM32MP13xx DHCOR SoM
    - arm64: dts: renesas: rzg3s-smarc: Fix the debug serial alias
    - arm64: dts: medaitek: mt8395-nio-12l: Drop regulator-compatible property
    - arm64: dts: mediatek: mt8395-genio-1200-evk: Drop regulator-compatible
      property
    - arm64: defconfig: remove obsolete CONFIG_SM_DISPCC_8650
    - arm64: dts: qcom: sm8550: correct sleep clock frequency
    - arm64: dts: qcom: sm8650: correct sleep clock frequency
    - arm64: dts: qcom: x1e80100: correct sleep clock frequency
    - arm64: dts: qcom: sm8650: Fix CDSP context banks unit addresses
    - ARM: dts: microchip: sama5d29_curiosity: Add no-1-8-v property to sdmmc0
      node
    - arm64: dts: rockchip: Fix sdmmc access on rk3308-rock-s0 v1.1 boards
    - RDMA/hns: Clean up the legacy CONFIG_INFINIBAND_HNS
    - [Config] updateconfigs for CONFIG_INFINIBAND_HNS{_HIP08}
    - arm64: dts: qcom: qcm6490-shift-otter: remove invalid orientation-switch
    - firmware: qcom: scm: Cleanup global '__scm' on probe failures
    - arm64: dts: mediatek: mt7988: Add missing clock-div property for i2c
    - arm64: dts: marvell: cn9131-cf-solidwan: fix cp1 comphy links
    - arm64: dts: rockchip: fix num-channels property of wolfvision pf5 mic
    - arm64: dts: ti: k3-am642-hummingboard-t: Convert overlay to board dts
    - of: property: Avoiding using uninitialized variable @imaplen in
      parse_interrupt_map()
    - RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event
    - iommu: iommufd: fix WARNING in iommufd_device_unbind
    - iommufd/iova_bitmap: Fix shift-out-of-bounds in
      iova_bitmap_offset_to_index()
    - of: reserved_mem: Restructure how the reserved memory regions are processed
    - of/fdt: Restore possibility to use both ACPI and FDT from bootloader
    - remoteproc: mtk_scp: Only populate devices for SCP cores
    - PCI: imx6: Deassert apps_reset in imx_pcie_deassert_core_reset()
    - PCI: dwc: Always stop link in the dw_pcie_suspend_noirq
    - PCI: microchip: Add support for using either Root Port 1 or 2
    - PCI: microchip: Set inbound address translation for coherent or non-coherent
      mode
    - scsi: mpi3mr: Fix possible crash when setting up bsg fails
    - firewire: test: Fix potential null dereference in firewire kunit test
    - erofs: get rid of erofs_{find,insert}_workgroup
    - erofs: move erofs_workgroup operations into zdata.c
    - module: Don't fail module loading when setting ro_after_init section RO
      failed
    - tty: mips_ejtag_fdc: fix one more u8 warning
    - xfrm: Add support for per cpu xfrm state handling.
    - xfrm: Cache used outbound xfrm states at the policy.
    - xfrm: Add an inbound percpu state cache.
    - xfrm: state: fix out-of-bounds read during lookup
    - rtc: tps6594: Fix integer overflow on 32bit systems
    - net: airoha: Fix wrong GDM4 register definition
    - net: phy: marvell-88q2xxx: Fix temperature measurement with reset-gpios
    - xfrm: Don't disable preemption while looking up cache state.
    - idpf: add read memory barrier when checking descriptor done bit
    - idpf: Acquire the lock before accessing the xn->salt
    - idpf: convert workqueues to unbound
    - ice: rework of dump serdes equalizer values feature
    - ice: extend dump serdes equalizer values feature
    - ice: remove invalid parameter of equalizer
    - s390/mm: Allow large pages for KASAN shadow mapping
    - net/ncsi: use dev_set_mac_address() for Get MC MAC Address handling
    - tools: ynl: c: correct reverse decode of empty attrs
    - selftests: mptcp: extend CFLAGS to keep options from environment
    - selftests: net/{lib,openvswitch}: extend CFLAGS to keep options from
      environment
    - rxrpc, afs: Fix peer hash locking vs RCU callback
    - net: ethtool: only allow set_rxnfc with rss + ring_cookie if driver opts in
    - ethtool: Fix set RXNFC command with symmetric RSS hash
    - s390/sclp: Initialize sclp subsystem via arch_cpu_finalize_init()
    - [Config] updateconfigs for ARCH_HAS_CPU_FINALIZE_INIT
    - Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()
    - net: ravb: Fix missing rtnl lock in suspend/resume path
    - hostfs: fix string handling in __dentry_name()
    - tools/power turbostat: Allow using cpu device in perf counters on hybrid
      platforms
    - tools/power turbostat: Fix PMT mmaped file size rounding
    - tools/power turbostat: Fix forked child affinity regression
    - md: add a new callback pers->bitmap_sector()
    - md/raid5: implement pers->bitmap_sector()
    - drm/amd/display: Reduce accessing remote DPCD overhead
    - xfs: check for dead buffers in xfs_buf_find_insert
    - xfs: don't shut down the filesystem for media failures beyond end of log
    - usb: dwc3: Skip resume if pm_runtime_set_active() fails
    - clk: qcom: gcc-x1e80100: Do not turn off usb_2 controller GDSC
    - mptcp: pm: only set fullmesh for subflow endp
    - powerpc/pseries/iommu: Don't unset window if it was never set
    - of: reserved-memory: Warn for missing static reserved memory regions
    - dma-mapping: save base/size instead of pointer to shared DMA pool
    - xfrm: Add error handling when nla_put_u32() returns an error
    - xfrm: Fix acquire state insertion.
    - ethtool: Fix access to uninitialized fields in set RXNFC command
    - Revert "s390/mm: Allow large pages for KASAN shadow mapping"
    - ASoC: da7213: Initialize the mutex
    - drm/amd/display: Add hubp cache reset when powergating
    - KVM: x86: Plumb in the vCPU to kvm_x86_ops.hwapic_isr_update()
    - memcg: fix soft lockup in the OOM process
    - ethtool: ntuple: fix rss + ring_cookie check
    - Upstream stable to v6.6.76, v6.12.13
  * log_check/kernel_tainted failed with kernel warnings at
    kernel/time/timer_migration.c:543 on Oracular (LP: #2106022)
    - timers/migration: Fix off-by-one root mis-connection

 -- Stefan Bader <stefan.bader@canonical.com>  Thu, 17 Apr 2025 17:16:10 +0200

linux-hwe-6.11 (6.11.0-25.25~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-25.25~24.04.1 -proposed tracker (LP: #2107096)

  [ Ubuntu: 6.11.0-25.25 ]

  * oracular/linux: 6.11.0-25.25 -proposed tracker (LP: #2107099)
  * Packaging resync (LP: #1786013)
    - [Packaging] update annotations scripts
  * log_check/kernel_tainted failed with kernel warnings at
    kernel/time/timer_migration.c:543 on Oracular (LP: #2106022)
    - timers/migration: Fix off-by-one root mis-connection

 -- Stefan Bader <stefan.bader@canonical.com>  Tue, 15 Apr 2025 14:48:48 +0200

linux-hwe-6.11 (6.11.0-24.24~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-24.24~24.04.1 -proposed tracker (LP: #2102471)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.hwe-6.11/dkms-versions -- update from kernel-versions
      (main/2025.03.17)

  [ Ubuntu: 6.11.0-24.24 ]

  * oracular/linux: 6.11.0-24.24 -proposed tracker (LP: #2102476)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.03.17)
  * ipsec_offload in rtnetlink.sh from ubunsu_kselftests_net fails on O/J
    (LP: #2096976)
    - SAUCE: selftest: netfilter: fix null IP field in kci_test_ipsec_offload
  * Add additional PCI ids for BMG support (LP: #2098969)
    - drm/xe/bmg: Add new PCI IDs
  * wdat_wdt.ko should be pulled in by linux-image-virtual (LP: #2098554)
    - [Packaging]: wdat_wdt.ko is moved from "linux-modules-extra-*-generic" to
      "linux-modules-*-generic"
  * CVE-2025-21756
    - vsock: Keep the binding until socket destruction
    - vsock: Orphan socket after transport release
  * Oracular update: upstream stable patchset 2025-03-05 (LP: #2100983)
    - ASoC: wm8994: Add depends on MFD core
    - ASoC: samsung: Add missing selects for MFD_WM8994
    - seccomp: Stub for !CONFIG_SECCOMP
    - scsi: iscsi: Fix redundant response for ISCSI_UEVENT_GET_HOST_STATS request
    - of/unittest: Add test that of_address_to_resource() fails on non-
      translatable address
    - irqchip/sunxi-nmi: Add missing SKIP_WAKE flag
    - hwmon: (drivetemp) Set scsi command timeout to 10s
    - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag
    - smb: client: handle lack of EA support in smb2_query_path_info()
    - net: sched: fix ets qdisc OOB Indexing
    - Revert "HID: multitouch: Add support for lenovo Y9000P Touchpad"
    - cachestat: fix page cache statistics permission checking
    - scsi: storvsc: Ratelimit warning logs to prevent VM denial of service
    - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()
    - ALSA: usb-audio: Add delay quirk for USB Audio Device
    - Input: xpad - add support for Nacon Pro Compact
    - Input: atkbd - map F23 key to support default copilot shortcut
    - Input: xpad - add unofficial Xbox 360 wireless receiver clone
    - Input: xpad - add QH Electronics VID/PID
    - Input: xpad - improve name of 8BitDo controller 2dc8:3106
    - Input: xpad - add support for Nacon Evol-X Xbox One Controller
    - Input: xpad - add support for wooting two he (arm)
    - drm/v3d: Assign job pointer to NULL before signaling the fence
    - ASoC: codecs: es8316: Fix HW rate calculation for 48Mhz MCLK
    - ASoC: cs42l43: Add codec force suspend/resume ops
    - drm/amd/display: Initialize denominator defaults to 1
    - ALSA: hda/realtek: Fix volume adjustment issue on Lenovo ThinkBook 16P Gen5
    - drm/connector: hdmi: Validate supported_formats matches ycbcr_420_allowed
    - ASoC: samsung: Add missing depends on I2C
    - mm: zswap: properly synchronize freeing resources during CPU hotunplug
    - mm: zswap: move allocations during CPU init outside the lock
    - libfs: Return ENOSPC when the directory offset range is exhausted
    - Revert "libfs: Add simple_offset_empty()"
    - Revert "libfs: fix infinite directory reads for offset dir"
    - libfs: Replace simple_offset end-of-directory detection
    - libfs: Use d_children list to iterate simple_offset directories
    - wifi: rtl8xxxu: add more missing rtl8192cu USB IDs
    - HID: wacom: Initialize brightness of LED trigger
    - Upstream stable to v6.6.75, v6.12.12
  * CVE-2025-21702
    - pfifo_tail_enqueue: Drop new packet when sch->limit == 0
  * CVE-2025-21703
    - netem: Update sch->q.qlen before qdisc_tree_reduce_backlog()
  * Fix line-out playback on some platforms with Cirrus Logic “Dolphin” hardware
    (LP: #2099880)
    - ALSA: hda/cirrus: Correct the full scale volume set logic
  * Enable Large Language Model (LLM) workloads using Intel NPU (LP: #2098972)
    - accel/ivpu: Increase DMA address range
  * Introduce and use sendpages_ok() instead of sendpage_ok() in nvme-tcp and
    drbd (LP: #2093871)
    - net: introduce helper sendpages_ok()
    - nvme-tcp: use sendpages_ok() instead of sendpage_ok()
    - drbd: use sendpages_ok() instead of sendpage_ok()
  * Intel Be201 Bluetooth hardware error 0x0f on Arrow Lake (LP: #2088151)
    - Bluetooth: btintel: Add DSBR support for BlazarIW, BlazarU and GaP
  * Oracular update: upstream stable patchset 2025-02-26 (LP: #2100328)
    - net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()
    - bpf: Fix bpf_sk_select_reuseport() memory leak
    - openvswitch: fix lockup on tx to unregistering netdev with carrier
    - pktgen: Avoid out-of-bounds access in get_imix_entries
    - gtp: Use for_each_netdev_rcu() in gtp_genl_dump_pdp().
    - gtp: Destroy device along with udp socket's netns dismantle.
    - nfp: bpf: prevent integer overflow in nfp_bpf_event_output()
    - net: xilinx: axienet: Fix IRQ coalescing packet count overflow
    - net: fec: handle page_pool_dev_alloc_pages error
    - net/mlx5: Fix RDMA TX steering prio
    - net/mlx5: Clear port select structure when fail to create
    - net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel
    - net/mlx5e: Rely on reqid in IPsec tunnel mode
    - net/mlx5e: Always start IPsec sequence number from 1
    - drm/vmwgfx: Add new keep_resv BO param
    - drm/v3d: Ensure job pointer is set to NULL after job completion
    - soc: ti: pruss: Fix pruss APIs
    - hwmon: (tmp513) Fix division of negative numbers
    - Revert "mtd: spi-nor: core: replace dummy buswidth from addr to data"
    - i2c: mux: demux-pinctrl: check initial mux selection, too
    - i2c: rcar: fix NACK handling when being a target
    - smb: client: fix double free of TCP_Server_Info::hostname
    - mac802154: check local interfaces before deleting sdata list
    - hfs: Sanity check the root record
    - fs: fix missing declaration of init_files
    - kheaders: Ignore silly-rename files
    - cachefiles: Parse the "secctx" immediately
    - scsi: ufs: core: Honor runtime/system PM levels if set by host controller
      drivers
    - selftests: tc-testing: reduce rshift value
    - ACPI: resource: acpi_dev_irq_override(): Check DMI match last
    - iomap: avoid avoid truncating 64-bit offset to 32 bits
    - poll_wait: add mb() to fix theoretical race between waitqueue_active() and
      .poll()
    - RDMA/bnxt_re: Fix to export port num to ib_query_qp
    - nvmet: propagate npwg topology
    - ALSA: hda/realtek: Add support for Ayaneo System using CS35L41 HDA
    - i2c: atr: Fix client detach
    - mptcp: be sure to send ack when mptcp-level window re-opens
    - mptcp: fix spurious wake-up on under memory pressure
    - selftests: mptcp: avoid spurious errors on disconnect
    - net: ethernet: xgbe: re-add aneg to supported features in PHY quirks
    - vsock/bpf: return early if transport is not assigned
    - vsock/virtio: discard packets if the transport changes
    - vsock/virtio: cancel close work in the destructor
    - vsock: reset socket state when de-assigning the transport
    - vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]
    - nouveau/fence: handle cross device fences properly
    - filemap: avoid truncating 64-bit offset to 32 bits
    - fs/proc: fix softlockup in __read_vmcore (part 2)
    - gpio: xilinx: Convert gpio_lock to raw spinlock
    - pmdomain: imx8mp-blk-ctrl: add missing loop break condition
    - irqchip: Plug a OF node reference leak in platform_irqchip_probe()
    - irqchip/gic-v3: Handle CPU_PM_ENTER_FAILED correctly
    - irqchip/gic-v3-its: Don't enable interrupts in its_irq_set_vcpu_affinity()
    - hrtimers: Handle CPU state correctly on hotplug
    - drm/i915/fb: Relax clear color alignment to 64 bytes
    - drm/amdgpu: always sync the GFX pipe on ctx switch
    - ocfs2: fix deadlock in ocfs2_get_system_file_inode
    - nfsd: add list_head nf_gc to struct nfsd_file
    - x86/xen: fix SLS mitigation in xen_hypercall_iret()
    - efi/zboot: Limit compression options to GZIP and ZSTD
    - [Config] updateconfigs for EFI_ZBOOT
    - eth: bnxt: always recalculate features after XDP clearing, fix null-deref
    - net: ravb: Fix max TX frame size for RZ/V2M
    - ice: Fix E825 initialization
    - ice: Fix quad registers read on E825
    - ice: Fix ETH56G FC-FEC Rx offset value
    - ice: Introduce ice_get_phy_model() wrapper
    - ice: Add ice_get_ctrl_ptp() wrapper to simplify the code
    - ice: Use ice_adapter for PTP shared data instead of auxdev
    - ice: Add correct PHY lane assignment
    - cpuidle: teo: Update documentation after previous changes
    - pfcp: Destroy device along with udp socket's netns dismantle.
    - cpufreq: Move endif to the end of Kconfig file
    - net/mlx5: Fix a lockdep warning as part of the write combining test
    - net/mlx5: SF, Fix add port error handling
    - drm/tests: helpers: Fix compiler warning
    - drm/vmwgfx: Unreserve BO on error
    - reset: rzg2l-usbphy-ctrl: Assign proper of node to the allocated device
    - i2c: core: fix reference leak in i2c_register_adapter()
    - platform/x86: dell-uart-backlight: fix serdev race
    - platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race
    - i2c: testunit: sort case blocks
    - i2c: testunit: on errors, repeat NACK until STOP
    - hwmon: (ltc2991) Fix mixed signed/unsigned in DIV_ROUND_CLOSEST
    - fs/qnx6: Fix building with GCC 15
    - gpio: virtuser: lock up configfs that an instantiated device depends on
    - gpio: sim: lock up configfs that an instantiated device depends on
    - platform/x86/intel: power-domains: Add Clearwater Forest support
    - platform/x86: ISST: Add Clearwater Forest to support list
    - afs: Fix merge preference rule failure condition
    - sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE
    - ALSA: hda/realtek: fixup ASUS GA605W
    - ALSA: hda/realtek: fixup ASUS H7606W
    - drm/nouveau/disp: Fix missing backlight control on Macbook 5,1
    - net/ncsi: fix locking in Get MAC Address handling
    - selftests/mm: set allocated memory to non-zero content in cow test
    - drm/amd/display: Do not elevate mem_type change to full update
    - mm: clear uffd-wp PTE/PMD state on mremap()
    - tracing: gfp: Fix the GFP enum values shown for user space tracing tools
    - timers/migration: Fix another race between hotplug and idle entry/exit
    - timers/migration: Enforce group initialization visibility to tree walkers
    - drm/xe: Mark ComputeCS read mode as UC on iGPU
    - drm/xe/oa: Add missing VISACTL mux registers
    - drm/amdgpu/smu13: update powersave optimizations
    - drm/amdgpu: fix fw attestation for MP0_14_0_{2/3}
    - drm/amdgpu: disable gfxoff with the compute workload on gfx12
    - drm/amd/display: Fix PSR-SU not support but still call the
      amdgpu_dm_psr_enable
    - drm/amd/display: Disable replay and psr while VRR is enabled
    - drm/amd/display: Do not wait for PSR disable on vbl enable
    - Revert "drm/amd/display: Enable urgent latency adjustments for DCN35"
    - drm/amd/display: Validate mdoe under MST LCT=1 case as well
    - Upstream stable to v6.6.74, v6.12.11
  * CVE-2025-21700
    - net: sched: Disallow replacing of child qdisc from one parent to another
  * iBFT iSCSI out-of-bounds shift UBSAN warning (LP: #2097824)
    - iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
  * Fix dmesg warn during x11perf testing. (LP: #2097106)
    - drm/xe: Fix xe_pt_abort_unbind
  * btrfs will WARN_ON() in btrfs_remove_qgroup() unnecessarily (LP: #2091719)
    - btrfs: improve the warning and error message for btrfs_remove_qgroup()
  * CVE-2025-21701
    - net: avoid race between device unregistration and ethnl ops

 -- Stefan Bader <stefan.bader@canonical.com>  Tue, 25 Mar 2025 17:30:35 +0100

linux-hwe-6.11 (6.11.0-21.21~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-21.21~24.04.1 -proposed tracker (LP: #2098203)

  [ Ubuntu: 6.11.0-21.21 ]

  * oracular/linux: 6.11.0-21.21 -proposed tracker (LP: #2098763)
  * Processes crash when attaching uretprobes to processes running in Docker
    (LP: #2098759)
    - seccomp: passthrough uretprobe systemcall without filtering

  [ Ubuntu: 6.11.0-20.20 ]

  * oracular/linux: 6.11.0-20.20 -proposed tracker (LP: #2098205)
  * drm/amd/display: Add check for granularity in dml ceil/floor helpers
    (LP: #2098080)
    - drm/amd/display: Add check for granularity in dml ceil/floor helpers
  * optimized default EPP for GNR family (LP: #2097554)
    - cpufreq: intel_pstate: Update Balance-performance EPP for Granite Rapids
  * Incorrect LAPIC/x2APIC parsing order (LP: #2097455)
    - x86/acpi: Fix LAPIC/x2APIC parsing order
  * MGLRU: page allocation failure on NUMA-enabled systems (LP: #2097214)
    - mm/vmscan: wake up flushers conditionally to avoid cgroup OOM
  * AppArmor early policy load not funcitoning (LP: #2095370)
    - SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [66/99]: userns - add the
      ability to reference a global variable for a feature value"
  * apparmor unconfined profile blocks pivot_root (LP: #2067900)
    - SAUCE: Revert "UBUNTU: SAUCE: apparmor4.0.0 [80/99]: apparmor: convert easy
      uses of unconfined() to label_mediates()"
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165)
    - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES
    - jbd2: increase IO priority for writing revoke records
    - jbd2: flush filesystem device before updating tail sequence
    - dm array: fix unreleased btree blocks on closing a faulty array cursor
    - dm array: fix cursor index when skipping across block boundaries
    - exfat: fix the infinite loop in __exfat_free_cluster()
    - ASoC: rt722: add delay time to wait for the calibration procedure
    - ASoC: mediatek: disable buffer pre-allocation
    - selftests/alsa: Fix circular dependency involving global-timer
    - ieee802154: ca8210: Add missing check for kfifo_alloc() in ca8210_probe()
    - net: 802: LLC+SNAP OID:PID lookup on start of skb data
    - tcp/dccp: allow a connection when sk_max_ack_backlog is zero
    - net: libwx: fix firmware mailbox abnormal return
    - pds_core: limit loop over fw name list
    - bnxt_en: Fix possible memory leak when hwrm_req_replace fails
    - cxgb4: Avoid removal of uninserted tid
    - ice: fix incorrect PHY settings for 100 GB/s
    - igc: return early when failing to read EECD register
    - tls: Fix tls_sw_sendmsg error handling
    - eth: gve: use appropriate helper to set xdp_features
    - Bluetooth: hci_sync: Fix not setting Random Address when required
    - Bluetooth: MGMT: Fix Add Device to responding before completing
    - Bluetooth: btnxpuart: Fix driver sending truncated data
    - Bluetooth: btnxpuart: Fix glitches seen in dual A2DP streaming
    - tcp: Annotate data-race around sk->sk_mark in tcp_v4_send_reset
    - netfilter: nf_tables: imbalance in flowtable binding
    - drm/mediatek: stop selecting foreign drivers
    - [Config] updateconfigs for MTK_SMI
    - drm/mediatek: Fix YCbCr422 color format issue for DP
    - drm/mediatek: Fix mode valid issue for dp
    - drm/mediatek: Add return value check when reading DPCD
    - cpuidle: riscv-sbi: fix device node release in early exit of
      for_each_possible_cpu
    - scsi: ufs: qcom: Power off the PHY if it was already powered on in
      ufs_qcom_power_up_sequence()
    - dm-ebs: don't set the flag DM_TARGET_PASSES_INTEGRITY
    - ksmbd: Implement new SMB3 POSIX type
    - thermal: of: fix OF node leak in of_thermal_zone_find()
    - smb: client: sync the root session and superblock context passwords before
      automounting
    - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[]
    - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[]
    - drm/amd/display: increase MAX_SURFACES to the value supported by hw
    - io_uring/timeout: fix multishot updates
    - dm-verity FEC: Fix RS FEC repair for roots unaligned to block size (take 2)
    - USB: serial: option: add MeiG Smart SRM815
    - USB: serial: option: add Neoway N723-EA support
    - staging: iio: ad9834: Correct phase range check
    - staging: iio: ad9832: Correct phase range check
    - usb-storage: Add max sectors quirk for Nokia 208
    - USB: serial: cp210x: add Phoenix Contact UPS Device
    - usb: dwc3: gadget: fix writing NYET threshold
    - misc: microchip: pci1xxxx: Resolve return code mismatch during GPIO set
      config
    - tty: serial: 8250: Fix another runtime PM usage counter underflow
    - usb: dwc3-am62: Disable autosuspend during remove
    - USB: usblp: return error when setting unsupported protocol
    - USB: core: Disable LPM only for non-suspended ports
    - usb: fix reference leak in usb_new_device()
    - usb: gadget: midi2: Reverse-select at the right place
    - usb: chipidea: ci_hdrc_imx: decrement device's refcount in .remove() and in
      the error path of .probe()
    - usb: gadget: f_uac2: Fix incorrect setting of bNumEndpoints
    - usb: typec: tcpm/tcpci_maxim: fix error code in
      max_contaminant_read_resistance_kohm()
    - usb: gadget: configfs: Ignore trailing LF for user strings to cdev
    - iio: gyro: fxas21002c: Fix missing data update in trigger handler
    - iio: adc: ti-ads124s08: Use gpiod_set_value_cansleep()
    - iio: inkern: call iio_device_put() only on mapped devices
    - iio: adc: ad7124: Disable all channels at probe time
    - ARM: dts: imxrt1050: Fix clocks for mmc
    - arm64: dts: rockchip: add hevc power domain clock to rk3328
    - drm/mediatek: Only touch DISP_REG_OVL_PITCH_MSB if AFBC is supported
    - iomap: pass byte granular end position to iomap_add_to_ioend
    - iomap: fix zero padding data issue in concurrent append writes
    - netfs: Fix missing barriers by using clear_and_wake_up_bit()
    - fuse: respect FOPEN_KEEP_CACHE on opendir
    - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry
    - net: don't dump Tx and uninitialized NAPIs
    - ice: fix max values for dpll pin phase adjust
    - Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices.
    - net: hns3: fixed reset failure issues caused by the incorrect reset type
    - net: hns3: fix missing features due to dev->features configuration too early
    - net: hns3: Resolved the issue that the debugfs query result is inconsistent.
    - net: hns3: initialize reset_timer before hclgevf_misc_irq_init()
    - mctp i3c: fix MCTP I3C driver multi-thread issue
    - drm/mediatek: Move mtk_crtc_finish_page_flip() to ddp_cmdq_cb()
    - drm/mediatek: Add support for 180-degree rotation in the display driver
    - drm/mediatek: mtk_dsi: Add registers to pdata to fix MT8186/MT8188
    - gpio: virtuser: Use GPIO_LOOKUP_IDX() macro
    - gpio: virtuser: fix handling of multiple conn_ids in lookup table
    - platform/x86: intel/pmc: Fix ioremap() of bad address
    - riscv: module: remove relocation_head rel_entry member allocation
    - riscv: stacktrace: fix backtracing through exceptions
    - fs: fix is_mnt_ns_file()
    - mptcp: sysctl: avail sched: remove write access
    - Revert "drm/mediatek: dsi: Correct calculation formula of PHY Timing"
    - cgroup/cpuset: Prevent leakage of isolated CPUs into sched domains
    - arm64: dts: qcom: x1e80100: Fix up BAR space size for PCIe6a
    - arm64: dts: qcom: sa8775p: Fix the size of 'addr_space' regions
    - fs: kill MNT_ONRB
    - riscv: kprobes: Fix incorrect address calculation
    - gpio: loongson: Fix Loongson-2K2000 ACPI GPIO register offset
    - drm/amd/pm: fix BUG: scheduling while atomic
    - drm/amdkfd: wq_release signals dma_fence only when available
    - serial: stm32: use port lock wrappers for break control
    - usb: host: xhci-plat: set skip_phy_initialization if software node has
      XHCI_SKIP_PHY_INIT property
    - usb: typec: fix pm usage counter imbalance in ucsi_ccg_sync_control()
    - iio: adc: ti-ads1119: fix sample size in scan struct for triggered buffer
    - iio: imu: inv_icm42600: fix timestamps after suspend if sensor is on
    - iio: adc: ad7173: fix using shared static info struct
    - arm64: dts: qcom: sa8775p: fix the secure device bootup issue
    - firewall: remove misplaced semicolon from stm32_firewall_get_firewall
    - io_uring: don't touch sqd->thread off tw add
    - iio: imu: inv_icm42600: fix spi burst write not supported
    - Upstream stable to v6.6.71, v6.6.72, v6.12.10
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21659
    - netdev: prevent accessing NAPI instances from another namespace
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21655
    - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57944
    - iio: adc: ti-ads1298: Add NULL check in ads1298_init
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57905
    - iio: adc: ti-ads1119: fix information leak in triggered buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21633
    - io_uring/sqpoll: zero sqd->thread on tctx errors
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57918
    - drm/amd/display: fix page fault due to max surface definition mismatch
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57919
    - drm/amd/display: fix divide error in DM plane scale calcs
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57921
    - drm/amdgpu: Add a lock when accessing the buddy trim function
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21634
    - cgroup/cpuset: remove kernfs active break
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21635
    - rds: sysctl: rds_tcp_{rcv,snd}buf: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57924
    - fs: relax assertions on failure to encode file handles
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21643
    - netfs: Fix kernel async DIO
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21644
    - drm/xe: Fix tlb invalidation when wedging
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21661
    - gpio: virtuser: fix missing lookup table cleanups
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21649
    - net: hns3: fix kernel crash when 1588 is sent on HIP08 devices
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21650
    - net: hns3: fixed hclge_fetch_pf_reg accesses bar space out of bounds issue
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21651
    - net: hns3: don't auto enable misc vector
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21654
    - ovl: support encoding fid from inode with no alias
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21631
    - block, bfq: fix waker_bfqq UAF after bfq_split_bfqq()
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21656
    - hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57904
    - iio: adc: at91: call input_free_device() on allocated iio_dev
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57906
    - iio: adc: ti-ads8688: fix information leak in triggered buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57907
    - iio: adc: rockchip_saradc: fix information leak in triggered buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57908
    - iio: imu: kmx61: fix information leak in triggered buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57910
    - iio: light: vcnl4035: fix information leak in triggered buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57911
    - iio: dummy: iio_simply_dummy_buffer: fix information leak in triggered
      buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57912
    - iio: pressure: zpa2326: fix information leak in triggered buffer
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57913
    - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21632
    - x86/fpu: Ensure shadow stack is active before "getting" registers
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57916
    - misc: microchip: pci1xxxx: Resolve kernel panic during GPIO IRQ handling
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57917
    - topology: Keep the cpumask unchanged when printing cpumap
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57939
    - riscv: Fix sleeping in invalid context in die()
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21636
    - sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21637
    - sctp: sysctl: udp_port: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21638
    - sctp: sysctl: auth_enable: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21639
    - sctp: sysctl: rto_min/max: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21640
    - sctp: sysctl: cookie_hmac_alg: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21642
    - mptcp: sysctl: sched: avoid using current->nsproxy
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21664
    - dm thin: make get_first_thin use rcu-safe list first function
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57945
    - riscv: mm: Fix the out of bound issue of vmemmap address
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21660
    - ksmbd: fix unexpectedly changed path in ksmbd_vfs_kern_path_locked
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21645
    - platform/x86/amd/pmc: Only disable IRQ1 wakeup where i8042 actually enabled
      it
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21646
    - afs: Fix the maximum cell name length
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57925
    - ksmbd: fix a missing return value check bug
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57926
    - drm/mediatek: Set private->all_drm_private[i]->drm to NULL if mtk_drm_bind
      returns err
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21662
    - net/mlx5: Fix variable not being completed when function returns
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21663
    - net: stmmac: dwmac-tegra: Read iommu stream id from device tree
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21647
    - sched: sch_cake: add bounds checks to host bulk flow fairness counts
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21648
    - netfilter: conntrack: clamp maximum hashtable size to INT_MAX
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21652
    - ipvlan: Fix use-after-free in ipvlan_get_iflink().
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21658
    - btrfs: avoid NULL pointer dereference if no valid extent tree
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2025-21653
    - net_sched: cls_flow: validate TCA_FLOW_RSHIFT attribute
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57940
    - exfat: fix the infinite loop in exfat_readdir()
  * Oracular update: upstream stable patchset 2025-02-13 (LP: #2098165) //
    CVE-2024-57929
    - dm array: fix releasing a faulty array block twice in dm_array_cursor_end
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738)
    - docs: media: update location of the media patches
    - x86/mm: Carve out INVLPG inline asm for use by others
    - smb/client: rename cifs_ntsd to smb_ntsd
    - smb/client: rename cifs_sid to smb_sid
    - smb/client: rename cifs_acl to smb_acl
    - smb/client: rename cifs_ace to smb_ace
    - fs/smb/client: implement chmod() for SMB3 POSIX Extensions
    - smb/client: Prevent error pointer dereference
    - smb: client: stop flooding dmesg in smb2_calc_signature()
    - usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing
      logic
    - remoteproc: qcom: pas: Add support for SA8775p ADSP, CDSP and GPDSP
    - platform/x86: mlx-platform: call pci_dev_put() to balance the refcount
    - mmc: sdhci-msm: fix crypto key eviction
    - tracing: Handle old buffer mappings for event strings and functions
    - tracing: Fix trace_check_vprintf() when tp_printk is used
    - tracing: Check "%s" dereference via the field and not the TP_printk format
    - RDMA/bnxt_re: Remove always true dattr validity check
    - RDMA/mlx5: Enforce same type port association for multiport RoCE
    - RDMA/bnxt_re: Avoid initializing the software queue for user queues
    - RDMA/bnxt_re: Avoid sending the modify QP workaround for latest adapters
    - nvme-pci: 512 byte aligned dma pool segment quirk
    - RDMA/bnxt_re: Fix the check for 9060 condition
    - RDMA/bnxt_re: Add check for path mtu in modify_qp
    - RDMA/bnxt_re: Fix reporting hw_ver in query_device
    - RDMA/bnxt_re: Fix max_qp_wrs reported
    - RDMA/bnxt_re: Add support for Variable WQE in Genp7 adapters
    - RDMA/bnxt_re: Disable use of reserved wqes
    - RDMA/bnxt_re: Add send queue size check for variable wqe
    - RDMA/bnxt_re: Fix MSN table size for variable wqe mode
    - RDMA/bnxt_re: Fix the locking while accessing the QP table
    - drm/bridge: adv7511_audio: Update Audio InfoFrame properly
    - net: dsa: microchip: Fix KSZ9477 set_ageing_time function
    - net: dsa: microchip: Fix LAN937X set_ageing_time function
    - RDMA/hns: Fix mapping error of zero-hop WQE buffer
    - RDMA/hns: Fix warning storm caused by invalid input in IO path
    - RDMA/hns: Fix missing flush CQE for DWQE
    - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_bind_dev()
    - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_md_tunnel_xmit()
    - ipv4: ip_tunnel: Unmask upper DSCP bits in ip_tunnel_xmit()
    - net: Fix netns for ip_tunnel_init_flow()
    - net/mlx5: DR, select MSIX vector 0 for completion queue creation
    - net/mlx5e: macsec: Maintain TX SA from encoding_sa
    - drm/i915/dg1: Fix power gate sequence.
    - net: llc: reset skb->transport_header
    - ALSA: usb-audio: US16x08: Initialize array before use
    - eth: bcmsysport: fix call balance of priv->clk handling routines
    - net: mv643xx_eth: fix an OF node reference leak
    - net: sfc: Correct key_len for efx_tc_ct_zone_ht_params
    - net: wwan: iosm: Properly check for valid exec stage in ipc_mmio_init()
    - net: ti: icssg-prueth: Fix clearing of IEP_CMP_CFG registers during iep_init
    - wifi: mac80211: wake the queues in case of failure in resume
    - ALSA: hda/ca0132: Use standard HD-audio quirk matching helpers
    - ALSA: hda/realtek: Add new alc2xx-fixup-headset-mic model
    - sound: usb: enable DSD output for ddHiFi TC44C
    - sound: usb: format: don't warn that raw DSD is unsupported
    - bpf: fix potential error return
    - ksmbd: retry iterate_dir in smb2_query_dir
    - smb: client: destroy cfid_put_wq on module exit
    - net: usb: qmi_wwan: add Telit FE910C04 compositions
    - irqchip/gic: Correct declaration of *percpu_base pointer in union gic_base
    - ARC: build: Try to guess GCC variant of cross compiler
    - RDMA/bnxt_re: Fix the max WQE size for static WQE support
    - modpost: fix input MODULE_DEVICE_TABLE() built for 64-bit on 32-bit host
    - modpost: fix the missed iteration for the max bit in do_input()
    - ALSA: seq: Check UMP support for midi_version change
    - ALSA hda/realtek: Add quirk for Framework F111:000C
    - kcov: mark in_softirq_really() as __always_inline
    - scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity
    - sky2: Add device ID 11ab:4373 for Marvell 88E8075
    - drm: adv7511: Drop dsi single lane support
    - dt-bindings: display: adi,adv7533: Drop single lane support
    - mptcp: fix recvbuffer adjust on sleeping rcvmsg
    - mptcp: don't always assume copied data in mptcp_cleanup_rbuf()
    - RDMA/bnxt_re: Fix max SGEs for the Work Request
    - drm/amdgpu: fix backport of commit 73dae652dcac
    - platform/x86: thinkpad-acpi: Add support for hotkey 0x1401
    - platform/x86: hp-wmi: mark 8A15 board for timed OMEN thermal profile
    - pmdomain: imx: gpcv2: Simplify with scoped for each OF child loop
    - pmdomain: imx: gpcv2: fix an OF node reference leak in imx_gpcv2_probe()
    - block: lift bio_is_zone_append to bio.h
    - btrfs: use bio_is_zone_append() in the completion handler
    - RDMA/core: Fix ENODEV error for iWARP test over vlan
    - wifi: iwlwifi: fix CRF name for Bz
    - net: phy: micrel: Dynamically control external clock of KSZ PHY
    - selftests: net: local_termination: require mausezahn
    - netdev-genl: avoid empty messages in napi get
    - drm/xe/devcoredump: Use drm_puts and already cached local variables
    - drm/xe/devcoredump: Improve section headings and add tile info
    - drm/xe/devcoredump: Add ASCII85 dump helper function
    - drm/xe/guc: Copy GuC log prior to dumping
    - drm/xe: Take PM ref in delayed snapshot capture worker
    - drm/xe: Move the coredump registration to the worker thread
    - drm/xe: Revert some changes that break a mesa debug tool
    - drm/xe: Fix and re-enable xe_print_blob_ascii85()
    - drm/xe/pf: Use correct function to check LMEM provisioning
    - net: stmmac: restructure the error path of stmmac_probe_config_dt()
    - net: pse-pd: tps23881: Fix power on/off issue
    - net/mlx5e: Keep netdev when leave switchdev for devlink set legacy only
    - drm/i915/cx0_phy: Fix C10 pll programming sequence
    - perf/x86/intel: Add Arrow Lake U support
    - drm/amdgpu: use sjt mec fw on gfx943 for sriov
    - ALSA: hda: cs35l56: Remove calls to
      cs35l56_force_sync_asp1_registers_from_cache()
    - ALSA: hda/realtek - Add support for ASUS Zen AIO 27 Z272SD_A272SD audio
    - btrfs: handle bio_split() errors
    - spi: spi-cadence-qspi: Disable STIG mode for Altera SoCFPGA.
    - ASoC: audio-graph-card: Call of_node_put() on correct node
    - ARC: build: disallow invalid PAE40 + 4K page config
    - ARC: fix reference of dependency for PAE40 config
    - ARC: bpf: Correct conditional check in 'check_jmp_32'
    - bpf: refactor bpf_helper_changes_pkt_data to use helper number
    - bpf: consider that tail calls invalidate packet pointers
    - clk: thead: Fix TH1520 emmc and shdci clock rate
    - scripts/mksysmap: Fix escape chars '$'
    - kbuild: pacman-pkg: provide versioned linux-api-headers package
    - RDMA/mlx5: Enable multiplane mode only when it is supported
    - ftrace: Fix function profiler's filtering functionality
    - drm/xe: Use non-interruptible wait when moving BO to system
    - drm/xe: Wait for migration job before unmapping pages
    - maple_tree: reload mas before the second call for mas_empty_area
    - io_uring/rw: fix downgraded mshot read
    - wifi: iwlwifi: mvm: Fix __counted_by usage in cfg80211_wowlan_nd_*
    - net: ethernet: ti: am65-cpsw: default to round-robin for host port receive
    - mm/damon/core: fix ignored quota goals and filters of newly committed
      schemes
    - mm: shmem: fix incorrect index alignment for within_size policy
    - fs/proc/task_mmu: fix pagemap flags with PMD THP entries on 32bit
    - gve: process XSK TX descriptors as part of RX NAPI
    - gve: clean XDP queues in gve_tx_stop_ring_gqi
    - gve: fix XDP allocation path in edge cases
    - gve: trigger RX NAPI instead of TX NAPI in gve_xsk_wakeup
    - mm/readahead: fix large folio support in async readahead
    - mm/hugetlb: enforce that PMD PT sharing has split PMD PT locks
    - Upstream stable to v6.6.70, v6.12.9
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57883
    - mm: hugetlb: independent PMD page table shared count
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57886
    - mm/damon/core: fix new damon_target objects leaks on damon_commit_targets()
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57934
    - fgraph: Add READ_ONCE() when accessing fgraph_array[]
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57888
    - workqueue: Do not warn when cancelling WQ_MEM_RECLAIM work from
      !WQ_MEM_RECLAIM worker
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57894
    - Bluetooth: hci_core: Fix sleeping function called from invalid context
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57898
    - wifi: cfg80211: clear link ID from bitmap during link delete after clean up
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2025-21630
    - io_uring/net: always initialize kmsg->msg.msg_inq upfront
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-53681
    - nvmet: Don't overflow subsysnqn
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57795
    - RDMA/rxe: Remove the direct link to net_device
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57935
    - RDMA/hns: Fix accessing invalid dip_ctx during destroying QP
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57857
    - RDMA/siw: Remove direct link to net_device
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57882
    - mptcp: fix TCP options overflow.
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57884
    - mm: vmscan: account for free pages to prevent infinite Loop in
      throttle_direct_reclaim()
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57885
    - mm/kmemleak: fix sleeping function called from invalid context at print
      message
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57932
    - gve: guard XDP xmit NDO on existence of xdp queues
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57933
    - gve: guard XSK operations on the existence of queues
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57887
    - drm: adv7511: Fix use-after-free in adv7533_attach_dsi()
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57938
    - net/sctp: Prevent autoclose integer overflow in sctp_association_init()
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57889
    - pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57890
    - RDMA/uverbs: Prevent integer overflow issue
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57892
    - ocfs2: fix slab-use-after-free due to dangling pointer dqi_priv
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57893
    - ALSA: seq: oss: Fix races at processing SysEx messages
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57895
    - ksmbd: set ATTR_CTIME flags when setting mtime
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57896
    - btrfs: flush delalloc workers queue before stopping cleaner kthread during
      unmount
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57897
    - drm/amdkfd: Correct the migration DMA map direction
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57899
    - wifi: mac80211: fix mbss changed flags corruption on 32 bit systems
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57900
    - ila: serialize calls to nf_register_net_hooks()
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57901
    - af_packet: fix vlan_get_protocol_dgram() vs MSG_PEEK
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57902
    - af_packet: fix vlan_get_tci() vs MSG_PEEK
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57903
    - net: restrict SO_REUSEPORT to inet sockets
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2025-21629
    - net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-36476
    - RDMA/rtrs: Ensure 'ib_sge list' is accessible
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-39282
    - net: wwan: t7xx: Fix FSM command timeout issue
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57801
    - net/mlx5e: Skip restore TC rules for vport rep without loaded flag
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57802
    - netrom: check buffer length before accessing it
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57841
    - net: fix memory leak in tcp_conn_request()
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-57931
    - selinux: ignore unknown extended permissions
  * Oracular update: upstream stable patchset 2025-02-10 (LP: #2097738) //
    CVE-2024-53179
    - smb: client: fix use-after-free of signing key
  * VM boots slowly with large-BAR GPU Passthrough due to pci/probe.c redundancy
    (LP: #2097389)
    - PCI: Batch BAR sizing operations
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531)
    - ceph: allocate sparse_ext map only for sparse reads
    - mm/vmstat: fix a W=1 clang compiler warning
    - tcp_bpf: Charge receive socket buffer in bpf_tcp_ingress()
    - tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection
    - bpf: Check negative offsets in __bpf_skb_min_len()
    - nfsd: Revert "nfsd: release svc_expkey/svc_export with rcu_work"
    - nfsd: restore callback functionality for NFSv4.0
    - mtd: diskonchip: Cast an operand to prevent potential overflow
    - mtd: rawnand: arasan: Fix double assertion of chip-select
    - mtd: rawnand: arasan: Fix missing de-registration of NAND
    - phy: qcom-qmp: Fix register name in RX Lane config of SC8280XP
    - phy: core: Fix an OF node refcount leakage in _of_phy_get()
    - phy: core: Fix an OF node refcount leakage in of_phy_provider_lookup()
    - phy: core: Fix that API devm_phy_put() fails to release the phy
    - phy: core: Fix that API devm_of_phy_provider_unregister() fails to
      unregister the phy provider
    - phy: core: Fix that API devm_phy_destroy() fails to destroy the phy
    - phy: usb: Toggle the PHY power during init
    - phy: rockchip: naneng-combphy: fix phy reset
    - dmaengine: mv_xor: fix child node refcount handling in early exit
    - dmaengine: dw: Select only supported masters for ACPI devices
    - dmaengine: tegra: Return correct DMA status when paused
    - dmaengine: fsl-edma: implement the cleanup path of fsl_edma3_attach_pd()
    - dmaengine: apple-admac: Avoid accessing registers in probe
    - stddef: make __struct_group() UAPI C++-friendly
    - tracing/kprobe: Make trace_kprobe's module callback called after jump_label
      update
    - watchdog: it87_wdt: add PWRGD enable quirk for Qotom QCML04
    - watchdog: mediatek: Add support for MT6735 TOPRGU/WDT
    - scsi: qla1280: Fix hw revision numbering for ISP1020/1040
    - udf: Skip parent dir link count update if corrupted
    - ALSA: hda/conexant: fix Z60MR100 startup pop issue
    - ALSA: sh: Use standard helper for buffer accesses
    - smb: server: Fix building with GCC 15
    - regmap: Use correct format specifier for logging range errors
    - LoongArch: Fix reserving screen info memory for above-4G firmware
    - LoongArch: BPF: Adjust the parameter of emit_jirl()
    - platform/x86: asus-nb-wmi: Ignore unknown event 0xCF
    - spi: intel: Add Panther Lake SPI controller support
    - scsi: mpt3sas: Diag-Reset when Doorbell-In-Use bit is set during driver load
      time
    - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN
      as an error
    - spi: omap2-mcspi: Fix the IS_ERR() bug for devm_clk_get_optional_enabled()
    - spi: omap2-mcspi: Correctly handle devm_clk_get_optional() errors
    - blk-mq: register cpuhp callback after hctx is added to xarray table
    - freezer, sched: Report frozen tasks as 'D' instead of 'R'
    - tracing: Constify string literal data member in struct trace_event_call
    - io_uring/sqpoll: fix sqpoll error handling races
    - i2c: microchip-core: actually use repeated sends
    - i2c: imx: add imx7d compatible string for applying erratum ERR007805
    - i2c: microchip-core: fix "ghost" detections
    - btrfs: sysfs: fix direct super block member reads
    - ALSA: sh: Fix wrong argument order for copy_from_iter()
    - fork: avoid inappropriate uprobe access to invalid mm
    - smb: client: Deduplicate "select NETFS_SUPPORT" in Kconfig
    - smb: fix bytes written value in /proc/fs/cifs/Stats
    - ASoC: amd: ps: Fix for enabling DMIC on acp63 platform via _DSD entry
    - ASoC: dt-bindings: realtek,rt5645: Fix CPVDD voltage comment
    - power: supply: bq24190: Fix BQ24296 Vbus regulator support
    - watchdog: rzg2l_wdt: Power on the watchdog domain in the restart handler
    - Revert "watchdog: s3c2410_wdt: use exynos_get_pmu_regmap_by_phandle() for
      PMU regs"
    - udf: Verify inode link counts before performing rename
    - ALSA: ump: Don't open legacy substream for an inactive group
    - ALSA: ump: Indicate the inactive group in legacy substream names
    - ALSA: ump: Update legacy substream names upon FB info update
    - bpf: Zero index arg error string for dynptr and iter
    - scsi: mpi3mr: Synchronize access to ioctl data buffer
    - scsi: mpi3mr: Start controller indexing from 0
    - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11
    - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A
    - wifi: iwlwifi: be less noisy if the NIC is dead in S3
    - objtool: Add bch2_trans_unlocked_error() to bcachefs noreturns
    - dmaengine: loongson2-apb: Change GENMASK to GENMASK_ULL
    - perf/x86/intel/uncore: Add Clearwater Forest support
    - rtla/timerlat: Fix histogram ALL for zero samples
    - perf/x86/intel: Fix bitmask of OCR and FRONTEND events for LNC
    - perf/x86/intel/ds: Add PEBS format 6
    - power: supply: cros_charge-control: add mutex for driver data
    - power: supply: cros_charge-control: allow start_threshold == end_threshold
    - power: supply: cros_charge-control: hide start threshold on v2 cmd
    - btrfs: add and use helper to verify the calling task has locked the inode
    - btrfs: fix race with memory mapped writes when activating swap file
    - btrfs: fix swap file activation failure due to extents that used to be
      shared
    - btrfs: check folio mapping after unlock in put_file_data()
    - btrfs: allow swap activation to be interruptible
    - btrfs: avoid monopolizing a core when activating a swap file
    - Bluetooth: btusb: mediatek: move Bluetooth power off command position
    - Bluetooth: btusb: mediatek: add callback function in btusb_disconnect
    - Bluetooth: btusb: mediatek: change the conditions for ISO interface
    - ALSA: ump: Shut up truncated string warning
    - Upstream stable to v6.6.69, v6.12.8
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56757
    - Bluetooth: btusb: mediatek: add intf release flow when usb disconnect
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56758
    - btrfs: check folio mapping after unlock in relocate_one_folio()
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56759
    - btrfs: fix use-after-free when COWing tree bock and tracing is enabled
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57806
    - btrfs: fix transaction atomicity bug when enabling simple quotas
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57793
    - virt: tdx-guest: Just leak decrypted memory on unrecoverable errors
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56761
    - x86/fred: Clear WFE in missing-ENDBRANCH #CPs
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56764
    - ublk: detach gendisk from ublk device if add_disk() fails
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57804
    - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sysfs
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57805
    - ASoC: SOF: Intel: hda-dai: Do not release the link DMA on STOP
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57799
    - phy: rockchip: samsung-hdptx: Set drvdata before enabling runtime PM
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56768
    - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57792
    - power: supply: gpio-charger: Fix set charge current limits
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56760
    - PCI/MSI: Handle lack of irqdomain gracefully
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56763
    - tracing: Prevent bad count for tracing_cpumask_write
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57946
    - virtio-blk: don't keep queue frozen during system suspend
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57798
    - drm/dp_mst: Ensure mst_primary pointer is valid in
      drm_dp_mst_handle_up_req()
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-57807
    - scsi: megaraid_sas: Fix for a potential deadlock
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56765
    - powerpc/pseries/vas: Add close() callback in vas_vm_ops struct
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56766
    - mtd: rawnand: fix double free in atmel_pmecc_create_user()
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56767
    - dmaengine: at_xdmac: avoid null_prt_deref in at_xdmac_prep_dma_memset
  * Oracular update: upstream stable patchset 2025-02-06 (LP: #2097531) //
    CVE-2024-56769
    - media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413)
    - p2sb: Factor out p2sb_read_from_cache()
    - p2sb: Introduce the global flag p2sb_hidden_by_bios
    - p2sb: Move P2SB hide and unhide code to p2sb_scan_and_cache()
    - p2sb: Do not scan and remove the P2SB device when it is unhidden
    - i2c: pnx: Fix timeout in wait functions
    - tools: hv: change permissions of NetworkManager configuration file
    - cxl/pci: Fix potential bogus return value upon successful probing
    - cxl/region: Fix region creation for greater than x2 switches
    - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll
    - ionic: use ee->offset when returning sprom data
    - net: renesas: rswitch: rework ts tags management
    - ksmbd: count all requests in req_running counter
    - ksmbd: fix broken transfers when exceeding max simultaneous operations
    - net: hinic: Fix cleanup in create_rxqs/txqs()
    - net: ethernet: bgmac-platform: fix an OF node reference leak
    - ipvs: Fix clamp() of ip_vs_conn_tab on small memory systems
    - netfilter: ipset: Fix for recursive locking warning
    - selftests: openvswitch: fix tcpdump execution
    - net: mdiobus: fix an OF node reference leak
    - mmc: sdhci-tegra: Remove SDHCI_QUIRK_BROKEN_ADMA_ZEROLEN_DESC quirk
    - mmc: mtk-sd: disable wakeup in .remove() and in the error path of .probe()
    - EDAC/amd64: Simplify ECC check on unified memory controllers
    - chelsio/chtls: prevent potential integer overflow on 32bit
    - i2c: riic: Always round-up when calculating bus period
    - efivarfs: Fix error on non-existent file
    - hexagon: Disable constant extender optimization for LLVM prior to 19.1.0
    - USB: serial: option: add TCL IK512 MBIM & ECM
    - USB: serial: option: add MeiG Smart SLM770A
    - USB: serial: option: add Netprisma LCUK54 modules for WWAN Ready
    - USB: serial: option: add MediaTek T7XX compositions
    - USB: serial: option: add Telit FE910C04 rmnet compositions
    - thunderbolt: Improve redrive mode handling
    - drm/panel: novatek-nt35950: fix return value check in nt35950_probe()
    - i915/guc: Reset engine utilization buffer before registration
    - i915/guc: Ensure busyness counter increases motonically
    - i915/guc: Accumulate active runtime on gt reset
    - hwmon: (tmp513) Fix interpretation of values of Shunt Voltage and Limit
      Registers
    - hwmon: (tmp513) Fix Current Register value interpretation
    - hwmon: (tmp513) Fix interpretation of values of Temperature Result and Limit
      Registers
    - zram: refuse to use zero sized block device as backing device
    - zram: fix uninitialized ZRAM not releasing backing device
    - zram: fix potential UAF of zram table
    - vmalloc: fix accounting with i915
    - btrfs: tree-checker: reject inline extent items with 0 ref count
    - tracing: Fix test_event_printk() to process entire print argument
    - tracing: Add missing helper functions in event pointer dereference check
    - tracing: Add "%s" check in test_event_printk()
    - tracing: Have process_string() also allow arrays
    - selftests/memfd: run sysctl tests when PID namespace support is enabled
    - selftests/bpf: Use asm constraint "m" for LoongArch
    - io_uring: Fix registered ring file refcount leak
    - NFS/pnfs: Fix a live lock between recalled layouts and layoutget
    - of/irq: Fix interrupt-map cell length check in of_irq_parse_imap_parent()
    - of/irq: Fix using uninitialized variable @addr_len in API of_irq_parse_one()
    - nilfs2: fix buffer head leaks in calls to truncate_inode_pages()
    - udmabuf: also check for F_SEAL_FUTURE_WRITE
    - of: Fix error path in of_parse_phandle_with_args_map()
    - of: Fix refcount leakage for OF node returned by __of_get_dma_parent()
    - ceph: validate snapdirname option length when mounting
    - ceph: improve error handling and short/overflow-read logic in
      __ceph_sync_read()
    - ceph: fix memory leaks in __ceph_sync_read()
    - epoll: Add synchronous wakeup support for ep_poll_callback
    - firmware: arm_ffa: Fix the race around setting ffa_dev->properties
    - RISC-V: KVM: Fix csr_write -> csr_set for HVIEN PMU overflow bit
    - s390/ipl: Fix never less than zero warning
    - erofs: fix PSI memstall accounting
    - s390/mm: Consider KMSAN modules metadata for paging levels
    - xfs: sb_spino_align is not verified
    - xfs: fix sparse inode limits on runt AG
    - xfs: fix off-by-one error in fsmap's end_daddr usage
    - xfs: fix sb_spino_align checks for large fsblock sizes
    - xfs: fix zero byte checking in the superblock scrubber
    - tools/net/ynl: fix sub-message key lookup for nested attributes
    - netdev: fix repeated netlink messages in queue dump
    - netdev: fix repeated netlink messages in queue stats
    - team: Fix feature exposure when no ports are present
    - can: m_can: set init flag earlier in probe
    - can: m_can: fix missed interrupts with m_can_pci
    - net: dsa: restore dsa_software_vlan_untag() ability to operate on VLAN-
      untagged traffic
    - netdev-genl: avoid empty messages in queue dump
    - psample: adjust size if rate_as_probability is set
    - irqchip/gic-v3: Work around insecure GIC integrations
    - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden
    - KVM: arm64: Fix set_id_regs selftest for ASIDBITS becoming unwritable
    - net: mctp: handle skb cleanup on sock_queue failures
    - xhci: Turn NEC specific quirk for handling Stop Endpoint errors generic
    - thunderbolt: Add support for Intel Panther Lake-M/P
    - thunderbolt: Don't display nvm_version unless upgrade supported
    - drm/display: use ERR_PTR on DP tunnel manager creation fail
    - drm/amd: Update strapping for NBIO 2.5.0
    - drm/amdgpu: fix amdgpu_coredump
    - drm/amdgpu: Handle NULL bo->tbo.resource (again) in amdgpu_vm_bo_update
    - udmabuf: udmabuf_create pin folio codestyle cleanup
    - dma-buf: Fix __dma_buf_debugfs_list_del argument for !CONFIG_DEBUG_FS
    - drm/panel: st7701: Add prepare_prev_first flag to drm_panel
    - drm/panel: synaptics-r63353: Fix regulator unbalance
    - drm/amdgpu/nbio7.11: fix IP version check
    - drm/amdgpu/nbio7.7: fix IP version check
    - drm/amdgpu/smu14.0.2: fix IP version check
    - alloc_tag: fix set_codetag_empty() when !CONFIG_MEM_ALLOC_PROFILING_DEBUG
    - btrfs: split bios to the fs sector size boundary
    - btrfs: fix improper generation check in snapshot delete
    - s390/mm: Fix DirectMap accounting
    - drm/amdgpu/nbio7.0: fix IP version check
    - drm/amdgpu/gfx12: fix IP version check
    - drm/amdgpu/mmhub4.1: fix IP version check
    - fgraph: Still initialize idle shadow stacks when starting
    - tools: hv: Fix a complier warning in the fcopy uio daemon
    - x86/hyperv: Fix hv tsc page based sched_clock for hibernation
    - ocfs2: fix the space leak in LA when releasing LA
    - udmabuf: fix racy memfd sealing check
    - of: property: fw_devlink: Do not use interrupt-parent directly
    - of: address: Preserve the flags portion on 1:1 dma-ranges mapping
    - Upstream stable to v6.6.68, v6.12.7
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-51729
    - mm: use aligned address in copy_user_gigantic_page()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-52319
    - mm: use aligned address in clear_gigantic_page()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56710
    - ceph: fix memory leak in ceph_direct_read_write()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-53685
    - ceph: give up on paths longer than PATH_MAX
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-54193
    - accel/ivpu: Fix WARN in ivpu_ipc_send_receive_internal()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-54455
    - accel/ivpu: Fix general protection fault in ivpu_bo_list()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56368
    - ring-buffer: Fix overflow in __rb_map_vma
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-57881
    - mm/page_alloc: don't call pfn_to_page() on possibly non-existent PFN in
      split_large_buddy()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56711
    - drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereference
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56712
    - udmabuf: fix memory leak on last export_udmabuf() error path
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56713
    - net: netdevsim: fix nsim_pp_hold_write()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56714
    - ionic: no double destroy workqueue
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56719
    - net: stmmac: fix TSO DMA API usage causing oops
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-53690
    - nilfs2: prevent use of deleted inode
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56709
    - io_uring: check if iowq is killed before queuing
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-54680
    - smb: client: fix TCP timers deadlock after rmmod
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-55881
    - KVM: x86: Play nice with protected guests in complete_hypercall_exit()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-55916
    - Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56369
    - drm/modes: Avoid divide by zero harder in drm_mode_vrefresh()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56372
    - net: tun: fix tun_napi_alloc_frags()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56715
    - ionic: Fix netdev notifier unregister on failure
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56716
    - netdevsim: prevent bad user input in nsim_dev_health_break_write()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56717
    - net: mscc: ocelot: fix incorrect IFH SRC_PORT field in
      ocelot_ifh_set_basic()
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-57791
    - net/smc: check return value of sock_recvmsg when draining clc data
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-47408
    - net/smc: check smcd_v2_ext_offset when receiving proposal msg
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-49568
    - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-49571
    - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal
      msg
  * Oracular update: upstream stable patchset 2025-02-05 (LP: #2097413) //
    CVE-2024-56718
    - net/smc: protect link down work from execute after lgr freed
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332)
    - perf/x86/intel/ds: Unconditionally drain PEBS DS when changing PEBS_DATA_CFG
    - ksmbd: fix racy issue from session lookup and expire
    - splice: do not checksum AF_UNIX sockets
    - tcp: check space before adding MPTCP SYN options
    - riscv: Fix wrong usage of __pa() on a fixmap address
    - ALSA: usb-audio: Add implicit feedback quirk for Yamaha THR5
    - usb: host: max3421-hcd: Correctly abort a USB request.
    - ata: sata_highbank: fix OF node reference leak in highbank_initialize_phys()
    - usb: dwc2: Fix HCD resume
    - usb: dwc2: hcd: Fix GetPortStatus & SetPortFeature
    - usb: dwc2: Fix HCD port connection race
    - scsi: ufs: core: Update compl_time_stamp_local_clock after completing a cqe
    - usb: gadget: midi2: Fix interpretation of is_midi1 bits
    - usb: ehci-hcd: fix call balance of clocks handling routines
    - usb: typec: anx7411: fix fwnode_handle reference leak
    - usb: typec: anx7411: fix OF node reference leaks in
      anx7411_typec_switch_probe()
    - usb: dwc3: xilinx: make sure pipe clock is deselected in usb2 only mode
    - drm/i915: Fix memory leak by correcting cache object name in error handler
    - xfs: update btree keys correctly when _insrec splits an inode root block
    - xfs: don't drop errno values when we fail to ficlone the entire range
    - xfs: return from xfs_symlink_verify early on V4 filesystems
    - xfs: fix scrub tracepoints when inode-rooted btrees are involved
    - xfs: only run precommits once per transaction object
    - bpf: Check size for BTF-based ctx access of pointer members
    - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func()
    - bpf, sockmap: Fix update element with same
    - wifi: mac80211: init cnt before accessing elem in
      ieee80211_copy_mbssid_beacon
    - wifi: mac80211: fix station NSS capability initialization order
    - batman-adv: Do not send uninitialized TT changes
    - batman-adv: Remove uninitialized data in full table TT response
    - batman-adv: Do not let TT changes list grows indefinitely
    - wifi: cfg80211: sme: init n_channels before channels[] access
    - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case
    - selftests: mlxsw: sharedbuffer: Remove duplicate test cases
    - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted
    - ptp: kvm: x86: Return EOPNOTSUPP instead of ENODEV from kvm_arch_ptp_init()
    - net: mscc: ocelot: fix memory leak on ocelot_port_add_txtstamp_skb()
    - net: mscc: ocelot: improve handling of TX timestamp for unknown skb
    - net: mscc: ocelot: ocelot->ts_id_lock and ocelot_port->tx_skbs.lock are IRQ-
      safe
    - net: mscc: ocelot: be resilient to loss of PTP packets during transmission
    - net: mscc: ocelot: perform error cleanup in ocelot_hwstamp_set()
    - spi: aspeed: Fix an error handling path in aspeed_spi_[read|write]_user()
    - net: sparx5: fix FDMA performance issue
    - net: sparx5: fix the maximum frame length register
    - ACPI: resource: Fix memory resource type union access
    - cxgb4: use port number to set mac addr
    - qca_spi: Fix clock speed for multiple QCA7000
    - qca_spi: Make driver probing reliable
    - ASoC: amd: yc: Fix the wrong return value
    - Documentation: PM: Clarify pm_runtime_resume_and_get() return value
    - net: renesas: rswitch: fix race window between tx start and complete
    - net: renesas: rswitch: fix leaked pointer on error path
    - net: renesas: rswitch: handle stop vs interrupt race
    - net: dsa: felix: fix stuck CPU-injected packets with short taprio windows
    - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    - team: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL
    - ACPICA: events/evxfregn: don't release the ContextMutex that was never
      acquired
    - Bluetooth: iso: Fix recursive locking warning
    - Bluetooth: SCO: Add support for 16 bits transparent voice setting
    - net: renesas: rswitch: fix initial MPIC register setting
    - net: dsa: microchip: KSZ9896 register regmap alignment to 32 bit boundaries
    - blk-iocost: Avoid using clamp() on inuse in __propagate_weights()
    - kselftest/arm64: abi: fix SVCR detection
    - KVM: arm64: Disable MPAM visibility by default and ignore VMM writes
    - selftests/bpf: remove use of __xlated()
    - xen/netfront: fix crash when removing device
    - x86: make get_cpu_vendor() accessible from Xen code
    - objtool/x86: allow syscall instruction
    - x86/static-call: provide a way to do very early static-call updates
    - x86/static-call: Remove early_boot_irqs_disabled check to fix Xen PVH dom0
    - x86/asm: Make serialize() always_inline
    - x86/xen: don't do PV iret hypercall through hypercall page
    - x86/xen: add central hypercall functions
    - x86/xen: use new hypercall functions instead of hypercall page
    - x86/xen: remove hypercall page
    - x86/static-call: fix 32-bit build
    - serial: sh-sci: Check if TX data was written to device in .tx_empty()
    - clk: en7523: Fix wrong BUS clock for EN7581
    - block: Switch to using refcount_t for zone write plugs
    - block: Use a zone write plug BIO work for REQ_NOWAIT BIOs
    - dm: Fix dm-zoned-reclaim zone write pointer alignment
    - gpio: graniterapids: Fix GPIO Ack functionality
    - spi: rockchip: Fix PM runtime count on no-op cs
    - gpio: ljca: Initialize num before accessing item in ljca_gpio_config
    - ALSA: hda/realtek: Fix headset mic on Acer Nitro 5
    - crypto: hisilicon/debugfs - fix the struct pointer incorrectly offset
      problem
    - block: Ignore REQ_NOWAIT for zone reset and zone finish operations
    - gpio: graniterapids: Fix incorrect BAR assignment
    - gpio: graniterapids: Fix invalid GPI_IS register offset
    - gpio: graniterapids: Fix invalid RXEVCFG register bitmask
    - gpio: graniterapids: Determine if GPIO pad can be used by driver
    - gpio: graniterapids: Check if GPIO line can be used for IRQs
    - usb: core: hcd: only check primary hcd skip_phy_initialization
    - bpf: Revert "bpf: Mark raw_tp arguments with PTR_MAYBE_NULL"
    - usb: typec: ucsi: Fix completion notifications
    - drm/xe: Call invalidation_fence_fini for PT inval fences in error state
    - drm/amdkfd: pause autosuspend when creating pdd
    - drm/amdkfd: fixed page fault when enable MES shader debugger
    - drm/i915/dsb: s/dsb/dsb_color_vblank/
    - drm/i915/color: Stop using non-posted DSB writes for legacy LUT
    - drm/amdgpu: fix UVD contiguous CS mapping problem
    - drm/amd/pm: Set SMU v13.0.7 default workload type
    - drm/amdkfd: hard-code cacheline size for gfx11
    - drm/amdkfd: hard-code MALL cacheline size for gfx11, gfx12
    - xfs: set XFS_SICK_INO_SYMLINK_ZAPPED explicitly when zapping a symlink
    - xfs: return a 64-bit block count from xfs_btree_count_blocks
    - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL
    - wifi: mac80211: fix a queue stall in certain cases of CSA
    - perf machine: Initialize machine->env to address a segfault
    - bnxt_en: Fix GSO type for HW GRO packets on 5750X chips
    - block: get wp_offset by bdev_offset_from_zone_start
    - cifs: Fix rmdir failure due to ongoing I/O on deleted file
    - net: renesas: rswitch: fix possible early skb release
    - Bluetooth: Improve setsockopt() handling of malformed user input
    - libperf: evlist: Fix --cpu argument on hybrid platform
    - ASoC: fsl_xcvr: change IFACE_PCM to IFACE_MIXER
    - ASoC: fsl_spdif: change IFACE_PCM to IFACE_MIXER
    - selftests: netfilter: Stabilize rpath.sh
    - net: mana: Fix memory leak in mana_gd_setup_irqs
    - net: mana: Fix irq_contexts memory leak in mana_gd_setup_irqs
    - net, team, bonding: Add netdev_base_features helper
    - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features
    - team: Fix initial vlan_feature set in __team_compute_features
    - net: dsa: tag_ocelot_8021q: fix broken reception
    - drm/xe: fix the ERR_PTR() returned on failure to allocate tiny pt
    - blk-mq: move cpuhp callback registering out of q->sysfs_lock
    - block: avoid to reuse `hctx` not removed from cpuhp callback list
    - rust: kbuild: set `bindgen`'s Rust target version
    - Upstream stable to v6.6.67, v6.12.6
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56652
    - drm/xe/reg_sr: Remove register pool
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-54191
    - Bluetooth: iso: Fix circular lock in iso_conn_big_sync
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-54460
    - Bluetooth: iso: Fix circular lock in iso_listen_bis
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-57879
    - Bluetooth: iso: Always release hdev at the end of iso_listen_bis
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-57880
    - ASoC: Intel: sof_sdw: Add space for a terminator into DAIs array
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56656
    - bnxt_en: Fix aggregation ID mask to prevent oops on 5760X chips
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-53682
    - regulator: axp20x: AXP717: set ramp_delay
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-55641
    - xfs: unlock inodes when erroring out of xfs_trans_alloc_dir
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56671
    - gpio: graniterapids: Fix vGPIO driver crash
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-55642
    - block: Prevent potential deadlocks in zone write plug error recovery
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56673
    - riscv: mm: Do not call pmd dtor on vmemmap page table teardown
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56653
    - Bluetooth: btmtk: avoid UAF in btmtk_process_coredump
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56654
    - Bluetooth: hci_event: Fix using rcu_read_(un)lock while iterating
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56770
    - net/sched: netem: account for backlog updates from child qdisc
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56655
    - netfilter: nf_tables: do not defer rule destruction via call_rcu
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-54683
    - netfilter: IDLETIMER: Fix for possible ABBA deadlock
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-55639
    - net: renesas: rswitch: avoid use-after-put for a device tree node
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56657
    - ALSA: control: Avoid WARN() for symlink errors
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56659
    - net: lapb: increase LAPB_HEADER_LEN
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56660
    - net/mlx5: DR, prevent potential error pointer dereference
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56662
    - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56663
    - wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56664
    - bpf, sockmap: Fix race between element replace and close()
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56665
    - bpf,perf: Fix invalid prog_array access in perf_event_detach_bpf_prog
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56667
    - drm/i915: Fix NULL pointer dereference in capture_engine
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56670
    - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to
      accessing null pointer
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-53687
    - riscv: Fix IPIs usage in kfence_protect_page()
  * Oracular update: upstream stable patchset 2025-02-04 (LP: #2097332) //
    CVE-2024-56675
    - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors
  * CVE-2024-56669
    - iommu/vt-d: Remove cache tags before disabling ATS
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827)
    - iTCO_wdt: mask NMI_NOW bit for update_no_reboot_bit() call
    - watchdog: xilinx_wwdt: Calculate max_hw_heartbeat_ms using clock frequency
    - watchdog: apple: Actually flush writes after requesting watchdog restart
    - watchdog: mediatek: Make sure system reset gets asserted in
      mtk_wdt_restart()
    - can: gs_usb: add usb endpoint address detection at driver probe step
    - can: c_can: c_can_handle_bus_err(): update statistics if skb allocation
      fails
    - can: sun4i_can: sun4i_can_err(): call can_change_state() even if cf is NULL
    - can: m_can: m_can_handle_lec_err(): fix {rx,tx}_errors statistics
    - can: ifi_canfd: ifi_canfd_handle_lec_err(): fix {rx,tx}_errors statistics
    - can: hi311x: hi3110_can_ist(): fix {rx,tx}_errors statistics
    - can: sja1000: sja1000_err(): fix {rx,tx}_errors statistics
    - can: sun4i_can: sun4i_can_err(): fix {rx,tx}_errors statistics
    - can: ems_usb: ems_usb_rx_err(): fix {rx,tx}_errors statistics
    - can: f81604: f81604_handle_can_bus_errors(): fix {rx,tx}_errors statistics
    - ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
    - selftests: hid: fix typo and exit code
    - ptp: Add error handling for adjfine callback in ptp_clock_adjtime
    - net/sched: tbf: correct backlog statistic for GSO packets
    - platform/x86: asus-wmi: add support for vivobook fan profiles
    - platform/x86: asus-wmi: Fix inconsistent use of thermal policies
    - platform/x86: asus-wmi: Ignore return value when writing thermal policy
    - tipc: fix NULL deref in cleanup_bearer()
    - net/qed: allow old cards not supporting "num_images" to work
    - ixgbevf: stop attempting IPSEC offload on Mailbox API 1.5
    - ixgbe: downgrade logging of unsupported VF API version to debug
    - net: sched: fix erspan_opt settings in cls_flower
    - netfilter: nft_set_hash: skip duplicated elements pending gc run
    - netfilter: nft_set_hash: unaligned atomic read on struct nft_set_ext
    - ethtool: Fix wrong mod state in case of verbose and no_mask bitset
    - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst
    - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4
    - net/mlx5e: Remove workaround to avoid syndrome for internal port
    - gpio: grgpio: use a helper variable to store the address of ofdev->dev
    - soc: fsl: cpm1: qmc: Fix blank line and spaces
    - soc: fsl: cpm1: qmc: Re-order probe() operations
    - soc: fsl: cpm1: qmc: Introduce qmc_init_resource() and its CPM1 version
    - soc: fsl: cpm1: qmc: Introduce qmc_{init,exit}_xcc() and their CPM1 version
    - soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure
    - mmc: mtk-sd: use devm_mmc_alloc_host
    - mmc: mtk-sd: Fix error handle of probe function
    - mmc: mtk-sd: fix devm_clk_get_optional usage
    - mmc: mtk-sd: Fix MMC_CAP2_CRYPTO flag setting
    - zram: do not mark idle slots that cannot be idle
    - zram: clear IDLE flag in mark_idle()
    - ntp: Remove invalid cast in time offset math
    - i3c: master: support to adjust first broadcast address speed
    - i3c: master: Fix missing 'ret' assignment in set_speed()
    - i3c: master: svc: use slow speed for first broadcast address
    - i3c: master: Replace hard code 2 with macro I3C_ADDR_SLOT_STATUS_BITS
    - i3c: master: Extend address status bit to 4 and add
      I3C_ADDR_SLOT_EXT_DESIRED
    - i3c: master: Fix dynamic address leak when 'assigned-address' is present
    - scsi: ufs: core: Always initialize the UIC done completion
    - scsi: ufs: core: Add ufshcd_send_bsg_uic_cmd() for UFS BSG
    - bpf, vsock: Fix poll() missing a queue
    - bpf, vsock: Invoke proto::close on close()
    - xsk: always clear DMA mapping information when unmapping the pool
    - bpftool: fix potential NULL pointer dereferencing in prog_dump()
    - drm/sti: Add __iomem for mixer_dbg_mxn's parameter
    - ALSA: ump: Update substream name from assigned FB names
    - ALSA: seq: ump: Fix seq port updates per FB info notify
    - ALSA: usb-audio: Notify xrun for low-latency mode
    - tools: Override makefile ARCH variable if defined, but empty
    - ASoC: SOF: ipc3-topology: Convert the topology pin index to ALH dai index
    - ASoC: SOF: ipc3-topology: fix resource leaks in
      sof_ipc3_widget_setup_comp_dai()
    - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots
    - scsi: scsi_debug: Fix hrtimer support for ndelay
    - ASoC: mediatek: mt8188-mt6359: Remove hardcoded dmic codec
    - drm/v3d: Enable Performance Counters before clearing them
    - scatterlist: fix incorrect func name in kernel-doc
    - iio: magnetometer: yas530: use signed integer type for clamp limits
    - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie
    - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem
    - bpf: Handle in-place update for full LPM trie correctly
    - bpf: Fix exact match conditions in trie_get_next_key()
    - x86/CPU/AMD: WARN when setting EFER.AUTOIBRS if and only if the WRMSR fails
    - watchdog: rti: of: honor timeout-sec property
    - can: mcp251xfd: mcp251xfd_get_tef_len(): work around erratum DS80000789E 6.
    - tracing: Fix cmp_entries_dup() to respect sort() comparison rules
    - arm64: Ensure bits ASID[15:8] are masked out when the kernel uses 8-bit
      ASIDs
    - ALSA: usb-audio: add mixer mapping for Corsair HS80
    - ALSA: hda/realtek: Enable mute and micmute LED on HP ProBook 430 G8
    - ALSA: hda/realtek: Add support for Samsung Galaxy Book3 360 (NP730QFG)
    - scsi: qla2xxx: Fix abort in bsg timeout
    - scsi: qla2xxx: Fix NVMe and NPIV connect issue
    - scsi: qla2xxx: Supported speed displayed incorrectly for VPorts
    - scsi: qla2xxx: Remove check req_sg_cnt should be equal to rsp_sg_cnt
    - scsi: ufs: core: Add missing post notify for power mode change
    - fs/smb/client: avoid querying SMB2_OP_QUERY_WSL_EA for SMB3 POSIX
    - fs/smb/client: Implement new SMB3 POSIX type
    - fs/smb/client: cifs_prime_dcache() for SMB3 POSIX reparse points
    - smb3.1.1: fix posix mounts to older servers
    - drm/dp_mst: Verify request type in the corresponding down message reply
    - modpost: Add .irqentry.text to OTHER_SECTIONS
    - x86/kexec: Restore GDT on return from ::preserve_context kexec
    - dma-buf: fix dma_fence_array_signaled v4
    - dma-fence: Fix reference leak on fence merge failure path
    - dma-fence: Use kernel's sort for merging fences
    - regmap: detach regmap from dev on regmap_exit
    - mmc: sdhci-pci: Add DMI quirk for missing CD GPIO on Vexia Edu Atla 10
      tablet
    - mmc: core: Further prevent card detect during shutdown
    - ocfs2: update seq_file index in ocfs2_dlm_seq_next
    - lib: stackinit: hide never-taken branch from compiler
    - kasan: make report_lock a raw spinlock
    - x86/mm: Add _PAGE_NOPTISHADOW bit to avoid updating userspace page tables
    - epoll: annotate racy check
    - kselftest/arm64: Log fp-stress child startup errors to stdout
    - btrfs: avoid unnecessary device path update for the same device
    - btrfs: do not clear read-only when adding sprout device
    - kselftest/arm64: Don't leak pipe fds in pac.exec_sign_all()
    - hwmon: (nct6775) Add 665-ACE/600M-CL to ASUS WMI monitoring list
    - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID
    - perf/x86/amd: Warn only on new bits set
    - spi: spi-fsl-lpspi: Adjust type of scldiv
    - HID: add per device quirk to force bind to hid-generic
    - media: uvcvideo: RealSense D421 Depth module metadata
    - media: uvcvideo: Add a quirk for the Kaiweets KTI-W02 infrared camera
    - media: cx231xx: Add support for Dexatek USB Video Grabber 1d19:6108
    - mmc: core: Add SD card quirk for broken poweroff notification
    - mmc: sdhci-esdhc-imx: enable quirks SDHCI_QUIRK_NO_LED
    - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock
    - selftests/resctrl: Protect against array overflow when reading strings
    - HID: magicmouse: Apple Magic Trackpad 2 USB-C driver support
    - drm/vc4: hdmi: Avoid log spam for audio start failure
    - drm/vc4: hvs: Set AXI panic modes for the HVS
    - drm: panel-orientation-quirks: Add quirk for AYA NEO 2 model
    - drm: panel-orientation-quirks: Add quirk for AYA NEO Founder edition
    - drm: panel-orientation-quirks: Add quirk for AYA NEO GEEK
    - drm/bridge: it6505: Enable module autoloading
    - drm/mcde: Enable module autoloading
    - drm/radeon/r600_cs: Fix possible int overflow in r600_packet3_check()
    - drm/display: Fix building with GCC 15
    - ALSA: hda: Use own quirk lookup helper
    - ALSA: hda/conexant: Use the new codec SSID matching
    - r8169: don't apply UDP padding quirk on RTL8126A
    - samples/bpf: Fix a resource leak
    - net: fec_mpc52xx_phy: Use %pa to format resource_size_t
    - net: ethernet: fs_enet: Use %pa to format resource_size_t
    - net/sched: cbs: Fix integer overflow in cbs_set_port_rate()
    - Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc
    - wifi: ath5k: add PCI ID for SX76X
    - wifi: ath5k: add PCI ID for Arcadyan devices
    - fanotify: allow reporting errors on failure to open fd
    - drm/panel: simple: Add Microchip AC69T88A LVDS Display panel
    - net: sfp: change quirks for Alcatel Lucent G-010S-P
    - net: stmmac: Programming sequence for VLAN packets with split header
    - drm/sched: memset() 'job' in drm_sched_job_init()
    - amdgpu/uvd: get ring reference from rq scheduler
    - drm/amdgpu: don't access invalid sched
    - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for vega20_ih
    - drm/amdgpu: Dereference the ATCS ACPI buffer
    - netlink: specs: Add missing bitset attrs to ethtool spec
    - drm/amdgpu: refine error handling in amdgpu_ttm_tt_pin_userptr
    - fsl/fman: Validate cell-index value obtained from Device Tree
    - drm/amdgpu: skip amdgpu_device_cache_pci_state under sriov
    - ALSA: usb-audio: Make mic volume workarounds globally applicable
    - wifi: ipw2x00: libipw_rx_any(): fix bad alignment
    - dsa: qca8k: Use nested lock to avoid splat
    - Bluetooth: btusb: Add RTL8852BE device 0489:e123 to device tables
    - Bluetooth: Add new quirks for ATS2851
    - Bluetooth: Support new quirks for ATS2851
    - Bluetooth: Set quirks for ATS2851
    - ASoC: hdmi-codec: reorder channel allocation list
    - rocker: fix link status detection in rocker_carrier_init()
    - net/neighbor: clear error in case strict check is not set
    - netpoll: Use rcu_access_pointer() in __netpoll_setup
    - pinctrl: freescale: fix COMPILE_TEST error with PINCTRL_IMX_SCU
    - tracing/ftrace: disable preemption in syscall probe
    - tracing: Use atomic64_inc_return() in trace_clock_counter()
    - tools/rtla: fix collision with glibc sched_attr/sched_set_attr
    - rtla/timerlat: Make timerlat_top_cpu->*_count unsigned long long
    - scsi: ufs: core: Make DMA mask configuration more flexible
    - scsi: lpfc: Call lpfc_sli4_queue_unset() in restart and rmmod paths
    - clk: qcom: rcg2: add clk_rcg2_shared_floor_ops
    - clk: qcom: rpmh: add support for SAR2130P
    - clk: qcom: tcsrcc-sm8550: add SAR2130P support
    - scsi: st: Don't modify unknown block number in MTIOCGET
    - scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset
    - pinctrl: qcom-pmic-gpio: add support for PM8937
    - pinctrl: qcom: spmi-mpp: Add PM8937 compatible
    - thermal/drivers/qcom/tsens-v1: Add support for MSM8937 tsens
    - nvdimm: rectify the illogical code within nd_dax_probe()
    - smb: client: memcpy() with surrounding object base address
    - verification/dot2: Improve dot parser robustness
    - KMSAN: uninit-value in inode_go_dump (5)
    - PCI: qcom: Add support for IPQ9574
    - PCI: vmd: Add DID 8086:B06F and 8086:B60B for Intel client SKUs
    - PCI: vmd: Set devices to D0 before enabling PM L1 Substates
    - PCI: Detect and trust built-in Thunderbolt chips
    - PCI: Add 'reset_subordinate' to reset hierarchy below bridge
    - PCI: Add ACS quirk for Wangxun FF5xxx NICs
    - f2fs: print message if fscorrupted was found in f2fs_new_node_page()
    - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840
    - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[]
    - fs/ntfs3: Fix case when unmarked clusters intersect with zone
    - usb: chipidea: udc: handle USB Error Interrupt if IOC not set
    - iio: light: ltr501: Add LTER0303 to the supported devices
    - ASoC: amd: yc: fix internal mic on Redmi G 2022
    - drm/amdgpu/vcn: reset fw_shared when VCPU buffers corrupted on vcn v4.0.3
    - ASoC: amd: yc: Add quirk for microphone on Lenovo Thinkpad T14s Gen 6
      21M1CTO1WW
    - misc: eeprom: eeprom_93cx6: Add quirk for extra read clock cycle
    - rtc: cmos: avoid taking rtc_lock for extended period of time
    - serial: 8250_dw: Add Sophgo SG2044 quirk
    - smb: client: don't try following DFS links in cifs_tree_connect()
    - setlocalversion: work around "git describe" performance
    - sched/core: Remove the unnecessary need_resched() check in nohz_csd_func()
    - sched/fair: Check idle_cpu() before need_resched() to detect ilb CPU turning
      busy
    - sched/core: Prevent wakeup of ksoftirqd during idle load balance
    - btrfs: fix missing snapshot drew unlock when root is dead during swap
      activation
    - clk: en7523: Initialize num before accessing hws in en7523_register_clocks()
    - tracing/eprobe: Fix to release eprobe when failed to add dyn_event
    - x86: Fix build regression with CONFIG_KEXEC_JUMP enabled
    - Revert "unicode: Don't special case ignorable code points"
    - vfio/mlx5: Align the page tracking max message size with the device
      capability
    - selftests/ftrace: adjust offset for kprobe syntax error test
    - KVM: x86/mmu: Ensure that kvm_release_pfn_clean() takes exact pfn from
      kvm_faultin_pfn()
    - jffs2: Fix rtime decompressor
    - ocfs2: Revert "ocfs2: fix the la space leak when unmounting an ocfs2 volume"
    - drm/amdgpu: rework resume handling for display (v2)
    - ALSA: hda: Fix build error without CONFIG_SND_DEBUG
    - ALSA: usb-audio: Update UMP group attributes for GTB blocks, too
    - bnxt_en: ethtool: Supply ntuple rss context action
    - net: phy: microchip: Reset LAN88xx PHY to ensure clean link state on
      LAN7800/7850
    - ice: fix PHY Clock Recovery availability check
    - ice: fix PHY timestamp extraction for ETH56G
    - ice: Fix VLAN pruning in switchdev mode
    - ixgbe: Correct BASE-BX10 compliance code
    - Revert "udp: avoid calling sock_def_readable() if possible"
    - net/mlx5e: SD, Use correct mdev to build channel param
    - vsock/test: fix failures due to wrong SO_RCVLOWAT parameter
    - vsock/test: fix parameter types in SO_VM_SOCKETS_* calls
    - mmc: sd: SDUC Support Recognition
    - mmc: core: Adjust ACMD22 to SDUC
    - mmc: core: Use GFP_NOIO in ACMD22
    - f2fs: clean up w/ F2FS_{BLK_TO_BYTES,BTYES_TO_BLK}
    - f2fs: fix to adjust appropriate length for fiemap
    - f2fs: fix to requery extent which cross boundary of inquiry
    - drm/amd/display: calculate final viewport before TAP optimization
    - drm/amd/display: Ignore scalar validation failure if pipe is phantom
    - pmdomain: core: Add missing put_device()
    - pmdomain: core: Fix error path in pm_genpd_init() when ida alloc fails
    - pmdomain: core: add dummy release function to genpd device
    - nvme: don't apply NVME_QUIRK_DEALLOCATE_ZEROES when DSM is not supported
    - bpf: Ensure reg is PTR_TO_STACK in process_iter_arg
    - irqchip/stm32mp-exti: CONFIG_STM32MP_EXTI should not default to y when
      compile-testing
    - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc
    - nvme-fabrics: handle zero MAXCMD without closing the connection
    - rust: allow `clippy::needless_lifetimes`
    - HID: i2c-hid: Revert to using power commands to wake on resume
    - LoongArch: KVM: Protect kvm_check_requests() with SRCU
    - net :mana :Request a V2 response version for MANA_QUERY_GF_STAT
    - ALSA: usb-audio: Fix a DMA to stack memory bug
    - ALSA: usb-audio: Add extra PID for RME Digiface USB
    - scsi: ufs: pltfrm: Disable runtime PM during removal of glue drivers
    - io_uring: Change res2 parameter type in io_uring_cmd_done
    - selftests/damon: add _damon_sysfs.py to TEST_FILES
    - selftest: hugetlb_dio: fix test naming
    - x86/cacheinfo: Delete global num_cache_leaves
    - drm/amdkfd: hard-code cacheline for gc943,gc944
    - drm/amdkfd: add MEC version that supports no PCIe atomics for GFX12
    - drm/amdgpu/swsmu: fix SMU11 typos (memlk -> memclk)
    - drm/amd/pm: fix and simplify workload handling
    - drm/amd/display: Correct prefetch calculation
    - drm/amd/display: Limit VTotal range to max hw cap minus fp
    - drm/amd/display: Add a left edge pixel if in YCbCr422 or YCbCr420 and odm
    - drm/amd/amdgpu: allow use kiq to do hdp flush under sriov
    - drm/amdgpu/hdp4.0: do a posting read when flushing HDP
    - drm/amdgpu/hdp5.0: do a posting read when flushing HDP
    - drm/amdgpu/hdp5.2: do a posting read when flushing HDP
    - drm/amdgpu/hdp6.0: do a posting read when flushing HDP
    - drm/amdgpu/hdp7.0: do a posting read when flushing HDP
    - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation
    - x86/cpu/topology: Remove limit of CPUs due to disabled IO/APIC
    - mm/damon: fix order of arguments in damos_before_apply tracepoint
    - mm: memcg: declare do_memsw_account inline
    - mm: open-code PageTail in folio_flags() and const_folio_flags()
    - mm: open-code page_folio() in dump_page()
    - mm: respect mmap hint address when aligning for THP
    - scsi: ufs: pltfrm: Drop PM runtime reference count after ufshcd_remove()
    - memblock: allow zero threshold in validate_numa_converage()
    - rust: enable arbitrary_self_types and remove `Receiver`
    - s390/pci: Sort PCI functions prior to creating virtual busses
    - s390/pci: Use topology ID for multi-function devices
    - s390/pci: Ignore RID for isolated VFs
    - btrfs: canonicalize the device path before adding it
    - btrfs: add the missing error handling inside get_canonical_dev_path
    - ext4: partial zero eof block on unaligned inode size extension
    - crypto: ecdsa - Avoid signed integer overflow on signature decoding
    - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2
    - cleanup: Adjust scoped_guard() macros to avoid potential warning
    - iio: magnetometer: fix if () scoped_guard() formatting
    - timekeeping: Always check for negative motion
    - [Config] updateconfigs for CLOCKSOURCE_VALIDATE_LAST_CYCLE
    - gpio: free irqs that are still requested when the chip is being removed
    - firmware: qcom: scm: Allow QSEECOM on Lenovo Yoga Slim 7x
    - soc: qcom: pd-mapper: Add QCM6490 PD maps
    - media: uvcvideo: Force UVC version to 1.0a for 0408:4033
    - firmware: qcom: scm: Allow QSEECOM on Dell XPS 13 9345
    - drm/xe/pciids: separate RPL-U and RPL-P PCI IDs
    - drm/xe/pciids: separate ARL and MTL PCI IDs
    - drm/xe/pciids: Add PVC's PCI device ID macros
    - wifi: mac80211: export ieee80211_purge_tx_queue() for drivers
    - drm/xe/pciid: Add new PCI id for ARL
    - ASoC: Intel: sof_rt5682: Add HDMI-In capture with rt5682 support for MTL.
    - drm/amd/display: skip disable CRTC in seemless bootup case
    - drm/amd/display: Fix garbage or black screen when resetting otg
    - drm/amd/display: disable SG displays on cyan skillfish
    - drm/xe/ptl: L3bank mask is not available on the media GT
    - drm/xe/xe3: Add initial set of workarounds
    - ALSA: hda/realtek: Use codec SSID matching for Lenovo devices
    - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7
    - wifi: mac80211: Add non-atomic station iterator
    - accel/qaic: Add AIC080 support
    - drm/amd/display: Full exit out of IPS2 when all allow signals have been
      cleared
    - ASoC: sdw_utils: Add support for exclusion DAI quirks
    - ASoC: sdw_utils: Add a quirk to allow the cs42l43 mic DAI to be ignored
    - ASoC: Intel: sof_sdw: Add quirk for cs42l43 system using host DMICs
    - ASoC: Intel: sof_sdw: Add quirks for some new Lenovo laptops
    - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21Q6 and 21Q7
    - ASoC: Intel: sof_sdw: Fix DMI match for Lenovo 21QA and 21QB
    - ASoC: sdw_utils: Add quirk to exclude amplifier function
    - ASoC: Intel: soc-acpi-intel-arl-match: Add rt722 and rt1320 support
    - drm/amd/display: Fix underflow when playing 8K video in full screen mode
    - mptcp: annotate data-races around subflow->fully_established
    - net/tcp: Add missing lockdep annotations for TCP-AO hlist traversals
    - drm/panic: Add ABGR2101010 support
    - drm/amd/display: avoid disable otg when dig was disabled
    - drm/amd/display: Fix Potential Null Dereference
    - drm/amd/display: Remove hw w/a toggle if on DP2/HPO
    - drm/amd/display: parse umc_info or vram_info based on ASIC
    - drm/amd/display: Prune Invalid Modes For HDMI Output
    - mptcp: fix possible integer overflow in mptcp_reset_tout_timer
    - i2c: i801: Add support for Intel Panther Lake
    - Bluetooth: hci_conn: Reduce hci_conn_drop() calls in two functions
    - Bluetooth: btusb: Add new VID/PID 0489/e111 for MT7925
    - Bluetooth: btusb: Add new VID/PID 0489/e124 for MT7925
    - Bluetooth: btusb: Add 3 HWIDs for MT7925
    - rtla: Fix consistency in getopt_long for timerlat_hist
    - rtla/timerlat: Make timerlat_hist_cpu->*_count unsigned long long
    - ring-buffer: Limit time with disabled interrupts in rb_check_pages()
    - iommu/amd: Fix corruption when mapping large pages from 0
    - scsi: lpfc: Check SLI_ACTIVE flag in FDMI cmpl before submitting follow up
      FDMI
    - scsi: lpfc: Prevent NDLP reference count underflow in dev_loss_tmo callback
    - clk: qcom: clk-alpha-pll: Add NSS HUAYRA ALPHA PLL support for ipq9574
    - tracing: Fix function name for trampoline
    - tools/rtla: Enhance argument parsing in timerlat_load.py
    - mailbox: pcc: Check before sending MCTP PCC response ACK
    - PCI: starfive: Enable controller runtime PM before probing host bridge
    - remoteproc: qcom: pas: enable SAR2130P audio DSP support
    - f2fs: add a sysfs node to limit max read extent count per-inode
    - fs/ntfs3: Implement fallocate for compressed files
    - fs/ntfs3: Fix warning in ni_fiemap
    - regulator: qcom-rpmh: Update ranges for FTSMPS525
    - usb: chipidea: add CI_HDRC_HAS_SHORT_PKT_LIMIT flag
    - usb: chipidea: udc: limit usb request length to max 16KB
    - usb: chipidea: udc: create bounce buffer for problem sglist entries if
      possible
    - usb: typec: ucsi: Do not call ACPI _DSM method for UCSI read operations
    - iio: adc: ad7192: properly check spi_get_device_match_data()
    - usb: typec: ucsi: glink: be more precise on orientation-aware ports
    - nvme: use helper nvme_ctrl_state in nvme_keep_alive_finish function
    - Revert "nvme: make keep-alive synchronous operation"
    - irqchip/gicv3-its: Add workaround for hip09 ITS erratum 162100801
    - [Config] updateconfigs for HISILICON_ERRATUM_162100801
    - drm/amd/display: Add option to retrieve detile buffer size
    - btrfs: drop unused parameter options from open_ctree()
    - btrfs: drop unused parameter data from btrfs_fill_super()
    - btrfs: fix mount failure due to remount races
    - media: ipu6: use the IPU6 DMA mapping APIs to do mapping
    - net/mlx5: unique names for per device caches
    - ASoC: Intel: avs: Fix return status of avs_pcm_hw_constraints_init()
    - Revert "drm/amd/display: parse umc_info or vram_info based on ASIC"
    - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails
    - timekeeping: Remove CONFIG_DEBUG_TIMEKEEPING
    - [Config] updateconfigs for DEBUG_TIMEKEEPING
    - clocksource: Make negative motion detection more robust
    - softirq: Allow raising SCHED_SOFTIRQ from SMP-call-function on RT kernel
    - Revert "iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in
      Kconfig"
    - Upstream stable to v6.6.66, v6.12.5
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56583
    - sched/deadline: Fix warning in migrate_enable for boosted tasks
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-41932
    - sched: fix warning in sched_setaffinity
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57872
    - scsi: ufs: pltfrm: Dellocate HBA during ufshcd_pltfrm_remove()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56588
    - scsi: hisi_sas: Create all dump files during debugfs initialization
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56591
    - Bluetooth: hci_conn: Use disable_delayed_work_sync
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56784
    - drm/amd/display: Adding array index check to prevent memory corruption
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-47794
    - bpf: Prevent tailcall infinite loop caused by freplace
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56599
    - wifi: ath10k: avoid NULL pointer error during sdio remove
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56607
    - wifi: ath12k: fix atomic calls in ath12k_mac_op_set_bitrate_mask()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56608
    - drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56609
    - wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56782
    - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57875
    - block: RCU protect disk->conv_zones_bitmap
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-48876
    - stackdepot: fix stack_depot_save_flags() in NMI context
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56618
    - pmdomain: imx: gpcv2: Adjust delay after power up handshake
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57839
    - Revert "readahead: properly shorten readahead when falling back to
      do_page_cache_ra()"
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56620
    - scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56621
    - scsi: ufs: core: Cancel RTC work during ufshcd_remove()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57878
    - arm64: ptrace: fix partial SETREGSET for NT_ARM_FPMR
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56624
    - iommufd: Fix out_fput in iommufd_fault_alloc()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-49569
    - nvme-rdma: unquiesce admin_q before destroy it
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56632
    - nvme-tcp: fix the memleak while create new ctrl failed
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56639
    - net: hsr: must allocate more bytes for RedBox support
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56646
    - ipv6: avoid possible NULL deref in modify_prefix_route()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56647
    - net: Fix icmp host relookup triggering ip_rt_bug
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57850
    - jffs2: Prevent rtime decompress memory corruption
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56611
    - mm/mempolicy: fix migrate_to_node() assuming there is at least one VMA in a
      MM
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56613
    - sched/numa: fix memory leak due to the overwritten vma->numab_state
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56584
    - io_uring/tctx: work around xa_store() allocation error issue
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56781
    - powerpc/prom_init: Fixup missing powermac #size-cells
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56785
    - MIPS: Loongson64: DTS: Really fix PCIe port nodes for ls7a
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56585
    - LoongArch: Fix sleeping in atomic context for PREEMPT_RT
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-41935
    - f2fs: fix to shrink read extent node in batches
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-43098
    - i3c: Use i3cdev->desc->info instead of calling i3c_device_get_info() to
      avoid deadlock
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-45828
    - i3c: mipi-i3c-hci: Mask ring interrupts before ring stop request
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56586
    - f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56587
    - leds: class: Protect brightness_show() with led_cdev->led_access mutex
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56786
    - bpf: put bpf_link's program when link is safe to be deallocated
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-47141
    - pinmux: Use sequential access to access desc->pinmux data
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56589
    - scsi: hisi_sas: Add cond_resched() for no forced preemption model
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56590
    - Bluetooth: hci_core: Fix not checking skb length on hci_acldata_packet
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56592
    - bpf: Call free_htab_elem() after htab_unlock_bucket()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56593
    - wifi: brcmfmac: Fix oops due to NULL pointer dereference in
      brcmf_sdiod_sglist_rw()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56594
    - drm/amdgpu: set the right AMDGPU sg segment limitation
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57843
    - virtio-net: fix overflow inside virtnet_rq_alloc
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56595
    - jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56596
    - jfs: fix array-index-out-of-bounds in jfs_readdir
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56597
    - jfs: fix shift-out-of-bounds in dbSplit
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56598
    - jfs: array-index-out-of-bounds fix in dtReadFirst
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-47143
    - dma-debug: fix a possible deadlock on radix_lock
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56600
    - net: inet6: do not leave a dangling sk pointer in inet6_create()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56601
    - net: inet: do not leave a dangling sk pointer in inet_create()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56602
    - net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56603
    - net: af_can: do not leave a dangling sk pointer in can_create()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56604
    - Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56605
    - Bluetooth: L2CAP: do not leave dangling sk pointer on error in
      l2cap_sock_create()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56606
    - af_packet: avoid erroring out after sock_init_data() in packet_create()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-47809
    - dlm: fix possible lkb_resource null dereference
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-48873
    - wifi: rtw89: check return value of ieee80211_probereq_get() for RNR
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56787
    - soc: imx8m: Probe the SoC driver as platform driver
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56610
    - kcsan: Turn report_filterlist_lock into a raw_spinlock
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-48875
    - btrfs: don't take dev_replace rwsem on task already holding it
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57849
    - s390/cpum_sf: Handle CPU hotplug remove during sampling
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56614
    - xsk: fix OOB map writes when deleting elements
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56615
    - bpf: fix OOB devmap writes when deleting elements
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57876
    - drm/dp_mst: Fix resetting msg rx state after topology removal
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56616
    - drm/dp_mst: Fix MST sideband message body length check
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56617
    - cacheinfo: Allocate memory during CPU hotplug if not done from the primary
      CPU
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-48881
    - bcache: revert replacing IS_ERR_OR_NULL with IS_ERR again
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56619
    - nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56622
    - scsi: ufs: core: sysfs: Prevent div by zero
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56623
    - scsi: qla2xxx: Fix use after free on unload
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-57874
    - arm64: ptrace: fix partial SETREGSET for NT_ARM_TAGGED_ADDR_CTRL
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56625
    - can: dev: can_set_termination(): allow sleeping GPIOs
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56626
    - ksmbd: fix Out-of-Bounds Write in ksmbd_vfs_stream_write
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56627
    - ksmbd: fix Out-of-Bounds Read in ksmbd_vfs_stream_read
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56628
    - LoongArch: Add architecture specific huge_pte_clear()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56629
    - HID: wacom: fix when get product name maybe null pointer
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56630
    - ocfs2: free inode when ocfs2_get_init_inode() fails
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56631
    - scsi: sg: Fix slab-use-after-free read in sg_release()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-50051
    - spi: mpc52xx: Add cancel_work_sync before module remove
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56633
    - tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56634
    - gpio: grgpio: Add NULL check in grgpio_probe
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56635
    - net: avoid potential UAF in default_operstate()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56636
    - geneve: do not assume mac header is set in geneve_xmit_skb()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56637
    - netfilter: ipset: Hold module reference while requesting a module
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56638
    - netfilter: nft_inner: incorrect percpu area handling under softirq
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-52332
    - igb: Fix potential invalid memory access in igb_init_module()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56640
    - net/smc: fix LGR and link use-after-free issue
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56641
    - net/smc: initialize close_work early to avoid warning
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56642
    - tipc: Fix use-after-free of kernel socket in cleanup_bearer().
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56643
    - dccp: Fix memory leak in dccp_feat_change_recv
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56644
    - net/ipv6: release expired exception dst cached in socket
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56645
    - can: j1939: j1939_session_new(): fix skb reference counting
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56648
    - net: hsr: avoid potential out-of-bound access in fill_frame_info()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56649
    - net: enetc: Do not configure preemptible TCs if SIs do not support
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56783
    - netfilter: nft_socket: remove WARN_ON_ONCE on maximum cgroup level
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56650
    - netfilter: x_tables: fix LED ID check in led_tg_check()
  * Oracular update: upstream stable patchset 2025-01-28 (LP: #2096827) //
    CVE-2024-56651
    - can: hi311x: hi3110_can_ist(): fix potential use-after-free
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744)
    - Revert "x86/pvh: Call C code via the kernel virtual mapping"
    - Revert "x86/pvh: Set phys_base when calling xen_prepare_pvh()"
    - btrfs: drop unused parameter file_offset from
      btrfs_encoded_read_regular_fill_pages()
    - btrfs: change btrfs_encoded_read() so that reading of extent is done by
      caller
    - btrfs: rename btrfs_submit_bio() to btrfs_submit_bbio()
    - btrfs: move priv off stack in btrfs_encoded_read_regular_fill_pages()
    - md/raid5: Wait sync io to finish before changing group cnt
    - arm64: dts: mediatek: mt8186-corsola: Fix GPU supply coupling max-spread
    - arm64: dts: mediatek: mt8186-corsola: Fix IT6505 reset line polarity
    - media: platform: rga: fix 32-bit DMA limitation
    - net: phy: dp83869: fix status reporting for 1000base-x autonegotiation
    - media: ov08x40: Fix burst write sequence
    - tracing: Fix function timing profiler to initialize hashtable
    - mm/damon/vaddr: fix issue in damon_va_evenly_split_region()
    - powerpc/vdso: Refactor CFLAGS for CVDSO build
    - powerpc/vdso: Drop -mstack-protector-guard flags in 32-bit files with clang
    - cpufreq: scmi: Fix cleanup path when boost enablement fails
    - nvmem: core: Check read_only flag for force_ro in bin_attr_nvmem_write()
    - driver core: fw_devlink: Stop trying to optimize cycle detection logic
    - spmi: pmic-arb: fix return path in for_each_available_child_of_node()
    - net: stmmac: set initial EEE policy configuration
    - vfio/qat: fix overflow check in qat_vf_resume_write()
    - PCI: qcom: Disable ASPM L0s for X1E80100
    - remoteproc: qcom_q6v5_pas: disable auto boot for wpss
    - mtd: spinand: winbond: Fix 512GW and 02JW OOB layout
    - scsi: ufs: exynos: Add check inside exynos_ufs_config_smu()
    - i3c: master: svc: fix possible assignment of the same address to two devices
    - i3c: master: svc: Modify enabled_events bit 7:0 to act as IBI enable counter
    - PCI: dwc: ep: Fix advertised resizable BAR size regression
    - iio: invensense: fix multiple odr switch when FIFO is off
    - dt-bindings: net: fec: add pps channel property
    - net: fec: refactor PPS channel configuration
    - net: fec: make PPS channel configurable
    - drm/panic: Fix uninitialized spinlock acquisition with CONFIG_DRM_PANIC=n
    - drm: panel: jd9365da-h3: Remove unused num_init_cmds structure member
    - drm/fbdev-dma: Select FB_DEFERRED_IO
    - [Config] updateconfigs for FB_DMAMEM_HELPERS_DEFERRED
    - drm/bridge: it6505: Fix inverted reset polarity
    - drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs
    - drm/xe/migrate: fix pat index usage
    - Revert "drm/radeon: Delay Connector detecting when HPD singals is unstable"
    - drm/xe/migrate: use XE_BO_FLAG_PAGETABLE
    - drm/amdgpu/pm: add gen5 display to the user on smu v14.0.2/3
    - drm/amd: Add some missing straps from NBIO 7.11.0
    - drm/amd/pm: skip setting the power source on smu v14.0.2/3
    - drm/amd: Fix initialization mistake for NBIO 7.11 devices
    - drm/amd/pm: disable pcie speed switching on Intel platform for smu v14.0.2/3
    - drm/amd/pm: Remove arcturus min power limit
    - drm/amd/display: update pipe selection policy to check head pipe
    - drm/amd/display: Remove PIPE_DTO_SRC_SEL programming from set_dtbclk_dto
    - Revert "drm/xe/xe_guc_ads: save/restore OA registers and allowlist regs"
    - Upstream stable to v6.6.65, v6.12.4
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56775
    - drm/amd/display: Fix handling of plane refcount
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56552
    - drm/xe/guc_submit: fix race around suspend_pending
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56559
    - mm/vmalloc: combine all TLB flush operations of KASAN shadow virtual address
      into one operation
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56561
    - PCI: endpoint: Fix PCI domain ID release in pci_epc_destroy()
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56550
    - s390/stacktrace: Use break instead of return statement
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56771
    - mtd: spinand: winbond: Fix 512GW, 01GW, 01JW and 02JW ECC information
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56563
    - ceph: fix cred leak in ceph_mds_check_access()
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56564
    - ceph: pass cred pointer to ceph_mds_auth_match()
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56565
    - f2fs: fix to drop all discards after creating snapshot on lvm device
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-57809
    - PCI: imx6: Fix suspend/resume support on i.MX6QDL
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56568
    - iommu/arm-smmu: Defer probe of clients after smmu device bound
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56772
    - kunit: string-stream: Fix a UAF bug in kunit_init_suite()
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56773
    - kunit: Fix potential null dereference in kunit_device_driver_test()
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56580
    - media: qcom: camss: fix error path on configuration of power domains
  * Oracular update: upstream stable patchset 2025-01-27 (LP: #2096744) //
    CVE-2024-56582
    - btrfs: fix use-after-free in btrfs_encoded_read_endio()
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594)
    - xfs: remove unknown compat feature check in superblock write validation
    - btrfs: don't loop for nowait writes when checking for cross references
    - md/md-bitmap: Add missing destroy_work_on_stack()
    - arm64: dts: allwinner: pinephone: Add mount matrix to accelerometer
    - arm64: dts: freescale: imx8mm-verdin: Fix SD regulator startup delay
    - arm64: dts: ti: k3-am62-verdin: Fix SD regulator startup delay
    - media: i2c: dw9768: Fix pm_runtime_set_suspended() with runtime pm enabled
    - arm64: dts: freescale: imx8mp-verdin: Fix SD regulator startup delay
    - media: verisilicon: av1: Fix reference video buffer pointer assignment
    - media: platform: exynos4-is: Fix an OF node reference leak in
      fimc_md_is_isp_available
    - media: amphion: Fix pm_runtime_set_suspended() with runtime pm enabled
    - media: venus: Fix pm_runtime_set_suspended() with runtime pm enabled
    - media: gspca: ov534-ov772x: Fix off-by-one error in set_frame_rate()
    - media: uvcvideo: Stop stream during unregister
    - maple_tree: refine mas_store_root() on storing NULL
    - vmstat: call fold_vm_zone_numa_events() before show per zone NUMA event
    - zram: clear IDLE flag after recompression
    - iommu/io-pgtable-arm: Fix stage-2 map/unmap for concatenated tables
    - leds: lp55xx: Remove redundant test for invalid channel number
    - clk: qcom: gcc-qcs404: fix initial rate of GPLL3
    - ARM: 9429/1: ioremap: Sync PGDs for VMALLOC shadow
    - ARM: 9430/1: entry: Do a dummy read from VMAP shadow
    - ARM: 9431/1: mm: Pair atomic_set_release() with _read_acquire()
    - ceph: extract entity name from device id
    - util_macros.h: fix/rework find_closest() macros
    - scsi: ufs: exynos: Fix hibern8 notify callbacks
    - i3c: master: svc: Fix pm_runtime_set_suspended() with runtime pm enabled
    - PCI: keystone: Set mode as Root Complex for "ti,keystone-pcie" compatible
    - PCI: keystone: Add link up check to ks_pcie_other_map_bus()
    - PCI: endpoint: Clear secondary (not primary) EPC in pci_epc_remove_epf()
    - fs/proc/kcore.c: Clear ret value in read_kcore_iter after successful
      iov_iter_zero
    - thermal: int3400: Fix reading of current_uuid for active policy
    - leds: flash: mt6360: Fix device_for_each_child_node() refcounting in error
      paths
    - ovl: properly handle large files in ovl_security_fileattr
    - dm: Fix typo in error message
    - dm thin: Add missing destroy_work_on_stack()
    - PCI: of_property: Assign PCI instead of CPU bus address to dynamic PCI nodes
    - PCI: rockchip-ep: Fix address translation unit programming
    - iio: accel: kx022a: Fix raw read format
    - iio: Fix fwnode_handle in __fwnode_iio_channel_get_by_name()
    - iio: gts: fix infinite loop for gain_to_scaletables()
    - powerpc: Fix stack protector Kconfig test for clang
    - powerpc: Adjust adding stack protector flags to KBUILD_CLAGS for clang
    - drm/mediatek: Fix child node refcount handling in early exit
    - drm/etnaviv: flush shader L1 cache after user commandstream
    - drm: xlnx: zynqmp_dpsub: fix hotplug detection
    - drm/amdkfd: Use the correct wptr size
    - drm/amd/pm: update current_socclk and current_uclk in gpu_metrics on smu
      v13.0.7
    - posix-timers: Target group sigqueue to current task only if not exiting
    - sched: Initialize idle tasks only once
    - Upstream stable to v6.6.64, v6.12.3
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56551
    - drm/amdgpu: fix usage slab after free
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56776
    - drm/sti: avoid potential dereference of error pointers
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56777
    - drm/sti: avoid potential dereference of error pointers in
      sti_gdp_atomic_check
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56778
    - drm/sti: avoid potential dereference of error pointers in
      sti_hqvdp_atomic_check
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56557
    - iio: adc: ad7923: Fix buffer overflow for tx_buf and ring_xfer
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56779
    - nfsd: fix nfs4_openowner leak when concurrent nfsd4_open occur
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56558
    - nfsd: make sure exp active before svc_export_show
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56562
    - i3c: master: Fix miss free init_dyn_addr at i3c_master_put_i3c_addrs()
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56566
    - mm/slub: Avoid list corruption when removing a slab from the full list
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-57838
    - s390/entry: Mark IRQ entries to fix stack depot warnings
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56567
    - ad7780: fix division by zero in ad7780_write_raw()
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56569
    - ftrace: Fix regression with module command in stack_trace_filter
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56570
    - ovl: Filter invalid inodes with missing lookup function
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56572
    - media: platform: allegro-dvt: Fix possible memory leak in
      allocate_buffers_internal()
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56573
    - efi/libstub: Free correct pointer on failure
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56574
    - media: ts2020: fix null-ptr-deref in ts2020_probe()
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56575
    - media: imx-jpeg: Ensure power suppliers be suspended before detach them
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56576
    - media: i2c: tc358743: Fix crash in the probe error path when using polling
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56577
    - media: mtk-jpeg: Fix null-ptr-deref during unload module
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56578
    - media: imx-jpeg: Set video drvdata before register video device
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56579
    - media: amphion: Set video drvdata before register video device
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56581
    - btrfs: ref-verify: fix use-after-free after invalid ref action
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56774
    - btrfs: add a sanity check for btrfs root in btrfs_search_slot()
  * Oracular update: upstream stable patchset 2025-01-23 (LP: #2095594) //
    CVE-2024-56780
    - quota: flush quota_release_work upon quota writeback
  * Lenovo X13s fails to boot kernel 6.11 (LP: #2089237)
    - arm64: dts: qcom: sc8280xp-crd: disable PCIe perst pull downs
    - arm64: dts: qcom: sc8280xp-crd: clean up PCIe2a pinctrl node
    - arm64: dts: qcom: sc8280xp-x13s: Drop redundant clock-lanes from camera@10
    - dt-bindings: PCI: qcom: Allow 'vddpe-3v3-supply' again
    - serial: qcom-geni: disable interrupts during console writes
    - serial: qcom-geni: fix polled console corruption
    - phy: qcom: qmp-combo: move driver data initialisation earlier
    - SAUCE: arm64: dts: qcom: sc8280xp: Fix interrupt type of camss interrupts
  * python perf module missing in realtime kernel (LP: #2089411)
    - [Packaging] linux-tools: Add missing python perf symlink
    - [Packaging] linux-tools: Fix python perf library packaging
    - [Packaging] linux-tools: Fall back to old python perf path
  * CVE-2024-56672
    - blk-cgroup: Fix UAF in blkcg_unpin_online()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle

 -- Stefan Bader <stefan.bader@canonical.com>  Mon, 24 Feb 2025 16:23:59 +0100

linux-hwe-6.11 (6.11.0-19.19~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-19.19~24.04.1 -proposed tracker (LP: #2097998)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  [ Ubuntu: 6.11.0-19.19 ]

  * oracular/linux: 6.11.0-19.19 -proposed tracker (LP: #2098000)
  * python perf module missing in realtime kernel (LP: #2089411)
    - [Packaging] linux-tools: Add missing python perf symlink
    - [Packaging] linux-tools: Fix python perf library packaging
    - [Packaging] linux-tools: Fall back to old python perf path
  * CVE-2024-56672
    - blk-cgroup: Fix UAF in blkcg_unpin_online()
  * CVE-2024-56658
    - net: defer final 'struct net' free in netns dismantle

 -- Stefan Bader <stefan.bader@canonical.com>  Mon, 17 Feb 2025 10:40:20 +0100

linux-hwe-6.11 (6.11.0-18.18~24.04.1) noble; urgency=medium

  [ Ubuntu: 6.11.0-18.18 ]

  * CVE-2025-0927
    - SAUCE: fs: hfs/hfsplus: add key_len boundary check to hfs_bnode_read_key

 -- Manuel Diewald <manuel.diewald@canonical.com>  Sat, 08 Feb 2025 18:45:49 +0100

linux-hwe-6.11 (6.11.0-17.17~24.04.2) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-17.17~24.04.2 -proposed tracker (LP: #2093641)

  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] hwe-6.11: Add dwarfdump dependency

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.hwe-6.11/dkms-versions -- update from kernel-versions
      (main/2025.01.13)

  [ Ubuntu: 6.11.0-17.17 ]

  * oracular/linux: 6.11.0-17.17 -proposed tracker (LP: #2093643)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/2025.01.13)
  * When /dev/vmbus/hv_kvp is not present, disable hv-kvp-daemon (LP: #2091744)
    - [Packaging] disable hv-kvp-daemon if needed
  * Backport "netkit: Add option for scrubbing skb meta data" to 6.8
    (LP: #2091184)
    - netkit: Add option for scrubbing skb meta data
  * KVM: Cache CPUID at KVM.ko module init to reduce latency of VM-Enter and VM-
    Exit (LP: #2093146)
    - KVM: x86: Cache CPUID.0xD XSTATE offsets+sizes during module init
  * [SRU] add support of QCA BT 0489:e0fc (LP: #2085406)
    - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x
  * oracular: ubuntu_boot  lib/dynamic_queue_limits.c:99! (LP: #2089684)
    - virtio_net: correct netdev_tx_reset_queue() invocation point
    - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize()
    - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize
  * Failed to probe for OVTI02C1: chip id mismatch: 560243!=0 (LP: #2090932)
    - SAUCE: ACPI: scan: Update HID for new platform
  * Bluetooth[8086:a876] crash with "hci0: Failed to read MSFT supported
    features (-110)" (LP: #2085485)
    - Bluetooth: btintel_pcie: Add recovery mechanism
  * Poor bluetooth performance on Lenovo X13s (LP: #2089357)
    - SAUCE: Bluetooth: qca: Support downloading board ID specific NVM for WCN6855
  * vfio_pci soft lockup on VM start while using PCIe passthrough (LP: #2089306)
    - SAUCE: Revert "mm: use rwsem assertion macros for mmap_lock"
    - SAUCE: Revert "vfio/pci: Insert full vma on mmap'd MMIO fault"
    - SAUCE: Revert "vfio/pci: Use unmap_mapping_range()"
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655)
    - wifi: mac80211: Fix setting txpower with emulate_chanctx
    - wifi: cfg80211: Add wiphy_delayed_work_pending()
    - wifi: mac80211: Convert color collision detection to wiphy work
    - wifi: radiotap: Avoid -Wflex-array-member-not-at-end warnings
    - spi: stm32: fix missing device mode capability in stm32mp25
    - ASoC: codecs: rt5640: Always disable IRQs from rt5640_cancel_work()
    - ASoC: Intel: bytcr_rt5640: Add support for non ACPI instantiated codec
    - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet
    - ASoC: Intel: sst: Support LPE0F28 ACPI HID
    - wifi: iwlwifi: mvm: Use the sync timepoint API in suspend
    - wifi: iwlwifi: mvm: SAR table alignment
    - mac80211: fix user-power when emulating chanctx
    - usb: add support for new USB device ID 0x17EF:0x3098 for the r8152 driver
    - usb: typec: use cleanup facility for 'altmodes_node'
    - selftests/watchdog-test: Fix system accidentally reset after watchdog-test
    - ALSA: hda/realtek: Add subwoofer quirk for Infinix ZERO BOOK 13
    - ASoC: codecs: wcd937x: add missing LO Switch control
    - ASoC: codecs: wcd937x: relax the AUX PDM watchdog
    - x86/amd_nb: Fix compile-testing without CONFIG_AMD_NB
    - bpf: fix filed access without lock
    - net: usb: qmi_wwan: add Quectel RG650V
    - soc: qcom: Add check devm_kasprintf() returned value
    - firmware: arm_scmi: Reject clear channel request on A2P
    - regulator: rk808: Add apply_bit for BUCK3 on RK809
    - platform/x86: dell-smbios-base: Extends support to Alienware products
    - platform/x86: dell-wmi-base: Handle META key Lock/Unlock events
    - platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
    - ASoC: tas2781: Add new driver version for tas2563 & tas2781 qfn chip
    - tools/lib/thermal: Remove the thermal.h soft link when doing make clean
    - can: j1939: fix error in J1939 documentation.
    - platform/x86: thinkpad_acpi: Fix for ThinkPad's with ECFW showing incorrect
      fan speed
    - ASoC: amd: yc: Support dmic on another model of Lenovo Thinkpad E14 Gen 6
    - ASoC: stm: Prevent potential division by zero in stm32_sai_mclk_round_rate()
    - ASoC: stm: Prevent potential division by zero in stm32_sai_get_clk_div()
    - drm: panel-orientation-quirks: Make Lenovo Yoga Tab 3 X90F DMI match less
      strict
    - proc/softirqs: replace seq_printf with seq_put_decimal_ull_width
    - integrity: Use static_assert() to check struct sizes
    - ASoC: audio-graph-card2: Purge absent supplies for device tree nodes
    - LoongArch: For all possible CPUs setup logical-physical CPU mapping
    - LoongArch: Define a default value for VM_DATA_DEFAULT_FLAGS
    - ASoC: max9768: Fix event generation for playback mute
    - ALSA: usb-audio: Fix Yamaha P-125 Quirk Entry
    - ARM: 9420/1: smp: Fix SMP for xip kernels
    - ARM: 9434/1: cfi: Fix compilation corner case
    - ipmr: Fix access to mfc_cache_list without lock held
    - f2fs: fix fiemap failure issue when page size is 16KB
    - drm/amd/display: Skip Invalid Streams from DSC Policy
    - drm/amd/display: Fix incorrect DSC recompute trigger
    - s390/facilities: Fix warning about shadow of global variable
    - efs: fix the efs new mount api implementation
    - arm64: probes: Disable kprobes/uprobes on MOPS instructions
    - kselftest/arm64: hwcap: fix f8dp2 cpuinfo name
    - kselftest/arm64: mte: fix printf type warnings about __u64
    - kselftest/arm64: mte: fix printf type warnings about longs
    - block/fs: Pass an iocb to generic_atomic_write_valid()
    - fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()
    - s390/cio: Do not unregister the subchannel based on DNV
    - s390/pageattr: Implement missing kernel_page_present()
    - x86/pvh: Set phys_base when calling xen_prepare_pvh()
    - x86/pvh: Call C code via the kernel virtual mapping
    - brd: defer automatic disk creation until module initialization succeeds
    - ext4: avoid remount errors with 'abort' mount option
    - mips: asm: fix warning when disabling MIPS_FP_SUPPORT
    - arm64: Expose ID_AA64ISAR1_EL1.XS to sanitised feature consumers
    - kselftest/arm64: Fix encoding for SVE B16B16 test
    - nvme-pci: fix freeing of the HMB descriptor table
    - m68k: mvme147: Fix SCSI controller IRQ numbers
    - m68k: mvme147: Reinstate early console
    - arm64: fix .data.rel.ro size assertion when CONFIG_LTO_CLANG
    - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block()
    - loop: fix type of block size
    - cachefiles: Fix incorrect length return value in
      cachefiles_ondemand_fd_write_iter()
    - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter()
    - cachefiles: Fix NULL pointer dereference in object->file
    - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING
    - block: constify the lim argument to queue_limits_max_zone_append_sectors
    - block: properly handle REQ_OP_ZONE_APPEND in __bio_split_to_limits
    - block: take chunk_sectors into account in bio_split_write_zeroes
    - block: fix bio_split_rw_at to take zone_write_granularity into account
    - s390/syscalls: Avoid creation of arch/arch/ directory
    - hfsplus: don't query the device logical block size multiple times
    - ext4: pipeline buffer reads in mext_page_mkuptodate()
    - ext4: remove array of buffer_heads from mext_page_mkuptodate()
    - ext4: fix race in buffer_head read fault injection
    - nvme-pci: reverse request order in nvme_queue_rqs
    - virtio_blk: reverse request order in virtio_queue_rqs
    - crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys
    - crypto: caam - Fix the pointer passed to caam_qi_shutdown()
    - crypto: qat - remove check after debugfs_create_dir()
    - crypto: qat/qat_420xx - fix off by one in uof_get_name()
    - crypto: qat/qat_4xxx - fix off by one in uof_get_name()
    - firmware: google: Unregister driver_info on failure
    - EDAC/bluefield: Fix potential integer overflow
    - crypto: qat - remove faulty arbiter config reset
    - thermal: core: Initialize thermal zones before registering them
    - thermal: core: Drop thermal_zone_device_is_enabled()
    - thermal: core: Rearrange PM notification code
    - thermal: core: Represent suspend-related thermal zone flags as bits
    - thermal: core: Mark thermal zones as initializing to start with
    - thermal: core: Fix race between zone registration and system suspend
    - EDAC/fsl_ddr: Fix bad bit shift operations
    - EDAC/skx_common: Differentiate memory error sources
    - EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator
    - crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return
      -EBUSY
    - crypto: cavium - Fix the if condition to exit loop after timeout
    - cpufreq/amd-pstate: Don't update CPPC request in
      amd_pstate_cpu_boost_update()
    - amd-pstate: Set min_perf to nominal_perf for active mode performance gov
    - crypto: hisilicon/qm - disable same error report before resetting
    - EDAC/igen6: Avoid segmentation fault on module unload
    - crypto: qat - Fix missing destroy_workqueue in adf_init_aer()
    - crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()
    - sched/cpufreq: Ensure sd is rebuilt for EAS check
    - doc: rcu: update printed dynticks counter bits
    - rcu/srcutiny: don't return before reenabling preemption
    - rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu
    - hwmon: (pmbus/core) clear faults after setting smbalert mask
    - hwmon: (nct6775-core) Fix overflows seen when writing limit attributes
    - ACPI: CPPC: Fix _CPC register setting issue
    - crypto: caam - add error check to caam_rsa_set_priv_key_form
    - crypto: bcm - add error check in the ahash_hmac_init function
    - crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()
    - rcuscale: Do a proper cleanup if kfree_scale_init() fails
    - tools/lib/thermal: Make more generic the command encoding function
    - thermal/lib: Fix memory leak on error in thermal_genl_auto()
    - x86/unwind/orc: Fix unwind for newly forked tasks
    - Revert "scripts/faddr2line: Check only two symbols when calculating symbol
      size"
    - cleanup: Remove address space of returned pointer
    - time: Partially revert cleanup on msecs_to_jiffies() documentation
    - time: Fix references to _msecs_to_jiffies() handling of values
    - locking/atomic/x86: Use ALT_OUTPUT_SP() for __alternative_atomic64()
    - locking/atomic/x86: Use ALT_OUTPUT_SP() for __arch_{,try_}cmpxchg64_emu()
    - kcsan, seqlock: Support seqcount_latch_t
    - kcsan, seqlock: Fix incorrect assumption in read_seqbegin()
    - clocksource/drivers:sp804: Make user selectable
    - clocksource/drivers/timer-ti-dm: Fix child node refcount handling
    - regulator: qcom-smd: make smd_vreg_rpm static
    - spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()
    - arm64: dts: qcom: qcs6390-rb3gen2: use modem.mbn for modem DSP
    - ARM: dts: renesas: genmai: Fix partition size for QSPI NOR Flash
    - drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()
    - microblaze: Export xmb_manager functions
    - arm64: dts: mediatek: mt8188: Fix wrong clock provider in MFG1 power domain
    - arm64: dts: mediatek: mt8395-genio-1200-evk: Fix dtbs_check error for phy
    - arm64: dts: mt8195: Fix dtbs_check error for mutex node
    - arm64: dts: mt8195: Fix dtbs_check error for infracfg_ao node
    - soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()
    - soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()
    - arm64: dts: qcom: sm6350: Fix GPU frequencies missing on some speedbins
    - arm64: dts: qcom: sda660-ifc6560: fix l10a voltage ranges
    - ARM: dts: microchip: sam9x60: Add missing property atmel,usart-mode
    - mmc: mmc_spi: drop buggy snprintf()
    - scripts/kernel-doc: Do not track section counter across processed files
    - arm64: dts: qcom: x1e80100-slim7x: Drop orientation-switch from USB SS[0-1]
      QMP PHYs
    - arm64: dts: qcom: x1e80100-vivobook-s15: Drop orientation-switch from USB
      SS[0-1] QMP PHYs
    - openrisc: Implement fixmap to fix earlycon
    - efi/libstub: fix efi_parse_options() ignoring the default command line
    - tpm: fix signed/unsigned bug when checking event logs
    - media: i2c: vgxy61: Fix an error handling path in vgxy61_detect()
    - media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call
    - arm64: dts: mt8183: krane: Fix the address of eeprom at i2c4
    - arm64: dts: mt8183: kukui: Fix the address of eeprom at i2c4
    - arm64: dts: qcom: x1e80100: Resize GIC Redistributor register region
    - kernel-doc: allow object-like macros in ReST output
    - arm64: dts: ti: k3-am62x-phyboard-lyra: Drop unnecessary McASP AFIFOs
    - arm64: dts: mediatek: mt8173-elm-hana: Add vdd-supply to second source
      trackpad
    - arm64: dts: mediatek: mt8188: Fix USB3 PHY port default status
    - arm64: dts: mediatek: mt8195-cherry: Use correct audio codec DAI
    - Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"
    - cgroup/bpf: only cgroup v2 can be attached by bpf programs
    - regulator: rk808: Restrict DVS GPIOs to the RK808 variant only
    - power: sequencing: make the QCom PMU pwrseq driver depend on CONFIG_OF
    - [Config] updateconfigs for POWER_SEQUENCING_QCOM_WCN
    - arm64: dts: rockchip: Remove 'enable-active-low' from two boards
    - arm64: dts: mt8183: fennel: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: burnet: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: cozmo: add i2c2's i2c-scl-internal-delay-ns
    - arm64: dts: mt8183: Damu: add i2c2's i2c-scl-internal-delay-ns
    - pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle
    - ARM: dts: cubieboard4: Fix DCDC5 regulator constraints
    - arm64: dts: ti: k3-j7200: Fix register map for main domain pmx
    - arm64: dts: ti: k3-j7200: Fix clock ids for MCSPI instances
    - arm64: dts: ti: k3-j721e: Fix clock IDs for MCSPI instances
    - arm64: dts: ti: k3-j721s2: Fix clock IDs for MCSPI instances
    - watchdog: Add HAS_IOPORT dependency for SBC8360 and SBC7240
    - arm64: dts: qcom: x1e80100: Update C4/C5 residency/exit numbers
    - dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries
    - of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify
    - pmdomain: ti-sci: Add missing of_node_put() for args.np
    - spi: tegra210-quad: Avoid shift-out-of-bounds
    - spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time​
    - regmap: irq: Set lockdep class for hierarchical IRQ domains
    - arm64: dts: renesas: hihope: Drop #sound-dai-cells
    - arm64: dts: imx8mn-tqma8mqnl-mba8mx-usbot: fix coexistence of output-low and
      output-high in GPIO
    - arm64: dts: mediatek: Add ADC node on MT6357, MT6358, MT6359 PMICs
    - arm64: dts: mediatek: mt6358: fix dtbs_check error
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Fix DP bridge supply names
    - arm64: dts: mediatek: mt8183-kukui-jacuzzi: Add supplies for fixed
      regulators
    - selftests/resctrl: Print accurate buffer size as part of MBM results
    - selftests/resctrl: Fix memory overflow due to unhandled wraparound
    - selftests/resctrl: Protect against array overrun during iMC config parsing
    - firmware: arm_scpi: Check the DVFS OPP count returned by the firmware
    - media: ipu6: Fix DMA and physical address debugging messages for 32-bit
    - media: ipu6: not override the dma_ops of device in driver
    - pwm: Assume a disabled PWM to emit a constant inactive output
    - media: atomisp: Add check for rgby_data memory allocation failure
    - arm64: dts: rockchip: correct analog audio name on Indiedroid Nova
    - HID: hyperv: streamline driver probe to avoid devres issues
    - platform/x86: panasonic-laptop: Return errno correctly in show callback
    - drm/imagination: Convert to use time_before macro
    - drm/imagination: Use pvr_vm_context_get()
    - drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused
    - drm/vc4: hvs: Don't write gamma luts on 2711
    - drm/vc4: hdmi: Avoid hang with debug registers when suspended
    - drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer
    - drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function
    - drm/vc4: hvs: Correct logic on stopping an HVS channel
    - wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()
    - drm/omap: Fix possible NULL dereference
    - drm/omap: Fix locking in omap_gem_new_dmabuf()
    - drm/v3d: Appease lockdep while updating GPU stats
    - wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()
    - wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()
    - udmabuf: change folios array from kmalloc to kvmalloc
    - udmabuf: fix vmap_udmabuf error page set
    - [Config] updateconfigs for VMAP_PFN
    - drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/panel: nt35510: Make new commands optional
    - drm/v3d: Address race-condition in MMU flush
    - drm/v3d: Flush the MMU before we supply more memory to the binner
    - drm/amdgpu: Fix JPEG v4.0.3 register write
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1
    - wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2
    - wifi: ath12k: Skip Rx TID cleanup for self peer
    - dt-bindings: vendor-prefixes: Add NeoFidelity, Inc
    - ASoC: fsl_micfil: fix regmap_write_bits usage
    - ASoC: dt-bindings: mt6359: Update generic node name and dmic-mode
    - ASoC: fsl-asoc-card: Add missing handling of {hp,mic}-dt-gpios
    - drm/bridge: anx7625: Drop EDID cache on bridge power off
    - drm/bridge: it6505: Drop EDID cache on bridge power off
    - libbpf: Fix expected_attach_type set handling in program load callback
    - libbpf: Fix output .symtab byte-order during linking
    - dlm: fix swapped args sb_flags vs sb_status
    - wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled
    - drm/amd/display: fix a memleak issue when driver is removed
    - wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()
    - wifi: ath12k: fix one more memcpy size error
    - bpf: Fix the xdp_adjust_tail sample prog issue
    - selftests/bpf: netns_new() and netns_free() helpers.
    - selftests/bpf: Fix backtrace printing for selftests crashes
    - wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR
    - selftests/bpf: add missing header include for htons
    - wifi: cfg80211: check radio iface combination for multi radio per wiphy
    - ice: consistently use q_idx in ice_vc_cfg_qs_msg()
    - drm/vc4: hdmi: Increase audio MAI fifo dreq threshold
    - drm/vc4: Introduce generation number enum
    - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load
    - drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush
    - drm/vc4: Correct generation check in vc4_hvs_lut_load
    - libbpf: fix sym_is_subprog() logic for weak global subprogs
    - accel/ivpu: Prevent recovery invocation during probe and resume
    - ASoC: rt722-sdca: Remove logically deadcode in rt722-sdca.c
    - libbpf: never interpret subprogs in .text as entry programs
    - netdevsim: copy addresses for both in and out paths
    - drm/bridge: tc358767: Fix link properties discovery
    - selftests/bpf: Fix msg_verify_data in test_sockmap
    - selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap
    - wifi: wilc1000: Set MAC after operation mode
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_config_scan()
    - drm: fsl-dcu: enable PIXCLK on LS1021A
    - drm: panel: nv3052c: correct spi_device_id for RG35XX panel
    - drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block
    - drm/msm/dpu: drop LM_3 / LM_4 on SDM845
    - drm/msm/dpu: drop LM_3 / LM_4 on MSM8998
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c
    - octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c
    - selftests/bpf: fix test_spin_lock_fail.c's global vars usage
    - libbpf: move global data mmap()'ing into bpf_object__load()
    - drm/panfrost: Remove unused id_mask from struct panfrost_model
    - bpf, arm64: Remove garbage frame for struct_ops trampoline
    - drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()
    - drm/msm/gpu: Check the status of registration to PM QoS
    - drm/xe/hdcp: Fix gsc structure check in fw check status
    - drm/etnaviv: Request pages from DMA32 zone on addressing_limited
    - drm/etnaviv: hold GPU lock across perfmon sampling
    - drm/amd/display: Increase idle worker HPD detection time
    - drm/amd/display: Reduce HPD Detection Interval for IPS
    - drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()
    - drm: zynqmp_kms: Unplug DRM device before removal
    - drm: xlnx: zynqmp_disp: layer may be null while releasing
    - wifi: wfx: Fix error handling in wfx_core_init()
    - wifi: cw1200: Fix potential NULL dereference
    - drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()
    - bpf, bpftool: Fix incorrect disasm pc
    - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable
    - drm/vkms: Drop unnecessary call to drm_crtc_cleanup()
    - drm/amdgpu: Fix the memory allocation issue in
      amdgpu_discovery_get_nps_info()
    - bpf: Support __nullable argument suffix for tp_btf
    - selftests/bpf: Add test for __nullable suffix in tp_btf
    - bpf: Mark raw_tp arguments with PTR_MAYBE_NULL
    - drm: use ATOMIC64_INIT() for atomic64_t
    - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion
    - netfilter: nf_tables: must hold rcu read lock while iterating expression
      type list
    - netfilter: nf_tables: must hold rcu read lock while iterating object type
      list
    - netlink: typographical error in nlmsg_type constants definition
    - wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()
    - drm/panfrost: Add missing OPP table refcnt decremental
    - drm/panthor: introduce job cycle and timestamp accounting
    - drm/panthor: record current and maximum device clock frequencies
    - drm/panthor: Fix OPP refcnt leaks in devfreq initialisation
    - isofs: avoid memory leak in iocharset
    - selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap
    - selftests/bpf: Fix SENDPAGE data logic in test_sockmap
    - selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap
    - selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap
    - bpf, sockmap: Several fixes to bpf_msg_push_data
    - bpf, sockmap: Several fixes to bpf_msg_pop_data
    - bpf, sockmap: Fix sk_msg_reset_curr
    - ipv6: release nexthop on device removal
    - selftests: net: really check for bg process completion
    - wifi: cfg80211: Remove the Medium Synchronization Delay validity check
    - wifi: iwlwifi: allow fast resume on ax200
    - wifi: iwlwifi: mvm: tell iwlmei when we finished suspending
    - drm/amdgpu: fix ACA bank count boundary check error
    - drm/amdgpu: Fix map/unmap queue logic
    - drm/amdkfd: Fix wrong usage of INIT_WORK()
    - bpf: Allow return values 0 and 1 for kprobe session
    - bpf: Force uprobe bpf program to always return 0
    - selftests/bpf: skip the timer_lockup test for single-CPU nodes
    - ipv6: Fix soft lockups in fib6_select_path under high next hop churn
    - net: rfkill: gpio: Add check for clk_enable()
    - Revert "wifi: iwlegacy: do not skip frames with bad FCS"
    - bpf: Use function pointers count as struct_ops links count
    - bpf: Add kernel symbol for struct_ops trampoline
    - ALSA: usx2y: Use snd_card_free_when_closed() at disconnection
    - ALSA: us122l: Use snd_card_free_when_closed() at disconnection
    - ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
    - ALSA: 6fire: Release resources at card release
    - i2c: dev: Fix memory leak when underlying adapter does not support I2C
    - selftests: netfilter: Fix missing return values in conntrack_dump_flush
    - Bluetooth: btintel_pcie: Add handshake between driver and firmware
    - Bluetooth: btintel: Do no pass vendor events to stack
    - Bluetooth: btmtk: adjust the position to init iso data anchor
    - Bluetooth: btbcm: fix missing of_node_put() in btbcm_get_board_name()
    - Bluetooth: ISO: Use kref to track lifetime of iso_conn
    - Bluetooth: ISO: Do not emit LE PA Create Sync if previous is pending
    - Bluetooth: ISO: Do not emit LE BIG Create Sync if previous is pending
    - Bluetooth: ISO: Send BIG Create Sync via hci_sync
    - Bluetooth: fix use-after-free in device_for_each_child()
    - xsk: Free skb when TX metadata options are invalid
    - erofs: handle NONHEAD !delta[1] lclusters gracefully
    - dlm: fix dlm_recover_members refcount on error
    - eth: fbnic: don't disable the PCI device twice
    - net: txgbe: remove GPIO interrupt controller
    - net: txgbe: fix null pointer to pcs
    - netpoll: Use rcu_access_pointer() in netpoll_poll_lock
    - wireguard: selftests: load nf_conntrack if not present
    - bpf: fix recursive lock when verdict program return SK_PASS
    - unicode: Fix utf8_load() error path
    - cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged
    - RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages
    - RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset
    - clk: mediatek: drop two dead config options
    - [Config] drop COMMON_CLK_MT8195_{AUDSYS,MSDC}
    - trace/trace_event_perf: remove duplicate samples on the first tracepoint
      event
    - pinctrl: zynqmp: drop excess struct member description
    - pinctrl: renesas: Select PINCTRL_RZG2L for RZ/V2H(P) SoC
    - clk: qcom: videocc-sm8550: depend on either gcc-sm8550 or gcc-sm8650
    - iommu/s390: Implement blocking domain
    - scsi: hisi_sas: Enable all PHYs that are not disabled by user during
      controller reset
    - powerpc/vdso: Flag VDSO64 entry points as functions
    - mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race
    - mfd: da9052-spi: Change read-mask to write-mask
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device
    - mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices
    - irqdomain: Simplify simple and legacy domain creation
    - irqdomain: Cleanup domain name allocation
    - irqdomain: Allow giving name suffix for domain
    - regmap: Allow setting IRQ domain name suffix
    - mfd: intel_soc_pmic_bxtwc: Fix IRQ domain names duplication
    - cpufreq: loongson2: Unregister platform_driver on failure
    - powerpc/fadump: Refactor and prepare fadump_cma_init for late init
    - powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()
    - mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE
    - mtd: rawnand: atmel: Fix possible memory leak
    - powerpc/mm/fault: Fix kfence page fault reporting
    - clk: sophgo: avoid integer overflow in sg2042_pll_recalc_rate()
    - mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in
      RD_ANY_REG_OP
    - powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore
    - cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()
    - cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()
    - iommu/amd: Remove amd_iommu_domain_update() from page table freeing
    - iommu/amd: Remove the amd_iommu_domain_set_pt_root() and related
    - iommu/amd: Rename struct amd_io_pgtable iopt to pgtbl
    - iommu/amd: Store the nid in io_pgtable_cfg instead of the domain
    - iommu/amd: Narrow the use of struct protection_domain to invalidation
    - iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB
    - RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci
    - RDMA/hns: Fix flush cqe error when racing with destroy qp
    - RDMA/hns: Modify debugfs name
    - RDMA/hns: Use dev_* printings in hem code instead of ibdev_*
    - RDMA/hns: Fix cpu stuck caused by printings during reset
    - RDMA/rxe: Fix the qp flush warnings in req
    - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey
    - clk: sunxi-ng: d1: Fix PLL_AUDIO0 preset
    - clk: renesas: rzg2l: Fix FOUTPOSTDIV clk
    - RDMA/rxe: Set queue pair cur_qp_state when being queried
    - RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation
    - riscv: kvm: Fix out-of-bounds array access
    - clk: imx: lpcg-scu: SW workaround for errata (e10858)
    - clk: imx: fracn-gppll: correct PLL initialization flow
    - clk: imx: fracn-gppll: fix pll power up
    - clk: imx: clk-scu: fix clk enable state save and restore
    - clk: imx: imx8-acm: Fix return value check in
      clk_imx_acm_attach_pm_domains()
    - iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()
    - iommu/vt-d: Fix checks and print in pgtable_walk()
    - checkpatch: always parse orig_commit in fixes tag
    - mfd: rt5033: Fix missing regmap_del_irq_chip()
    - leds: max5970: Fix unreleased fwnode_handle in probe function
    - leds: ktd2692: Set missing timing properties
    - fs/proc/kcore.c: fix coccinelle reported ERROR instances
    - scsi: target: Fix incorrect function name in pscsi_create_type_disk()
    - scsi: bfa: Fix use-after-free in bfad_im_module_exit()
    - scsi: fusion: Remove unused variable 'rc'
    - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()
    - scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()
    - scsi: sg: Enable runtime power management
    - x86/tdx: Introduce wrappers to read and write TD metadata
    - x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()
    - x86/tdx: Dynamically disable SEPT violations from causing #VEs
    - powerpc/fadump: allocate memory for additional parameters early
    - fadump: reserve param area if below boot_mem_top
    - RDMA/hns: Fix out-of-order issue of requester when setting FENCE
    - RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()
    - cpufreq: loongson3: Check for error code from devm_mutex_init() call
    - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()
    - cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()
    - kasan: move checks to do_strncpy_from_user
    - kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL
    - ocfs2: fix uninitialized value in ocfs2_file_read_iter()
    - dax: delete a stale directory pmem
    - KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests
    - KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending
      doorbells
    - powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static
    - RDMA/hns: Fix different dgids mapping to the same dip_idx
    - KVM: PPC: Book3S HV: Fix kmv -> kvm typo
    - powerpc/kexec: Fix return of uninitialized variable
    - fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()
    - RDMA/mlx5: Move events notifier registration to be after device registration
    - clk: clk-apple-nco: Add NULL check in applnco_probe
    - clk: ralink: mtmips: fix clock plan for Ralink SoC RT3883
    - clk: ralink: mtmips: fix clocks probe order in oldest ralink SoCs
    - clk: en7523: remove REG_PCIE*_{MEM,MEM_MASK} configuration
    - clk: en7523: move clock_register in hw_init callback
    - clk: en7523: introduce chip_scu regmap
    - clk: en7523: fix estimation of fixed rate for EN7581
    - dt-bindings: clock: axi-clkgen: include AXI clk
    - clk: clk-axi-clkgen: make sure to enable the AXI bus clock
    - arm64: dts: qcom: sc8180x: Add a SoC-specific compatible to cpufreq-hw
    - pinctrl: k210: Undef K210_PC_DEFAULT
    - rtla/timerlat: Do not set params->user_workload with -U
    - smb: cached directories can be more than root file handle
    - mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()
    - mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()
    - x86: fix off-by-one in access_ok()
    - perf cs-etm: Don't flush when packet_queue fills up
    - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE
    - gfs2: Allow immediate GLF_VERIFY_DELETE work
    - gfs2: Fix unlinked inode cleanup
    - perf test: Add test for Intel TPEBS counting mode
    - perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}
    - PCI: Fix reset_method_store() memory leak
    - perf stat: Close cork_fd when create_perf_stat_counter() failed
    - perf stat: Fix affinity memory leaks on error path
    - perf trace: Keep exited threads for summary
    - perf test attr: Add back missing topdown events
    - f2fs: compress: fix inconsistent update of i_blocks in
      release_compress_blocks and reserve_compress_blocks
    - f2fs: fix null-ptr-deref in f2fs_submit_page_bio()
    - f2fs: fix to account dirty data in __get_secs_required()
    - perf dso: Fix symtab_type for kmod compression
    - perf probe: Fix libdw memory leak
    - perf probe: Correct demangled symbols in C++ program
    - rust: kernel: fix THIS_MODULE header path in ThisModule doc comment
    - rust: macros: fix documentation of the paste! macro
    - PCI: cpqphp: Use PCI_POSSIBLE_ERROR() to check config reads
    - PCI: cpqphp: Fix PCIBIOS_* return value confusion
    - rust: block: fix formatting of `kernel::block::mq::request` module
    - perf disasm: Use disasm_line__free() to properly free disasm_line
    - virtiofs: use pages instead of pointer for kernel direct IO
    - perf ftrace latency: Fix unit on histogram first entry when using --use-nsec
    - i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin
    - f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block
    - f2fs: check curseg->inited before write_sum_page in change_curseg
    - f2fs: Fix not used variable 'index'
    - f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()
    - f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or
      GC_URGENT_MID
    - PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()
    - PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()
    - PCI: cadence: Extract link setup sequence from cdns_pcie_host_setup()
    - PCI: cadence: Set cdns_pcie_host_init() global
    - PCI: j721e: Add reset GPIO to struct j721e_pcie
    - PCI: j721e: Use T_PERST_CLK_US macro
    - PCI: j721e: Add suspend and resume support
    - PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds
    - perf build: Add missing cflags when building with custom libtraceevent
    - f2fs: fix race in concurrent f2fs_stop_gc_thread
    - f2fs: fix to map blocks correctly for direct write
    - f2fs: fix to avoid forcing direct write to use buffered IO on inline_data
      inode
    - perf trace: avoid garbage when not printing a trace event's arguments
    - m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x
    - m68k: coldfire/device.c: only build FEC when HW macros are defined
    - svcrdma: Address an integer overflow
    - nfsd: drop inode parameter from nfsd4_change_attribute()
    - perf list: Fix topic and pmu_name argument order
    - perf trace: Fix tracing itself, creating feedback loops
    - perf trace: Do not lose last events in a race
    - perf trace: Avoid garbage when not printing a syscall's arguments
    - remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()
    - remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()
    - remoteproc: qcom: pas: add minidump_id to SM8350 resources
    - rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length
    - remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region
    - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'
    - NFSD: Prevent NULL dereference in nfsd4_process_cb_update()
    - NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()
    - nfsd: release svc_expkey/svc_export with rcu_work
    - svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()
    - NFSD: Fix nfsd4_shutdown_copy()
    - f2fs: clean up val{>>,<<}F2FS_BLKSIZE_BITS
    - f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow
    - hwmon: (tps23861) Fix reporting of negative temperatures
    - hwmon: (aquacomputer_d5next) Fix length of speed_input array
    - phy: airoha: Fix REG_CSR_2L_PLL_CMN_RESERVE0 config in
      airoha_pcie_phy_init_clk_out()
    - phy: airoha: Fix REG_PCIE_PMA_TX_RESET config in
      airoha_pcie_phy_init_csr_2l()
    - phy: airoha: Fix REG_CSR_2L_JCPLL_SDM_HREN config in
      airoha_pcie_phy_init_ssc_jcpll()
    - phy: airoha: Fix REG_CSR_2L_RX{0,1}_REV0 definitions
    - vdpa/mlx5: Fix suboptimal range on iotlb iteration
    - vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()
    - vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()
    - selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels
    - gpio: zevio: Add missed label initialisation
    - vfio/pci: Properly hide first-in-list PCIe extended capability
    - fs_parser: update mount_api doc to match function signature
    - LoongArch: Fix build failure with GCC 15 (-std=gnu23)
    - LoongArch: BPF: Sign-extend return values
    - power: supply: core: Remove might_sleep() from power_supply_put()
    - power: supply: bq27xxx: Fix registers of bq27426
    - power: supply: rt9471: Fix wrong WDT function regfield declaration
    - power: supply: rt9471: Use IC status regfield to report real charger status
    - net: usb: lan78xx: Fix double free issue with interrupt buffer allocation
    - net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device
    - tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets
    - net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL
      configuration
    - net: microchip: vcap: Add typegroup table terminators in kunit tests
    - netlink: fix false positive warning in extack during dumps
    - exfat: fix file being changed by unaligned direct write
    - s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()
    - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged
    - net: mdio-ipq4019: add missing error check
    - marvell: pxa168_eth: fix call balance of pep->clk handling routines
    - net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken
    - octeontx2-af: RPM: Fix mismatch in lmac type
    - octeontx2-af: RPM: Fix low network performance
    - octeontx2-af: RPM: fix stale RSFEC counters
    - octeontx2-af: RPM: fix stale FCFEC counters
    - octeontx2-af: Quiesce traffic before NIX block reset
    - spi: atmel-quadspi: Fix register name in verbose logging function
    - net: hsr: fix hsr_init_sk() vs network/transport headers.
    - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down
    - bnxt_en: Set backplane link modes correctly for ethtool
    - bnxt_en: Fix receive ring space parameters when XDP is active
    - bnxt_en: Refactor bnxt_ptp_init()
    - bnxt_en: Unregister PTP during PCI shutdown and suspend
    - Bluetooth: MGMT: Fix slab-use-after-free Read in set_powered_sync
    - Bluetooth: MGMT: Fix possible deadlocks
    - llc: Improve setsockopt() handling of malformed user input
    - rxrpc: Improve setsockopt() handling of malformed user input
    - tcp: Fix use-after-free of nreq in reqsk_timer_handler().
    - ip6mr: fix tables suspicious RCU usage
    - ipmr: fix tables suspicious RCU usage
    - iio: light: al3010: Fix an error handling path in al3010_probe()
    - usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()
    - usb: yurex: make waiting on yurex_write interruptible
    - USB: chaoskey: fail open after removal
    - USB: chaoskey: Fix possible deadlock chaoskey_list_lock
    - misc: apds990x: Fix missing pm_runtime_disable()
    - devres: Fix page faults when tracing devres from unloaded modules
    - usb: gadget: uvc: wake pump everytime we update the free list
    - interconnect: qcom: icc-rpmh: probe defer incase of missing QoS clock
      dependency
    - phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe
    - phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe
    - counter: stm32-timer-cnt: Add check for clk_enable()
    - counter: ti-ecap-capture: Add check for clk_enable()
    - bus: mhi: host: Switch trace_mhi_gen_tre fields to native endian
    - usb: typec: fix potential array underflow in ucsi_ccg_sync_control()
    - firmware_loader: Fix possible resource leak in fw_log_firmware_info()
    - ALSA: hda/realtek: Update ALC256 depop procedure
    - drm/radeon: add helper rdev_to_drm(rdev)
    - drm/radeon: change rdev->ddev to rdev_to_drm(rdev)
    - drm/radeon: Fix spurious unplug event on radeon HDMI
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in
      dcn20_program_pipe
    - drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp
    - ASoC: imx-audmix: Add NULL check in imx_audmix_probe
    - drm/xe/ufence: Wake up waiters after setting ufence->signalled
    - apparmor: fix 'Do simple duplicate message elimination'
    - ALSA: core: Fix possible NULL dereference caused by kunit_kzalloc()
    - ASoC: amd: yc: Fix for enabling DMIC on acp6x via _DSD entry
    - ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe
    - s390/pci: Fix potential double remove of hotplug slot
    - net_sched: sch_fq: don't follow the fast path if Tx is behind now
    - xen: Fix the issue of resource not being properly released in
      xenbus_dev_probe()
    - ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox
      devices
    - ALSA: usb-audio: Fix out of bounds reads when finding clock sources
    - usb: ehci-spear: fix call balance of sehci clk handling routines
    - usb: typec: ucsi: glink: fix off-by-one in connector_status
    - dm-cache: fix warnings about duplicate slab caches
    - dm-bufio: fix warnings about duplicate slab caches
    - ASoC: Intel: sst: Fix used of uninitialized ctx to log an error
    - soc: qcom: socinfo: fix revision check in qcom_socinfo_probe()
    - irqdomain: Always associate interrupts for legacy domains
    - ext4: supress data-race warnings in ext4_free_inodes_{count,set}()
    - ext4: fix FS_IOC_GETFSMAP handling
    - jfs: xattr: check invalid xattr size more strictly
    - ASoC: amd: yc: Add a quirk for microfone on Lenovo ThinkPad P14s Gen 5
      21MES00B00
    - ASoC: codecs: Fix atomicity violation in snd_soc_component_get_drvdata()
    - ASoC: da7213: Populate max_register to regmap_config
    - perf/x86/intel/pt: Fix buffer full but size is 0 case
    - crypto: x86/aegis128 - access 32-bit arguments as 32-bit
    - KVM: x86: switch hugepage recovery thread to vhost_task
    - KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE
    - powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector
    - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR
    - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status
    - KVM: arm64: Don't retire aborted MMIO instruction
    - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE
    - KVM: arm64: Get rid of userspace_irqchip_in_use
    - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*
    - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device
    - Compiler Attributes: disable __counted_by for clang < 19.1.3
    - PCI: Fix use-after-free of slot->bus on hot remove
    - LoongArch: Explicitly specify code model in Makefile
    - clk: clk-loongson2: Fix memory corruption bug in struct
      loongson2_clk_provider
    - clk: clk-loongson2: Fix potential buffer overflow in flexible-array member
      access
    - fsnotify: fix sending inotify event with unexpected filename
    - comedi: Flush partial mappings in error case
    - apparmor: test: Fix memory leak for aa_unpack_strdup()
    - iio: dac: adi-axi-dac: fix wrong register bitfield
    - tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler
    - locking/lockdep: Avoid creating new name string literals in
      lockdep_set_subclass()
    - tools/nolibc: s390: include std.h
    - pinctrl: qcom: spmi: fix debugfs drive strength
    - dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with
      fallbacks
    - dt-bindings: iio: dac: ad3552r: fix maximum spi speed
    - exfat: fix uninit-value in __exfat_get_dentry_set
    - exfat: fix out-of-bounds access of directory entries
    - xhci: Fix control transfer error on Etron xHCI host
    - xhci: Combine two if statements for Etron xHCI host
    - xhci: Don't perform Soft Retry for Etron xHCI host
    - xhci: Don't issue Reset Device command to Etron xHCI host
    - Bluetooth: Fix type of len in rfcomm_sock_getsockopt{,_old}()
    - usb: xhci: Limit Stop Endpoint retries
    - usb: xhci: Fix TD invalidation under pending Set TR Dequeue
    - usb: xhci: Avoid queuing redundant Stop Endpoint commands
    - ARM: dts: omap36xx: declare 1GHz OPP as turbo again
    - wifi: ath12k: fix warning when unbinding
    - wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of
      failures
    - wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan
    - wifi: ath12k: fix crash when unbinding
    - wifi: brcmfmac: release 'root' node in all execution paths
    - Revert "fs: don't block i_writecount during exec"
    - Revert "f2fs: remove unreachable lazytime mount option parsing"
    - Revert "usb: gadget: composite: fix OS descriptors w_value logic"
    - serial: sh-sci: Clean sci_ports[0] after at earlycon exit
    - Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"
    - io_uring: fix corner case forgetting to vunmap
    - io_uring: check for overflows in io_pin_pages
    - blk-settings: round down io_opt to physical_block_size
    - gpio: exar: set value when external pull-up or pull-down is present
    - spi: Fix acpi deferred irq probe
    - mtd: spi-nor: core: replace dummy buswidth from addr to data
    - cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()
    - cifs: support mounting with alternate password to allow password rotation
    - parisc/ftrace: Fix function graph tracing disablement
    - RISC-V: Scalar unaligned access emulated on hotplug CPUs
    - RISC-V: Check scalar unaligned access on all CPUs
    - ksmbd: fix use-after-free in SMB request handling
    - smb: client: fix NULL ptr deref in crypto_aead_setkey()
    - platform/chrome: cros_ec_typec: fix missing fwnode reference decrement
    - irqchip/irq-mvebu-sei: Move misplaced select() callback to SEI CP domain
    - x86/CPU/AMD: Terminate the erratum_1386_microcode array
    - ubi: wl: Put source PEB into correct list if trying locking LEB failed
    - um: ubd: Do not use drvdata in release
    - um: net: Do not use drvdata in release
    - dt-bindings: serial: rs485: Fix rs485-rts-delay property
    - serial: 8250_fintek: Add support for F81216E
    - serial: 8250: omap: Move pm_runtime_get_sync
    - serial: amba-pl011: Fix RX stall when DMA is used
    - serial: amba-pl011: fix build regression
    - mtd: ubi: fix unreleased fwnode_handle in find_volume_fwnode()
    - block: Prevent potential deadlock in blk_revalidate_disk_zones()
    - um: vector: Do not use drvdata in release
    - sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK
    - iio: gts: Fix uninitialized symbol 'ret'
    - ublk: fix ublk_ch_mmap() for 64K page size
    - arm64: tls: Fix context-switching of tpidrro_el0 when kpti is enabled
    - block: fix missing dispatching request when queue is started or unquiesced
    - block: fix ordering between checking QUEUE_FLAG_QUIESCED request adding
    - block: fix ordering between checking BLK_MQ_S_STOPPED request adding
    - blk-mq: Make blk_mq_quiesce_tagset() hold the tag list mutex less long
    - gve: Flow steering trigger reset only for timeout error
    - HID: wacom: Interpret tilt data from Intuos Pro BT as signed values
    - i40e: Fix handling changed priv flags
    - media: wl128x: Fix atomicity violation in fmc_send_cmd()
    - media: intel/ipu6: do not handle interrupts when device is disabled
    - arm64: dts: mediatek: mt8186-corsola-voltorb: Merge speaker codec nodes
    - netdev-genl: Hold rcu_read_lock in napi_get
    - soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()
    - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result
    - ALSA: rawmidi: Fix kvfree() call in spinlock
    - ALSA: ump: Fix evaluation of MIDI 1.0 FB info
    - ALSA: pcm: Add sanity NULL check for the default mmap fault handler
    - ALSA: hda/realtek: Update ALC225 depop procedure
    - ALSA: hda/realtek: Set PCBeep to default value for ALC274
    - ALSA: hda/realtek: Fix Internal Speaker and Mic boost of Infinix Y4 Max
    - ALSA: hda/realtek: Apply quirk for Medion E15433
    - smb3: request handle caching when caching directories
    - smb: client: handle max length for SMB symlinks
    - smb: Don't leak cfid when reconnect races with open_cached_dir
    - smb: prevent use-after-free due to open_cached_dir error paths
    - smb: During unmount, ensure all cached dir instances drop their dentry
    - usb: misc: ljca: set small runtime autosuspend delay
    - usb: misc: ljca: move usb_autopm_put_interface() after wait for response
    - usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED
    - usb: musb: Fix hardware lockup on first Rx endpoint request
    - usb: dwc3: gadget: Fix checking for number of TRBs left
    - usb: dwc3: gadget: Fix looping of queued SG entries
    - staging: vchiq_arm: Fix missing refcount decrement in error path for fw_node
    - counter: stm32-timer-cnt: fix device_node handling in probe_encoder()
    - ublk: fix error code for unsupported command
    - lib: string_helpers: silence snprintf() output truncation warning
    - f2fs: fix to do sanity check on node blkaddr in truncate_node()
    - ipc: fix memleak if msg_init_ns failed in create_ipc_ns
    - Input: cs40l50 - fix wrong usage of INIT_WORK()
    - NFSD: Prevent a potential integer overflow
    - SUNRPC: make sure cache entry active before cache_show
    - um: Fix potential integer overflow during physmem setup
    - um: Fix the return value of elf_core_copy_task_fpregs
    - kfifo: don't include dma-mapping.h in kfifo.h
    - um: ubd: Initialize ubd's disk pointer in ubd_add
    - um: Always dump trace for specified task in show_stack
    - NFSv4.0: Fix a use-after-free problem in the asynchronous open()
    - rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()
    - rtc: abx80x: Fix WDT bit position of the status register
    - rtc: check if __rtc_read_time was successful in rtc_timer_do_work()
    - ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty
    - ubifs: Correct the total block count by deducting journal reservation
    - ubi: fastmap: Fix duplicate slab cache names while attaching
    - ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit
    - jffs2: fix use of uninitialized variable
    - rtc: rzn1: fix BCD to rtc_time conversion errors
    - Revert "nfs: don't reuse partially completed requests in
      nfs_lock_and_join_requests"
    - nvme-multipath: avoid hang on inaccessible namespaces
    - nvme/multipath: Fix RCU list traversal to use SRCU primitive
    - blk-mq: add non_owner variant of start_freeze/unfreeze queue APIs
    - block: model freeze & enter queue as lock for supporting lockdep
    - block: fix uaf for flush rq while iterating tags
    - block: return unsigned int from bdev_io_min
    - nvme-fabrics: fix kernel crash while shutting down controller
    - 9p/xen: fix init sequence
    - 9p/xen: fix release of IRQ
    - perf/arm-smmuv3: Fix lockdep assert in ->event_init()
    - perf/arm-cmn: Ensure port and device id bits are set properly
    - smb: client: disable directory caching when dir_cache_timeout is zero
    - x86/Documentation: Update algo in init_size description of boot protocol
    - cifs: Fix parsing native symlinks relative to the export
    - cifs: Fix parsing reparse point with native symlink in SMB1 non-UNICODE
      session
    - rtc: ab-eoz9: don't fail temperature reads on undervoltage notification
    - Rename .data.unlikely to .data..unlikely
    - Rename .data.once to .data..once to fix resetting WARN*_ONCE
    - kbuild: deb-pkg: Don't fail if modules.order is missing
    - smb: Initialize cfid->tcon before performing network ops
    - block: Don't allow an atomic write be truncated in blkdev_write_iter()
    - modpost: remove incorrect code in do_eisa_entry()
    - cifs: during remount, make sure passwords are in sync
    - cifs: unlock on error in smb3_reconfigure()
    - nfs: ignore SB_RDONLY when mounting nfs
    - sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport
    - SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT
    - sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket
    - nfs/blocklayout: Don't attempt unregister for invalid block device
    - nfs/blocklayout: Limit repeat device registration on failure
    - block, bfq: fix bfqq uaf in bfq_limit_depth()
    - brd: decrease the number of allocated pages which discarded
    - sh: intc: Fix use-after-free bug in register_intc_controller()
    - tools/power turbostat: Fix trailing '\n' parsing
    - tools/power turbostat: Fix child's argument forwarding
    - block: always verify unfreeze lock on the owner task
    - block: don't verify IO lock for freeze/unfreeze in elevator_init_mq()
    - Linux 6.11.11
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-53141
    - netfilter: ipset: add missing range check in bitmap_ip_uadt
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-50010
    - Revert "exec: don't WARN for racy path_noexec check"
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-53143
    - fsnotify: Fix ordering of iput() and watched_objects decrement
  * Oracular update: v6.11.11 upstream stable release (LP: #2091655) //
    CVE-2024-53142
    - initramfs: avoid filename buffer overrun
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650)
    - net: vertexcom: mse102x: Fix tx_bytes calculation
    - net/mlx5: Fix msix vectors to respect platform limit
    - net/mlx5e: clear xdp features on non-uplink representors
    - net/mlx5e: Disable loopback self-test on multi-PF netdev
    - drm/i915/gsc: ARL-H and ARL-U need a newer GSC FW.
    - drivers: perf: Fix wrong put_cpu() placement
    - Bluetooth: hci_core: Fix calling mgmt_device_connected
    - Bluetooth: btintel: Direct exception event to bluetooth stack
    - net: sched: cls_u32: Fix u32's systematic failure to free IDR entries for
      hnodes.
    - net: phylink: ensure PHY momentary link-fails are handled
    - samples: pktgen: correct dev to DEV
    - net: stmmac: dwmac-mediatek: Fix inverted handling of mediatek,mac-wol
    - net: Make copy_safe_from_sockptr() match documentation
    - stmmac: dwmac-intel-plat: fix call balance of tx_clk handling routines
    - net: ti: icssg-prueth: Fix 1 PPS sync
    - bonding: add ns target multicast address to slave device
    - ARM: 9419/1: mm: Fix kernel memory mapping for xip kernels
    - tools/mm: fix compile error
    - drm/amd/display: Run idle optimizations at end of vblank handler
    - drm/amd/display: Change some variable name of psr
    - drm/amd/display: Fix Panel Replay not update screen correctly
    - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y
    - x86/stackprotector: Work around strict Clang TLS symbol requirements
    - crash, powerpc: default to CRASH_DUMP=n on PPC_BOOK3S_32
    - [Config] enable ARCH_DEFAULT_CRASH_DUMP
    - mm: revert "mm: shmem: fix data-race in shmem_getattr()"
    - vdpa/mlx5: Fix PA offset with unaligned starting iotlb map
    - evm: stop avoidably reading i_writecount in evm_file_release
    - KVM: selftests: Disable strict aliasing
    - KVM: nVMX: Treat vpid01 as current if L2 is active, but with VPID disabled
    - KVM: x86: Unconditionally set irr_pending when updating APICv state
    - tpm: Disable TPM on tpm2_create_primary() failure
    - ALSA: hda/realtek - Fixed Clevo platform headset Mic issue
    - ALSA: hda/realtek - update set GPIO3 to default for Thinkpad with ALC1318
    - mptcp: update local address flags when setting it
    - mptcp: hold pm lock when deleting entry
    - mptcp: pm: use _rcu variant under rcu_read_lock
    - ocfs2: fix UBSAN warning in ocfs2_verify_volume()
    - LoongArch: Fix early_numa_add_cpu() usage for FDT systems
    - LoongArch: Disable KASAN if PGDIR_SIZE is too large for cpu_vabits
    - LoongArch: Add WriteCombine shadow mapping in KASAN
    - LoongArch: Fix AP booting issue in VM mode
    - LoongArch: Make KASAN work with 5-level page-tables
    - selftests: hugetlb_dio: fixup check for initial conditions to skip in the
      start
    - btrfs: fix incorrect comparison for delayed refs
    - mailbox: qcom-cpucp: Mark the irq with IRQF_NO_SUSPEND flag
    - firmware: arm_scmi: Skip opp duplicates
    - firmware: arm_scmi: Report duplicate opps as firmware bugs
    - mmc: sunxi-mmc: Fix A100 compatible description
    - drm/bridge: tc358768: Fix DSI command tx
    - drm/xe: handle flat ccs during hibernation on igpu
    - pmdomain: arm: Use FLAG_DEV_NAME_FW to ensure unique names
    - pmdomain: core: Add GENPD_FLAG_DEV_NAME_FW flag
    - nouveau: fw: sync dma after setup is called.
    - nouveau: handle EBUSY and EAGAIN for GSP aux errors.
    - nouveau/dp: handle retries for AUX CH transfers with GSP.
    - drm/amd: Fix initialization mistake for NBIO 7.7.0
    - drm/amdgpu: fix check in gmc_v9_0_get_vm_pte()
    - drm/amdgpu: Fix video caps for H264 and HEVC encode maximum size
    - drm/amd/pm: print pp_dpm_mclk in ascending order on SMU v14.0.0
    - drm/amdgpu: enable GTT fallback handling for dGPUs only
    - drm/amdgpu/mes12: correct kiq unmap latency
    - drm/amd/display: Require minimum VBlank size for stutter optimization
    - drm/amd/display: Fix failure to read vram info due to static BP_RESULT
    - mm: refactor arch_calc_vm_flag_bits() and arm64 MTE handling
    - drm/xe: Restore system memory GGTT mappings
    - drm/xe: improve hibernation on igpu
    - lib/buildid: Fix build ID parsing logic
    - net: sched: u32: Add test case for systematic hnode IDR leaks
    - media: dvbdev: fix the logic when DVB_DYNAMIC_MINORS is not set
    - Linux 6.11.10
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53133
    - drm/amd/display: Handle dml allocation failure to avoid crash
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53108
    - drm/amd/display: Adjust VSDB parser for replay feature
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53134
    - pmdomain: imx93-blk-ctrl: correct remove path
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53132
    - drm/xe/oa: Fix "Missing outer runtime PM protection" warning
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53127
    - Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53130
    - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53105
    - mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53109
    - nommu: pass NULL argument to vma_iter_prealloc()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53131
    - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53135
    - KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind
      CONFIG_BROKEN
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53106
    - ima: fix buffer overrun in ima_eventdigest_init_common
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53110
    - vp_vdpa: fix id_table array not null terminated error
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53126
    - vdpa: solidrun: Fix UB bug with devres
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53111
    - mm/mremap: fix address wraparound in move_page_tables()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53107
    - fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53128
    - sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53112
    - ocfs2: uncache inode which has failed entering the group
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53113
    - mm: fix NULL pointer dereference in alloc_pages_bulk_noprof
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53114
    - x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53137
    - ARM: fix cacheflush with PAN
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53115
    - drm/vmwgfx: avoid null_ptr_deref in vmw_framebuffer_surface_create_handle
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53116
    - drm/panthor: Fix handling of partial GPU mapping of BOs
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53117
    - virtio/vsock: Improve MSG_ZEROCOPY error handling
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53118
    - vsock: Fix sk_error_queue memory leak
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53119
    - virtio/vsock: Fix accept_queue memory leak
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53120
    - net/mlx5e: CT: Fix null-ptr-deref in add rule err flow
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53138
    - net/mlx5e: kTLS, Fix incorrect page refcounting
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53121
    - net/mlx5: fs, lock FTE when checking if active
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53122
    - mptcp: cope racing subflow creation in mptcp_rcv_space_adjust
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53123
    - mptcp: error out earlier on disconnect
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53124
    - net: fix data-races around sk->sk_forward_alloc
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53129
    - drm/rockchip: vop: Fix a dereferenced before check warning
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53139
    - sctp: fix possible UAF in sctp_v6_available()
  * Oracular update: v6.11.10 upstream stable release (LP: #2091650) //
    CVE-2024-53140
    - netlink: terminate outstanding dump on socket close
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649)
    - nvme/host: Fix RCU list traversal to use SRCU primitive
    - 9p: v9fs_fid_find: also lookup by inode if not found dentry
    - 9p: Avoid creating multiple slab caches with the same name
    - selftests/bpf: Verify that sync_linked_regs preserves subreg_def
    - nvmet-passthru: clear EUID/NGUID/UUID while using loop target
    - irqchip/ocelot: Fix trigger register address
    - pinctrl: aw9523: add missing mutex_destroy
    - pinctrl: intel: platform: Add Panther Lake to the list of supported
    - block: Fix elevator_get_default() checking for NULL q->tag_set
    - HID: multitouch: Add support for B2402FVA track point
    - HID: multitouch: Add quirk for HONOR MagicBook Art 14 touchpad
    - iommu/arm-smmu: Clarify MMU-500 CPRE workaround
    - nvme: disable CC.CRIME (NVME_CC_CRIME)
    - bpf: use kvzmalloc to allocate BPF verifier environment
    - crypto: api - Fix liveliness check in crypto_alg_tested
    - crypto: marvell/cesa - Disable hash algorithms
    - s390/ap: Fix CCA crypto card behavior within protected execution environment
    - sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML
    - drm/vmwgfx: Limit display layout ioctl array size to
      VMWGFX_NUM_DISPLAY_UNITS
    - selftests/bpf: Assert link info uprobe_multi count & path_size if unset
    - ALSA: hda/tas2781: Add new quirk for Lenovo, ASUS, Dell projects
    - drm/amdkfd: Accounting pdd vram_usage for svm
    - powerpc/powernv: Free name on error in opal_event_init()
    - net: phy: mdio-bcm-unimac: Add BCM6846 support
    - drm/xe/query: Increase timestamp width
    - nvme-loop: flush off pending I/O while shutting down loop controller
    - samples/landlock: Fix port parsing in sandboxer
    - vDPA/ifcvf: Fix pci_read_config_byte() return code handling
    - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6
    - ASoC: Intel: avs: Update stream status in a separate thread
    - ASoC: codecs: Fix error handling in aw_dev_get_dsp_status function
    - ASoC: amd: yc: Add quirk for ASUS Vivobook S15 M3502RA
    - ASoC: amd: yc: Fix non-functional mic on ASUS E1404FA
    - ASoC: Intel: soc-acpi: lnl: Add match entry for TM2 laptops
    - netfs: Downgrade i_rwsem for a buffered write
    - HID: i2c-hid: Delayed i2c resume wakeup for 0x0d42 Goodix touchpad
    - HID: multitouch: Add quirk for Logitech Bolt receiver w/ Casa touchpad
    - HID: lenovo: Add support for Thinkpad X1 Tablet Gen 3 keyboard
    - ASoC: codecs: lpass-rx-macro: fix RXn(rx,n) macro for DSM_CTL and SEC7 regs
    - RISCV: KVM: use raw_spinlock for critical section in imsic
    - ASoC: rt722-sdca: increase clk_stop_timeout to fix clock stop issue
    - LoongArch: Use "Exception return address" to comment ERA
    - ASoC: fsl_micfil: Add sample rate constraint
    - net: usb: qmi_wwan: add Fibocom FG132 0x0112 composition
    - drm/xe: Enlarge the invalidation timeout from 150 to 500
    - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
    - drm/xe: Handle unreliable MMIO reads during forcewake
    - drm/xe: Don't restart parallel queues multiple times on GT reset
    - mm: krealloc: Fix MTE false alarm in __do_krealloc
    - 9p: fix slab cache name creation for real
    - Linux 6.11.9
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53098
    - drm/xe/ufence: Prefetch ufence addr to catch bogus address
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53099
    - bpf: Check validity of link->type in bpf_link_show_fdinfo()
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53089
    - LoongArch: KVM: Mark hrtimer to expire in hard interrupt context
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53090
    - afs: Fix lock recursion
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53101
    - fs: Fix uninitialized value issue in from_kuid and from_kgid
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53091
    - bpf: Add sk_is_inet and IS_ICSK check in tls_sw_has_ctx_tx/rx
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53092
    - virtio_pci: Fix admin vq cleanup by using correct info pointer
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53102
    - nvme: make keep-alive synchronous operation
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53093
    - nvme-multipath: defer partition scanning
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53094
    - RDMA/siw: Add sendpage_ok() check to disable MSG_SPLICE_PAGES
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53100
    - nvme: tcp: avoid race between queue_lock lock and destroy
  * Oracular update: v6.11.9 upstream stable release (LP: #2091649) //
    CVE-2024-53095
    - smb: client: Fix use-after-free of network namespace.
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645)
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-eaidk-610
    - arm64: dts: rockchip: Fix rt5651 compatible value on rk3399-sapphire-
      excavator
    - arm64: dts: rockchip: Move L3 cache outside CPUs in RK3588(S) SoC dtsi
    - arm64: dts: rockchip: Start cooling maps numbering from zero on ROCK 5B
    - arm64: dts: rockchip: Designate Turing RK1's system power controller
    - EDAC/qcom: Make irq configuration optional
    - arm64: dts: rockchip: Remove hdmi's 2nd interrupt on rk3328
    - arm64: dts: rockchip: Fix wakeup prop names on PineNote BT node
    - arm64: dts: rockchip: Fix reset-gpios property on brcm BT nodes
    - arm64: dts: rockchip: fix i2c2 pinctrl-names property on anbernic-rg353p/v
    - arm64: dts: rockchip: Drop regulator-init-microvolt from two boards
    - arm64: dts: rockchip: Fix bluetooth properties on rk3566 box demo
    - arm64: dts: rockchip: Fix bluetooth properties on Rock960 boards
    - arm64: dts: rockchip: Add DTS for FriendlyARM NanoPi R2S Plus
    - arm64: dts: rockchip: Remove undocumented supports-emmc property
    - arm64: dts: rockchip: Remove #cooling-cells from fan on Theobroma lion
    - arm64: dts: rockchip: Fix LED triggers on rk3308-roc-cc
    - arm64: dts: rockchip: remove num-slots property from rk3328-nanopi-r2s-plus
    - arm64: dts: qcom: sm8450 fix PIPE clock specification for pcie1
    - arm64: dts: imx8-ss-vpu: Fix imx8qm VPU IRQs
    - arm64: dts: imx8mp: correct sdhc ipg clk
    - arm64: dts: imx8mp-phyboard-pollux: Set Video PLL1 frequency to 506.8 MHz
    - firmware: qcom: scm: Return -EOPNOTSUPP for unsupported SHM bridge enabling
    - arm64: dts: rockchip: remove orphaned pinctrl-names from pinephone pro
    - ARM: dts: rockchip: fix rk3036 acodec node
    - ARM: dts: rockchip: drop grf reference from rk3036 hdmi
    - ARM: dts: rockchip: Fix the spi controller on rk3036
    - ARM: dts: rockchip: Fix the realtek audio codec on rk3036-kylin
    - arm64: dts: rockchip: Correct GPIO polarity on brcm BT nodes
    - sunrpc: handle -ENOTCONN in xs_tcp_setup_socket()
    - NFSv3: only use NFS timeout for MOUNT when protocols are compatible
    - NFS: Fix attribute delegation behaviour on exclusive create
    - NFS: Further fixes to attribute delegation a/mtime changes
    - nfs: avoid i_lock contention in nfs_clear_invalid_mapping
    - net: enetc: set MAC address to the VF net_device
    - net: dpaa_eth: print FD status in CPU endianness in dpaa_eth_fd tracepoint
    - dt-bindings: net: xlnx,axi-ethernet: Correct phy-mode property value
    - can: c_can: fix {rx,tx}_errors statistics
    - ice: change q_index variable type to s16 to store -1 value
    - e1000e: Remove Meteor Lake SMBUS workarounds
    - net: phy: ti: add PHY_RST_AFTER_CLK_EN flag
    - net: stmmac: Fix unbalanced IRQ wake disable warning on single irq case
    - netfilter: nf_tables: wait for rcu grace period on net_device removal
    - virtio_net: Support dynamic rss indirection table size
    - virtio_net: Sync rss config to device when virtnet_probe
    - virtio_net: Update rss when set queue
    - net: arc: rockchip: fix emac mdio node support
    - drivers: net: ionic: add missed debugfs cleanup to ionic_probe() error path
    - Revert "ALSA: hda/conexant: Mute speakers at suspend / shutdown"
    - media: stb0899_algo: initialize cfr before using it
    - media: dvb_frontend: don't play tricks with underflow values
    - media: adv7604: prevent underflow condition when reporting colorspace
    - scsi: sd_zbc: Use kvzalloc() to allocate REPORT ZONES buffer
    - ALSA: firewire-lib: fix return value on fail in amdtp_tscm_init()
    - tools/lib/thermal: Fix sampling handler context ptr
    - thermal/of: support thermal zones w/o trips subnode
    - ASoC: SOF: sof-client-probes-ipc4: Set param_size extension bits
    - media: pulse8-cec: fix data timestamp at pulse8_setup()
    - media: v4l2-ctrls-api: fix error handling for v4l2_g_ctrl()
    - can: m_can: m_can_close(): don't call free_irq() for IRQ-less devices
    - can: mcp251xfd: mcp251xfd_get_tef_len(): fix length calculation
    - can: mcp251xfd: mcp251xfd_ring_alloc(): fix coalescing configuration when
      switching CAN modes
    - can: {cc770,sja1000}_isa: allow building on x86_64
    - [Config] updateconfigs for CAN_{CC770,SJA1000}_ISA
    - drm/xe: Set mask bits for CCS_MODE register
    - pwm: imx-tpm: Use correct MODULO value for EPWM mode
    - rpmsg: glink: Handle rejected intent request better
    - drm/amd/pm: always pick the pptable from IFWI
    - drm/amd/display: Fix brightness level not retained over reboot
    - drm/imagination: Add a per-file PVR context list
    - drm/amdgpu: Adjust debugfs eviction and IB access permissions
    - drm/amdgpu: Adjust debugfs register access permissions
    - drm/amdgpu: Fix DPX valid mode check on GC 9.4.3
    - drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
    - thermal/drivers/qcom/lmh: Remove false lockdep backtrace
    - dm cache: correct the number of origin blocks to match the target length
    - dm cache: optimize dirty bit checking with find_next_bit when resizing
    - dm-unstriped: cast an operand to sector_t to prevent potential uint32_t
      overflow
    - mptcp: no admin perm to list endpoints
    - ALSA: usb-audio: Add quirk for HP 320 FHD Webcam
    - tracing: Fix tracefs mount options
    - net: wwan: t7xx: Fix off-by-one error in t7xx_dpmaif_rx_buf_alloc()
    - mptcp: use sock_kfree_s instead of kfree
    - arm64: Kconfig: Make SME depend on BROKEN for now
    - [Config] updateconfigs for ARM64_SME
    - arm64: smccc: Remove broken support for SMCCCv1.3 SVE discard hint
    - KVM: PPC: Book3S HV: Mask off LPCR_MER for a vCPU before running it to avoid
      spurious interrupts
    - btrfs: fix the length of reserved qgroup to free
    - btrfs: fix per-subvolume RO/RW flags with new mount API
    - platform/x86/amd/pmf: Relocate CPU ID macros to the PMF header
    - platform/x86/amd/pmf: Update SMU metrics table for 1AH family series
    - platform/x86/amd/pmf: Add SMU metrics table support for 1Ah family 60h model
    - i2c: designware: do not hold SCL low when I2C_DYNAMIC_TAR_UPDATE is not set
    - clk: qcom: gcc-x1e80100: Fix USB MP SS1 PHY GDSC pwrsts flags
    - clk: qcom: clk-alpha-pll: Fix pll post div mask when width is not set
    - fs/proc: fix compile warning about variable 'vmcore_mmap_ops'
    - objpool: fix to make percpu slot allocation more robust
    - mm/damon/core: handle zero {aggregation,ops_update} intervals
    - mm/damon/core: handle zero schemes apply interval
    - mm/mlock: set the correct prev on failure
    - thunderbolt: Add only on-board retimers when !CONFIG_USB4_DEBUGFS_MARGINING
    - usb: dwc3: fix fault at system suspend if device was already runtime
      suspended
    - USB: serial: qcserial: add support for Sierra Wireless EM86xx
    - USB: serial: option: add Fibocom FG132 0x0112 composition
    - USB: serial: option: add Quectel RG650V
    - clk: qcom: gcc-x1e80100: Fix halt_check for pipediv2 clocks
    - thunderbolt: Fix connection issue with Pluggable UD-4VPD dock
    - staging: vchiq_arm: Use devm_kzalloc() for drv_mgmt allocation
    - staging: vchiq_arm: Use devm_kzalloc() for vchiq_arm_state allocation
    - irqchip/gic-v3: Force propagation of the active state with a read-back
    - ucounts: fix counter leak in inc_rlimit_get_ucounts()
    - selftests: hugetlb_dio: check for initial conditions to skip in the start
    - firmware: qcom: scm: Refactor code to support multiple dload mode
    - [Config] updateconfigs for QCOM_SCM_DOWNLOAD_MODE_DEFAULT
    - firmware: qcom: scm: suppress download mode error
    - block: rework bio splitting
    - block: fix queue limits checks in blk_rq_map_user_bvec for real
    - drm/xe: Move LNL scheduling WA to xe_device.h
    - drm/xe/ufence: Flush xe ordered_wq in case of ufence timeout
    - drm/xe/guc/tlb: Flush g2h worker in case of tlb timeout
    - ASoC: amd: yc: fix internal mic on Xiaomi Book Pro 14 2022
    - xtensa: Emulate one-byte cmpxchg
    - Linux 6.11.8
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50265
    - ocfs2: remove entry once instead of null-ptr-dereference in
      ocfs2_xa_remove()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50266
    - clk: qcom: videocc-sm8350: use HW_CTRL_TRIGGER for vcodec GDSCs
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50267
    - USB: serial: io_edgeport: fix use after free in debug printk
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50268
    - usb: typec: fix potential out of bounds in ucsi_ccg_update_set_new_cam_cmd()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53083
    - usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50269
    - usb: musb: sunxi: Fix accessing an released usb phy
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53079
    - mm/thp: fix deferred split unqueue naming and locking
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50270
    - mm/damon/core: avoid overflow in damon_feed_loop_next_input()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50271
    - signal: restore the override_rlimit logic
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50272
    - filemap: Fix bounds checking in filemap_read()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53104
    - media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in
      uvc_parse_format
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50273
    - btrfs: reinitialize delayed ref list after deleting it from the list
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53064
    - idpf: fix idpf_vc_core_init error path
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50274
    - idpf: avoid vport access in idpf_get_link_ksettings
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53065
    - mm/slab: fix warning caused by duplicate kmem_cache creation in
      kmem_buckets_create
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50275
    - arm64/sve: Discard stale CPU state when handling SVE traps
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50276
    - net: vertexcom: mse102x: Fix possible double free of TX skb
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53066
    - nfs: Fix KMSAN warning in decode_getfattr_attrs()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53067
    - scsi: ufs: core: Start the RTC update work later
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50277
    - dm: fix a crash if blk_alloc_disk fails
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50278
    - dm cache: fix potential out-of-bounds access on the first resume
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50279
    - dm cache: fix out-of-bounds access to the dirty bitset when resizing
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50280
    - dm cache: fix flushing uninitialized delayed_work on cache_ctr error
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50281
    - KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50282
    - drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53071
    - drm/panthor: Be stricter about IO mapping flags
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53080
    - drm/panthor: Lock XArray when getting entries for the VM
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53084
    - drm/imagination: Break an object reference loop
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53085
    - tpm: Lock TPM chip in tpm_pm_suspend() first
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53086
    - drm/xe: Drop VM dma-resv lock on xe_sync_in_fence_get failure in exec IOCTL
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53087
    - drm/xe: Fix possible exec queue leak in exec IOCTL
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50283
    - ksmbd: fix slab-use-after-free in smb3_preauth_hash_rsp
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50284
    - ksmbd: Fix the missing xa_store error check
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50285
    - ksmbd: check outstanding simultaneous SMB operations
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50286
    - ksmbd: fix slab-use-after-free in ksmbd_smb2_session_create
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50287
    - media: v4l2-tpg: prevent the risk of a division by zero
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50288
    - media: vivid: fix buffer overwrite when using > 32 buffers
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50289
    - media: av7110: fix a spectre vulnerability
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50290
    - media: cx24116: prevent overflows on SNR calculus
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53061
    - media: s5p-jpeg: prevent buffer overflows
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53081
    - media: ar0521: don't overflow when checking PLL values
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53062
    - media: mgb4: protect driver against spectre
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50291
    - media: dvb-core: add missing buffer index check
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50292
    - ASoC: stm32: spdifrx: fix dma channel release in stm32_spdifrx_remove
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53063
    - media: dvbdev: prevent the risk of out of memory access
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50293
    - net/smc: do not leave a dangling sk pointer in __smc_create()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50294
    - rxrpc: Fix missing locking causing hanging calls
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50295
    - net: arc: fix the device for dma_map_single/dma_unmap_single
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53082
    - virtio_net: Add hash_key_length check
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50296
    - net: hns3: fix kernel crash when uninstalling driver
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53088
    - i40e: fix race condition by adding filter's intermediate sync state
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50297
    - net: xilinx: axienet: Enqueue Tx packets in dql before dmaengine starts
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50298
    - net: enetc: allocate vf_state during PF probes
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50299
    - sctp: properly validate chunk size in sctp_sf_ootb()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50300
    - regulator: rtq2208: Fix uninitialized use of regulator_config
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50301
    - security/keys: fix slab-out-of-bounds in key_task_permission
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53072
    - platform/x86/amd/pmc: Detect when STB is not available
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-50302
    - HID: core: zero-initialize the report buffer
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53068
    - firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()
  * Oracular update: v6.11.8 upstream stable release (LP: #2091645) //
    CVE-2024-53069
    - firmware: qcom: scm: fix a NULL-pointer dereference
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629)
    - drm/amdgpu: fix random data corruption for sdma 7
    - cgroup: Fix potential overflow issue when checking max_depth
    - spi: geni-qcom: Fix boot warning related to pm_runtime and devres
    - perf trace: Fix non-listed archs in the syscalltbl routines
    - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT
    - scsi: scsi_debug: Fix do_device_access() handling of unexpected SG copy
      length
    - wifi: iwlegacy: Fix "field-spanning write" warning in il_enqueue_hcmd()
    - mac80211: MAC80211_MESSAGE_TRACING should depend on TRACING
    - wifi: mac80211: skip non-uploaded keys in ieee80211_iter_keys
    - wifi: ath11k: Fix invalid ring usage in full monitor mode
    - wifi: rtw89: pci: early chips only enable 36-bit DMA on specific PCI hosts
    - wifi: brcm80211: BRCM_TRACING should depend on TRACING
    - RDMA/cxgb4: Dump vendor specific QP details
    - RDMA/mlx5: Round max_rd_atomic/max_dest_rd_atomic up instead of down
    - RDMA/bnxt_re: Fix the usage of control path spin locks
    - RDMA/bnxt_re: synchronize the qp-handle table array
    - wifi: iwlwifi: mvm: really send iwl_txpower_constraints_cmd
    - wifi: iwlwifi: mvm: don't add default link in fw restart flow
    - Revert "wifi: iwlwifi: remove retry loops in start"
    - ASoC: cs42l51: Fix some error handling paths in cs42l51_probe()
    - net: stmmac: dwmac4: Fix high address display by updating reg_space[] from
      register values
    - dpll: add Embedded SYNC feature for a pin
    - ice: add callbacks for Embedded SYNC enablement on dpll pins
    - gtp: allow -1 to be specified as file description from userspace
    - bpf: Force checkpoint when jmp history is too long
    - bpf: Add bpf_mem_alloc_check_size() helper
    - net: skip offload for NETIF_F_IPV6_CSUM if ipv6 header contains extension
    - mlxsw: spectrum_ptp: Add missing verification before pushing Tx header
    - mlxsw: pci: Sync Rx buffers for CPU
    - mlxsw: pci: Sync Rx buffers for device
    - net: ethernet: mtk_wed: fix path of MT7988 WO firmware
    - bpf, test_run: Fix LIVE_FRAME frame update after a page has been recycled
    - iomap: improve shared block detection in iomap_unshare_iter
    - iomap: don't bother unsharing delalloc extents
    - iomap: share iomap_unshare_iter predicate code with fsdax
    - fsdax: remove zeroing code from dax_unshare_iter
    - iomap: turn iomap_want_unshare_iter into an inline function
    - kasan: Fix Software Tag-Based KASAN with GCC
    - firmware: arm_sdei: Fix the input parameter of cpuhp_remove_state()
    - afs: Fix missing subdir edit when renamed between parent dirs
    - gpio: sloppy-logic-analyzer: Check for error code from devm_mutex_init()
      call
    - smb: client: fix parsing of device numbers
    - smb: client: set correct device number on nfs reparse points
    - drm/mediatek: ovl: Remove the color format comment for ovl_fmt_convert()
    - drm/mediatek: Fix color format MACROs in OVL
    - drm/mediatek: Fix get efuse issue for MT8188 DPTX
    - drm/mediatek: Use cmdq_pkt_create() and cmdq_pkt_destroy()
    - cxl/events: Fix Trace DRAM Event Record
    - PCI: Fix pci_enable_acs() support for the ACS quirks
    - nvme: module parameter to disable pi with offsets
    - drm/panthor: Fix firmware initialization on systems with a page size > 4k
    - drm/panthor: Fail job creation when the group is dead
    - drm/panthor: Report group as timedout when we fail to properly suspend
    - fs/ntfs3: Fix warning possible deadlock in ntfs_set_state
    - fs/ntfs3: Stale inode instead of bad
    - rust: device: change the from_raw() function
    - scsi: scsi_transport_fc: Allow setting rport state to current state
    - cifs: Improve creating native symlinks pointing to directory
    - cifs: Fix creating native symlinks pointing to current or parent directory
    - ACPI: resource: Fold Asus Vivobook Pro N6506M* DMI quirks together
    - powercap: intel_rapl_msr: Add PL4 support for Arrowlake-U
    - thermal: intel: int340x: processor: Remove MMIO RAPL CPU hotplug support
    - thermal: intel: int340x: processor: Add MMIO RAPL PL4 support
    - net: amd: mvme147: Fix probe banner message
    - NFS: remove revoked delegation from server's delegation list
    - misc: sgi-gru: Don't disable preemption in GRU driver
    - NFSD: Initialize struct nfsd4_copy earlier
    - NFSD: Never decrement pending_async_copies on error
    - ALSA: usb-audio: Add quirks for Dell WD19 dock
    - wifi: rtlwifi: rtl8192du: Don't claim USB ID 0bda:8171
    - usbip: tools: Fix detach_port() invalid port error path
    - usb: phy: Fix API devm_usb_put_phy() can not release the phy
    - usb: typec: fix unreleased fwnode_handle in typec_port_register_altmodes()
    - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non
      self-powered devices
    - usb: typec: qcom-pmic-typec: use fwnode_handle_put() to release fwnodes
    - usb: typec: qcom-pmic-typec: fix missing fwnode removal in error path
    - xhci: Fix Link TRB DMA in command ring stopped completion event
    - xhci: Use pm_runtime_get to prevent RPM on unsupported systems
    - Revert "driver core: Fix uevent_show() vs driver detach race"
    - dt-bindings: iio: adc: ad7380: fix ad7380-4 reference supply
    - iio: light: veml6030: fix microlux value calculation
    - RISC-V: ACPI: fix early_ioremap to early_memremap
    - tools/mm: -Werror fixes in page-types/slabinfo
    - mm: shrinker: avoid memleak in alloc_shrinker_info
    - firmware: microchip: auto-update: fix poll_complete() to not report spurious
      timeout errors
    - thunderbolt: Honor TMU requirements in the domain when setting TMU mode
    - soc: qcom: pmic_glink: Handle GLINK intent allocation rejections
    - cxl/port: Fix CXL port initialization order when the subsystem is built-in
    - mmc: sdhci-pci-gli: GL9767: Fix low power mode on the set clock function
    - mmc: sdhci-pci-gli: GL9767: Fix low power mode in the SD Express process
    - block: fix sanity checks in blk_rq_map_user_bvec
    - phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check
    - btrfs: merge btrfs_orig_bbio_end_io() into btrfs_bio_end_io()
    - riscv: vdso: Prevent the compiler from inserting calls to memset()
    - Input: edt-ft5x06 - fix regmap leak when probe fails
    - ALSA: hda/realtek: Limit internal Mic boost on Dell platform
    - riscv: efi: Set NX compat flag in PE/COFF header
    - riscv: Use '%u' to format the output of 'cpu'
    - riscv: Remove unused GENERATING_ASM_OFFSETS
    - riscv: Remove duplicated GET_RM
    - cxl/port: Fix cxl_bus_rescan() vs bus_rescan_devices()
    - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return
    - posix-cpu-timers: Clear TICK_DEP_BIT_POSIX_TIMER on clone
    - tpm: Return tpm2_sessions_init() when null key creation fails
    - tpm: Rollback tpm2_load_null()
    - drm/amdgpu/smu13: fix profile reporting
    - tpm: Lazily flush the auth session
    - mei: use kvmalloc for read buffer
    - x86/traps: Enable UBSAN traps on x86
    - x86/traps: move kmsan check after instrumentation_begin
    - accel/ivpu: Fix NOC firewall interrupt handling
    - ALSA: hda/realtek: Fix headset mic on TUXEDO Gemini 17 Gen3
    - ALSA: hda/realtek: Fix headset mic on TUXEDO Stellaris 16 Gen6 mb1
    - nvme: re-fix error-handling for io_uring nvme-passthrough
    - kasan: remove vmalloc_percpu test
    - drm/tests: helpers: Add helper for drm_display_mode_from_cea_vic()
    - drm/xe: Fix register definition order in xe_regs.h
    - drm/xe: Kill regs/xe_sriov_regs.h
    - drm/xe: Add mmio read before GGTT invalidate
    - drm/xe: Don't short circuit TDR on jobs not started
    - btrfs: fix extent map merging not happening for adjacent extents
    - btrfs: fix defrag not merging contiguous extents due to merged extent maps
    - gpiolib: fix debugfs newline separators
    - gpiolib: fix debugfs dangling chip separator
    - vmscan,migrate: fix page count imbalance on node stats when demoting pages
    - mm, mmap: limit THP alignment of anonymous mappings to PMD-aligned sizes
    - Input: fix regression when re-registering input handlers
    - mm: multi-gen LRU: ignore non-leaf pmd_young for force_scan=true
    - mm: multi-gen LRU: remove MM_LEAF_OLD and MM_NONLEAF_TOTAL stats
    - mm: shrink skip folio mapped by an exiting process
    - mm: multi-gen LRU: use {ptep,pmdp}_clear_young_notify()
    - riscv: dts: starfive: Update ethernet phy0 delay parameter values for Star64
    - riscv: dts: starfive: disable unused csi/camss nodes
    - arm64: dts: qcom: msm8939: revert use of APCS mbox for RPM
    - arm64: dts: qcom: x1e80100-yoga-slim7x: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100: Fix up BAR spaces
    - arm64: dts: qcom: x1e80100-vivobook-s15: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100: fix PCIe4 interconnect
    - arm64: dts: qcom: x1e80100-qcp: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100-crd: fix nvme regulator boot glitch
    - arm64: dts: qcom: x1e80100: Add Broadcast_AND region in LLCC block
    - arm64: dts: qcom: x1e80100: fix PCIe4 and PCIe6a PHY clocks
    - drm/xe/xe2hpg: Add Wa_15016589081
    - drm/amdgpu/swsmu: fix ordering for setting workload_mask
    - drm/amdgpu/swsmu: default to fullscreen 3D profile for dGPUs
    - fs/ntfs3: Sequential field availability check in mi_enum_attr()
    - drm/amdgpu: handle default profile on on devices without fullscreen 3D
    - MIPS: export __cmpxchg_small()
    - RISC-V: disallow gcc + rust builds
    - [Config] updateconfigs after disabling rust with gcc on riscv
    - rcu/kvfree: Add kvfree_rcu_barrier() API
    - rcu/kvfree: Refactor kvfree_rcu_queue_batch()
    - Linux 6.11.7
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50212
    - lib: alloc_tag_module_unload must wait for pending kfree_rcu calls
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53046
    - arm64: dts: imx8ulp: correct the flexspi compatible string
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53052
    - io_uring/rw: fix missing NOWAIT check for O_DIRECT start write
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50213
    - drm/tests: hdmi: Fix memory leaks in drm_display_mode_from_cea_vic()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50214
    - drm/connector: hdmi: Fix memory leak in drm_display_mode_from_cea_vic()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50215
    - nvmet-auth: assign dh_key to NULL after kfree_sensitive
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50216
    - xfs: fix finding a last resort AG in xfs_filestream_pick_ag
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50217
    - btrfs: fix use-after-free of block device file in
      __btrfs_free_extra_devids()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53043
    - mctp i2c: handle NULL header address
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50303
    - resource,kexec: walk_system_ram_res_rev must retain resource flags
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50218
    - ocfs2: pass u64 to ocfs2_truncate_inline maybe overflow
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50219
    - mm/page_alloc: let GFP_ATOMIC order-0 allocs access highatomic reserves
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50263
    - fork: only invoke khugepaged, ksm hooks if no error
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50220
    - fork: do not invoke uffd on fork if error occurs
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53047
    - mptcp: init: protect sched with rcu_read_lock
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50221
    - drm/amd/pm: Vangogh: Fix kernel memory out of bounds write
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50222
    - iov_iter: fix copy_page_from_iter_atomic() if KMAP_LOCAL_FORCE_MAP
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50223
    - sched/numa: Fix the potential null pointer dereference in task_numa_work()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53053
    - scsi: ufs: core: Fix another deadlock during RTC update
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53075
    - riscv: Prevent a bad reference count on CPU nodes
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50224
    - spi: spi-fsl-dspi: Fix crash when not using GPIO chip select
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50225
    - btrfs: fix error propagation of split bios
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53054
    - cgroup/bpf: use a dedicated workqueue for cgroup bpf destruction
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50226
    - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50227
    - thunderbolt: Fix KASAN reported stack out-of-bounds read in
      tb_retimer_scan()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50228
    - mm: shmem: fix data-race in shmem_getattr()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50229
    - nilfs2: fix potential deadlock with newly created symlinks
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50230
    - nilfs2: fix kernel bug due to missing clearing of checked flag
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50231
    - iio: gts-helper: Fix memory leaks in iio_gts_build_avail_scale_table()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53076
    - iio: gts-helper: Fix memory leaks for the error path of
      iio_gts_build_avail_scale_table()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50232
    - iio: adc: ad7124: fix division by zero in ad7124_set_channel_odr()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50233
    - staging: iio: frequency: ad9832: fix division by zero in
      ad9832_calc_freqreg()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53055
    - wifi: iwlwifi: mvm: fix 6 GHz scan construction
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50234
    - wifi: iwlegacy: Clear stale interrupts before resuming device
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50235
    - wifi: cfg80211: clear wdev->cqm_config pointer on free
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50236
    - wifi: ath10k: Fix memory leak in management tx
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50237
    - wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50238
    - phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50239
    - phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50240
    - phy: qcom: qmp-usb: fix NULL-deref on runtime suspend
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53077
    - rpcrdma: Always release the rpcrdma_device's xa_array
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50242
    - fs/ntfs3: Additional check in ntfs_file_release
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50243
    - fs/ntfs3: Fix general protection fault in run_is_mapped_full
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50244
    - fs/ntfs3: Additional check in ni_clear()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50245
    - fs/ntfs3: Fix possible deadlock in mi_read
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50246
    - fs/ntfs3: Add rough attr alloc_size check
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50247
    - fs/ntfs3: Check if more than chunk-size bytes are written
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50248
    - ntfs3: Add bounds checking to mi_enum_attr()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53078
    - drm/tegra: Fix NULL vs IS_ERR() check in probe()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53056
    - drm/mediatek: Fix potential NULL dereference in mtk_crtc_destroy()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50249
    - ACPI: CPPC: Make rmw_lock a raw_spin_lock
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50250
    - fsdax: dax_unshare_iter needs to copy entire blocks
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50251
    - netfilter: nft_payload: sanitize offset and length before calling
      skb_checksum()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50252
    - mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50253
    - bpf: Check the validity of nr_words in bpf_iter_bits_new()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50254
    - bpf: Free dynamically allocated bits in bpf_iter_bits_destroy()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50255
    - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50256
    - netfilter: nf_reject_ipv6: fix potential crash in nf_send_reset6()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50257
    - netfilter: Fix use-after-free in get_info()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50258
    - net: fix crash when config small gso_max_size/gso_ipv4_max_size
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50262
    - bpf: Fix out-of-bounds write in trie_get_next_key()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53044
    - net/sched: sch_api: fix xa_insert() error path in tcf_block_get_ext()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50259
    - netdevsim: Add trailing zero to terminate the string in
      nsim_nexthop_bucket_activity_write()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50304
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53042
    - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53048
    - ice: fix crash on probe for DPLL enabled E810 LOM
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53058
    - net: stmmac: TSO: Fix unbalanced DMA map/unmap for non-paged SKB data
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50260
    - sock_map: fix a NULL pointer dereference in sock_map_link_update_prog()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53045
    - ASoC: dapm: fix bounds checker error in dapm_widget_list_create
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-50261
    - macsec: Fix use-after-free while sending the offloading packet
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53059
    - wifi: iwlwifi: mvm: Fix response handling in iwl_mvm_send_recovery_cmd()
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53074
    - wifi: iwlwifi: mvm: don't leak a link on AP removal
  * Oracular update: v6.11.7 upstream stable release (LP: #2091629) //
    CVE-2024-53049
    - slub/kunit: fix a WARNING due to unwrapped __kmalloc_cache_noprof
  * Oracular update: v6.11.6 upstream stable release (LP: #2091386)
    - bpf: Use raw_spinlock_t in ringbuf
    - iio: accel: bma400: Fix uninitialized variable field_value in tap event
      handling.
    - reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
    - bpf: sync_linked_regs() must preserve subreg_def
    - bpf: Make sure internal and UAPI bpf_redirect flags don't overlap
    - irqchip/riscv-imsic: Fix output text of base address
    - bpf: devmap: provide rxq after redirect
    - cpufreq/amd-pstate: Fix amd_pstate mode switch on shared memory systems
    - lib/Kconfig.debug: fix grammar in RUST_BUILD_ASSERT_ALLOW
    - bpf: Fix memory leak in bpf_core_apply
    - RDMA/bnxt_re: Fix a possible memory leak
    - RDMA/bnxt_re: Fix incorrect AVID type in WQE structure
    - RDMA/bnxt_re: Add a check for memory allocation
    - x86/resctrl: Avoid overflow in MB settings in bw_validate()
    - ARM: dts: bcm2837-rpi-cm3-io3: Fix HDMI hpd-gpio pin
    - clk: rockchip: fix finding of maximum clock ID
    - bpf: Check the remaining info_cnt before repeating btf fields
    - bpf: fix unpopulated name_len field in perf_event link info
    - selftests/bpf: fix perf_event link info name_len assertion
    - riscv, bpf: Fix possible infinite tailcall when CONFIG_CFI_CLANG is enabled
    - s390/pci: Handle PCI error codes other than 0x3a
    - bpf: fix kfunc btf caching for modules
    - iio: frequency: {admv4420,adrf6780}: format Kconfig entries
    - iio: frequency: admv4420: fix missing select REMAP_SPI in Kconfig
    - drm/vmwgfx: Handle possible ENOMEM in vmw_stdu_connector_atomic_check
    - selftests/bpf: Fix cross-compiling urandom_read
    - bpf: Fix unpopulated path_size when uprobe_multi fields unset
    - sched/core: Disable page allocation in task_tick_mm_cid()
    - ALSA: hda/cs8409: Fix possible NULL dereference
    - firmware: arm_scmi: Fix the double free in scmi_debugfs_common_setup()
    - RDMA/cxgb4: Fix RDMA_CM_EVENT_UNREACHABLE error for iWARP
    - RDMA/irdma: Fix misspelling of "accept*"
    - RDMA/srpt: Make slab cache names unique
    - elevator: do not request_module if elevator exists
    - elevator: Remove argument from elevator_find_get
    - ipv4: give an IPv4 dev to blackhole_netdev
    - net: sparx5: fix source port register when mirroring
    - RDMA/bnxt_re: Fix the max CQ WQEs for older adapters
    - RDMA/bnxt_re: Fix out of bound check
    - RDMA/bnxt_re: Fix incorrect dereference of srq in async event
    - RDMA/bnxt_re: Return more meaningful error
    - RDMA/bnxt_re: Avoid CPU lockups due fifo occupancy check loop
    - RDMA/bnxt_re: Get the toggle bits from SRQ events
    - RDMA/bnxt_re: Change the sequence of updating the CQ toggle value
    - RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages
    - RDMA/bnxt_re: Fix the GID table length
    - accel/qaic: Fix the for loop used to walk SG table
    - drm/panel: himax-hx83102: Adjust power and gamma to optimize brightness
    - drm/msm/dpu: make sure phys resources are properly initialized
    - drm/msm/dpu: move CRTC resource assignment to dpu_encoder_virt_atomic_check
    - drm/msm/dpu: check for overflow in _dpu_crtc_setup_lm_bounds()
    - drm/msm/dsi: improve/fix dsc pclk calculation
    - drm/msm/dsi: fix 32-bit signed integer extension in pclk_rate calculation
    - drm/msm: Avoid NULL dereference in msm_disp_state_print_regs()
    - drm/msm: Allocate memory for disp snapshot with kvzalloc()
    - firmware: arm_scmi: Queue in scmi layer for mailbox implementation
    - net/smc: Fix memory leak when using percpu refs
    - [PATCH} hwmon: (jc42) Properly detect TSE2004-compliant devices again
    - net: usb: usbnet: fix race in probe failure
    - net: stmmac: dwmac-tegra: Fix link bring-up sequence
    - octeontx2-af: Fix potential integer overflows on integer shifts
    - ring-buffer: Fix reader locking when changing the sub buffer order
    - drm/amd/amdgpu: Fix double unlock in amdgpu_mes_add_ring
    - macsec: don't increment counters for an unrelated SA
    - netdevsim: use cond_resched() in nsim_dev_trap_report_work()
    - net: ethernet: aeroflex: fix potential memory leak in
      greth_start_xmit_gbit()
    - net/smc: Fix searching in list of known pnetids in smc_pnet_add_pnetid
    - net: xilinx: axienet: fix potential memory leak in axienet_start_xmit()
    - net: ethernet: rtsn: fix potential memory leak in rtsn_start_xmit()
    - bpf: Fix truncation bug in coerce_reg_to_size_sx()
    - net: systemport: fix potential memory leak in bcm_sysport_xmit()
    - irqchip/renesas-rzg2l: Fix missing put_device
    - drm/msm/dpu: Don't always set merge_3d pending flush
    - drm/msm/dpu: don't always program merge_3d block
    - net: bcmasp: fix potential memory leak in bcmasp_xmit()
    - drm/msm/a6xx+: Insert a fence wait before SMMU table update
    - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
    - net: dsa: mv88e6xxx: Fix the max_vid definition for the MV88E6361
    - genetlink: hold RCU in genlmsg_mcast()
    - ravb: Remove setting of RX software timestamp
    - net: ravb: Only advertise Rx/Tx timestamps if hardware supports it
    - net: dsa: vsc73xx: fix reception from VLAN-unaware bridges
    - scsi: target: core: Fix null-ptr-deref in target_alloc_device()
    - smb: client: fix possible double free in smb2_set_ea()
    - smb: client: fix OOBs when building SMB2_IOCTL request
    - usb: typec: altmode should keep reference to parent
    - s390: Initialize psw mask in perf_arch_fetch_caller_regs()
    - drm/xe: fix unbalanced rpm put() with fence_fini()
    - drm/xe: fix unbalanced rpm put() with declare_wedged()
    - drm/xe: Take job list lock in xe_sched_add_pending_job
    - drm/xe: Don't free job in TDR
    - drm/xe: Use bookkeep slots for external BO's in exec IOCTL
    - bpf: Fix link info netfilter flags to populate defrag flag
    - Bluetooth: bnep: fix wild-memory-access in proto_unregister
    - vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame
    - net: ethernet: mtk_eth_soc: fix memory corruption during fq dma init
    - net/mlx5: Check for invalid vector index on EQ creation
    - net/mlx5: Fix command bitmask initialization
    - net/mlx5: Unregister notifier on eswitch init failure
    - net/mlx5e: Don't call cleanup on profile rollback failure
    - bpf, sockmap: SK_DROP on attempted redirects of unsupported af_vsock
    - vsock: Update rx_bytes on read_skb()
    - vsock: Update msg_count on read_skb()
    - bpf, vsock: Drop static vsock_bpf_prot initialization
    - riscv, bpf: Make BPF_CMPXCHG fully ordered
    - nvme-pci: fix race condition between reset and nvme_dev_disable()
    - bpf: Fix iter/task tid filtering
    - bpf: Fix incorrect delta propagation between linked registers
    - bpf: Fix print_reg_state's constant scalar dump
    - cdrom: Avoid barrier_nospec() in cdrom_ioctl_media_changed()
    - fgraph: Allocate ret_stack_list with proper size
    - mm: shmem: rename shmem_is_huge() to shmem_huge_global_enabled()
    - mm: shmem: move shmem_huge_global_enabled() into
      shmem_allowable_huge_orders()
    - mm: huge_memory: add vma_thp_disabled() and thp_disabled_by_hw()
    - mm: don't install PMD mappings when THPs are disabled by the hw/process/vma
    - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - xhci: dbgtty: remove kfifo_out() wrapper
    - xhci: dbgtty: use kfifo from tty_port struct
    - xhci: dbc: honor usb transfer size boundaries.
    - uprobe: avoid out-of-bounds memory access of fetching args
    - drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real
      VLA
    - ASoC: amd: yc: Add quirk for HP Dragonfly pro one
    - ASoC: codecs: lpass-rx-macro: add missing CDC_RX_BCL_VBAT_RF_PROC2 to
      default regs values
    - ASoC: fsl_sai: Enable 'FIFO continue on error' FCONT bit
    - arm64: Force position-independent veneers
    - udf: refactor udf_current_aext() to handle error
    - udf: refactor udf_next_aext() to handle error
    - udf: refactor inode_bmap() to handle error
    - udf: fix uninit-value use in udf_get_fileshortad
    - ASoC: qcom: sm8250: add qrb4210-rb2-sndcard compatible string
    - fsnotify: Avoid data race between fsnotify_recalc_mask() and
      fsnotify_object_watched()
    - drm/xe/mcr: Use Xe2_LPM steering tables for Xe2_HPM
    - cifs: Validate content of NFS reparse point buffer
    - LoongArch: Don't crash in stack_top() for tasks without vDSO
    - objpool: fix choosing allocation for percpu slots
    - jfs: Fix sanity check in dbMount
    - tracing/probes: Fix MAX_TRACE_ARGS limit handling
    - tracing: Consider the NULL character when validating the event length
    - xfrm: extract dst lookup parameters into a struct
    - xfrm: respect ip protocols rules criteria when performing dst lookups
    - xfrm: validate new SA's prefixlen using SA family when sel.family is unset
    - netfilter: bpf: must hold reference on net namespace
    - net: pse-pd: Fix out of bound for loop
    - net/sun3_82586: fix potential memory leak in sun3_82586_send_packet()
    - be2net: fix potential memory leak in be_xmit()
    - net: plip: fix break; causing plip to never transmit
    - bnxt_en: replace ptp_lock with irqsave variant
    - octeon_ep: Implement helper for iterating packets in Rx queue
    - octeon_ep: Add SKB allocation failures handling in __octep_oq_process_rx()
    - net: dsa: mv88e6xxx: Fix error when setting port policy on mv88e6393x
    - bpf, arm64: Fix address emission with tag-based KASAN enabled
    - fsl/fman: Save device references taken in mac_probe()
    - fsl/fman: Fix refcount handling of fman-related devices
    - net: wwan: fix global oob in wwan_rtnl_policy
    - net: fix races in netdev_tx_sent_queue()/dev_watchdog()
    - virtio_net: fix integer overflow in stats
    - mlxsw: spectrum_router: fix xa_store() error checking
    - net: usb: usbnet: fix name regression
    - bpf: Preserve param->string when parsing mount options
    - bpf: Add MEM_WRITE attribute
    - bpf: Fix overloading of MEM_UNINIT's meaning
    - bpf: Remove MEM_UNINIT from skb/xdp MTU helpers
    - net/sched: act_api: deny mismatched skip_sw/skip_hw flags for actions
      created by classifiers
    - net: sched: fix use-after-free in taprio_change()
    - net: sched: use RCU read-side critical section in taprio_dump()
    - r8169: avoid unsolicited interrupts
    - posix-clock: posix-clock: Fix unbalanced locking in pc_clock_settime()
    - Bluetooth: hci_core: Disable works on hci_unregister_dev
    - Bluetooth: SCO: Fix UAF on sco_sock_timeout
    - Bluetooth: ISO: Fix UAF on iso_sock_timeout
    - bpf,perf: Fix perf_event_detach_bpf_prog error handling
    - bpf: fix do_misc_fixups() for bpf_get_branch_snapshot()
    - net: dsa: microchip: disable EEE for KSZ879x/KSZ877x/KSZ876x
    - net: dsa: mv88e6xxx: group cycle counter coefficients
    - net: dsa: mv88e6xxx: read cycle counter period from hardware
    - net: dsa: mv88e6xxx: support 4000ps cycle counter period
    - bpf: Add the missing BPF_LINK_TYPE invocation for sockmap
    - ASoC: dt-bindings: davinci-mcasp: Fix interrupts property
    - ASoC: dt-bindings: davinci-mcasp: Fix interrupt properties
    - ASoC: loongson: Fix component check failed on FDT systems
    - ASoC: topology: Bump minimal topology ABI version
    - ASoC: max98388: Fix missing increment of variable slot_found
    - ASoC: rsnd: Fix probe failure on HiHope boards due to endpoint parsing
    - PCI: Hold rescan lock while adding devices during host probe
    - fs: pass offset and result to backing_file end_write() callback
    - fuse: update inode size after extending passthrough write
    - ASoC: fsl_micfil: Add a flag to distinguish with different volume control
      types
    - ALSA: firewire-lib: Avoid division by zero in apply_constraint_to_size()
    - fbdev: wm8505fb: select CONFIG_FB_IOMEM_FOPS
    - powercap: dtpm_devfreq: Fix error check against dev_pm_qos_add_request()
    - nfsd: cancel nfsd_shrinker_work using sync mode in nfs4_state_shutdown_net
    - ALSA: hda/realtek: Update default depop procedure
    - smb: client: Handle kstrdup failures for passwords
    - cifs: fix warning when destroy 'cifs_io_request_pool'
    - PCI/pwrctl: Add WCN6855 support
    - PCI/pwrctl: Abandon QCom WCN probe on pre-pwrseq device-trees
    - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception
    - btrfs: qgroup: set a more sane default value for subtree drop threshold
    - btrfs: clear force-compress on remount when compress mount option is given
    - btrfs: fix passing 0 to ERR_PTR in btrfs_search_dir_index_item()
    - perf/x86/rapl: Fix the energy-pkg event for AMD CPUs
    - btrfs: reject ro->rw reconfiguration if there are hard ro requirements
    - btrfs: zoned: fix zone unusable accounting for freed reserved extent
    - btrfs: fix read corruption due to race with extent map merging
    - drm/amd: Guard against bad data for ATIF ACPI method
    - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[]
    - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context
    - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid
      detection issue
    - nilfs2: fix kernel bug due to missing clearing of buffer delay flag
    - fs: don't try and remove empty rbtree node
    - xfs: don't fail repairs on metadata files with no attr fork
    - openat2: explicitly return -E2BIG for (usize > PAGE_SIZE)
    - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory
    - KVM: arm64: Unregister redistributor for failed vCPU creation
    - KVM: arm64: Fix shift-out-of-bounds bug
    - KVM: arm64: Don't eagerly teardown the vgic on init error
    - firewire: core: fix invalid port index for parent device
    - x86/lam: Disable ADDRESS_MASKING in most cases
    - [Config] updateconfigs to disable ADDRESS_MASKING
    - x86/sev: Ensure that RMP table fixups are reserved
    - ALSA: hda/tas2781: select CRC32 instead of CRC32_SARWATE
    - ALSA: hda/realtek: Add subwoofer quirk for Acer Predator G9-593
    - LoongArch: Get correct cores_per_package for SMT systems
    - LoongArch: Enable IRQ if do_ale() triggered in irq-enabled context
    - LoongArch: Make KASAN usable for variable cpu_vabits
    - xfrm: fix one more kernel-infoleak in algo dumping
    - hv_netvsc: Fix VF namespace also in synthetic NIC NETDEV_REGISTER event
    - md/raid10: fix null ptr dereference in raid10_size()
    - drm/bridge: Fix assignment of the of_node of the parent to aux bridge
    - drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too
    - platform/x86/intel/pmc: Fix pmc_core_iounmap to call iounmap for valid
      addresses
    - fgraph: Fix missing unlock in register_ftrace_graph()
    - fgraph: Change the name of cpuhp state to "fgraph:online"
    - net: phy: dp83822: Fix reset pin definitions
    - nfsd: fix race between laundromat and free_stateid
    - drm/amd/display: temp w/a for DP Link Layer compliance
    - ata: libata: Set DID_TIME_OUT for commands that actually timed out
    - ASoC: SOF: Intel: hda-loader: do not wait for HDaudio IOC
    - ASoC: SOF: Intel: hda: Handle prepare without close for non-HDA DAI's
    - ASoC: SOF: Intel: hda: Always clean up link DMA during stop
    - ASoC: SOF: ipc4-topology: Do not set ALH node_id for aggregated DAIs
    - ASoC: dapm: avoid container_of() to get component
    - ASoC: qcom: sc7280: Fix missing Soundwire runtime stream alloc
    - ASoC: qcom: sdm845: add missing soundwire runtime stream alloc
    - ASoC: qcom: Fix NULL Dereference in asoc_qcom_lpass_cpu_platform_probe()
    - Revert " fs/9p: mitigate inode collisions"
    - Revert "fs/9p: remove redundant pointer v9ses"
    - Revert "fs/9p: fix uaf in in v9fs_stat2inode_dotl"
    - Revert "fs/9p: simplify iget to remove unnecessary paths"
    - soundwire: intel_ace2x: Send PDI stream number during prepare
    - x86: support user address masking instead of non-speculative conditional
    - x86: fix whitespace in runtime-const assembler output
    - x86: fix user address masking non-canonical speculation issue
    - platform/x86: dell-wmi: Ignore suspend notifications
    - ACPI: PRM: Clean up guid type in struct prm_handler_info
    - ASoC: qcom: Select missing common Soundwire module code on SDM845
    - Linux 6.11.6
  * ovs/linuxbridge jobs running on ubuntu jammy broken with latest kernel
    5.15.0-127.137 (LP: #2091990)
    - netfilter: xtables: fix typo causing some targets not to load on IPv6
  * By always inlining _compound_head(), clone() sees 3%+ performance increase
    (LP: #2089327)
    - mm: always inline _compound_head() with
      CONFIG_HUGETLB_PAGE_OPTIMIZE_VMEMMAP=y
  * Keyboard backlight controls do not work on Asus ROG Zephyrus GA503RM in
    Oracular (LP: #2089113)
    - hid-asus: use hid for brightness control on keyboard
  * Random flickering with Intel i915 (Comet Lake and Kaby Lake) on Linux 6.8+
    (LP: #2086587)
    - SAUCE: iommu/intel: disable DMAR for KBL and CML integrated gfx
  * Add list of source files to linux-buildinfo (LP: #2086606)
    - [Packaging] Sort build dependencies alphabetically
    - [Packaging] Add list of used source files to buildinfo package
  * asus: Fix thermal profile initialization on Lunar Lake (LP: #2085950)
    - platform/x86: asus-wmi: Fix thermal profile initialization
  * drm/xe: Fix LNL getting wedged after idling (LP: #2085944)
    - drm/xe/guc/ct: Flush g2h worker in case of g2h response timeout
  * UFS: uspi->s_3apb UBSAN: shift-out-of-bounds (LP: #2087853)
    - ufs: ufs_sb_private_info: remove unused s_{2, 3}apb fields
  * Mute/mic LEDs don't function on HP EliteBook 645 G10 (LP: #2087983)
    - ALSA: hda/realtek: fix mute/micmute LEDs for a HP EliteBook 645 G10
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152)
    - ALSA: scarlett2: Add error check after retrieving PEQ filter values
    - ALSA: hda/conexant - Fix audio routing for HP EliteOne 1000 G2
    - net: enetc: remove xdp_drops statistic from enetc_xdp_drop()
    - net: enetc: block concurrent XDP transmissions during ring reconfiguration
    - net: enetc: disable Tx BD rings after they are empty
    - net: enetc: disable NAPI after all rings are disabled
    - net: enetc: add missing static descriptor and inline keyword
    - udp: Compute L4 checksum as usual when not segmenting the skb
    - arm64: dts: marvell: cn9130-sr-som: fix cp0 mdio pin numbers
    - arm64: probes: Fix simulate_ldr*_literal()
    - net: macb: Avoid 20s boot delay by skipping MDIO bus registration for fixed-
      link PHY
    - selftests: mptcp: join: test for prohibited MPC to port-based endp
    - fat: fix uninitialized variable
    - mm: khugepaged: fix the arguments order in khugepaged_collapse_file trace
      point
    - net: fec: Move `fec_ptp_read()` to the top of the file
    - net: fec: Remove duplicated code
    - mptcp: prevent MPC handshake on port-based signal endpoints
    - s390/sclp: Deactivate sclp after all its users
    - s390/sclp_vt220: Convert newlines to CRLF instead of LFCR
    - KVM: s390: gaccess: Check if guest address is in memslot
    - KVM: s390: Change virtual to physical address access in diag 0x258 handler
    - x86/cpufeatures: Define X86_FEATURE_AMD_IBPB_RET
    - x86/cpufeatures: Add a IBPB_NO_RET BUG flag
    - x86/entry: Have entry_ibpb() invalidate return predictions
    - x86/bugs: Skip RSB fill at VMEXIT
    - x86/bugs: Do not use UNTRAIN_RET with IBPB on entry
    - fgraph: Use CPU hotplug mechanism to initialize idle shadow stacks
    - Input: xpad - add support for 8BitDo Ultimate 2C Wireless Controller
    - io_uring/sqpoll: close race on waiting for sqring entries
    - selftest: hid: add the missing tests directory
    - Input: xpad - add support for MSI Claw A1M
    - scsi: mpi3mr: Validate SAS port assignments
    - scsi: ufs: core: Fix the issue of ICU failure
    - scsi: ufs: core: Requeue aborted request
    - drm/i915/dp_mst: Handle error during DSC BW overhead/slice calculation
    - drm/i915/dp_mst: Don't require DSC hblank quirk for a non-DSC compatible
      mode
    - drm/xe/xe_sync: initialise ufence.signalled
    - drm/xe/ufence: ufence can be signaled right after wait_woken
    - drm/vmwgfx: Cleanup kms setup without 3d
    - drm/vmwgfx: Handle surface check failure correctly
    - drm/amdgpu/mes: fix issue of writing to the same log buffer from 2 MES pipes
    - drm/amdgpu/smu13: always apply the powersave optimization
    - drm/amdgpu/swsmu: Only force workload setup on init
    - drm/amdgpu: prevent BO_HANDLES error from being overwritten
    - iio: dac: ad5770r: add missing select REGMAP_SPI in Kconfig
    - iio: dac: ltc1660: add missing select REGMAP_SPI in Kconfig
    - iio: dac: stm32-dac-core: add missing select REGMAP_MMIO in Kconfig
    - iio: adc: ti-ads8688: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: hid-sensors: Fix an error handling path in
      _hid_sensor_set_report_latency()
    - iio: light: veml6030: fix ALS sensor resolution
    - iio: light: opt3001: add missing full-scale range value
    - iio: amplifiers: ada4250: add missing select REGMAP_SPI in Kconfig
    - iio: frequency: adf4377: add missing select REMAP_SPI in Kconfig
    - iio: chemical: ens160: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: light: bu27008: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: magnetometer: af8133j: add missing select IIO_(TRIGGERED_)BUFFER in
      Kconfig
    - iio: resolver: ad2s1210 add missing select REGMAP in Kconfig
    - iio: pressure: bm1390: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: dac: ad5766: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: proximity: mb1232: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: dac: ad3552r: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-lmp92064: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ti-lmp92064: add missing select REGMAP_SPI in Kconfig
    - iio: adc: ti-ads124s08: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: resolver: ad2s1210: add missing select (TRIGGERED_)BUFFER in Kconfig
    - iio: adc: ad7944: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - iio: accel: kx022a: add missing select IIO_(TRIGGERED_)BUFFER in Kconfig
    - Bluetooth: Remove debugfs directory on module init failure
    - Bluetooth: btusb: Fix not being able to reconnect after suspend
    - Bluetooth: btusb: Fix regression with fake CSR controllers 0a12:0001
    - xhci: Fix incorrect stream context type macro
    - xhci: Mitigate failed set dequeue pointer commands
    - USB: serial: option: add support for Quectel EG916Q-GL
    - USB: serial: option: add Telit FN920C04 MBIM compositions
    - usb: typec: qcom-pmic-typec: fix sink status being overwritten with RP_DEF
    - usb: gadget: f_uac2: fix return value for UAC2_ATTRIBUTE_STRING store
    - usb: dwc3: Wait for EndXfer completion before restoring GUSB2PHYCFG
    - usb: dwc3: core: Fix system suspend on TI AM62 platforms
    - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for EEPROM
      device
    - misc: microchip: pci1xxxx: add support for NVMEM_DEVID_AUTO for OTP device
    - serial: imx: Update mctrl old_status on RTSD interrupt
    - x86/resctrl: Annotate get_mem_config() functions as __init
    - x86/CPU/AMD: Only apply Zenbleed fix for Zen2 during late microcode load
    - x86/entry_32: Do not clobber user EFLAGS.ZF
    - irqchip/sifive-plic: Unmask interrupt in plic_irq_enable()
    - irqchip/sifive-plic: Return error code on failure
    - serial: qcom-geni: fix polled console initialisation
    - serial: qcom-geni: revert broken hibernation support
    - serial: qcom-geni: fix shutdown race
    - serial: qcom-geni: fix dma rx cancellation
    - serial: qcom-geni: fix receiver enable
    - mm: vmscan.c: fix OOM on swap stress test
    - ALSA: hda/conexant - Use cached pin control for Node 0x1d on HP EliteOne
      1000 G2
    - Linux 6.11.5
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50192
    - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50069
    - pinctrl: apple: check devm_kasprintf() returned value
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50070
    - pinctrl: stm32: check devm_kasprintf() returned value
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50196
    - pinctrl: ocelot: fix system hang on level based interrupts
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50197
    - pinctrl: intel: platform: fix error path in device_for_each_child_node()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50071
    - pinctrl: nuvoton: fix a double free in ma35_pinctrl_dt_node_to_map_func()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50072
    - x86/bugs: Use code segment selector for VERW operand
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50073
    - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50193
    - x86/entry_32: Clear CPU buffers after register restore in NMI return
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50074
    - parport: Proper fix for array out-of-bounds access
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50100
    - USB: gadget: dummy-hcd: Fix "task hung" problem
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50075
    - xhci: tegra: fix checked USB2 port number
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50076
    - vt: prevent kernel-infoleak in con_font_get()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50077
    - Bluetooth: ISO: Fix multiple init when debugfs is disabled
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50078
    - Bluetooth: Call iso_exit() on module unload
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50198
    - iio: light: veml6030: fix IIO device retrieval from embedded device
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50201
    - drm/radeon: Fix encoder->possible_clones
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50098
    - scsi: ufs: core: Set SDEV_OFFLINE when UFS is shut down
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50079
    - io_uring/sqpoll: ensure task state is TASK_RUNNING when running task_work
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50080
    - ublk: don't allow user copy for unprivileged device
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50081
    - blk-mq: setup queue ->tag_set before initializing hctx
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50082
    - blk-rq-qos: fix crash on rq_qos_wait vs. rq_qos_wake_function race
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50101
    - iommu/vt-d: Fix incorrect pci_for_each_dma_alias() for non-PCI devices
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50083
    - tcp: fix mptcp DSS corruption due to large pmtu xmit
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50068
    - mm/damon/tests/sysfs-kunit.h: fix memory leak in
      damon_sysfs_test_add_targets()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50199
    - mm/swapfile: skip HugeTLB pages for unuse_vma
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50066
    - mm/mremap: fix move_normal_pmd/retract_page_tables race
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50202
    - nilfs2: propagate directory read errors from nilfs_find_entry()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50200
    - maple_tree: correct tree corruption on spanning store
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50084
    - net: microchip: vcap api: Fix memory leaks in vcap_api_encode_rule_test()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50194
    - arm64: probes: Fix uprobes for big-endian kernels
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50099
    - arm64: probes: Remove broken LDR (literal) uprobe support
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50195
    - posix-clock: Fix missing timespec64 check in pc_clock_settime()
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50085
    - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50086
    - ksmbd: fix user-after-free from session log off
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50087
    - btrfs: fix uninitialized pointer free on read_alloc_one_name() error
  * Oracular update: v6.11.5 upstream stable release (LP: #2089152) //
    CVE-2024-50088
    - btrfs: fix uninitialized pointer free in add_inode_ref()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068)
    - net: fec: don't save PTP state if PTP is unsupported
    - fs/ntfs3: Do not call file_modified if collapse range failed
    - fs/ntfs3: Optimize large writes into sparse file
    - fs/ntfs3: Fix sparse warning for bigendian
    - fs/ntfs3: Fix sparse warning in ni_fiemap
    - fs/ntfs3: Refactor enum_rstbl to suppress static checker
    - vdpa/octeon_ep: Fix format specifier for pointers in debug messages
    - virtio_console: fix misc probe bugs
    - perf vdso: Missed put on 32-bit dsos
    - perf build: Fix static compilation error when libdw is not installed
    - perf build: Fix build feature-dwarf_getlocations fail for old libdw
    - zram: don't free statically defined names
    - bpf: Call the missed btf_record_free() when map creation fails
    - selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
    - bpf: Check percpu map value size first
    - s390/facility: Disable compile time optimization for decompressor code
    - s390/mm: Add cond_resched() to cmm_alloc/free_pages()
    - bpf, x64: Fix a jit convergence issue
    - ext4: nested locking for xattr inode
    - s390/cpum_sf: Remove WARN_ON_ONCE statements
    - s390/traps: Handle early warnings gracefully
    - ktest.pl: Avoid false positives with grub2 skip regex
    - soundwire: intel_bus_common: enable interrupts before exiting reset
    - PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
    - clk: bcm: bcm53573: fix OF node leak in init
    - PCI: Add ACS quirk for Qualcomm SA8775P
    - i2c: i801: Use a different adapter-name for IDF adapters
    - PCI: Mark Creative Labs EMU20k2 INTx masking as broken
    - RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
    - mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI match less strict
    - mfd: intel-lpss: Add Intel Panther Lake LPSS PCI IDs
    - riscv: Omit optimized string routines when using KASAN
    - riscv: avoid Imbalance in RAS
    - RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
    - PCI: qcom: Disable mirroring of DBI and iATU register space in BAR region
    - PCI: endpoint: Assign PCI domain number for endpoint controllers
    - soundwire: cadence: re-check Peripheral status with delayed_work
    - riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16
      unknown
    - media: videobuf2-core: clear memory related fields in
      __vb2_plane_dmabuf_put()
    - remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table
    - usb: chipidea: udc: enable suspend interrupt after usb reset
    - usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the
      Crashkernel Scenario
    - xhci: dbc: Fix STALL transfer event handling
    - usb: host: xhci-plat: Parse xhci-missing_cas_quirk and apply quirk
    - comedi: ni_routing: tools: Check when the file could not be opened
    - LoongArch: Fix memleak in pci_acpi_scan_root()
    - netfilter: nf_nat: don't try nat source port reallocation for reverse dir
      clash
    - netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n
    - tools/iio: Add memory allocation failure check for trigger_name
    - staging: vme_user: added bound check to geoid
    - driver core: bus: Return -EIO instead of 0 when show/store invalid bus
      attribute
    - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
      lpfc_els_flush_cmd()
    - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to
      KERN_WARNING
    - NFSD: Mark filecache "down" if init fails
    - nfsd: nfsd_destroy_serv() must call svc_destroy() even if nfsd_startup_net()
      failed
    - ice: set correct dst VSI in only LAN filters
    - ice: clear port vlan config during reset
    - ice: disallow DPLL_PIN_STATE_SELECTABLE for dpll output pins
    - ice: fix VLAN replay after reset
    - SUNRPC: Fix integer overflow in decode_rc_list()
    - net: phy: aquantia: AQR115c fix up PMA capabilities
    - net: phy: aquantia: remove usage of phy_set_max_speed
    - tcp: fix to allow timestamp undo if no retransmits were sent
    - tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe
    - tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits out
    - rxrpc: Fix uninitialised variable in rxrpc_send_data()
    - net: dsa: sja1105: fix reception from VLAN-unaware bridges
    - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids()
      test
    - net: pse-pd: Fix enabled status mismatch
    - Bluetooth: btusb: Don't fail external suspend requests
    - net: phy: bcm84881: Fix some error handling paths
    - net: ethernet: adi: adin1110: Fix some error handling path in
      adin1110_read_fifo()
    - net: dsa: b53: fix jumbo frame mtu check
    - net: dsa: b53: fix max MTU for 1g switches
    - net: dsa: b53: fix max MTU for BCM5325/BCM5365
    - net: dsa: b53: allow lower MTUs on BCM5325/5365
    - net: dsa: b53: fix jumbo frames on 10/100 ports
    - drm/nouveau: pass cli to nouveau_channel_new() instead of drm+device
    - nouveau/dmem: Fix privileged error in copy engine channel
    - gpio: aspeed: Add the flush write to ensure the write complete.
    - gpio: aspeed: Use devm_clk api to manage clock source
    - x86/xen: mark boot CPU of PV guest in MSR_IA32_APICBASE
    - powercap: intel_rapl_tpmi: Ignore minor version change
    - ice: Fix entering Safe Mode
    - ice: Fix netif_is_ice() in Safe Mode
    - ice: Flush FDB entries before reset
    - drm/xe: Restore GT freq on GSC load error
    - drm/xe: Make wedged_mode debugfs writable
    - net: ibm: emac: mal: fix wrong goto
    - net: ti: icssg-prueth: Fix race condition for VLAN table access
    - btrfs: zoned: fix missing RCU locking in error message when loading zone
      info
    - sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start
    - netfilter: fib: check correct rtable in vrf setups
    - net: ibm: emac: mal: add dcr_unmap to _remove
    - net: dsa: refuse cross-chip mirroring operations
    - rtnetlink: Add bulk registration helpers for rtnetlink message handlers.
    - vxlan: Handle error of rtnl_register_module().
    - bridge: Handle error of rtnl_register_module().
    - mctp: Handle error of rtnl_register_module().
    - mpls: Handle error of rtnl_register_module().
    - phonet: Handle error of rtnl_register_module().
    - rcu/nocb: Fix rcuog wake-up from offline softirq
    - HID: multitouch: Add support for lenovo Y9000P Touchpad
    - hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die Temperature
    - hwmon: (tmp513) Add missing dependency on REGMAP_I2C
    - hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
    - hwmon: (adm9240) Add missing dependency on REGMAP_I2C
    - hwmon: (adt7470) Add missing dependency on REGMAP_I2C
    - hwmon: (ltc2991) Add missing dependency on REGMAP_I2C
    - HID: plantronics: Workaround for an unexcepted opposite volume key
    - HID: wacom: Hardcode (non-inverted) AES pens as BTN_TOOL_PEN
    - Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"
    - usb: dwc3: core: Stop processing of pending events if controller is halted
    - usb: xhci: Fix problem with xhci resume from suspend
    - usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip
    - usb: dwc3: re-enable runtime PM after failed resume
    - usb: gadget: core: force synchronous registration
    - hid: intel-ish-hid: Fix uninitialized variable 'rv' in
      ish_fw_xfer_direct_dma
    - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models
    - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models
    - drm/amdgpu: partially revert powerplay `__counted_by` changes
    - drm/amd/display: Clear update flags after update has been applied
    - drm/amdkfd: Fix an eviction fence leak
    - drm/amd/display: fix hibernate entry for DCN35+
    - drm/xe/guc_submit: fix xa_store() error checking
    - drm/i915/hdcp: fix connector refcounting
    - drm/xe/ct: fix xa_store() error checking
    - scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
    - Revert "mmc: mvsdio: Use sg_miter for PIO"
    - mmc: sdhci-of-dwcmshc: Prevent stale command interrupt handling
    - mptcp: fallback when MPTCP opts are dropped after 1st data
    - ata: libata: avoid superfluous disk spin down + spin up during hibernation
    - OPP: fix error code in dev_pm_opp_set_config()
    - net: dsa: lan9303: ensure chip reset and wait for READY status
    - net: phy: realtek: Fix MMD access on RTL8126A-integrated PHY
    - mptcp: pm: do not remove closing subflows
    - powercap: intel_rapl_tpmi: Fix bogus register reading
    - selftests/mm: fix incorrect buffer->mirror size in hmm2 double_map test
    - selftests/rseq: Fix mm_cid test failure
    - btrfs: split remaining space to discard in chunks
    - btrfs: add cancellation points to trim loops
    - PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list()
    - idpf: use actual mbx receive payload length
    - fs/proc/kcore.c: allow translation of physical memory addresses
    - PCI: Pass domain number to pci_bus_release_domain_nr() explicitly
    - io_uring/rw: fix cflags posting for single issue multishot read
    - Linux 6.11.4
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50182
    - secretmem: disable memfd_secret() if arch cannot set direct map
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50019
    - kthread: unpark only parked kthread
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50096
    - nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50020
    - ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50021
    - ice: Fix improper handling of refcount in ice_dpll_init_rclk_pins()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50022
    - device-dax: correct pgoff align in dax_set_mapping()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50185
    - mptcp: handle consistently DSS corruption
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50023
    - net: phy: Remove LED entry from LEDs list on unregister
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50024
    - net: Fix an unsafe loop on the list
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50186
    - net: explicitly clear the sk pointer, when pf->create fails
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50025
    - scsi: fnic: Move flush_work initialization out of if block
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50026
    - scsi: wd33c93: Don't use stale scsi_pointer value
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50027
    - thermal: core: Free tzp copy along with the thermal zone
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50028
    - thermal: core: Reference count the zone in thermal_zone_get_by_id()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50029
    - Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50030
    - drm/xe/ct: prevent UAF in send_recv()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50187
    - drm/vc4: Stop the active perfmon before being destroyed
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50031
    - drm/v3d: Stop the active perfmon before being destroyed
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50189
    - HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50033
    - slip: make slhc_remember() more robust against malicious packets
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50034
    - net/smc: fix lacks of icsk_syn_mss with IPPROTO_SMC
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50035
    - ppp: fix ppp_async_encode() illegal access
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50036
    - net: do not delay dst_entries_add() in dst_release()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50037
    - drm/fbdev-dma: Only cleanup deferred I/O if necessary
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50092
    - net: netconsole: fix wrong warning
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50038
    - netfilter: xtables: avoid NFPROTO_UNSPEC where needed
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50039
    - net/sched: accept TCA_STAB only for root qdisc
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50040
    - igb: Do not bring the device up after non-fatal error
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50041
    - i40e: Fix macvlan leak by synchronizing access to mac_filter_hash
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50042
    - ice: Fix increasing MSI-X on VF
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50093
    - thermal: intel: int340x: processor: Fix warning during module unload
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50043
    - nfsd: fix possible badness in FREE_STATEID
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50044
    - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50045
    - netfilter: br_netfilter: fix panic with metadata_dst skb
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50094
    - sfc: Don't invoke xdp_do_flush() from netpoll.
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50188
    - net: phy: dp83869: fix memory corruption when enabling fiber
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50046
    - NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50190
    - ice: fix memleak in ice_init_tx_topology()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50180
    - fbdev: sisfb: Fix strbuf array overflow
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50047
    - smb: client: fix UAF in async decryption
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50048
    - fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50049
    - drm/amd/display: Check null pointer before dereferencing se
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50090
    - drm/xe/oa: Fix overflow in oa batch buffer
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50183
    - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV
      instance
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50055
    - driver core: bus: Fix double free in driver API bus_register()
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50091
    - dm vdo: don't refer to dedupe_context after releasing it
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50056
    - usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50184
    - virtio_pmem: Check device status before requesting flush
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50057
    - usb: typec: tipd: Free IRQ only if it was requested before
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50058
    - serial: protect uart_port_dtr_rts() in uart_shutdown() too
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50181
    - clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50059
    - ntb: ntb_hw_switchtec: Fix use after free vulnerability in
      switchtec_ntb_remove due to race condition
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50060
    - io_uring: check if we need to reschedule during overflow flush
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50061
    - i3c: master: cdns: Fix use after free vulnerability in cdns_i3c_master
      Driver Due to Race Condition
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50062
    - RDMA/rtrs-srv: Avoid null pointer deref during path establishment
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50095
    - RDMA/mad: Improve handling of timed out WRs of mad agent
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50063
    - bpf: Prevent tail call between progs attached to different hooks
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50191
    - ext4: don't set SB_RDONLY after filesystem errors
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50064
    - zram: free secondary algorithms names
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50065
    - ntfs3: Change to non-blocking allocation in ntfs_d_hash
  * Oracular update: v6.11.4 upstream stable release (LP: #2089068) //
    CVE-2024-50089
    - unicode: Don't special case ignorable code points
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052)
    - jump_label: Fix static_key_slow_dec() yet again
    - scsi: st: Fix input/output error on empty drive reset
    - scsi: pm8001: Do not overwrite PCI queue mapping
    - drm/i915/psr: Do not wait for PSR being idle on on Panel Replay
    - drm/i915/display: BMG supports UHBR13.5
    - drm/i915/dp: Fix AUX IO power enabling for eDP PSR
    - drm/amdgpu: Fix get each xcp macro
    - drm/amd/display: handle nulled pipe context in DCE110's set_drr()
    - ksmbd: fix warning: comparison of distinct pointer types lacks a cast
    - mailbox: ARM_MHU_V3 should depend on ARM64
    - [Config] updateconfigs for ARM_MHU_V3
    - mailbox: rockchip: fix a typo in module autoloading
    - ceph: fix a memory leak on cap_auths in MDS client
    - drm/i915/dp: Fix colorimetry detection
    - ieee802154: Fix build error
    - net: sparx5: Fix invalid timestamps
    - net/mlx5: Added cond_resched() to crdump collection
    - net/mlx5e: SHAMPO, Fix overflow of hd_per_wq
    - netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
    - net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
    - net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
    - selftests: netfilter: Fix nft_audit.sh for newer nft binaries
    - selftests: netfilter: Add missing return value
    - Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
    - afs: Fix missing wire-up of afs_retry_request()
    - net: Add netif_get_gro_max_size helper for GRO
    - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
    - net: fec: Restart PPS after link state change
    - net: fec: Reload PTP registers after link-state change
    - net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
    - ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
    - netfs: Fix missing wakeup after issuing writes
    - net: phy: realtek: Check the index value in led_hw_control_get
    - bridge: mcast: Fail MDB get request on empty entry
    - iomap: constrain the file range passed to iomap_file_unshare
    - dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
    - ASoC: topology: Fix incorrect addressing assignments
    - ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is
      uninitialized
    - drm/connector: hdmi: Fix writing Dynamic Range Mastering infoframes
    - io_uring: fix memory leak when cache init fail
    - rust: kbuild: split up helpers.c
    - rust: kbuild: auto generate helper exports
    - rust: mutex: fix __mutex_init() usage in case of PREEMPT_RT
    - ALSA: mixer_oss: Remove some incorrect kfree_const() usages
    - ALSA: hda/realtek: Fix the push button function for the ALC257
    - cifs: Remove intermediate object of failed create reparse call
    - drm/panthor: Lock the VM resv before calling drm_gpuvm_bo_obtain_prealloc()
    - ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
    - ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
    - drm/xe: Restore pci state upon resume
    - drm/xe: Resume TDR after GT reset
    - cifs: Do not convert delimiter when parsing NFS-style symlinks
    - tools/rtla: Fix installation from out-of-tree build
    - ALSA: gus: Fix some error handling paths related to get_bpos() usage
    - ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
    - drm/amd/display: Disable replay if VRR capability is false
    - drm/amd/display: Fix VRR cannot enable
    - drm/amd/display: Re-enable panel replay feature
    - e1000e: avoid failing the system during pm_suspend
    - wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
    - crypto: x86/sha256 - Add parentheses around macros' single arguments
    - crypto: octeontx - Fix authenc setkey
    - crypto: octeontx2 - Fix authenc setkey
    - ice: Adjust over allocation of memory in ice_sched_add_root_node() and
      ice_sched_add_node()
    - wifi: iwlwifi: mvm: Fix a race in scan abort flow
    - wifi: iwlwifi: mvm: drop wrong STA selection in TX
    - net: hisilicon: hip04: fix OF node leak in probe()
    - net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
    - net: hisilicon: hns_mdio: fix OF node leak in probe()
    - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
    - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
    - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB
    - wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
    - net: sched: consistently use rcu_replace_pointer() in taprio_change()
    - Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
    - Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
    - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
    - ACPI: CPPC: Add support for setting EPP register in FFH
    - wifi: rtw88: select WANT_DEV_COREDUMP
    - l2tp: free sessions using rcu
    - l2tp: use rcu list add/del when updating lists
    - ACPI: EC: Do not release locks during operation region accesses
    - net: skbuff: sprinkle more __GFP_NOWARN on ingress allocs
    - net: mvpp2: Increase size of queue_name buffer
    - bnxt_en: Extend maximum length of version string by 1 byte
    - ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
    - wifi: rtw89: correct base HT rate mask for firmware
    - netfilter: nf_tables: do not remove elements if set backend implements
      .abort
    - ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
    - nvme-keyring: restrict match length for version '1' identifiers
    - nvme-tcp: sanitize TLS key handling
    - nvme-tcp: check for invalidated or revoked key
    - net: atlantic: Avoid warning about potential string truncation
    - crypto: simd - Do not call crypto_alloc_tfm during registration
    - netpoll: Ensure clean state on setup failures
    - tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
    - wifi: iwlwifi: mvm: use correct key iteration
    - wifi: iwlwifi: allow only CN mcc from WRDD
    - virt: sev-guest: Ensure the SNP guest messages do not exceed a page
    - wifi: mac80211: fix RCU list iterations
    - ACPICA: iasl: handle empty connection_node
    - proc: add config & param to block forcing mem writes
    - [Config] updateconfigs to select PROC_MEM_ALWAYS_FORCE
    - vfs: use RCU in ilookup
    - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
    - nvme: fix metadata handling in nvme-passthrough
    - can: netlink: avoid call to do_set_data_bittiming callback with stale
      can_priv::ctrlmode
    - netdev-genl: Set extack and fix error on napi-get
    - wifi: wilc1000: Do not operate uninitialized hardware during suspend/resume
    - arm64: trans_pgd: mark PTEs entries as valid to avoid dead kexec()
    - net: phy: Check for read errors in SIOCGMIIREG
    - x86/bugs: Add missing NO_SSB flag
    - x86/bugs: Fix handling when SRSO mitigation is disabled
    - crypto: hisilicon - fix missed error branch
    - wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
    - wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
    - netfs: Cancel dirty folios that have no storage destination
    - nfp: Use IRQF_NO_AUTOEN flag in request_irq()
    - ALSA: usb-audio: Add input value sanity checks for standard types
    - x86/apic: Remove logical destination mode for 64-bit
    - ALSA: usb-audio: Define macros for quirk table entries
    - ALSA: usb-audio: Replace complex quirk lines with macros
    - ALSA: usb-audio: Add quirk for RME Digiface USB
    - ALSA: usb-audio: Add mixer quirk for RME Digiface USB
    - ALSA: hda/realtek: Refactor and simplify Samsung Galaxy Book init
    - ALSA: usb-audio: Add logitech Audio profile quirk
    - ASoC: codecs: wsa883x: Handle reading version failure
    - ALSA: control: Take power_ref lock primarily
    - tools/x86/kcpuid: Protect against faulty "max subleaf" values
    - x86/pkeys: Add PKRU as a parameter in signal handling functions
    - x86/pkeys: Restore altstack access in sigreturn()
    - x86/kexec: Add EFI config table identity mapping for kexec kernel
    - ALSA: hdsp: Break infinite MIDI input flush loop
    - tools/nolibc: powerpc: limit stack-protector workaround to GCC
    - selftests/nolibc: avoid passing NULL to printf("%s")
    - x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
    - ASoC: Intel: boards: always check the result of
      acpi_dev_get_first_match_dev()
    - hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
    - pmdomain: core: Don't hold the genpd-lock when calling dev_pm_domain_set()
    - pmdomain: core: Use dev_name() instead of kobject_get_path() in debugfs
    - rcuscale: Provide clear error when async specified without primitives
    - power: reset: brcmstb: Do not go into infinite loop if reset fails
    - iommu/arm-smmu-v3: Match Stall behaviour for S2
    - iommu/vt-d: Always reserve a domain ID for identity setup
    - iommu/vt-d: Unconditionally flush device TLB for pasid table updates
    - iommu/arm-smmu-v3: Do not use devm for the cd table allocations
    - drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
    - drm/amd/display: Use gpuvm_min_page_size_kbytes for DML2 surfaces
    - ata: pata_serverworks: Do not use the term blacklist
    - ata: sata_sil: Rename sil_blacklist to sil_quirks
    - selftests/bpf: fix uprobe.path leak in bpf_testmod
    - scsi: smartpqi: Add new controller PCI IDs
    - HID: Ignore battery for all ELAN I2C-HID devices
    - drm/amd/display: Underflow Seen on DCN401 eGPU
    - drm/xe: Name and document Wa_14019789679
    - jfs: UBSAN: shift-out-of-bounds in dbFindBits
    - scsi: smartpqi: correct stream detection
    - scsi: smartpqi: add new controller PCI IDs
    - drm/amdgpu: add raven1 gfxoff quirk
    - drm/amdgpu: enable gfxoff quirk on HP 705G4
    - drm/amdkfd: Fix resource leak in criu restore queue
    - HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
    - platform/x86: touchscreen_dmi: add nanote-next quirk
    - platform/x86/amd: pmf: Add quirk for TUF Gaming A14
    - drm/stm: ltdc: reset plane transparency after plane disable
    - drm/amdgpu/gfx12: properly handle error ints on all pipes
    - drm/amdgpu/gfx9: properly handle error ints on all pipes
    - drm/amd/display: Fix possible overflow in integer multiplication
    - drm/printer: Allow NULL data in devcoredump printer
    - perf,x86: avoid missing caller address in stack traces captured in uprobe
    - scsi: aacraid: Rearrange order of struct aac_srb_unit
    - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached
      topology
    - scsi: lpfc: Update PRLO handling in direct attached topology
    - drm/amd/display: Force enable 3DLUT DMA check for dcn401 in DML
    - drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
    - drm/amdgpu: fix unchecked return value warning for amdgpu_atombios
    - perf: Fix event_function_call() locking
    - scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
    - drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
    - drm/amd/display: Unlock Pipes Based On DET Allocation
    - drm/amdgpu: fix ptr check warning in gfx9 ip_dump
    - drm/amdgpu: fix ptr check warning in gfx10 ip_dump
    - drm/amdgpu: fix ptr check warning in gfx11 ip_dump
    - drm/amdgpu: Block MMR_READ IOCTL in reset
    - drm/amdgpu/gfx9: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx11: enter safe mode before touching CP_INT_CNTL
    - drm/xe: Use topology to determine page fault queue size
    - drm/amdkfd: Check int source id for utcl2 poison event
    - of/irq: Refer to actual buffer size in of_irq_parse_one()
    - drm/amd/display: guard write a 0 post_divider value to HW
    - powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
    - ovl: fsync after metadata copy-up
    - drm/amdgpu/gfx12: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx11: use rlc safe mode for soft recovery
    - drm/amdgpu/gfx10: use rlc safe mode for soft recovery
    - platform/x86: lenovo-ymc: Ignore the 0x0 state
    - tools/hv: Add memory allocation check in hv_fcopy_start
    - HID: i2c-hid: ensure various commands do not interfere with each other
    - platform/mellanox: mlxbf-pmc: fix lockdep warning
    - platform/x86: x86-android-tablets: Adjust Xiaomi Pad 2 bottom bezel touch
      buttons LED
    - bpf: Make the pointer returned by iter next method valid
    - ext4: ext4_search_dir should return a proper error
    - bpftool: Fix undefined behavior caused by shifting into the sign bit
    - iomap: handle a post-direct I/O invalidate race in
      iomap_write_delalloc_release
    - EINJ, CXL: Fix CXL device SBDF calculation
    - spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
    - spi: spi-cadence: Fix missing spi_controller_is_target() check
    - selftest: hid: add missing run-hid-tools-tests.sh
    - spi: s3c64xx: fix timeout counters in flush_fifo
    - kselftest/devices/probe: Fix SyntaxWarning in regex strings for Python3
    - selftests: breakpoints: use remaining time to check if suspend succeed
    - accel/ivpu: Add missing MODULE_FIRMWARE metadata
    - spi: rpc-if: Add missing MODULE_DEVICE_TABLE
    - ALSA: control: Fix power_ref lock order for compat code, too
    - perf callchain: Fix stitch LBR memory leaks
    - perf: Really fix event_function_call() locking
    - drm/xe: fixup xe_alloc_pf_queue
    - drm/xe: Fix memory leak on xe_alloc_pf_queue failure
    - selftests: vDSO: fix vDSO name for powerpc
    - selftests: vDSO: fix vdso_config for powerpc
    - selftests: vDSO: fix vDSO symbols lookup for powerpc64
    - ext4: fix error message when rejecting the default hash
    - selftests/mm: fix charge_reserved_hugetlb.sh test
    - nvme-tcp: fix link failure for TCP auth
    - f2fs: add write priority option based on zone UFS
    - powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
    - selftests: vDSO: fix ELF hash table entry size for s390x
    - selftests: vDSO: fix vdso_config for s390
    - f2fs: make BG GC more aggressive for zoned devices
    - f2fs: introduce migration_window_granularity
    - f2fs: increase BG GC migration window granularity when boosted for zoned
      devices
    - f2fs: do FG_GC when GC boosting is required for zoned devices
    - f2fs: forcibly migrate to secure space for zoned device file pinning
    - Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
    - KVM: arm64: Fix kvm_has_feat*() handling of negative features
    - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
    - i2c: xiic: Wait for TX empty to avoid missed TX NAKs
    - i2c: core: Lock address during client device instantiation
    - i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
    - i2c: designware: fix controller is holding SCL low while ENABLE bit is
      disabled
    - i2c: synquacer: Deal with optional PCLK correctly
    - rust: sync: require `T: Sync` for `LockedBy::access`
    - ovl: fail if trusted xattrs are needed but caller lacks permission
    - firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
    - memory: tegra186-emc: drop unused to_tegra186_emc()
    - dt-bindings: clock: exynos7885: Fix duplicated binding
    - spi: bcm63xx: Fix module autoloading
    - spi: bcm63xx: Fix missing pm_runtime_disable()
    - power: supply: hwmon: Fix missing temp1_max_alarm attribute
    - power: supply: Drop use_cnt check from power_supply_property_is_writeable()
    - perf/core: Fix small negative period being ignored
    - drm/v3d: Prevent out of bounds access in performance query extensions
    - parisc: Fix itlb miss handler for 64-bit programs
    - drm/mediatek: ovl_adaptor: Add missing of_node_put()
    - drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
    - ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
    - ALSA: core: add isascii() check to card ID generator
    - ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
    - ALSA: usb-audio: Add native DSD support for Luxman D-08u
    - ALSA: line6: add hw monitor volume control to POD HD500X
    - ALSA: hda/realtek: fix mute/micmute LED for HP mt645 G8
    - ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
    - ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
    - ext4: correct encrypted dentry name hash when not casefolded
    - ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
    - ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
    - ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
    - ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
    - ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
    - ext4: fix fast commit inode enqueueing during a full journal commit
    - ext4: use handle to mark fc as ineligible in __track_dentry_update()
    - ext4: mark fc as ineligible using an handle in ext4_xattr_set()
    - parisc: Fix 64-bit userspace syscall path
    - parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
    - parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
    - drm/rockchip: vop: clear DMA stop bit on RK3066
    - of: address: Report error on resource bounds overflow
    - of/irq: Support #msi-cells=<0> in of_msi_get_domain
    - lib/buildid: harden build ID parsing logic
    - jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
    - mm: krealloc: consider spare memory for __GFP_ZERO
    - ocfs2: fix the la space leak when unmounting an ocfs2 volume
    - ocfs2: fix uninit-value in ocfs2_get_block()
    - scripts/gdb: fix timerlist parsing issue
    - scripts/gdb: add iteration function for rbtree
    - scripts/gdb: fix lx-mounts command error
    - arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
    - arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
    - drm/xe/oa: Don't reset OAC_CONTEXT_ENABLE on OA stream close
    - sched/deadline: Comment sched_dl_entity::dl_server variable
    - sched/core: Add clearing of ->dl_server in put_prev_task_balance()
    - sched/core: Clear prev->dl_server in CFS pick fast path
    - sched: psi: fix bogus pressure spikes from aggregation race
    - riscv: define ILLEGAL_POINTER_VALUE for 64bit
    - [Config] updateconfigs for ILLEGAL_POINTER_VALUE on riscv
    - perf python: Disable -Wno-cast-function-type-mismatch if present on clang
    - perf hist: Update hist symbol when updating maps
    - nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
    - NFSD: Fix NFSv4's PUTPUBFH operation
    - sysctl: avoid spurious permanent empty tables
    - RDMA/mana_ib: use the correct page table index based on hardware page size
    - RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
    - drivers/perf: riscv: Align errno for unsupported perf event
    - riscv: Fix kernel stack size when KASAN is enabled
    - media: imx335: Fix reset-gpio handling
    - clk: rockchip: fix error for unknown clocks
    - leds: pca9532: Remove irrelevant blink configuration error message
    - media: videobuf2: Drop minimum allocation requirement of 2 buffers
    - clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
    - media: sun4i_csi: Implement link validate for sun4i_csi subdev
    - clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
    - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
    - dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
    - clk: qcom: gcc-sc8180x: Register QUPv3 RCGs for DFS on sc8180x
    - clk: qcom: clk-rpmh: Fix overflow in BCM vote
    - clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
    - clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
    - clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
    - clk: qcom: gcc-sc8180x: Add GPLL9 support
    - clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
    - clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
    - drm/amd/display: avoid set dispclk to 0
    - smb: client: use actual path when queryfs
    - smb3: fix incorrect mode displayed for read-only files
    - iio: magnetometer: ak8975: Fix reading for ak099xx sensors
    - iio: pressure: bmp280: Fix regmap for BMP280 device
    - iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
    - tomoyo: fallback to realpath if symlink's pathname does not exist
    - kselftests: mm: fix wrong __NR_userfaultfd value
    - rtc: at91sam9: fix OF node leak in probe() error path
    - mm/hugetlb: fix memfd_pin_folios resv_huge_pages leak
    - mm/gup: fix memfd_pin_folios hugetlb page allocation
    - mm/hugetlb: simplify refs in memfd_alloc_folio
    - Input: adp5589-keys - fix adp5589_gpio_get_value()
    - HID: bpf: fix cfi stubs for hid_bpf_ops
    - pidfs: check for valid pid namespace
    - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO
    - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override
    - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA
    - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
    - ACPI: resource: Add Asus ExpertBook B2502CVA to
      irq1_level_low_skip_override[]
    - btrfs: drop the backref cache during relocation if we commit
    - btrfs: send: fix invalid clone operation for file that got its size
      decreased
    - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
    - gpio: davinci: fix lazy disable
    - net: pcs: xpcs: fix the wrong register that was written back
    - Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
    - io_uring/net: harden multishot termination case for recv
    - ceph: fix cap ref leak via netfs init_request
    - tracing/hwlat: Fix a race during cpuhp processing
    - tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
    - rtla: Fix the help text in osnoise and timerlat top tools
    - firmware/sysfb: Disable sysfb for firmware buffers with unknown parent
    - close_range(): fix the logics in descriptor table trimming
    - drm/i915/gem: fix bitwise and logical AND mixup
    - drm/panthor: Don't add write fences to the shared BOs
    - drm/panthor: Don't declare a queue blocked if deferred operations are
      pending
    - drm/sched: Fix dynamic job-flow control race
    - drm/sched: Add locking to drm_sched_entity_modify_sched
    - drm/sched: Always wake up correct scheduler in drm_sched_entity_push_job
    - drm/sched: Always increment correct scheduler score
    - drm/amd/display: Restore Optimized pbn Value if Failed to Disable DSC
    - drm/amd/display: Add HDR workaround for specific eDP
    - drm/amd/display: Enable idle workqueue for more IPS modes
    - kconfig: fix infinite loop in sym_calc_choice()
    - kconfig: qconf: move conf_read() before drawing tree pain
    - kconfig: qconf: fix buffer overflow in debug links
    - arm64: cputype: Add Neoverse-N3 definitions
    - arm64: errata: Expand speculative SSBS workaround once more
    - mm: z3fold: deprecate CONFIG_Z3FOLD
    - [Config] updateconfigs after deprecating Z3FOLD
    - drm/amd/display: Allow backlight to go below
      `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
    - sunrpc: change sp_nrthreads from atomic_t to unsigned int.
    - NFSD: Async COPY result needs to return a write verifier
    - remoteproc: k3-r5: Acquire mailbox handle during probe routine
    - remoteproc: k3-r5: Delay notification of wakeup event
    - r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
    - ACPI: battery: Simplify battery hook locking
    - drm/xe: Clean up VM / exec queue file lock usage.
    - drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
    - drm/xe/vram: fix ccs offset calculation
    - drm/sched: revert "Always increment correct scheduler score"
    - ALSA: control: Fix leftover snd_power_unref()
    - crypto: octeontx* - Select CRYPTO_AUTHENC
    - drm/amd/display: Revert Avoid overflow assignment
    - perf report: Fix segfault when 'sym' sort key is not used
    - pmdomain: core: Reduce debug summary table width
    - perf python: Allow checking for the existence of warning options in clang
    - Linux 6.11.3
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49863
    - vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49864
    - rxrpc: Fix a race between socket set up and I/O thread creation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49865
    - drm/xe/vm: move xa_alloc to prevent UAF
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49955
    - ACPI: battery: Fix possible crash when unregistering a battery hook
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49973
    - r8169: add tally counter fields added with RTL8125
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49974
    - NFSD: Limit the number of concurrent async COPY operations
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49975
    - uprobes: fix kernel info leak via "[uprobes]" vma
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50003
    - drm/amd/display: Fix system hang while resume with TBT monitor
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50173
    - drm/panthor: Fix access to uninitialized variable in tick_ctx_cleanup()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49866
    - tracing/timerlat: Fix a race during cpuhp processing
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49976
    - tracing/timerlat: Drop interface_lock in stop_kthread()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50005
    - mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50012
    - cpufreq: Avoid a bad reference count on CPU node
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49867
    - btrfs: wait for fixup workers before stopping cleaner kthread during umount
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49868
    - btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49869
    - btrfs: send: fix buffer overflow detection when copying path to cache entry
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49870
    - cachefiles: fix dentry leak in cachefiles_open_file()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49871
    - Input: adp5589-keys - fix NULL pointer dereference
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49872
    - mm/gup: fix memfd_pin_folios alloc race panic
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49964
    - mm/hugetlb: fix memfd_pin_folios free_huge_pages leak
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49873
    - mm/filemap: fix filemap_get_folios_contig THP panic
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49977
    - net: stmmac: Fix zero-division error when disabling tc cbs
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49978
    - gso: fix udp gso fraglist segmentation after pull from frag_list
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49979
    - net: gso: fix tcp fraglist segmentation after pull from frag_list
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49980
    - vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49981
    - media: venus: fix use after free bug in venus_remove due to race condition
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49956
    - gfs2: fix double destroy_workqueue error
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50176
    - remoteproc: k3-r5: Fix error handling when power-up failed
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49982
    - aoe: fix the potential use-after-free problem in more places
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49874
    - i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver
      Due to Race Condition
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49875
    - nfsd: map the EBADMSG to nfserr_io to avoid warning
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50013
    - exfat: fix memory leak in exfat_load_bitmap()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49876
    - drm/xe: fix UAF around queue destruction
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49877
    - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49957
    - ocfs2: fix null-ptr-deref when journal load failed.
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49965
    - ocfs2: remove unreasonable unlock in ocfs2_read_blocks
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49966
    - ocfs2: cancel dqi_sync_work before freeing oinfo
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49958
    - ocfs2: reserve space for inline xattr before attaching reflink tree
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49959
    - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49878
    - resource: fix region_intersects() vs add_memory_driver_managed()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49879
    - drm: omapdrm: Add missing check for alloc_ordered_workqueue
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49880
    - ext4: fix off by one issue in alloc_flex_gd()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49881
    - ext4: update orig_path in ext4_find_extent()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50014
    - ext4: fix access to uninitialised lock in fc replay path
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49960
    - ext4: fix timer use-after-free on failed mount
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49882
    - ext4: fix double brelse() the buffer of the extents path
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49883
    - ext4: aovid use-after-free in ext4_ext_insert_extent()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49983
    - ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50015
    - ext4: dax: fix overflowing extents beyond inode size when partially writing
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49884
    - ext4: fix slab-use-after-free in ext4_split_extent_at()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49885
    - mm, slub: avoid zeroing kmalloc redzone
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49961
    - media: i2c: ar0521: Use cansleep version of gpiod_set_value()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49985
    - i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49886
    - platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49986
    - platform/x86: x86-android-tablets: Fix use after free on
      platform_device_register() errors
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49887
    - f2fs: fix to don't panic system for no free segment fault injection
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49888
    - bpf: Fix a sdiv overflow issue
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49987
    - bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50006
    - ext4: fix i_data_sem unlock order in ext4_ind_migrate()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49889
    - ext4: avoid use-after-free in ext4_ext_show_leaf()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49968
    - ext4: filesystems without casefold feature cannot be mounted with siphash
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49988
    - ksmbd: add refcnt to ksmbd_conn struct
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49890
    - drm/amd/pm: ensure the fw_info is not null before using it
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49891
    - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata
      paths
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49892
    - drm/amd/display: Initialize get_bytes_per_element's default to 1
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50016
    - drm/amd/display: Avoid overflow assignment in link_dp_cts
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49893
    - drm/amd/display: Check stream_status before it is used
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49969
    - drm/amd/display: Fix index out of bounds in DCN30 color transformation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49970
    - drm/amd/display: Implement bounds check for stream encoder creation in
      DCN401
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49894
    - drm/amd/display: Fix index out of bounds in degamma hardware format
      translation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49895
    - drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format
      translation
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49971
    - drm/amd/display: Increase array size of dummy_boolean
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49972
    - drm/amd/display: Deallocate DML memory if allocation fails
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49896
    - drm/amd/display: Check stream before comparing them
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49897
    - drm/amd/display: Check phantom_stream before it is used
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49898
    - drm/amd/display: Check null-initialized variables
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49899
    - drm/amd/display: Initialize denominators' default to 1
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49900
    - jfs: Fix uninit-value access of new_ea in ea_buffer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49901
    - drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49902
    - jfs: check if leafidx greater than num leaves per dmap tree
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49903
    - jfs: Fix uaf in dbFreeBits
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49904
    - drm/amdgpu: add list empty check to avoid null pointer issue
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49989
    - drm/amd/display: fix double free issue during amdgpu module unload
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49905
    - drm/amd/display: Add null check for 'afb' in
      amdgpu_dm_plane_handle_cursor_update (v2)
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49906
    - drm/amd/display: Check null pointer before try to access it
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49907
    - drm/amd/display: Check null pointers before using dc->clk_mgr
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49908
    - drm/amd/display: Add null check for 'afb' in amdgpu_dm_update_cursor (v2)
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50177
    - drm/amd/display: fix a UBSAN warning in DML2.1
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49909
    - drm/amd/display: Add NULL check for function pointer in
      dcn32_set_output_transfer_func
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49910
    - drm/amd/display: Add NULL check for function pointer in
      dcn401_set_output_transfer_func
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49911
    - drm/amd/display: Add NULL check for function pointer in
      dcn20_set_output_transfer_func
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49912
    - drm/amd/display: Handle null 'stream_status' in
      'planes_changed_for_existing_stream'
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49913
    - drm/amd/display: Add null check for top_pipe_to_program in
      commit_planes_for_stream
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49914
    - drm/amd/display: Add null check for pipe_ctx->plane_state in
      dcn20_program_pipe
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49915
    - drm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49916
    - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
      dcn401_init_hw
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49917
    - drm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in
      dcn30_init_hw
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49918
    - drm/amd/display: Add null check for head_pipe in
      dcn32_acquire_idle_pipe_for_head_pipe_in_layer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49919
    - drm/amd/display: Add null check for head_pipe in
      dcn201_acquire_free_pipe_for_layer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49991
    - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49920
    - drm/amd/display: Check null pointers before multiple uses
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49921
    - drm/amd/display: Check null pointers before used
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49922
    - drm/amd/display: Check null pointers before using them
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49923
    - drm/amd/display: Pass non-null to dcn20_validate_apply_pipe_split_flags
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49992
    - drm/stm: Avoid use-after-free issues with crtc and plane
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49993
    - iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49924
    - fbdev: pxafb: Fix possible use after free in pxafb_task()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49925
    - fbdev: efifb: Register sysfs groups through driver core
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49926
    - rcu-tasks: Fix access non-existent percpu rtpcp variable in
      rcu_tasks_need_gpcb()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50007
    - ALSA: asihpi: Fix potential OOB array access
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50017
    - x86/mm/ident_map: Use gbpages only where full GB page should be mapped.
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49927
    - x86/ioapic: Handle allocation failures gracefully
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50008
    - wifi: mwifiex: Fix memcpy() field-spanning write warning in
      mwifiex_cmd_802_11_scan_ext()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50018
    - net: napi: Prevent overflow of napi_defer_hard_irqs
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49928
    - wifi: rtw89: avoid reading out of bounds when loading TX power FW elements
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50178
    - cpufreq: loongson3: Use raw_smp_processor_id() in do_service_request()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50009
    - cpufreq: amd-pstate: add check for cpufreq_cpu_get's return value
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49994
    - block: fix integer overflow in BLKSECDISCARD
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49929
    - wifi: iwlwifi: mvm: avoid NULL pointer dereference
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49995
    - tipc: guard against string buffer overrun
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49962
    - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in
      acpi_db_convert_to_package()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49930
    - wifi: ath11k: fix array out-of-bound access in SoC stats
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49931
    - wifi: ath12k: fix array out-of-bound access in SoC stats
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49932
    - btrfs: don't readahead the relocation inode on RST
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49933
    - blk_iocost: fix more out of bound shifts
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49934
    - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50010
    - exec: don't WARN for racy path_noexec check
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49935
    - ACPI: PAD: fix crash in exit_round_robin()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49936
    - net/xen-netback: prevent UAF in xenvif_flush_hash()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49937
    - wifi: cfg80211: Set correct chandef when starting CAC
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49938
    - wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49939
    - wifi: rtw89: avoid to add interface to list twice when SER
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49940
    - l2tp: prevent possible tunnel refcount underflow
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49941
    - gpiolib: Fix potential NULL pointer dereference in gpiod_get_label()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49996
    - cifs: Fix buffer overflow when parsing NFS reparse points
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49942
    - drm/xe: Prevent null pointer access in xe_migrate_copy
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49943
    - drm/xe/guc_submit: add missing locking in wedged_fini
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50011
    - ASoC: Intel: soc-acpi-intel-rpl-match: add missing empty item
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50174
    - drm/panthor: Fix race when converting group handle to group object
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49944
    - sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49945
    - net/ncsi: Disable the ncsi work before freeing the associated structure
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49946
    - ppp: do not assume bh is held in ppp_channel_bridge_input()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49947
    - net: test for not too small csum_start in virtio_net_hdr_to_skb()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49948
    - net: add more sanity checks to qdisc_pkt_len_init()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49949
    - net: avoid potential underflow in qdisc_pkt_len_init() with UFO
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49997
    - net: ethernet: lantiq_etop: fix memory disclosure
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49998
    - net: dsa: improve shutdown sequence
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49999
    - afs: Fix the setting of the server responding flag
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49950
    - Bluetooth: L2CAP: Fix uaf in l2cap_connect
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49951
    - Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49952
    - netfilter: nf_tables: prevent nf_skb_duplicated corruption
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49953
    - net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50000
    - net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50001
    - net/mlx5: Fix error path in multi-packet WQE transmit
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50179
    - ceph: remove the incorrect Fw reference check when dirtying pages
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49963
    - mailbox: bcm2835: Fix timeout during suspend mode
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-49954
    - static_call: Replace pointless WARN_ON() in static_call_module_notify()
  * Oracular update: v6.11.3 upstream stable release (LP: #2089052) //
    CVE-2024-50002
    - static_call: Handle module init failure correctly in
      static_call_del_module()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033)
    - EDAC/synopsys: Fix error injection on Zynq UltraScale+
    - crypto: xor - fix template benchmarking
    - crypto: qat - disable IOV in adf_dev_stop()
    - crypto: qat - fix recovery flow for VFs
    - crypto: qat - ensure correct order in VF restarting handler
    - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
    - eth: fbnic: select DEVLINK and PAGE_POOL
    - wifi: brcmfmac: introducing fwil query functions
    - wifi: ath9k: Remove error checks when creating debugfs entries
    - wifi: ath12k: fix BSS chan info request WMI command
    - wifi: ath12k: match WMI BSS chan info structure with firmware definition
    - wifi: ath12k: fix invalid AMPDU factor calculation in
      ath12k_peer_assoc_h_he()
    - hwrng: cn10k - Enable by default CN10K driver if Thunder SoC is enabled
    - crypto: x86/aes-gcm - fix PREEMPT_RT issue in gcm_crypt()
    - net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
    - virtio: rename virtio_config_enabled to virtio_config_core_enabled
    - virtio: allow driver to disable the configure change notification
    - virtio-net: synchronize operstate with admin state on up/down
    - virtio-net: synchronize probe with ndo_set_features
    - arm64: signal: Fix some under-bracketed UAPI macros
    - wifi: rtw88: remove CPT execution branch never used
    - RISC-V: KVM: Fix sbiret init before forwarding to userspace
    - RISC-V: KVM: Allow legacy PMU access from guest
    - RISC-V: KVM: Fix to allow hpmcounter31 from the guest
    - mount: handle OOM on mnt_warn_timestamp_expiry
    - autofs: fix missing fput for FSCONFIG_SET_FD
    - netfilter: nf_tables: store new sets in dedicated list
    - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000
    - kselftest/arm64: signal: fix/refactor SVE vector length enumeration
    - arm64: smp: smp_send_stop() and crash_smp_send_stop() should try non-NMI
      first
    - thermal: core: Fold two functions into their respective callers
    - thermal: core: Fix rounding of delay jiffies
    - perf/dwc_pcie: Fix registration issue in multi PCIe controller instances
    - perf/dwc_pcie: Always register for PCIe bus notifier
    - crypto: qat - fix "Full Going True" macro definition
    - ACPI: video: force native for Apple MacbookPro9,2
    - wifi: mac80211_hwsim: correct MODULE_PARM_DESC of multi_radio
    - wifi: iwlwifi: config: label 'gl' devices as discrete
    - wifi: iwlwifi: mvm: increase the time between ranging measurements
    - wifi: cfg80211: fix bug of mapping AF3x to incorrect User Priority
    - wifi: mac80211: fix the comeback long retry times
    - wifi: iwlwifi: mvm: allow ESR when we the ROC expires
    - wifi: mac80211: Check for missing VHT elements only for 5 GHz
    - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE
    - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the
      spec
    - padata: Honor the caller's alignment in case of chunk_size 0
    - drivers/perf: hisi_pcie: Record hardware counts correctly
    - drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
    - kselftest/arm64: Actually test SME vector length changes via sigreturn
    - can: j1939: use correct function name in comment
    - wifi: rtw89: wow: fix wait condition for AOAC report request
    - ACPI: CPPC: Fix MASK_VAL() usage
    - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
    - netfilter: nf_tables: reject element expiration with no timeout
    - netfilter: nf_tables: reject expiration higher than timeout
    - netfilter: nf_tables: remove annotation to access set timeout while holding
      lock
    - netfilter: nft_dynset: annotate data-races around set timeout
    - perf/arm-cmn: Refactor node ID handling. Again.
    - perf/arm-cmn: Fix CCLA register offset
    - perf/arm-cmn: Ensure dtm_idx is big enough
    - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
    - thermal: gov_bang_bang: Adjust states of all uninitialized instances
    - wifi: mt76: mt7921: fix wrong UNII-4 freq range check for the channel usage
    - wifi: mt76: mt7996: fix traffic delay when switching back to working channel
    - wifi: mt76: mt7996: fix wmm set of station interface to 3
    - wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
    - wifi: mt76: mt7996: fix EHT beamforming capability check
    - pm:cpupower: Add missing powercap_set_enabled() stub function
    - crypto: ccp - do not request interrupt on cmd completion when irqs disabled
    - crypto: hisilicon/hpre - mask cluster timeout error
    - crypto: hisilicon/qm - reset device before enabling it
    - wifi: mt76: mt7996: fix handling mbss enable/disable
    - wifi: mt76: connac: fix checksum offload fields of connac3 RXD
    - wifi: mt76: mt7603: fix mixed declarations and code
    - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
    - wifi: mt76: mt7915: fix rx filter setting for bfee functionality
    - wifi: mt76: mt7996: fix uninitialized TLV data
    - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
    - af_unix: Don't call skb_get() for OOB skb.
    - af_unix: Remove single nest in manage_oob().
    - af_unix: Rename unlinked_skb in manage_oob().
    - af_unix: Move spin_lock() in manage_oob().
    - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
    - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
    - can: m_can: enable NAPI before enabling interrupts
    - can: m_can: m_can_close(): stop clocks after device has been shut down
    - Bluetooth: btusb: Fix not handling ZPL/short-transfer
    - bareudp: Pull inner IP header in bareudp_udp_encap_recv().
    - bareudp: Pull inner IP header on xmit.
    - net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
    - crypto: n2 - Set err to EINVAL if snprintf fails for hmac
    - xsk: fix batch alloc API on non-coherent systems
    - net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
    - fbnic: Set napi irq value after calling netif_napi_add
    - net: tipc: avoid possible garbage value
    - ublk: move zone report data out of request pdu
    - block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
    - block, bfq: don't break merge chain in bfq_split_bfqq()
    - cachefiles: Fix non-taking of sb_writers around set/removexattr
    - nbd: correct the maximum value for discard sectors
    - erofs: fix incorrect symlink detection in fast symlink
    - erofs: fix error handling in z_erofs_init_decompressor
    - block, bfq: fix uaf for accessing waker_bfqq after splitting
    - block, bfq: fix procress reference leakage for bfqq in merge chain
    - io_uring/io-wq: do not allow pinning outside of cpuset
    - io_uring/io-wq: inherit cpuset of cgroup in io worker
    - spi: ppc4xx: handle irq_of_parse_and_map() errors
    - arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
    - arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
    - spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
    - firmware: qcom: scm: Disable SDI and write no dump to dump mode
    - regulator: Return actual error in of_regulator_bulk_get_all()
    - arm64: dts: renesas: r9a08g045: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
    - arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
    - ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
    - arm64: tegra: Correct location of power-sensors for IGX Orin
    - arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
    - arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
    - arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
    - spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
    - arm64: dts: qcom: x1e80100: Fix PHY for DP2
    - ARM: dts: microchip: sama7g5: Fix RTT clock
    - ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
    - arm64: dts: ti: k3-am654-idk: Fix dtbs_check warning in ICSSG dmas
    - ARM: versatile: fix OF node leak in CPUs prepare
    - reset: berlin: fix OF node leak in probe() error path
    - reset: k210: fix OF node leak in probe() error path
    - platform: cznic: turris-omnia-mcu: Fix error check in
      omnia_mcu_register_trng()
    - clocksource/drivers/qcom: Add missing iounmap() on errors in
      msm_dt_timer_init()
    - arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
    - x86/mm: Use IPIs to synchronize LAM enablement
    - ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
    - ASoC: tas2781: Fix a compiling warning reported by robot kernel test due to
      adding tas2563_dvc_table
    - ASoC: tas2781-i2c: Drop weird GPIO code
    - ASoC: tas2781-i2c: Get the right GPIO line
    - selftests/ftrace: Add required dependency for kprobe tests
    - ALSA: hda: cs35l41: fix module autoloading
    - selftests/ftrace: Fix test to handle both old and new kernels
    - x86/boot/64: Strip percpu address space when setting up GDT descriptors
    - m68k: Fix kernel_clone_args.flags in m68k_clone()
    - ASoC: loongson: fix error release
    - selftests/ftrace: Fix eventfs ownership testcase to find mount point
    - selftests:resctrl: Fix build failure on archs without __cpuid_count()
    - cgroup/pids: Avoid spurious event notification
    - hwmon: (max16065) Fix overflows seen when writing limits
    - hwmon: (max16065) Fix alarm attributes
    - iommu/arm-smmu: Un-demote unhandled-fault msg
    - iommu/arm-smmu-v3: Fix a NULL vs IS_ERR() check
    - mtd: slram: insert break after errors in parsing the map
    - hwmon: (ntc_thermistor) fix module autoloading
    - power: supply: axp20x_battery: Remove design from min and max voltage
    - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
    - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
    - iommu/amd: Handle error path in amd_iommu_probe_device()
    - iommu/amd: Allocate the page table root using GFP_KERNEL
    - iommu/amd: Move allocation of the top table into v1_alloc_pgtable
    - iommu/amd: Set the pgsize_bitmap correctly
    - iommu/amd: Do not set the D bit on AMD v2 table entries
    - mtd: powernv: Add check devm_kasprintf() returned value
    - rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
    - mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
    - mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
    - mtd: rawnand: mtk: Fix init error path
    - iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
    - iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
    - iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
    - pmdomain: core: Harden inter-column space in debug summary
    - pmdomain: core: Fix "managed by" alignment in debug summary
    - drm/stm: Fix an error handling path in stm_drm_platform_probe()
    - drm/stm: ltdc: check memory returned by devm_kzalloc()
    - drm/amd/display: free bo used for dmub bounding box
    - drm/amdgpu: properly handle vbios fake edid sizing
    - drm/radeon: properly handle vbios fake edid sizing
    - drm/amd/display: Reset VRR config during resume
    - scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
    - scsi: sd: Don't check if a write for REQ_ATOMIC
    - scsi: block: Don't check REQ_ATOMIC for reads
    - scsi: NCR5380: Check for phase match during PDMA fixup
    - drm/amd/amdgpu: Properly tune the size of struct
    - drm/amd/display: Improve FAM control for DCN401
    - drm/rockchip: vop: Allow 4096px width scaling
    - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
    - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
    - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
    - drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
    - drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
    - drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
    - powerpc/8xx: Fix initial memory mapping
    - powerpc/8xx: Fix kernel vs user address comparison
    - powerpc/vdso: Inconditionally use CFUNC macro
    - drm/msm: Use a7xx family directly in gpu_state
    - drm/msm: Dump correct dbgahb clusters on a750
    - drm/msm: Fix CP_BV_DRAW_STATE_ADDR name
    - drm/msm: Fix incorrect file name output in adreno_request_fw()
    - drm/msm/a5xx: disable preemption in submits by default
    - drm/msm/a5xx: properly clear preemption records on resume
    - drm/msm/a5xx: fix races in preemption evaluation stage
    - drm/msm/a5xx: workaround early ring-buffer emptiness check
    - ipmi: docs: don't advertise deprecated sysfs entries
    - drm/msm/dp: enable widebus on all relevant chipsets
    - drm/msm/dsi: correct programming sequence for SM8350 / SM8450
    - drm/msm: fix %s null argument error
    - platform/x86: ideapad-laptop: Make the scope_guard() clear of its scope
    - kselftest: dt: Ignore nodes that have ancestors disabled
    - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
    - drm/amdgpu: fix invalid fence handling in amdgpu_vm_tlb_flush
    - xen: use correct end address of kernel for conflict checking
    - HID: wacom: Support sequence numbers smaller than 16-bit
    - HID: wacom: Do not warn about dropped packets for first packet
    - ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
    - xen: introduce generic helper checking for memory map conflicts
    - xen: move max_pfn in xen_memory_setup() out of function scope
    - xen: add capability to remap non-RAM pages to different PFNs
    - xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
    - drm/xe: fix missing 'xe_vm_put'
    - xen/swiotlb: add alignment check for dma buffers
    - xen/swiotlb: fix allocated size
    - sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
    - bpf, x64: Fix tailcall hierarchy
    - bpf, arm64: Fix tailcall hierarchy
    - bpf: Fix compare error in function retval_range_within
    - selftests/bpf: Workaround strict bpf_lsm return value check.
    - selftests/bpf: Fix error linking uprobe_multi on mips
    - selftests/bpf: Fix wrong binary in Makefile log output
    - tools/runqslower: Fix LDFLAGS and add LDLIBS support
    - selftests/bpf: Use pid_t consistently in test_progs.c
    - selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
    - selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
    - selftests/bpf: Drop unneeded error.h includes
    - selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
    - selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
    - selftests/bpf: Fix missing BUILD_BUG_ON() declaration
    - selftests/bpf: Fix include of <sys/fcntl.h>
    - selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
    - selftests/bpf: Fix compiling kfree_skb.c with musl-libc
    - selftests/bpf: Fix compiling flow_dissector.c with musl-libc
    - selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
    - selftests/bpf: Fix compiling core_reloc.c with musl-libc
    - selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
    - selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
    - selftests/bpf: Fix errors compiling crypto_sanity.c with musl libc
    - selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
    - libbpf: Don't take direct pointers into BTF data from st_ops
    - selftests/bpf: Fix arg parsing in veristat, test_progs
    - selftests/bpf: Fix error compiling test_lru_map.c
    - selftests/bpf: Fix C++ compile error from missing _Bool type
    - selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
    - selftests/bpf: Fix compile if backtrace support missing in libc
    - selftests/bpf: Fix error compiling tc_redirect.c with musl libc
    - s390/entry: Move early program check handler to entry.S
    - s390/entry: Make early program check handler relocated lowcore aware
    - libbpf: Fix license for btf_relocate.c
    - samples/bpf: Fix compilation errors with cf-protection option
    - selftests/bpf: no need to track next_match_pos in struct test_loader
    - selftests/bpf: extract test_loader->expect_msgs as a data structure
    - selftests/bpf: allow checking xlated programs in verifier_* tests
    - selftests/bpf: __arch_* macro to limit test cases to specific archs
    - selftests/bpf: fix to avoid __msg tag de-duplication by clang
    - selftests/bpf: Fix incorrect parameters in NULL pointer checking
    - libbpf: Fix bpf_object__open_skeleton()'s mishandling of options
    - s390/ap: Fix deadlock caused by recursive lock of the AP bus scan mutex
    - libbpf: Ensure new BTF objects inherit input endianness
    - xz: cleanup CRC32 edits from 2018
    - kthread: fix task state in kthread worker if being frozen
    - ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
    - bpftool: Fix handling enum64 in btf dump sorting
    - sched/deadline: Fix schedstats vs deadline servers
    - smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
    - ext4: avoid buffer_head leak in ext4_mark_inode_used()
    - ext4: avoid potential buffer_head leak in __ext4_new_inode()
    - ext4: avoid negative min_clusters in find_group_orlov()
    - ext4: return error on ext4_find_inline_entry
    - sched/numa: Fix the vma scan starving issue
    - nilfs2: determine empty node blocks as corrupted
    - sched/pelt: Use rq_clock_task() for hw_pressure
    - bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
    - bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
    - perf scripts python cs-etm: Restore first sample log in verbose mode
    - perf bpf: Move BPF disassembly routines to separate file to avoid clash with
      capstone bpf headers
    - perf mem: Free the allocated sort string, fixing a leak
    - perf lock contention: Change stack_id type to s32
    - perf vendor events: SKX, CLX, SNR uncore cache event fixes
    - perf inject: Fix leader sampling inserting additional samples
    - perf report: Fix --total-cycles --stdio output error
    - perf build: Fix up broken capstone feature detection fast path
    - perf sched timehist: Fix missing free of session in perf_sched__timehist()
    - perf stat: Display iostat headers correctly
    - perf dwarf-aux: Check allowed location expressions when collecting variables
    - perf annotate-data: Fix off-by-one in location range check
    - perf dwarf-aux: Handle bitfield members from pointer access
    - perf hist: Don't set hpp_fmt_value for members in --no-group
    - perf sched timehist: Fixed timestamp error when unable to confirm event
      sched_in time
    - perf time-utils: Fix 32-bit nsec parsing
    - perf mem: Check mem_events for all eligible PMUs
    - perf mem: Fix missed p-core mem events on ADL and RPL
    - clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
    - clk: imx: imx6ul: fix default parent for enet*_ref_sel
    - clk: imx: composite-8m: Enable gate clk with mcore_booted
    - clk: imx: composite-93: keep root clock on when mcore enabled
    - clk: imx: composite-7ulp: Check the PCC present bit
    - clk: imx: fracn-gppll: fix fractional part of PLL getting lost
    - clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
    - clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
    - clk: imx: imx8qxp: Parent should be initialized earlier than the clock
    - quota: avoid missing put_quota_format when DQUOT_SUSPENDED is passed
    - remoteproc: imx_rproc: Correct ddr alias for i.MX8M
    - remoteproc: imx_rproc: Initialize workqueue earlier
    - clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
    - clk: qcom: dispcc-sm8550: fix several supposed typos
    - clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
    - clk: qcom: dispcc-sm8650: Update the GDSC flags
    - clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
    - leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
    - pinctrl: renesas: rzg2l: Return -EINVAL if the pin doesn't support
      PIN_CFG_OEN
    - pinctrl: ti: ti-iodelay: Fix some error handling paths
    - phy: phy-rockchip-samsung-hdptx: Explicitly include pm_runtime.h
    - Input: ilitek_ts_i2c - avoid wrong input subsystem sync
    - Input: ilitek_ts_i2c - add report id message validation
    - media: raspberrypi: VIDEO_RASPBERRYPI_PISP_BE should depend on ARCH_BCM2835
    - [Config] updateconfigs for VIDEO_RASPBERRYPI_PISP_BE
    - PCI: Wait for Link before restoring Downstream Buses
    - firewire: core: correct range of block for case of switch statement
    - media: staging: media: starfive: camss: Drop obsolete return value
      documentation
    - clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
    - clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
    - leds: pca995x: Use device_for_each_child_node() to access device child nodes
    - leds: pca995x: Fix device child node usage in pca995x_probe()
    - x86/PCI: Check pcie_find_root_port() return for NULL
    - PCI: xilinx-nwl: Fix register misspelling
    - PCI: xilinx-nwl: Clean up clock on probe failure/removal
    - leds: gpio: Set num_leds after allocation
    - media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
    - pinctrl: single: fix missing error code in pcs_probe()
    - clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
    - iommufd/selftest: Fix buffer read overrrun in the dirty test
    - RDMA/bnxt_re: Fix the table size for PSN/MSN entries
    - media: imagination: VIDEO_E5010_JPEG_ENC should depend on ARCH_K3
    - [Config] updateconfigs for VIDEO_E5010_JPEG_ENC
    - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
    - clk: ti: dra7-atl: Fix leak of of_nodes
    - clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync()
      usage
    - clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
    - nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
    - nfsd: fix refcount leak when file is unhashed after being found
    - pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
    - dt-bindings: PCI: layerscape-pci: Replace fsl,lx2160a-pcie with
      fsl,lx2160ar2-pcie
    - iommufd: Check the domain owner of the parent before creating a nesting
      domain
    - RDMA/erdma: Return QP state in erdma_query_qp
    - RDMA/mlx5: Fix counter update on MR cache mkey creation
    - RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
    - RDMA/mlx5: Drop redundant work canceling from clean_keys()
    - RDMA/mlx5: Fix MR cache temp entries cleanup
    - watchdog: imx_sc_wdt: Don't disable WDT in suspend
    - RDMA/hns: Don't modify rq next block addr in HIP09 QPC
    - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
    - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
    - RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
    - RDMA/hns: Optimize hem allocation performance
    - RDMA/hns: Fix restricted __le16 degrades to integer issue
    - Input: ims-pcu - fix calling interruptible mutex
    - RDMA/mlx5: Obtain upper net device only when needed
    - PCI: qcom-ep: Enable controller resources like PHY only after refclk is
      available
    - riscv: Fix fp alignment bug in perf_callchain_user()
    - RDMA/hns: Fix ah error counter in sw stat not increasing
    - RDMA/irdma: fix error message in irdma_modify_qp_roce()
    - ntb_perf: Fix printk format
    - ntb: Force physically contiguous allocation of rx ring buffers
    - nfsd: untangle code in nfsd4_deleg_getattr_conflict()
    - nfsd: fix initial getattr on write delegation
    - crypto: caam - Pad SG length when allocating hash edesc
    - crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
    - [Config] disable CRYPTO_AES_GCM_P10
    - f2fs: atomic: fix to avoid racing w/ GC
    - f2fs: reduce expensive checkpoint trigger frequency
    - f2fs: fix to avoid racing in between read and OPU dio write
    - f2fs: Create COW inode from parent dentry for atomic write
    - f2fs: fix to wait page writeback before setting gcing flag
    - f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
    - f2fs: compress: don't redirty sparse cluster during {,de}compress
    - f2fs: prevent atomic file from being dirtied before commit
    - spi: airoha: fix dirmap_{read,write} operations
    - spi: airoha: fix airoha_snand_{write,read}_data data_len estimation
    - spi: atmel-quadspi: Undo runtime PM changes at driver exit time
    - spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
    - lib/sbitmap: define swap_lock as raw_spinlock_t
    - spi: airoha: remove read cache in airoha_snand_dirmap_read()
    - spi: atmel-quadspi: Avoid overwriting delay register settings
    - NFSv4.2: Fix detection of "Proxying of Times" server support
    - nvme-multipath: system fails to create generic nvme device
    - iio: adc: ad7606: fix oversampling gpio array
    - iio: adc: ad7606: fix standby gpio state to match the documentation
    - driver core: Fix error handling in driver API device_rename()
    - ABI: testing: fix admv8818 attr description
    - iio: chemical: bme680: Fix read/write ops to device by adding mutexes
    - iio: magnetometer: ak8975: drop incorrect AK09116 compatible
    - dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
    - serial: 8250: omap: Cleanup on error in request_irq
    - Coresight: Set correct cs_mode for TPDM to fix disable issue
    - Coresight: Set correct cs_mode for dummy source to fix disable issue
    - coresight: tmc: sg: Do not leak sg_table
    - interconnect: icc-clk: Add missed num_nodes initialization
    - interconnect: qcom: sm8250: Enable sync_state
    - dm integrity: fix gcc 5 warning
    - cxl/pci: Fix to record only non-zero ranges
    - um: remove ARCH_NO_PREEMPT_DYNAMIC
    - Revert "dm: requeue IO if mapping table not yet available"
    - net: phy: aquantia: fix -ETIMEDOUT PHY probe failure when firmware not
      present
    - net: xilinx: axienet: Schedule NAPI in two steps
    - net: xilinx: axienet: Fix packet counting
    - net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
    - net: qrtr: Update packets cloning when broadcasting
    - net: phy: aquantia: fix setting active_low bit
    - net: phy: aquantia: fix applying active_low bit after reset
    - net: ravb: Fix maximum TX frame size for GbEth devices
    - net: ravb: Fix R-Car RX frame size limit
    - virtio_net: Fix mismatched buf address when unmapping for small packets
    - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
    - netfilter: ctnetlink: compile ctnetlink_label_size with
      CONFIG_NF_CONNTRACK_EVENTS
    - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump
      path
    - netfilter: nf_tables: missing objects with no memcg accounting
    - selftests: netfilter: Avoid hanging ipvs.sh
    - io_uring/sqpoll: do not allow pinning outside of cpuset
    - io_uring/rw: treat -EOPNOTSUPP for IOCB_NOWAIT like -EAGAIN
    - io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
    - mm: migrate: annotate data-race in migrate_folio_unmap()
    - drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
    - drm/amd/display: Add DSC Debug Log
    - drm/amdgpu/display: Fix a mistake in revert commit
    - xen: move checks for e820 conflicts further up
    - xen: allow mapping ACPI data using a different physical address
    - io_uring/sqpoll: retain test for whether the CPU is valid
    - drm/amd/display: disable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc
      before using it
    - io_uring/sqpoll: do not put cpumask on stack
    - selftests/bpf: correctly move 'log' upon successful match
    - Remove *.orig pattern from .gitignore
    - PCI: Revert to the original speed after PCIe failed link retraining
    - PCI: Clear the LBMS bit after a link retrain
    - PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
    - PCI: imx6: Fix missing call to phy_power_off() in error handling
    - PCI: imx6: Fix establish link failure in EP mode for i.MX8MM and i.MX8MP
    - PCI: imx6: Fix i.MX8MP PCIe EP's occasional failure to trigger MSI
    - PCI: Correct error reporting with PCIe failed link retraining
    - PCI: Use an error code with PCIe failed link retraining
    - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
    - PCI: dra7xx: Fix error handling when IRQ request fails in probe
    - Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
    - ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
    - soc: fsl: cpm1: qmc: Update TRNSYNC only in transparent mode
    - soc: fsl: cpm1: tsa: Fix tsa_write8()
    - soc: versatile: integrator: fix OF node leak in probe() error path
    - Revert "media: tuners: fix error return code of
      hybrid_tuner_request_state()"
    - iommu/amd: Fix argument order in amd_iommu_dev_flush_pasid_all()
    - Input: adp5588-keys - fix check on return code
    - Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
    - Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
    - Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
    - KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
    - KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
    - KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
    - KVM: x86: Re-split x2APIC ICR into ICR+ICR2 for AMD (x2AVIC)
    - drm/amdgpu/mes12: reduce timeout
    - drm/amdgpu/mes11: reduce timeout
    - drm/amdkfd: Add SDMA queue quantum support for GFX12
    - drm/amdgpu: update golden regs for gfx12
    - drm/amdgpu/mes12: set enable_level_process_quantum_check
    - drm/amdgpu/vcn: enable AV1 on both instances
    - drm/amd/pm: update workload mask after the setting
    - drm/amdgpu: fix PTE copy corruption for sdma 7
    - drm/amdgpu: bump driver version for cleared VRAM
    - drm/amdgpu/mes12: switch SET_SHADER_DEBUGGER pkt to mes schq pipe
    - drm/amdgpu: Fix selfring initialization sequence on soc24
    - drm/amd/display: Add HDMI DSC native YCbCr422 support
    - drm/amd/display: Round calculated vtotal
    - drm/amd/display: Clean up dsc blocks in accelerated mode
    - drm/amd/display: Block timing sync for different output formats in pmo
    - drm/amd/display: Validate backlight caps are sane
    - drm/amd/display: Disable SYMCLK32_LE root clock gating
    - drm/amd/display: Block dynamic IPS2 on DCN35 for incompatible FW versions
    - drm/amd/display: Enable DML2 override_det_buffer_size_kbytes
    - drm/amd/display: Skip to enable dsc if it has been off
    - drm/amd/display: Fix underflow when setting underscan on DCN401
    - drm/amd/display: Update IPS default mode for DCN35/DCN351
    - objtool: Handle frame pointer related instructions
    - powerpc/atomic: Use YZ constraints for DS-form instructions
    - ksmbd: make __dir_empty() compatible with POSIX
    - ksmbd: allow write with FILE_APPEND_DATA
    - ksmbd: handle caseless file creation
    - ata: libata-scsi: Fix ata_msense_control() CDL page reporting
    - scsi: ufs: qcom: Update MODE_MAX cfg_bw value
    - scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs
    - scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
    - scsi: mac_scsi: Refactor polling loop
    - scsi: mac_scsi: Disallow bus errors during PDMA send
    - can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
    - wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
    - usbnet: fix cyclical race on disconnect with work queue
    - arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
    - arm64: dts: mediatek: mt8395-nio-12l: Mark USB 3.0 on xhci1 as disabled
    - USB: appledisplay: close race between probe and completion handler
    - USB: misc: cypress_cy7c63: check for short transfer
    - USB: class: CDC-ACM: fix race between get_serial and set_serial
    - USB: misc: yurex: fix race between read and write
    - usb: xhci: fix loss of data on Cadence xHC
    - usb: cdnsp: Fix incorrect usb_request status
    - usb: xHCI: add XHCI_RESET_ON_RESUME quirk for Phytium xHCI host
    - usb: gadget: dummy_hcd: execute hrtimer callback in softirq context
    - usb: dwc2: drd: fix clock gating on USB role switch
    - bus: integrator-lm: fix OF node leak in probe()
    - bus: mhi: host: pci_generic: Update EDL firmware path for Foxconn modems
    - bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
    - tty: rp2: Fix reset with non forgiving PCIe host bridges
    - pps: add an error check in parport_attach
    - serial: don't use uninitialized value in uart_poll_init()
    - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
    - serial: qcom-geni: fix fifo polling timeout
    - serial: qcom-geni: fix false console tx restart
    - crypto: qcom-rng - fix support for ACPI-based systems
    - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
    - drbd: Fix atomicity violation in drbd_uuid_set_bm()
    - drbd: Add NULL check for net_conf to prevent dereference in state validation
    - ACPI: resource: Do IRQ override on MECHREV GM7XG0M
    - ACPI: resource: Add another DMI match for the TongFang GMxXGxx
    - intel_idle: add Granite Rapids Xeon support
    - intel_idle: fix ACPI _CST matching for newer Xeon platforms
    - x86/entry: Remove unwanted instrumentation in common_interrupt()
    - perf/x86/intel: Allow to setup LBR for counting event for BPF
    - perf/x86/intel/pt: Fix sampling synchronization
    - btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
    - wifi: mt76: mt7921: Check devm_kasprintf() returned value
    - wifi: mt76: mt7915: check devm_kasprintf() returned value
    - idpf: fix netdev Tx queue stop/wake
    - wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
    - wifi: rtw88: 8822c: Fix reported RX band width
    - wifi: rtw88: 8703b: Fix reported RX band width
    - wifi: mt76: mt7615: check devm_kasprintf() returned value
    - wifi: mt76: mt7925: fix a potential association failure upon resuming
    - debugfs show actual source in /proc/mounts
    - debugobjects: Fix conditions in fill_pool()
    - btrfs: tree-checker: fix the wrong output of data backref objectid
    - btrfs: always update fstrim_range on failure in FITRIM ioctl
    - f2fs: fix several potential integer overflows in file offsets
    - f2fs: prevent possible int overflow in dir_block_index()
    - f2fs: avoid potential int overflow in sanity_check_area_boundary()
    - hwrng: mtk - Use devm_pm_runtime_enable
    - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
    - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
    - arm64: esr: Define ESR_ELx_EC_* constants as UL
    - arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
    - arm64: dts: mediatek: mt8186-corsola: Disable DPI display interface
    - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
    - arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
    - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
    - fs: Fix file_set_fowner LSM hook inconsistencies
    - nfs: fix memory leak in error path of nfs4_do_reclaim
    - EDAC/igen6: Fix conversion of system address to physical memory address
    - eventpoll: Annotate data-race of busy_poll_usecs
    - md: Don't flush sync_work in md_write_start()
    - cpuidle: riscv-sbi: Use scoped device node handling to fix missing
      of_node_put
    - lsm: add the inode_free_security_rcu() LSM implementation hook
    - spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
    - dt-bindings: spi: nxp-fspi: add imx8ulp support
    - ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
    - ARM: dts: imx6ull-seeed-npi: fix fsl,pins property in tscgrp pinctrl
    - tools/nolibc: include arch.h from string.h
    - soc: versatile: realview: fix memory leak during device remove
    - soc: versatile: realview: fix soc_dev leak during device remove
    - usb: typec: ucsi: Call CANCEL from single location
    - usb: typec: ucsi: Fix busy loop on ASUS VivoBooks
    - soc: qcom: geni-se: add GP_LENGTH/IRQ_EN_SET/IRQ_EN_CLEAR registers
    - serial: qcom-geni: fix arg types for qcom_geni_serial_poll_bit()
    - serial: qcom-geni: introduce qcom_geni_serial_poll_bitfield()
    - serial: qcom-geni: fix console corruption
    - thermal: core: Store trip sysfs attributes in thermal_trip_desc
    - thermal: sysfs: Get to trips via attribute pointers
    - thermal: sysfs: Refine the handling of trip hysteresis changes
    - thermal: sysfs: Add sanity checks for trip temperature and hysteresis
    - bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
    - compiler.h: specify correct attribute for .rodata..c_jump_table
    - lockdep: fix deadlock issue between lockdep and rcu
    - mm/hugetlb_vmemmap: batch HVO work when demoting
    - s390/ftrace: Avoid calling unwinder in ftrace_return_address()
    - selftest mm/mseal: fix test_seal_mremap_move_dontunmap_anyaddr
    - mm: only enforce minimum stack gap size if it's sensible
    - spi: fspi: add support for imx8ulp
    - module: Fix KCOV-ignored file name
    - fbdev: xen-fbfront: Assign fb_info->device
    - tpm: export tpm2_sessions_init() to fix ibmvtpm building
    - mm/huge_memory: ensure huge_zero_folio won't have large_rmappable flag set
    - mm: change vmf_anon_prepare() to __vmf_anon_prepare()
    - mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu
      read lock
    - i2c: aspeed: Update the stop sw state when the bus recovery occurs
    - i2c: isch: Add missed 'else'
    - i2c: xiic: Try re-initialization on bus busy timeout
    - Documentation: KVM: fix warning in "make htmldocs"
    - spi: atmel-quadspi: Fix wrong register value written to MR
    - Revert: "dm-verity: restart or panic on an I/O error"
    - Linux 6.11.2
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47675
    - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47676
    - mm/hugetlb.c: fix UAF of vma in hugetlb fault pathway
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47677
    - exfat: resolve memory leak from exfat_create_upcase_table()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47725
    - dm-verity: restart or panic on an I/O error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47739
    - padata: use integer wrap around to prevent deadlock on seq_nr overflow
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47678
    - icmp: change the order of rate limits
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47733
    - netfs: Delete subtree of 'fs/netfs' when netfs module exits
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47679
    - vfs: fix race between evice_inodes() and find_inode()&iput()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49859
    - f2fs: fix to check atomic_file in f2fs ioctl interfaces
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47680
    - f2fs: check discard support for conventional zones
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47740
    - f2fs: Require FMODE_WRITE for atomic write ioctls
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47726
    - f2fs: fix to wait dio completion
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47741
    - btrfs: fix race setting file private on concurrent lseek using same fd
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47681
    - wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49858
    - efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49860
    - ACPI: sysfs: validate return type of _STR method
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47742
    - firmware_loader: Block path traversal
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47682
    - scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47743
    - KEYS: prevent NULL pointer dereference in find_asymmetric_key()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47727
    - x86/tdx: Fix "in-kernel MMIO" check
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47744
    - KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47719
    - iommufd: Protect against overflow of ALIGN() during iova allocation
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47745
    - mm: call the security_mmap_file() LSM hook in remap_file_pages()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47746
    - fuse: use exclusive lock when FUSE_I_CACHE_IO_MODE is set
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47734
    - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47684
    - tcp: check skb is non-NULL in tcp_rto_delta_us()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47747
    - net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race
      Condition
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47685
    - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47686
    - ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47748
    - vhost_vdpa: assign irq bypass producer token correctly
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47687
    - vdpa/mlx5: Fix invalid mr resource destroy
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47688
    - driver core: Fix a potential null-ptr-deref in module_add_driver()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47689
    - f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47690
    - f2fs: get rid of online repaire on corrupted directory
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47691
    - f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47692
    - nfsd: return -EINVAL when namelen is 0
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47737
    - nfsd: call cache_put if xdr_reserve_space returns NULL
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2023-52917
    - ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47749
    - RDMA/cxgb4: Added NULL check for lookup_atid
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47735
    - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47750
    - RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47751
    - PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47693
    - IB/core: Fix ib_cache_setup_one error flow cleanup
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47694
    - IB/mlx5: Fix UMR pd cleanup on error flow of driver init
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47695
    - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47752
    - media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47753
    - media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47754
    - media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47696
    - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47755
    - nvdimm: Fix devs leaks in scan_labels()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47756
    - PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47697
    - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47698
    - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47728
    - bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49861
    - bpf: Fix helper writes to read-only maps
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47757
    - nilfs2: fix potential oob read in nilfs_btree_check_delete()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47699
    - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47700
    - ext4: check stripe size compatibility on remount as well
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47701
    - ext4: avoid OOB when system.data xattr changes underneath the filesystem
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49850
    - bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47702
    - bpf: Fail verification for sign-extension of packet data/data_end/data_meta
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47703
    - bpf, lsm: Add check for BPF LSM return value
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49851
    - tpm: Clean up TPM space after command failure
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47723
    - jfs: fix out-of-bounds in dbNextAG() and diAlloc()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49852
    - scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47720
    - drm/amd/display: Add null check for set_output_gamma in
      dcn30_set_output_transfer_func
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47704
    - drm/amd/display: Check link_res->hpo_dp_link_enc before using it
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49853
    - firmware: arm_scmi: Fix double free in OPTEE transport
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47705
    - block: fix potential invalid pointer dereference in blk_add_partition
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47736
    - erofs: handle overlapped pclusters out of crafted images properly
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47706
    - block, bfq: fix possible UAF for bfqq->bic with merge chain
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49855
    - nbd: fix race between timeout and normal completion
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47707
    - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47708
    - netkit: Assign missing bpf_net_context
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47709
    - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47710
    - sock_map: Add a cond_resched() in sock_hash_free()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47711
    - af_unix: Don't return OOB skb in manage_oob().
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47712
    - wifi: wilc1000: fix potential RCU dereference issue in
      wilc_parse_join_bss_param
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47713
    - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47730
    - crypto: hisilicon/qm - inject error before stopping queue
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49856
    - x86/sgx: Fix deadlock in SGX NUMA node search
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47714
    - wifi: mt76: mt7996: use hweight16 to get correct tx antenna
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47715
    - wifi: mt76: mt7915: fix oops on non-dbdc mt7986
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49857
    - wifi: iwlwifi: mvm: set the cipher for secured NDP ranging
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47738
    - wifi: mac80211: don't use rate mask for offchannel TX either
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47731
    - drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-49862
    - powercap: intel_rapl: Fix off by one in get_rpi()
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47716
    - ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47717
    - RISC-V: KVM: Don't zero-out PMU snapshot area before freeing data
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47721
    - wifi: rtw89: remove unused C2H event ID RTW89_MAC_C2H_FUNC_READ_WOW_CAM to
      prevent out-of-bounds reading
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47732
    - crypto: iaa - Fix potential use after free bug
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47718
    - wifi: rtw88: always wait for both firmware loading attempts
  * Oracular update: v6.11.2 upstream stable release (LP: #2089033) //
    CVE-2024-47724
    - wifi: ath11k: use work queue to process beacon tx event
  * Oracular update: v6.11.1 upstream stable release (LP: #2089020)
    - powercap/intel_rapl: Add support for AMD family 1Ah
    - powercap/intel_rapl: Fix the energy-pkg event for AMD CPUs
    - cpufreq/amd-pstate: Add the missing cpufreq_cpu_put()
    - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in
      nft_socket_cgroup_subtree_level()
    - ASoC: amd: acp: add ZSC control register programming sequence
    - nvme-pci: qdepth 1 quirk
    - USB: serial: pl2303: add device id for Macrosilicon MS3020
    - powercap: intel_rapl: Change an error pointer to NULL
    - Linux 6.11.1
  * Oracular update: v6.11.1 upstream stable release (LP: #2089020) //
    CVE-2024-47671
    - USB: usbtmc: prevent kernel-usb-infoleak
  * Oracular update: v6.11.1 upstream stable release (LP: #2089020) //
    CVE-2024-46869
    - Bluetooth: btintel_pcie: Allocate memory for driver private data
  * CVE-2024-53164
    - net: sched: fix ordering of qlen adjustment
  * CVE-2024-53103
    - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

 -- Stefan Bader <stefan.bader@canonical.com>  Mon, 20 Jan 2025 21:47:09 +0100

linux-hwe-6.11 (6.11.0-14.15~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-14.15~24.04.1 -proposed tracker (LP: #2093481)

  [ Ubuntu: 6.11.0-14.15 ]

  * oracular/linux: 6.11.0-14.15 -proposed tracker (LP: #2093483)
  * CVE-2024-53164
    - net: sched: fix ordering of qlen adjustment
  * CVE-2024-53103
    - hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer

 -- Stefan Bader <stefan.bader@canonical.com>  Wed, 15 Jan 2025 17:02:58 +0100

linux-hwe-6.11 (6.11.0-13.14~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-13.14~24.04.1 -proposed tracker (LP: #2090459)

  * Commit "net/mlx5e: Don't offload internal port if filter device is out
    device" breaks OpenStack/OVN distributed gateway use case (LP: #2085018)
    - SAUCE: net/mlx5e: Remove workaround to avoid syndrome for internal port

  [ Ubuntu: 6.11.0-13.14 ]

  * oracular/linux: 6.11.0-13.14 -proposed tracker (LP: #2090463)
  * Packaging resync (LP: #1786013)
    - [Packaging] resync git-ubuntu-log
  * MGLRU: kswapd uses 100% CPU when MGLRU is enabled and under memory pressure
    (LP: #2087886)
    - mm/mglru: only clear kswapd_failures if reclaimable
  * CVE-2024-50264
    - vsock/virtio: Initialization of the dangling pointer occurring in vsk->trans
  * CVE-2024-53057
    - net/sched: stop qdisc_tree_reduce_backlog on TC_H_ROOT
  * CVE-2024-49967
    - ext4: no need to continue when the number of entries is 1

 -- Stefan Bader <stefan.bader@canonical.com>  Wed, 04 Dec 2024 10:31:45 +0100

linux-hwe-6.11 (6.11.0-12.13~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-12.13~24.04.1 -proposed tracker (LP: #2086265)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] resync git-ubuntu-log

  [ Ubuntu: 6.11.0-12.13 ]

  * oracular/linux: 6.11.0-12.13 -proposed tracker (LP: #2089269)
  * LXD fan bridge causes blocked tasks (LP: #2064176)
    - SAUCE: fan: release rcu_read_lock on skb discard path
    - SAUCE: fan: fix racy device stat update
  * OVTI08F4:00: number of CSI2 data lanes 2 is not supported (LP: #2084059)
    - SAUCE: media: ipu-bridge: Add support for additional link frequencies
  * [Oracular] Allow overriding Rust tools (LP: #2084693)
    - [Packaging] Allow rust overrides
  * Intel(R) PRO/1000 I219 ethernet adapter [8086:550c] may block entrance of
    modern standby (LP: #2081130)
    - platform/x86: intel/pmc: Ignore all LTRs during suspend
    - e1000e: change I219 (19) devices to ADP
    - x86/apic: Always explicitly disarm TSC-deadline timer
  * Need driver support for Realtek RTL8126A rev.b 5Gbps ethernet [10ec:8126]
    (LP: #2079017)
    - r8169: add support for RTL8126A rev.b
    - r8169: add missing MODULE_FIRMWARE entry for RTL8126A rev.b
  * Missing device ID for amd_atl driver for AMD Strix platform (LP: #2083292)
    - SAUCE: x86/amd_nb: Add new PCI ID for AMD family 1Ah model 20h
  * Lack of UART boot output on rb3gen2 even with earlycon (LP: #2083559)
    - [Config] move qcom clk and serial options as builtin
  * r8169: transmit queue 0 timed out error when re-plugging the Ethernet cable
    (LP: #2084526)
    - r8169: disable ALDPS per default for RTL8125
  * Dell Alienware sysytem reports errors of dell_wmi_sysman and dell_smbios in
    demsg (LP: #2084808)
    - platform/x86: dell-sysman: add support for alienware products
  * Add Intel Arrow Lake-H LPSS PCI IDs (LP: #2083905)
    - mfd: intel-lpss: Add Intel Arrow Lake-H LPSS PCI IDs
  * rtw89: reset IDMEM mode to prevent download firmware failure (LP: #2077396)
    - wifi: rtw89: 885xb: reset IDMEM mode to prevent download firmware failure
  * Missing Bluetooth device IDs for new Mediatek MT7920/MT7925 (LP: #2078878)
    - SAUCE: Bluetooth: btusb: Add USB HW IDs for MT7920/MT7925
  * rtw89: Support hardware rfkill (LP: #2077384)
    - wifi: rtw89: add support for hardware rfkill
  * [SRU] uncore: Add ARL and LNL support on 6.11 (LP: #2081810)
    - perf/x86/intel/uncore: Add Arrow Lake support
    - perf/x86/intel/uncore: Factor out common MMIO init and ops functions
    - perf/x86/intel/uncore: Add Lunar Lake support
    - perf/x86/intel/uncore: Add LNL uncore iMC freerunning support
    - perf/x86/intel/uncore: Use D0:F0 as a default device
  * Support Qualcomm WCN7851 Dual Bluetooth Adapter 0489:E0F3 (LP: #2081796)
    - SAUCE: Bluetooth: btusb: Add one more ID 0x0489:0xe0f3 for Qualcomm WCN785x
  * The system hangs after resume with thunderbolt monitor(AMD GPU [1002:1900])
    (LP: #2083182)
    - SAUCE: drm/amd/display: Fix system hang while resume with TBT monitor
  * UBSAN: array-index-out-of-bounds in module mt76 (LP: #2081785)
    - wifi: mt76: mt7925: fix a potential array-index-out-of-bounds issue for clc
  * Missing devices nodes for AMD Instinct MI300 card when installed along with
    integrated display (LP: #2078773)
    - drm: Use XArray instead of IDR for minors
    - accel: Use XArray instead of IDR for minors
    - drm: Expand max DRM device number to full MINORBITS

 -- Stefan Bader <stefan.bader@canonical.com>  Fri, 22 Nov 2024 10:13:28 +0100

linux-hwe-6.11 (6.11.0-9.9~24.04.1) noble; urgency=medium

  * noble/linux-hwe-6.11: 6.11.0-9.9~24.04.1 -proposed tracker (LP: #2084673)

  [ Ubuntu: 6.11.0-9.9 ]

  * oracular/linux: 6.11.0-9.9 -proposed tracker (LP: #2084250)
  * re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
    - SAUCE: fan: add VXLAN implementation
    - SAUCE: fan: Fix NULL pointer dereference
    - SAUCE: fan: support vxlan strict length validation
  * update for V3 kernel bits and improved multiple fan slice support
    (LP: #1470091) // re-enable Ubuntu FAN in the Noble kernel (LP: #2064508)
    - SAUCE: fan: tunnel multiple mapping mode (v3)
  * Setting I/O scheduler to 'none' causes error in oracular (LP: #2083845)
    - block: Fix elv_iosched_local_module handling of "none" scheduler
  * Miscellaneous Ubuntu changes
    - [Config] Update toolchain versions

 -- Stefan Bader <stefan.bader@canonical.com>  Wed, 16 Oct 2024 15:54:43 +0200

linux-hwe-6.11 (6.11.0-8.8~24.04.1) noble; urgency=medium

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] update update.conf
    - [Packaging] debian.hwe-6.11/dkms-versions -- manually update from master
    - [Packaging] Allow rust overrides
    - [Packaging] hwe-6.11: Lock rust version to Oracular
    - [Config] hwe-6.11: Re-enable rust modules

  [ Ubuntu: 6.11.0-8.8 ]

  * oracular/linux: 6.11.0-8.8 -proposed tracker (LP: #2080825)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)
  * [SRU] Disable CONFIG_TCG_TPM2_HMAC to avoid performance loss after v6.10
    (LP: #2080322)
    - [Config] disable CONFIG_TCG_TPM2_HMAC by default
  * Integrated Sensor Hub (ISH) support for Intel Lunar Lake platform
    (LP: #2071698)
    - Documentation: hid: intel-ish-hid: Add vendor custom firmware loading
    - HID: intel-ish-hid: Use CPU generation string in driver_data
    - hid: intel-ish-hid: Add support for vendor customized firmware loading
  * Miscellaneous Ubuntu changes
    - [Packaging] Purge obsolete upstart files
    - [Packaging] tools/hv: don't build/install hv_fcopy_uio_daemon on arm64
    - [Config] Update toolchain versions
    - SAUCE: rust: Fix rustc source path for the new rustc packaging
    - [Packaging] Don't force bindgen version
    - [Config] Re-enable rust support for amd64

  [ Ubuntu: 6.11.0-7.7 ]

  * oracular/linux: 6.11.0-7.7 -proposed tracker (LP: #2079949)
  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [1/99]: LSM: Infrastructure management of the sock
      security
    - SAUCE: apparmor4.0.0 [2/99]: LSM: Add the lsmblob data structure.
    - SAUCE: apparmor4.0.0 [3/99]: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: apparmor4.0.0 [4/99]: LSM: Call only one hook for audit rules
    - SAUCE: apparmor4.0.0 [5/99]: LSM: Add lsmblob_to_secctx hook
    - SAUCE: apparmor4.0.0 [6/99]: Audit: maintain an lsmblob in audit_context
    - SAUCE: apparmor4.0.0 [7/99]: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [8/99]: Audit: Update shutdown LSM data
    - SAUCE: apparmor4.0.0 [9/99]: LSM: Use lsmblob in security_current_getsecid
    - SAUCE: apparmor4.0.0 [10/99]: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: apparmor4.0.0 [11/99]: Audit: use an lsmblob in audit_names
    - SAUCE: apparmor4.0.0 [12/99]: LSM: Create new security_cred_getlsmblob LSM
      hook
    - SAUCE: apparmor4.0.0 [13/99]: Audit: Change context data from secid to
      lsmblob
    - SAUCE: apparmor4.0.0 [14/99]: Netlabel: Use lsmblob for audit data
    - SAUCE: apparmor4.0.0 [15/99]: LSM: Ensure the correct LSM context releaser
    - SAUCE: apparmor4.0.0 [16/99]: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [17/99]: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [18/99]: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [19/99]: LSM: lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [20/99]: LSM: security_lsmblob_to_secctx module
      selection
    - SAUCE: apparmor4.0.0 [21/99]: Audit: Create audit_stamp structure
    - SAUCE: apparmor4.0.0 [22/99]: Audit: Allow multiple records in an
      audit_buffer
    - SAUCE: apparmor4.0.0 [23/99]: Audit: Add record for multiple task security
      contexts
    - SAUCE: apparmor4.0.0 [24/99]: audit: multiple subject lsm values for
      netlabel
    - SAUCE: apparmor4.0.0 [25/99]: Audit: Add record for multiple object contexts
    - SAUCE: apparmor4.0.0 [26/99]: LSM: Remove unused lsmcontext_init()
    - SAUCE: apparmor4.0.0 [27/99]: LSM: Improve logic in security_getprocattr
    - SAUCE: apparmor4.0.0 [28/99]: LSM: secctx provider check on release
    - SAUCE: apparmor4.0.0 [29/99]: LSM: Single calls in socket_getpeersec hooks
    - SAUCE: apparmor4.0.0 [30/99]: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [31/99]: LSM: Identify which LSM handles the context
      string
    - SAUCE: apparmor4.0.0 [32/99]: AppArmor: Remove the exclusive flag
    - SAUCE: apparmor4.0.0 [33/99]: LSM: Add mount opts blob size tracking
    - SAUCE: apparmor4.0.0 [34/99]: LSM: allocate mnt_opts blobs instead of module
      specific data
    - SAUCE: apparmor4.0.0 [35/99]: LSM: Infrastructure management of the key
      security blob
    - SAUCE: apparmor4.0.0 [36/99]: LSM: Infrastructure management of the mnt_opts
      security blob
    - SAUCE: apparmor4.0.0 [37/99]: LSM: Remove lsmblob scaffolding
    - SAUCE: apparmor4.0.0 [38/99]: LSM: Allow reservation of netlabel
    - SAUCE: apparmor4.0.0 [39/99]: LSM: restrict security_cred_getsecid() to a
      single LSM
    - SAUCE: apparmor4.0.0 [40/99]: Smack: Remove LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [41/99]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [41/99]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [42/99]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [43/99]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [44/99]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [45/99]: af_unix mediation
    - SAUCE: apparmor4.0.0 [46/99]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [47/99] fixup inode_set_attr
    - SAUCE: apparmor4.0.0 [48/99]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [49/99]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [50/99]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [51/99]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [52/99]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [53/99]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [54/99]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [55/99]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [56/99]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [57/99]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [58/99]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [59/99]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [60/99]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [61/99]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [62/99]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [63/99]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [64/93] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [65/99]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [66/99]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [67/99]: userns - make it so special unconfined
      profiles can mediate user namespaces
    - SAUCE: apparmor4.0.0 [68/99]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [69/99]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [70/99]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [71/99]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [72/99]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [73/99]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [74/99]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [75/99]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [76/99]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [77/99]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [78/99]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [79/99]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [80/99]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [81/99]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [82/99]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [83/99]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [84/99]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [85/99]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [86/99]: fixup notify
    - SAUCE: apparmor4.0.0 [87/99]: apparmor: add fine grained ipv4/ipv6 mediation
    - SAUCE: apparmor4.0.0 [88/99]: apparmor: disable tailglob responses for now
    - SAUCE: apparmor4.0.0 [89/99]: apparmor: Fix notify build warnings
    - SAUCE: apparmor4.0.0 [90/99]: fix reserved mem for when we save ipv6
      addresses
    - SAUCE: apparmor4.0.0 [91/99]: fix address mapping for recvfrom
    - SAUCE: apparmor4.0.0 [92/99]: apparmor: add support for 2^24 states to the
      dfa state machine.
    - SAUCE: apparmor4.0.0 [93/99]: apparmor: advertise to userspace support of
      user upcall for file rules.
    - SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside
      aa_alloc_null
    - SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure
      for complain
    - SAUCE: apparmor4.0.0 [96/99]: apparmor: fix prompt failing during large down
      loads
    - SAUCE: apparmor4.0.0 [97/99]: apparmor: fix allow field in notification
    - SAUCE: apparmor4.0.0 [98/99]: fix build error with !CONFIG_SECURITY
    - SAUCE: apparmor4.0.0 [99/99]: fix build error with in nfs4xdr
  * Intel Lunar Lake / Battlemage enablement (LP: #2076209)
    - drm/xe/lnl: Drop force_probe requirement
    - drm/xe: Support 'nomodeset' kernel command-line option
    - drm/i915/display: Plane capability for 64k phys alignment
    - drm/xe: Align all VRAM scanout buffers to 64k physical pages when needed.
    - drm/xe: Use separate rpm lockdep map for non-d3cold-capable devices
    - drm/xe: Fix NPD in ggtt_node_remove()
    - drm/xe/bmg: Drop force_probe requirement
    - drm/xe/gsc: Fix FW status if the firmware is already loaded
    - drm/xe/gsc: Track the platform in the compatibility version
    - drm/xe/gsc: Wedge the device if the GSCCS reset fails
    - drm/i915/bios: Update new entries in VBT BDB block definitions
    - drm/xe/hwmon: Treat hwmon as a per-device concept
    - drm/xe: s/xe_tile_migrate_engine/xe_tile_migrate_exec_queue
    - drm/xe: Add xe_vm_pgtable_update_op to xe_vma_ops
    - drm/xe: Add xe_exec_queue_last_fence_test_dep
    - drm/xe: Add timeout to preempt fences
    - drm/xe: Convert multiple bind ops into single job
    - drm/xe: Update VM trace events
    - drm/xe: Update PT layer with better error handling
    - drm/xe: Add VM bind IOCTL error injection
    - dma-buf: Split out dma fence array create into alloc and arm functions
    - drm/xe: Invalidate media_gt TLBs in PT code
    - drm/i915/display: Fix BMG CCS modifiers
    - drm/xe: Use xe_pm_runtime_get in xe_bo_move() if reclaim-safe.
    - drm/xe: Remove extra dma_fence_put on xe_sync_entry_add_deps failure
  * [24.10 FEAT] [KRN1911] Vertical CPU Polarization Support Stage 2
    (LP: #2072760)
    - s390/wti: Introduce infrastructure for warning track interrupt
    - s390/wti: Prepare graceful CPU pre-emption on wti reception
    - s390/wti: Add wti accounting for missed grace periods
    - s390/wti: Add debugfs file to display missed grace periods per cpu
    - s390/topology: Add sysctl handler for polarization
    - s390/topology: Add config option to switch to vertical during boot
    - s390/smp: Add cpu capacities
    - s390/hiperdispatch: Introduce hiperdispatch
    - s390/hiperdispatch: Add steal time averaging
    - s390/hiperdispatch: Add trace events
    - s390/hiperdispatch: Add hiperdispatch sysctl interface
    - s390/hiperdispatch: Add hiperdispatch debug attributes
    - s390/hiperdispatch: Add hiperdispatch debug counters
    - [Config] Initial set of new options HIPERDISPATCH_ON and
      SCHED_TOPOLOGY_VERTICAL to yes for s390x
  * Remove non-LPAE kernel flavor (LP: #2025265)
    - [Packaging] Drop control.d/vars.generic-lpae
  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] Don't call dh_all on linux-bpf-dev unless on master kernel
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc7 rebase

  [ Ubuntu: 6.11.0-6.6 ]

  * oracular/linux: 6.11.0-6.6 -proposed tracker (LP: #2077949)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)
    - [Packaging] update Ubuntu.md
  * Pull in latest X13s commits (LP: #2078929)
    - arm64: dts: qcom: sc8280xp-x13s: disable PCIe perst pull downs
    - arm64: dts: qcom: sc8280xp-x13s: clean up PCIe2a pinctrl node
    - media: qcom: camss: Remove use_count guard in stop_streaming
    - media: qcom: camss: Fix ordering of pm_runtime_enable
    - arm64: dts: qcom: sc8280xp-x13s: Enable RGB sensor
    - wifi: ath11k: fix NULL pointer dereference in ath11k_mac_get_eirp_power()
    - Revert "wifi: ath11k: restore country code during resume"
    - Revert "wifi: ath11k: support hibernation"
    - SAUCE: media: ov5675: Fix power on/off delay timings
    - SAUCE: media: dt-bindings: Document SC8280XP/SM8350 Venus
    - SAUCE: media: venus: core: Remove trailing commas from of match entries
    - SAUCE: media: venus: hfi_venus: Support only updating certain bits with
      presets
    - SAUCE: media: platform: venus: Add optional LLCC path
    - SAUCE: media: venus: core: Add SM8350 resource struct
    - SAUCE: media: venus: core: Add SC8280XP resource struct
    - SAUCE: arm64: dts: qcom: sc8280xp: Add Venus
    - SAUCE: arm64: dts: qcom: sc8280xp-x13s: Enable Venus
    - SAUCE: phy: qcom-qmp-combo: drop regulator loads
    - SAUCE: phy: qcom-edp: drop regulator loads
    - SAUCE: i2c: qcom-cci: Stop complaining about DT set clock rate
    - SAUCE: clk: qcom: gcc-sc8280xp: don't use parking clk_ops for QUPs
  * Intel Lunar Lake / Battlemage enablement (LP: #2076209)
    - drm/i915: Skip programming FIA link enable bits for MTL+
    - drm/i915: disable fbc due to Wa_16023588340
    - drm/xe/xe2lpm: Extend Wa_16021639441
    - drm/i915/display: Cache adpative sync caps to use it later
    - drm/xe: Generate oob before compiling anything
    - drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
    - drm/xe/gsc: add Battlemage support
    - drm/xe/migrate: Handle clear ccs logic for xe2 dgfx
    - drm/xe/migrate: Add helper function to program identity map
    - drm/xe/xe2: Introduce identity map for compressed pat for vram
    - drm/xe/xe_migrate: Handle migration logic for xe2+ dgfx
    - drm/xe/fbdev: Limit the usage of stolen for LNL+
    - drm/xe/uapi: Expose SIMD16 EU mask in topology query
    - drm/xe: Fix warning on unreachable statement
    - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
    - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
    - drm/xe/hdcp: Check GSC structure validity
    - drm/i915/dp: Clear VSC SDP during post ddi disable routine
    - drm/xe/huc: Define HuC binary for LNL
    - drm/xe/gsc: Define GSC binary for LNL
    - drm/xe/huc: Define HuC binary for BMG
    - drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
    - drm/i915/display/dp: Compute AS SDP when vrr is also enabled
    - drm/xe: Move and export xe_hw_engine lookup.
    - drm/xe/xe2: Enable Priority Mem Read
    - drm/xe/xe2: Introduce performance changes
    - drm/xe/xe2: Add performance turning changes
    - drm/xe/guc: Bump minimum required GuC version to v70.29.2
    - drm/xe/guc: Define GuC version v70.29.2 for BMG
    - drm/xe/guc: Enable w/a 14022293748 and 22019794406
    - drm/xe: Move enable host l2 VRAM post MCR init
    - drm/xe: Write all slices if its mcr register
    - drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register
    - drm/i915/pps: Disable DPLS_GATING around pps sequence
    - drm/xe: fix engine_class bounds check again
    - drm/xe/uc: Use managed bo for HuC and GSC objects
    - drm/xe: Use reserved copy engine for user binds on faulting devices
    - drm/xe/display: Match i915 driver suspend/resume sequences better
    - drm/i915: move rawclk from runtime to display runtime info
    - drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
    - drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled
    - drm/i915/display: Don't enable decompression on Xe2 with Tile4
    - drm/fourcc: define Intel Xe2 related tile4 ccs modifiers
    - drm/i915/display: allow creation of Xe2 ccs framebuffers
    - drm/xe/display: fix compat IS_DISPLAY_STEP() range end
    - drm/xe/display: remove intel_display_step_name() to simplify
    - drm/xe/display: remove the unused compat HAS_GMD_ID()
    - drm/xe/step: define more steppings E-J
    - drm/i915/display: rename IS_DISPLAY_IP_RANGE() to IS_DISPLAY_VER_FULL()
    - drm/i915/display: rename IS_DISPLAY_IP_STEP() to IS_DISPLAY_VER_STEP()
    - drm/i915/display: identify display steppings in display probe
    - drm/i915/display: switch to display detected steppings
    - drm/i915: remove display stepping handling
    - drm/xe: remove display stepping handling
    - drm/xe: Removed unused xe_ggtt_printk
    - drm/xe: Introduce GGTT documentation
    - drm/xe: Remove unnecessary drm_mm.h includes
    - drm/{i915, xe}: Avoid direct inspection of dpt_vma from outside dpt
    - drm/xe: Encapsulate drm_mm_node inside xe_ggtt_node
    - drm/xe: Rename xe_ggtt_node related functions
    - drm/xe: Limit drm_mm_node_allocated access to xe_ggtt_node
    - drm/xe: Introduce xe_ggtt_largest_hole
    - drm/xe: Introduce xe_ggtt_print_holes
    - drm/xe: Refactor xe_ggtt balloon functions to make the node clear
    - drm/xe: Make xe_ggtt_node struct independent
    - drm/xe: Fix missing runtime outer protection for ggtt_remove_node
    - drm/xe: Move ggtt_fini to devm managed
    - drm/xe: Set firmware state to loadable before registering guc_fini_hw
    - drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
    - drm/xe: Move hw_engine_fini to devm managed
    - drm/xe: Update xe_sa to use xe_managed_bo_create_pin_map
    - drm/xe: Suspend/resume user access only during system s/r
    - drm/xe: Handle polling only for system s/r in xe_display_pm_suspend/resume()
    - drm/xe/display: handle HPD polling in display runtime suspend/resume
    - drm/xe: Fix total initialization in xe_ggtt_print_holes()
  * Missing device ID for amd_atl for AMD platforms Kraken and Strix-Halo
    (LP: #2077922)
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h
  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] add linux-bpf-dev package
    - [Packaging] do not attempt to generate BTF header on armhf
  * Fix ethernet performance on JSL and EHL (LP: #2077858)
    - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake
  * Regression: unable to reach low idle states on Tiger Lake (LP: #2072679)
    - SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of
    - SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain
  * Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux
    6.8 (LP: #2062951)
    - SAUCE: iommu/intel: disable DMAR for SKL integrated gfx
  * Make linux-tools-common Provide linux-cpupower (LP: #1960841)
    - [Packaging] Add linux-cpupower to linux-tools-common Provides
  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0: fix build error with !CONFIG_SECURITY
    - [Config] updateconfigs following v6.11-rc6 rebase
    - SAUCE: apparmor4.0.0: fix build after rebase to v6.11-rc6
    - [Packaging] perf: reenable libtraceevent

  [ Ubuntu: 6.11.0-5.5 ]

  * oracular/linux: 6.11.0-5.5 -proposed tracker (LP: #2077454)
  * GDS force mitigation re-enabled in 6.10 (and 6.11) causing crashes
    (LP: #2077145)
    - [Config] Force disable CONFIG_MITIGATION_GDS_FORCE again
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc5 rebase

  [ Ubuntu: 6.11.0-4.4 ]

  * oracular/linux: 6.11.0-4.4 -proposed tracker (LP: #2077394)
  * Packaging resync (LP: #1786013)
    - [Packaging] update variants
  * Miscellaneous Ubuntu changes
    - [Config] Disable CONFIG_DRM_I915_REPLAY_GPU_HANGS_API
    - [Packaging] carry ELF_PACKAGE_METADATA into relinking
    - [Packaging] Rename to linux

  [ Ubuntu: 6.11.0-3.3 ]

  * dummy entry

  [ Ubuntu: 6.11.0-3.3 ]

  * oracular/linux-unstable: 6.11.0-3.3 -proposed tracker (LP: #2077292)
  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)
  * Disable PCI_DYNAMIC_OF_NODES in Ubuntu (LP: #2074376)
    - [Config] Disable PCI_DYNAMIC_OF_NODES
  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc3 rebase

  [ Ubuntu: 6.11.0-2.2 ]

  * oracular/linux-unstable: 6.11.0-2.2 -proposed tracker (LP: #2076564)
  * please help enable more EROFS compression algorithms (LP: #2074049)
    - [Config] enable LZMA and ZSTD file compressions in EROFS
  * Enable CONFIG_EXFAT_FS in s390x too (LP: #2076428)
    - [Config] Enable EXFAT_FS on s390x too
  * Miscellaneous Ubuntu changes
    - [Packaging] Disable tools/perf on armhf (FTBFS)
    - [Config] toolchain version update
  * Miscellaneous Ubuntu changes
    - UBUNTU: Rebase on v6.11-rc3

  [ Ubuntu: 6.11.0-1.1 ]

  * oracular/linux-unstable: 6.11.0-1.1 -proposed tracker (LP: #2076116)
  * Miscellaneous Ubuntu changes
    - [packaging] move to v6.11 and rename to linux-unstable
    - [Config] updateconfigs following v6.11-rc2 rebase
    - SAUCE: hwmon: Fix aaeon driver for 6.11.
    - debian.master/dkms-versions: temporarily remove all dkms

 -- Stefan Bader <stefan.bader@canonical.com>  Wed, 16 Oct 2024 11:02:14 +0200

linux-hwe-6.11 (6.11.0-0.0~24.04.1) noble; urgency=medium

  * Initial packaging for noble:linux-hwe-6.11

 -- Stefan Bader <stefan.bader@canonical.com>  Thu, 10 Oct 2024 18:28:17 +0200

linux (6.11.0-7.7) oracular; urgency=medium

  * oracular/linux: 6.11.0-7.7 -proposed tracker (LP: #2079949)

  * update apparmor and LSM stacking patch set (LP: #2028253)
    - SAUCE: apparmor4.0.0 [1/99]: LSM: Infrastructure management of the sock
      security
    - SAUCE: apparmor4.0.0 [2/99]: LSM: Add the lsmblob data structure.
    - SAUCE: apparmor4.0.0 [3/99]: LSM: Use lsmblob in security_audit_rule_match
    - SAUCE: apparmor4.0.0 [4/99]: LSM: Call only one hook for audit rules
    - SAUCE: apparmor4.0.0 [5/99]: LSM: Add lsmblob_to_secctx hook
    - SAUCE: apparmor4.0.0 [6/99]: Audit: maintain an lsmblob in audit_context
    - SAUCE: apparmor4.0.0 [7/99]: LSM: Use lsmblob in security_ipc_getsecid
    - SAUCE: apparmor4.0.0 [8/99]: Audit: Update shutdown LSM data
    - SAUCE: apparmor4.0.0 [9/99]: LSM: Use lsmblob in security_current_getsecid
    - SAUCE: apparmor4.0.0 [10/99]: LSM: Use lsmblob in security_inode_getsecid
    - SAUCE: apparmor4.0.0 [11/99]: Audit: use an lsmblob in audit_names
    - SAUCE: apparmor4.0.0 [12/99]: LSM: Create new security_cred_getlsmblob LSM
      hook
    - SAUCE: apparmor4.0.0 [13/99]: Audit: Change context data from secid to
      lsmblob
    - SAUCE: apparmor4.0.0 [14/99]: Netlabel: Use lsmblob for audit data
    - SAUCE: apparmor4.0.0 [15/99]: LSM: Ensure the correct LSM context releaser
    - SAUCE: apparmor4.0.0 [16/99]: LSM: Use lsmcontext in
      security_secid_to_secctx
    - SAUCE: apparmor4.0.0 [17/99]: LSM: Use lsmcontext in
      security_lsmblob_to_secctx
    - SAUCE: apparmor4.0.0 [18/99]: LSM: Use lsmcontext in
      security_inode_getsecctx
    - SAUCE: apparmor4.0.0 [19/99]: LSM: lsmcontext in
      security_dentry_init_security
    - SAUCE: apparmor4.0.0 [20/99]: LSM: security_lsmblob_to_secctx module
      selection
    - SAUCE: apparmor4.0.0 [21/99]: Audit: Create audit_stamp structure
    - SAUCE: apparmor4.0.0 [22/99]: Audit: Allow multiple records in an
      audit_buffer
    - SAUCE: apparmor4.0.0 [23/99]: Audit: Add record for multiple task security
      contexts
    - SAUCE: apparmor4.0.0 [24/99]: audit: multiple subject lsm values for
      netlabel
    - SAUCE: apparmor4.0.0 [25/99]: Audit: Add record for multiple object contexts
    - SAUCE: apparmor4.0.0 [26/99]: LSM: Remove unused lsmcontext_init()
    - SAUCE: apparmor4.0.0 [27/99]: LSM: Improve logic in security_getprocattr
    - SAUCE: apparmor4.0.0 [28/99]: LSM: secctx provider check on release
    - SAUCE: apparmor4.0.0 [29/99]: LSM: Single calls in socket_getpeersec hooks
    - SAUCE: apparmor4.0.0 [30/99]: LSM: Exclusive secmark usage
    - SAUCE: apparmor4.0.0 [31/99]: LSM: Identify which LSM handles the context
      string
    - SAUCE: apparmor4.0.0 [32/99]: AppArmor: Remove the exclusive flag
    - SAUCE: apparmor4.0.0 [33/99]: LSM: Add mount opts blob size tracking
    - SAUCE: apparmor4.0.0 [34/99]: LSM: allocate mnt_opts blobs instead of module
      specific data
    - SAUCE: apparmor4.0.0 [35/99]: LSM: Infrastructure management of the key
      security blob
    - SAUCE: apparmor4.0.0 [36/99]: LSM: Infrastructure management of the mnt_opts
      security blob
    - SAUCE: apparmor4.0.0 [37/99]: LSM: Remove lsmblob scaffolding
    - SAUCE: apparmor4.0.0 [38/99]: LSM: Allow reservation of netlabel
    - SAUCE: apparmor4.0.0 [39/99]: LSM: restrict security_cred_getsecid() to a
      single LSM
    - SAUCE: apparmor4.0.0 [40/99]: Smack: Remove LSM_FLAG_EXCLUSIVE
    - SAUCE: apparmor4.0.0 [41/99]: LSM stacking v39: UBUNTU: SAUCE: apparmor4.0.0
      [41/99]: add/use fns to print hash string hex value
    - SAUCE: apparmor4.0.0 [42/99]: patch to provide compatibility with v2.x net
      rules
    - SAUCE: apparmor4.0.0 [43/99]: add unpriviled user ns mediation
    - SAUCE: apparmor4.0.0 [44/99]: Add sysctls for additional controls of unpriv
      userns restrictions
    - SAUCE: apparmor4.0.0 [45/99]: af_unix mediation
    - SAUCE: apparmor4.0.0 [46/99]: Add fine grained mediation of posix mqueues
    - SAUCE: apparmor4.0.0 [47/99] fixup inode_set_attr
    - SAUCE: apparmor4.0.0 [48/99]: setup slab cache for audit data
    - SAUCE: apparmor4.0.0 [49/99]: Improve debug print infrastructure
    - SAUCE: apparmor4.0.0 [50/99]: add the ability for profiles to have a
      learning cache
    - SAUCE: apparmor4.0.0 [51/99]: enable userspace upcall for mediation
    - SAUCE: apparmor4.0.0 [52/99]: prompt - lock down prompt interface
    - SAUCE: apparmor4.0.0 [53/99]: prompt - allow controlling of caching of a
      prompt response
    - SAUCE: apparmor4.0.0 [54/99]: prompt - add refcount to audit_node in prep or
      reuse and delete
    - SAUCE: apparmor4.0.0 [55/99]: prompt - refactor to moving caching to
      uresponse
    - SAUCE: apparmor4.0.0 [56/99]: prompt - Improve debug statements
    - SAUCE: apparmor4.0.0 [57/99]: prompt - fix caching
    - SAUCE: apparmor4.0.0 [58/99]: prompt - rework build to use append fn, to
      simplify adding strings
    - SAUCE: apparmor4.0.0 [59/99]: prompt - refcount notifications
    - SAUCE: apparmor4.0.0 [60/99]: prompt - add the ability to reply with a
      profile name
    - SAUCE: apparmor4.0.0 [61/99]: prompt - fix notification cache when updating
    - SAUCE: apparmor4.0.0 [62/99]: prompt - add tailglob on name for cache
      support
    - SAUCE: apparmor4.0.0 [63/99]: prompt - allow profiles to set prompts as
      interruptible
    - SAUCE: apparmor4.0.0 [64/93] v6.8 prompt:fixup interruptible
    - SAUCE: apparmor4.0.0 [65/99]: prompt - add support for advanced filtering of
      notifications
    - SAUCE: apparmor4.0.0 [66/99]: userns - add the ability to reference a global
      variable for a feature value
    - SAUCE: apparmor4.0.0 [67/99]: userns - make it so special unconfined
      profiles can mediate user namespaces
    - SAUCE: apparmor4.0.0 [68/99]: add io_uring mediation
    - SAUCE: apparmor4.0.0 [69/99]: apparmor: fix oops when racing to retrieve
      notification
    - SAUCE: apparmor4.0.0 [70/99]: apparmor: fix notification header size
    - SAUCE: apparmor4.0.0 [71/99]: apparmor: fix request field from a prompt
      reply that denies all access
    - SAUCE: apparmor4.0.0 [72/99]: apparmor: open userns related sysctl so lxc
      can check if restriction are in place
    - SAUCE: apparmor4.0.0 [73/99]: apparmor: cleanup attachment perm lookup to
      use lookup_perms()
    - SAUCE: apparmor4.0.0 [74/99]: apparmor: remove redundant unconfined check.
    - SAUCE: apparmor4.0.0 [75/99]: apparmor: switch signal mediation to using
      RULE_MEDIATES
    - SAUCE: apparmor4.0.0 [76/99]: apparmor: ensure labels with more than one
      entry have correct flags
    - SAUCE: apparmor4.0.0 [77/99]: apparmor: remove explicit restriction that
      unconfined cannot use change_hat
    - SAUCE: apparmor4.0.0 [78/99]: apparmor: cleanup: refactor file_perm() to
      provide semantics of some checks
    - SAUCE: apparmor4.0.0 [79/99]: apparmor: carry mediation check on label
    - SAUCE: apparmor4.0.0 [80/99]: apparmor: convert easy uses of unconfined() to
      label_mediates()
    - SAUCE: apparmor4.0.0 [81/99]: apparmor: add additional flags to extended
      permission.
    - SAUCE: apparmor4.0.0 [82/99]: apparmor: add support for profiles to define
      the kill signal
    - SAUCE: apparmor4.0.0 [83/99]: apparmor: fix x_table_lookup when stacking is
      not the first entry
    - SAUCE: apparmor4.0.0 [84/99]: apparmor: allow profile to be transitioned
      when a user ns is created
    - SAUCE: apparmor4.0.0 [85/99]: apparmor: add ability to mediate caps with
      policy state machine
    - SAUCE: apparmor4.0.0 [86/99]: fixup notify
    - SAUCE: apparmor4.0.0 [87/99]: apparmor: add fine grained ipv4/ipv6 mediation
    - SAUCE: apparmor4.0.0 [88/99]: apparmor: disable tailglob responses for now
    - SAUCE: apparmor4.0.0 [89/99]: apparmor: Fix notify build warnings
    - SAUCE: apparmor4.0.0 [90/99]: fix reserved mem for when we save ipv6
      addresses
    - SAUCE: apparmor4.0.0 [91/99]: fix address mapping for recvfrom
    - SAUCE: apparmor4.0.0 [92/99]: apparmor: add support for 2^24 states to the
      dfa state machine.
    - SAUCE: apparmor4.0.0 [93/99]: apparmor: advertise to userspace support of
      user upcall for file rules.
    - SAUCE: apparmor4.0.0 [94/99]: apparmor: allocate xmatch for nullpdf inside
      aa_alloc_null
    - SAUCE: apparmor4.0.0 [95/99]: apparmor: properly handle cx/px lookup failure
      for complain
    - SAUCE: apparmor4.0.0 [96/99]: apparmor: fix prompt failing during large down
      loads
    - SAUCE: apparmor4.0.0 [97/99]: apparmor: fix allow field in notification
    - SAUCE: apparmor4.0.0 [98/99]: fix build error with !CONFIG_SECURITY
    - SAUCE: apparmor4.0.0 [99/99]: fix build error with in nfs4xdr

  * Intel Lunar Lake / Battlemage enablement (LP: #2076209)
    - drm/xe/lnl: Drop force_probe requirement
    - drm/xe: Support 'nomodeset' kernel command-line option
    - drm/i915/display: Plane capability for 64k phys alignment
    - drm/xe: Align all VRAM scanout buffers to 64k physical pages when needed.
    - drm/xe: Use separate rpm lockdep map for non-d3cold-capable devices
    - drm/xe: Fix NPD in ggtt_node_remove()
    - drm/xe/bmg: Drop force_probe requirement
    - drm/xe/gsc: Fix FW status if the firmware is already loaded
    - drm/xe/gsc: Track the platform in the compatibility version
    - drm/xe/gsc: Wedge the device if the GSCCS reset fails
    - drm/i915/bios: Update new entries in VBT BDB block definitions
    - drm/xe/hwmon: Treat hwmon as a per-device concept
    - drm/xe: s/xe_tile_migrate_engine/xe_tile_migrate_exec_queue
    - drm/xe: Add xe_vm_pgtable_update_op to xe_vma_ops
    - drm/xe: Add xe_exec_queue_last_fence_test_dep
    - drm/xe: Add timeout to preempt fences
    - drm/xe: Convert multiple bind ops into single job
    - drm/xe: Update VM trace events
    - drm/xe: Update PT layer with better error handling
    - drm/xe: Add VM bind IOCTL error injection
    - dma-buf: Split out dma fence array create into alloc and arm functions
    - drm/xe: Invalidate media_gt TLBs in PT code
    - drm/i915/display: Fix BMG CCS modifiers
    - drm/xe: Use xe_pm_runtime_get in xe_bo_move() if reclaim-safe.
    - drm/xe: Remove extra dma_fence_put on xe_sync_entry_add_deps failure

  * [24.10 FEAT] [KRN1911] Vertical CPU Polarization Support Stage 2
    (LP: #2072760)
    - s390/wti: Introduce infrastructure for warning track interrupt
    - s390/wti: Prepare graceful CPU pre-emption on wti reception
    - s390/wti: Add wti accounting for missed grace periods
    - s390/wti: Add debugfs file to display missed grace periods per cpu
    - s390/topology: Add sysctl handler for polarization
    - s390/topology: Add config option to switch to vertical during boot
    - s390/smp: Add cpu capacities
    - s390/hiperdispatch: Introduce hiperdispatch
    - s390/hiperdispatch: Add steal time averaging
    - s390/hiperdispatch: Add trace events
    - s390/hiperdispatch: Add hiperdispatch sysctl interface
    - s390/hiperdispatch: Add hiperdispatch debug attributes
    - s390/hiperdispatch: Add hiperdispatch debug counters
    - [Config] Initial set of new options HIPERDISPATCH_ON and
      SCHED_TOPOLOGY_VERTICAL to yes for s390x

  * Remove non-LPAE kernel flavor (LP: #2025265)
    - [Packaging] Drop control.d/vars.generic-lpae

  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] Don't call dh_all on linux-bpf-dev unless on master kernel

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc7 rebase

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Mon, 09 Sep 2024 13:38:09 +0300

linux (6.11.0-6.6) oracular; urgency=medium

  * oracular/linux: 6.11.0-6.6 -proposed tracker (LP: #2077949)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)
    - [Packaging] update Ubuntu.md

  * Pull in latest X13s commits (LP: #2078929)
    - arm64: dts: qcom: sc8280xp-x13s: disable PCIe perst pull downs
    - arm64: dts: qcom: sc8280xp-x13s: clean up PCIe2a pinctrl node
    - media: qcom: camss: Remove use_count guard in stop_streaming
    - media: qcom: camss: Fix ordering of pm_runtime_enable
    - arm64: dts: qcom: sc8280xp-x13s: Enable RGB sensor
    - wifi: ath11k: fix NULL pointer dereference in ath11k_mac_get_eirp_power()
    - Revert "wifi: ath11k: restore country code during resume"
    - Revert "wifi: ath11k: support hibernation"
    - SAUCE: media: ov5675: Fix power on/off delay timings
    - SAUCE: media: dt-bindings: Document SC8280XP/SM8350 Venus
    - SAUCE: media: venus: core: Remove trailing commas from of match entries
    - SAUCE: media: venus: hfi_venus: Support only updating certain bits with
      presets
    - SAUCE: media: platform: venus: Add optional LLCC path
    - SAUCE: media: venus: core: Add SM8350 resource struct
    - SAUCE: media: venus: core: Add SC8280XP resource struct
    - SAUCE: arm64: dts: qcom: sc8280xp: Add Venus
    - SAUCE: arm64: dts: qcom: sc8280xp-x13s: Enable Venus
    - SAUCE: phy: qcom-qmp-combo: drop regulator loads
    - SAUCE: phy: qcom-edp: drop regulator loads
    - SAUCE: i2c: qcom-cci: Stop complaining about DT set clock rate
    - SAUCE: clk: qcom: gcc-sc8280xp: don't use parking clk_ops for QUPs

  * Intel Lunar Lake / Battlemage enablement (LP: #2076209)
    - drm/i915: Skip programming FIA link enable bits for MTL+
    - drm/i915: disable fbc due to Wa_16023588340
    - drm/xe/xe2lpm: Extend Wa_16021639441
    - drm/i915/display: Cache adpative sync caps to use it later
    - drm/xe: Generate oob before compiling anything
    - drm/i915/display: WA for Re-initialize dispcnlunitt1 xosc clock
    - drm/xe/gsc: add Battlemage support
    - drm/xe/migrate: Handle clear ccs logic for xe2 dgfx
    - drm/xe/migrate: Add helper function to program identity map
    - drm/xe/xe2: Introduce identity map for compressed pat for vram
    - drm/xe/xe_migrate: Handle migration logic for xe2+ dgfx
    - drm/xe/fbdev: Limit the usage of stolen for LNL+
    - drm/xe/uapi: Expose SIMD16 EU mask in topology query
    - drm/xe: Fix warning on unreachable statement
    - drm/i915/hdcp: Add encoder check in intel_hdcp_get_capability
    - drm/i915/hdcp: Add encoder check in hdcp2_get_capability
    - drm/xe/hdcp: Check GSC structure validity
    - drm/i915/dp: Clear VSC SDP during post ddi disable routine
    - drm/xe/huc: Define HuC binary for LNL
    - drm/xe/gsc: Define GSC binary for LNL
    - drm/xe/huc: Define HuC binary for BMG
    - drm/xe/xe2hpg: Introduce performance tuning changes for Xe2_HPG
    - drm/i915/display/dp: Compute AS SDP when vrr is also enabled
    - drm/xe: Move and export xe_hw_engine lookup.
    - drm/xe/xe2: Enable Priority Mem Read
    - drm/xe/xe2: Introduce performance changes
    - drm/xe/xe2: Add performance turning changes
    - drm/xe/guc: Bump minimum required GuC version to v70.29.2
    - drm/xe/guc: Define GuC version v70.29.2 for BMG
    - drm/xe/guc: Enable w/a 14022293748 and 22019794406
    - drm/xe: Move enable host l2 VRAM post MCR init
    - drm/xe: Write all slices if its mcr register
    - drm/xe: Define STATELESS_COMPRESSION_CTRL as mcr register
    - drm/i915/pps: Disable DPLS_GATING around pps sequence
    - drm/xe: fix engine_class bounds check again
    - drm/xe/uc: Use managed bo for HuC and GSC objects
    - drm/xe: Use reserved copy engine for user binds on faulting devices
    - drm/xe/display: Match i915 driver suspend/resume sequences better
    - drm/i915: move rawclk from runtime to display runtime info
    - drm/xe/display: drop unused rawclk_freq and RUNTIME_INFO()
    - drm/i915/psr: Prevent Panel Replay if CRC calculation is enabled
    - drm/i915/display: Don't enable decompression on Xe2 with Tile4
    - drm/fourcc: define Intel Xe2 related tile4 ccs modifiers
    - drm/i915/display: allow creation of Xe2 ccs framebuffers
    - drm/xe/display: fix compat IS_DISPLAY_STEP() range end
    - drm/xe/display: remove intel_display_step_name() to simplify
    - drm/xe/display: remove the unused compat HAS_GMD_ID()
    - drm/xe/step: define more steppings E-J
    - drm/i915/display: rename IS_DISPLAY_IP_RANGE() to IS_DISPLAY_VER_FULL()
    - drm/i915/display: rename IS_DISPLAY_IP_STEP() to IS_DISPLAY_VER_STEP()
    - drm/i915/display: identify display steppings in display probe
    - drm/i915/display: switch to display detected steppings
    - drm/i915: remove display stepping handling
    - drm/xe: remove display stepping handling
    - drm/xe: Removed unused xe_ggtt_printk
    - drm/xe: Introduce GGTT documentation
    - drm/xe: Remove unnecessary drm_mm.h includes
    - drm/{i915, xe}: Avoid direct inspection of dpt_vma from outside dpt
    - drm/xe: Encapsulate drm_mm_node inside xe_ggtt_node
    - drm/xe: Rename xe_ggtt_node related functions
    - drm/xe: Limit drm_mm_node_allocated access to xe_ggtt_node
    - drm/xe: Introduce xe_ggtt_largest_hole
    - drm/xe: Introduce xe_ggtt_print_holes
    - drm/xe: Refactor xe_ggtt balloon functions to make the node clear
    - drm/xe: Make xe_ggtt_node struct independent
    - drm/xe: Fix missing runtime outer protection for ggtt_remove_node
    - drm/xe: Move ggtt_fini to devm managed
    - drm/xe: Set firmware state to loadable before registering guc_fini_hw
    - drm/xe: Drop warn on xe_guc_pc_gucrc_disable in guc pc fini
    - drm/xe: Move hw_engine_fini to devm managed
    - drm/xe: Update xe_sa to use xe_managed_bo_create_pin_map
    - drm/xe: Suspend/resume user access only during system s/r
    - drm/xe: Handle polling only for system s/r in xe_display_pm_suspend/resume()
    - drm/xe/display: handle HPD polling in display runtime suspend/resume
    - drm/xe: Fix total initialization in xe_ggtt_print_holes()

  * Missing device ID for amd_atl for AMD platforms Kraken and Strix-Halo
    (LP: #2077922)
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
    - x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h-70h

  * generate and ship vmlinux.h to allow packages to build BPF CO-RE
    (LP: #2050083)
    - [Packaging] add linux-bpf-dev package
    - [Packaging] do not attempt to generate BTF header on armhf

  * Fix ethernet performance on JSL and EHL (LP: #2077858)
    - intel_idle: Disable promotion to C1E on Jasper Lake and Elkhart Lake

  * Regression: unable to reach low idle states on Tiger Lake (LP: #2072679)
    - SAUCE: PCI: ASPM: Allow OS to configure ASPM where BIOS is incapable of
    - SAUCE: PCI: vmd: Let OS control ASPM for devices under VMD domain

  * Random flickering with Intel i915 (Gen9 GPUs in 6th-8th gen CPUs) on Linux
    6.8 (LP: #2062951)
    - SAUCE: iommu/intel: disable DMAR for SKL integrated gfx

  * Make linux-tools-common Provide linux-cpupower (LP: #1960841)
    - [Packaging] Add linux-cpupower to linux-tools-common Provides

  * Miscellaneous Ubuntu changes
    - SAUCE: apparmor4.0.0: fix build error with !CONFIG_SECURITY
    - [Config] updateconfigs following v6.11-rc6 rebase
    - SAUCE: apparmor4.0.0: fix build after rebase to v6.11-rc6
    - [Packaging] perf: reenable libtraceevent

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Wed, 04 Sep 2024 17:12:57 +0300

linux (6.11.0-5.5) oracular; urgency=medium

  * oracular/linux: 6.11.0-5.5 -proposed tracker (LP: #2077454)

  * GDS force mitigation re-enabled in 6.10 (and 6.11) causing crashes
    (LP: #2077145)
    - [Config] Force disable CONFIG_MITIGATION_GDS_FORCE again

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc5 rebase

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Mon, 26 Aug 2024 17:11:19 +0300

linux (6.11.0-4.4) oracular; urgency=medium

  * oracular/linux: 6.11.0-4.4 -proposed tracker (LP: #2077394)

  * Packaging resync (LP: #1786013)
    - [Packaging] update variants

  * Miscellaneous Ubuntu changes
    - [Config] Disable CONFIG_DRM_I915_REPLAY_GPU_HANGS_API
    - [Packaging] carry ELF_PACKAGE_METADATA into relinking
    - [Packaging] Rename to linux

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Tue, 20 Aug 2024 12:07:08 +0300

linux (6.11.0-3.3) oracular; urgency=medium

  * dummy entry

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Tue, 20 Aug 2024 10:30:29 +0300

linux-unstable (6.11.0-3.3) oracular; urgency=medium

  * oracular/linux-unstable: 6.11.0-3.3 -proposed tracker (LP: #2077292)

  * Packaging resync (LP: #1786013)
    - [Packaging] debian.master/dkms-versions -- update from kernel-versions
      (main/d2024.08.12)

  * Disable PCI_DYNAMIC_OF_NODES in Ubuntu (LP: #2074376)
    - [Config] Disable PCI_DYNAMIC_OF_NODES

  * Miscellaneous Ubuntu changes
    - [Config] updateconfigs following v6.11-rc3 rebase

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Mon, 19 Aug 2024 11:49:32 +0300

linux-unstable (6.11.0-2.2) oracular; urgency=medium

  * oracular/linux-unstable: 6.11.0-2.2 -proposed tracker (LP: #2076564)

  * please help enable more EROFS compression algorithms (LP: #2074049)
    - [Config] enable LZMA and ZSTD file compressions in EROFS

  * Enable CONFIG_EXFAT_FS in s390x too (LP: #2076428)
    - [Config] Enable EXFAT_FS on s390x too

  * Miscellaneous Ubuntu changes
    - [Packaging] Disable tools/perf on armhf (FTBFS)
    - [Config] toolchain version update

  * Miscellaneous Ubuntu changes
    - UBUNTU: Rebase on v6.11-rc3

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Mon, 12 Aug 2024 14:07:05 +0300

linux-unstable (6.11.0-1.1) oracular; urgency=medium

  * oracular/linux-unstable: 6.11.0-1.1 -proposed tracker (LP: #2076116)

  * Miscellaneous Ubuntu changes
    - [packaging] move to v6.11 and rename to linux-unstable
    - [Config] updateconfigs following v6.11-rc2 rebase
    - SAUCE: hwmon: Fix aaeon driver for 6.11.
    - debian.master/dkms-versions: temporarily remove all dkms

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Mon, 05 Aug 2024 20:10:11 +0300

linux-unstable (6.11.0-0.0) oracular; urgency=medium

  * Dummy entry.

 -- Timo Aaltonen <timo.aaltonen@canonical.com>  Wed, 31 Jul 2024 16:41:50 +0300
